last executing test programs: 1m45.581581473s ago: executing program 0 (id=6831): r0 = socket$tipc(0x1e, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00'}) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0xc00200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x2, 0x1, 0x801, 0x0, 0x0, {0x2, 0x0, 0x5}, [@CTA_STATUS_MASK={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x48000) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.net/syz0\x00', 0x1ff) sendmsg$NFT_BATCH(r1, &(0x7f0000000540)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000500)={&(0x7f00000001c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELSETELEM={0x1c, 0xe, 0xa, 0x301, 0x0, 0x0, {0xd, 0x0, 0xa}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWCHAIN={0x110, 0x3, 0xa, 0x3, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_CHAIN_COUNTERS={0x10, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x6}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x58e36fbd}, @NFTA_HOOK_DEV={0x14, 0x3, 'pimreg0\x00'}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x7d0a08eb}]}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffb}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}, @NFTA_CHAIN_HOOK={0x40, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x501e5add}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_HOOK_DEV={0x14, 0x3, 'geneve1\x00'}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x58769ca}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x4296a12d}]}, @NFTA_CHAIN_HOOK={0x5c, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'ip6gretap0\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'macsec0\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x6bed5f9e}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x14e756e9}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3759ece7}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x767c242d}]}]}, @NFT_MSG_NEWTABLE={0x2c, 0x0, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x9}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x1c, 0x6, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_RULE_POSITION_ID={0x8}]}, @NFT_MSG_DELCHAIN={0x150, 0x5, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x6}, [@NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_CHAIN_HOOK={0x58, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_HOOK_DEV={0x14, 0x3, 'pim6reg\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'ip6erspan0\x00'}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3b12cb73}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x508a226e}, @NFTA_HOOK_DEV={0x14, 0x3, 'vcan0\x00'}]}, @NFTA_CHAIN_HOOK={0x54, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'veth1_virt_wifi\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'ip_vti0\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'wg0\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth0\x00'}]}, @NFTA_CHAIN_COUNTERS={0x70, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xeee1}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x7193}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x4}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xb969}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x6}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x8001}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x220}]}, @NFTA_CHAIN_HOOK={0xc, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x10d22866}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWOBJ={0x1c, 0x12, 0xa, 0x301, 0x0, 0x0, {0x2, 0x0, 0x6}, @NFT_OBJECT_SECMARK=@NFTA_OBJ_TYPE={0x8}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x8}}}, 0x308}, 0x1, 0x0, 0x0, 0x6015}, 0x80) (async, rerun: 64) r2 = accept4(r1, &(0x7f0000000580)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, &(0x7f0000000600)=0x80, 0x40800) (rerun: 64) sendmsg$inet6(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000640)="77c8489d7e24480a186bd6277ba3e3e661c50e4de26721843e1b18a0f3444e73f2a013546f409269211beb6addfa34ca0a51326dea0dfacd0ca33a74711097208c7e6fbd5a99dc8e71c08b0cb5b207ddb5a715fe2e8213fb0162062cc45e1de8709400db500ce6ff0cab009e4c65f7564810bc159ddbe7eb48f095a71f847cd70e4f1f36ae03075b8b92d9828f3e938ed5a8193882d93cd0a66af8a89072c7f08eb32c1cbd72787345", 0xa9}, {&(0x7f0000000700)="dd8e27cc61592312ef73a51ecebd17f08a12ffbabcb48fbf8bf172a1999088beb1be040c0d3e3e6f39ec59bbd9f2bf7518b3b375f2b8d904d1a7dabe9e150ed5352ce8b0f99c3c370278841fc156f6e0bbd670931f1728d2c807d871086978191c6ffc9271c30f251fe8ab110994dbdb73271539cd7152", 0x77}], 0x2, &(0x7f00000007c0)=[@tclass={{0x14, 0x29, 0x43, 0x8}}], 0x18}, 0x8000) (async, rerun: 64) setsockopt$inet6_MCAST_MSFILTER(r3, 0x29, 0x30, &(0x7f0000000840)={0x1, {{0xa, 0x4e22, 0x0, @dev={0xfe, 0x80, '\x00', 0x3c}, 0x5}}, 0x1, 0x2, [{{0xa, 0x4e24, 0x200, @loopback, 0x45}}, {{0xa, 0x4e21, 0xfffffff7, @ipv4={'\x00', '\xff\xff', @remote}, 0x7}}]}, 0x190) (async, rerun: 64) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000a00)='pids.events\x00', 0x0, 0x0) (async) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000a80), r2) sendmsg$TIPC_CMD_SET_LINK_PRI(r4, &(0x7f0000000b80)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x68, r5, 0x400, 0x70bd2b, 0x25dfdbfc, {{}, {}, {0x4c, 0x18, {0xa, @media='eth\x00'}}}, ["", "", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000010) (async) accept4(r2, &(0x7f0000000bc0)=@ethernet, &(0x7f0000000c40)=0x80, 0x1000) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000cc0), r4) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000d00)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r3, &(0x7f0000000e00)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d40)={0x4c, r6, 0x200, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0xf2e9, 0x39}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) sendmsg$TIPC_CMD_SET_LINK_TOL(0xffffffffffffffff, &(0x7f0000000f40)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000f00)={&(0x7f0000000e80)={0x68, r5, 0x200, 0x70bd2b, 0x25dfdbfc, {{}, {}, {0x4c, 0x18, {0x8, @link='broadcast-link\x00'}}}, ["", "", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x20040011}, 0x40000) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000fc0), 0xffffffffffffffff) sendmsg$IEEE802154_LIST_IFACE(r8, &(0x7f0000001080)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001040)={&(0x7f0000001000)={0x34, r9, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x20068008}, 0x840) (async) r10 = accept(r0, &(0x7f00000010c0)=@ethernet={0x0, @remote}, &(0x7f0000001140)=0x80) sendto$rxrpc(r10, &(0x7f0000001180)="a1ced6765aa16f3db3c5f6198a58843d5a225d5d4bc1566bf54ab90fa84289b6fe971309a339e20f6e1de34cd8efb3d0e832bb49f4adb83aa8a83642451f1bbedf4bfee5be0f04ea83687932acfcc088718a59767f221771b370e939dee74a23f4abdc43141818e4345a011a266946f54640b61ca41ca9a47eac31cb21b65b3314f1714b14e71e96f0d4a37ffbf0098383ec877f624f2526370b85a1e2a29e24746cbb8560f6bdcc0801a1138e84ba1c65f321b2f29ad175a17d527ac617737953787efed5249f78cd628c93ae0cf6132bd4496741649b2682f42b60e83dd945ee1536e7c1", 0xe5, 0x48000, &(0x7f0000001280)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e20, 0xd5ca, @mcast2, 0xd1}}, 0x24) sendmsg$NL80211_CMD_GET_STATION(r10, &(0x7f0000001480)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001440)={&(0x7f0000001300)={0x120, r6, 0xd6acedfb8410c750, 0x70bd26, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x80000000, 0x69}}}}, [@NL80211_ATTR_STA_EXT_CAPABILITY={0x9f, 0xac, "d62ed2c341dfa67fc27cfae62ba57362c97c710ab65fc87f9cf9428b958280fc7395ab11b5cdfa715288e74e85a6664f22bb9ac1823070f93b89dba63298d3bc1f8cc4fa10dea22ca84c5de28a02b4afda3e7ecadeec61b5535573e3fbe6ce27d12a057390cd60e7479ed5657ca30a081f080f2d7c9cb962deac64c8937e7c6e120d0ba0b19369913ca30fe5458350f334b8cfae04599ac76c9cfa"}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x1}, @NL80211_ATTR_STA_WME={0x2c, 0x81, [@NL80211_STA_WME_MAX_SP={0x5, 0x2, 0xf4}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0xc0}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x46}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x1}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x4}]}, @NL80211_ATTR_STA_EXT_CAPABILITY={0x29, 0xac, "bca67cc19108646890a74243faa7cbdf17527f0267013de230cab45423d09042f166123ff4"}]}, 0x120}, 0x1, 0x0, 0x0, 0x4004010}, 0x24000804) (async) r11 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) getsockopt$IP_VS_SO_GET_SERVICE(r11, 0x0, 0x483, &(0x7f00000014c0), &(0x7f0000001540)=0x68) (async) r12 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_SECURITY_KEY(r12, 0x110, 0x1, &(0x7f0000001580)=':\x00', 0x2) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000015c0)='./cgroup.cpu/syz0\x00', 0x1ff) (async) socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) bind(0xffffffffffffffff, &(0x7f0000001680)=@ax25={{0x3, @bcast, 0x5}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @default]}, 0x80) (rerun: 64) 1m44.341350095s ago: executing program 0 (id=6840): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYRESHEX=r0], 0xa0}, 0x1, 0x0, 0x0, 0x4000880}, 0x24000000) 1m43.965052578s ago: executing program 0 (id=6844): r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x8, 0x0, 0x4) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000340)=@security={'security\x00', 0x64, 0x4, 0x440, 0x100000c, 0x2c0, 0x1f0, 0x2c0, 0xffffffff, 0xffffffff, 0x3a8, 0x3a8, 0x3a8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x1c8, 0x1f0, 0x0, {0x0, 0x1000000000000}, [@common=@inet=@hashlimit3={{0x158}, {'syzkaller0\x00', {0x0, 0x4, 0x63, 0x100081, 0xfffffffb, 0x3, 0x84, 0xfff, 0x20}}}]}, @common=@unspec=@AUDIT={0x28}}, {{@ip={@remote, @dev={0xac, 0x14, 0x14, 0x25}, 0x0, 0xff, 'syz_tun\x00', 'lo\x00', {}, {}, 0x0, 0x0, 0x2}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0x4, 0x6, [0x9, 0x2e, 0xb, 0x3c, 0x2d, 0x20, 0x21, 0x29, 0x36, 0xd, 0x1a, 0x2, 0x24, 0x5, 0x33, 0x1d], 0x0, 0x4, 0x4}}}, {{@uncond, 0x0, 0xa8, 0xe8, 0x0, {}, [@common=@unspec=@statistic={{0x38}, {0x1, 0x1, 0x800, 0x8, 0x7}}]}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x7f, 0x9, 0x2, 0x6, 0x1, 0x7f, 0x1, 0x6]}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4a0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000280)={'gre0\x00', &(0x7f0000000140)={'erspan0\x00', 0x0, 0x40, 0x20, 0x9, 0xffffffff, {{0x39, 0x4, 0x0, 0x6, 0xe4, 0x67, 0x0, 0xf9, 0x29, 0x0, @rand_addr=0x64010100, @empty, {[@timestamp={0x44, 0x28, 0x3a, 0x0, 0x3, [0xadf, 0x10, 0xff, 0xe, 0x3, 0x9, 0x9, 0x1, 0x3]}, @rr={0x7, 0x7, 0xdd, [@dev={0xac, 0x14, 0x14, 0x31}]}, @timestamp_prespec={0x44, 0xc, 0xb9, 0x3, 0x0, [{@local, 0xfffffffb}]}, @lsrr={0x83, 0x13, 0xd1, [@rand_addr=0x64010101, @loopback, @multicast1, @rand_addr=0x64010101]}, @generic={0x83, 0x12, "8f330b3cb62e867720044c4aaabf5f40"}, @ssrr={0x89, 0x23, 0xe, [@broadcast, @private=0xa010102, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010101, @local, @multicast1, @private=0xa010102, @multicast2]}, @generic={0x7, 0x10, "ffac76338c86d61be0131318174d"}, @timestamp_addr={0x44, 0x3c, 0x85, 0x1, 0x7, [{@dev={0xac, 0x14, 0x14, 0x3e}, 0x2}, {@multicast1, 0x1}, {@multicast2, 0x8}, {@dev={0xac, 0x14, 0x14, 0xa}, 0x8}, {@local, 0xa788}, {@multicast2, 0x2}, {@private=0xa010102, 0x1}]}, @end]}}}}}) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0xb, &(0x7f0000000000), &(0x7f0000000040)=0x4) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x8f1, '\x00', r2, 0xffffffffffffffff, 0x5, 0x5, 0x4}, 0x50) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000080)={r3, 0x3, 0x9, 0x9}) ioctl$XFS_IOC_FD_TO_HANDLE(0xffffffffffffffff, 0xc038586a, &(0x7f00000009c0)={r0, &(0x7f0000000100)='CLUSTERIP\x00', 0x400400, &(0x7f0000000900)={@align=0x4, {0x400, 0x0, 0x5f, 0x792}}, 0x4, &(0x7f0000000940)={@_ha_fsid}, &(0x7f0000000980)=0x2}) sendmsg$GTP_CMD_DELPDP(r4, &(0x7f0000000ac0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a00)={0x60, 0x0, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@GTPA_FAMILY={0x5, 0xd, 0x18}, @GTPA_PEER_ADDRESS={0x8, 0x4, @local}, @GTPA_I_TEI={0x8}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @empty}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_NET_NS_FD={0x8, 0x7, r5}, @GTPA_TID={0xc, 0x3, 0x3}]}, 0x60}, 0x1, 0x0, 0x0, 0x40040050}, 0x44840) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x1c, 0x9, 0x6, 0x101, 0x0, 0x0, {0x5, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x400c080}, 0x20000000) r6 = socket$kcm(0x10, 0x2, 0x0) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000cc0), r4) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r5, &(0x7f0000001400)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000013c0)={&(0x7f00000011c0)={0x1c8, r7, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@ETHTOOL_A_PRIVFLAGS_FLAGS={0x1b4, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x138, 0x3, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '$-{*-\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, 'hashlimit\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '[\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x10, 0x2, 'TCPOPTSTRIP\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, 'lo\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, '--\xbb\b)-/{)!