last executing test programs: 2m3.483423701s ago: executing program 3 (id=2121): ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) (async) ioctl$XFS_IOC_PATH_TO_HANDLE(0xffffffffffffffff, 0xc0385869, &(0x7f0000000180)={0xffffffffffffffff, &(0x7f0000000080)='\x00', 0x248000, &(0x7f00000000c0)={@_ha_fsid={[0x5, 0x7]}, {0x7, 0x3, 0x5, 0x5}}, 0xd, &(0x7f0000000100)={@_ha_fsid}, &(0x7f0000000140)=0xe6}) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000300)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', r0, r1, 0x0, 0x3}, 0x50) (async) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000002c0)={0x0, 0x0}, 0x8) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000480)=r3, 0x4) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1a, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1a, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r3, 0x4}, 0x94) (async) ioctl$EXT4_IOC_GROUP_EXTEND(r1, 0x40086607, &(0x7f0000000280)=0x7) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r1) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x18, 0xf, &(0x7f00000007c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0xba6}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x20}}, {{0x6, 0x0, 0x6, 0x9, 0x0, 0x1, 0xe7030000}, {0x16, 0x0, 0x0, 0x6}}, [], {{0x4, 0x1, 0x3, 0x2, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000000)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x2d, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2m3.384527561s ago: executing program 3 (id=2124): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0xa, 0xd, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000000000000000000000000000851000000100000095000000000000001800000020646c2500000000002020207b1af8ff00000000bd21ffff000000bf07010000f8ffffffb502020008040000b703000000000000850000008900000095"], &(0x7f0000000080)='syzkaller\x00', 0xa, 0x0, 0x0, 0x40f00, 0x45}, 0x94) 2m3.335604223s ago: executing program 3 (id=2125): syz_emit_ethernet(0x7e, &(0x7f00000001c0)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x3, 0x2, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, @broadcast=0xac14140a, @empty, {[@timestamp_prespec={0x44, 0x24, 0x6a, 0x3, 0xf, [{@multicast1, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x7fff}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x2}, {@dev={0xac, 0x14, 0x14, 0x18}, 0x6}]}, @timestamp_addr={0x44, 0x1c, 0xf, 0x1, 0x5, [{@private=0xa010101, 0x6}, {@broadcast, 0x1ff}, {@multicast2}]}]}}}}}}}, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00'}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="1400000010000100000000000000000000000a0020000000000a01000000000000000000050000000900010073797a300000000064000000120a01000000000000000000050000000900010073797a30000000000900020073797a3100000000080003000000000630000480080001000000123414000280080001007f000001080002007f000002100009800c"], 0xb0}}, 0x0) sendmsg$inet(r1, &(0x7f0000000400)={&(0x7f0000000040)={0x2, 0x4e22, @multicast2}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000080)="c282f751ea5f0161ec3f0b58ae83644408f1491412692aaaff49227b16a460f28358e039f4", 0x25}, {&(0x7f00000000c0)="b25c7e394c9d428cb4eb0022080a9a4c1ea0528246c42b669ba59c54b4e75c0a007cd7902e00270a082059942a0ccb22ecbc3f80efa0d507683d424945976cd947d0250a153aa19b1493e9c8dfed6a49d3c2e008c17e2c1de9cfbda7f957da283eb05dc39eb9a1ea9c75aab8552c8498c56e62abac554cbfa88238bc999fecec4cde58c7a087ff9fe006710564562e077be1b448c1856a3c42737d", 0x9b}, {&(0x7f0000000180)="2fcdb4f1e4796d05c91f0d4ed38ff35b2a2853c82f5a32ea1f4149f0124dc0", 0x1f}, {&(0x7f0000000240)="d408f3afadb643d37801831169f663c774c149185b467a1abf0c6e8b4a4bcd786b09f1eb7064396d02fcb6fbb25e0c7c0016e07198ea72323e9346ba184ae21426a3f44305095146ee46b0e0310000692f1cadd280697074fe5b2efa68f4b0d2b805f508d3742af32cdd28613daad0eacc31", 0x72}, {&(0x7f00000002c0)="92213be4a7650ddbc67004b6b28edae3edbc4d97286ae7e642b5d78c17b18ccf383f9a39326cb428587f9e34c10add3177e9ea5d6cf10e47cca4368cced5e05100110fac9736c664537d4433c0439badac0f1e7c32c0a9cd25f3711b44bf1357b4bf8e26b7b5fa446801b649c814986e14e1bfbb54bda2ed5aa22ce89b02f7085138121bdd3d995dc9f7", 0x8a}], 0x5}, 0x80) 2m3.176261771s ago: executing program 3 (id=2127): unshare(0x400) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="05000000050000000100000004"], 0x48) (async) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) recvmsg(r1, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x40000120) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="9feb0100180000000000000040000000400000000200000000000000000000090400000000000000000000010500000008000000000000000000000300000000020000000200000012000000000000000000000b"], 0x0, 0x5a}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x16, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000001940)={&(0x7f0000000340)="c7aaf098329d55d8b41a99c61c322f9db8ec10934fced86ef63579c203679c18a43626e3a0dd57eb81d7ccee1f7f7c6af1b0afc0d2785e590ff209debf97bb706989bd53b2a03d8d0cc8de8d8a53d7810320e60e3d72fab0008fff353dd3e38a74165f85cbd9cc0fab39cc054c91e649c33bdab254e761c30edf787c78c804a04047fb4de3cfe2dcf12464e6bd5a54b1f23bcb9c95a63885adcb55667dc51cebf387d39102b3d2cece06f2fb47f47795427f6c029c26fe267f1dc31b66bf7fd68ce14390f1a9c9a9f87250684fc82025530762280373b539813c1d6f002e21554bd0aa6eb2", &(0x7f00000005c0)=""/214, &(0x7f0000000880)="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", &(0x7f0000001880)="3a0e12e5fc71461e064392a203d5edeb6d06823559768a9cc49668125499ff41b508a6a744862a678dc9cfbd827304724c73828a22b381059070a9ad46cbdf749006fa14dba7c0b41a03749f65e2f25a69a22a1fbaaeecd3ab6a469ba089efe4bf1b5ff9a309d1eb9da724d29a6f1d9ff33e470c42bdf18bff315943c5cbee9a6ac4affa0e7cbfae3dae75f2d887ae1e5e3f371941423cedb938ed5a9a48eea1", 0x3, r0, 0x4}, 0x38) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0xe, &(0x7f0000000000)=ANY=[@ANYBLOB="0082010105000000852000000400000000000000000300000000000000000000184100000004000000000000000000009500000000000000950000000000000014583000ffffffff18160000", @ANYRES32=r0, @ANYBLOB="000000000000000045abffff00000000183800000400"/32], &(0x7f0000000580)='syzkaller\x00', 0xa, 0x5, &(0x7f0000000140)=""/5, 0x40f00, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x7, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[r0, r0, r0, r0, 0xffffffffffffffff, r0], 0x0, 0x10, 0xfffffffe}, 0xc3) 2m2.90909164s ago: executing program 3 (id=2134): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0xe22}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r2, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f00000002c0)=0x7, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e20, 0x3, @local, 0x1}, 0x1c) bind$inet6(r3, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r3, 0x0) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b45602067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03adcac4b74ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) 2m2.881388039s ago: executing program 3 (id=2136): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x15, 0x5, 0x0) getsockopt(r1, 0x200000000114, 0x271e, 0x0, &(0x7f0000000000)) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x18, 0x1418, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x34, r4, 0x6a9354ab0d020bb7, 0x0, 0x0, {0xf}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x0) sendmsg$DEVLINK_CMD_PORT_SPLIT(r1, &(0x7f0000000440)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="4f2c247c89d86948adc7731c10316077b7618fbeba7300fb17bcfd250c708849ca593b01ebd939e9d10ece4dd80739f2f9e36cc1544f9df8", @ANYRES16=r4, @ANYBLOB="010029bd7000ffdbdf2509000000080001007063690011000200303030303a30303a31302e3000000000080003000300000008000900020000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000300030000000800090005000000"], 0x70}, 0x1, 0x0, 0x0, 0x4}, 0x4000010) r5 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r5, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r6, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=ANY=[@ANYBLOB="3c000000100003042abd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="46060900040c01001c00128009000100626f6e64000000000c00028085011bbda43b9ba71844d1c924f3f208000b0027bccaddf312aaced8eb3aa65da95d5e47fecfa54de7187de9a2b5a43e4ca71c4fbf9d5824a6d5ba97e667fb419635675d455096d5f5bb58ad52a3b697c1a6fe164444148769c50bcd552f1ab060810000000000000000000000ca4954a8288e305cd6f9d81f6a28733d9881c64d0b535e17fd6d22326ff395f6a877ae705990d712bfb362c195e63dde52e495a91e5e8f535a35c76fa8904bfc153b27ebe7c78afa4a771e92fe35cfc573615c463700d5305e748565c20c", @ANYRES32=r7, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x40e95}, 0x20048040) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000000)={0x20, 0x11, 0x1, 0x0, 0x25dfdbff, "", [@nested={0x10, 0x4, 0x0, 0x0, [@typed={0xb, 0x0, 0x0, 0x0, @binary="56ccabd869c203"}]}]}, 0x20}], 0x1, 0x0, 0x0, 0xc010}, 0x40080) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYRES32=r1, @ANYRES32=r6], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) r11 = socket(0x10, 0x803, 0x4) sendmsg$IPVS_CMD_SET_INFO(r11, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r11, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x63148, 0x3f00}, [@IFLA_MASTER={0x8, 0xa, r12}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20004081}, 0x40000) 1m47.825699855s ago: executing program 32 (id=2136): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x15, 0x5, 0x0) getsockopt(r1, 0x200000000114, 0x271e, 0x0, &(0x7f0000000000)) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x18, 0x1418, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x34, r4, 0x6a9354ab0d020bb7, 0x0, 0x0, {0xf}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x0) sendmsg$DEVLINK_CMD_PORT_SPLIT(r1, &(0x7f0000000440)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="4f2c247c89d86948adc7731c10316077b7618fbeba7300fb17bcfd250c708849ca593b01ebd939e9d10ece4dd80739f2f9e36cc1544f9df8", @ANYRES16=r4, @ANYBLOB="010029bd7000ffdbdf2509000000080001007063690011000200303030303a30303a31302e3000000000080003000300000008000900020000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000300030000000800090005000000"], 0x70}, 0x1, 0x0, 0x0, 0x4}, 0x4000010) r5 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r5, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r6, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=ANY=[@ANYBLOB="3c000000100003042abd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="46060900040c01001c00128009000100626f6e64000000000c00028085011bbda43b9ba71844d1c924f3f208000b0027bccaddf312aaced8eb3aa65da95d5e47fecfa54de7187de9a2b5a43e4ca71c4fbf9d5824a6d5ba97e667fb419635675d455096d5f5bb58ad52a3b697c1a6fe164444148769c50bcd552f1ab060810000000000000000000000ca4954a8288e305cd6f9d81f6a28733d9881c64d0b535e17fd6d22326ff395f6a877ae705990d712bfb362c195e63dde52e495a91e5e8f535a35c76fa8904bfc153b27ebe7c78afa4a771e92fe35cfc573615c463700d5305e748565c20c", @ANYRES32=r7, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x40e95}, 0x20048040) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000000)={0x20, 0x11, 0x1, 0x0, 0x25dfdbff, "", [@nested={0x10, 0x4, 0x0, 0x0, [@typed={0xb, 0x0, 0x0, 0x0, @binary="56ccabd869c203"}]}]}, 0x20}], 0x1, 0x0, 0x0, 0xc010}, 0x40080) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYRES32=r1, @ANYRES32=r6], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) r11 = socket(0x10, 0x803, 0x4) sendmsg$IPVS_CMD_SET_INFO(r11, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r11, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x63148, 0x3f00}, [@IFLA_MASTER={0x8, 0xa, r12}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20004081}, 0x40000) 22.26355905s ago: executing program 5 (id=3269): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000340)={0x0, 0x0, 0x3}, 0x8) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x2c, r3, 0x923, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_PEER_CONN_ID={0x8}]}, 0x2c}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r5, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@FOU_ATTR_AF={0x5, 0x2, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc004}, 0x2000000c) r6 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$WPAN_SECURITY(r6, 0x0, 0x1, &(0x7f0000000080), &(0x7f00000000c0)=0x4) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newtaction={0x60, 0x30, 0x200, 0x7ffffc, 0x2000000, {}, [{0x4c, 0x1, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x3, 0x10000, 0x5, 0x7}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x400c055}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)=@gettaction={0x14, 0x32, 0xe72c5f922f23cad9, 0x70bd2a, 0x25dfdbf7}, 0x14}, 0x1, 0x0, 0x0, 0x8080}, 0x10000084) r7 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000001c0)={0x0, 0x401, 0x8}, 0xc) read(r7, &(0x7f0000000340)=""/239, 0xef) socket$inet6_sctp(0xa, 0x1, 0x84) (async) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000340)={0x0, 0x0, 0x3}, 0x8) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), 0xffffffffffffffff) (async) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x2c, r3, 0x923, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_PEER_CONN_ID={0x8}]}, 0x2c}}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) (async) sendmsg$FOU_CMD_ADD(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r5, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@FOU_ATTR_AF={0x5, 0x2, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc004}, 0x2000000c) (async) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (async) getsockopt$WPAN_SECURITY(r6, 0x0, 0x1, &(0x7f0000000080), &(0x7f00000000c0)=0x4) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newtaction={0x60, 0x30, 0x200, 0x7ffffc, 0x2000000, {}, [{0x4c, 0x1, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x3, 0x10000, 0x5, 0x7}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x400c055}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)=@gettaction={0x14, 0x32, 0xe72c5f922f23cad9, 0x70bd2a, 0x25dfdbf7}, 0x14}, 0x1, 0x0, 0x0, 0x8080}, 0x10000084) (async) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000001c0)={0x0, 0x401, 0x8}, 0xc) (async) read(r7, &(0x7f0000000340)=""/239, 0xef) (async) 22.21090528s ago: executing program 5 (id=3273): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25GCALLUSERDATA(r0, 0x89e4, &(0x7f0000000000)={0x1b, "c6d52ea32dd1332c31368f58a7c5e696abe0028755f518bd501886b7134d55a0fa02dd00a00f2d5a0133fe44169c2268b84dede9019b00047fa8d61ed3dfe2a691cdec0f0123c79b7c995d4801e00225de3fad8efcf49a3ce3a5c0b20c2b3396032ece5a1b30eb9b55277af6dd886203a1f30f838940bc2eb1254765a668b98c"}) (async) setsockopt$X25_QBITINCL(r0, 0x106, 0x1, &(0x7f00000000c0), 0x4) (async) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000100)={0x2, 0x9, 0x67, 0x4}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000180)={r1, 0x5a, "62ec3b4c756e316eb5a2b52d365d4ec2e8781a5b8a9f901654f82e9ca06a6d6c20931971aeb0ff4edd33d873d0f274b5e3e616a7fa7c9bfd38c09439979ade33ae7f51da8b14efd57257af8299d12d038347c058391c33219db4"}, &(0x7f0000000200)=0x62) r3 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet_sctp(r3, &(0x7f0000001a00)={&(0x7f0000000240)=@in6={0xa, 0x4e21, 0x9, @loopback, 0xfffffffd}, 0x1c, &(0x7f0000001940)=[{&(0x7f0000000280)="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", 0x1000}, {&(0x7f0000001280)="3544f4971e3367ebf589862c8937bd98757206fdee936402081ecbfd7282c2eb1deb2366bcef21efbb006a93fc9a025ec54f1cc762a402765c7e4b79759e095f9ffce40ab7b41a5a8b779956f58a61e2f6544943bf925600ff23da1ae77104676d3dfea82ec75dc9a524272d63de9cf24fbff7b76f1ccf9b10bffded6cd1d77162c3e3061c", 0x85}, {&(0x7f0000001340)}, {&(0x7f0000001380)="10e6c43190609fad099facd202e5731effaae2b0737b343309160562f684b4490c39cc8cdfaec2b5e5ae393a77a1d4325534cfce5bf4bfe29ccd15e8d75bc2fdc30d35d169222541b5d14b5279b7164bdc0c94e71bb663b782e4e46dc38990aff9ac6e82c9ea4c872ea12aa75ea638dac352bfce0601857c227225a1b516c4d867256237f8b492b6a3acac0fc0306a916b85622752b8a89781f931c7ad96fcc4bf10f7dc38c860de8b", 0xa9}, {&(0x7f0000001440)="d6bf2a71d5c52b317b9eb6bb351308237564890a3b9f0d5b034b93d246c24fc2f844a47631020c0fabc8c09dafa104faf41a669298a04603058942b6dbead8aa901038c56e9ee315abcc388d01aaf06111ab64a254bce3ecb9e7a883fc02408ec892d8662fb71a29f8330724edafdcba43dc233ece78dad3565e013f05", 0x7d}, {&(0x7f00000014c0)="903f49f6aab4e2bfd005b2634be60e6e12ed82d665c7bba44b09c053c9a6b5f871ba8b4a286b373cac429888565683d60740a6b136dcbb756b64dbaffbdc5c8f91de7a73119d6b87f45c2d103484c09557a76c77f527665403d04c0d978a830887288d99687cbe29827e9f6327aae7c8304d6ba8c96e3078a504be17729c3eaba3dc1c0e91739ec7a357bcc4ef94f1b387490cf8a7a2a6efbe", 0x99}, {&(0x7f0000001580)="dec3685ca5c8f16e076fc69391473f2bf1792a3ab881cbd1ff68c0a4841ecfbe8c4305060312e664041a633221f0ada972cb0cc765907bcbc109a041dafae8fff0a6ad67be8ff7de18f2c6438cb6ccb23ab11d9a1a402c2f5cba19fc204d7d4ae37f05ddba66b63d253f7d4240935ca96dcdddf53eb467765a8950d50f8ffd6ad268b6aa7ed2eb6f42369e2d060eedc77078531b25b0639c31ec9cc89d4cf0a228032886bb7a5ea55b198d2ff09f98e4c5003f5214452787adde2a4b36b61113be6dbf37362cd9", 0xc7}, {&(0x7f0000001680)="f6c149c3b3e8dbac725a644a2650a69d4e274ca7c0553573fc6180479848b55e564b2f08bc41fb57090135338c15bb00f667b1f0dfeb651a3b4f59bf23d04a6671acf043aaf63a03651d7269a058936aa7be4824fee3d79d89eb6a23133657618f135d2db550b7bd0bb39d00d6a574fbf79cfa81cf387db848e28790025190ed3a1bdf90b61d13f8c922cc4799327d264ec98f208913758a7415dfbeb65d3268c9c4c5e1ea2debe87afaf720f84ede6c4382cc8349389446776d06767ad6153d9efca1471d", 0xc5}, {&(0x7f0000001780)="cac755e2753f2c25235815ae92eacab1061baefe1793534b1695fba470dd5104be6c62dfb92d1e36ece38df2df9e64f199cf925d3cd23b909efa51e9195dfacddbd225b9023f88666a41cb0a177c8f91a4e314f0944ebcdedafa69e52f17abb84903a127f9cf2471d3c2af0ab8b81d57e79bdfafa79eb32787eac4df00136f25af93f7c53619f7b0bb747d3d514180bd0cec46ff0209d45194293de888258dbf66ba38d6cbdda587da34181b4428ecf569ae90ba0f681813c29bf3b745becc6f6bd02b", 0xc3}, {&(0x7f0000001880)="f337dcf849b35894e17c556febbdb5a1a243bae011cf4b7a8ca0c42c97aa8fb5c6f20d4ee2949f7770f1ef7d0cdd84fd69429e6473792cbc03a00dddfe82423cdfb57f79f78a470da5c22a88574cc08d32f269b00fe161cc9be74b205bda2e734d6c4836e279ee545d57e178d3181cde6c9b782d76ea9c4d6b42e7d884fad4975b8c66ad8a4f53ebc5b07759a41028447627937050b8d187f4e2acca94788cc53b58a777465a87581b", 0xa9}], 0xa, 0x0, 0x0, 0x40000}, 0x40000) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001b80)=@bpf_ext={0x1c, 0x4, &(0x7f0000001a40)=@raw=[@ringbuf_query], &(0x7f0000001a80)='syzkaller\x00', 0x7, 0x4, &(0x7f0000001ac0)=""/4, 0x40f00, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001b00)={0x4, 0x5, 0x10, 0x400}, 0x10, 0x2e118, 0xffffffffffffffff, 0x0, &(0x7f0000001b40)=[r3, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x6}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001e80)={r4, 0x0, 0xf1, 0xbc, &(0x7f0000001c40)="7f3db481bcf8d098f4d65610fd2bdf113860db17310d17cda6da3cd851d998cc67fb4baf1e44b0c0223193e3afee4fffd0e9d5fa8908f5a74e68af8f78cd3c1950556a9a80a81fe2a39b38fbfe5ac9ab0be01051eea31cb738d95dd940a0e4372eeb8bd5952eb741e75370522c3d591dd973e51ad8c4a7ba33ed8c5c01839fc1100f48492e3d0e4fadb5bd92d72d60cbbb0c88821de2c60015e875e28dc20efba043f20fbd8214f58d79976691d74e89ba83f1f1f83f548be612d1889bb68ac6685c83cbd9610b8d342a50a434e0c7db95ea9b9f7240ea8c3540e27fd0c4061b89876df28a1e85bfc1d24d9e2934478d4c", &(0x7f0000001d40)=""/188, 0xffff, 0x0, 0x1c, 0x0, &(0x7f0000001e00)="af29f6a9c60a06121a12624189d75bddd0b4859221816e61cec71b13", &(0x7f0000001e40), 0x2, 0x0, 0x3}, 0x50) setsockopt$X25_QBITINCL(r0, 0x106, 0x1, &(0x7f0000001f00), 0x4) (async) preadv(r4, &(0x7f00000053c0)=[{&(0x7f0000001f40)=""/4096, 0x1000}, {&(0x7f0000002f40)=""/138, 0x8a}, {&(0x7f0000003000)=""/62, 0x3e}, {&(0x7f0000003040)=""/4096, 0x1000}, {&(0x7f0000004040)=""/247, 0xf7}, {&(0x7f0000004140)=""/77, 0x4d}, {&(0x7f00000041c0)=""/208, 0xd0}, {&(0x7f00000042c0)=""/4096, 0x1000}, {&(0x7f00000052c0)=""/63, 0x3f}, {&(0x7f0000005300)=""/185, 0xb9}], 0xa, 0x1, 0x5) (async) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000054c0), 0xffffffffffffffff) sendmsg$TIPC_NL_SOCK_GET(0xffffffffffffffff, &(0x7f0000005780)={&(0x7f0000005480)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000005740)={&(0x7f0000005500)={0x238, r5, 0x824, 0x70bd26, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x44, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x98}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x101}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}]}, @TIPC_NLA_BEARER={0x64, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'eth', 0x3a, 'team_slave_1\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @empty}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x3, @loopback, 0x2}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xfffffffb}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x8}]}, @TIPC_NLA_LINK={0xc4, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd79}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}]}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xcbf}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xae}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xa80}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}]}, @TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_NODE={0xa0, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x91, 0x3, "d5237e2eeed326d6eea1d08f045f24570b706adb8bc5e070c36f1740e0856c53bcbcca66d294373a01ce218c15866a336dabe4d6930856e3d9b174c4e0cf08a9f2394b5f360591496157c3f7f3b60cebb6b6e0a20ae5fac0568d2fa1e6ecef686864446c460e5a10d8ff94baf0f91e360b1afad024ef22260a58f55c110ecc5a8c4de06198dbe0f005ec3bc2b4"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xfff}]}]}, 0x238}, 0x1, 0x0, 0x0, 0xc0}, 0x20040100) (async) ioctl$SIOCX25SSUBSCRIP(r0, 0x89e1, &(0x7f00000057c0)={'ipvlan0\x00', 0x4, 0xc912}) (async) ioctl$NILFS_IOCTL_GET_VINFO(r4, 0xc0186e86, &(0x7f0000005900)={&(0x7f00000058c0)=[{0x8000000000000001, 0x0, 0x54, 0xfffffffffffff000}], 0x1, 0x20, 0x3, 0x2}) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x66, &(0x7f0000005940)={r1, 0x10001}, &(0x7f0000005980)=0x8) (async) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f00000059c0)={r1, @in={{0x2, 0x4e22, @multicast1}}}, 0x84) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r4, 0xc0385868, &(0x7f0000005b80)={r4, &(0x7f0000005a80)='\x00', 0x800, &(0x7f0000005ac0)={@align, {0xa0d, 0x8, 0x4, 0x9000000000000000}}, 0xcf0, &(0x7f0000005b00)={@_ha_fsid}, &(0x7f0000005b40)=0x2}) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000005bc0)={'macvlan1\x00', 0x8000}) (async) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r7, 0x84, 0x6, &(0x7f0000005c00)={r2, @in={{0x2, 0x4e21, @loopback}}}, 0x84) ioctl$sock_x25_SIOCDELRT(r7, 0x890c, &(0x7f0000005cc0)={@remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x3}, 0x1, 'team_slave_1\x00'}) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r7, 0x84, 0x77, &(0x7f0000005dc0)={r6, 0x8, 0x1, [0x7]}, 0xa) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF_FLAGS(r7, 0x84, 0x7a, &(0x7f0000005e00)={r6, 0xffffffffffffffff, 0x800}, &(0x7f0000005e40)=0xc) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r8, 0x84, 0x15, &(0x7f0000005e80)={0xff}, 0x1) (async) sendto$inet(r3, &(0x7f0000005ec0)="2725eded7403665693fc92dcea870a95dfd66303c5de62eb1835577bbbe25dffb202e8227234c91fcba7129808a4af69d83b973baf1d07dd681ac7993325892d05a52f050597c0c4c898110298bec2207e83e4a07c1158afeac07628c62dfaafdf43eb5343a280e063bb0a63b1594af905e3ba5bb35900a8e30393f97e86f5fb42e78fd43ca5bfa98f8037b395cb1f8fd42215522d69c6a58bbae23dbbdd509b22020735282ea6ae", 0xa8, 0x40000, &(0x7f0000005f80)={0x2, 0x4e21, @local}, 0x10) (async) setsockopt$inet_tcp_int(r7, 0x6, 0x11, &(0x7f0000005fc0)=0x81, 0x4) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000006000)={0x1b, 0x0, 0x0, 0x1, 0x0, r7, 0x6, '\x00', 0x0, r7, 0x0, 0x1}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000061c0)={r9, &(0x7f0000006080)="2a573efa0d6453f193b04a0e6148b5f5d141afb03d5f50002812127ee2171ee4cc180d7ded51902d9e436ec75a0ad228a15cc823ed27081bfda54cbd223ef73409af4086b146e7ccf75e0c60ccf0bb45b3f15fee9b09d7687f91d8357f9fb347390b3c43f9864ddad5f278e4cef0bad631ed6928cba2edb3360f2851a4cdeb0adfa196274d0a6efa2b02f7dc0fd6dee770084757d58f33a3bfe84d6acf59c732bca0f5e144dfc76965e6b0df7ff7771f87d602c0e934c4ee317fc2b91fee6107cde074e4c488c3b2fa3d2cee5634ce07f9bedc590596e9da", &(0x7f0000006180)=@tcp6=r7, 0x2}, 0x20) (async) r10 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000063c0)=@bpf_tracing={0x1a, 0xe, &(0x7f0000006200)=@raw=[@call={0x85, 0x0, 0x0, 0x70}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r7}}], &(0x7f0000006280)='GPL\x00', 0x80000001, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, 0x1b, r7, 0x8, 0x0, 0x0, 0x10, &(0x7f00000062c0)={0x1, 0x2, 0x1, 0x55a}, 0x10, 0x24e43, r4, 0x5, &(0x7f0000006300)=[r9, r7], &(0x7f0000006340)=[{0x4, 0x5, 0x8, 0x2}, {0x5, 0x5, 0x7, 0x9}, {0x3, 0x1, 0x5, 0x6}, {0x4, 0x4, 0xc, 0x3}, {0x5, 0x4, 0xe, 0xb}], 0x10, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000006740)={r10, 0x0, 0xf5, 0x80, &(0x7f0000006480)="0566a2570710bfedf35803f8ada45adad7b2f82d6975da4604085280bb9be67be3d370f911d9737297fdb5e25f901676b19c9d8bc58acd1f24012aef324088933a0f6b626a1a8273e452da20a89f813d832f3b17d0d0a520fca76518e0b1d0fb0946a586895c071b352cf190c982442b6eb1b7141ce91c1a44a4fa0a97357d6057c88c4369e19799bac9e9377d8c2b5a7cf14c45105d82837f26a28fa373e18fa5deb07250cf70ddcc74e354d6e278b562c54c479a17dc1e61cb973179e9422a7da6035b433af4ee92721743d27f287a6b35902f40881cf47371539ba2b5d6fb81a2a66d0d753c613e394e6956df5eb9ce5cd1da9d", &(0x7f0000006580)=""/128, 0x4, 0x0, 0x7b, 0xb2, &(0x7f0000006600)="61e6be22f0a7f33e8a64dacafe91522663333254f98cd518b8abcfb1098e977ed7a1583aca89b7438ebabd92fd023a5196571b8f2e9530d518c6a3c6e2925ef1456c312835f299f768f6168e9e665892dbeca63aa4f05407749a5b7bbc63cf31dce591afa2407437a72ad08dec01d029d15ad2e3ae473c284cf68d", &(0x7f0000006680)="913369d8cc1ac376cd656de18d5a92fa25942c5b8ff233edb26eab79cd0d35c7265f1087327967f55e187a3959a8035f766a15b54850ee96a0ec90516fecd56b640dbca51dd7633b1300b8f57e3bc493dc9bbef89dd0edbed4457d5118a9bca2359c0d66e454326c1015e3a8670bef13b2c9dd767453c196b23574019989e307364fab2148062ee18a76d8ef6e6ab8a5e050f9139d3471dbb6e31b7a5aa1db2de0bb6417529dfe2d104042b471e2333dca30", 0x1, 0x0, 0x3}, 0x50) 21.627276972s ago: executing program 2 (id=3284): socket$nl_rdma(0x10, 0x3, 0x14) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@deltclass={0x58, 0x29, 0x100, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0xffe0, 0x6}, {0xf, 0x7}, {0xffe0, 0x4}}, [@TCA_RATE={0x6, 0x5, {0x2, 0x6}}, @tclass_kind_options=@c_taprio={0xb}, @TCA_RATE={0x6, 0x5, {0x7, 0x1}}, @TCA_RATE={0x6, 0x5, {0x2, 0x6}}, @TCA_RATE={0x6, 0x5, {0x8, 0x9}}, @TCA_RATE={0x6, 0x5, {0x1, 0x53}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="85000000890000006a0a00ff000000220c00000000000000950000000000000018100000", @ANYRES32, @ANYBLOB="0000002100000000050000000000000095c333d4c0a3ecdd69086b8e4c36439a8808b90ea579cdf8bd475a470064827701f4169ebebecb5bba94f06f020fb64e5594a86f5f00000000000008c7533dc98a94008d7d2a7d2c23bc3f4cc1992aebd29fd21e95b3c7c49de340c24cb6ba1a33740825c424ecd87a3b02ae7840be900964b6948074a8f2ed867fd6601b0ca02215f4c2a5157135575fa1903abe92246853cb7cb868a3b2524a92bfa8aaeaf3ff3f08fb97ec0c126bfea903ef567bdf48aecb23342c8102732b7257f65b1f7d82adec836fd77d2f5c6e6c18ae428531d9e4d906b0a19827bffab9ced1e24e8f063d44fb76dd59e75486"], &(0x7f0000000000)='syzkaller\x00', 0x2, 0x95, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', r3, @fallback=0x2d}, 0x94) 21.456208266s ago: executing program 2 (id=3288): bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0900009a07b679af703900af0000080000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=r0, @ANYRES32, @ANYBLOB="020000000100"/28], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0a00000001000000e27f000001"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000740), 0x80000002, r1}, 0x38) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x16, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="7a0a00ff00000028711091ff0000000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x58, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffd4c, 0x0, 0x0, 0x1d, 0x0, 0x0, 0x10, 0x8c}, 