\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffffa}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x4}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}]}, {0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, ']\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7b}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '-+\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0x10, 0x2, 'TCPOPTSTRIP\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '+\x86[\'\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '&\xbe&\\:\x00'}]}]}, @ETHTOOL_A_BITSET_MASK={0x77, 0x5, "9c41c5b640b621ae9bbcc44af7dd47d2bc318a28e50cbf354e512c58cad7477f97ba9d0214007711ab6a51137d77a9afab6efd647bc3c0daef40ac1de80584c5dfff5c5bb5230358b6b456ef0c30d1161371a1ce468c4ee2b52b29d7345e3a4b2a9fbee87664058bfd8fe75ac713bc93c11ada"}]}]}, 0x1c8}, 0x1, 0x0, 0x0, 0x4000001}, 0x91) sendmsg$kcm(r6, &(0x7f0000000b00)={0x0, 0x1f, &(0x7f0000000b40)=[{&(0x7f0000000b80)="d8000000180081054e81f782db44b904021d005c06007c09e8fe55a10a0015400100142603600e1208000b0000000401a80016000800014003001100036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) syz_emit_ethernet(0x3b6, &(0x7f0000000d80)=ANY=[@ANYBLOB="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"], 0x0) 1m43.301688134s ago: executing program 0 (id=6848): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2e, &(0x7f0000000040)=0x80000001, 0x4) (async) setsockopt$inet_tcp_int(r0, 0x6, 0x2e, &(0x7f0000000040)=0x80000001, 0x4) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000100)={0x2, 0x4e21, @local}, 0x10) (async) connect$inet(r1, &(0x7f0000000100)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000200)='cdg', 0x3) sendto$inet(r1, &(0x7f0000000240), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r1, &(0x7f0000000280)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000000000000000000000de60123c00000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000000000000000000000de60123c00000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) 1m41.915117579s ago: executing program 0 (id=6852): write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa2c"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x6, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x48, 0x0, 0x0, 0x1}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[], 0x28}}, 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000e40)={0x6, 0x3, &(0x7f0000000f00)=ANY=[], &(0x7f0000000f40)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4389}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000f80)={r0, 0x5, 0xb68, 0x8d, &(0x7f0000001000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000080), 0xfffffffffffffdbb}, 0x48) 1m41.423176913s ago: executing program 0 (id=6854): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r3 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000100)={'wlan0\x00'}) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000000240)={r0, 0xfffffffffffffec0, 0x6, 0x9}) r5 = socket$unix(0x1, 0x5, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000001600)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001d40)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x240080c1}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001780)={&(0x7f00000017c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x80000, {0x0, 0x0, 0x0, r7, {0x0, 0x6}, {0x3, 0xb}, {0x0, 0x6}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2404c0f1}, 0x6008000) bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000380)=ANY=[@ANYBLOB="1c00000004000000410000000000000001000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0200"], 0x48) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000001880)={0x0, 0x0}, 0x8) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000018c0)=r8, 0x4) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r3, 0x4058587a, &(0x7f0000001a80)={{r3, &(0x7f0000001900)='wlan0\x00', 0x600, &(0x7f0000001940)={@_ha_fsid={[0xfffffff7]}, {0xb, 0x1ff, 0x9e6, 0x3dbb}}, 0x0, &(0x7f0000001980)={@_ha_fsid}, &(0x7f00000019c0)=0x2}, {[0xd9, 0x3, 0xed, 0x4]}, 0x95, 0x74, &(0x7f0000001a00)=""/116}) r10 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001b00)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="03000000040000000100"/28], 0x50) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000021c0)=ANY=[@ANYBLOB="2100000000000000000000002700000000040600", @ANYRES32=0x1, @ANYBLOB="0003002000009700"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000400000000000000000000004cac3e8d68a6e21e47d0415f8ffb6d93999a349053a94e64bf39f376c79035d8f21d15f4f7b51377872f9c3da35d325e264e9739dafdd7328955f2d4782722be36181d9f1f139f849a111aff070000386de988a1910d6ce7552c1efc2a2a6280ee7834aa21c1e80b6e1aabe30b1734dd950989031fcec4759bc2bc6eb142ef9d4e8518e996a9e677f22af7ad399c436000"/176], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001c00)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000001c80)={0x1e, 0xf, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000090000000000fb00b900000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000340)='syzkaller\x00', 0x8, 0x1000, &(0x7f0000000600)=""/4096, 0x40f00, 0x77, '\x00', r7, @sk_lookup, 0xffffffffffffffff, 0x8, &(0x7f0000001800)={0x7, 0x5}, 0x8, 0x10, &(0x7f0000001840)={0x0, 0x1, 0xfffffff9, 0x7}, 0x10, r8, r9, 0x0, &(0x7f0000001c40)=[r0, r10, r11, r12], 0x0, 0x10, 0x1ff}, 0x94) r13 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_INIT(r13, 0x29, 0xc8, &(0x7f0000000000), 0x4) setsockopt$MRT6_TABLE(r13, 0x29, 0xd1, &(0x7f0000000040)=0xfe, 0x4) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="75609fe6bdd8a2444ee905", @ANYRES16=r1, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r2, @ANYBLOB="0800050006000000"], 0x24}}, 0x0) setsockopt(r0, 0x5, 0xc, &(0x7f0000000000), 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000200)={'wlan0\x00', 0x1}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x0) bind$packet(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb01001800000000000000380000003800000004000000020000000000001104000000000000000000000000eb8b793c000000020000000000001202000000020000000000000e030000000000000000006100"], 0x0, 0x54}, 0x20) write(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_DEL_INTERFACE(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x68a8, 0x39}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x0) 1m32.274134236s ago: executing program 3 (id=6896): r0 = accept$inet(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0x10) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f0000000080)={r0}) r1 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x4e23, @private=0xa010101}, 0x10) r2 = accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000100), 0x80800) setsockopt$inet6_tcp_int(r2, 0x6, 0x7, &(0x7f0000000140)=0x5, 0x4) ioctl$PPPIOCGMRU(0xffffffffffffffff, 0x80047453, &(0x7f0000000180)) socketpair(0x2c, 0x3, 0xc0000000, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$can_j1939(r4, &(0x7f0000000200)={0x1d, 0x0, 0x2, {0x0, 0xff, 0x2}}, 0x18) sendmsg$IPCTNL_MSG_EXP_DELETE(r3, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x7c, 0x2, 0x2, 0x500, 0x0, 0x0, {0xa, 0x0, 0xa}, [@CTA_EXPECT_MASK={0x58, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010100}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x2e}}}}]}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x2}, @CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x3}]}, 0x7c}}, 0x4000000) getsockopt$IP_VS_SO_GET_VERSION(r2, 0x0, 0x480, &(0x7f0000000380), &(0x7f00000003c0)=0x40) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000400)={'team0\x00', 0x0}) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000440)={{{@in6=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in6=@dev}}, &(0x7f0000000540)=0xe8) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000580)={{{@in6=@local, @in6=@loopback, 0x4e20, 0x0, 0x4e23, 0x5, 0xa, 0x0, 0x0, 0x3a, r5, r6}, {0x4, 0x4d, 0x2, 0x9, 0xd, 0xd, 0x7}, {0xa4, 0x7fffffff, 0x9, 0x4}, 0x9, 0x6e6bbd, 0x0, 0x0, 0x1, 0x1}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4d4, 0x3c}, 0xa, @in=@empty, 0x3500, 0x2, 0x0, 0x6, 0x0, 0x2f1025a2, 0x2}}, 0xe8) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), r3) sendmsg$NL80211_CMD_DEL_KEY(r0, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x3c, r7, 0x10, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x6, 0x29}}}}, [@NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "f7f9733bb7"}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4c045}, 0x1) sendmsg$NFT_MSG_GETCHAIN(r3, &(0x7f0000000980)={&(0x7f00000007c0), 0xc, &(0x7f0000000940)={&(0x7f0000000800)={0x120, 0x4, 0xa, 0x401, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x5}, @NFTA_CHAIN_TYPE={0xa, 0x7, 'route\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x6}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x4}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_COUNTERS={0x1c, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x8000000000000001}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x5}]}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_COUNTERS={0x28, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x1}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x6}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x5}]}, @NFTA_CHAIN_USERDATA={0x7a, 0xc, "2422db513afdd8473ea9ba9983fa5de4a3f81b7b8770691e732eb17da34cd8c1c4e3def120e7e3262f56f8e0d6f94e8901735b671e377502f6dcb908e114fabce81ccbd78db313e6e4da76c75c2b04c82f715d6dd1eb2fa2d3fd66939c01f3acd541e8b4ff8bd109a0c1f9703fce4f28b4cf28769a9b"}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x5}]}, 0x120}, 0x1, 0x0, 0x0, 0x4805}, 0x4) r8 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f00000009c0)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r8, &(0x7f0000000a00)={'b', ' *:* ', 'rm\x00'}, 0x9) sendmsg$NFT_MSG_GETTABLE(r4, &(0x7f0000000b40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a80)={0x6c, 0x1, 0xa, 0x301, 0x0, 0x0, {0x0, 0x0, 0x3}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_USERDATA={0x8, 0x6, "57c99a3a"}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_USERDATA={0x27, 0x6, "74b201cc6582a7a5a649ffd12232d7beeac6111fa9f162a180f8b93afcd33129b176c4"}]}, 0x6c}, 0x1, 0x0, 0x0, 0x200000d0}, 0x40) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000bc0), r4) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r4, &(0x7f0000000cc0)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x1140601}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c00)={0x70, r9, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_ADDR={0x44, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010102}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00'}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xc000}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x6}]}, 0x70}, 0x1, 0x0, 0x0, 0x20000001}, 0x4004000) ioctl$XFS_IOC_FSGETXATTRA(r1, 0x801c582d, &(0x7f0000000d00)) sendmsg$NL80211_CMD_NEW_STATION(r3, &(0x7f0000000e00)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d80)={0x2c, r7, 0x8, 0x70bd28, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x0, 0x74}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x44040) sendmsg$sock(r2, &(0x7f00000012c0)={&(0x7f0000000e40)=@caif=@dgm={0x25, 0x8, 0x4}, 0x80, &(0x7f00000011c0)=[{&(0x7f0000000ec0)="e854a1758548031d2bc2f53ac18617cb2368ab1efd904d7dce03ccd57458a75310369ec5949919df2c91801294bddf9cd00717a868c1fd0c161c008153364fd81c6f30496e6e42db1a00ab25434b7f263431e8de837ada65acf25e0e9ba54e0f88dc89ce6a81dd7167a0d26af4768daa19d8d967114d3dc18175a09fee81665401f6da4c9e9debdc6a5f60f6b1cbc3a02a57709c167df483bf10e2117af82f25", 0xa0}, {&(0x7f0000000f80)="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", 0xfa}, {&(0x7f0000001080)="b7dd7517faf13b40", 0x8}, {&(0x7f00000010c0)="1851b1a3c9fb498f6e7b2d854aad08eb4147c59f6f10aee06cfe835eda4b23fc1e9126ca925c", 0x26}, {&(0x7f0000001100)="3af9b5e27cb177d6735c9d857589b3e593824c4f4db01e90909b5a3bde79516ab13a5907bc78384999a276d9e2375c4982a3cdaf7e2f3399f1dcfbfdc7b77958914d2d284a870dfc7c37d6e2cf9a193d06759d94cfd910dbf3bbe3828f54be0eb63ed84683350ee9178f", 0x6a}, {&(0x7f0000001180)="710fbdd8269cdedf6ec072ca1a7e96840159cafc92a2ad111985", 0x1a}], 0x6, &(0x7f0000001240)=[@mark={{0x14, 0x1, 0x24, 0x5}}, @timestamping={{0x14, 0x1, 0x25, 0x21f7}}, @mark={{0x14, 0x1, 0x24, 0x200}}], 0x48}, 0x0) r10 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000001300), 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001500)={r10, 0x0, 0x29, 0x59, &(0x7f0000001340)="458f1b71edc35b3c93fef30ba823e954a3c539e1adce399fbbf892d456e732362ec1bd9fc12ba68417", &(0x7f0000001380)=""/89, 0x9, 0x0, 0xb7, 0x4, &(0x7f0000001400)="d56fb948e915f2b93b45e04febc3ea9ff77bcb8836ef570725d52041dda728a136fcc7dde525ca6388050c5f30c29989c0c13806d8b991e6240435f5cec601cb45a4439aab285bb54a41b0ad8b3303d9c53b8cc2165d5f3d4f753b5bb55f71074bd8127e1f8f1b7e4ac1757c2f1ef0ee772eaa1ff2452f59356aa95bf16caf6552dc7205e1f126c8338929e4ba84f817fe65c052a94c426813ff9b1597a4aae53b717827d71ca4ea1fd4b30395bdf5e2135a58e325a97a", &(0x7f00000014c0)="a7e0a4a1", 0x3, 0x0, 0x56f5}, 0x50) ioctl$NILFS_IOCTL_RESIZE(r4, 0x40086e8b, &(0x7f0000001580)=0x9) shutdown(r3, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000017c0)={&(0x7f00000015c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001780)={&(0x7f0000001600)={{0x14}, [@NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x201, 0x0, 0x0, {0x3}}, @NFT_MSG_NEWFLOWTABLE={0x128, 0x16, 0xa, 0x804, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_HOOK={0xfc, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0xb8, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth0_vlan\x00'}, {0x14, 0x1, 'wg0\x00'}, {0x14, 0x1, 'veth0\x00'}, {0x14, 0x1, 'gretap0\x00'}, {0x14, 0x1, 'bond0\x00'}, {0x14, 0x1, 'wg1\x00'}, {0x14, 0x1, 'geneve0\x00'}, {0x14, 0x1, 'ipvlan1\x00'}, {0x14, 0x1, 'hsr0\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'ip6tnl0\x00'}, {0x14, 0x1, 'wlan0\x00'}, {0x14, 0x1, 'lo\x00'}]}]}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x5}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x164}, 0x1, 0x0, 0x0, 0x800}, 0x80) 1m31.332209562s ago: executing program 2 (id=6902): sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000540)=ANY=[@ANYBLOB="78000000070a010200000000000000000a0000060900010073797a31000000005800048054000180090001006d6574610000000044000280080001400000000c080003400000000008000140000000010800014000000009080001400000000b0800014000000015080001400000001508000240000080"], 0x78}, 0x1, 0x0, 0x0, 0x48055}, 0x1000c080) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0xd4, 0x9, 0x6, 0x3, 0x0, 0x0, {0xa, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_ADT={0x20, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x5}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x9}}]}, @IPSET_ATTR_DATA={0x44, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x62}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x4}, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0x9}, @IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private0}}, @IPSET_ATTR_CIDR2={0x5, 0x15, 0x5}, @IPSET_ATTR_CIDR2={0x5, 0x15, 0xb}]}, @IPSET_ATTR_LINENO={0x8}, @IPSET_ATTR_DATA={0x3c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @mcast1}}, @IPSET_ATTR_ETHER={0xa, 0x11, @multicast}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x80000001}, @IPSET_ATTR_NAME={0x9, 0x12, 'syz1\x00'}]}]}, 0xd4}, 0x1, 0x0, 0x0, 0xc800}, 0x8000) (async) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c000280"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) 1m31.05273555s ago: executing program 3 (id=6904): ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000900)={'syztnl0\x00', &(0x7f0000000880)={'ip6tnl0\x00', 0x0, 0x2f, 0x9, 0xa, 0x7, 0x8, @loopback, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x40, 0x1, 0x4}}) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0xa, 0x16, &(0x7f0000000880)=ANY=[], &(0x7f0000000bc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', r1, @fallback=0x12, 0xffffffffffffffff, 0x8, &(0x7f0000000c00), 0x8, 0x10, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x4}, 0x10}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x4, 0x4, 0x4, 0x10, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x3, 0x9, &(0x7f0000000a80)=ANY=[@ANYBLOB="18120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70300001800009f6703000020000000bfa400000000000007040000f8ffffffb705000008000000850000001900000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b40)={r3, 0x0, 0xe, 0x0, &(0x7f0000000c80)="11223344556677889900aabbccdd", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup/syz1\x00', 0x1ff) (async) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x14, &(0x7f0000000340)={0x0, 0xea60}, 0x10) (async) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f00000003c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x6, [@int={0x6, 0x0, 0x0, 0x1, 0x0, 0x27, 0x0, 0x10, 0x2}]}, {0x0, [0x5f, 0x5f, 0x0, 0x30]}}, 0x0, 0x2e, 0x0, 0x1, 0xd6f}, 0x28) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400), 0x200002, 0x0) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000f40)={0x1b, 0x0, 0x0, 0x7ab, 0x0, 0x1, 0x4, '\x00', r1, r4, 0x4}, 0x50) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001040)=@bpf_tracing={0x1a, 0x10, &(0x7f0000000cc0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@jmp={0x5, 0x0, 0xc, 0x7, 0xb, 0xffffffffffffffff, 0x8}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000d40)='GPL\x00', 0x8, 0xa9, &(0x7f0000000d80)=""/169, 0x40f00, 0x55, '\x00', r1, 0x19, r4, 0x8, &(0x7f0000000e40)={0x2, 0x3}, 0x8, 0x10, &(0x7f0000000e80)={0x5, 0x4, 0x91, 0x4}, 0x10, 0xacb3, 0xffffffffffffffff, 0x3, &(0x7f0000000fc0)=[r2, r2, 0xffffffffffffffff, r2, r6, r0], &(0x7f0000001000)=[{0x2, 0x1}, {0x2, 0x5, 0x9, 0x8}, {0x1, 0x2, 0x4, 0x8}], 0x10, 0x2}, 0x94) (async) r7 = openat$cgroup_procs(r5, &(0x7f0000000600)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r7, &(0x7f0000000640), 0x12) (async) ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000680)={0xffffffffffffffff, &(0x7f00000006c0)='cgroup\x00', 0x101, 0x0, 0xf, 0x0, 0x0}) (async) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000700), 0x200002, 0x0) r9 = openat$cgroup_subtree(r8, &(0x7f0000000740), 0x2, 0x0) write$cgroup_subtree(r9, &(0x7f0000000780)={[{0x2b, 'cpu'}]}, 0x5) r10 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'macvlan1\x00', 0x0}) r12 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000280)={0xffffffffffffffff, r11, 0x25, 0x2, @void}, 0x10) bpf$LINK_DETACH(0x22, &(0x7f00000002c0)=r12, 0x4) (async) r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020752f00000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000f8ffffff850000000600000095"], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r13, r11, 0x25, 0x0, @val=@tracing={0x0, 0x9ac}}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF_FLAGS(0xffffffffffffffff, 0x84, 0x7a, &(0x7f0000000040)={0x1, 0xffffffffffffffff, 0x800}, &(0x7f0000000080)=0xc) (async) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f00000000c0)={0x1, 0xff, "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"}, &(0x7f0000000200)=0x107) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r14, 0x84, 0x18, &(0x7f0000000240)={r15, 0xd}, 0x8) syz_emit_ethernet(0xfef3, &(0x7f0000000100)=ANY=[], 0x0) 1m30.992324068s ago: executing program 1 (id=6905): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x184, 0x19, 0x1, 0x0, 0x0, {0x1d, 0xd601, 0x9}, [@nested={0x4d, 0x12, 0x0, 0x1, [@generic="25b57e3561934efacde0a223b473fe77f3e5ba760d3793b2f943b7528ea30683bc4a506cf756740574b88d396af9b596387005002e0ccb26a568000005006f88d6e1db9b2bf7cbfa3c"]}, @nested={0x120, 0x6, 0x0, 0x1, [@typed={0x119, 0x0, 0x0, 0x0, @binary="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"}]}]}, 0x184}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) 1m30.756114904s ago: executing program 2 (id=6906): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x9, 0x4) (async) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f00000000c0)=0x9, 0x4) (async) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x26}}, @in={0x2, 0x4e21, @local}], 0x20) (async, rerun: 64) listen(r1, 0x7) (rerun: 64) openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0) (async, rerun: 64) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 64) sendmsg$NFT_BATCH(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a1d010000000000000000020000000900010073797a3000000000080002400000000098000000030a01020000000000000000020000000900010073797a30000000000900030073797a32000000006b00030091abc12404d0c4c731b168d80d1f7f1dbb33f596"], 0xfc}, 0x1, 0x0, 0x0, 0x40010}, 0x4000914) r3 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000480)={0x1f, 0x0, @none}, &(0x7f00000004c0)=0xe, 0x800) setsockopt$bt_l2cap_L2CAP_OPTIONS(r3, 0x6, 0x1, &(0x7f0000000500)={0x9, 0x8cca, 0x0, 0xff, 0x6, 0x2, 0x7fff}, 0xc) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000001c0), 0x0) (async) listen(r0, 0x7) r4 = socket$nl_route(0x10, 0x3, 0x0) (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async, rerun: 64) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000380), r7) sendmsg$NLBL_UNLABEL_C_LIST(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x28, r8, 0x10, 0x70bd29, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @local}]}, 0x28}, 0x1, 0x0, 0x0, 0x40080}, 0x4000000) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r9, 0x0) (async) writev(r5, &(0x7f0000000640)=[{&(0x7f0000000280)='4', 0x1}, {&(0x7f0000000600)="7309d14eb9340a6a762b0cca233bc50e039384591cb29340d0869ec9a33375febcc9c66c5494e88e515fbe453a53f39a8837f0ac", 0x34}], 0x2) (async, rerun: 32) r10 = socket$inet_smc(0x2b, 0x1, 0x0) (rerun: 32) connect$inet(r10, &(0x7f00000002c0)={0x2, 0x4001, @remote}, 0x10) (async, rerun: 64) r11 = socket$alg(0x26, 0x5, 0x0) (rerun: 64) bind$alg(r11, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha384)\x00'}, 0x58) (async, rerun: 32) setsockopt$ALG_SET_KEY(r11, 0x117, 0x1, 0x0, 0x0) (rerun: 32) r12 = accept4(r11, 0x0, 0x0, 0x800) write$nbd(r12, &(0x7f0000000380)=ANY=[], 0xb4) (async) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x2c}}, 0x4) 1m30.688695368s ago: executing program 1 (id=6908): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$l2tp(0x2, 0x2, 0x73) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET_FEATURE(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)={0x10, 0x3fb, 0x100, 0x70bd29, 0x25dfdbff}, 0x10}, 0x1, 0x0, 0x0, 0x20000801}, 0x800) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000001c0)="68000000000905060000000000000000020000000900010073797a3000000000140002800600010000020000050002000600000008000500000000002c00048008001d80262e51efb12c1b010000bfffff7f00000000000100706f6c50f279300008000200000000", 0x68}, {&(0x7f00000005c0)="9451287ca3554ff41ac9388e072d5c739b541a3ed9bf43d20a0b133b7a510bec04ff6437a3789143bfd1145453c80ef27ed3345b3a359d7bb3fadd78a0e48293e7b193900210794b48f97e44bec6386651f820f417c6a7495f91f97795a25977087b383d96286ee71598fd95a10e106601e3f7efe62f6e60771107bcead23d298762f6587bdbfcbab13ffe53a5d5c1b810c24a5fd8c925776d8c709f6260c6d2c18c36193132f54240733de6a7f4925032c415f206e42d4e357a2ffd6cd30f0e650ccdab68f5aa20a16b6148c36efed577f6d0d51408e596e6df47df080aaa0bf79115945329ad86a6be9764", 0xec}], 0x2}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="24000000200081dc000000000000000002000000000000263c47609c49fe800004000000aac5460efb52b2c3765815fc99eb78d230907ad638415926c750000000000000"], 0x24}, 0x1, 0x0, 0x0, 0x81}, 0x44004) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x439, 0xffffffff, 0x0, {0x0, 0x0, 0x0, 0x0, 0x9801, 0x1313}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x40008c0) r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000240)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f00000002c0)=0x10) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000840)=ANY=[@ANYBLOB="4800000010000305000000000000000000cf0000", @ANYRES32=0x0, @ANYBLOB="03000000000000002000128008000100677265001400028008000600ac14142e08000700e000030a08000a00", @ANYRES32], 0x48}, 0x1, 0x0, 0x0, 0x24040000}, 0x2000800) sendmmsg(r3, &(0x7f00000008c0), 0x4000000000001f2, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000300)={0x1, [0x0]}, &(0x7f0000000340)=0x8) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r2, &(0x7f0000000580)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000440)={0xf8, r4, 0x400, 0x70bd26, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x7467}]}, @NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0xd}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x659}]}, @NL80211_ATTR_CQM={0x54, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x10}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x4b}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x39a}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x6dc}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x4ca}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x366}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x58dd}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x5}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x5}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x20}]}, @NL80211_ATTR_CQM={0x2c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x3}, @NL80211_ATTR_CQM_TXE_RATE={0x8}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0xe8000080}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xfffffff3}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x1e}]}, @NL80211_ATTR_CQM={0x4}, @NL80211_ATTR_CQM={0x40, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x14, 0x1, [0x80000000, 0x1, 0x6, 0x8]}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x33}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x2}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xfffffffe}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x56b}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x40}]}]}, 0xf8}, 0x1, 0x0, 0x0, 0x4000000}, 0x860) 1m30.3946095s ago: executing program 4 (id=6909): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) (async) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) (async) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r3, &(0x7f00000007c0)={0xa, 0x4001, 0xfffffffe, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3d}, 0x1c) (async) getsockopt$IP_VS_SO_GET_SERVICES(r3, 0x0, 0x482, &(0x7f0000000800)=""/4096, &(0x7f0000001800)=0x1000) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=@setlink={0x40, 0x13, 0x5, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x35625, 0x40601}, [@IFLA_IFNAME={0x14, 0x3, 'veth0_vlan\x00'}, @IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x48000) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000cbd70100400000005000000080009000200000008000c00a80a000008000b000000000006000100070000000c0010"], 0x40}, 0x1, 0x0, 0x0, 0x40801}, 0x820) (async) bind$inet6(r1, &(0x7f00000005c0)={0xa, 0xe22, 0x0, @empty}, 0x1c) (async) r5 = socket$inet6(0xa, 0x2, 0x0) ioctl$SIOCGSTAMPNS(r5, 0x8907, 0x0) (async) bind$inet6(r5, &(0x7f0000001840)={0xa, 0x4e20, 0x0, @empty}, 0x1c) (async) recvmmsg(r5, &(0x7f0000001880)=[{{0x0, 0x0, 0x0}, 0xce6}], 0x1, 0x2, 0x0) (async) sendto$inet6(r5, 0x0, 0x0, 0x20000001, &(0x7f00000018c0)={0xa, 0x4e20, 0x5, @mcast1}, 0x1c) (async) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) (async) syz_emit_ethernet(0x56, &(0x7f0000000600)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaa348100000086dd60910100001c11fffe8000000000000000000000000000bbfe880000001b000000000001000000aa00010e22001c90780203000000bd2c80aeda8fa44d79ec31a58d5000"], 0x0) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWSET={0x54, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x4}, @NFTA_SET_DATA_TYPE={0x8}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x4}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xc8}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newlink={0x40, 0x10, 0xc3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x88a8}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ENCAP_TYPE={0x6}]}}}]}, 0x40}}, 0x0) (async) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_int(r7, 0x1, 0x1, &(0x7f0000000740)=0x5f53, 0x4) (async) getsockopt$inet6_tcp_int(r7, 0x6, 0x2, 0x0, &(0x7f0000000780)) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a4c0000000c0a01010000000000000000010000000900010073797a31000000000900020073797a3100000000200003801c0000800c00018008000100112233440c0002800800010055667788140000001100010000000000000000000100000a"], 