0x94) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000900)={r1, &(0x7f00000007c0), &(0x7f00000008c0)=""/61}, 0x20) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58}, 0x10) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0900009a07b679af703900af0000080000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=r0, @ANYRES32, @ANYBLOB="020000000100"/28], 0x50) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0a00000001000000e27f000001"], 0x48) (async) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000740), 0x80000002, r1}, 0x38) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x16, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="7a0a00ff00000028711091ff0000000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x58, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffd4c, 0x0, 0x0, 0x1d, 0x0, 0x0, 0x10, 0x8c}, 0x94) (async) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000900)={r1, &(0x7f00000007c0), &(0x7f00000008c0)=""/61}, 0x20) (async) 21.431033828s ago: executing program 1 (id=3289): r0 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000100)=[{0x80000006}]}, 0x10) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)={0x1b, 0x0, 0x0, 0x95e, 0x0, r1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4}, 0x50) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0xa, '\x00', 0x0, r1, 0x5, 0x5, 0x1}, 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x6, 0x4, 0x4, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x10, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000002200"/20, @ANYRES32=r4, @ANYBLOB="00000000ff0000009500000000000000"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{0x1, 0xffffffffffffffff}, &(0x7f0000000440), &(0x7f0000000480)}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0x17, &(0x7f0000000280)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000340)='GPL\x00', 0xb25, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000380)={0x5, 0x1, 0x40, 0x8001}, 0x10, 0x0, 0x0, 0x1, &(0x7f00000005c0)=[r3, r4, 0xffffffffffffffff, r5], &(0x7f0000000600)=[{0x1, 0x1, 0x7, 0xb}], 0x10, 0x8}, 0x94) r6 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r6, 0x84, 0x82, 0x0, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f0000000080)=0x2, 0x4) ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0xc020662a, &(0x7f0000000740)={0x3, 0x3, 0x6, 0x80000000, 0x6, 0x0, [{0xad, 0x3, 0xffffffffffffffff, '\x00', 0x4800}, {0x7828, 0x55, 0xab, '\x00', 0x6}, {0xe9, 0x1, 0x50222982, '\x00', 0x800}, {0x81, 0xe425, 0x1, '\x00', 0x804}, {0x9, 0xfb, 0x7f, '\x00', 0x10}, {0xaeb5, 0x7fff, 0x7, '\x00', 0x4}]}) syz_emit_ethernet(0x33, &(0x7f0000000240)={@random="c3ad7f0ceb48", @dev={'\xaa\xaa\xaa\xaa\xaa', 0x25}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x25, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x4e23, 0x4e20, 0x11, 0x0, @opaque="ffc72b5e061d9f8bd3"}}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x5, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x7}, [@call={0x85, 0x0, 0x0, 0x11}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$packet(0x11, 0xa, 0x300) (async) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000100)=[{0x80000006}]}, 0x10) (async) socket$inet6(0xa, 0x2, 0x0) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)={0x1b, 0x0, 0x0, 0x95e, 0x0, r1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4}, 0x50) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0xa, '\x00', 0x0, r1, 0x5, 0x5, 0x1}, 0x50) (async) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x6, 0x4, 0x4, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x10, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000002200"/20, @ANYRES32=r4, @ANYBLOB="00000000ff0000009500000000000000"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{0x1}, &(0x7f0000000440), &(0x7f0000000480)}, 0x20) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0x17, &(0x7f0000000280)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000340)='GPL\x00', 0xb25, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000380)={0x5, 0x1, 0x40, 0x8001}, 0x10, 0x0, 0x0, 0x1, &(0x7f00000005c0)=[r3, r4, 0xffffffffffffffff, r5], &(0x7f0000000600)=[{0x1, 0x1, 0x7, 0xb}], 0x10, 0x8}, 0x94) (async) socket$inet6_sctp(0xa, 0x801, 0x84) (async) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r6, 0x84, 0x82, 0x0, 0x0) (async) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) (async) setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f0000000080)=0x2, 0x4) (async) ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0xc020662a, &(0x7f0000000740)={0x3, 0x3, 0x6, 0x80000000, 0x6, 0x0, [{0xad, 0x3, 0xffffffffffffffff, '\x00', 0x4800}, {0x7828, 0x55, 0xab, '\x00', 0x6}, {0xe9, 0x1, 0x50222982, '\x00', 0x800}, {0x81, 0xe425, 0x1, '\x00', 0x804}, {0x9, 0xfb, 0x7f, '\x00', 0x10}, {0xaeb5, 0x7fff, 0x7, '\x00', 0x4}]}) (async) syz_emit_ethernet(0x33, &(0x7f0000000240)={@random="c3ad7f0ceb48", @dev={'\xaa\xaa\xaa\xaa\xaa', 0x25}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x25, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x4e23, 0x4e20, 0x11, 0x0, @opaque="ffc72b5e061d9f8bd3"}}}}}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x5, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x7}, [@call={0x85, 0x0, 0x0, 0x11}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) 21.352406857s ago: executing program 4 (id=3290): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x14, 0x26, 0x101, 0x70bd23, 0xfffffffc, {0x15}}, 0x14}, 0x1, 0x0, 0x0, 0x8015}, 0x840) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f00000005c0)=@filter={'filter\x00', 0x42, 0x4, 0x2c8, 0xffffffff, 0x1d0, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x2a0, 0x2a0, 0x2a0, 0xffffffff, 0x5, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xff000000, 0x0, 'wg1\x00', 'nr0\x00'}, 0x0, 0x98, 0xc8, 0x1ba, {0x46010000, 0x2c000000000000}, [@common=@unspec=@cpu={{0x28}, {0x9}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff, 0x23, 0x6}, {0xffffffffffffffff, 0x1, 0x2}, 0x100, 0x964}}}, {{@uncond, 0x287, 0x70, 0x98}, @REJECT={0x28}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x0, 0x5, 0x0, 0x2]}, {0xfffc, [0x0, 0x5, 0x0, 0x2, 0x0, 0x1], 0x2, 0x5}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x328) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0xb, 0x0, &(0x7f0000000640)) write(r0, &(0x7f0000000200)="4a0000001100"/23, 0x17) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x3, [@type_tag={0xb, 0x0, 0x0, 0x12, 0x5}, @ptr={0xc, 0x0, 0x0, 0x2, 0x1}]}, {0x0, [0x30]}}, &(0x7f0000000040)=""/34, 0x33, 0x22, 0x1, 0xd081}, 0x28) 21.327717246s ago: executing program 0 (id=3291): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000000)=ANY=[], 0x64}}, 0x4) 21.317998473s ago: executing program 2 (id=3292): r0 = socket$unix(0x1, 0x5, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r5) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="01000000200000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000640)={0x58, 0x2, 0x6, 0x101, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x2}]}]}, 0x58}}, 0x0) sendmsg$IPSET_CMD_ADD(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c000000090601020000000000000000020008000900020073797a3000000042240007800c00018008000140e00000020c00028008000140ffffffff08000a40000000010500010007000000ff5333bd03f263c41cd7dd24198c11907d30967aa08596460fe5efa073bb5606d4bdea0092b52c302f7f8df1cb704e3bfb48c3ee667eaa3cfd288a5947168797a170ac855b19ae9b2ae233c24866780e31e55a5334d808"], 0x4c}}, 0x800) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x4) sendmsg$IPVS_CMD_SET_INFO(r10, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r10, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001440)=@newlink={0x50, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x300, 0x17e05}, [@IFLA_MASTER={0x8, 0xa, r11}, @IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x4000, 0x640}}}}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32=r6], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000) r12 = socket(0x1, 0x803, 0x0) getsockname$packet(r12, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00030000000000001c0012800c0001006d6163766c616e000c000280080001000800000008000500", @ANYRES32=r13, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r13], 0x4c}}, 0x884) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)={0x40, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x24, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x20, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x20, 0x0, 0x0, 0x1]}}, @NL80211_TXRATE_HT={0x4}, @NL80211_TXRATE_LEGACY={0x4}]}]}]}, 0x40}}, 0x0) 21.283043848s ago: executing program 1 (id=3293): r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$inet_opts(r0, 0x0, 0x4, 0x0, 0x0) sendmsg$inet(r0, &(0x7f0000000e80)={&(0x7f0000000800)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10, 0x0}, 0x20000000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000000)={0x4, 0x3, 0xfffffffc, 0x10000, 0x0}, &(0x7f0000000040)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f0000000080)={r2, @in6={{0xa, 0x4e20, 0x4, @private1, 0x71a}}, [0x1cfd, 0x2, 0xffffffffe1e0bab0, 0xfff, 0x25, 0x7ff, 0x40, 0x7, 0x5, 0x6, 0x9ea0000000000000, 0x7, 0x0, 0xfffffffffffffff8, 0x1000]}, &(0x7f0000000180)=0x100) 21.236384788s ago: executing program 0 (id=3294): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0xa, 0xe, &(0x7f00000021c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2b, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0)={0x0, 0x40000000, 0x2}, 0x10}, 0x94) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}, 0x1c) shutdown(r0, 0x1) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f00000000c0)={0x0, 0x0, 0x1}, 0x8) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000040)='westwood', 0x8) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000580)={&(0x7f0000000200)="78e9cb65f8e57406e2eac73bc88d35a1a8acecab49fb7c29006ee5369f0b6e214ef92f263c5e33a19a9b54fa89bff960d8a09267edeca7fd005d4e6e4d1fccadc1e43f2040dcbe0c6f9f94a0791c22fa60f7edfd89966723e92deeb4a97e0824979ab29f8b90c8443ef51295ed1642554b0b0aa54756f574547132a22d284e9a60ae2f3dcead416efda4dbf8f35d6fd8790ae9bd07cb032516d297b12f9bc98a82ebbf9f4455a1d5b04e8b24bbfa9cbea71db72d0c3dd68c7e9b9d37789c5ad312eb1b5cc063bdc73818f6ce068edb4b2f90b0ba367ec09cfe7d9fc59707623cdf6709c422308ba6fc534137450f4cc11ae60794b7933da421", &(0x7f0000000300)=""/253, &(0x7f0000000400)="cde8237979a3f06e65643772c6f236ffbb654759ea333969d27b17b46f07a750cd532418136e56c7a61c495d2a222d06c6001b2af782ee9867964a46926782d6fa49787fc5d84f641212a51dc6ac98b5724f71b59aa38a074f09a5b3ac8b2331d2147e8966a70e67b1d79e33fb05c327d96fd854ae63d51bda3ca1082f923eb7969cf134924a4483ee5c12d60c6a22857ec1f2a4", &(0x7f00000004c0)="c32be6f03c822b9a81ee693124442e75932255865142e0d53661522f6b0cc80c19f837833751f0ec80048f9acabc65182b38b4d20a748886810c1da1f0b08103254901a907a7df41e0d1208bc26c7584334c6abe54447209d67376dbb19a0d9e151fbda2dc3bcfc2e29fd293a70bd796cac8005c08db3c55d6e4e256ee82fc60ad92580918de48b380e2119b885f792d", 0x5, 0x1}, 0x38) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) close(r2) ioctl$SIOCSIFHWADDR(r2, 0x8b26, &(0x7f0000000080)={'wlan1\x00', @random="09fe000500"}) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {}, 0x0, 0x6e6bb8}}, 0xb8}}, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000600)={0x2, 0x10, 0xef, 0x5, 0xa, 0x0, 0x70bd2d, 0x25dfdbff, [@sadb_x_policy={0x8, 0x12, 0x2, 0x1, 0x0, 0x6e6bb8, 0x3, {0x6, 0x32, 0x2, 0x7, 0x0, 0xe, 0x0, @in6=@private2, @in=@empty}}]}, 0x50}}, 0x840) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000001c0)={@map=r2, 0x11, 0x0, 0x6, &(0x7f0000000040), 0x0, 0x0, &(0x7f0000000100)=[0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) 21.235982386s ago: executing program 5 (id=3295): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xa, &(0x7f0000000180)=0x6, 0x4) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, &(0x7f00000000c0)) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x4c, 0x2, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}]}, 0x4c}}, 0x0) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x0, 0x0, 'fo\x00', 0x4, 0x1ffc, 0x3a}, 0x2c) 21.206601752s ago: executing program 4 (id=3296): sendmsg$OSF_MSG_ADD(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000001880)={&(0x7f0000000100)=ANY=[@ANYBLOB="6802000000050104000000000000000003000006540201000200000000020000800904000100160073797a31000000000000000000000000000000000000000000000000000000009f95cf5a03ab4df3f0f3d0941074d2f18faf184d23b6cf52e8c676c218b39b335a19d528faa003da54c821603e499a3e11b3efe2be7aafa9680b20"], 0x268}, 0x1, 0x0, 0x0, 0x40}, 0x80) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) listen(r0, 0x7fffffff) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha224)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x80000) sendmsg$IPCTNL_MSG_CT_GET_DYING(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8400000}, 0xc, &(0x7f0000000280)={&(0x7f00000000c0)={0x14, 0x6, 0x1, 0x5, 0x0, 0x0, {0x3, 0x0, 0x1}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x1) sendto$inet(r2, &(0x7f0000000000)='\x00', 0x1, 0x24008800, 0x0, 0x0) accept4$tipc(r2, 0x0, 0x0, 0x800) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xe, 0x4010, r3, 0x952de000) 21.108502055s ago: executing program 1 (id=3297): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x801, 0x0, 0x0, {}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xc}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_GC_INTERVAL={0x8}, @NFTA_SET_ID={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x6c}}, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x20040010) (async) r2 = socket$netlink(0x10, 0x3, 0x0) (async) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f000000ef00)=@newtaction={0x68, 0x30, 0x1, 0x70bd27, 0x25dfdbfe, {}, [{0x54, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x5, 0x2, 0x6, 0x3, 0x1}, 0x9}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0x68}}, 0x4) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) (async) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r1) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x7}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x17}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0xc4}, 0x1, 0x0, 0x0, 0x50}, 0x4000040) (async) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002bbd7000ffc18e250700000008000300", @ANYRES32=r3, @ANYBLOB="0c009900010000005b00000005005300010000001400040064766d727030000000000000000000000800050004"], 0x4c}, 0x1, 0x0, 0x0, 0x62b4e7cbb8b4f193}, 0x8040) 20.980129129s ago: executing program 4 (id=3298): bind$alg(0xffffffffffffffff, &(0x7f0000000600)={0x26, 'aead\x00', 0x0, 0x0, 'seqiv(generic-gcm-aesni)\x00'}, 0xfffffffffffffd43) r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x1e8, 0xb8, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x150, 0xffffffff, 0xffffffff, 0x150, 0xffffffff, 0x7fffffe, 0x0, {[{{@uncond, 0x6, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}, {{@ip={@local, @local, 0xff, 0x0, 'hsr0\x00', 'veth1_virt_wifi\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE0={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x248) setsockopt$sock_int(r0, 0x1, 0x55, &(0x7f0000000000)=0x8001, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="200000002f00090027bd700000000000040000000c0016"], 0x20}, 0x1, 0x0, 0x0, 0x42804}, 0x84) 20.979104177s ago: executing program 5 (id=3299): r0 = socket(0x10, 0x803, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x58}, 0x1, 0x0, 0x0, 0x48000}, 0x20004010) r2 = socket(0x26, 0x6, 0xd) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000180)={0xffffff}, 0x10) write(r2, &(0x7f0000000000)="240000001a005f0214f9f407000904001f00000000000020000000000800040001000000", 0x24) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="1400000010000100000000000000000000000a0020000000000a01000000000000000000050000000900010073797a300000000064000000120a01000000000000000000050000000900010073797a30000000000900020073797a3100000000080003000000000630000480080001000000123414000280080002"], 0xb0}, 0x1, 0x0, 0x0, 0x20004081}, 0x40800) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'bond0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x4}]}, 0x2c}}, 0x0) r8 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000200), r4) r9 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r9, 0x107, 0x5, &(0x7f0000000040)=@req3={0xf, 0x3, 0x9, 0x7fffffff, 0x6, 0xa0, 0x40004}, 0x19) sendmsg$NLBL_MGMT_C_REMOVE(r4, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000240)=ANY=[@ANYBLOB="00400000d0f5af6bcf8a2c88e48b1f536e5f74b8b387acf0620dc4b35a3065f561c5f779a69f781dec4098924c1b305c9d60359954b45a6ce29f243b8c7023d614325b91874d2f048805822741157f6998e7da816fd36918e0c9c9067b3eb3b34687b9f3e348a002df8a4d9da277ec21143382666e15db11ae4d8cc610a0a778b7f05bded79685f4db390de0b8efb537", @ANYRES16=r8, @ANYBLOB="010027bd7000ffdbdf25020000000500010000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x8405d22596f37403}, 0x4054) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010001fff00"/20, @ANYRES32=0x0, @ANYRESOCT=r2], 0x28}}, 0x25) r10 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r10, &(0x7f0000000600)={&(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f0000000480)="96bc14585c62", 0x6}], 0x2, &(0x7f00000004c0), 0x0, 0x1000000}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 20.974800595s ago: executing program 0 (id=3300): r0 = socket(0x1d, 0x4, 0x401) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_TOL(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002bbd700000000000010000000000000007410000001400180000000069623a6e6963766630def4fd"], 0x30}}, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000001c0)={0x5813}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=@ipv6_getaddrlabel={0x30, 0x1e, 0x492dfc465ae32a8d, 0x0, 0x0, {}, [@IFAL_ADDRESS={0x14, 0x1, @local}]}, 0x30}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000240)={0x20, r5, 0x1, 0x470bd28, 0x4, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000094}, 0x80) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r3, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000006c0)={0x1c, 0x3, 0x1, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x80) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48000, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000900)=@allocspi={0x20c, 0x16, 0x10, 0x70bd29, 0x25dfdbfd, {{{@in=@remote, @in6=@local, 0x4e21, 0x0, 0x4e22, 0xd8c, 0xa, 0x20, 0xa0, 0x1}, {@in=@remote, 0x4d6, 0xaf}, @in6=@private2, {0x7ff, 0x100000000, 0x472a6599, 0x7fffffff, 0x80000000, 0x5, 0x6, 0xc4de}, {0xb148, 0x0, 0xe, 0x6}, {0x0, 0xf9, 0x1fd0000}, 0x70bd2d, 0x3503, 0x0, 0x3, 0xc}, 0x2, 0x7}, [@lifetime_val={0x24, 0x9, {0x4, 0x0, 0x7ff, 0x3}}, @user_kmaddress={0x2c, 0x13, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@multicast2, 0x0, 0x2}}, @iptfs_pkt_size={0x8, 0x29, 0x5}, @iptfs_max_qsize={0x8, 0x28, 0xe0}, @policy={0xac, 0x7, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@private=0xa010100, 0x4e23, 0x0, 0x4e24, 0x7ff, 0xa, 0x0, 0x80, 0x84}, {0x7, 0x7fff, 0xff, 0x9, 0x6, 0x4, 0x3, 0x7fffffff}, {0x0, 0xfffffffffffffff8, 0x7, 0x401}, 0xbc, 0x6e6bb8, 0x0, 0x0, 0x3, 0x3}}, @XFRMA_SET_MARK={0x8, 0x1d, 0x4}]}, 0x20c}}, 0x200080d4) r8 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(r8, &(0x7f0000000700)={0x27, 0x1, 0x0, 0x5, 0x0, 0x0, 'urn:nfc:sn:snep\x00', 0x10}, 0x60) setsockopt$nfc_llcp_NFC_LLCP_RW(r8, 0x118, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r9, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004451) sendmsg$NFT_BATCH(r10, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000009b80)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a90000000060a010400000000000000000a0000040900010073797a310000000064000480340001800c0001007061796c6f616400240002800800014000000001080003401f00004f080004400000003808000240000000012c0001800a00010072656469720000001c00028008000240000000130800034000000029080001400000000e0900020073797a32"], 0x6c1c}}, 0x24000800) getsockname$packet(r9, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000001000390400000000fcffffff00000000", @ANYRES32=r11, @ANYBLOB="019800000000000090a19508633e3006b3b154e2207ccda01800128008000100677265000c00028008000100", @ANYRES32=r11, @ANYBLOB], 0x38}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x38, 0x10, 0x800, 0x2, 0x25dfdbfe, {0x0, 0x0, 0x0, r11, 0x1040, 0x22900}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x8, 0x6, @loopback}]}}}]}, 0x38}}, 0x4040000) r13 = accept$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000180)=0x14) sendto$packet(r13, &(0x7f0000000280)="d58db7f86b2601d57ab731d8f5f6af556db27c306af0663c413e2edd9a27e17449a8c3b22da27fdca56ce7b14d", 0x2d, 0x4, &(0x7f00000002c0)={0x11, 0x19, r11, 0x1, 0x20, 0x6, @broadcast}, 0x14) 20.893343027s ago: executing program 1 (id=3301): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1e00000000000000ca00000003"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xf, &(0x7f0000000100)=@ringbuf={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000}, {{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0x2}, {}, {0x85, 0x0, 0x0, 0x9c}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000000c0)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x25}, 0x94) (async) r1 = socket$inet6(0xa, 0x802, 0x0) connect$inet6(r1, &(0x7f0000000240)={0xa, 0x6e23, 0x2, @mcast1, 0x9}, 0x1c) (async) getsockopt$inet6_buf(r1, 0x29, 0x3d, 0x0, &(0x7f0000000140)) ioctl$NILFS_IOCTL_GET_VINFO(r1, 0xc0186e86, &(0x7f0000000040)={&(0x7f0000000000)=[{0x5, 0x80000000, 0x3, 0x9}, {0x8000000000000001, 0x4, 0x5, 0x7}], 0x2, 0x20, 0x1, 0x8}) 20.833378961s ago: executing program 4 (id=3302): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000400)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x30, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, 0x0}, 0x0) (async) r0 = socket$kcm(0x2, 0x1, 0x84) (async) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0x0, 0x8}, {0xffff, 0xffff}, {0x0, 0xed27c9fa5277b9b7}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_BYTEMODE={0x8, 0xb, 0x1}]}}]}, 0x3c}}, 0x24048000) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001b00)={&(0x7f00000018c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xe4, 0xe4, 0x5, [@fwd={0x8}, @decl_tag={0xf, 0x0, 0x0, 0x11, 0x2, 0xffffffffffffffff}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x5, 0x4}}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2, 0x5}}, @struct={0x1, 0x2, 0x0, 0x4, 0x1, 0xcf, [{0x4, 0x3, 0x8001}, {0x2, 0x5, 0x6}]}, @fwd={0x2}, @union={0xb, 0x6, 0x0, 0x5, 0x1, 0xffffffff, [{0x8, 0x1, 0x8}, {0xc, 0x4, 0x3ff}, {0x9, 0x3, 0x97d}, {0xc, 0x4, 0xab}, {0xf, 0x5, 0x5}, {0x3, 0x5, 0x4}]}, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0xa, 0x5}]}]}, {0x0, [0x5f, 0x2e, 0x10]}}, &(0x7f0000001a00)=""/238, 0x101, 0xee, 0x1, 0xff}, 0x28) (async) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001cc0)={0x18, 0x2, &(0x7f0000001c00)=@raw=[@map_val={0x18, 0xa, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7fff}], &(0x7f0000001c40)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x44, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001c80)=[0x1, 0x1, 0x1, 0x1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff]}, 0x94) (async) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001d80)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3, 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000001ec0)={0xa, 0x1, &(0x7f0000000000)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x7}], &(0x7f0000000040)='GPL\x00', 0x4, 0x1000, &(0x7f00000008c0)=""/4096, 0x40f00, 0x28, '\x00', r2, @fallback=0x1f, r4, 0x8, &(0x7f0000001b40)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000001b80)={0x1, 0x6, 0x72e9, 0x8}, 0x10, 0x0, r5, 0x7, &(0x7f0000001e00)=[r6], &(0x7f0000001e40)=[{0x2, 0x1, 0x1, 0x3}, {0x3, 0x2, 0xf}, {0x2, 0x2, 0xe, 0xb}, {0x2, 0x3, 0xe, 0xc}, {0x3, 0x1, 0xc, 0x2}, {0x5, 0x4, 0x7, 0x8}, {0x1, 0x4, 0x8, 0x1}], 0x10, 0x8000}, 0x94) (async) setsockopt$sock_attach_bpf(r0, 0x84, 0x9, &(0x7f0000000380), 0x98) (async) sendmsg$kcm(r0, &(0x7f00000003c0)={&(0x7f0000000740)=@in={0x2, 0x4e21, @loopback=0x7f0000e0}, 0x80, &(0x7f0000001bc0)=[{&(0x7f0000000880)='\r', 0xfffd}], 0x1}, 0x40) 20.761880297s ago: executing program 0 (id=3303): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x90, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xb, 0x7}, {0xfff1, 0xffff}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x5c, 0x2, [@TCA_MATCHALL_ACT={0x58, 0x2, [@m_mpls={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0xd, 0x9, 0x20000000, 0x6, 0x588}, 0x2}}, @TCA_MPLS_LABEL={0x8, 0x5, 0x1fc16}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x90}}, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newtfilter={0x88, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0xb, 0x7}, {0xfff1, 0xffff}, {0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0x54, 0x2, [@TCA_MATCHALL_ACT={0x50, 0x2, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0xd, 0x9, 0x0, 0x6, 0x588}, 0x2}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x88}}, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000100)={@dev={0xfe, 0x80, '\x00', 0xa}}) (async) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r7, 0x1000) (async) getsockopt$inet6_mptcp_buf(r7, 0x11c, 0x2, &(0x7f0000000100)=""/222, &(0x7f0000000000)=0x61637876) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="240000001800010000000000000000001d01040008000900b1041d2583717eccc079a6ab2608496eef5c0b6d19651e9aef8b370cd25009917a50ef6bd4250bcb79db5625759414e39cb45d8843bc76a65861735885536110bd532a2c1af1c749ab1e19d4598820e888a8d9d2f6822c1e09c17fde31e2edfe2549c50272870cc2ad5666de5a20f47aa24875eab3640abf7fe18cc9ca", @ANYRES32=r9, @ANYBLOB="08000a00bec88d6009c68763bc524a1a"], 0x24}}, 0x800) 20.759451131s ago: executing program 2 (id=3304): r0 = socket(0xa, 0x3, 0x87) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ipvlan0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x40}}, 0x78, r1}) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x8916, &(0x7f0000000000)) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="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"], 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x40800) 20.756444896s ago: executing program 5 (id=3305): connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0b01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) socket$netlink(0x10, 0x3, 0xb) write$tun(r0, &(0x7f0000000140)={@val={0x0, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x14}, @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0xfde1, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @dest_unreach={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @local, @loopback}}}}, 0xfdef) 20.636500145s ago: executing program 1 (id=3306): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="70000000020601000000005a00000000000000000e0003006269746d61703a697000000005000400000000000900020073797a30000000002800078005001400080000000c0001800800014080ffffff0500030006000000080008400000001005000500020000000500010006"], 0x70}}, 0x0) (async) syz_emit_ethernet(0x62, &(0x7f0000000080)={@broadcast, @broadcast, @val={@val={0x88a8, 0x3}, {0x8100, 0x4, 0x1, 0x1}}, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd308", 0x24, 0x6, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, {[], {{0x0, 0x4e21, 0x41424344, 0x41424344, 0x0, 0x0, 0x9, 0x2, 0x2, 0x0, 0x0, {[@exp_smc={0xfe, 0x6}, @timestamp={0x8, 0xa, 0x3}]}}}}}}}}, 0x0) 20.608060918s ago: executing program 2 (id=3307): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x2c, &(0x7f00000002c0)={&(0x7f00000004c0)=@newtaction={0x84, 0x30, 0xffff, 0x0, 0x0, {}, [{0x70, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x5c, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x30, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x9}}]]}, {0x10}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x84}}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x2c, &(0x7f00000002c0)={&(0x7f00000004c0)=@newtaction={0x84, 0x30, 0xffff, 0x0, 