0x74}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWRULE={0x8c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x60, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_IMMEDIATE_DATA={0xc, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x8, 0x1, "11223344"}]}]}}}, {0x30, 0x1, 0x0, 0x1, @lookup={{0xb}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_LOOKUP_SET={0x9, 0x1, 'syz1\x00'}, @NFTA_LOOKUP_SREG={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_LOOKUP_DREG={0x8, 0x3, 0x1, 0x0, 0x2}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xb4}}, 0x0) 1m29.848043683s ago: executing program 3 (id=6910): r0 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$pppoe(0x18, 0x1, 0x0) tee(r1, r2, 0x1ff, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0xffff, 0x2}, 0x6) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r5, 0x0, 0x0, 0x4098884, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f00000007c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x4f8, 0x0, 0xd0, 0x1a0, 0x270, 0x428, 0x0, 0xd0, 0x1a0, 0x358, 0x428, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@ipv6={@empty, @empty, [], [], '\x00', '\x00', {}, {}, 0x6, 0x0, 0x1}, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff]}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x558) r7 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r7, &(0x7f0000000d40)={0xa, 0x5000, 0x0, @loopback, 0x5}, 0x1c) writev(r7, &(0x7f0000000d80)=[{&(0x7f0000000dc0)="80c7", 0x2}], 0x1) sendmsg(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)="51bb", 0x2}], 0x1}, 0x20008045) syz_emit_ethernet(0x46, &(0x7f0000000200)={@broadcast, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x7, 0x6, '\x00', 0x10, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x2, 0x0}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0xff, 0x2, 0xe15, 0x0, 0xfffffff6}}}}}}, 0x0) sendmmsg(r2, &(0x7f0000002d80)=[{{0x0, 0x0, &(0x7f0000001e00)=[{&(0x7f0000000300)="3e5756169e7e67867c41319f5937a5759cea6f47cfa0811231372199d8023f11939e07f929c912c1691f2bb68f9ead69653201fdfffd918507f039ba19db79b89e2f46ea9890772164de3a372e67f32b2f032371491a3fc4022ba6a2bf7aac5cf799127c9f9a28b9ed6220211330683e1ae483d97f89a4d6fb3c5fc3cd2d18c06cc99438adfe6fee31085e3c0596e1789abcd9", 0x93}, {&(0x7f00000003c0)="5998c2a1758f7e71eb963595524ccf6f9dd43318a9a52b7d9a46eef4a4574e3dd65047649fa16ffd508f7788ddbc02b157481e0772d888cef2478fd6890db0ba03beb17cc025e0760dff3507713a9b9deee0ce0b93c1e9e6a93b3cd15c3200ea915473c0a4395b72124fd8971f7efb4a21ceeccb130737ecf4479431502ff4503a5694e7f64ff66478d3f2918728273077ae5268aabef4a95955214b1b9f6188698981a1de741ea9fc177f488a3e0fc647617f2d91af6823615ba3f85f3a34fbe74105439d0f82be442111a5a45643d5f19ffcbf781a6e8faf9b81eb9af32821ad1bb48878b9e2d892bab4c9467190f612a414b34b74d41cfd8f6b09ac3d", 0xfe}, {&(0x7f00000004c0)="03a9004c5423fcb04e91a59bc0104c8947a7eb5c3ef15f0544bbcb584fdab8bca4f6206237c5b595f46408e6e52661a7b0fed66138c2fcabc02f44f80baffdec8004bef9e611ca7a4107e53c79180347a7dda30fbd5a05a861002f78f6fd6fe37c37515d9bbf636d3adc26015f5153440aedf929d10141ccbd380cfbc3e3a21418c16689db4727f0c0f83d5f18f49143b2156723db763e15265a23e9b153ae832bcf1736e98123", 0xa7}, {&(0x7f0000000580)="d7583ecc2427d429b6c8b9bcb1a43af1c55902f63906dd51c90ec6a1bcb79fb2fa0ffdb99c81638236e3f7462833e00c81ec74f7c5e823d71d58501cada0423988e5c4bd3be3173be03f08589042f8ecb6c7456e217c19944e6d65504dd49bbeb1f345cd8c510be2e4387abb1627df52b416e5db4f118b734e8d1bb99ebbfcdece48f8ea0371a906174176672df4afd9e8e2666ecb37a2ec5d992e66dbbd1889c47da60a1fec1d8962fbfe7cf24214fee1142678719b094953328d2e459bdef7527b48659b441795e0f7891859aa5b2f817e509c27a4", 0xd6}, {&(0x7f0000000e00)="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", 0x1000}], 0x5, &(0x7f0000001e80)=[{0x90, 0x108, 0x6, "f4c7b75761944821c2887b9542d99e55425b7e09be9999f224972767f0c2cbe3ccaa9b5d8e831524fe08722e9953ba7f4948bd398166d58294f3fd0436e7eb269420559b90913c5f4e3ac215ff3fb3c5abbdfad90e6acb57b082c0c29c462eabb90b55aafd5db628b8dc034fd08f250be1cf0bf33f876c6cd6217f370fb8ab"}], 0x90}}, {{&(0x7f0000001f40)=@rc={0x1f, @none, 0x39}, 0x80, &(0x7f00000020c0)=[{&(0x7f0000001fc0)="b0f9d868edf3b82432a67d9e2990531553183cbc0bebcd5944374c57982b5a7f9e242232", 0x24}, {&(0x7f0000002000)="1f7c3843e5221fbad1711d9a88c46fc108794ed0afd15dccb481a8b4c8dde0bdfbb9230f4cd0c7e61ccdd5f471c0115169e023012b2df8502c9b0444cde49752716671261ce46bb7e61c7090c5afec3588d9f0d026dfa989dd4ef696db11fa3af07fbeccab70f337df6035685dc3f175b08bdc5d89663b40512de9a5b2f108ab77d1b52d332a9f32e266861472d24bd56f7e", 0x92}], 0x2, &(0x7f0000002100)=[{0x20, 0x116, 0x3, "7267832b43d7cc9f3904a1936a5bddb9"}, {0x48, 0x119, 0x7, "135b22c76085329388583923e67909dd5acad7d9873f9aea2ea39aa94ee70d653220c16b92549f386cf4b83b3984e4c9e373d9774ee8a74d"}, {0xa8, 0x104, 0x7, "096e2d04b6a6af9864623dd3432710509091bceb16333a5365ba7e9c51e09f777cf034b616f031b32c94fafb6f30d81ecffbb8181c7f2c45b23f1d45ce92004182acbc7fc06fb7d00481f2ba43e6321fdfd6fc2b66edd94f76747c6e72f6ff4bd70a448b534e49704c878e0ccd61ae46f3f77f87e0a6665574750264a53f2ba91ce75954ae5d936a6286be1c491e32816b"}, {0x40, 0x116, 0x0, "34ef50c36397206aa1a6456fcd9b292d600373f6086d945c43d2fbe2186d1c7621e29483ab5103f4d0dd6400a17f9850"}], 0x150}}, {{&(0x7f0000002280)=@vsock={0x28, 0x0, 0x2711, @local}, 0x80, &(0x7f0000002400)=[{&(0x7f0000002300)="f28dde66c3519a944b3daf09d48de733d98295757b2dbbcdb053a8f2a3dafa81f3f7eeff30a2c3bc814343a698290db13b8e456aaa66372d8e662456bd92aafe69f38848b51232048f17fd29c238b372631e66e491c284150033d55a754f9ee7ac706bb4201f2ab087bcef703c4e25aae4dcd0715a21aa3cfe8d988ad804a604279cac4d39e20a555187bd8e4be3251c359894363fe31499d39c790693cd9c19201de45bc04e0a620fd1d83c8399c975a1443de88073", 0xb6}, {&(0x7f00000023c0)="dcf9abbd8e809495907f0e49e522774e503bc20f41aac78a96c3", 0x1a}], 0x2, &(0x7f0000002440)=[{0x90, 0x10a, 0xffff, "d2b73d52698ce37e8e963351baaec3de10ae0142c9eb0815f46a8068405d2ae6d390794b557923daae88fc55f133e91d2c114829d8af061e89847953728b38bb9241b42d38bbe1d1631b5926053d59bf972703d1352d185efd107fd2b8e33580e006a3bdc159f5efec56e945ebe422506d912610dc0add175797"}, {0xf8, 0x107, 0xfffffff8, "468192887492e1445622e6f54f7e03920328d5a496bd2aed6dc2a3cc2a53ddb2b4aa2c924e30889d0b666570f0744a329be60e72d4c285378bd6b335e517df5b9089085290f6c581c9ae1a19548b986dda5ec8eaf4bbafdf7cb5bf890b7b80b597ccd75bba1a745e8416884ac3f57c04024d4b7ba1afe991213b070436de1a57985e6dd260ee73f081c68286a019eb995d8463056f3c99a62e24c642b6ee2debe5d36269a3c713d2a2e4e9031dafaccdc01d93798ac19cc3a28b19521c610b8d70d071c02fc9e8210db4651b95b5ab36a64f3e1436163c3e735ad0e179bc867d8631"}, {0xb8, 0x29, 0x3, "ff72772fab00d2747092effcde7100b631e3c1a427478d212c25fb24b5d1b02782a00692939929852b4f8c63384e11e525f242c014476b7c3dbfcbdb28fb070e77918a0b411ace8250e1db8706ffeead2602a74ec2b2e437340c76f89aaa3d98c7a89cf45bc35f63c8df94ac2e3919cf3973b549f4964e392742e15ac3588530e42d26bcb325656234bec1788621c3d684a6ffd156890bdac684d505c7bad03e4419f2b42b34d773"}, {0x100, 0x108, 0x0, "234ea82e5d9f8809060f487261afc329034d06c2cd0e263147a7683264f74c03d2231c10585589cb6c634e394f016d28215fb6b7dc10eaaeff281588871d59e81f381924ded44887d1eb02516b7ee3bc8572869b2577af43b5dd9e1e5016214ac7f15286ae5b71c68322e5fc9e12fe5abc71aa46d0129b7f97865c7063f2dcafd9c17465fd45de5154cabcf7e539e9f72770d873447cfb1078ae11a8dc0eb23452e4003107256c96cdbfa9566d80d436dfb22cda0a7b4a25e8c5134cb0b0e28c8be376ee4bd3f5a924ebcf142f694d3d06b971ca3be4f751304e1c6725b083c1e0da67dfb8b392bc5cccdfeb92b3"}, {0x60, 0xff, 0x5, "bb60dc7af0b5562374833e3487686a2baf543b2ab7ff69df5cfdad7119515b38e882c508fc6d2a44df9a1ade1d87299b90ccbef17d28edc807d471688cfa05725d8e9f553d85e08880babd23"}, {0x10, 0x119, 0x7}, {0x40, 0x1, 0xfffffffe, "ff10c994216c10a76b46e804c83ec21657c187216ec5ce18880ee6ff381d0d8a26aeff4eba730ae82c411b0600db"}], 0x3f0}}, {{&(0x7f0000002840)=@tipc=@nameseq={0x1e, 0x1, 0x3, {0x0, 0x3}}, 0x80, &(0x7f0000002ac0)=[{&(0x7f00000028c0)="7a83b12a9650db812963fee4d3a577b75b92ab31aa0d9e6396da07f9bafb36a146499d96c4733251e81f1e7ca0737722820c5c39e0fa555b90fd1a00dd4678a4c22d584a24759c410ecd21f5356208956e4462ccce99b8b6f31d9b4d9c9b30eb1344560a1912b85df218d0469d974f48fed8dd8e54f9f1731e295094fbaa40943c92acdb4b38e09a510092c07f405246ea1417ee81c701ceed995d5e7c42537eda7824497093819fd33dabee9597ef6a8aebaf1f9a7556165a932bab191cb25618f177727278584b705eae2d13f62bfa866a7e8a267f6d7197f23499673b89048a71d85ffd00bbe395699ee31d2cf0afda", 0xf1}, {&(0x7f00000029c0)="c2dfe5e2c6bfffa3ee88c2bb2d07931a900bbc1b7be2fb4ac75d5163a65722cf7aac7226491bb684922f163e3a", 0x2d}, {&(0x7f0000002a00)="cfbc0bf81f07854dcacc97b638cca50efab650e12aaa94837ae552c8774cc9531f19e34c8300d68e455941891c703f01273227d194f2ce52fd5acf9f622eeeb9394e6def95a549755818e655d3d858a3bacaf544e9d58ebe92718cf96ceaa7f2bdbe472e79d79a1ad0e0a191c48bae1300fcbca27a2c68727933d30fa2b7f302813512cfa78851c25a5bdf9f3a3b559f3925e9a514567be075fd011b19df26dad79adf36725841", 0xa7}], 0x3}}, {{&(0x7f0000002b00)=@qipcrtr={0x2a, 0xffffffff, 0x4000}, 0x80, &(0x7f0000002d40)=[{&(0x7f0000002b80)="4b9a1fc78b53296f074e6c35796c639d256141fc6118112d9d83e144634f27c26c5a2c4f4e5b9b4d3cea152a64437c7ccd3c99a4ea2c175caeb178cdc3e628e34e8f9b1479fe19aaf1e972413fd1299c84cb4c24c8612c78f68a3016e14c48a153caa71b57dd07679af35ed7c7aaba47fdad416d593f72562d7e0f54c131a1bc30644abc0ccd9bd55102b451", 0x8c}, {&(0x7f0000002c40)="a2f875122b320e5f98c6d7b203c99c9e04718eb92c9e716f1c17ed1bde6407522e3209940f05c82388ec121ad72c94d87861498463bf1dd6d2899d3dca6f9c229dd582c841530483c19b3aeb05ed42d5ed5e8a47f3e491456fb2f183dcbee49d1977c44500f3f76d7bd4c90dfd5fc3ec3d460400b47deb7602b84e79f49dbccbf9cd9ee00adba241aa36081c59cfd7cbe0df78e01b74866181c11e22b4810f3dbd595cc4b73afe7b35c393016fbe8fee96998093b296619e89d406fce82c71143cda7a8a227ff7883f295f5a0933746a90d80dcfd696", 0xd6}], 0x2}}], 0x5, 0x24000000) sendto$inet6(r5, &(0x7f00000002c0), 0x3000, 0x0, 0x0, 0x0) bind$bt_hci(r4, &(0x7f00000000c0)={0x1f, 0x3}, 0x6) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000011080)=@gettaction={0x14, 0x32, 0x6dd711a25f4cb68b}, 0x14}}, 0x0) 1m29.800643671s ago: executing program 1 (id=6911): mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYBLOB="9feb010018030000000000007c0000007c00000002000000000000000000000e0000000000000000000000000600000d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c00000000000000000000000900000000000000000000000900000000000000000000000a02"], 0x0, 0x96}, 0x28) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x4, 0x0, &(0x7f00000005c0)=0x37) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000600)={&(0x7f0000000640)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct={0x0, 0x0, 0x0, 0x4, 0x0, 0x1000}]}}, 0x0, 0x26}, 0x28) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000800)={&(0x7f0000000840)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x6, [@var={0x4, 0x0, 0x0, 0xe, 0x4}, @func_proto={0x0, 0x0, 0x0, 0xd, 0x4}, @typedef={0x0, 0x0, 0x0, 0x10, 0x4}, @volatile={0x0, 0x0, 0x0, 0x4}]}, {0x0, [0x0, 0x0, 0x0, 0x2e]}}, 0x0, 0x52}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x4, 0x4, &(0x7f0000000980)=@ringbuf={{}, {}, {}, [@jmp, @cb_func, @ringbuf_output]}, &(0x7f0000000a80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r2, 0x0, 0x0, 0xfffffce5, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0x3, &(0x7f0000000740)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a}}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f00000007c0), 0x2, 0x0, 0x0, 0x1d6225b, 0x0, 0x0, 0x14}, 0x90) r3 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0xe, 0x3, &(0x7f0000000480)=@framed={{0x62, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0xa3}}, &(0x7f00000004c0)='GPL\x00'}, 0x90) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) r5 = socket$kcm(0xa, 0x1, 0x106) socket$can_raw(0x1d, 0x3, 0x1) sendmsg$kcm(r5, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x20000011) sendmsg$kcm(r5, &(0x7f0000000100)={&(0x7f0000000200)=@in6={0xa, 0xfffe, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x2}, 0x80, 0x0}, 0xe07e872420dfefca) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="20000000240007012ebd7000fbdbdf25027c00000c0001800100020001000000"], 0x20}, 0x1, 0x0, 0x0, 0x4048011}, 0x4008090) sendmsg$ETHTOOL_MSG_COALESCE_SET(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000affc21dc000000100000001800018014000200776c616e300000000000000000000800080006"], 0x34}, 0x1, 0x0, 0x0, 0x40000c5}, 0x4040010) getsockopt(r3, 0x3, 0xe, &(0x7f0000000000)=""/114, &(0x7f0000000080)=0x72) 1m29.646656721s ago: executing program 2 (id=6912): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="240000001800010000000000000000001d01040008000900", @ANYRES32=r2, @ANYBLOB="08000a00bec88d6009c68763bc524a1a"], 0x24}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 1m28.799787257s ago: executing program 4 (id=6913): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'macvlan0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000001c0)={'ip6tnl0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0xed27c9fa5277b9b7}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_ALPHA={0x1, 0x5, 0xd}, @TCA_FQ_PIE_TUPDATE={0x8, 0x4, 0xfffffff8}]}}]}, 0x44}}, 0x20008000) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x275a, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r7, &(0x7f0000000100)=0xffffffffffffffff, 0x12) sendfile(r7, r6, 0x0, 0xbdc4) r8 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r8, 0x29, 0x39, &(0x7f0000000140)="ff0204000000000100000000000000000000000000000205", 0x18) getsockopt$inet6_opts(r8, 0x29, 0x39, 0x0, &(0x7f0000000180)=0x35) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r1, @ANYBLOB="00001700000000001c0037800b0001206970768a616e08000c0002800600010000000000050027"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0) 1m28.13292078s ago: executing program 1 (id=6914): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000400)=0x46c, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000440)={'bridge0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000480)="09000000e70014000000d97b786ae7f69bf079aa060088a800a888a800990200", 0x20, 0x80080000000000, &(0x7f00000004c0)={0x11, 0x8100, r1, 0x1, 0xc, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x24}}, 0x14) 1m27.894511801s ago: executing program 3 (id=6915): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000240)=[@in={0x2, 0x4e22, @private=0xa010101}, @in6={0xa, 0x4e20, 0x3, @mcast2, 0x4}], 0x2c) syz_emit_ethernet(0x62, &(0x7f00000013c0)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x54, 0x0, 0x0, 0xfc, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x10, 0x8, 0xca, 0x0, 0x1000, {[@timestamp={0x8, 0xa, 0x81000000, 0xfbc}, @sack_perm={0x4, 0x2}, @exp_smc={0xfe, 0x6}, @timestamp={0x8, 0xa, 0x9, 0x401}, @generic={0x5, 0xc, "97134cb6ce50e935f628"}, @fastopen={0x22, 0x2}]}}}}}}}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000012c0)=ANY=[@ANYBLOB="3400000068000100000000000000000000000000000000001c0002000000000000000000020000000000b45cbe"], 0x34}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x6e, &(0x7f0000001440)={@local, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010101, @local}, @redirect={0x5, 0x1, 0x0, @multicast2, {0x11, 0x4, 0x0, 0x28, 0x4, 0x0, 0x0, 0x2, 0x89, 0x0, @rand_addr=0x64010101, @multicast2, {[@timestamp_addr={0x44, 0x1c, 0x95, 0x1, 0x7, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x2000}, {@private=0xa010101, 0x401}, {@local, 0x3}]}, @timestamp_prespec={0x44, 0x14, 0x44, 0x3, 0x5, [{@rand_addr=0x64010100, 0x9}, {@private=0xa010101, 0xfffffffd}]}]}}}}}}}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r3) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001340)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="1fc7", @ANYRES32=r5, @ANYBLOB="0c00990001800000220000000a00060008021100000100001a002a000602f5ff8c10b101ebe15718b61bdb68941c7c20512e00000800260099090000"], 0x58}, 0x1, 0x0, 0x0, 0xf040}, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000200)=0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r1, 0x50009417, &(0x7f00000002c0)={{r3}, r6, 0x1a, @unused=[0x91, 0x1, 0x0, 0x1], @subvolid=0x464}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB="00000000281207020800edff8100001ef9001b0000000000"], 0x30}}, 0x4004090) 1m27.656509777s ago: executing program 2 (id=6916): r0 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000100)={r0}) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f00000000c0)) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r1) sendmsg$NL80211_CMD_SET_KEY(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x28, r3, 0x9, 0x70bd25, 0xfffffffe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x2}]}, 0x28}}, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r4, 0x107, 0x5, &(0x7f00000009c0)=@req3={0xf, 0x3, 0x9, 0x7fffffff, 0x6, 0xa0, 0x40004}, 0x19) syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x20000000) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0xc, 0xe, &(0x7f0000000300)=ANY=[@ANYBLOB="b702000000004000bfa300000000000007030000fdfdfff67a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040000010000400404000001000000b7050000000000006a0a00fe00000000850000000a000000b70000000000000095000000000000009cc6b3fcd62c7d376238975d43a4505f80fc88943c4f0cf0dd467b592f868ee30ad5707bfd2d84aaa3b1d4e984c46ea7e2a447a36f5662403e1b2be4cc7c2683908a0d411a9872971c7c56f0979bd10b6d0e196bf02f46c7953ab1abda45cbe8d0d24b5069f8a98f7dc8f76b74635fc9f9de9ca3c00cb9bf4e4fd8f36e15fdd97870f2bdf4000000000000b0c2940dd8e263aa743f0400000000000000b100400600e1ffff8816326d7d25c32aac1c5d5b5be399f6609876b5887437a172fbc02a74067529194e533583412dff048f0000000000000000b2728a0481e9d6da43bb6cfb851cd364ff19ffcafe3e64be033c9d2f002cc93c1c13caec04a347903420336bec88c24a9fb6a6991ddb737d527d6acb15426415b6e8b1cbf698fce63a4fdfa2c6e94bd0339454c13ad3e328a100000000b515a1000000000000000eb2e9c15b6c8f6198282df27badac8507bc7d202e0990e0000000008919b3efce02a602b4ad38098774d1feaf5f277a4462a2fff2d6ff4780f9a30a2a5f5f284c00ad35e0a6f6a0f9dae214546d24ff6a9b8ced90b508dc3b55a8259614b731af86503e5849dc87ab86ec0f6a48f0d32f0d4a5f6a03c33600000bb44f2d80363dee9163424ac31469266877942abdbbb3729fd59c0ff048ed3fb58c81b76100aeaa4619668a2c4ef4e159d4594396864965422fe5f8c8181309becc88091dd6641c2d7e5a68ecbe778f2aae1742b92dc6854de98da66f8e38d1eca95809b738c8ddcf4cf1693cf61c2ae0a9c27bd1a6f1e72550fbb1f1543a9bcd48de44e837db44e2be1c364f1cdb53a1ed4169434fc8f705e262fb793cf25bcd60310991f0b0634fa08308c7105e2378d42eb22e035a88305f8342834cba801f76f820ed6def799116ce2336cd308544fbd3b74e0600968fce3c425729a77e3d089356654680e715f4ce5c1a39e4a63d8a67d6dbe1d3c26affdb25cbe15923f62849392cf4fb0327877e22a4dc617a5541a7fb89223888c76d65850dd99997e727557a477a1131d06f6f7360cfcf137ccd2e0d516bb31be411b0c7bd1bd24d3dc2d8e3f4cdfa872b66d89332e313934e9e9a3471f7170832a753bb2a8e4aa6321b1a6546a56e4121231380b04eb55337c7edc66d6e3400b06fcb31b659be19cff61cfac6f1b771967a60efb51c206ea0cbab9bef181cc917fca894189514e85d6e1d9249f8caa701b4357ae5b9117225d1f5ca89a4bb7d49086ea61948926db5132f2e29bf45a1429c19ba1adc457e2963d1474d85aeb3cca158e3fd4b7a05250ceafd44f46af924916ce9ce9a8881aad996ddaaf3fbd52e636367e9f90ab1c773fa96e538e7f87a21206a804524e1dc9fea9772b009bc49a8d787a90e78badf58e37b3cf6f64861d416e859994e4deca6f39551e73c7e332de66be92ecb94e63ecbc07f8f799536be0da90fa824b3f4965caa19b5556907746aec5db9fea5e5e69de3bd13a70c1374683a0e63ff6f6f51136d16e04bbd8ba0c96e0b562f5425614d80de6ba5e901587bb5c1f83382aab6efcccef90fdbebcc4ffed3af40365583fb800cf5ec6496a2a47f2217c7160f88b192ddec89558140447ec86726db3bfe9d22390085b1638f9ebf3219b426dcb69ff80f5b5be82803555c8421c17c9d39f9c1de9e8e7dedf826b00fd8860046e36f790e8e6796db3b778ff4f0fc2b79a5ca96ff3907452ed76bc5e63218ea96866ae2b265ab11206301bfb909a7fd77653c73b6d46a242864f839e5646cc5ada07fba0d9cf6f840179c34de5e9aa58d5b1ca5327dc945267524b8c363b7f847491b5939cf608927c797af1300"/1426], &(0x7f00000008c0)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r5, 0xffff0002, 0xe, 0x0, &(0x7f0000000980)="2b206d074843b397737ea49da2aa", 0x0, 0xeffc, 0x720e, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(0xffffffffffffffff, 0x0, 0x20008000) close(0x3) 1m27.126452534s ago: executing program 1 (id=6917): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x82307201, &(0x7f0000000080)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) getsockopt$bt_hci(r1, 0x84, 0x85, &(0x7f0000001240)=""/4107, &(0x7f0000002280)=0x1012) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x148, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffe, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}, {0x16}}, [@qdisc_kind_options=@q_red={{0x8}, {0x11c, 0x2, [@TCA_RED_PARMS={0x14, 0x1, {0x3f26, 0x7, 0x81, 0x5, 0xb, 0x14, 0xd}}, @TCA_RED_STAB={0x104, 0x2, "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"}]}}]}, 0x148}}, 0x0) 1m27.016484983s ago: executing program 4 (id=6918): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000500003050000000040000000000000009d4db53edd304326f579db8dc5644887bdfa540a4255e380d2840c443bf36cad6c8879df1ae34cf0efc7e9d070c2b10d970f336346c3a838cde9241fe1e04e1c72bc11b560720b8580bd974fc020bc99e5", @ANYRES32=0x0, @ANYBLOB="40000000000000001400128009000100766c616e00000000040002800500100009000000"], 0x3c}}, 0x0) 1m26.814451827s ago: executing program 3 (id=6919): ioctl$PPPIOCGIDLE(0xffffffffffffffff, 0x8010743f, &(0x7f0000000000)) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x58, 0x1412, 0x100, 0x70bd27, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x5}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x2}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x2}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x5}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0xc800}, 0x10) r1 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$IP_VS_SO_SET_DELDEST(r1, 0x0, 0x488, &(0x7f0000000180)={{0x2f, @remote, 0x4e20, 0x0, 'lblc\x00', 0x5, 0x6, 0x3f}, {@multicast1, 0x4e20, 0x3, 0x1, 0x8, 0x2}}, 0x44) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r2, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, 0x1407, 0x20a, 0x70bd26, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz1\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000300)={0x0, 0x5, 0x2, 0x0, 0x9}) setsockopt$IP_VS_SO_SET_DEL(r1, 0x0, 0x484, &(0x7f0000000340)={0x2e, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e21, 0x4, 'lc\x00', 0x4, 0xfffffff7, 0x2}, 0x2c) ioctl$XFS_IOC_START_COMMIT(0xffffffffffffffff, 0x80585882, &(0x7f0000000380)={0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_MPP(r3, &(0x7f0000000580)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x7c, r4, 0x200, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}]}, 0x7c}, 0x1, 0x0, 0x0, 0x40080}, 0x4004891) getsockopt$PNPIPE_IFINDEX(r3, 0x113, 0x2, &(0x7f0000000600)=0x0, &(0x7f0000000640)=0x4) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r3, &(0x7f0000000740)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x50, 0x0, 0x200, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x8}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x481ab671}]}, 0x50}, 0x1, 0x0, 0x0, 0x4c0d0}, 0xb402e5acc1028730) ioctl$XFS_IOC_FD_TO_HANDLE(r0, 0xc038586a, &(0x7f0000000880)={r2, &(0x7f0000000780)='syz1\x00', 0xa000, &(0x7f00000007c0)={@_ha_fsid={[0xff, 0x3ff]}, {0xffff, 0x7, 0xffffffff, 0x3}}, 0x1000, &(0x7f0000000800)={@_ha_fsid}, &(0x7f0000000840)=0x5a5}) setsockopt$packet_int(r7, 0x107, 0x12, &(0x7f00000008c0)=0x6, 0x4) sendmsg$RDMA_NLDEV_CMD_RES_GET(r0, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x38, 0x1409, 0x20, 0x70bd26, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x2004080}, 0x24000001) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000a00)={'wlan0\x00'}) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r3, 0x8983, &(0x7f0000000a40)={0x6, 'vlan0\x00', {0x3}, 0x5}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ac0), r7) sendmsg$NL80211_CMD_ABORT_SCAN(r7, &(0x7f0000000b80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x20, r8, 0x4, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x2, 0x38}}}}, ["", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4800}, 0x4008050) ioctl$BTRFS_IOC_SPACE_INFO(r1, 0xc0109414, &(0x7f0000000bc0)={0x76b, 0x3, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) ioctl$OCFS2_IOC_RESVSP64(r1, 0x4030582a, &(0x7f000000be00)={0x0, 0x2, 0x8, 0x1, 0x40, 0x9}) ioctl$sock_inet_sctp_SIOCINQ(r7, 0x541b, &(0x7f000000be40)) sendmsg$NFT_MSG_GETSET(r7, &(0x7f000000c000)={&(0x7f000000be80)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f000000bfc0)={&(0x7f000000bec0)={0xcc, 0xa, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0x2}, [@NFTA_SET_USERDATA={0xb5, 0xd, 0x1, 0x0, "28e1ecd22aea2613c72fedfc7cb924830e6aac30fe0d648d00c4d5938045ce44574a07fc4ffad550528cf86a066251d24f1eecf2a786d0180840d0d781fdccfc830230b29c8534aa2cb050ef894052efad05f41d2c7a688bc48d229a57a762e0572b3e543944482641b77fb716f7f1bcb54d81a6b97774143680c316c77a20a419597dd0172e69d4f613ed20c602886fbef32a2773fd60622ced609991ae9f07c53d0426ebc6f2c4a5370df709073f1f62"}]}, 0xcc}}, 0xc0) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f000000c080), r7) sendmsg$ETHTOOL_MSG_STATS_GET(r3, &(0x7f000000c140)={&(0x7f000000c040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f000000c100)={&(0x7f000000c0c0)={0x14, r9, 0x800, 0x70bd2a, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x5) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f000000c180)={0x0, 0x2, 0x3, 0x3}) ioctl$sock_SIOCOUTQ(r7, 0x5411, &(0x7f000000c1c0)) 1m26.436337477s ago: executing program 4 (id=6920): getsockopt$inet6_mptcp_buf(0xffffffffffffffff, 0x11c, 0xf2af5942504dd83b, &(0x7f0000000000)=""/248, &(0x7f0000000100)=0xf8) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000140)={0x8001, 0x9, 0x4, 0x9, 0x1}, 0x14) close(0xffffffffffffffff) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x300000f, 0x100010, 0xffffffffffffffff, 0x763c8000) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x6, 0x31, &(0x7f0000000180)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x3}, {}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @ldst={0x1, 0x0, 0x0, 0x1, 0x5, 0xffffffffffffffe0, 0xffffffffffffffff}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}}, @ldst={0x3, 0x1, 0x3, 0x0, 0xa, 0xffffffffffffffff, 0xfffffffffffffffc}, @map_idx={0x18, 0xb, 0x5, 0x0, 0xc}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1c9b}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000340)='GPL\x00', 0xffff, 0x2b, &(0x7f0000000380)=""/43, 0x40f00, 0x44, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000003c0)={0x2, 0x9, 0xdb0f, 0x5}, 0x10, 0x0, 0x0, 0x7, &(0x7f0000000400)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000440)=[{0x3, 0x4, 0x4, 0x1}, {0x2, 0x3, 0xc, 0x1}, {0x3, 0x4, 0x6, 0x4}, {0x2, 0x2, 0xc, 0x1}, {0x5, 0x3, 0x9, 0x2}, {0x2, 0x4, 0x6, 0xb}, {0x3, 0x5, 0xf, 0x3}], 0x10, 0xe4}, 0x94) bpf$BPF_PROG_TEST_RUN_LIVE(0xa, &(0x7f0000000680)={r0, 0x0, 0x81, 0x0, &(0x7f0000000580)="5fc0d2cb998fb765e8ca1bf6bd6858ea75f17696a968c54f5cb238276e6a4b3c23854389c83d96f3637a80f3a3e772b22321eba63a11ae4b0fd887856b73fdb2ec648cbf55c92b9f78d576b5c57c78c18de29249f1587bcf7d3831a3a1e9bb0f936bcfe0f2ad656d63ffa507c91902245b550da9126685d56736ef2f95ff5a015a", 0x0, 0x1, 0x0, 0x36, 0x0, &(0x7f0000000640)="37016a6be58bdea1f8416afbe61f071d6f9280d70ffda347323089aaa6c5216c6303ee6ac46c8b41d1c1133f30415331dd6aa14969d5", 0x0, 0x2, 0x0, 0x9}, 0x50) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ZERO(r1, 0x0, 0x48f, &(0x7f0000000700)={0x2b, @loopback, 0x4e20, 0x3, 'ovf\x00', 0x8, 0x6, 0x4b}, 0x2c) r2 = socket$phonet(0x23, 0x2, 0x1) ioctl$SIOCPNADDRESOURCE(r2, 0x89e0, &(0x7f0000000740)=0x1) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r3, &(0x7f00000008c0)={&(0x7f0000000780)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0002}}}, 0x14, &(0x7f0000000880)={&(0x7f00000007c0)="29a9fb4c0de4922f9b89c8b85bc219e1e47c5e7baab16caa65ec9871c9174cc553023a8cff35022d53c5397bd7a7565fd855bb7177eded1b3f4cb3d06fca9bb0f1cc0d378a294d48ac3c145f30c0779bfc2080289d03680c166c252dbea0d2dbab02e0ab37ebb200c3673cb2d65d8a211abd2cc61538b61f7f1ab9a5af88a14f911b9dd0455f6b25abef692a56037f439498658afb586d4fe6587ed42829f27e365c23ad5e121a8761cbd89a9270db56593a29cae31ece20", 