0x0, {}, [{0x70, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x5c, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x30, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x9}}]]}, {0x10}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x84}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$x25(0x9, 0x5, 0x0) (async) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)=ANY=[@ANYBLOB="60010000100001000000000000000000fe8000000000000000000000000000bb0000000000000000000000000000c90b0000ecdf000000000a00002000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffff0000000000000000000000000000000032000000fc01000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000fcffffffffffffff00000000000000000400000000000000c73b0000000000000700000000000000070000800000000000000000000000000200000000000000ffffffff2abd70000000800002000400e5000000000000001c001700000000002abd70000000000000000000ff8000000000000005002100020000004c001400686d6163287368613235362900"/280], 0x160}}, 0x24004000) ioctl$SIOCX25CALLACCPTAPPRV(r3, 0x89e8) (async) ioctl$SIOCX25CALLACCPTAPPRV(r3, 0x89e8) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r2) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="410000000000000001000603000014000300060afc04090300f006e8ffff00000001080007002e3a2f2f140002"], 0x44}, 0x1, 0x1000000, 0x0, 0xc4}, 0x0) (async) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="410000000000000001000603000014000300060afc04090300f006e8ffff00000001080007002e3a2f2f140002"], 0x44}, 0x1, 0x1000000, 0x0, 0xc4}, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_buf(r6, 0x6, 0x1f, &(0x7f0000000ec0)="9925f561", 0x4) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r6, 0x6, 0x16, &(0x7f0000000fc0)=[@sack_perm, @window={0x3, 0x1ff, 0xeed}, @mss={0x2, 0x3575f4f3}, @window={0x3, 0x30, 0x9}], 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@deltaction={0x184, 0x31, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@TCA_ACT_TAB={0x78, 0x1, [{0x10, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0xc, 0xd, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0x14, 0x12, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xe}}, {0x10, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0x10, 0x17, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0xc, 0x8, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}]}, @TCA_ACT_TAB={0x38, 0x1, [{0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3281}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0x10, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}]}, @TCA_ACT_TAB={0x4c, 0x1, [{0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xb7}}, {0xc, 0xc, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x401}}, {0xc, 0x1f, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}]}, @TCA_ACT_TAB={0x74, 0x1, [{0xc, 0xc, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0xd, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0xc, 0x7, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0xc, 0x7, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}, {0x10, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0xc, 0x4, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0xc, 0x10, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0xc, 0x10, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x86ed}}]}]}, 0x184}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@deltaction={0x184, 0x31, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@TCA_ACT_TAB={0x78, 0x1, [{0x10, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0xc, 0xd, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0x14, 0x12, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xe}}, {0x10, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0x10, 0x17, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0xc, 0x8, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}]}, @TCA_ACT_TAB={0x38, 0x1, [{0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3281}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0x10, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}]}, @TCA_ACT_TAB={0x4c, 0x1, [{0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xb7}}, {0xc, 0xc, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x401}}, {0xc, 0x1f, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}]}, @TCA_ACT_TAB={0x74, 0x1, [{0xc, 0xc, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0xd, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0xc, 0x7, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0xc, 0x7, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}, {0x10, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0xc, 0x4, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0xc, 0x10, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0xc, 0x10, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x86ed}}]}]}, 0x184}}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF_FLAGS(0xffffffffffffffff, 0x84, 0x7a, &(0x7f0000000000)={0x0, 0xffffffffffffffff}, &(0x7f0000000040)=0xc) ioctl$F2FS_IOC_SET_COMPRESS_OPTION(r1, 0x4002f516, &(0x7f0000000bc0)={0x4, 0x7}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000a80), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000001280)={&(0x7f0000000180)={0x2c, r9, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x401}, @TIPC_NLA_NET_NODEID={0xc}]}]}, 0x2c}}, 0x0) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$NL80211_CMD_ADD_TX_TS(r8, &(0x7f0000000780)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x2c, r10, 0x200, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x7, 0x60}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40080c0}, 0x4000800) recvmmsg(r7, &(0x7f0000000b40)=[{{0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000080)=""/73, 0x49}, {&(0x7f0000000540)=""/185, 0xb9}, {&(0x7f0000000880)=""/165, 0xa5}, {&(0x7f0000000a00)=""/134, 0x86}], 0x4, &(0x7f0000000b00)=""/41, 0x29}, 0x3}], 0x1, 0x10021, &(0x7f0000000b80)) socket(0x10, 0x803, 0x0) (async) r11 = socket(0x10, 0x803, 0x0) sendto(r11, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r11, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000980)=""/68, 0x44}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f00000001c0)=""/17, 0x11}], 0x8, &(0x7f0000000600)=""/191, 0xbf, 0xb00}}], 0x1, 0x0, &(0x7f0000003700)={0x77359400}) 20.59992714s ago: executing program 4 (id=3308): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_mreqsrc(r0, 0x0, 0x28, &(0x7f0000000000)={@remote, @multicast1}, &(0x7f0000000040)=0xc) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000080)={0x0, @multicast2, @multicast2}, &(0x7f00000000c0)=0xc) ioctl$OCFS2_IOC_GROUP_ADD64(r0, 0x40186f03, &(0x7f0000000100)={0x0, 0x1, 0x7, 0x3}) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r1, &(0x7f0000000540)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000500)={&(0x7f0000000180)={0x364, 0x14, 0x100, 0x70bd28, 0x25dfdbfd, {0x11, 0xa}, [@INET_DIAG_REQ_BYTECODE={0x4}, @INET_DIAG_REQ_BYTECODE={0x6b, 0x1, "7c15685ebf36ece7ac73cc00527a48c74b0371f3c8d8e502372958423ad0407cc48d09b85dd1566f243f4072928fb18f4e1e978075b745800f59675d20732f16ad03f7c5b4e78638a31a4ff604ec29470f919aec443b6c00184da83b2dc440f9df43c94b41eb52"}, @INET_DIAG_REQ_BYTECODE={0x6f, 0x1, "0ee8fbdff39da170e8ef760441ccf31193879438c282869c287882d00d9487d867f8c8ad28704bb64e7401eb4a69ef0a96d48e72415dd0f1b25fb0ff868d495e0ae3d3d997c8dde02ad60384a7a10041683691596f444dd0635614cb1d6a3562727141c79f3f0c4621e154"}, @INET_DIAG_REQ_BYTECODE={0x37, 0x1, "f8671329723b76d4431e0ce0731b9edc8740d9a1e2dc872710b816fcca224ebadb1327c69296199fef40c4ec59ddbfdf4c663b"}, @INET_DIAG_REQ_BYTECODE={0x9e, 0x1, "99c4534d48a94724775b7fe068cd40e9ea2e2eb199c6b86bfce9fd105c2b8be412e51cf508e11c872edb5701cef8ff03e3bf9d6cf547397dd03accf0efa82da8befa81ae69bd69bb1235bbb444fd4098e308cf54408a7eb2661ace2b8458f58effc5310ed035d65b24e72e11009556b7ed8bdb79187c5b29b700db658318e0645f2887277e4128923e6e239c4218a63daa7fc2d198652d4f4ddc"}, @INET_DIAG_REQ_BYTECODE={0xe5, 0x1, "d1985e7b6a4509a95481d4e3b224d83fe3059ccfd2314802dfc53e34a16a55886364d67e40bb697ad5c925c2061684d0d2c720767c553d2101d15b4a020bc98c136e310b1d44d0a72c81c8355126e262dc68a477ead235379ceff4c55cc772960da99742be6e27b81488e9f625835acf21edc93e18d2aa6fe5e84cbf07823feaed3327d1e2a1f78e0987a7870f7856a1c48482a4d7e55107048220dec4b615e5527bde0ca42bc7a1fae5a22baf2594145532c78101e405300616a6ae7c1ce343cf0d61118e10cbfa76f323868856ae64b33f05a3a05fe766a9437eaf86b7dad6c7"}, @INET_DIAG_REQ_BYTECODE={0xb0, 0x1, "72d7baf8a0196a9e190879787d2b6a6b6fa1d0090fe17e85a656f727fefe5ca6272e91a51a644dc835cc7fdb78e7782d0489481e75539b134f4424d18fe066b9dc3aa248c4d0cae3d85970f95d57a8b33227fd397179548a85bc1c310f80122acc93432e2b3bb56a798b99fb7a6a2728a381c449a5167cfde6e68309a5b95208c6910b344196c01d87622a14cda430df687fb3c8f53d4664aed96bf75b414bcb12830f5a8735dbc65df7cea6"}]}, 0x364}, 0x1, 0x0, 0x0, 0x810}, 0x40081) setsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f0000000580)={0x77359400}, 0x10) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={r0}) sendmsg$nl_xfrm(r2, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)=@delsa={0x48, 0x11, 0x800, 0x70bd29, 0x25dfdbfd, {@in=@empty, 0x4d6, 0x2, 0x2b}, [@srcaddr={0x14, 0xd, @in6=@empty}, @mark={0xc, 0x15, {0x35075c, 0x6}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40}, 0x40) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x5c, 0x0, 0x100, 0x70bd28, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x7, 0x69}}}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x20, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x9}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}]}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}, @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_INACTIVITY_TIMEOUT={0x6, 0x96, 0x8}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4) listen(r1, 0x2) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x10010, r1, 0xf344000) getsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f0000000880)={@multicast1, @initdev}, &(0x7f00000008c0)=0x8) socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000900), &(0x7f0000000940)=0xe) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0x5, &(0x7f0000000980)=0x1, 0x4) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r2, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x18, 0x140a, 0x1, 0x70bd2b, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000001}, 0x4000) ioctl$FS_IOC_SETVERSION(r2, 0x40087602, &(0x7f0000000ac0)=0x6) ioctl$SIOCX25GFACILITIES(r2, 0x89e2, &(0x7f0000000b00)) ioctl$OCFS2_IOC_MOVE_EXT(r0, 0x40406f06, &(0x7f0000000b40)={0x7fffffff, 0x9, 0x3, 0x5, 0x1}) setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000b80)={0x21, 0x0, 0xfc, 0x3, 0xfa, 0x8, 0x7, 0x4, 0x7, 0x2, 0x5, 0x4, 0xd4, 0x6}, 0xe) getsockopt$inet_sctp6_SCTP_EXPOSE_POTENTIALLY_FAILED_STATE(r3, 0x84, 0x83, &(0x7f0000000bc0)={0x0, 0x1}, &(0x7f0000000c00)=0x8) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000f40)={&(0x7f0000000c40)="0c341110ea3773d0be52b38d5b88bd70bfd7e3350b0f22f31a5dfa06e4365abae3095f3b0e26eaf3a9657fdbb70e6690a4177ffcb6db097e345a0ad6bdff6949d9dfc1e55c99590889943947f8689d1177750f7994056a3529178dc578f125bb323761489a0fbbb34063121f62d6a5ebdf1820a1a51e6fd100bca5929f70c1ced2c5828a5c3480372de21e4be89f0fb6cc4c5241707e11e852f46478a3aa9ca9398bdc892d63b7bd2d083ec1ffa0e7f287c3023a5cd9f3e0677a29a85e11127a1ddc95876896356ebe8d60b74d", &(0x7f0000000d40)=""/213, &(0x7f0000000e40)="2f86aea8527bcc19571df37b4131e5c79b6c647ec81bc26f1372b9fde2e58eccf7cfe88f66118f15481d9840685e1256cfa05a2e19192d18312c98550eaf28d7f8a9cd0d2cbe232bf98ced446563c170b2d7a8dff87969e9f71add3f10b929d6d34701fcaedf41c75ee5bbccd19ddd8cf054ca247e8296a9da30caddc5b269bacd0f22da1f351ee04548635a02f7ed8647540b59", &(0x7f0000000f00)="7c100bf912e34b39360376a6a4df31d6ce79ff38bc260528e67ad81ad71d372b925cb4d5ec8d068f3ee14e", 0x7f, 0xffffffffffffffff, 0x4}, 0x38) socket$pppoe(0x18, 0x1, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000f80), 0x480000, 0x0) sendmsg$SOCK_DIAG_BY_FAMILY(r2, &(0x7f00000021c0)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000002180)={&(0x7f0000001000)={0x1144, 0x14, 0x20, 0x70bd2c, 0x25dfdbff, {0x1f, 0x2}, [@INET_DIAG_REQ_BYTECODE={0x27, 0x1, "ec2ff1f433a5ac6adf581461b136c6460ba960d562cd0ecfe85b687ec07918796f4e34"}, @INET_DIAG_REQ_BYTECODE={0x1004, 0x1, "646489d459abd301ebe2f3a9fd3cd5218e7bf568bce38b7566455e03256a4cf0386ee737ab20f802645d567f78bf473be4b537a097ede1355266dfe6eaebbd2c31569bd0214b5b3f7d97eafac379a50483f39871e8ab3bcd06d31ad9da23925677ff7440b531614765b4f5edab75452a60994e45b0b1868866c8603d85249c55e2980b7842014f5c1d1fc56cc7749a7aa846c8044d3786e264f4264bb0720cd599cbc4ff0620bcd3683e47106e3d134f41bf91932b12afe061835e3e132d2634dc6f698e1685ee2e7acc739c9f9a1d5f089cff5a60bce016b7272a24fc152c1ca3f6dce9b80582ce88d92a7f102fdace9716426aeff7c6e6f29ce79964076aa8db3ccff9ea22768a81c9520e5ac48efb2bd323163511f89b92c164083d2cc383c9e1f7c18113007ff0a77644cbc0d7b16f018aaaa6be93b1ff4743e54c6f8f30cb4bc6c7b6df0a7975bbc4f13db98b175b4a6fc8e95378f4958c4713d1bc237211afb1bb9ce23728116b37db498dfa3b356f79dd29ac4b3e86756d1fc37fbc46270e798f0c0f96415438663dca7679677a611aa2221c321a39e2d22e269584bd54c77be6e4927fe93d66eb14d2f7c7182f7c86f07b172bb5e64c8a804772b3baf321f06762a511e89c878986258e06400bf9a79520723ac41b07d202da80e95b9e78b0f0e7da83c3c68dc7239ccc44c3b78a6f372c9b4805e362e61ff950b6e61fc72e35b7f8b45e65188f72197a740811acacc247a8db732b58e562cf854df4cda315930facb969f96a6a38c4dabed00dbe3584a0a5002f70e4db1cf035a02fc6d0b2c070edc93d11d5aa10f31b58ea98490c40df2f4e59ada7800117a2aff07ce51fc973bc5463d78935444fa6ddb1ee07176e9e28579d6d706f5c46967e33a91da724fe21afb09cddf5e6de0bbaa1fc5eaf107cee44e9a8331f512987a2abbd15323cee7e5cb0b224dc96a8cc9a07b0ec386392206086bc573fc537654e3e18a3bc3c21dc5e9169dc3a36f58c9c14534266a118e82e78b0fcc50eabc2e4e8d91772e99770ce58e3e0749a7775fb91a1667cfd276ebce7b8ecd97796a9a1dd8e7c897658e96fb1442a73555d0d9ff8a5b15b5a4766d815e1c357a3a03fae50787b3bc24835d7553f9ff485fdede55591cdfd7550f0c37090248e674ef0f761c6eaa7ee89227488099b64eb4ccb043845083ba1b836d3bcdaf86e0e175dc433276842f66355bad02200b5dbc6a69ddbc39ffc55db6c57e6243b917271122aa792e5c999829ea84844e4b43a1d1d48ed3434c74de292d3aff8dfc241566e3c86ecc32565f08767baa46c255c0bb49efef52ddd1b906672f13cf937ae52cb3eacb762a8d545ca4971f1f433895232a084ae9181e5e96d1be507d7fbfdb5b2d3c423cdd173b1af2a83b1173a8f8424295e4af4b99406ca8a083bb50f9a2ffb334f581d4d618fa757fa4da301ac6f5ec1d059156c058d849e56fdcfaabac710c793199619bdff594e749d6a4a7c32a77fb94a1f105b3582f9f25d11a2cf06e64983cd41bde54fd3b489fd58482b3392b3afeb3622d489d22857ebefbb5e3c02b124ff743ef29a6c9539d56a6b87888b66d6e0d42b8a9f3ec8e62908638560139b6b7ed8320c0194d551518f73554d2fe33866c76a693f82ce192d1f01a570be4c0ebee7f4383aaccfe484a2efb55cae58d4d0f80304953ee11561246e3dfebba51be415f751d8e5c9497a713e8655307c2db3cfd146fd9d68b7e261517920d0654aa155b57f07981db7c2fcbdda097053cf23d2dd4e61f598d2b7d069631727d0e6737d31a713637a3d2c174cb767c903e43c9180df81ef2e14518d693911bd9cd97415528ee2ec1607323805a04764251bd5803832a62dd2ff716378f53e169059d0bc09a7cc03daddd2d1ab19450178ebea4a3fe5530cbb6c76d7cfded4d470422c75ac7abdf9836d815e44186bdcfa57d55bce8659738276fd2d0d0cc737dcde511b9773c0769308861e8e607245682c397b4d83fcc5046675dff6c1454490aa220db5f38cb30bd7b4910b4d7075f69217f989ac6f0e69a9ddf3b1061320e2803d13ef675a500f0315160034e39c9668bae06ad2bd30cbee840ce4af997fd80e137c6953e5a6e5ad9b969c6f9668be9a7e69a39712da481696843d144845f73f924837ced5c8af3c3fdc2d7418b626c5145098c10d8555b73764c69e82a575ba46e466c6aaca6120088516bc6bb1414a6af5fb3bfbfdd11ddf2e35bb521a2848e8a7f3e9e1d1b18317abf3fd1a6874da4d8a511071570c1693e16cdb157851d10838abcf8daa06090f78833f3c96a5ca58987b3aff5c50813c2c190b29336f14edef19cedfa7e820e047a93fb347f026fe6277ccf6ba68f11a28ee9447bcc9366ef7619d56b14e02bebd0a2954f9f47ce044e23fc5b40af6c670f0484f2199f60755ec231904483e13497b399279f7c254689d8ea52236380c799c60487f071540eded6c6693811c7ef86231de7cb73ed67de5a8d6b4bf12cd9d3b0c2de3767c8273a2de43e1bfcdb8853a9ac3a11ac738964dcc0db6de1161ad192b2fbdd10adb0ba171a6d7cfd02875eb1bcefed3298a172b6464128144815afe368dd1fce39f1f7502d419b494199d093f2ca5e94b1ac6f555df79a36853800e0a24ea4fe7577e316473ec94382edf98d3a5185c8e6289182dbfbbbe589679b194fcd96f19e0aa275d27156382b942cd60704e4e45942621bffcb1a75983583de85643a0c1e2070a44d0d1983ac3c5413396c0a7b481addcb4aa121dc5da8e9cdffec53b20f28dbf9f3949218c550b885b244a796f51d6db45979b7a456b215642706e5848ddebdc5e04392bbd579ad90ea6b1ab40918e70ea316bf9f7fc75baa7766f26da4b8c71725be18c74a4d9eaac8124768d750b1f11ecad8b9dc0698c4dbba52158da27fda71c1cbaf32861e2fdc8c6258beb45de5fa172c654dc0c25849ba70de6a5f36b110a4abf1dda1dc9959f4b6c7a4c42b787dc1d2f4b1857b1518524e57c945294cb1e8eb6e34480f426c04bb06338f03f3feac8a3cb9cf47e1b791bd3a372c950c2f820dbc7ddad351d463e23da0edbe6225af93342b1effe1f7b989737ed880f0291ad34bf0477565751ca1eed4b33177b9bdce72b1c2fa157abe791b0ed2c7c6a5fb01b2d3d5dcdd975a48f93b96dc7befb89ca5eb96e16b28f945f675e6aa5bbed7fbb5b8d15610a89619456aa55b7d2186c2a45e5452f20cb70e71a38f22cc79b806eb7b4079f0fa16aec071e2ecb372666d853e494213acd1b1a7de3612f391635eb9fe73ba31fc6b26775c178b5a2ca5355c76cc4c22a7ccfdb6678d8b244f2238f444d3e3e040152e5e4648b9b41c6c95d8cba162af67815c7efedee20fb699beae8d152f275f3a0eb1d12e21ea182fca017905eac24e491558b6fda61e617ba98cc41880f4d194c445dbb9e2eb4d47a655d21dce4c2ef4221c3fa84ddba3c0f8d4ce0ba2e2ac565e4b1fde3ddee7c3416883f13827a41a0b2766b7d988b682f15150bb403466f0876f439055a3b251e08b2a7eef2c9b2e4bd6f3ee0caefd45f0c84a086ce8700ddd9f38d7f2aa16d95d83fb3cafeb74d2923775db49988a3b0a7ed0b2778c5e0722569c814a7d6d9b945484551e69dd4dc8bde94ddcd048048f32d5e6df04585478a6b54bea7c6d4917b57c13d7e148d1efb45619dd6badbf510ac6246d369db28106df5e8c2e3b0eb1b8bb907e6b474282c3170d5fdf722523d0165a5c2ac1aefa33dfa0d000da8f439ab515da0ad1a14f8c544108a3bbd3df0c879725b74ea091d41d14d390358de0e75d9660caaf42733ea5026b038ff94973f7aeb71830d5cbd6e06b10bbad86b5ba6a4910bb44eaae1790491affb7d32175a09333a43c6f103eb66abbd82530bfbb20989cf7c6242abe9be89c8525c01e5e65fdc0c3908d5bfcc4b240325e807a2bd739ea64a209814c77c9c82bb4fa254ddb70a214f826c176eaa753034648adcc31dac7e24ad72231296457e0687f4e782a6122a5b426470444b5c9cc98e4ba6ac9b751f7fd9e4aee8d6f979944590ec086d224707762274a59a186fef26063af6f191679ed9c343485f21af5e631fa3d0935817871f602f4b5f3b0c245dfba5229686df90c7356c869f29461643949420e7f57c675f828ab93efab2558f13045d8d3b9cd844c670951a83922b27e7225cb3176b0efdd90b9776ec6876025c205255a5e1ea99d54baa5c27ad7456c2532cf99606ff543ac8f45b233332f81d4aa8b9b5581ed41b7d72c5c891d53cecd83c3a19d6e9c9a69f6787ec3e9dcdc15e07c2439efc7b2999b95029df3f3575548277a2c96caf044912aa5a8bfef0652a93f1398563ef35e283ec42009864799fe87820f3ed2c24665c18f080a4248fa68e7198dcdc40ffd4ae25164b71299acf47336afc1f5db3d83b68019be7291ed0a0d26bda95319999d25a34a112a0cdf4451d69574811ff2c0b5d06f78917a967e82179f6eb64ab3ec4282d408d6d5028048f86cc64d752a1c14446f01ba7beec555d650a0a855bc7eb5614b48e4a9fbf66a360a478015533657edd6742174273dc639accdf362a0a7c6c74e38bc8405d86f81851fcd93c1246b85c3555698f6ea58a994421134d000d04e65ef16fe8e6c31a15294228f25d4fbffecceab34b61b1a246c4cb11fc91f08d38253d316401d8f233c7ac5839989f6b5ce3b7ab901bf91483561817907e4ea35955083108c033c72b7c4b54f320492eaac554a45f2ba971489d5530d80d25e6e043dda50a76066a7ed1e5b200cc1fd2293b3379cb5743e5dab41cb8727a54d8eabcea897dfc87aaf3bb5d02480844488b69059d7c9011f29b8e05ba3411c250dc0d7f7efe2c0efb4bd53850d4ef8920c5f7ced814fdc479ae06a649853b77babedb36ab93c65977a56c802cfa006204c603db958595b0f80afe7e3b449d93862e3bcb61ba1207357a22ec3f66766ab8799941866e62f40dd7a8193146c2b170fe7378eafdaf559a0600a4a39e063e08b73bee04744573ffb7ed6e09988777d2512af3d2d6a715c90d55c2a51d9308dcf5ae279952b7577ed41d6081a3e3f4c618d0397affbd148f1b82ab52df84d971d78b4e267bb079e81f4a5167d265e611c07f01417c9c65c3483166fcd03f9411257d109f0411384a097a4d0f4cb91d49b16870a8cd4ecfe5ae476321028425ae63e9ac50b311edc02f56ab92e4cbf4864824cd7f3d640932e589bb2921902ab3d181310f258d9da6d8281638248215a06b362068a85b312f76ce645921c1a37855a604547b3398c5523a9d19c6cd5b97a5d8a4a989cbb31a4f520f7d684ffb9a7eb75374c9a333812b6686977d2a9e97f8060692af72f27bd93c7f6bd30707f8601a1a36d6520dbaa51086ff6b895d52bc46868dc3dbe9d3a42fefc33dfd06543a94413546b20bb095ed8bedb099007cbf807768f7d9af6fcfd1f79c94e99c51fb6e3ac9e8a447aed33c96f852ed89c0d0c8fb360d3fcb8e12627243c42125e5deaa324ca22e3eac871443628dc0cdcd3663af75a0dc046b11b5d286a7eb25792c681401c4c763523cc65ef49f50287f046c1ab510e7d8193d7aab9eb32ef99e4b9dc82daae6d651cf3aba933646770bf6ae263b852bf71c78bddb160544553edb9eafecc0eb410ce49286d6d4759a8e35402f825103dd8c80af3de6210a15e600ab7520399bbe4fa8550d438f2aa0d8a7fd3551a0d79f7f5764b65b87074b648ec7df1b8f73eba0817f8505a64bc1"}, @INET_DIAG_REQ_BYTECODE={0x101, 0x1, "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"}]}, 0x1144}, 0x1, 0x0, 0x0, 0x80}, 0x8000) close(r1) ioctl$FS_IOC_GETFSLABEL(r3, 0x81009431, &(0x7f0000002200)) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000002300)) 20.520903618s ago: executing program 1 (id=3309): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xb, &(0x7f0000000800)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4b}, [@printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xf3}, {0x85, 0x0, 0x0, 0x2d}}]}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000007c0)={r0}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1a, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f00000002c0)='syzkaller\x00', 0x5, 0xc3, &(0x7f00000000c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x94) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) pipe(&(0x7f0000000300)={0xffffffffffffffff}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000040)={0x2, 0x2383, @loopback}, 0x10) connect$inet(r3, &(0x7f0000000080)={0x2, 0x2383, @loopback}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xf, 0x4, 0x4, 0x10, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0xe, 0x2, &(0x7f0000000500)=ANY=[@ANYBLOB="b70000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000600)={@map=r4, r5, 0x5, 0x0, 0x0, @void, @value=0x0}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r4, &(0x7f0000000340), &(0x7f0000000380)=@tcp=r3}, 0x20) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@bloom_filter={0x1e, 0x4, 0x8, 0xb039, 0xa300, 0xffffffffffffffff, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x2, 0x9}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x6, 0x4, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x6}, [@generic={0xf9, 0x3, 0x1, 0x6, 0xfffffffc}]}, &(0x7f00000001c0)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x9, '\x00', r1, 0x25, r2, 0x8, &(0x7f0000000340)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000000380)={0x1, 0xa, 0x1, 0x10}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000440)=[r4, r6], &(0x7f0000000480)=[{0x5, 0x2, 0x0, 0x1}, {0x0, 0x3, 0xf, 0xa}, {0x1, 0x3, 0xe, 0x6c85e6cb3e225020}, {0x2, 0x3, 0x4, 0xa}], 0x10, 0x721}, 0x94) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000040000000c"], 0x48) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r9, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$inet6_int(r7, 0x29, 0x35, &(0x7f0000000000)=0x3, 0x4) sendto$inet6(r7, 0x0, 0x0, 0x20000004, &(0x7f0000000700)={0xa, 0x2, 0x0, @rand_addr, 0x2}, 0x1c) 20.520234852s ago: executing program 4 (id=3310): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000380)='blkio.bfq.avg_queue_size\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000140)=[{&(0x7f0000000280)=""/241, 0xf1}], 0x1, 0x0, 0x0) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000c80)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001400090527bd7000fc045e3d23d7df25", @ANYRES32=r4, @ANYBLOB="08000400640101040800080000010000080002"], 0x30}, 0x1, 0x0, 0x0, 0x4040014}, 0x0) r5 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000b80)={0x40, 0x1, 0x44f2ade573ff9a8a}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x6, &(0x7f0000000280)=[0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x37, &(0x7f0000000300)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f0000000380), &(0x7f00000003c0), 0x8, 0x78, 0x8, 0x8, &(0x7f0000000400)}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000ac0)={0x18, 0xa, &(0x7f00000008c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1ae3, 0x0, 0x0, 0x0, 0x6}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @ldst={0x2, 0x2, 0x2, 0xb, 0x0, 0x40}, @tail_call={{0x18, 0x2, 0x1, 0x0, r1}}]}, &(0x7f0000000940)='GPL\x00', 0x1, 0xaa, &(0x7f0000000980)=""/170, 0x41100, 0x68, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f0000000a40)={0x1, 0x2}, 0x8, 0x10, &(0x7f0000000a80)={0x5, 0x6, 0x4, 0x401}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffa}, 0x94) sendmsg$ETHTOOL_MSG_DEBUG_GET(r1, &(0x7f0000000880)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x44, r2, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}]}, 0x44}}, 0x1010) r7 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000040)={@local, @private, 0x0}, &(0x7f0000000080)=0xc) sendmsg$nl_route(r7, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=@mpls_delroute={0x54, 0x19, 0x8, 0x70bd2d, 0x25dfdbfc, {0x1c, 0x10, 0x14, 0x9, 0xfe, 0x4, 0xff, 0x1, 0x100}, [@RTA_DST={0x8, 0x1, {0x4}}, @RTA_OIF={0x8, 0x4, r8}, @RTA_VIA={0x14, 0x12, {0x1e, "4bbeded0a4a7b8313de3b0d9bfba"}}, @RTA_MULTIPATH={0xc, 0x9, {0x800, 0x10, 0x3}}, @RTA_TTL_PROPAGATE={0x5, 0x1a, 0x7}]}, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x4) syz_emit_ethernet(0x20e, &(0x7f0000000540)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "000210", 0x1d8, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "8bb91d", 0x0, 0x11, 0x0, @loopback, @empty, [@fragment={0x87, 0x0, 0x5, 0x1, 0x0, 0x3, 0x68}, @hopopts={0x0, 0x33, '\x00', [@ra, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @generic={0x0, 0x9d, "a17e9ab13f6e142b20582c8d220c698a74dbf13dfc0ad1f526dfc43313759300929090dd4792ce67ea9f8769d3246f94412c56e0247939ed4b318e4b6066b72d91d9aff97fcf30977dfd4028dea535a8e9d1682c4794d255d62089716f2f97577f9bef264da3cfd3e5511fb253122f61808a73cc2e760f93ceb68a0db2613cf0956b23235f057c2f980a19266a6bb4a33a17f550a571c5b4211c6fa371"}, @ra, @generic={0x0, 0x8c, "65fd1a52737fa1ec91495f4d25a766a5dd36bcffb376f4b35d4a5bc51b0f8fb9a273282a9c8ef192a4de26c8732765dbeb6ce083e81cebf0612d1cc7956b78fb34ce0e4a867c8b4094bab04b23680ba97ad5c624055e8504a7a121cf38a402a7aa80e05dbe56fecab8b014420231c0e997cbfda9bdc7f29e3a8b13dcfc396cf6ff1fcd8a7f43a107871fdd7e"}, @padn={0x1, 0x2, [0x0, 0x0]}, @pad1, @generic={0x1, 0x52, "08f1390b0c74cba47ed1dbe3290dbd16fe15f3802c8f12d8687cb72f6783172e63fafc0bc19fc7ea5e20fe65290cc5531784929dd4b5c8ff0df008542d00f6159b80595da8d72872864da820552af488c1ce"}]}]}}}}}}}, 0x0) 20.489540117s ago: executing program 5 (id=3311): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="f200000000000000a80800000d0000007b8af8ff00000000bfa20000000000000010000000000000b703000008000000a8da1692d5bc1cee85000000010227d2e3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0xa, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000003294712ab6c591000006dad7f60d1e63bde6dabbfac9a86767f4c527e193148784c000a169385be29c895169ddc764d7c2a3158a8b5410e0d41c3b7ec4f27fc60f2ea2324b5b186b476a395e687b23323086691786cba0f5e274e450e6d26b2d35b6312cbfa60df818cad58ce29c3f7ce1cf0"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet(0x2, 0x803, 0x6) socket$nl_route(0x10, 0x3, 0x0) socket$nl_audit(0x10, 0x3, 0x9) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) getsockopt$inet_mreqsrc(r2, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) poll(0x0, 0x0, 0x375c) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_TOL(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x68, r4, 0x1, 0x70bd2b, 0x25dfdbfe, {{}, {}, {0x4c, 0x18, {0x53, @link='broadcast-link\x00'}}}}, 0x68}, 0x1, 0x0, 0x0, 0x880}, 0x14) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000140)={0x1f, 0xffff, 0x3}, 0x6) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r6) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r7, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r8, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f0000000980)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000940)={&(0x7f0000000b00)={0x140, 0x0, 0x200, 0x70bd24, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_IE={0xe9, 0x2a, [@measure_req={0x26, 0xffffffffffffffe4, {0x5, 0x9, 