0xb8}, 0x1, 0x0, 0x0, 0x4004000}, 0x800) recvmmsg(r1, &(0x7f0000000900), 0x0, 0x40000042, &(0x7f0000000940)) ioctl$NILFS_IOCTL_SYNC(0xffffffffffffffff, 0x80086e8a, &(0x7f0000000980)) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r4, &(0x7f00000009c0)={0xa, 0x4e24, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x2}, 0x1c) ioctl$XFS_IOC_FD_TO_HANDLE(r0, 0xc038586a, &(0x7f0000000b00)={r4, &(0x7f0000000a00)='\x00', 0x481901, &(0x7f0000000a40)={@_ha_fsid={[0x4, 0xfffffff7]}, {0x0, 0x0, 0x401, 0x296}}, 0x6, &(0x7f0000000a80), &(0x7f0000000ac0)=0x8}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000bc0)={{r5}, &(0x7f0000000b40), &(0x7f0000000b80)=r3}, 0x20) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000c00), 0xffffffffffffffff) sendmsg$NFQNL_MSG_VERDICT(r5, &(0x7f0000000d80)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000c80)={0xb8, 0x1, 0x3, 0x301, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFQA_CT={0x98, 0xb, 0x0, 0x1, [@CTA_TUPLE_ORIG={0x64, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @local}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @local}}}]}, @CTA_STATUS_MASK={0x8}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x6}, @CTA_PROTOINFO={0x20, 0x4, 0x0, 0x1, @CTA_PROTOINFO_DCCP={0x1c, 0x2, 0x0, 0x1, [@CTA_PROTOINFO_DCCP_HANDSHAKE_SEQ={0xc, 0x3, 0x1, 0x0, 0x3}, @CTA_PROTOINFO_DCCP_HANDSHAKE_SEQ={0xc, 0x3, 0x1, 0x0, 0x4000}]}}]}, @NFQA_VERDICT_HDR={0xc, 0x2, {0x0, 0x7fff}}]}, 0xb8}, 0x1, 0x0, 0x0, 0x90}, 0x881) getsockopt$ARPT_SO_GET_ENTRIES(r1, 0x0, 0x61, &(0x7f0000000dc0)={'filter\x00', 0xd9, "e28aecdc45b288eb50c856ab562821be05836147da9d33d0b175ec2ba370c88bff0a7c040a9069f5f47a94dd6c168a51d1e92b45def7c12ff5634a9e8bf881e4ad05311f350ffad188db9a6f6c2c50173b7b3449cafe90f4d5dcc56fa98945ffc9c6b95751cdece829c67b3677a9ef203fba0c00c1e72408dc9ebbbce5dba38fb6b5c86f5c20997e26d2e757b5542d374cf7b6f5bcd6df7a9039560df31070640fc012db992a57d0b685d679f32d31760574c5ed6f922e483b006a6eeca4e55ae7fc777abec29a89db05f99e05f790882666ef5c2778ceb5b3"}, &(0x7f0000000ec0)=0xfd) setsockopt$bt_BT_FLUSHABLE(r5, 0x112, 0x8, &(0x7f0000000f00)=0x7, 0x4) setsockopt$bt_BT_POWER(r5, 0x112, 0x9, &(0x7f0000000f40)=0x7f, 0x1) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f0000001040)={'sit0\x00', &(0x7f0000000fc0)={'syztnl0\x00', 0x0, 0x7, 0x8, 0xffff, 0x6, {{0xf, 0x4, 0x2, 0x3f, 0x3c, 0x67, 0x0, 0x9, 0x29, 0x0, @empty, @multicast1, {[@generic={0x89, 0xe, "c62e8c8840ad4dd301219209"}, @generic={0x88, 0x7, "8bea8ac8d2"}, @generic={0x86, 0x6, "d1c078f1"}, @noop, @generic={0x83, 0x6, "4ef8c7c4"}, @ra={0x94, 0x4, 0x1}]}}}}}) sendmsg$nl_route_sched(r5, &(0x7f00000015c0)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001580)={&(0x7f0000001080)=@deltfilter={0x500, 0x2d, 0x300, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0x4, 0x1}, {0xd, 0x9}, {0xfff2, 0x5}}, [@TCA_RATE={0x6, 0x5, {0x5, 0xb}}, @TCA_RATE={0x6, 0x5, {0x0, 0x98}}, @filter_kind_options=@f_flow={{0x9}, {0x4c0, 0x2, [@TCA_FLOW_XOR={0x8, 0x7, 0x5}, @TCA_FLOW_EMATCHES={0x4ac, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xfffb}}, @TCA_EMATCH_TREE_LIST={0x1e4, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x14, 0x3, 0x0, 0x0, {{0x0, 0x2, 0xe35}, {0x800, 0x4, 0x2, "a00917b1"}}}, @TCF_EM_NBYTE={0x1c, 0x3, 0x0, 0x0, {{0x95a8, 0x2, 0xfffb}, {0x2, 0xa, 0x0, "4a9ee66ec0d36523e455"}}}, @TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0x0, 0x1, 0x9}, {0x33b32ebd, 0x4da, 0x2, 0x2, 0x1}}}, @TCF_EM_IPT={0x128, 0x2, 0x0, 0x0, {{0x1, 0x9, 0x1400}, [@TCA_EM_IPT_MATCH_DATA={0x102, 0x5, "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"}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x1}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x5}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x3}]}}, @TCF_EM_META={0x40, 0x1, 0x0, 0x0, {{0x40}, [@TCA_EM_META_LVALUE={0x9, 0x2, [@TCF_META_TYPE_VAR="4e8b375eac"]}, @TCA_EM_META_RVALUE={0x9, 0x3, [@TCF_META_TYPE_VAR="83", @TCF_META_TYPE_INT]}, @TCA_EM_META_LVALUE={0x6, 0x2, [@TCF_META_TYPE_VAR="7f73"]}, @TCA_EM_META_LVALUE={0x11, 0x2, [@TCF_META_TYPE_VAR="ac14a055aca99eb0", @TCF_META_TYPE_VAR="d5d1f80923"]}]}}, @TCF_EM_NBYTE={0x18, 0x2, 0x0, 0x0, {{0xc7, 0x2, 0xc5}, {0x81, 0x8, 0x0, "0006516e8401a3b1"}}}, @TCF_EM_CMP={0x18, 0x3, 0x0, 0x0, {{0x3, 0x1, 0x4}, {0x7f, 0x1, 0x2, 0x6, 0x6, 0x2, 0x3}}}]}, @TCA_EMATCH_TREE_LIST={0x27c, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x134, 0x3, 0x0, 0x0, {{0xfffa, 0x9, 0x4}, [@TCA_EM_IPT_HOOK={0x8, 0x1, 0x1}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0xa}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x21}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x3}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x1}, @TCA_EM_IPT_MATCH_DATA={0xff, 0x5, "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"}]}}, @TCF_EM_META={0x18, 0x1, 0x0, 0x0, {{0x4, 0x4, 0xfff9}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x2, 0xff, 0x1}, {0x7, 0x4, 0x1}}}]}}, @TCF_EM_CMP={0x18, 0x3, 0x0, 0x0, {{0x3c, 0x1, 0x9c}, {0x40, 0x2, 0x1, 0x6, 0x2, 0x1}}}, @TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0xe49, 0x1, 0xf}, {0x5, 0x874, 0x3, 0x7, 0x3, 0x2, 0xb048cceb68482704}}}, @TCF_EM_IPSET={0x10, 0x2, 0x0, 0x0, {{0xa1}, {0xffffffffffffffff, 0x4}}}, @TCF_EM_META={0xd4, 0x3, 0x0, 0x0, {{0x800, 0x4, 0x4174}, [@TCA_EM_META_RVALUE={0x1d, 0x3, [@TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_VAR="a8cddf417cb934892d", @TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_VAR="6286", @TCF_META_TYPE_VAR="21244587383d"]}, @TCA_EM_META_LVALUE={0xd, 0x2, [@TCF_META_TYPE_VAR="cb5325afd18f821c", @TCF_META_TYPE_VAR="90"]}, @TCA_EM_META_HDR={0xc, 0x1, {{0xe}, {0xa5be, 0xb, 0x2}}}, @TCA_EM_META_LVALUE={0x1c, 0x2, [@TCF_META_TYPE_VAR="6ea0", @TCF_META_TYPE_VAR="4b7197525f6778931c22", @TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_INT=0x2]}, @TCA_EM_META_LVALUE={0x8, 0x2, [@TCF_META_TYPE_INT=0x5]}, @TCA_EM_META_RVALUE={0x11, 0x3, [@TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_VAR="8e3fe9ba4ba0ebf96a"]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x3, 0xb, 0x2}, {0x80, 0xff, 0x1}}}, @TCA_EM_META_RVALUE={0x20, 0x3, [@TCF_META_TYPE_VAR, @TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_VAR="0428d8251ffca3e13247", @TCF_META_TYPE_VAR="c078", @TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_INT=0x2]}, @TCA_EM_META_RVALUE={0x26, 0x3, [@TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_VAR="38a56b", @TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_VAR="0be615ed6fce6d", @TCF_META_TYPE_VAR="f1da04", @TCF_META_TYPE_VAR="4b8fae7a72", @TCF_META_TYPE_INT=0xa]}]}}, @TCF_EM_META={0x18, 0x2, 0x0, 0x0, {{0x1ff, 0x4, 0x2}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x1, 0x6, 0x1}, {0x800, 0x1, 0x2}}}]}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x1, 0x1, 0x9a}, {0x4, 0xfffffffe, 0x1, 0x4, 0x2, 0x1}}}, @TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x4, 0x7, 0x7}, {{0x1, 0x0, 0x0, 0x1}, {0x1, 0x1, 0x1, 0x1}}}}]}, @TCA_EMATCH_TREE_HDR={0x8}]}, @TCA_FLOW_BASECLASS={0x8, 0x3, {0xffff}}]}}]}, 0x500}, 0x1, 0x0, 0x0, 0x4000}, 0x1) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000001640), r5) sendmsg$DEVLINK_CMD_RELOAD(r5, &(0x7f0000001700)={&(0x7f0000001600)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000016c0)={&(0x7f0000001680)={0x38, r7, 0x1, 0x70bd26, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r5}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x10000080) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r8, 0x84, 0x8, &(0x7f0000001740)=0x7, 0x4) ioctl$BTRFS_IOC_RESIZE(r1, 0x50009403, &(0x7f0000001bc0)={{r0}, {@val, @max}}) 1m26.197741645s ago: executing program 32 (id=6854): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r3 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000100)={'wlan0\x00'}) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000000240)={r0, 0xfffffffffffffec0, 0x6, 0x9}) r5 = socket$unix(0x1, 0x5, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000001600)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001d40)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x240080c1}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001780)={&(0x7f00000017c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x80000, {0x0, 0x0, 0x0, r7, {0x0, 0x6}, {0x3, 0xb}, {0x0, 0x6}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2404c0f1}, 0x6008000) bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000380)=ANY=[@ANYBLOB="1c00000004000000410000000000000001000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0200"], 0x48) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000001880)={0x0, 0x0}, 0x8) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000018c0)=r8, 0x4) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r3, 0x4058587a, &(0x7f0000001a80)={{r3, &(0x7f0000001900)='wlan0\x00', 0x600, &(0x7f0000001940)={@_ha_fsid={[0xfffffff7]}, {0xb, 0x1ff, 0x9e6, 0x3dbb}}, 0x0, &(0x7f0000001980)={@_ha_fsid}, &(0x7f00000019c0)=0x2}, {[0xd9, 0x3, 0xed, 0x4]}, 0x95, 0x74, &(0x7f0000001a00)=""/116}) r10 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001b00)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="03000000040000000100"/28], 0x50) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000021c0)=ANY=[@ANYBLOB="2100000000000000000000002700000000040600", @ANYRES32=0x1, @ANYBLOB="0003002000009700"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000400000000000000000000004cac3e8d68a6e21e47d0415f8ffb6d93999a349053a94e64bf39f376c79035d8f21d15f4f7b51377872f9c3da35d325e264e9739dafdd7328955f2d4782722be36181d9f1f139f849a111aff070000386de988a1910d6ce7552c1efc2a2a6280ee7834aa21c1e80b6e1aabe30b1734dd950989031fcec4759bc2bc6eb142ef9d4e8518e996a9e677f22af7ad399c436000"/176], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001c00)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000001c80)={0x1e, 0xf, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000090000000000fb00b900000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000340)='syzkaller\x00', 0x8, 0x1000, &(0x7f0000000600)=""/4096, 0x40f00, 0x77, '\x00', r7, @sk_lookup, 0xffffffffffffffff, 0x8, &(0x7f0000001800)={0x7, 0x5}, 0x8, 0x10, &(0x7f0000001840)={0x0, 0x1, 0xfffffff9, 0x7}, 0x10, r8, r9, 0x0, &(0x7f0000001c40)=[r0, r10, r11, r12], 0x0, 0x10, 0x1ff}, 0x94) r13 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_INIT(r13, 0x29, 0xc8, &(0x7f0000000000), 0x4) setsockopt$MRT6_TABLE(r13, 0x29, 0xd1, &(0x7f0000000040)=0xfe, 0x4) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="75609fe6bdd8a2444ee905", @ANYRES16=r1, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r2, @ANYBLOB="0800050006000000"], 0x24}}, 0x0) setsockopt(r0, 0x5, 0xc, &(0x7f0000000000), 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000200)={'wlan0\x00', 0x1}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x0) bind$packet(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb01001800000000000000380000003800000004000000020000000000001104000000000000000000000000eb8b793c000000020000000000001202000000020000000000000e030000000000000000006100"], 0x0, 0x54}, 0x20) write(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_DEL_INTERFACE(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x68a8, 0x39}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x0) 1m26.012149145s ago: executing program 1 (id=6922): r0 = socket$inet6(0xa, 0x2, 0x0) close(r0) r1 = socket$inet6(0xa, 0x80002, 0x0) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000440)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3a8, 0x0, 0x148, 0x1e0, 0x278, 0x310, 0xb0, 0x148, 0x1e0, 0x278, 0x310, 0x6, 0x0, {[{{@ip={@empty, @empty, 0x0, 0x0, '\x00', '\x00', {}, {}, 0x11}, 0x0, 0x70, 0xb0}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x408) setsockopt$inet6_int(r1, 0x29, 0x4b, &(0x7f0000000880)=0x4, 0x4) setsockopt$inet6_udp_int(r0, 0x11, 0x68, &(0x7f00000008c0)=0xa41, 0x4) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r3, 0x84, 0x6c, &(0x7f00000000c0), &(0x7f0000000100)=0x8) recvmmsg(r0, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}, 0x6}], 0x1, 0x40001001, 0x0) r4 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r4, &(0x7f0000000940)={0xa, 0x4e23, 0x2, @mcast1, 0x2}, 0x1c) connect$inet6(r4, &(0x7f0000000980)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) write(r4, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x1, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21a8}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_SPOOFCHK={0xc, 0x4, {0x81, 0x3}}]}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 1m25.819173323s ago: executing program 3 (id=6923): socket$inet_mptcp(0x2, 0x1, 0x106) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000a80)='\x00', 0x1}], 0x1}, 0x49cf75490397e68f) r3 = socket(0x10, 0x803, 0x0) r4 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000d00)={'veth0_to_bridge\x00', 0x0}) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r6, &(0x7f0000000f00)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) listen(r6, 0xec) accept4$bt_l2cap(r6, 0x0, 0x0, 0x800) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000001080)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0xa, 0x66, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0xc88, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000011c0)={0x18, 0x5, &(0x7f0000001280)=ANY=[], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000012c0)={0xe, 0x0, &(0x7f0000001380)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r7], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r8, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000013c0)={0x0, 0xc, &(0x7f0000001480)=ANY=[], &(0x7f00000014c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001500)={r9, 0x2000000, 0xe, 0x0, &(0x7f0000001580)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) sendmsg$nl_route_sched(r3, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000dc0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xc}, {0xffff, 0xffff}, {0xb, 0xfff2}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0xffffda53}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x800) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000240)=@newtfilter={0x24, 0x2c, 0x10, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {}, {}, {0x2, 0xffe0}}}, 0x24}}, 0x24040084) recvmsg$unix(r1, &(0x7f0000000ac0)={0x0, 0x0, 0x0}, 0x41) socket$inet_icmp_raw(0x2, 0x3, 0x1) r10 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000880)="4c000000150097f87059ae08060c040002ff0f0200000000000001870182fa73a69d35a2cca84708f7abca1bac1414aabd7c493872f750375ed08a560400000003c48f93b82a03000000461e", 0x4c}], 0x1}, 0x0) sendmsg$unix(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000b80)="f109", 0x2}], 0x1, 0x0, 0x0, 0x10}, 0x1) ioctl$SIOCSIFHWADDR(r1, 0x8905, &(0x7f0000000bc0)={'veth0_to_bridge\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0xb}}) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={r11, &(0x7f0000000080), &(0x7f00000000c0)=@tcp6=r0}, 0x20) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r11, 0x58, &(0x7f00000001c0)}, 0x10) accept4$unix(r1, &(0x7f0000000c00), &(0x7f0000000c80)=0x6e, 0x80000) 1m25.751876249s ago: executing program 2 (id=6924): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = accept4$phonet_pipe(0xffffffffffffffff, &(0x7f0000000340), &(0x7f0000000380)=0x10, 0x80800) ioctl$SIOCPNGETOBJECT(r1, 0x89e0, &(0x7f00000003c0)=0xf1) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x1c, 0x1, 0x4, 0x3, 0x0, 0x0, {0x0, 0x0, 0x7}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={0x1c, 0x1, 0x4, 0x101, 0x0, 0x0, {0x0, 0x0, 0x7}, [@NFULA_CFG_CMD={0x5, 0x1, 0x2}]}, 0x1c}}, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) r3 = socket(0x10, 0x2, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r3) sendmsg$NL80211_CMD_NEW_MPATH(r3, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x80800940}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x5c, r4, 0x400, 0x70bd27, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40}, 0x20008000) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x8}, 0x10) write(r3, &(0x7f0000000140)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) recvmmsg(r3, &(0x7f0000000180), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="3c0001fe00fcdb200200000004000000ffffffff"], 0x14}], 0x1, 0x0, 0x0, 0x1}, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f0000005f40)={0x40, 0x1, 0x6, 0x7, @vifc_lcl_ifindex=r6, @multicast1}, 0x10) 1m25.23059456s ago: executing program 4 (id=6925): openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x400000000000004) socket$xdp(0x2c, 0x3, 0x0) socket$tipc(0x1e, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route_sched(r0, &(0x7f0000000880)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000840)={&(0x7f00000005c0)=@deltaction={0x260, 0x31, 0x8, 0x70bd2a, 0x25dfdbfd, {}, [@TCA_ACT_TAB={0x28, 0x1, [{0xc, 0xe, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xc5}}, {0xc, 0x19, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0xc, 0xc, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}]}, @TCA_ACT_TAB={0x84, 0x1, [{0x10, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0xc, 0x10, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0xc, 0x7, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0x10, 0x1b, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0xc, 0x5, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4cc}}, {0xc, 0x20, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4471}}, {0xc, 0x1e, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}]}, @TCA_ACT_TAB={0x58, 0x1, [{0x10, 0x1f, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0x10, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0xc, 0x11, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0x10, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0x18, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xd}}]}, @TCA_ACT_TAB={0x48, 0x1, [{0x14, 0x3, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0x10, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0x14, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xe}}]}, @TCA_ACT_TAB={0x7c, 0x1, [{0xc, 0x10, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x100}}, {0xc, 0x18, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0x10, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0x10, 0x19, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0xc, 0x12, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0x10, 0x1e, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0xc, 0x10, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}]}, @TCA_ACT_TAB={0x48, 0x1, [{0x10, 0x1f, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0x10, 0xd, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0xc, 0x11, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0xc, 0xd, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5be1}}, {0xc, 0xb, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}]}, @TCA_ACT_TAB={0x3c, 0x1, [{0xc, 0x2, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0x10, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0x10, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}]}]}, 0x260}, 0x1, 0x0, 0x0, 0x4000}, 0x440c4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)) socket$kcm(0x23, 0x5, 0x0) socket$kcm(0x2, 0x3, 0x2) socket$nl_rdma(0x10, 0x3, 0x14) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="0c0100001a00010028bd7000fedbdf25ac1414bb000000000000000000000000ff0200000000000000000000000000014e2200004e21000002000020b4000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="20010000000000000000000000000001000004d32b000000fe8000000000000000000000000000bb0000000000070000000000000005000000000000000000000000000000ba03000000000000008000000000000001000000000000000700000000000000080000000000000030000000000000000a00000000000000ff390c7a000000000200000028bd7000063500000a0002675c000000000000001c00040000004e214e2300"/196], 0x10c}, 0x1, 0x0, 0x0, 0xc020}, 0x8000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000001000000000000000000ddff340001001000000095"], &(0x7f0000000240)='GPL\x00', 0x7}, 0x94) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)) socket(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d6574610000000014000280080001400000001208000240000000", @ANYRES16=r2], 0xc4}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) 1m25.143660213s ago: executing program 2 (id=6926): syz_emit_ethernet(0x75, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff0800450000670000000000069078ac1414bbac1414aa00004001", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="500215ab6ae40000c8fd75a55cea55431a0df064535453f7c007c56f3fa20800d19af9e68bd0c75e46b1c0d4c5a14e8ce3e28fd739913a5d1064c377167a00e7dc89bd8f93290b"], 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r1, &(0x7f0000000380)={0xa, 0x0, 0x0, @private1, 0x200000}, 0x1c) accept(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) bpf$MAP_CREATE(0x0, 0x0, 0x48) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001440)=[{{&(0x7f00000014c0)={0xa, 0x4e22, 0x3, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x2}, 0x1c, &(0x7f0000001500)=[{&(0x7f0000001540)="c8", 0x1}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x2000c856) r3 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r3, &(0x7f0000001580)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f00000015c0)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000001600), 0x4) sendto$inet(r3, &(0x7f0000001640), 0xffffffffffffff94, 0xb, 0x0, 0x0) socket$igmp(0x2, 0x3, 0x2) socket$inet6(0xa, 0x3, 0xff) setsockopt$inet6_tcp_int(r2, 0x6, 0x2000000000000022, &(0x7f0000001680)=0x1, 0x4) shutdown(r1, 0x1) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f00000003c0)={0x0, 0x2}, 0x8) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000a00)={0x1b, 0x0, 0x0, 0x0, 0x0, 0x1, 0x7fffffff, '\x00', 0x0, r1, 0x5, 0x3, 0x3}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0xa, &(0x7f0000000a80)=@raw=[@printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}}, @map_idx_val={0x18, 0x9, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0x8}], &(0x7f00000001c0)='GPL\x00', 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000200)=@bpf_lsm={0x6, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010840000000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008002cebdf2c0100", @ANYRES32=r4, @ANYBLOB="08001b0000000000"], 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000500)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40004}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)=@getstats={0x1c, 0x5e, 0x10, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, 0x2}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040015}, 0x20040004) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000009c0)={'syztnl2\x00', &(0x7f0000000d40)={'syztnl1\x00', 0x0, 0x2f, 0xfc, 0xf, 0x3, 0x12, @mcast1, @remote, 0x80, 0x80, 0xf, 0x5}}) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000dc0)={{{@in=@remote, @in6=@remote}}, {{@in6=@local}, 0x0, @in=@remote}}, &(0x7f0000000ec0)=0xe8) 1m24.767807312s ago: executing program 4 (id=6927): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000400)=0x46c, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000440)={'bridge0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000480)="09000000e70014000000d97b786ae7f69bf079aa060088a800a888a800990200", 0x20, 0x400000000000000, &(0x7f00000004c0)={0x11, 0x8100, r1, 0x1, 0xc, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x24}}, 0x14) 0s ago: executing program 33 (id=6922): r0 = socket$inet6(0xa, 0x2, 0x0) close(r0) r1 = socket$inet6(0xa, 0x80002, 0x0) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000440)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3a8, 0x0, 0x148, 0x1e0, 0x278, 0x310, 0xb0, 0x148, 0x1e0, 0x278, 0x310, 0x6, 0x0, {[{{@ip={@empty, @empty, 0x0, 0x0, '\x00', '\x00', {}, {}, 0x11}, 0x0, 0x70, 0xb0}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x408) setsockopt$inet6_int(r1, 0x29, 0x4b, &(0x7f0000000880)=0x4, 0x4) setsockopt$inet6_udp_int(r0, 0x11, 0x68, &(0x7f00000008c0)=0xa41, 0x4) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r3, 0x84, 0x6c, &(0x7f00000000c0), &(0x7f0000000100)=0x8) recvmmsg(r0, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}, 0x6}], 0x1, 0x40001001, 0x0) r4 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r4, &(0x7f0000000940)={0xa, 0x4e23, 0x2, @mcast1, 0x2}, 0x1c) connect$inet6(r4, &(0x7f0000000980)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) write(r4, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x1, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21a8}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_SPOOFCHK={0xc, 0x4, {0x81, 0x3}}]}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x0) kernel console output (not intermixed with test programs): cess `syz.0.5536'. [ 877.522506][T27527] netlink: 'syz.1.5534': attribute type 1 has an invalid length. [ 877.808798][T27545] ip_tables: iptables: counters copy to user failed while replacing table [ 878.148336][T27548] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5541'. [ 878.272114][T27563] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5544'. [ 878.617378][T27577] ipt_ECN: cannot use operation on non-tcp rule [ 878.957441][T27589] bridge3: entered promiscuous mode [ 878.957519][T27589] bridge3: entered allmulticast mode [ 879.241720][T27606] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5554'. [ 879.241747][T27606] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5554'. [ 879.362833][T27611] netlink: 'syz.0.5555': attribute type 30 has an invalid length. [ 879.362861][T27611] netlink: 56 bytes leftover after parsing attributes in process `syz.0.5555'. [ 879.410963][T27615] gtp1: entered promiscuous mode [ 879.410988][T27615] gtp1: entered allmulticast mode [ 880.383515][T27649] syzkaller1: entered promiscuous mode [ 880.383542][T27649] syzkaller1: entered allmulticast mode [ 881.008116][T27675] ipvlan3: entered allmulticast mode [ 881.008139][T27675] virt_wifi0: entered allmulticast mode [ 881.113514][T27675] ipvlan4: entered allmulticast mode [ 881.194375][T27671] ipvlan2: entered allmulticast mode [ 881.194400][T27671] batadv_slave_1: entered allmulticast mode [ 881.263314][T27675] ipvlan5: entered allmulticast mode [ 881.346207][T27675] ipvlan6: entered allmulticast mode [ 881.388400][T27675] ipvlan7: entered allmulticast mode [ 881.409683][T27675] ipvlan8: entered allmulticast mode [ 881.428834][T27675] ipvlan9: entered allmulticast mode [ 881.446155][T27675] ipvlan10: entered allmulticast mode [ 881.462792][T27675] ipvlan11: entered allmulticast mode [ 881.479429][T27675] ipvlan12: entered allmulticast mode [ 881.497785][T27675] ipvlan13: entered allmulticast mode [ 881.516616][T27675] ipvlan14: entered allmulticast mode [ 881.534385][T27675] ipvlan15: entered allmulticast mode [ 881.560097][T27675] ipvlan16: entered allmulticast mode [ 881.576972][T27675] ipvlan17: entered allmulticast mode [ 881.593738][T27675] ipvlan18: entered allmulticast mode [ 881.613352][T27675] ipvlan19: entered allmulticast mode [ 881.629915][T27675] ipvlan20: entered allmulticast mode [ 881.647870][T27675] ipvlan21: entered allmulticast mode [ 881.663609][T27675] ipvlan22: entered allmulticast mode [ 881.685441][T27675] ipvlan23: entered allmulticast mode [ 881.700966][T27675] ipvlan24: entered allmulticast mode [ 881.717345][T27675] ipvlan25: entered allmulticast mode [ 881.844088][T27693] __nla_validate_parse: 4 callbacks suppressed [ 881.844112][T27693] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5575'. [ 