0x8, "dba3323b1e46f508d60557be599a70ab6eb539f01303956c3b67924d930a3b135f1d9ffff2e003b2992aff06ccb50f307087e45102e7ebddf36e1b6938129db5e66686fe036e4d54cf9a67ebb7453a4df766f321f1148da31ddc104cd6aaef05c0e8cab34f0873892104360fe26b93bb99724c0e0ca7e12c95314cbdaae899686cb2f03fe8f560622ec0a97372af8c9c93a54966d8b9fec8d83e7a6f224ab895adf4277cfbe0a6587b05e00edb6fd5eaef59c58c82905a8ab48243b21cf2cd06fef1667f9a8f353417bbc6d8a55f30ffaca153e37a4b90ae775cd006b1a29744"}}]}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0xc}}, @NL80211_ATTR_BSSID={0xa}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0xffffff01}, @NL80211_ATTR_BG_SCAN_PERIOD={0x0, 0x98, 0xff}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x4}]}, 0x140}, 0x1, 0x0, 0x0, 0x80}, 0x20000080) write(r5, &(0x7f00000000c0)='Y\x00\x00\x00\x00\x00', 0x6) r9 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz0\x00', 0x200002, 0x0) mkdirat$cgroup(r10, &(0x7f0000000580)='syz1\x00', 0x1ff) setsockopt$inet6_int(r9, 0x29, 0x10, 0x0, 0x0) 20.400949218s ago: executing program 2 (id=3312): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100626f6e640000000018000280140008800800030001"], 0x48}}, 0x0) sendmmsg$inet(r0, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2000002, 0x42073, 0xffffffffffffffff, 0xaba00000) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0x403, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646, 0x10c04}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x2}, @IFLA_BOND_PRIMARY={0x8}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40e95}, 0x2004a0c0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0xba0c29e690d41d4b, 0x20000000ec071, 0xffffffffffffffff, 0x0) 20.303396204s ago: executing program 0 (id=3313): setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, &(0x7f0000000000)={0x1, 0x5}, 0x8) getsockopt$inet_sctp_SCTP_EXPOSE_POTENTIALLY_FAILED_STATE(0xffffffffffffffff, 0x84, 0x83, &(0x7f0000000040)={0x2, 0x2}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f00000000c0)={r0, @in6={{0xa, 0x4e24, 0x3ff, @private1={0xfc, 0x1, '\x00', 0x1}, 0xfffffff1}}, 0x81, 0xffffff81, 0x7, 0xbc6, 0x5}, &(0x7f0000000180)=0x98) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='cpuset.effective_mems\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_REMOTE_UDP_ENCAPS_PORT(r2, 0x84, 0x84, &(0x7f0000000200)={r0, @in6={{0xa, 0x4e22, 0x4, @empty, 0x9}}, 0x4e20}, &(0x7f00000002c0)=0x90) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000000300)=0x81, 0x4) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000000340)=@sack_info={r3, 0x2, 0x12e}, 0xc) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000000380)=@assoc_value={r3, 0x2de}, &(0x7f00000003c0)=0x8) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r2, 0x6612) r4 = openat$cgroup_procs(r2, &(0x7f0000000400)='cgroup.procs\x00', 0x2, 0x0) ioctl$F2FS_IOC_GET_COMPRESS_OPTION(r4, 0x8002f515, &(0x7f0000000440)) r5 = openat$cgroup_ro(r2, &(0x7f0000000480)='blkio.bfq.io_serviced_recursive\x00', 0x0, 0x0) getsockopt$PNPIPE_ENCAP(r5, 0x113, 0x1, &(0x7f00000004c0), &(0x7f0000000500)=0x4) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF_FLAGS(r5, 0x84, 0x7a, &(0x7f0000000540)={r1, 0xffffffffffffffff}, &(0x7f0000000580)=0xc) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r7, 0x84, 0x1a, &(0x7f00000005c0)={r1, 0x1000, "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"}, &(0x7f0000001600)=0x1008) setsockopt$inet_sctp_SCTP_REMOTE_UDP_ENCAPS_PORT(r5, 0x84, 0x84, &(0x7f0000001640)={r6, @in={{0x2, 0x4e20, @loopback}}, 0x4e24}, 0x90) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000001740), r2) sendmsg$BATADV_CMD_GET_NEIGHBORS(r2, &(0x7f0000001800)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x3c, r8, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x5140c5a9}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40c5}, 0x20040000) shutdown(r5, 0x1) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r5, 0x84, 0x4, &(0x7f0000001840)=0x4, 0x4) getsockopt$inet_sctp6_SCTP_EXPOSE_POTENTIALLY_FAILED_STATE(r5, 0x84, 0x83, &(0x7f0000001880)={r1, 0x2}, &(0x7f00000018c0)=0x8) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f00000019c0)={&(0x7f0000001900)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001980)={&(0x7f0000001940)={0x30, 0x2, 0x3, 0x101, 0x0, 0x0, {0x7, 0x0, 0x3}, [@NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x8}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x8cc, 0x2}}, @NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x1a}}]}, 0x30}, 0x1, 0x0, 0x0, 0x24000084}, 0x24044840) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r5, 0x84, 0x10, &(0x7f0000001a00)=@assoc_value={r3, 0x6}, &(0x7f0000001a40)=0x8) close(r7) sendmsg$NFT_BATCH(r5, &(0x7f0000002100)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x1000004}, 0xc, &(0x7f00000020c0)={&(0x7f0000001ac0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWOBJ={0x24, 0x12, 0xa, 0x3, 0x0, 0x0, {0x5}, @NFT_OBJECT_LIMIT=@NFTA_OBJ_DATA={0x10, 0x4, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x5}]}}, @NFT_MSG_DELRULE={0x28, 0x8, 0xa, 0x3, 0x0, 0x0, {0x0, 0x0, 0x3}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWFLOWTABLE={0xe4, 0x16, 0xa, 0x301, 0x0, 0x0, {0x0, 0x0, 0x6}, [@NFTA_FLOWTABLE_HOOK={0xc, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x5}, @NFTA_FLOWTABLE_HOOK={0x98, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x7c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'bridge_slave_1\x00'}, {0x14, 0x1, 'batadv_slave_1\x00'}, {0x14, 0x1, 'wlan1\x00'}, {0x14, 0x1, 'vlan0\x00'}, {0x14, 0x1, 'vlan0\x00'}, {0x14, 0x1, 'dvmrp0\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x2}]}]}, @NFT_MSG_NEWTABLE={0x44, 0x0, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELFLOWTABLE={0x14, 0x18, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0xd}}, @NFT_MSG_NEWFLOWTABLE={0xe8, 0x16, 0xa, 0x801, 0x0, 0x0, {0xa}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_HOOK={0xc8, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x2f}, @NFTA_FLOWTABLE_HOOK_DEVS={0xa4, 0x3, 0x0, 0x1, [{0x14, 0x1, 'ip6erspan0\x00'}, {0x14, 0x1, 'geneve1\x00'}, {0x14, 0x1, 'xfrm0\x00'}, {0x14, 0x1, 'veth0_to_team\x00'}, {0x14, 0x1, 'macsec0\x00'}, {0x14, 0x1, 'ipvlan1\x00'}, {0x14, 0x1, 'ip_vti0\x00'}, {0x14, 0x1, 'ip_vti0\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x8887fcce}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}]}, @NFT_MSG_DELOBJ={0x2c, 0x14, 0xa, 0x801, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x5}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x5}]}, @NFT_MSG_DELOBJ={0x78, 0x14, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x6}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0xf}, @NFTA_OBJ_USERDATA={0x3b, 0x8, "d7076670ddad86d36e98275c1a54c9a4a0ddaf410899f25a58fb8251c240b9dc159d55c605943aa4bf195e4e83946761fa9d6e98acaaf9"}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWRULE={0xa0, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x2}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_COMPAT={0x24, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV6={0x8}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x29}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x89}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x6001}]}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x2}, @NFTA_RULE_COMPAT={0x24, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x8809}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x89}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x10}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x62}]}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x1}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWRULE={0x220, 0x6, 0xa, 0x401, 0x0, 0x0, {0x0, 0x0, 0x1}, [@NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_RULE_EXPRESSIONS={0x9c, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @tproxy={{0xb}, @void}}, {0x24, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_CSUM_TYPE={0x8, 0x6, 0x1, 0x0, 0x2}, @NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x2}]}}}, {0x58, 0x1, 0x0, 0x1, @dynset={{0xb}, @val={0x48, 0x2, 0x0, 0x1, [@NFTA_DYNSET_SET_ID={0x8}, @NFTA_DYNSET_EXPRESSIONS={0x30, 0xa, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @objref={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_OBJREF_IMM_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJREF_IMM_NAME={0x9, 0x2, 'syz2\x00'}]}}}]}, @NFTA_DYNSET_SET_NAME={0x9, 0x1, 'syz0\x00'}]}}}, {0xc, 0x1, 0x0, 0x1, @osf={{0x8}, @void}}]}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x2}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_RULE_POSITION_ID={0x8}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x140, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x17bf6259a35da579}, @NFTA_PAYLOAD_SREG={0x8, 0x5, 0x1, 0x0, 0xc}]}}}, {0x30, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x80000001}, @NFTA_CONNLIMIT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_CONNLIMIT_COUNT={0x8}]}}}, {0x10, 0x1, 0x0, 0x1, @last={{0x9}, @void}}, {0xac, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x9c, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_MATCH_INFO={0x90, 0x3, "fe312c2730c9de0a13236ab67a7f90d0b8aa6e0e428d08107aa1b4b4ad3c26db86400984066fde44664716747dba0a909ea7f890d46f38882722a6e69698b56bc13126c7c31f28a2d23dfd3964a60b30dc3eb0114c7444ce3a7a6fefea63996c65b53084b2622ad0bef607387961ac746dc67a22fbe88e88a9907a4b8cdc6fa2a9566a477950db4b0e0c4626"}]}}}, {0x1c, 0x1, 0x0, 0x1, @lookup={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_LOOKUP_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}]}}}, {0x10, 0x1, 0x0, 0x1, @exthdr={{0xb}, @void}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x5fc}, 0x1, 0x0, 0x0, 0x84}, 0x80) sendmsg$NFT_BATCH(r5, &(0x7f0000002700)={&(0x7f0000002140)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000026c0)={&(0x7f0000002180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x5, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x1}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffc}, @NFTA_CHAIN_TYPE={0xa, 0x7, 'route\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELSETELEM={0x4b4, 0xe, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x468, 0x3, 0x0, 0x1, [{0xd8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0x5c, 0x7, 0x0, 0x1, @queue={{0xa}, @val={0x4c, 0x2, 0x0, 0x1, [@NFTA_QUEUE_NUM={0x6, 0x1, 0x1, 0x0, 0xff17}, @NFTA_QUEUE_FLAGS={0x6, 0x3, 0x1, 0x0, 0x3}, @NFTA_QUEUE_NUM={0x6, 0x1, 0x1, 0x0, 0x10}, @NFTA_QUEUE_NUM={0x6, 0x1, 0x1, 0x0, 0x877}, @NFTA_QUEUE_FLAGS={0x6, 0x3, 0x1, 0x0, 0x2}, @NFTA_QUEUE_FLAGS={0x6, 0x3, 0x1, 0x0, 0x1}, @NFTA_QUEUE_TOTAL={0x6, 0x2, 0x1, 0x0, 0x401}, @NFTA_QUEUE_FLAGS={0x6, 0x3, 0x1, 0x0, 0x1}, @NFTA_QUEUE_NUM={0x6, 0x1, 0x1, 0x0, 0x5}]}}}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_EXPRESSIONS={0x6c, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @last={{0x9}, @void}}, {0x2c, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LAST_SET={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_LAST_SET={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_LAST_SET={0x8, 0x1, 0x1, 0x0, 0x8}]}}}, {0x10, 0x1, 0x0, 0x1, @counter={{0xc}, @void}}, {0x1c, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_TPROXY_REG_PORT={0x8, 0x3, 0x1, 0x0, 0x10}]}}}]}]}, {0x2fc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_USERDATA={0xf1, 0x6, 0x1, 0x0, "892c3a310014477d9d381d53a5323bc0e76ce17a321dc71c83ba2c32d9d91ebf3e37f76dbfcf7491ea6630efc954687a694726253a6412ba6c576ad864bd3d987ed51e55f385918e5811234c763def9976592e79a29c86ace786d6abf637d7d7a2315c43957cad95df01482cc621115fdb1afb991c858f528862ff0652500b5dc9d8f89e59c0ad919bd46be30be1ac244bf3ade8633f476235f6d37dc632a8ec9b2a6350518eaf6eb875930fc6b2842249656e82262441a10ed9c3854edafe022f46b4199ce846d87f22ff96e0600af8ef81728bf49d1222246e5d23044e2888ac8c76191a69b36112e21406c6"}, @NFTA_SET_ELEM_KEY_END={0x1dc, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x64, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VALUE={0x25, 0x1, "d92b491f16c2a92494705efd4a679dc50e39b9cce3d0176fd394af893096851071"}, @NFTA_DATA_VALUE={0x91, 0x1, "a1d02368c346c80d78b03936bda28ee268977deb00cc422f10e32d741634171fd9fbc90fb48d2759d92395cdcbdec452aa4d3db21916360d1089f026d79e1d01349e6cabc9d1c54a4090da91ccbf87226b6f514b0d36324f4eea70c55e468e10ffa51b6ab9cb6df71bbed3ead6d966a3dbc76c857bc69849bc530083604aa0d473447da898464975533250a986"}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0x60, 0x1, "6684b144c3c45126adc2f395d8c59f41def010c114f7286d85c8c95e03941dd9bdd629bac3c042714fde78d396abf57556a4832d34eef2e357feda26480f9b705709bf0b79267da2fce8a81f7e4fc8c51d782ff76f80ff5df9e0864b"}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x8}, @NFTA_SET_ELEM_USERDATA={0x8, 0x6, 0x1, 0x0, "8114aa9a"}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}, {0x90, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_DATA={0x78, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VERDICT={0x4c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}]}]}]}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELSET={0x1c, 0xb, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x3}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x540}, 0x1, 0x0, 0x0, 0x4008044}, 0x10) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r7, 0x8040942d, &(0x7f0000002740)) syz_genetlink_get_family_id$ipvs(&(0x7f0000002780), r2) r9 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$IP_VS_SO_SET_DELDEST(r9, 0x0, 0x488, &(0x7f00000027c0)={{0x2e, @multicast2, 0x4e23, 0x4, 'sh\x00', 0x28, 0xa, 0x5}, {@rand_addr=0x64010100, 0x4e21, 0x4, 0x80000000, 0x1, 0x4}}, 0x44) 20.22970493s ago: executing program 0 (id=3314): r0 = socket$inet6(0xa, 0x3, 0xff) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000100)=@filter={'filter\x00', 0xe, 0x4, 0x438, 0xffffffff, 0x0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x0, 0xd0, 0x368, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@ipv6={@empty, @empty}, 0x0, 0x1a0, 0x1c8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x2, 0x0, 'syz0\x00'}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x498) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r1, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000000000000000000210d0000aaa8fa017242ba9380d440fe0000000000002900000043000000", 0xfe60) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000000000000000008000000000", @ANYRES32, @ANYBLOB="0600"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="010000000300000001000000000000000000000000000000000000001c35036be2cf392106"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@bloom_filter={0x1e, 0x9, 0x3, 0x8, 0x4, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x5, 0x5}, 0x50) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f00004f1000/0x3000)=nil, 0x3000, 0x2000006, 0x12, r2, 0x913e0000) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x19, &(0x7f0000000880)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@cb_func={0x18, 0x7, 0x4, 0x0, 0xfffffffffffffffd}, @func={0x85, 0x0, 0x1, 0x0, 0x4}]}, &(0x7f0000000480)='syzkaller\x00', 0x3fffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x34, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x9b) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) r3 = socket$inet6(0xa, 0x1, 0x0) r4 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000440)={0x0, 0x10, &(0x7f0000000400)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000480)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000200), &(0x7f0000000280)=0x4) socket$nl_xfrm(0x10, 0x3, 0x6) r5 = socket(0x10, 0x3, 0x0) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="020200031000000003070000fcdbdf25060009001001000053bb467d04f14562c5d163273ef4a720564f485a5a703fd40c3075e50a5d8c36195600000000000003000600000000000200100000000000000000570000000002000100000000000000060d00000000030005003300000002"], 0x80}, 0x1, 0x7}, 0x800) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_TIMESTAMP(r7, 0x1, 0x1d, &(0x7f0000000040)=0x62, 0x4) bind$inet(r7, &(0x7f0000000400)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r7, 0x0, 0x0, 0x28040041, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000680)={0x7, &(0x7f0000000640)=[{0x7, 0x2, 0xf5, 0xfff}, {0x8, 0x2, 0x3, 0x15}, {0x4, 0xf7, 0x7, 0x19}, {0x2, 0x16, 0x2, 0x2}, {0x198c, 0x4, 0x8, 0x1}, {0x3ff, 0x7f, 0x1, 0xe34e}, {0x5, 0x0, 0x7, 0x7}]}, 0x10) recvmmsg(r7, &(0x7f00000005c0), 0x40000000000026c, 0x0, 0x0) writev(r7, &(0x7f00000019c0)=[{&(0x7f0000000780)="11c673", 0x3}], 0x1) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000040)={0x802, 0x0, 0x0, 0x7}, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="200000005200010003000000000000000a0000000c00", @ANYRES8=r3], 0x20}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000002e40)=ANY=[@ANYBLOB="b4000000000b00007910000000000000db100000410000209500740000000000079c69dc7ded5dbe65bf3e236711b62ac5ea9fca11027d19e93adb605feb92de3145e8ed7ac5b8902070213cdfdc646c4890cdeb50347c32060581172b94c6dd22a2b589b6cbad46ed6ef790bb41931f9a3d4dd127c1b4e49f7468f5e603950c4f67581c92ef8a7e000017d5f1110ed29d3b2aaf153bcf69bebf18262352ba68d39942c3b567e06411d8879622f74cc431dabd332c4c4702e4c3d41bfb54b574e8b17309c7503c3e8ea23e12e0648aa223a1f97a9832f442e8cbeab700df1ebd8465593c000000000000000000000000000000ef429b14459ffd88bee4b9d894ddad0980af5c202ab155f101b2fcbfb5b81b73035fd5a769100b710fb6fbfb2a933a09dd637e660817e77ca962327022fb34017197ff712a35c63cdd0dec053fdbc310f29c6b8be788b559a80135bb7369351b952ade23390151ed6f3eeddde60efffffffff4640be5852e1cef861b861b7b19ea03dfc83f729d02e9e73db24dd5dfb09d4b1bbbd5dd5daa98903d11836af0f64615b0845f264f229f9806862e116612ade616b1769e97549d095b0a4d02801406491d7706aef30028556c3d889418bdb8f9e6fea20b886b348ea41bda7ec127baf9a8bd38da071fd7410dfcbff0945720dc94e04d08892915344f10aef176bb01abb7eb8d087891a0f450e245f9cc6a8ef13af1e319009f33f148e9048a676862151f1efc5f52dd9af89e1b93ea0a50cea5f2106a5d92650fd4d136388b67a904555fe7ae49417dbd20f70b079460211ed603622413f1ff34cb4bcfa2505158a0ddd0562bf9dd64d13ac27e7bcb6cf166433d2a35a050923738cdbad1bc7943caa34fb072b92f46961486903437394e07abb2b4a3f28da808bb69151aa9bd91898218dd2d9ba842ab745c54b767b0f7375132f0838cfec61d50353df11b26ad362cab5fdf394d26ee3406b10e1f2a6802e7bcdb3edbe78980622ab7c83d541a1f5546747db754efbace8a64705a8fe31039b797ffdcab0934179b6b0561767020809625c36fb1c9761ff701cbed8075a7e2d398be9e39cd3fbdd36208185b7652251c203127eefc8f93b6ad99768c375002caba3ffd69f1523a5c6d129451415db38cb502cceef02d01feaa4679ea64fd7aa0f29430054d224b664fce437c65009d46893bbe8d44615901afb8d69ffc4c30c4aa67500c60adb573bd040a05180d0c2a151699fd890ad0f4bbf1e5b1920779897e949339acd9413c72a2814b1780470fe6f58739875af46309147b59830e7646674554265cc5aa43f638d03cd4337d390c4b2ee8f482d6e12561f541c968af000000000000000000000000000000eb1e6f8e5fb66d34a410b309ebb6ef04b484574673b8a118b264a2618b4c135cbcdc467b1c8bdfc0ccffef30db739514ca95e9bb7338b5a6813a213ebecb466867aef266494e3cd2f5c5b93d822135c73550"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x80000000, 0x2, 0x1, 0x2, 0x5}, &(0x7f00000005c0)=0x20) 0s ago: executing program 33 (id=3309): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xb, &(0x7f0000000800)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4b}, [@printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xf3}, {0x85, 0x0, 0x0, 0x2d}}]}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000007c0)={r0}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1a, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f00000002c0)='syzkaller\x00', 0x5, 0xc3, &(0x7f00000000c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x94) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) pipe(&(0x7f0000000300)={0xffffffffffffffff}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000040)={0x2, 0x2383, @loopback}, 0x10) connect$inet(r3, &(0x7f0000000080)={0x2, 0x2383, @loopback}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xf, 0x4, 0x4, 0x10, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0xe, 0x2, &(0x7f0000000500)=ANY=[@ANYBLOB="b70000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000600)={@map=r4, r5, 0x5, 0x0, 0x0, @void, @value=0x0}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r4, &(0x7f0000000340), &(0x7f0000000380)=@tcp=r3}, 0x20) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@bloom_filter={0x1e, 0x4, 0x8, 0xb039, 0xa300, 0xffffffffffffffff, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x2, 0x9}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x6, 0x4, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x6}, [@generic={0xf9, 0x3, 0x1, 0x6, 0xfffffffc}]}, &(0x7f00000001c0)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x9, '\x00', r1, 0x25, r2, 0x8, &(0x7f0000000340)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000000380)={0x1, 0xa, 0x1, 0x10}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000440)=[r4, r6], &(0x7f0000000480)=[{0x5, 0x2, 0x0, 0x1}, {0x0, 0x3, 0xf, 0xa}, {0x1, 0x3, 0xe, 0x6c85e6cb3e225020}, {0x2, 0x3, 0x4, 0xa}], 0x10, 0x721}, 0x94) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000040000000c"], 0x48) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r9, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$inet6_int(r7, 0x29, 0x35, &(0x7f0000000000)=0x3, 0x4) sendto$inet6(r7, 0x0, 0x0, 0x20000004, &(0x7f0000000700)={0xa, 0x2, 0x0, @rand_addr, 0x2}, 0x1c) kernel console output (not intermixed with test programs): invalid length. [ 225.788502][T12592] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1814'. [ 225.789611][T12592] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1814'. [ 225.790158][T12592] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1814'. [ 226.006495][T12611] gtp0: entered promiscuous mode [ 226.006518][T12611] gtp0: entered allmulticast mode [ 226.013680][T12613] syzkaller1: entered promiscuous mode [ 226.013704][T12613] syzkaller1: entered allmulticast mode [ 226.118898][T12616] netlink: 'syz.0.1819': attribute type 10 has an invalid length. [ 226.119133][T12616] veth0_vlan: entered allmulticast mode [ 226.139790][T12616] team0: Device veth0_vlan failed to register rx_handler [ 226.456942][T12631] net_ratelimit: 1 callbacks suppressed [ 226.456965][T12631] openvswitch: netlink: Missing key (keys=40, expected=100) [ 226.574443][T12645] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1829'. [ 226.719892][T12650] netlink: 'syz.0.1831': attribute type 1 has an invalid length. [ 226.719917][T12650] netlink: 'syz.0.1831': attribute type 2 has an invalid length. [ 226.719930][T12650] netlink: 'syz.0.1831': attribute type 3 has an invalid length. [ 226.719942][T12650] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1831'. [ 227.130609][ T5622] Bluetooth: hci1: unexpected event 0x04 length: 11 > 10 [ 227.130635][ T5622] Bluetooth: unknown link type 48 [ 227.130682][ T5622] Bluetooth: hci1: connection err: -111 [ 227.348203][T12695] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 227.505327][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 227.505564][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 227.505776][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 227.505985][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 227.662411][T12704] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 228.199266][T12748] openvswitch: netlink: Unexpected mask (mask=100000090, allowed=100010058) [ 230.625354][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 230.625549][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 230.625723][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 233.745320][ C1] net_ratelimit: 1 callbacks suppressed [ 233.745338][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 233.745471][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 233.745578][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 233.745674][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 236.865294][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 236.865498][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 236.865686][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 236.865861][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 236.866034][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 239.985248][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 239.985384][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 239.985482][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 239.985579][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 239.985675][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 240.225458][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 240.841214][T12790] __nla_validate_parse: 7 callbacks suppressed [ 240.841234][T12790] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1865'. [ 240.841248][T12790] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1865'. [ 240.873102][T12793] validate_nla: 1 callbacks suppressed [ 240.873120][T12793] netlink: 'syz.1.1863': attribute type 21 has an invalid length. [ 240.899328][T12790] macvtap1: entered allmulticast mode [ 240.899351][T12790] dummy0: entered allmulticast mode [ 240.900046][T12790] dummy0: entered promiscuous mode [ 240.972117][T12800] openvswitch: netlink: Missing key (keys=200040, expected=80) [ 240.977841][T12797] netlink: 'syz.2.1868': attribute type 1 has an invalid length. [ 241.056849][T12797] bond7: entered promiscuous mode [ 241.057301][T12797] 8021q: adding VLAN 0 to HW filter on device bond7 [ 241.110382][T12797] bond7: (slave bridge4): making interface the new active one [ 241.110405][T12797] bridge4: entered promiscuous mode [ 241.111432][T12797] bond7: (slave bridge4): Enslaving as an active interface with an up link [ 241.394071][T12821] netlink: 144 bytes leftover after parsing attributes in process `syz.4.1874'. [ 241.481851][ T31] audit: type=1107 audit(1791478573.762:3): pid=12823 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='jã_ º§e­® ï€wå¥G¦Þñk}­K8eÌaýe·J^´X/ "w9ÄŒþSÜdt„¢šOQŠ­µ%³ÎØ.Q¹ð€†X°t]D¼’¤' [ 241.610873][T12832] netlink: 'syz.2.1877': attribute type 8 has an invalid length. [ 241.610894][T12832] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1877'. [ 241.786774][T12846] mac80211_hwsim hwsim21 wlan0: entered promiscuous mode [ 241.951353][T12851] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1880'. [ 241.952157][T12851] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1880'. [ 241.997548][T12854] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.1881'. [ 242.168917][T12863] x_tables: duplicate underflow at hook 2 [ 242.223174][T12863] x_tables: duplicate underflow at hook 2 [ 242.494462][T12875] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1887'. [ 242.494506][T12875] FAULT_INJECTION: forcing a failure. [ 242.494506][T12875] name failslab, interval 1, probability 0, space 0, times 1 [ 242.494555][T12875] CPU: 0 UID: 0 PID: 12875 Comm: syz.1.1887 Not tainted syzkaller #0 PREEMPT(full) [ 242.494578][T12875] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 242.494597][T12875] Call Trace: [ 242.494609][T12875] [ 242.494617][T12875] dump_stack_lvl+0xe8/0x150 [ 242.494660][T12875] should_fail_ex+0x410/0x560 [ 242.494691][T12875] ? __alloc_skb+0x1db/0x7a0 [ 242.494718][T12875] should_failslab+0xa8/0x100 [ 242.494747][T12875] ? __alloc_skb+0x1db/0x7a0 [ 242.494772][T12875] kmem_cache_alloc_node_noprof+0xa1/0x610 [ 242.494794][T12875] ? __alloc_skb+0x18d/0x7a0 [ 242.494822][T12875] ? __alloc_skb+0x1db/0x7a0 [ 242.494855][T12875] __alloc_skb+0x1db/0x7a0 [ 242.494888][T12875] netlink_ack+0x136/0xb30 [ 242.494909][T12875] ? __pfx_genl_rcv_msg+0x10/0x10 [ 242.494957][T12875] netlink_rcv_skb+0x2a4/0x4a0 [ 242.494980][T12875] ? __pfx_genl_rcv_msg+0x10/0x10 [ 242.495005][T12875] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 242.495047][T12875] ? down_read+0x2be/0x330 [ 242.495072][T12875] genl_rcv+0x28/0x40 [ 242.495096][T12875] netlink_unicast+0x7bd/0x940 [ 242.495127][T12875] netlink_sendmsg+0x813/0xb40 [ 242.495159][T12875] ? __pfx_netlink_sendmsg+0x10/0x10 [ 242.495192][T12875] ? apparmor_socket_sendmsg+0x98/0x360 [ 242.495219][T12875] ? __pfx_netlink_sendmsg+0x10/0x10 [ 242.495242][T12875] sock_sendmsg_nosec+0x13a/0x180 [ 242.495269][T12875] ____sys_sendmsg+0x54e/0x850 [ 242.495291][T12875] ? __pfx_____sys_sendmsg+0x10/0x10 [ 242.495319][T12875] ? import_iovec+0x73/0xa0 [ 242.495350][T12875] ___sys_sendmsg+0x2a5/0x360 [ 242.495367][T12875] ? __lock_acquire+0x747/0x2de0 [ 242.495394][T12875] ? __pfx____sys_sendmsg+0x10/0x10 [ 242.495448][T12875] ? __fget_files+0x2a/0x420 [ 242.495476][T12875] ? __fget_files+0x3a2/0x420 [ 242.495515][T12875] __x64_sys_sendmsg+0x1b1/0x290 [ 242.495538][T12875] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 242.495580][T12875] do_syscall_64+0x166/0x520 [ 242.495600][T12875] ? trace_irq_disable+0x3b/0x140 [ 242.495622][T12875] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 242.495642][T12875] ? clear_bhb_loop+0x70/0xc0 [ 242.495667][T12875] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 242.495687][T12875] RIP: 0033:0x7f0f0059e199 [ 242.495714][T12875] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 242.495731][T12875] RSP: 002b:00007f0f01393028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 242.495757][T12875] RAX: ffffffffffffffda RBX: 00007f0f00825fa0 RCX: 00007f0f0059e199 [ 242.495772][T12875] RDX: 0000000000008000 RSI: 0000200000000000 RDI: 0000000000000004 [ 242.495785][T12875] RBP: 00007f0f01393090 R08: 0000000000000000 R09: 0000000000000000 [ 242.495798][T12875] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 242.495809][T12875] R13: 00007f0f00826038 R14: 00007f0f00825fa0 R15: 00007fff6dacd0a8 [ 242.495842][T12875] [ 242.541853][T12872] pim6reg: entered allmulticast mode [ 242.828256][T12879] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 243.002213][T12886] netlink: 'syz.1.1888': attribute type 3 has an invalid length. [ 243.002261][T12886] netlink: 'syz.1.1888': attribute type 3 has an invalid length. [ 243.067306][T12888] netlink: 'syz.4.1892': attribute type 142 has an invalid length. [ 243.105290][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 243.105559][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 243.107079][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 243.181014][T12892] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1893'. [ 243.229663][T12892] bond7: option xmit_hash_policy: invalid value (64) [ 243.239634][T12892] bond7 (unregistering): Released all slaves [ 243.258541][T12899] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1894'. [ 243.435707][T12908] FAULT_INJECTION: forcing a failure. [ 243.435707][T12908] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 243.435740][T12908] CPU: 0 UID: 0 PID: 12908 Comm: syz.0.1898 Not tainted syzkaller #0 PREEMPT(full) [ 243.435762][T12908] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 243.435774][T12908] Call Trace: [ 243.435782][T12908] [ 243.435791][T12908] dump_stack_lvl+0xe8/0x150 [ 243.435824][T12908] should_fail_ex+0x410/0x560 [ 243.435856][T12908] _copy_from_user+0x2d/0xb0 [ 243.435887][T12908] kstrtouint_from_user+0xd6/0x180 [ 243.435915][T12908] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 243.435948][T12908] ? lock_acquire+0x115/0x350 [ 243.435976][T12908] proc_fail_nth_write+0x8e/0x210 [ 243.435999][T12908] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 243.436030][T12908] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 243.436051][T12908] vfs_write+0x296/0xba0 [ 243.436081][T12908] ? __pfx_vfs_write+0x10/0x10 [ 243.436103][T12908] ? __fget_files+0x2a/0x420 [ 243.436137][T12908] ? __fget_files+0x3a2/0x420 [ 243.436165][T12908] ? __fget_files+0x2a/0x420 [ 243.436201][T12908] ksys_write+0x150/0x270 [ 243.436223][T12908] ? __pfx_ksys_write+0x10/0x10 [ 243.436253][T12908] do_syscall_64+0x166/0x520 [ 243.436272][T12908] ? trace_irq_disable+0x3b/0x140 [ 243.436293][T12908] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 243.436313][T12908] ? clear_bhb_loop+0x70/0xc0 [ 243.436338][T12908] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 243.436357][T12908] RIP: 0033:0x7f0857f5e9ce [ 243.436375][T12908] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 243.436391][T12908] RSP: 002b:00007f0858dbffe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 243.436436][T12908] RAX: ffffffffffffffda RBX: 00007f0858dc06c0 RCX: 00007f0857f5e9ce [ 243.436458][T12908] RDX: 0000000000000001 RSI: 00007f0858dc00a0 RDI: 0000000000000003 [ 243.436470][T12908] RBP: 00007f0858dc0090 R08: 0000000000000000 R09: 0000000000000000 [ 243.436482][T12908] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 243.436494][T12908] R13: 00007f0858226038 R14: 00007f0858225fa0 R15: 00007ffe783faae8 [ 243.436528][T12908] [ 243.818493][T12928] netlink: 'syz.0.1905': attribute type 21 has an invalid length. [ 244.164831][T12948] netlink: 'syz.4.1912': attribute type 2 has an invalid length. [ 244.210153][T12948] 8021q: adding VLAN 0 to HW filter on device bond7 [ 244.456705][T12970] tipc: Invalid UDP bearer configuration [ 244.456750][T12970] tipc: Enabling of bearer rejected, failed to enable media [ 245.691051][T13060] netlink: 'syz.0.1943': attribute type 1 has an invalid length. [ 245.869302][T13066] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 245.917853][T13071] __nla_validate_parse: 8 callbacks suppressed [ 245.917873][T13071] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1948'. [ 245.917891][T13071] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1948'. [ 245.917933][T13071] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1948'. [ 245.961975][T13074] net_ratelimit: 2 callbacks suppressed [ 245.961995][T13074] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 246.077874][T13068] mac80211_hwsim hwsim11 wlan1: entered promiscuous mode [ 246.245583][T13087] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1953'. [ 246.771148][T13130] xt_CT: You must specify a L4 protocol and not use inversions on it [ 246.903370][T13136] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1964'. [ 247.090363][T13149] macsec1: entered promiscuous mode [ 247.136754][T13151] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1972'. [ 247.212644][T13154] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1970'. [ 247.213054][T13157] netlink: 'syz.4.1973': attribute type 3 has an invalid length. [ 247.213070][T13157] netlink: 'syz.4.1973': attribute type 2 has an invalid length. [ 247.538790][T13179] netlink: 'syz.1.1979': attribute type 1 has an invalid length. [ 247.538812][T13179] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1979'. [ 247.762489][T13196] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 247.763536][T13196] netlink: 'syz.0.1983': attribute type 1 has an invalid length. [ 247.777167][T13196] netlink: 'syz.0.1983': attribute type 1 has an invalid length. [ 247.919528][T13208] SET target dimension over the limit! [ 248.516511][T13255] netlink: 100 bytes leftover after parsing attributes in process `syz.3.1999'. [ 248.521219][T13251] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1997'. [ 249.224222][T13300] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 249.952158][T13337] bridge0: port 2(batadv1) entered blocking state [ 249.953880][T13337] bridge0: port 2(batadv1) entered disabled state [ 249.954038][T13337] batadv1: entered allmulticast mode [ 249.978340][T13337] batadv1: entered promiscuous mode [ 250.129280][T13352] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 250.208616][T13354] tipc: Enabled bearer , priority 0 [ 250.370455][T13361] syz_tun: entered allmulticast mode [ 250.385289][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 250.385518][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 250.385720][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 250.385905][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 250.386089][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 250.399813][T13359] syz_tun: left allmulticast mode [ 250.436832][ T12] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 250.436849][ T12] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 250.461897][T13365] netlink: set zone limit has 4 unknown bytes [ 250.492711][T13365] 8021q: adding VLAN 0 to HW filter on device bond8 [ 250.497477][ C0] vcan0: j1939_tp_rxtimer: 0xffff88801f776800: rx timeout, send abort [ 250.499167][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805506bc00: rx timeout, send abort [ 250.500852][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88801f776800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 250.501015][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88805506bc00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 251.198760][T13406] net_ratelimit: 1 callbacks suppressed [ 251.198781][T13406] ip_tables: iptables: counters copy to user failed while replacing table [ 251.321700][T13415] __nla_validate_parse: 10 callbacks suppressed [ 251.321722][T13415] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2054'. [ 251.404142][T13419] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2052'. [ 251.667385][T13439] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 251.772091][T13450] netlink: 'syz.0.2063': attribute type 1 has an invalid length. [ 251.805609][T13450] bond5: entered promiscuous mode [ 251.806002][T13450] 8021q: adding VLAN 0 to HW filter on device bond5 [ 251.830965][T13450] ipvlan2: entered allmulticast mode [ 251.830985][T13450] bond5: entered allmulticast mode [ 251.851730][T13450] ipvlan3: entered allmulticast mode [ 251.882039][T13450] bond5: (slave bridge5): making interface the new active one [ 251.882069][T13450] bridge5: entered promiscuous mode [ 251.882355][T13450] bridge5: entered allmulticast mode [ 251.892648][T13450] bond5: (slave bridge5): Enslaving as an active interface with an up link [ 251.897342][T13450] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2063'. [ 251.989849][T13460] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2064'. [ 252.048664][T13460] tipc: Resetting bearer [ 252.051100][T13460] tipc: Resetting bearer [ 252.094739][T11976] ip6_tunnel:  xmit: Local address not yet configured! [ 252.262678][T13473] netlink: 'syz.2.2071': attribute type 30 has an invalid length. [ 252.262703][T13473] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2071'. [ 252.396546][T11976] ip6_tunnel:  xmit: Local address not yet configured! [ 252.667863][T13506] netlink: 'syz.4.2079': attribute type 1 has an invalid length. [ 253.505380][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 253.505641][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 253.647527][T13546] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2084'. [ 253.686982][T13546] 8021q: adding VLAN 0 to HW filter on device bond7 [ 253.690962][T13546] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2084'. [ 253.911156][T13550] ipvlan2: entered allmulticast mode [ 253.911177][T13550] bond7: entered allmulticast mode [ 254.118283][T13566] netlink: 'syz.3.2091': attribute type 1 has an invalid length. [ 254.164870][T13566] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2091'. [ 254.174763][T13566] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2091'. [ 254.222453][T13566] veth7: entered allmulticast mode [ 254.223299][T13570] xt_hashlimit: size too large, truncated to 1048576 [ 254.223500][T13570] xt_hashlimit: max too large, truncated to 1048576 [ 254.223597][T13570] xt_hashlimit: invalid rate [ 254.225610][T13566] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2091'. [ 254.433992][T13587] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 254.434010][T13587] IPv6: NLM_F_CREATE should be set when creating new route [ 254.616363][T13598] tc action pedit offset must be on 32 bit boundaries [ 254.892263][T13609] ip_tables: iptables: counters copy to user failed while replacing table [ 255.017094][T13616] syzkaller1: entered promiscuous mode [ 255.017119][T13616] syzkaller1: entered allmulticast mode [ 255.084963][T13619] netlink: 'syz.1.2104': attribute type 3 has an invalid length. [ 255.229458][T13621] IPv6: NLM_F_REPLACE set, but no existing node found! [ 255.562205][T13635] netlink: Unknown nat attribute (0) [ 255.562241][T13635] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 255.590920][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.598143][T13637] team0: No ports can be present during mode change [ 255.656737][T13635] netlink: 'syz.0.2111': attribute type 1 has an invalid length. [ 255.744954][T13635] bond6: option packets_per_slave: invalid value (18446744073709551615) [ 255.747570][T13635] bond6: option packets_per_slave: allowed values 0 - 65535 [ 255.751367][T13635] bond6 (unregistering): Released all slaves [ 255.878015][T13647] 0ªX¹¦Dö»: renamed from 30ªî{X¹¦ (while UP) [ 256.077907][T13655] vlan2: entered promiscuous mode [ 256.077931][T13655] gretap0: entered promiscuous mode [ 256.276908][T13675] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 256.575996][T13699] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 256.625325][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 256.625547][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 256.625775][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 256.626003][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 256.794874][T13713] netlink: 'syz.3.2136': attribute type 1 has an invalid length. [ 256.853110][T13713] __nla_validate_parse: 12 callbacks suppressed [ 256.853130][T13713] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2136'. [ 256.910654][T13713] bond0: (slave syz_tun): Releasing backup interface [ 256.922590][T13719] 8021q: adding VLAN 0 to HW filter on device macsec2 [ 256.978456][T13720] bridge5: entered promiscuous mode [ 256.984869][T13720] bond9: (slave bridge5): making interface the new active one [ 256.999926][T13720] bond9: (slave bridge5): Enslaving as an active interface with an up link [ 257.135906][T13727] netlink: 'syz.0.2141': attribute type 1 has an invalid length. [ 257.135929][T13727] netlink: 8192 bytes leftover after parsing attributes in process `syz.0.2141'. [ 257.135944][T13727] NCSI netlink: No device for ifindex 0 [ 257.269353][T13732] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2142'. [ 257.293062][T13732] syzkaller0: entered promiscuous mode [ 257.293084][T13732] syzkaller0: entered allmulticast mode [ 257.420921][T13743] netlink: 'syz.0.2146': attribute type 1 has an invalid length. [ 257.579724][T13747] macvlan0: entered promiscuous mode [ 257.579746][T13747] veth1_vlan: entered promiscuous mode [ 257.621972][T13750] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2149'. [ 257.834652][T13759] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2152'. [ 257.869306][T13761] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 258.049947][T13774] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2155'. [ 258.052538][T13774] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2155'. [ 258.128669][T13776] netlink: 3 bytes leftover after parsing attributes in process `syz.2.2155'. [ 258.141812][T13778] netlink: 'syz.4.2156': attribute type 3 has an invalid length. [ 258.703960][T13808] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 258.704458][T13808] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 258.977832][T13825] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2162'. [ 259.429647][T13851] atomic_op ffff8880274a59e0 conn xmit_atomic 0000000000000000 [ 259.549464][T13854] netlink: 'syz.2.2171': attribute type 5 has an invalid length. [ 259.549487][T13854] netlink: 'syz.2.2171': attribute type 9 has an invalid length. [ 259.549500][T13854] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2171'. [ 259.745302][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 259.745530][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 259.946104][T13877] bridge0: port 1(bridge_slave_0) entered disabled state [ 260.234706][T13902] IPVS: set_ctl: invalid protocol: 50 224.0.0.1:20001 [ 260.698926][T13934] xt_cgroup: no path or classid specified [ 260.705505][ C0] ip6_tunnel:  xmit: Local address not yet configured! [ 260.741169][T13939] Bluetooth: hci0: invalid len left 17, exp >= 23 [ 261.043985][T13962] tipc: Failed to remove unknown binding: 66,1,1/0:1869952849/1869952851 [ 261.147780][T13968] block nbd1: NBD_DISCONNECT [ 261.319848][T13960] net_ratelimit: 5 callbacks suppressed [ 261.319867][T13960] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 261.410432][T13976] bridge0: port 1(bridge_slave_0) entered disabled state [ 261.598238][T13987] IPv6: NLM_F_REPLACE set, but no existing node found! [ 262.140318][T14016] __nla_validate_parse: 20 callbacks suppressed [ 262.140338][T14016] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2224'. [ 262.238073][T14021] ip_tables: iptables: counters copy to user failed while replacing table [ 262.461825][T14028] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2229'. [ 262.470793][T14032] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2231'. [ 262.487559][T14031] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 262.638508][T14040] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2234'. [ 262.780618][T14043] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2235'. [ 262.865232][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 262.865468][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 262.865695][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 263.128342][T14060] netlink: 'syz.0.2241': attribute type 1 has an invalid length. [ 263.130371][T14060] netlink: 'syz.0.2241': attribute type 1 has an invalid length. [ 263.131955][T14060] netlink: 'syz.0.2241': attribute type 1 has an invalid length. [ 263.132358][T14060] netlink: 'syz.0.2241': attribute type 1 has an invalid length. [ 263.134035][T14060] netlink: 'syz.0.2241': attribute type 1 has an invalid length. [ 263.145505][T14060] netlink: 'syz.0.2241': attribute type 1 has an invalid length. [ 263.151192][T14060] netlink: 'syz.0.2241': attribute type 1 has an invalid length. [ 263.159593][T14060] netlink: 'syz.0.2241': attribute type 1 has an invalid length. [ 263.169360][T14060] netlink: 'syz.0.2241': attribute type 1 has an invalid length. [ 263.174564][T14060] netlink: 'syz.0.2241': attribute type 1 has an invalid length. [ 263.319604][T14065] IPVS: set_ctl: invalid protocol: 59 255.255.255.255:20004 [ 263.331680][T14065] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2243'. [ 263.639135][T14090] FAULT_INJECTION: forcing a failure. [ 263.639135][T14090] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 263.639171][T14090] CPU: 1 UID: 0 PID: 14090 Comm: syz.2.2251 Not tainted syzkaller #0 PREEMPT(full) [ 263.639217][T14090] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 263.639240][T14090] Call Trace: [ 263.639248][T14090] [ 263.639257][T14090] dump_stack_lvl+0xe8/0x150 [ 263.639289][T14090] should_fail_ex+0x410/0x560 [ 263.639321][T14090] _copy_from_user+0x2d/0xb0 [ 263.639351][T14090] do_sock_getsockopt+0x200/0x7e0 [ 263.639388][T14090] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 263.639442][T14090] ? __fget_files+0x3a2/0x420 [ 263.639471][T14090] ? __fget_files+0x2a/0x420 [ 263.639506][T14090] __x64_sys_getsockopt+0x1a4/0x240 [ 263.639546][T14090] do_syscall_64+0x166/0x520 [ 263.639566][T14090] ? trace_irq_disable+0x3b/0x140 [ 263.639587][T14090] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 263.639607][T14090] ? clear_bhb_loop+0x70/0xc0 [ 263.639631][T14090] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 263.639650][T14090] RIP: 0033:0x7f43e5b9e199 [ 263.639668][T14090] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 263.639685][T14090] RSP: 002b:00007f43e6a5c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 263.639706][T14090] RAX: ffffffffffffffda RBX: 00007f43e5e25fa0 RCX: 00007f43e5b9e199 [ 263.639721][T14090] RDX: 000000000000001a RSI: 0000000000000084 RDI: 0000000000000003 [ 263.639733][T14090] RBP: 00007f43e6a5c090 R08: 00002000000003c0 R09: 0000000000000000 [ 263.639746][T14090] R10: 0000200000000340 R11: 0000000000000246 R12: 0000000000000001 [ 263.639759][T14090] R13: 00007f43e5e26038 R14: 00007f43e5e25fa0 R15: 00007fff9b9a9898 [ 263.639792][T14090] [ 263.857746][T14094] bond6: entered promiscuous mode [ 263.857813][T14094] bond6: entered allmulticast mode [ 263.858198][T14094] 8021q: adding VLAN 0 to HW filter on device bond6 [ 263.859381][T14097] netlink: 256 bytes leftover after parsing attributes in process `syz.2.2253'. [ 264.030834][T14111] syzkaller1: entered promiscuous mode [ 264.030858][T14111] syzkaller1: entered allmulticast mode [ 264.049294][T14111] syzkaller1: left promiscuous mode [ 264.049317][T14111] syzkaller1: left allmulticast mode [ 264.095381][T14117] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2259'. [ 264.120055][T14116] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2259'. [ 264.147116][T14116] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2259'. [ 264.356660][T14133] ip6gre1: entered allmulticast mode [ 264.450457][T14143] FAULT_INJECTION: forcing a failure. [ 264.450457][T14143] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 264.450489][T14143] CPU: 1 UID: 0 PID: 14143 Comm: syz.2.2263 Not tainted syzkaller #0 PREEMPT(full) [ 264.450511][T14143] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 264.450523][T14143] Call Trace: [ 264.450531][T14143] [ 264.450540][T14143] dump_stack_lvl+0xe8/0x150 [ 264.450573][T14143] should_fail_ex+0x410/0x560 [ 264.450604][T14143] _copy_from_user+0x2d/0xb0 [ 264.450633][T14143] sctp_getsockopt_peer_auth_chunks+0xc3/0x5b0 [ 264.450667][T14143] ? __pfx_sctp_getsockopt_peer_auth_chunks+0x10/0x10 [ 264.450694][T14143] ? sctp_getsockopt+0x12f/0xb90 [ 264.450726][T14143] ? __local_bh_enable_ip+0xd6/0x140 [ 264.450757][T14143] sctp_getsockopt+0x848/0xb90 [ 264.450785][T14143] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 264.450810][T14143] do_sock_getsockopt+0x51d/0x7e0 [ 264.450844][T14143] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 264.450890][T14143] ? __fget_files+0x3a2/0x420 [ 264.450918][T14143] ? __fget_files+0x2a/0x420 [ 264.450955][T14143] __x64_sys_getsockopt+0x1a4/0x240 [ 264.450993][T14143] do_syscall_64+0x166/0x520 [ 264.451013][T14143] ? trace_irq_disable+0x3b/0x140 [ 264.451034][T14143] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 264.451055][T14143] ? clear_bhb_loop+0x70/0xc0 [ 264.451078][T14143] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 264.451097][T14143] RIP: 0033:0x7f43e5b9e199 [ 264.451116][T14143] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 264.451133][T14143] RSP: 002b:00007f43e6a5c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 264.451154][T14143] RAX: ffffffffffffffda RBX: 00007f43e5e25fa0 RCX: 00007f43e5b9e199 [ 264.451169][T14143] RDX: 000000000000001a RSI: 0000000000000084 RDI: 0000000000000003 [ 264.451181][T14143] RBP: 00007f43e6a5c090 R08: 00002000000003c0 R09: 0000000000000000 [ 264.451193][T14143] R10: 0000200000000340 R11: 0000000000000246 R12: 0000000000000001 [ 264.451205][T14143] R13: 00007f43e5e26038 R14: 00007f43e5e25fa0 R15: 00007fff9b9a9898 [ 264.451236][T14143] [ 264.691125][T14146] 8021q: VLANs not supported on wg2 [ 264.776830][T14151] bond7: entered promiscuous mode [ 264.778534][T14151] 8021q: adding VLAN 0 to HW filter on device bond7 [ 264.848824][T14154] ip_tables: iptables: counters copy to user failed while replacing table [ 265.328759][T14200] tipc: Started in network mode [ 265.328789][T14200] tipc: Node identity ac14140f, cluster identity 6 [ 265.329042][T14200] tipc: New replicast peer: 255.255.255.255 [ 265.329912][T14200] tipc: Enabled bearer , priority 10 [ 265.619606][T14229] netlink: zone id is out of range [ 265.619622][T14229] netlink: zone id is out of range [ 265.619629][T14229] netlink: zone id is out of range [ 265.823622][T14239] pimreg: entered allmulticast mode [ 265.987149][T14251] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 265.987168][T14251] IPv6: NLM_F_CREATE should be set when creating new route [ 266.134027][T14259] tipc: New replicast peer: 255.255.255.255 [ 266.154188][T14259] tipc: Enabled bearer , priority 10 [ 266.385241][ C1] net_ratelimit: 63 callbacks suppressed [ 266.385262][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 266.385483][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 266.385689][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 266.593099][T11971] tipc: Node number set to 2886997007 [ 266.617345][T14287] geneve3: entered promiscuous mode [ 266.636055][T14284] hsr0: entered allmulticast mode [ 266.656453][T10848] netdevsim netdevsim2 netdevsim3: set [1, 2] type 2 family 0 port 58436 - 0 [ 266.656579][ T12] netdevsim netdevsim2 netdevsim0: set [1, 2] type 2 family 0 port 58436 - 0 [ 266.656719][ T12] netdevsim netdevsim2 netdevsim1: set [1, 2] type 2 family 0 port 58436 - 0 [ 266.656751][ T12] netdevsim netdevsim2 netdevsim2: set [1, 2] type 2 family 0 port 58436 - 0 [ 266.798789][T14297] nbd: nbd64 already in use [ 267.122324][T14278] udevd[14278]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 267.244518][T14319] __nla_validate_parse: 46 callbacks suppressed [ 267.244539][T14319] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2310'. [ 267.299615][T14326] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2312'. [ 267.862877][T14369] bridge0: port 3(dummy0) entered blocking state [ 267.863013][T14369] bridge0: port 3(dummy0) entered disabled state [ 267.863126][T14369] dummy0: entered allmulticast mode [ 267.864371][T14369] dummy0: entered promiscuous mode [ 267.949444][T14372] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2325'. [ 267.991926][T14375] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2326'. [ 268.085439][T14379] openvswitch: netlink: Invalid VLAN frame [ 268.154258][T14386] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2331'. [ 268.227325][T14390] vcan0: tx drop: invalid sa for name 0x0000000000000003 [ 268.310753][T14392] sch_tbf: burst 674 is lower than device syzkaller0 mtu (1514) ! [ 268.311228][T14392] syzkaller0: entered promiscuous mode [ 268.311246][T14392] syzkaller0: entered allmulticast mode [ 268.392233][T14398] validate_nla: 30 callbacks suppressed [ 268.392253][T14398] netlink: 'syz.1.2334': attribute type 10 has an invalid length. [ 268.409362][T14396] bond9: Unable to set up delay as MII monitoring is disabled [ 268.410451][T14396] bond9 (unregistering): Released all slaves [ 268.453186][T14398] dummy0: left allmulticast mode [ 268.454060][T14398] dummy0: left promiscuous mode [ 268.454285][T14398] bridge0: port 3(dummy0) entered disabled state [ 268.499823][T14398] team0: Port device dummy0 added [ 268.510509][T14401] netlink: 'syz.4.2337': attribute type 1 has an invalid length. [ 268.510529][T14401] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2337'. [ 268.552390][T14401] netlink: 'syz.4.2337': attribute type 1 has an invalid length. [ 268.552410][T14401] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2337'. [ 268.688806][T14415] netlink: 'syz.0.2340': attribute type 1 has an invalid length. [ 268.748211][T14421] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2340'. [ 268.757256][T14415] 8021q: adding VLAN 0 to HW filter on device bond8 [ 268.805720][T14425] netlink: 180 bytes leftover after parsing attributes in process `syz.2.2341'. [ 268.837196][T14415] bond8: (slave bridge7): making interface the new active one [ 268.838832][T14415] bond8: (slave bridge7): Enslaving as an active interface with an up link [ 268.907886][T14427] netlink: 160 bytes leftover after parsing attributes in process `syz.4.2343'. [ 268.907917][T14427] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 269.212558][T14446] bridge0: port 1(veth0) entered blocking state [ 269.213268][T14446] bridge0: port 1(veth0) entered disabled state [ 269.213439][T14446] veth0: entered allmulticast mode [ 269.216263][T14446] veth0: entered promiscuous mode [ 269.216799][T14446] bridge0: port 1(veth0) entered blocking state [ 269.216990][T14446] bridge0: port 1(veth0) entered forwarding state [ 269.251439][T14442] syzkaller1: entered promiscuous mode [ 269.251460][T14442] syzkaller1: entered allmulticast mode [ 269.263511][T14448] xt_CT: You must specify a L4 protocol and not use inversions on it [ 269.462553][T14460] tun0: tun_chr_ioctl cmd 1074025673 [ 269.462701][T14460] tun0: tun_chr_ioctl cmd 1074025675 [ 269.462714][T14460] tun0: persist disabled [ 269.706370][T14483] openvswitch: netlink: Tunnel attr 68 out of range max 16 [ 269.748504][ T12] wlan1: Trigger new scan to find an IBSS to join [ 269.798095][T14485] netlink: 'syz.1.2360': attribute type 10 has an invalid length. [ 270.087554][T14510] 8021q: adding VLAN 0 to HW filter on device bond9 [ 270.091319][T14510] veth0_to_bond: default FDB implementation only supports local addresses [ 270.225207][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 270.225422][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 270.746110][T14558] IPVS: set_ctl: invalid protocol: 98 127.0.0.1:20002 [ 271.139378][ T49] IPVS: starting estimator thread 0... [ 271.225095][T14588] IPVS: using max 27 ests per chain, 64800 per kthread [ 271.230260][T14590] openvswitch: netlink: Encap mask attribute is set for non-VLAN frame. [ 271.249940][T14592] IPv6: addrconf: prefix option has invalid lifetime [ 271.379938][T14601] veth9: entered allmulticast mode [ 272.081566][ T52] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 272.094450][ T52] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 272.103111][ T5628] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 272.116413][ T5628] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 272.117080][ T5628] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 272.353977][T14668] __nla_validate_parse: 15 callbacks suppressed [ 272.353999][T14668] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2415'. [ 272.380565][T14668] bridge0: port 1(veth0) entered disabled state [ 272.418652][T14675] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2417'. [ 272.418681][T14675] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2417'. [ 272.483723][T14667] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2414'. [ 272.543550][T14667] bond7: option xmit_hash_policy: invalid value (64) [ 272.555214][T14667] bond7 (unregistering): Released all slaves [ 272.602769][T14680] net_ratelimit: 1 callbacks suppressed [ 272.602789][T14680] netlink: NAT attributes may be specified only when CT COMMIT flag is also specified. [ 272.602816][T14680] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 272.648935][T14686] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2419'. [ 272.648959][T14686] nbd: illegal input index 65508 [ 272.706450][T10840] wlan1: Trigger new scan to find an IBSS to join [ 272.830861][T14704] x_tables: duplicate underflow at hook 1 [ 272.831712][T14706] xt_TPROXY: Can be used only with -p tcp or -p udp [ 273.106970][T14719] sctp: [Deprecated]: syz.1.2428 (pid 14719) Use of struct sctp_assoc_value in delayed_ack socket option. [ 273.106970][T14719] Use struct sctp_sack_info instead [ 273.108389][T14719] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2428'. [ 273.155696][T14719] team0: Port device dummy0 removed [ 273.266735][T14721] 8021q: adding VLAN 0 to HW filter on device team0 [ 273.320277][T14721] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 273.322847][T14721] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 273.365853][T14721] netlink: 'syz.4.2429': attribute type 1 has an invalid length. [ 273.369986][T14720] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 273.622272][T10840] wlan1: Creating new IBSS network, BSSID 02:26:97:df:52:d1 [ 273.890961][T14746] syzkaller1: entered promiscuous mode [ 273.890984][T14746] syzkaller1: entered allmulticast mode [ 273.893455][T14759] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2435'. [ 273.944479][T14759] netlink: 'syz.2.2435': attribute type 11 has an invalid length. [ 273.944500][T14759] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2435'. [ 274.009213][T14651] bridge0: port 1(bridge_slave_0) entered blocking state [ 274.009393][T14651] bridge0: port 1(bridge_slave_0) entered disabled state [ 274.009525][T14651] bridge_slave_0: entered allmulticast mode [ 274.011285][T14651] bridge_slave_0: entered promiscuous mode [ 274.065232][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 274.065487][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 274.119024][T14651] bridge0: port 2(bridge_slave_1) entered blocking state [ 274.119083][T14651] bridge0: port 2(bridge_slave_1) entered disabled state [ 274.119183][T14651] bridge_slave_1: entered allmulticast mode [ 274.120250][T14651] bridge_slave_1: entered promiscuous mode [ 274.145546][ T5628] Bluetooth: hci5: command tx timeout [ 274.198605][T14775] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2439'. [ 274.264390][T14651] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 274.284070][T14651] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 274.407747][T14787] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2444'. [ 274.489844][T14651] team0: Port device team_slave_0 added [ 274.499175][T14651] team0: Port device team_slave_1 added [ 274.619518][T14651] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 274.632349][T14651] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 274.632382][T14651] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 274.649349][T14651] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 274.649364][T14651] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 274.649392][T14651] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 274.793657][T14651] hsr_slave_0: entered promiscuous mode [ 274.794608][T14651] hsr_slave_1: entered promiscuous mode [ 274.806931][T14651] debugfs: 'hsr0' already exists in 'hsr' [ 274.806953][T14651] Cannot create hsr debugfs directory [ 274.857232][ T49] tipc: Subscription rejected, illegal request [ 275.146154][T14820] netlink: 'syz.4.2453': attribute type 7 has an invalid length. [ 275.146176][T14820] netlink: 'syz.4.2453': attribute type 8 has an invalid length. [ 275.291114][T14831] sctp: [Deprecated]: syz.0.2456 (pid 14831) Use of struct sctp_assoc_value in delayed_ack socket option. [ 275.291114][T14831] Use struct sctp_sack_info instead [ 276.225835][ T5628] Bluetooth: hci5: command tx timeout [ 277.840009][T14805] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 277.880638][T14651] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 277.921595][T14651] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 277.922551][T14651] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 277.952292][T14651] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 277.953734][T14651] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 277.982904][T14651] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 277.984215][T14651] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 278.019183][T14833] __nla_validate_parse: 5 callbacks suppressed [ 278.019203][T14833] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2457'. [ 278.021912][T14651] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 278.054841][T14833] netlink: 9 bytes leftover after parsing attributes in process `syz.4.2457'. [ 278.070871][T14833] 0·: renamed from hsr0 (while UP) [ 278.081583][T14833] 0·: entered allmulticast mode [ 278.081606][T14833] hsr_slave_0: entered allmulticast mode [ 278.081623][T14833] hsr_slave_1: entered allmulticast mode [ 278.082117][T14833] A link change request failed with some changes committed already. Interface c0· may have been left with an inconsistent configuration, please check. [ 278.126703][T14833] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2457'. [ 278.130722][T14833] netlink: 'syz.4.2457': attribute type 7 has an invalid length. [ 278.130741][T14833] netlink: 'syz.4.2457': attribute type 8 has an invalid length. [ 278.168188][T14847] netlink: 'syz.2.2461': attribute type 32 has an invalid length. [ 278.168211][T14847] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2461'. [ 278.210389][T14847] bond9: Setting coupled_control to off (0) [ 278.305346][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 278.305579][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 278.305765][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 278.305920][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 278.308570][ T5628] Bluetooth: hci5: command tx timeout [ 278.372629][T14651] 8021q: adding VLAN 0 to HW filter on device bond0 [ 278.397664][T14857] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2464'. [ 278.411582][T14863] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode [ 278.411607][T14863] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode [ 278.417342][T14858] syzkaller1: entered promiscuous mode [ 278.417363][T14858] syzkaller1: entered allmulticast mode [ 278.472092][T14868] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2464'. [ 278.619311][T14876] Cannot find set identified by id 4 to match [ 278.689229][T14651] 8021q: adding VLAN 0 to HW filter on device team0 [ 278.702657][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 278.702756][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 278.749100][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 278.749199][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 278.931792][T14885] tipc: Enabling of bearer rejected, failed to enable media [ 278.966192][T14883] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 279.122475][T14893] netlink: 'syz.4.2475': attribute type 17 has an invalid length. [ 279.122500][T14893] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2475'. [ 279.122527][T14893] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2475'. [ 279.160413][T14895] openvswitch: netlink: Key type 52 is out of range max 32 [ 279.174074][T14893] erspan0: entered promiscuous mode [ 279.182316][T14893] erspan0: left promiscuous mode [ 279.214177][T14898] openvswitch: netlink: Message has 8 unknown bytes. [ 279.364628][T14906] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2479'. [ 279.377454][T14904] openvswitch: netlink: Missing key (keys=c0, expected=1100) [ 279.514660][T14903] tipc: Enabling of bearer rejected, media not registered [ 279.552935][T14921] xt_cgroup: invalid path, errno=-2 [ 279.553174][T14923] xt_cgroup: invalid path, errno=-2 [ 279.793905][T14651] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 279.910300][T14940] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2487'. [ 279.958211][T14943] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 280.341245][T14651] veth0_vlan: entered promiscuous mode [ 280.351059][T14969] IPVS: set_ctl: invalid protocol: 47 224.0.0.1:20000 [ 280.374883][T14651] veth1_vlan: entered promiscuous mode [ 280.395308][ T5628] Bluetooth: hci5: command tx timeout [ 280.455427][T14651] veth0_macvtap: entered promiscuous mode [ 280.464781][T14651] veth1_macvtap: entered promiscuous mode [ 280.502722][T14651] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 280.521282][T14651] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 280.580228][ T12] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.582130][ T100] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.615297][T10834] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.615868][T10834] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.636698][T14980] netlink: 'syz.0.2497': attribute type 1 has an invalid length. [ 280.636722][T14980] netlink: 'syz.0.2497': attribute type 1 has an invalid length. [ 280.833632][T10840] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 280.833654][T10840] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 280.991846][T10840] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 280.991869][T10840] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 281.097211][T15010] team0: Port device vxcan1 removed [ 281.231906][T15013] bond0 (unregistering): Released all slaves [ 281.274741][T15018] gretap1: entered promiscuous mode [ 281.274766][T15018] gretap1: entered allmulticast mode [ 281.914381][T15061] netlink: 'syz.4.2515': attribute type 1 has an invalid length. [ 281.914404][T15061] netlink: 'syz.4.2515': attribute type 3 has an invalid length. [ 281.961502][T15062] bridge_slave_0: left allmulticast mode [ 281.961530][T15062] bridge_slave_0: left promiscuous mode [ 281.963955][T15062] bridge0: port 1(bridge_slave_0) entered disabled state [ 282.017698][T15062] bridge_slave_1: left allmulticast mode [ 282.017724][T15062] bridge_slave_1: left promiscuous mode [ 282.017930][T15062] bridge0: port 2(bridge_slave_1) entered disabled state [ 282.049754][T15062] bond0: (slave bond_slave_0): Releasing backup interface [ 282.054846][T15062] bond0: (slave bond_slave_1): Releasing backup interface [ 282.076632][T15062] team0: Port device team_slave_0 removed [ 282.079743][T15062] team0: Port device team_slave_1 removed [ 282.080258][T15062] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 282.080279][T15062] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 282.081282][T15062] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 282.081295][T15062] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 282.146380][T15068] team0: Port device xfrm0 added [ 282.173127][T15073] tipc: Started in network mode [ 282.173157][T15073] tipc: Node identity 92d26f94120c, cluster identity 4711 [ 282.187858][T15073] tipc: Enabled bearer , priority 0 [ 282.733684][T15115] 8021q: adding VLAN 0 to HW filter on device bond1 [ 282.746660][T15116] tunl0: entered promiscuous mode [ 282.748903][T15116] netlink: 'syz.5.2532': attribute type 3 has an invalid length. [ 282.780234][T15119] ip6erspan0 speed is unknown, defaulting to 1000 [ 282.867753][T15119] ip6erspan0 speed is unknown, defaulting to 1000 [ 282.914827][T15119] ip6erspan0 speed is unknown, defaulting to 1000 [ 283.290527][T15140] __nla_validate_parse: 17 callbacks suppressed [ 283.290548][T15140] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2541'. [ 283.290568][T15140] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2541'. [ 283.290583][T15140] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2541'. [ 283.295706][ T5798] tipc: Node number set to 2162061204 [ 283.298939][T15140] netlink: 'syz.1.2541': attribute type 29 has an invalid length. [ 283.423097][T15119] infiniband syz2: set down [ 283.423122][T15119] infiniband syz2: added ip6erspan0 [ 283.465470][ T5798] ip6erspan0 speed is unknown, defaulting to 1000 [ 283.470420][T15119] smbdirect: ib_dev[syz2]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 283.470459][T15119] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 283.470500][T15119] smbdirect: ib_dev[syz2]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 283.491009][T15146] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2542'. [ 283.510700][T15146] netlink: 176 bytes leftover after parsing attributes in process `syz.0.2542'. [ 283.510725][T15146] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2542'. [ 283.579796][T15119] RDS/IB: syz2: added [ 283.580243][T15119] smc: adding ib device syz2 with port count 1 [ 283.580367][T15119] smc: ib device syz2 port 1 has no pnetid [ 283.584730][ T5798] ip6erspan0 speed is unknown, defaulting to 1000 [ 283.611903][T15119] ip6erspan0 speed is unknown, defaulting to 1000 [ 283.763389][T15152] ip6gre1: entered allmulticast mode [ 283.875887][T15156] bond10: option min_links: invalid value (18446744073709551614) [ 283.875911][T15156] bond10: option min_links: allowed values 0 - 2147483647 [ 283.879238][T15156] bond10 (unregistering): Released all slaves [ 284.072899][T15161] bond10: option min_links: invalid value (18446744073709551614) [ 284.072931][T15161] bond10: option min_links: allowed values 0 - 2147483647 [ 284.077690][T15161] bond10 (unregistering): Released all slaves [ 284.145207][ C0] net_ratelimit: 4 callbacks suppressed [ 284.145227][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 284.145477][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 284.145687][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 284.189663][T15119] ip6erspan0 speed is unknown, defaulting to 1000 [ 284.194689][T15155] syzkaller0: entered promiscuous mode [ 284.194710][T15155] syzkaller0: entered allmulticast mode [ 284.316384][T15179] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2551'. [ 284.316407][T15179] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2551'. [ 284.607326][T15119] ip6erspan0 speed is unknown, defaulting to 1000 [ 284.783588][T15211] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2557'. [ 284.860999][T15214] netlink: 144 bytes leftover after parsing attributes in process `syz.2.2561'. [ 284.904440][T15119] ip6erspan0 speed is unknown, defaulting to 1000 [ 284.983902][T15218] openvswitch: netlink: Missing key (keys=c0, expected=40300) [ 285.169170][T15119] ip6erspan0 speed is unknown, defaulting to 1000 [ 285.419269][T15119] ip6erspan0 speed is unknown, defaulting to 1000 [ 285.841894][T15257] syzkaller1: entered promiscuous mode [ 285.841917][T15257] syzkaller1: entered allmulticast mode [ 286.082650][T15266] bond0 (unregistering): Released all slaves [ 286.785781][ T5622] Bluetooth: hci5: command 0x0405 tx timeout [ 287.100033][T15345] tipc: Enabling of bearer rejected, media not registered [ 288.727767][T15447] __nla_validate_parse: 22 callbacks suppressed [ 288.727786][T15447] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2625'. [ 288.849380][T15447] ip_tables: iptables: counters copy to user failed while replacing table [ 288.861719][T15448] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2624'. [ 288.863885][T15459] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2623'. [ 289.475288][T15447] ip_tables: iptables: counters copy to user failed while replacing table [ 289.806721][T15490] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 289.808808][T15490] netlink: 256 bytes leftover after parsing attributes in process `syz.1.2633'. [ 290.363986][ T5275] veth0_vlan: left promiscuous mode [ 290.380504][T15522] netlink: 'syz.5.2642': attribute type 10 has an invalid length. [ 290.421343][T15522] team0: Device hsr0 is of different type [ 290.428034][T15538] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2645'. [ 290.456586][ T5798] veth0_vlan: entered promiscuous mode [ 290.636370][T15546] netlink: 4552 bytes leftover after parsing attributes in process `syz.2.2648'. [ 290.636460][T15546] netlink: 4552 bytes leftover after parsing attributes in process `syz.2.2648'. [ 290.693962][T15546] netlink: 'syz.2.2648': attribute type 1 has an invalid length. [ 290.693984][T15546] netlink: 500 bytes leftover after parsing attributes in process `syz.2.2648'. [ 290.700885][T15546] netlink: 'syz.2.2648': attribute type 2 has an invalid length. [ 290.704708][T15546] netlink: 'syz.2.2648': attribute type 2 has an invalid length. [ 290.704726][T15546] netlink: 67 bytes leftover after parsing attributes in process `syz.2.2648'. [ 291.033941][T15576] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2654'. [ 291.355244][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 291.355440][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 292.235254][T15588] syzkaller0: left promiscuous mode [ 292.236172][T15588] syzkaller0: left allmulticast mode [ 292.535095][T15637] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 292.537683][T15637] gretap1: entered promiscuous mode [ 292.537702][T15637] gretap1: entered allmulticast mode [ 292.809087][T15660] mac80211_hwsim hwsim3 syzkaller0: left promiscuous mode [ 292.809112][T15660] mac80211_hwsim hwsim3 syzkaller0: left allmulticast mode [ 292.854423][T15656] netlink: Unknown conntrack attr (type=205, max=9) [ 292.890375][T15667] netlink: ct family unspecified [ 293.542752][T15698] netlink: 'syz.1.2678': attribute type 83 has an invalid length. [ 293.800130][T15719] tipc: Enabled bearer , priority 10 [ 293.812175][T15721] openvswitch: netlink: Missing key (keys=c0, expected=480) [ 293.894545][T15730] __nla_validate_parse: 5 callbacks suppressed [ 293.894564][T15730] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2688'. [ 293.913907][T15729] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2688'. [ 294.058786][T15734] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2692'. [ 294.058818][T15734] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2692'. [ 294.412844][T15768] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2696'. [ 294.474148][T15770] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2699'. [ 294.507718][T10833] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 294.507930][T10833] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 294.536513][T11976] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 294.545231][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 294.545452][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 294.709209][T15789] ip_tables: iptables: counters copy to user failed while replacing table [ 294.738026][T15789] team0: Device gtp1 is up. Set it down before adding it as a team port [ 294.779398][T15792] netlink: 14 bytes leftover after parsing attributes in process `syz.5.2706'. [ 294.897678][T15800] netlink: 84 bytes leftover after parsing attributes in process `syz.4.2709'. [ 295.075232][T15804] netlink: 'syz.4.2711': attribute type 1 has an invalid length. [ 295.148345][T15809] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 295.266853][T11976] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 295.350237][T15814] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2716'. [ 295.363041][T15814] netlink: 224 bytes leftover after parsing attributes in process `syz.5.2716'. [ 295.505436][T11976] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 295.959410][T15858] Bluetooth: hci0: load_link_keys: too big key_count value 5120 [ 296.169408][T15881] netlink: 'syz.2.2737': attribute type 1 has an invalid length. [ 296.169790][T15880] netlink: 'syz.2.2737': attribute type 1 has an invalid length. [ 296.358336][T15899] syzkaller0: entered promiscuous mode [ 296.358361][T15899] syzkaller0: entered allmulticast mode [ 296.470105][T15899] bridge6: entered allmulticast mode [ 297.540155][T15946] netlink: 'syz.4.2755': attribute type 32 has an invalid length. [ 297.581530][T15946] bond0: option coupled_control: invalid value (192) [ 297.583943][T15946] bond0 (unregistering): Released all slaves [ 297.596530][T15949] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 297.745475][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 297.745725][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 297.866677][T15958] 8021q: VLANs not supported on lo [ 298.200288][T15982] ip6erspan0 speed is unknown, defaulting to 1000 [ 298.403324][T15997] netlink: 'syz.0.2774': attribute type 10 has an invalid length. [ 298.465466][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 298.936144][T16021] __nla_validate_parse: 16 callbacks suppressed [ 298.936166][T16021] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2782'. [ 298.990762][T16026] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2784'. [ 298.991231][T16026] vcan0: tx address claim with different name [ 299.332036][T16033] IPVS: set_ctl: invalid protocol: 4 172.30.1.3:20000 [ 299.334154][T16035] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.2785'. [ 299.360560][T16038] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 299.390738][T16047] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.2785'. [ 299.446410][T16041] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2789'. [ 299.484269][ T5628] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 299.496823][ T5628] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 299.501514][ T5628] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 299.502383][ T5628] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 299.502971][ T5628] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 299.702097][T16061] netlink: 244 bytes leftover after parsing attributes in process `syz.1.2790'. [ 299.832789][T16060] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2790'. [ 300.263219][T16078] netlink: 'syz.0.2792': attribute type 9 has an invalid length. [ 300.383335][T16082] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2793'. [ 300.401437][T16082] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2793'. [ 300.436630][T16082] netlink: Conntrack attr has 1 unknown bytes [ 300.436664][T16082] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 300.468064][T16093] netlink: 56 bytes leftover after parsing attributes in process `syz.5.2795'. [ 300.508459][T16089] netlink: Conntrack attr has 1 unknown bytes [ 300.508492][T16089] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 300.672094][T16052] ip6erspan0 speed is unknown, defaulting to 1000 [ 300.819305][T16107] netlink: Conntrack attr has 1 unknown bytes [ 300.819340][T16107] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 300.831726][T16115] openvswitch: netlink: Missing key (keys=c0, expected=20080) [ 301.131750][T16119] netlink: 'syz.1.2800': attribute type 1 has an invalid length. [ 301.551928][T16052] bridge0: port 1(bridge_slave_0) entered blocking state [ 301.552071][T16052] bridge0: port 1(bridge_slave_0) entered disabled state [ 301.552725][T16052] bridge_slave_0: entered allmulticast mode [ 301.556219][T16052] bridge_slave_0: entered promiscuous mode [ 301.560503][T16052] bridge0: port 2(bridge_slave_1) entered blocking state [ 301.562178][T16052] bridge0: port 2(bridge_slave_1) entered disabled state [ 301.562299][T16052] bridge_slave_1: entered allmulticast mode [ 301.563874][T16052] bridge_slave_1: entered promiscuous mode [ 301.596932][ T5622] Bluetooth: hci6: command tx timeout [ 301.691877][T16052] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 301.697887][T16052] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 301.768330][T16052] team0: Port device team_slave_0 added [ 301.774190][T16052] team0: Port device team_slave_1 added [ 301.850283][T16052] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 301.850301][T16052] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 301.850325][T16052] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 301.851673][T16052] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 301.851687][T16052] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 301.851712][T16052] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 301.928794][T16174] ip_tables: iptables: counters copy to user failed while replacing table [ 302.005051][T16052] hsr_slave_0: entered promiscuous mode [ 302.006052][T16052] hsr_slave_1: entered promiscuous mode [ 302.006878][T16052] debugfs: 'hsr0' already exists in 'hsr' [ 302.006897][T16052] Cannot create hsr debugfs directory [ 302.011041][T16176] ieee802154 phy1 wpan1: encryption failed: -22 [ 302.429310][T16052] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 302.429347][T16052] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.516055][T16192] syzkaller0: entered promiscuous mode [ 302.516077][T16192] syzkaller0: entered allmulticast mode [ 302.823737][T16052] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 302.823774][T16052] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.875252][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 302.875494][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 303.049665][T16052] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 303.049700][T16052] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.211450][T16052] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 303.211486][T16052] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.651769][ T155] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 303.675906][ T5622] Bluetooth: hci6: command tx timeout [ 303.706116][T16052] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 303.720366][T16052] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 303.721255][T16052] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 303.752081][T16052] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 303.786829][T16052] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 303.803800][T16052] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 303.804630][T16052] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 303.849076][T16052] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 304.102273][T16274] bond7: Removing last ns target with arp_interval on [ 304.328440][T16289] netlink: 'syz.0.2837': attribute type 1 has an invalid length. [ 304.328619][T16052] 8021q: adding VLAN 0 to HW filter on device bond0 [ 304.492121][T16289] bond10: entered promiscuous mode [ 304.494527][T16289] 8021q: adding VLAN 0 to HW filter on device bond10 [ 304.565981][T16289] __nla_validate_parse: 10 callbacks suppressed [ 304.566001][T16289] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2837'. [ 304.568719][T16299] bond10: (slave bridge9): making interface the new active one [ 304.568740][T16299] bridge9: entered promiscuous mode [ 304.570277][T16299] bond10: (slave bridge9): Enslaving as an active interface with an up link [ 304.678261][T16052] 8021q: adding VLAN 0 to HW filter on device team0 [ 304.720101][T15603] bridge0: port 1(bridge_slave_0) entered blocking state [ 304.720202][T15603] bridge0: port 1(bridge_slave_0) entered forwarding state [ 304.769896][T16309] x_tables: unsorted entry at hook 3 [ 304.772245][T16309] xt_NFQUEUE: number of total queues is 0 [ 304.811090][T16313] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2842'. [ 304.828009][ T155] bridge0: port 2(bridge_slave_1) entered blocking state [ 304.828112][ T155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 304.955069][T16320] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2842'. [ 305.050707][T16318] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2844'. [ 305.146093][T16318] syzkaller1: entered promiscuous mode [ 305.146117][T16318] syzkaller1: entered allmulticast mode [ 305.695299][T16367] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2851'. [ 305.745915][ T5622] Bluetooth: hci6: command tx timeout [ 306.076999][T16389] bond0 (unregistering): Released all slaves [ 306.112783][T16387] IPVS: set_ctl: invalid protocol: 43 224.0.0.1:20003 [ 306.113135][T16397] IPVS: set_ctl: invalid protocol: 43 224.0.0.1:20003 [ 306.132333][T16387] IPVS: set_ctl: invalid protocol: 58 224.0.0.2:21 [ 306.133657][T16389] IPVS: set_ctl: invalid protocol: 58 224.0.0.2:21 [ 306.145256][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 306.250385][T16401] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2863'. [ 306.323333][T16052] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 306.384122][T16409] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2862'. [ 306.393266][T16409] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2862'. [ 306.477421][T16420] sock: sock_timestamping_bind_phc: sock not bind to device [ 306.478071][T16420] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2864'. [ 306.654153][T16429] netlink: 'syz.2.2867': attribute type 8 has an invalid length. [ 306.654656][T16428] netlink: 'syz.2.2867': attribute type 8 has an invalid length. [ 306.685162][T16430] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2867'. [ 307.162143][T16052] veth0_vlan: entered promiscuous mode [ 307.197729][T16052] veth1_vlan: entered promiscuous mode [ 307.221856][T16467] netlink: 'syz.2.2875': attribute type 9 has an invalid length. [ 307.236053][T16473] netlink: 'syz.2.2875': attribute type 9 has an invalid length. [ 307.287878][T16052] veth0_macvtap: entered promiscuous mode [ 307.304786][T16052] veth1_macvtap: entered promiscuous mode [ 307.374569][T16052] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 307.416774][T16052] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 307.496781][T15606] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.497645][T15606] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.497684][T15606] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.497718][T15606] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.792080][T15602] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 307.792102][T15602] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 307.826073][ T5622] Bluetooth: hci6: command tx timeout [ 307.879389][T15602] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 307.879411][T15602] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 308.281302][ T5628] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 308.284172][ T5628] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 308.299903][ T5628] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 308.319466][ T5628] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 308.323578][ T5628] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 308.625186][ C0] net_ratelimit: 6 callbacks suppressed [ 308.625207][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 308.625418][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 308.625680][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 309.202955][T16516] geneve2: entered allmulticast mode [ 310.272737][T16543] netlink: 'syz.5.2894': attribute type 32 has an invalid length. [ 310.272758][T16543] __nla_validate_parse: 9 callbacks suppressed [ 310.272769][T16543] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2894'. [ 310.390902][ T5628] Bluetooth: hci4: command tx timeout [ 310.431298][T16543] bond2: option coupled_control: invalid value (192) [ 310.448707][T16543] bond2 (unregistering): Released all slaves [ 310.861144][T16571] x_tables: duplicate underflow at hook 1 [ 310.998056][T16575] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2903'. [ 311.106893][T16515] ip6erspan0 speed is unknown, defaulting to 1000 [ 311.189190][T16585] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2901'. [ 311.189220][T16585] netlink: 'syz.1.2901': attribute type 1 has an invalid length. [ 311.189234][T16585] netlink: 'syz.1.2901': attribute type 2 has an invalid length. [ 311.303852][T16581] xt_CT: You must specify a L4 protocol and not use inversions on it [ 311.580927][T16601] netlink: 'syz.1.2908': attribute type 30 has an invalid length. [ 311.680184][T16610] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2910'. [ 311.687850][T16601] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 312.180118][T16644] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2917'. [ 312.237745][T16648] netlink: 'syz.4.2917': attribute type 32 has an invalid length. [ 312.237767][T16648] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2917'. [ 312.373131][T16653] block nbd0: not configured, cannot reconfigure [ 312.382369][T16653] xt_TCPMSS: Only works on TCP SYN packets [ 312.466135][ T5628] Bluetooth: hci4: command tx timeout [ 312.517634][T16645] bond2: entered promiscuous mode [ 312.517657][T16645] bond2: entered allmulticast mode [ 312.559061][T16648] bond3: option coupled_control: invalid value (68) [ 312.561854][T16648] bond3 (unregistering): Released all slaves [ 312.650374][T16648] netlink: 'syz.4.2917': attribute type 32 has an invalid length. [ 312.650397][T16648] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2917'. [ 312.728894][T16648] bond3: option coupled_control: invalid value (68) [ 312.730634][T16648] bond3 (unregistering): Released all slaves [ 312.773919][T16675] netlink: 'syz.1.2922': attribute type 1 has an invalid length. [ 312.778059][T16648] netlink: 'syz.4.2917': attribute type 32 has an invalid length. [ 312.778078][T16648] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2917'. [ 312.787573][T16515] bridge0: port 1(bridge_slave_0) entered blocking state [ 312.787739][T16515] bridge0: port 1(bridge_slave_0) entered disabled state [ 312.787857][T16515] bridge_slave_0: entered allmulticast mode [ 312.789534][T16515] bridge_slave_0: entered promiscuous mode [ 312.878298][T16675] 8021q: adding VLAN 0 to HW filter on device bond8 [ 312.900634][T16648] bond3: option coupled_control: invalid value (68) [ 312.903732][T16648] bond3 (unregistering): Released all slaves [ 312.938821][T16515] bridge0: port 2(bridge_slave_1) entered blocking state [ 312.938973][T16515] bridge0: port 2(bridge_slave_1) entered disabled state [ 312.939400][T16515] bridge_slave_1: entered allmulticast mode [ 312.941235][T16515] bridge_slave_1: entered promiscuous mode [ 312.977879][T16515] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 312.980801][T16515] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 313.056815][T16675] bond8: (slave geneve5): making interface the new active one [ 313.060047][T16675] bond8: (slave geneve5): Enslaving as an active interface with an up link [ 313.064093][T16689] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2925'. [ 313.088121][T16690] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2925'. [ 313.124930][T16515] team0: Port device team_slave_0 added [ 313.147054][T16515] team0: Port device team_slave_1 added [ 313.189728][T16515] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 313.189745][T16515] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 313.189766][T16515] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 313.191623][T16515] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 313.191637][T16515] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 313.191661][T16515] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 313.324868][T15606] IPVS: starting estimator thread 0... [ 313.416371][T16700] IPVS: using max 33 ests per chain, 79200 per kthread [ 313.452466][T15606] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 313.476781][T16515] hsr_slave_0: entered promiscuous mode [ 313.477822][T16515] hsr_slave_1: entered promiscuous mode [ 313.478500][T16515] debugfs: 'hsr0' already exists in 'hsr' [ 313.478518][T16515] Cannot create hsr debugfs directory [ 313.479957][T16705] sch_tbf: burst 7 is lower than device syzkaller0 mtu (1514) ! [ 314.083873][T16515] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 314.083908][T16515] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.083934][T16515] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 314.089627][T16515] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 2] type 2 family 0 port 58436 - 0 [ 314.131398][T16736] netlink: 'syz.1.2938': attribute type 64 has an invalid length. [ 314.244724][T16515] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 314.244759][T16515] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.244783][T16515] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 314.244809][T16515] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 2] type 2 family 0 port 58436 - 0 [ 314.386714][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 314.386951][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 314.387160][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 314.451411][T16515] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 314.451446][T16515] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.451471][T16515] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 314.451498][T16515] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 2] type 2 family 0 port 58436 - 0 [ 314.553725][ T5628] Bluetooth: hci4: command tx timeout [ 314.571682][T16515] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 314.571717][T16515] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.571742][T16515] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 314.571767][T16515] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 2] type 2 family 0 port 58436 - 0 [ 314.982085][T16780] xt_esp: unknown flags DD [ 315.018809][T16515] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 315.023368][T16515] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 315.033986][T16786] xt_esp: unknown flags DD [ 315.051294][T16515] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 315.065008][T16515] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 315.078850][T16515] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 315.092946][T16515] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 315.105908][T16515] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 315.108777][T16515] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 315.172313][T16796] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0 [ 315.280655][T16783] netdevsim netdevsim5: Direct firmware load for .. failed with error -2 [ 315.280684][T16783] netdevsim netdevsim5: Falling back to sysfs fallback for: .. [ 315.311830][T16803] bond0: invalid NS target ff00:: specified for addition [ 315.311858][T16803] bond0: option ns_ip6_target: invalid value (18446744073709551615) [ 315.366233][T16795] xt_hashlimit: size too large, truncated to 1048576 [ 315.445883][T16515] 8021q: adding VLAN 0 to HW filter on device bond0 [ 315.533676][T16515] 8021q: adding VLAN 0 to HW filter on device team0 [ 315.563819][T15602] bridge0: port 1(bridge_slave_0) entered blocking state [ 315.563919][T15602] bridge0: port 1(bridge_slave_0) entered forwarding state [ 315.590657][T15603] bridge0: port 2(bridge_slave_1) entered blocking state [ 315.590788][T15603] bridge0: port 2(bridge_slave_1) entered forwarding state [ 315.599213][T16817] __nla_validate_parse: 11 callbacks suppressed [ 315.599232][T16817] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2959'. [ 315.599249][T16817] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2959'. [ 315.934158][T16831] netlink: 'syz.0.2962': attribute type 21 has an invalid length. [ 315.934182][T16831] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2962'. [ 316.103012][T16831] veth0_vlan: left promiscuous mode [ 316.105023][T16831] veth0_vlan: entered promiscuous mode [ 316.117253][T16838] IPVS: set_ctl: invalid protocol: 8 224.0.0.2:20001 [ 316.147199][T16831] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 316.174629][T16831] 8021q: adding VLAN 0 to HW filter on device bond1 [ 316.218228][T16831] veth0_to_team: entered promiscuous mode [ 316.223628][T16831] 8021q: adding VLAN 0 to HW filter on device bond2 [ 316.296650][T16831] 8021q: adding VLAN 0 to HW filter on device bond4 [ 316.302001][T16831] bridge0: port 1(veth0) entered blocking state [ 316.302204][T16831] bridge0: port 1(veth0) entered forwarding state [ 316.337520][T16831] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 316.340448][T16831] 8021q: adding VLAN 0 to HW filter on device ipvlan3 [ 316.340914][T16847] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2966'. [ 316.574270][T16854] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2967'. [ 316.627095][ T5628] Bluetooth: hci4: command tx timeout [ 316.662741][T16857] 8021q: adding VLAN 0 to HW filter on device bond9 [ 316.674460][T16861] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2969'. [ 316.690581][T16861] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2969'. [ 316.690841][T16861] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2969'. [ 316.870748][T16870] netlink: 'syz.4.2972': attribute type 2 has an invalid length. [ 316.969431][T16876] netlink: 'syz.4.2974': attribute type 2 has an invalid length. [ 317.048291][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.092260][T16888] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2977'. [ 317.092398][T16888] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 317.153989][T16886] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2976'. [ 317.292478][T16515] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 317.345384][ C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 317.422416][T16515] veth0_vlan: entered promiscuous mode [ 317.471441][T16515] veth1_vlan: entered promiscuous mode [ 317.544885][T16515] veth0_macvtap: entered promiscuous mode [ 317.561343][T16515] veth1_macvtap: entered promiscuous mode [ 317.592972][T16515] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 317.628418][T16515] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 317.694273][T16917] 0·: renamed from hsr0 (while UP) [ 317.704204][T16917] 0·: entered allmulticast mode [ 317.704224][T16917] hsr_slave_0: entered allmulticast mode [ 317.704240][T16917] hsr_slave_1: entered allmulticast mode [ 317.704721][T16917] A link change request failed with some changes committed already. Interface c0· may have been left with an inconsistent configuration, please check. [ 317.715946][ T155] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.715990][ T155] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.716023][ T155] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.767802][T15603] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.884232][T15603] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 317.884254][T15603] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 317.924693][ T155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 317.924715][ T155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 320.145619][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 320.145847][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 320.146043][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 321.506056][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 325.345186][ C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 325.905261][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 325.905467][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 325.905645][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 329.899057][T16943] __nla_validate_parse: 2 callbacks suppressed [ 329.899078][T16943] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2987'. [ 329.984858][T16948] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2987'. [ 330.006528][T16951] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2990'. [ 330.006553][T16951] openvswitch: netlink: Flow actions attr not present in new flow. [ 330.316261][ T5628] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 330.323233][ T5628] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 330.333805][ T5628] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 330.349430][ T5628] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 330.350161][ T5628] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 330.681632][T16976] netlink: 'syz.4.2997': attribute type 1 has an invalid length. [ 330.681655][T16976] netlink: 'syz.4.2997': attribute type 4 has an invalid length. [ 330.681678][T16976] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.2997'. [ 331.101003][T16995] netlink: 'syz.4.3002': attribute type 1 has an invalid length. [ 331.160696][T16962] ip6erspan0 speed is unknown, defaulting to 1000 [ 331.165390][T15603] IPVS: starting estimator thread 0... [ 331.190407][T17004] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 331.265171][T17005] IPVS: using max 30 ests per chain, 72000 per kthread [ 331.304819][T17010] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3004'. [ 331.596436][T17023] ieee802154 phy1 wpan1: encryption failed: -22 [ 331.665286][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 331.665531][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 331.665832][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 331.879409][T17035] ip_tables: iptables: counters copy to user failed while replacing table [ 331.897881][T17035] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3015'. [ 332.073879][T17047] netlink: 'syz.5.3017': attribute type 11 has an invalid length. [ 332.073902][T17047] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3017'. [ 332.142392][T16962] bridge0: port 1(bridge_slave_0) entered blocking state [ 332.144070][T16962] bridge0: port 1(bridge_slave_0) entered disabled state [ 332.144467][T16962] bridge_slave_0: entered allmulticast mode [ 332.153409][T16962] bridge_slave_0: entered promiscuous mode [ 332.162743][T16962] bridge0: port 2(bridge_slave_1) entered blocking state [ 332.162841][T16962] bridge0: port 2(bridge_slave_1) entered disabled state [ 332.162962][T16962] bridge_slave_1: entered allmulticast mode [ 332.166286][T16962] bridge_slave_1: entered promiscuous mode [ 332.171229][T15603] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 332.251520][T16962] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 332.267407][T16962] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 332.290074][T17059] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 332.377044][T16962] team0: Port device team_slave_0 added [ 332.392525][T16962] team0: Port device team_slave_1 added [ 332.439688][T16962] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 332.439705][T16962] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 332.439731][T16962] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 332.441512][T16962] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 332.441525][T16962] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 332.441551][T16962] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 332.480399][ T5628] Bluetooth: hci2: command tx timeout [ 332.507711][ T155] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 332.507957][ T155] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 332.508041][ T155] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 332.839368][T16962] hsr_slave_0: entered promiscuous mode [ 332.842417][T16962] hsr_slave_1: entered promiscuous mode [ 332.843964][T16962] debugfs: 'hsr0' already exists in 'hsr' [ 332.843983][T16962] Cannot create hsr debugfs directory [ 332.870367][T17074] nbd: must specify an index to disconnect [ 333.224676][T16962] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 333.224713][T16962] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 333.224748][T16962] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 2] type 2 family 0 port 19999 - 0 [ 333.313157][T17096] bond1: option packets_per_slave: invalid value (18446744073709551615) [ 333.313185][T17096] bond1: option packets_per_slave: allowed values 0 - 65535 [ 333.322620][T17096] bond1 (unregistering): Released all slaves [ 333.358139][T17097] bond0: Error: Cannot enslave bond to itself. [ 333.460829][T16962] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 333.460865][T16962] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 333.460889][T16962] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 2] type 2 family 0 port 19999 - 0 [ 333.594529][T16962] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 333.594565][T16962] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 333.594591][T16962] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 2] type 2 family 0 port 19999 - 0 [ 333.624191][ T5628] Bluetooth: hci4: Malformed HCI Event [ 333.678693][T17119] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3036'. [ 333.690562][T17119] netlink: 'syz.0.3036': attribute type 1 has an invalid length. [ 333.739467][T16962] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 333.739504][T16962] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 333.739530][T16962] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 2] type 2 family 0 port 19999 - 0 [ 333.810821][T17126] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3039'. [ 333.846195][T17122] bond11: (slave bridge10): making interface the new active one [ 333.846775][T17122] bond11: (slave bridge10): Enslaving as an active interface with an up link [ 333.887126][T17137] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3039'. [ 334.108350][T16962] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 334.124757][T16962] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 334.134136][T16962] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 334.156328][T16962] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 334.158191][T16962] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 334.187302][T16962] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 334.203025][T16962] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 334.229598][T16962] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 334.394220][T16962] 8021q: adding VLAN 0 to HW filter on device bond0 [ 334.421832][T17159] netlink: 'syz.5.3044': attribute type 2 has an invalid length. [ 334.463406][T16962] 8021q: adding VLAN 0 to HW filter on device team0 [ 334.500089][T15603] bridge0: port 1(bridge_slave_0) entered blocking state [ 334.500205][T15603] bridge0: port 1(bridge_slave_0) entered forwarding state [ 334.520058][T10840] bridge0: port 2(bridge_slave_1) entered blocking state [ 334.520164][T10840] bridge0: port 2(bridge_slave_1) entered forwarding state [ 334.546317][ T5628] Bluetooth: hci2: command tx timeout [ 334.679348][T10840] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 335.096159][T17200] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 335.179992][T17203] __nla_validate_parse: 1 callbacks suppressed [ 335.180015][T17203] netlink: 68 bytes leftover after parsing attributes in process `syz.5.3051'. [ 335.483110][T17212] syzkaller1: entered promiscuous mode [ 335.483136][T17212] syzkaller1: entered allmulticast mode [ 335.570398][T17215] netlink: 92 bytes leftover after parsing attributes in process `syz.0.3054'. [ 335.613121][T17205] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 335.613223][T17205] syzkaller1: linktype set to 823 [ 335.971327][T17225] netlink: 'syz.5.3056': attribute type 16 has an invalid length. [ 335.971349][T17225] netlink: 'syz.5.3056': attribute type 3 has an invalid length. [ 335.971361][T17225] netlink: 132 bytes leftover after parsing attributes in process `syz.5.3056'. [ 336.129234][T17231] netlink: 'syz.2.3058': attribute type 1 has an invalid length. [ 336.129255][T17231] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3058'. [ 336.207301][T16962] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 336.310814][T16962] veth0_vlan: entered promiscuous mode [ 336.321122][T17240] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3060'. [ 336.346107][T16962] veth1_vlan: entered promiscuous mode [ 336.410135][T16962] veth0_macvtap: entered promiscuous mode [ 336.424799][T16962] veth1_macvtap: entered promiscuous mode [ 336.446995][T16962] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 336.471713][T16962] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 336.587709][T15606] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.587755][T15606] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.587788][T15606] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.587820][T15606] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.627951][ T5628] Bluetooth: hci2: command tx timeout [ 336.739717][ T1537] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 336.739738][ T1537] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 336.764637][T17256] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 336.814867][T15615] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 336.814890][T15615] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 336.842062][T17260] netlink: 'syz.5.3064': attribute type 8 has an invalid length. [ 336.842083][T17260] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3064'. [ 336.881419][T17260] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 336.951961][T17264] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 336.974903][T17264] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 337.067074][T17270] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 337.073937][T10843] IPVS: starting estimator thread 0... [ 337.122622][T17274] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3068'. [ 337.156857][T17272] IPVS: using max 30 ests per chain, 72000 per kthread [ 337.256220][T17275] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3070'. [ 337.425484][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 337.425729][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 337.425947][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 337.464108][T17286] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3073'. [ 337.630923][T17289] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3074'. [ 338.206905][ T5622] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 338.209682][ T5622] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 338.211151][ T5622] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 338.238237][ T5622] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 338.240521][ T5622] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 338.474836][T17308] A link change request failed with some changes committed already. Interface dvmrp1 may have been left with an inconsistent configuration, please check. [ 338.512894][T17310] netlink: 'syz.1.3080': attribute type 1 has an invalid length. [ 338.658891][T17307] netlink: 'syz.1.3080': attribute type 1 has an invalid length. [ 338.706037][ T5628] Bluetooth: hci2: command tx timeout [ 338.947877][T15606] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 338.947913][T15606] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.201173][T15606] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 339.201210][T15606] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.241677][T17350] bridge0: port 2(bridge_slave_1) entered disabled state [ 339.260252][T17362] IPVS: sync thread started: state = BACKUP, mcast_ifn = bridge0, syncid = 4, id = 0 [ 339.372805][T15606] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 339.372841][T15606] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.512473][T15606] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 339.512508][T15606] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.553460][T17302] ip6erspan0 speed is unknown, defaulting to 1000 [ 339.690170][T17374] netlink: Invalid conntrack timeout [ 339.690201][T17374] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 339.735382][T17382] openvswitch: netlink: Missing key (keys=c0, expected=880) [ 339.735540][T17382] openvswitch: netlink: Missing key (keys=c0, expected=880) [ 339.735675][T17382] openvswitch: netlink: Missing key (keys=c0, expected=880) [ 339.735805][T17382] openvswitch: netlink: Missing key (keys=c0, expected=880) [ 340.001929][T17396] x_tables: duplicate underflow at hook 2 [ 340.065309][T17399] netlink: 'syz.2.3100': attribute type 1 has an invalid length. [ 340.085928][T17402] x_tables: duplicate underflow at hook 2 [ 340.291130][T15606] veth0: left allmulticast mode [ 340.291174][T15606] veth0: left promiscuous mode [ 340.292877][T15606] bridge0: port 1(veth0) entered disabled state [ 340.306574][ T5628] Bluetooth: hci1: command tx timeout [ 340.353423][T15606] pim6reg: left allmulticast mode [ 340.672291][T15606] bond1 (unregistering): (slave bridge1): Releasing active interface [ 340.710313][T15606] bond5 (unregistering): (slave bridge5): Releasing backup interface [ 340.710339][T15606] bridge5 (unregistering): left promiscuous mode [ 340.710356][T15606] bridge5 (unregistering): left allmulticast mode [ 340.743491][T15606] bond8 (unregistering): (slave bridge7): Releasing active interface [ 340.774616][T15606] bond10 (unregistering): (slave bridge9): Releasing backup interface [ 340.774643][T15606] bridge9 (unregistering): left promiscuous mode [ 340.804751][T15606] bond11 (unregistering): (slave bridge10): Releasing active interface [ 340.830776][T15606] bond0 (unregistering): Released all slaves [ 340.842324][T15606] bond1 (unregistering): Released all slaves [ 340.856712][T15606] bond2 (unregistering): Released all slaves [ 340.864293][T15606] bond3 (unregistering): Released all slaves [ 340.890095][T15606] bond4 (unregistering): Released all slaves [ 340.929779][T15606] bond5 (unregistering): Released all slaves [ 340.943549][T15606] bond6 (unregistering): Released all slaves [ 340.958016][T15606] bond7 (unregistering): Released all slaves [ 340.990219][T15606] bond8 (unregistering): Released all slaves [ 341.013323][T15606] bond9 (unregistering): Released all slaves [ 341.036026][T15606] bond10 (unregistering): Released all slaves [ 341.049437][T15606] bond11 (unregistering): Released all slaves [ 341.064081][T17399] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 341.132351][T17414] tipc: Enabled bearer , priority 0 [ 341.186340][T17411] tipc: Disabling bearer [ 341.276839][T15606] : left promiscuous mode [ 341.477578][T17428] __nla_validate_parse: 40 callbacks suppressed [ 341.477600][T17428] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3105'. [ 341.530140][T15606] ovs0: left promiscuous mode [ 341.682314][T17439] netlink: 'syz.5.3108': attribute type 10 has an invalid length. [ 341.737839][T17439] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 341.779214][T17439] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3108'. [ 341.823506][T17439] bond0: (slave bridge0): Releasing backup interface [ 341.855277][T15606] tipc: Disabling bearer [ 341.859912][T15606] tipc: Left network mode [ 341.994748][ C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 342.386012][ T5628] Bluetooth: hci1: command tx timeout [ 342.480427][T17474] netlink: 'syz.4.3114': attribute type 1 has an invalid length. [ 342.480886][T17472] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3112'. [ 342.586380][T17474] bond4: entered promiscuous mode [ 342.586678][T17474] 8021q: adding VLAN 0 to HW filter on device bond4 [ 342.590349][ T5275] 8021q: adding VLAN 0 to HW filter on device eth1 [ 342.651366][T17477] ipvlan2: entered allmulticast mode [ 342.651388][T17477] bond4: entered allmulticast mode [ 342.736247][T17482] netlink: 'syz.1.3116': attribute type 34 has an invalid length. [ 342.736268][T17482] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3116'. [ 342.763423][T17474] bond4: (slave bridge1): making interface the new active one [ 342.763446][T17474] bridge1: entered promiscuous mode [ 342.766997][T17474] bridge1: entered allmulticast mode [ 342.772946][T17474] bond4: (slave bridge1): Enslaving as an active interface with an up link [ 342.881836][T17490] x_tables: duplicate underflow at hook 2 [ 343.185187][ C1] net_ratelimit: 31 callbacks suppressed [ 343.185206][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 343.185490][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 343.185724][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 343.249705][T17514] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 343.423850][T17302] bridge0: port 1(bridge_slave_0) entered blocking state [ 343.424689][T17302] bridge0: port 1(bridge_slave_0) entered disabled state [ 343.424826][T17302] bridge_slave_0: entered allmulticast mode [ 343.451127][T17302] bridge_slave_0: entered promiscuous mode [ 343.647123][T17527] xt_CT: You must specify a L4 protocol and not use inversions on it [ 343.669632][T17302] bridge0: port 2(bridge_slave_1) entered blocking state [ 343.669806][T17302] bridge0: port 2(bridge_slave_1) entered disabled state [ 343.669967][T17302] bridge_slave_1: entered allmulticast mode [ 343.673187][T17302] bridge_slave_1: entered promiscuous mode [ 343.791184][T17539] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 343.879691][T17302] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 343.883720][T17302] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 344.111884][T17302] team0: Port device team_slave_0 added [ 344.123270][T17302] team0: Port device team_slave_1 added [ 344.190934][T17555] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3132'. [ 344.292876][ T5275] 8021q: adding VLAN 0 to HW filter on device eth2 [ 344.469686][ T5628] Bluetooth: hci1: command tx timeout [ 344.526221][T17302] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 344.526240][T17302] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 344.526265][T17302] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 344.534335][T17302] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 344.534352][T17302] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 344.534378][T17302] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 344.726634][T15606] hsr_slave_0: left promiscuous mode [ 344.729094][T15606] hsr_slave_1: left promiscuous mode [ 344.781620][T15606] veth0_to_team: left promiscuous mode [ 344.781727][T15606] veth1_macvtap: left promiscuous mode [ 344.781742][T15606] veth0_macvtap: left promiscuous mode [ 344.781820][T15606] veth1_vlan: left promiscuous mode [ 344.782152][T15606] veth0_vlan: left promiscuous mode [ 345.469231][T17302] hsr_slave_0: entered promiscuous mode [ 345.474226][T17302] hsr_slave_1: entered promiscuous mode [ 345.491831][T17302] debugfs: 'hsr0' already exists in 'hsr' [ 345.491855][T17302] Cannot create hsr debugfs directory [ 345.618585][T17595] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 345.711734][T17597] hsr0: entered allmulticast mode [ 345.711756][T17597] hsr_slave_0: entered allmulticast mode [ 345.711774][T17597] hsr_slave_1: entered allmulticast mode [ 345.742163][T17595] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 345.776599][T17597] netlink: 'syz.5.3142': attribute type 3 has an invalid length. [ 345.776794][T17597] netlink: 'syz.5.3142': attribute type 3 has an invalid length. [ 345.778312][T17607] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3142'. [ 345.782320][T17608] netlink: 'syz.2.3145': attribute type 83 has an invalid length. [ 345.845510][T17601] netlink: 'syz.4.3144': attribute type 7 has an invalid length. [ 345.845532][T17601] netlink: 'syz.4.3144': attribute type 5 has an invalid length. [ 345.845543][T17601] netlink: 17 bytes leftover after parsing attributes in process `syz.4.3144'. [ 345.846985][T17607] hsr_slave_0: left promiscuous mode [ 345.849917][T15606] IPVS: stop unused estimator thread 0... [ 345.861376][T17607] hsr_slave_1: left promiscuous mode [ 345.912712][T17595] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3141'. [ 346.409155][T17633] netlink: 'syz.2.3153': attribute type 2 has an invalid length. [ 346.536831][T17633] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3153'. [ 346.536864][T17633] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3153'. [ 346.555191][ T5628] Bluetooth: hci1: command tx timeout [ 346.597317][T17633] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3153'. [ 346.597349][T17633] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3153'. [ 346.605734][T15606] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 346.605799][T15606] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 346.605830][T15606] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 346.605887][T15606] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 346.741997][T17302] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 346.760054][T17302] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 346.764081][T17302] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 346.784706][T17302] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 346.796321][T17302] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 346.813455][T17302] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 346.814549][T17302] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 346.840105][T17302] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 347.039843][T17644] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3155'. [ 347.060604][T17645] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3155'. [ 347.253547][T17674] netlink: 'syz.1.3163': attribute type 1 has an invalid length. [ 347.253568][T17674] netlink: 'syz.1.3163': attribute type 3 has an invalid length. [ 347.253581][T17674] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3163'. [ 347.299471][T17677] netlink: 'syz.1.3163': attribute type 1 has an invalid length. [ 347.299492][T17677] netlink: 'syz.1.3163': attribute type 3 has an invalid length. [ 347.299506][T17677] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3163'. [ 347.371644][T17302] 8021q: adding VLAN 0 to HW filter on device bond0 [ 347.408638][T17302] 8021q: adding VLAN 0 to HW filter on device team0 [ 347.430999][T10834] bridge0: port 1(bridge_slave_0) entered blocking state [ 347.432503][T10834] bridge0: port 1(bridge_slave_0) entered forwarding state [ 347.459615][T15606] bridge0: port 2(bridge_slave_1) entered blocking state [ 347.459762][T15606] bridge0: port 2(bridge_slave_1) entered forwarding state [ 347.896092][T17700] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3167'. [ 348.303723][T17723] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 348.305207][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 348.305431][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 348.305643][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 348.323158][T17722] openvswitch: netlink: IPv4 tun info is not correct [ 348.779549][T17744] syzkaller0: entered promiscuous mode [ 348.779573][T17744] syzkaller0: entered allmulticast mode [ 348.902775][T17757] IPVS: twos: UDP 127.0.0.1:20001 - no destination available [ 349.151955][T10845] bond0: (slave bond_slave_0): link status definitely down, disabling slave [ 349.280849][T17302] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 349.301052][T17779] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3183'. [ 349.362709][T17783] IPVS: set_ctl: invalid protocol: 59 172.20.20.170:20000 [ 349.391216][T17784] geneve2: entered promiscuous mode [ 349.401334][T17783] ªªªªª»: renamed from dummy0 (while UP) [ 349.411939][T17783] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 349.596273][T17302] veth0_vlan: entered promiscuous mode [ 349.658629][T17302] veth1_vlan: entered promiscuous mode [ 349.808601][T17302] veth0_macvtap: entered promiscuous mode [ 349.832078][T17302] veth1_macvtap: entered promiscuous mode [ 349.927682][T17302] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 349.979555][T17302] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 350.015804][T10845] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.055329][T10843] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.055899][T10843] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.056542][T10843] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.225575][T15602] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 350.225597][T15602] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 350.286529][T10834] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 350.286560][T10834] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 350.422683][T17832] syzkaller1: entered promiscuous mode [ 350.422705][T17832] syzkaller1: entered allmulticast mode [ 350.947448][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 351.343873][T17890] Bluetooth: MGMT ver 1.23 [ 351.376228][T17892] erspan0: vlans aren't supported yet for dev_uc|mc_add() [ 351.442500][T17899] Bluetooth: ISO socket layer initialized [ 351.879446][T17937] ip_tables: iptables: counters copy to user failed while replacing table [ 353.427180][ T5622] Bluetooth: hci4: command 0x0405 tx timeout [ 354.065198][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 354.065368][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 354.065480][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 354.288190][T17890] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 354.430158][T18025] Bluetooth: MGMT ver 1.23 [ 354.531598][T18035] xt_LOG: prefix is not null-terminated [ 354.579530][T18045] netlink: 'syz.1.3220': attribute type 6 has an invalid length. [ 354.594044][T18045] netlink: 'syz.1.3220': attribute type 6 has an invalid length. [ 354.724185][T18057] __nla_validate_parse: 5 callbacks suppressed [ 354.724274][T18057] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3223'. [ 354.742242][T18062] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3223'. [ 354.742531][T18062] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3223'. [ 354.874203][T18069] hsr0: entered allmulticast mode [ 354.874231][T18069] hsr_slave_0: entered allmulticast mode [ 354.874249][T18069] hsr_slave_1: entered allmulticast mode [ 354.892501][T18069] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3226'. [ 354.898631][T18069] hsr_slave_0: left promiscuous mode [ 354.912647][T18069] hsr_slave_1: left promiscuous mode [ 354.936967][T18069] hsr0 (unregistering): left allmulticast mode [ 354.981732][T18076] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3227'. [ 355.064160][T18085] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3228'. [ 355.102102][T18078] bridge0: port 2(bridge_slave_1) entered disabled state [ 355.187269][T18093] tunl0: entered promiscuous mode [ 355.195877][T18093] netlink: 'syz.1.3232': attribute type 3 has an invalid length. [ 355.195896][T18093] netlink: 9 bytes leftover after parsing attributes in process `syz.1.3232'. [ 355.200366][T18096] netlink: 'syz.4.3233': attribute type 12 has an invalid length. [ 355.200385][T18096] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3233'. [ 355.265466][T18098] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3234'. [ 355.326025][T18102] bond0: (slave ip6tnl0): refused to change device type [ 355.399791][T18106] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 355.502762][T18112] xt_CT: No such helper "netbios-ns" [ 355.597368][T18121] syz_tun: entered allmulticast mode [ 355.610371][T18112] netlink: 100 bytes leftover after parsing attributes in process `syz.0.3236'. [ 355.836918][T18129] ieee802154 phy1 wpan1: encryption failed: -22 [ 356.299385][T18143] tipc: Enabling of bearer rejected, failed to enable media [ 356.338350][T18143] ip_tables: iptables: counters copy to user failed while replacing table [ 356.466808][ T5628] Bluetooth: hci1: command 0x0405 tx timeout [ 356.643992][T18157] netlink: 'syz.4.3253': attribute type 3 has an invalid length. [ 356.646156][T18161] openvswitch: netlink: Message has 512 unknown bytes. [ 356.855052][T18174] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 357.083779][T18192] gre1: entered promiscuous mode [ 357.164502][T18194] bond2 (unregistering): Released all slaves [ 357.251492][T18215] netlink: 'syz.0.3270': attribute type 25 has an invalid length. [ 357.263704][T18198] tc_dump_action: action bad kind [ 357.264295][T18209] tc_dump_action: action bad kind [ 357.932867][T18256] netlink: 'syz.0.3281': attribute type 15 has an invalid length. [ 358.061451][T18262] openvswitch: netlink: Missing key (keys=c0, expected=20080) [ 358.356407][T18284] netlink: 'syz.2.3292': attribute type 1 has an invalid length. [ 358.409574][T18290] Set syz0 is full, maxelem 2 reached [ 358.461302][T18290] veth3: entered allmulticast mode [ 358.488465][T18290] bond1: (slave veth3): Enslaving as an active interface with a down link [ 358.497854][ T31] audit: type=1800 audit(1791478690.782:4): pid=18294 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3296" name=680B20 dev="tmpfs" ino=553 res=0 errno=0 [ 358.500588][T18292] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 358.501170][T15606] IPVS: starting estimator thread 0... [ 358.572957][T18284] bond1: (slave veth0_to_bond): making interface the new active one [ 358.573885][T18284] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 358.585113][T18297] IPVS: using max 29 ests per chain, 69600 per kthread [ 358.637206][T18290] macvlan2: entered promiscuous mode [ 358.637231][T18290] macvlan2: entered allmulticast mode [ 358.637874][T18290] bond1: entered promiscuous mode [ 358.638044][T18290] veth0_to_bond: entered promiscuous mode [ 358.642949][T18290] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 358.643789][T18290] bond1: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 358.644531][T18290] bond1: left promiscuous mode [ 358.644549][T18290] veth0_to_bond: left promiscuous mode [ 358.700439][T18306] xt_CT: You must specify a L4 protocol and not use inversions on it [ 358.708844][T18306] netlink: 'syz.4.3298': attribute type 11 has an invalid length. [ 358.924135][T18323] syzkaller1: entered promiscuous mode [ 358.924156][T18323] syzkaller1: entered allmulticast mode [ 359.192443][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 359.192664][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 359.192850][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 359.312063][T18342] IPVS: set_ctl: invalid protocol: 46 224.0.0.2:20003 [ 359.466167][T18349] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 359.491095][T18348] netlink: 'syz.4.3310': attribute type 2 has an invalid length. [ 359.509417][T18340] bond3: option primary: mode dependency failed, not supported in mode balance-xor(2) [ 363.140371][ C1] sched: DL replenish lagged too much [ 368.237365][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 374.641961][ C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 378.622024][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 384.787763][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 389.187488][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 389.187708][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 393.847032][ C0] ip6_tunnel:  xmit: Local address not yet configured! [ 400.550351][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 400.550590][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 400.550796][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 407.136348][ T5622] Bluetooth: hci5: command 0x0405 tx timeout [ 413.760762][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 413.760983][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 414.308635][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 419.753521][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 424.308689][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 427.067937][ T52] Bluetooth: hci6: command 0x0406 tx timeout [ 427.589850][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 427.590071][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 431.755208][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 432.777949][ T4931] Bluetooth: hci4: command 0x0405 tx timeout [ 435.832075][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 439.914092][ C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 442.477799][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 443.029798][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 443.030020][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 453.351131][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 453.351398][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 453.351605][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 459.748084][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 460.551361][ T4931] Bluetooth: hci2: command 0x0406 tx timeout [ 463.032867][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 463.065880][ T4931] Bluetooth: hci1: command 0x0405 tx timeout [ 471.269834][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 480.152827][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 485.428261][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 498.872308][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 501.652165][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 506.629348][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 517.115327][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 522.508047][ T32] INFO: task syz.3.2136:13713 blocked for more than 144 seconds. [ 522.508076][ T32] Not tainted syzkaller #0 [ 522.508087][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 522.508097][ T32] task:syz.3.2136 state:D stack:23528 pid:13713 tgid:13711 ppid:5610 task_flags:0x400140 flags:0x00080002 [ 522.508159][ T32] Call Trace: [ 522.508238][ T32] [ 522.508314][ T32] __schedule+0x17db/0x58f0 [ 522.508490][ T32] ? __pfx___schedule+0x10/0x10 [ 522.508557][ T32] ? schedule+0x90/0x2b0 [ 522.508590][ T32] schedule+0x164/0x2b0 [ 522.508621][ T32] schedule_preempt_disabled+0x13/0x30 [ 522.508651][ T32] __mutex_lock+0x7c1/0x1550 [ 522.508677][ T32] ? __mutex_lock+0x5d4/0x1550 [ 522.508702][ T32] ? netdev_run_todo+0x6e4/0x1060 [ 522.508758][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 522.508788][ T32] ? rcu_barrier+0x424/0x530 [ 522.508820][ T32] ? msleep+0xdd/0x100 [ 522.508842][ T32] netdev_run_todo+0x6e4/0x1060 [ 522.508868][ T32] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 522.508923][ T32] ? __pfx_netdev_run_todo+0x10/0x10 [ 522.508943][ T32] ? unregister_netdevice_queue+0x17d/0x340 [ 522.508970][ T32] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 522.508996][ T32] ? __nla_parse+0x40/0x60 [ 522.509067][ T32] rtnl_dellink+0x68f/0x810 [ 522.509151][ T32] ? __pfx_rtnl_dellink+0x10/0x10 [ 522.509255][ T32] ? lock_acquire+0x115/0x350 [ 522.509278][ T32] ? __pfx_rtnl_dellink+0x10/0x10 [ 522.509320][ T32] ? __pfx_rtnl_dellink+0x10/0x10 [ 522.509347][ T32] rtnetlink_rcv_msg+0x802/0xc00 [ 522.509380][ T32] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 522.509408][ T32] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 522.509435][ T32] ? ref_tracker_free+0x689/0x830 [ 522.509492][ T32] ? __pfx_ref_tracker_free+0x10/0x10 [ 522.509529][ T32] netlink_rcv_skb+0x226/0x4a0 [ 522.509586][ T32] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 522.509617][ T32] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 522.509652][ T32] ? netlink_deliver_tap+0x2e/0x1b0 [ 522.509675][ T32] ? netlink_deliver_tap+0x2e/0x1b0 [ 522.509704][ T32] netlink_unicast+0x7bd/0x940 [ 522.509735][ T32] netlink_sendmsg+0x813/0xb40 [ 522.509769][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 522.509801][ T32] ? apparmor_socket_sendmsg+0x98/0x360 [ 522.509888][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 522.509911][ T32] sock_sendmsg_nosec+0x13a/0x180 [ 522.509989][ T32] ____sys_sendmsg+0x54e/0x850 [ 522.510015][ T32] ? __pfx_____sys_sendmsg+0x10/0x10 [ 522.510050][ T32] ? import_iovec+0x73/0xa0 [ 522.510109][ T32] ___sys_sendmsg+0x2a5/0x360 [ 522.510128][ T32] ? __lock_acquire+0x747/0x2de0 [ 522.510155][ T32] ? __pfx____sys_sendmsg+0x10/0x10 [ 522.510179][ T32] ? futex_wait+0x2a2/0x390 [ 522.510230][ T32] ? __fget_files+0x2a/0x420 [ 522.510259][ T32] ? __fget_files+0x3a2/0x420 [ 522.510299][ T32] __x64_sys_sendmsg+0x1b1/0x290 [ 522.510322][ T32] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 522.510364][ T32] do_syscall_64+0x166/0x520 [ 522.510411][ T32] ? trace_irq_disable+0x3b/0x140 [ 522.510433][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 522.510455][ T32] ? clear_bhb_loop+0x70/0xc0 [ 522.510479][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 522.510500][ T32] RIP: 0033:0x7f575ad9e199 [ 522.510546][ T32] RSP: 002b:00007f575bbc3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 522.510598][ T32] RAX: ffffffffffffffda RBX: 00007f575b025fa0 RCX: 00007f575ad9e199 [ 522.510613][ T32] RDX: 0000000000040080 RSI: 0000200000000040 RDI: 0000000000000009 [ 522.510627][ T32] RBP: 00007f575ae35888 R08: 0000000000000000 R09: 0000000000000000 [ 522.510639][ T32] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 522.510651][ T32] R13: 00007f575b026038 R14: 00007f575b025fa0 R15: 00007fff29d7ec48 [ 522.510685][ T32] [ 522.510741][ T32] INFO: task syz.5.3311:18351 blocked for more than 144 seconds. [ 522.510757][ T32] Not tainted syzkaller #0 [ 522.510767][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 522.510776][ T32] task:syz.5.3311 state:D stack:26624 pid:18351 tgid:18338 ppid:14651 task_flags:0x400140 flags:0x00080002 [ 522.510827][ T32] Call Trace: [ 522.510834][ T32] [ 522.510846][ T32] __schedule+0x17db/0x58f0 [ 522.510892][ T32] ? kasan_save_track+0x3e/0x80 [ 522.510917][ T32] ? __alloc_skb+0x2c1/0x7a0 [ 522.510974][ T32] ? tipc_nl_compat_recv+0x8d3/0xcf0 [ 522.511059][ T32] ? genl_family_rcv_msg_doit+0x233/0x340 [ 522.511121][ T32] ? __pfx___schedule+0x10/0x10 [ 522.511159][ T32] ? schedule+0x90/0x2b0 [ 522.511192][ T32] schedule+0x164/0x2b0 [ 522.511224][ T32] schedule_preempt_disabled+0x13/0x30 [ 522.511253][ T32] __mutex_lock+0x7c1/0x1550 [ 522.511280][ T32] ? __mutex_lock+0x5d4/0x1550 [ 522.511305][ T32] ? tipc_nl_compat_doit+0x22a/0x650 [ 522.511333][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 522.511376][ T32] tipc_nl_compat_doit+0x22a/0x650 [ 522.511409][ T32] ? __pfx_tipc_nl_compat_doit+0x10/0x10 [ 522.511449][ T32] ? bpf_lsm_capable+0x9/0x20 [ 522.511469][ T32] ? security_capable+0x7e/0x2c0 [ 522.511529][ T32] tipc_nl_compat_recv+0x8d3/0xcf0 [ 522.511559][ T32] ? __pfx_tipc_nl_compat_recv+0x10/0x10 [ 522.511586][ T32] ? __mutex_trylock_common+0x15f/0x270 [ 522.511615][ T32] ? __pfx_tipc_nl_node_set_link+0x10/0x10 [ 522.511635][ T32] ? __pfx_tipc_nl_compat_link_set+0x10/0x10 [ 522.511660][ T32] ? __pfx___mutex_trylock_common+0x10/0x10 [ 522.511694][ T32] ? trace_contention_end+0x3d/0x140 [ 522.511720][ T32] ? genl_family_rcv_msg_attrs_parse+0xe9/0x2f0