881.844138][T27693] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5575'. [ 881.879778][T27693] erspan0: entered promiscuous mode [ 881.897627][T27693] erspan0: left promiscuous mode [ 882.010145][T27690] x_tables: duplicate underflow at hook 2 [ 882.060210][T27699] x_tables: duplicate underflow at hook 2 [ 882.107264][T27699] x_tables: duplicate underflow at hook 2 [ 882.457040][T27720] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5582'. [ 882.464145][T27720] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5582'. [ 882.711170][T27731] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5587'. [ 882.711204][T27731] block nbd1: Unsupported socket: should be TCP or UNIX. [ 882.751570][T27731] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5587'. [ 882.751595][T27731] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5587'. [ 882.751610][T27731] netlink: 5 bytes leftover after parsing attributes in process `syz.4.5587'. [ 882.751624][T27731] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5587'. [ 882.752414][T27731] netlink: 92 bytes leftover after parsing attributes in process `syz.4.5587'. [ 882.838186][T27735] netlink: 'syz.1.5589': attribute type 10 has an invalid length. [ 882.863785][T27733] netlink: 'syz.3.5588': attribute type 4 has an invalid length. [ 882.897728][T27733] 8021q: adding VLAN 0 to HW filter on device bond0 [ 883.115439][T27743] xt_CT: You must specify a L4 protocol and not use inversions on it [ 883.576923][T27764] netlink: 'syz.1.5599': attribute type 11 has an invalid length. [ 883.623457][T27767] bond14: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 883.625648][T27767] bond14 (unregistering): Released all slaves [ 884.029030][T27778] netlink: 'syz.0.5603': attribute type 2 has an invalid length. [ 884.042958][T27778] openvswitch: netlink: Flow actions attr not present in new flow. [ 884.045810][T27779] netlink: 'syz.4.5602': attribute type 1 has an invalid length. [ 884.175306][T27779] bond14: entered promiscuous mode [ 884.175779][T27779] 8021q: adding VLAN 0 to HW filter on device bond14 [ 885.937795][T27857] SET target dimension over the limit! [ 886.221245][T27865] netlink: 'syz.3.5624': attribute type 1 has an invalid length. [ 886.377505][T27865] 8021q: adding VLAN 0 to HW filter on device bond4 [ 886.401392][T27875] netlink: 'syz.2.5623': attribute type 1 has an invalid length. [ 886.408405][T27871] tipc: Resetting bearer [ 886.546195][T27881] netlink: 'syz.1.5627': attribute type 15 has an invalid length. [ 886.586511][T27881] netlink: 'syz.1.5627': attribute type 15 has an invalid length. [ 886.603172][T23130] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 2816 - 0 [ 886.603218][T23130] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 2816 - 0 [ 886.603246][T23130] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 2816 - 0 [ 886.935937][T27890] ip6gre2: entered allmulticast mode [ 886.970659][T27890] __nla_validate_parse: 7 callbacks suppressed [ 886.970683][T27890] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5628'. [ 887.036319][T27901] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5628'. [ 887.441122][T27915] xt_socket: unknown flags 0x8 [ 887.864477][T27927] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5634'. [ 887.864516][T27927] openvswitch: netlink: Missing key (keys=c0, expected=20100) [ 888.133021][T27934] xt_socket: unknown flags 0x8 [ 888.393453][T27953] netlink: 'syz.1.5641': attribute type 11 has an invalid length. [ 888.553225][T27958] netlink: 48 bytes leftover after parsing attributes in process `syz.2.5642'. [ 888.612407][T27957] Set syz1 is full, maxelem 1021 reached [ 888.612707][T27958] netlink: 48 bytes leftover after parsing attributes in process `syz.2.5642'. [ 888.612931][T27958] netlink: 48 bytes leftover after parsing attributes in process `syz.2.5642'. [ 888.613149][T27958] netlink: 48 bytes leftover after parsing attributes in process `syz.2.5642'. [ 888.614770][T27958] netlink: 48 bytes leftover after parsing attributes in process `syz.2.5642'. [ 888.615025][T27958] netlink: 48 bytes leftover after parsing attributes in process `syz.2.5642'. [ 888.615236][T27958] netlink: 48 bytes leftover after parsing attributes in process `syz.2.5642'. [ 888.658632][T27964] netlink: 'syz.4.5644': attribute type 49 has an invalid length. [ 888.658773][T27963] netlink: 'syz.4.5644': attribute type 49 has an invalid length. [ 888.915406][T27971] ip_tables: iptables: counters copy to user failed while replacing table [ 888.966937][T27972] IPv6: sit1: Disabled Multicast RS [ 888.971385][T27976] openvswitch: netlink: Key 24 has unexpected len 247 expected 4 [ 889.398091][T27993] bridge_slave_1: entered promiscuous mode [ 889.542399][T28004] netlink: 'syz.3.5654': attribute type 3 has an invalid length. [ 889.852800][T28014] geneve5: entered promiscuous mode [ 889.863081][T23130] netdevsim netdevsim0 netdevsim3: set [1, 3] type 2 family 0 port 43389 - 0 [ 889.863126][T23130] netdevsim netdevsim0 netdevsim2: set [1, 3] type 2 family 0 port 43389 - 0 [ 889.863158][T23130] netdevsim netdevsim0 netdevsim1: set [1, 3] type 2 family 0 port 43389 - 0 [ 889.863188][T23130] netdevsim netdevsim0 netdevsim0: set [1, 3] type 2 family 0 port 43389 - 0 [ 890.149582][T28025] ip_tables: iptables: counters copy to user failed while replacing table [ 890.321981][T28029] netlink: 'syz.2.5662': attribute type 3 has an invalid length. [ 890.383473][T28032] netlink: 'syz.1.5663': attribute type 1 has an invalid length. [ 890.383500][T28032] netlink: 'syz.1.5663': attribute type 268 has an invalid length. [ 890.883997][T28060] Cannot find set identified by id 65534 to match [ 891.411237][T28089] validate_nla: 2 callbacks suppressed [ 891.411262][T28089] netlink: 'syz.4.5678': attribute type 10 has an invalid length. [ 891.411860][T28089] netlink: 'syz.4.5678': attribute type 10 has an invalid length. [ 891.787838][T28096] netlink: 'syz.4.5680': attribute type 5 has an invalid length. [ 891.821135][T28096] geneve4: entered promiscuous mode [ 891.821164][T28096] geneve4: entered allmulticast mode [ 891.840698][T23130] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 256 - 0 [ 891.840745][T23130] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 256 - 0 [ 891.840775][T23130] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 256 - 0 [ 891.840804][T23130] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 256 - 0 [ 891.933280][T28098] 0ªX¹¦Dö»: left allmulticast mode [ 892.008005][T28102] __nla_validate_parse: 39 callbacks suppressed [ 892.008028][T28102] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5681'. [ 892.008044][T28102] netlink: 14 bytes leftover after parsing attributes in process `syz.4.5681'. [ 892.215106][T28107] netlink: Failed to add ÿÿÿÿ helper -22 [ 892.215160][T28107] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 893.858736][T28065] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 894.096153][T28125] netlink: 'syz.1.5688': attribute type 1 has an invalid length. [ 894.174607][T28125] 8021q: adding VLAN 0 to HW filter on device bond9 [ 894.247415][T28125] bond5: (slave veth0_to_bond): Releasing active interface [ 894.285569][T28125] bond9: (slave veth0_to_bond): making interface the new active one [ 894.287580][T28125] bond9: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 894.441240][T28143] geneve0: entered allmulticast mode [ 894.677399][T28161] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5698'. [ 894.735680][T28164] openvswitch: netlink: IP tunnel dst address not specified [ 894.736734][T28164] netlink: 1752 bytes leftover after parsing attributes in process `syz.3.5698'. [ 895.499826][T28168] syzkaller1: entered promiscuous mode [ 895.499852][T28168] syzkaller1: entered allmulticast mode [ 895.606254][T28174] ip_tables: iptables: counters copy to user failed while replacing table [ 895.949395][T28207] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5707'. [ 895.949425][T28207] openvswitch: netlink: Flow actions attr not present in new flow. [ 896.066624][T28210] bond10: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 896.190261][T28215] netlink: 'syz.3.5706': attribute type 1 has an invalid length. [ 896.725075][T28234] ip_tables: iptables: counters copy to user failed while replacing table [ 897.084566][T28250] netlink: 'syz.3.5722': attribute type 49 has an invalid length. [ 897.180606][T28249] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5720'. [ 897.185632][T28250] netlink: 'syz.3.5722': attribute type 1 has an invalid length. [ 897.347596][T28254] Bluetooth: hci0: unsupported parameter 5135 [ 897.347621][T28254] Bluetooth: hci0: unsupported parameter 8192 [ 897.347634][T28254] Bluetooth: hci0: unsupported parameter 5135 [ 897.347646][T28254] Bluetooth: hci0: unsupported parameter 8192 [ 897.392580][T28262] openvswitch: netlink: Unexpected mask (mask=200240, allowed=10048) [ 897.749522][T28268] sctp: [Deprecated]: syz.4.5728 (pid 28268) Use of struct sctp_assoc_value in delayed_ack socket option. [ 897.749522][T28268] Use struct sctp_sack_info instead [ 897.762107][T28272] ip_tables: iptables: counters copy to user failed while replacing table [ 897.800147][T28268] sctp: [Deprecated]: syz.4.5728 (pid 28268) Use of struct sctp_assoc_value in delayed_ack socket option. [ 897.800147][T28268] Use struct sctp_sack_info instead [ 897.860092][T28282] netlink: 2 bytes leftover after parsing attributes in process `syz.1.5731'. [ 898.184987][T28295] netlink: 'syz.4.5735': attribute type 2 has an invalid length. [ 898.185015][T28295] netlink: 'syz.4.5735': attribute type 2 has an invalid length. [ 898.185029][T28295] netlink: 'syz.4.5735': attribute type 1 has an invalid length. [ 898.297053][T28297] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 898.336941][T28297] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 898.659351][T28307] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5736'. [ 899.169593][T28319] 8021q: adding VLAN 0 to HW filter on device ipvlan26 [ 899.269258][T28325] netlink: 'syz.0.5743': attribute type 1 has an invalid length. [ 900.470682][T28364] netlink: 'syz.4.5752': attribute type 1 has an invalid length. [ 900.694428][T28364] 8021q: adding VLAN 0 to HW filter on device bond15 [ 900.789488][T28364] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5752'. [ 900.834942][T28370] bond15: (slave veth9): Enslaving as an active interface with a down link [ 900.912027][T28365] bond15: (slave veth11): Enslaving as an active interface with a down link [ 900.916515][T28374] mac80211_hwsim hwsim37 wlan1: entered promiscuous mode [ 900.922813][T28374] bond15: (slave wlan1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 901.024246][T28375] bond15: (slave wlan1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 901.277179][T28389] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5758'. [ 901.723034][T28407] netlink: 220 bytes leftover after parsing attributes in process `syz.4.5766'. [ 901.723059][T28407] tc_dump_action: action bad kind [ 901.749469][T28407] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5766'. [ 901.749502][T28407] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5766'. [ 901.908411][T28413] netlink: 220 bytes leftover after parsing attributes in process `syz.4.5766'. [ 901.908437][T28413] tc_dump_action: action bad kind [ 901.957156][T28423] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5766'. [ 902.326050][T28428] xt_hashlimit: size too large, truncated to 1048576 [ 902.460265][T28442] xt_hashlimit: size too large, truncated to 1048576 [ 902.861071][T28455] netlink: 'syz.3.5772': attribute type 15 has an invalid length. [ 902.955724][T28455] netlink: 'syz.3.5772': attribute type 15 has an invalid length. [ 902.970854][T23016] netdevsim netdevsim3 eth3: set [0, 1] type 1 family 0 port 2816 - 0 [ 902.970933][T23016] netdevsim netdevsim3 eth2: set [0, 1] type 1 family 0 port 2816 - 0 [ 902.970968][T23016] netdevsim netdevsim3 eth1: set [0, 1] type 1 family 0 port 2816 - 0 [ 902.971001][T23016] netdevsim netdevsim3 eth0: set [0, 1] type 1 family 0 port 2816 - 0 [ 903.367629][T28466] netlink: 'syz.1.5776': attribute type 11 has an invalid length. [ 903.383850][T28466] __nla_validate_parse: 1 callbacks suppressed [ 903.383900][T28466] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5776'. [ 903.383931][T28466] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5776'. [ 903.458661][T28473] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5779'. [ 903.458698][T28473] netlink: 48 bytes leftover after parsing attributes in process `syz.3.5779'. [ 903.458846][T28468] x_tables: unsorted underflow at hook 4 [ 903.468446][T28474] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5779'. [ 903.468475][T28474] netlink: 48 bytes leftover after parsing attributes in process `syz.3.5779'. [ 903.506690][T28466] gretap0: entered promiscuous mode [ 903.537425][T28466] gretap0: left promiscuous mode [ 903.902358][T28485] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5781'. [ 903.948935][T28480] netlink: Failed to add helper -22 [ 903.948998][T28480] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 904.088822][T28490] ip_tables: iptables: counters copy to user failed while replacing table [ 904.102109][T28490] ip_tables: iptables: counters copy to user failed while replacing table [ 904.102506][T28490] ip_tables: iptables: counters copy to user failed while replacing table [ 904.104539][T28490] ip_tables: iptables: counters copy to user failed while replacing table [ 904.104919][T28490] ip_tables: iptables: counters copy to user failed while replacing table [ 904.105242][T28490] ip_tables: iptables: counters copy to user failed while replacing table [ 904.105568][T28490] ip_tables: iptables: counters copy to user failed while replacing table [ 904.109138][T28490] ip_tables: iptables: counters copy to user failed while replacing table [ 904.785096][T28521] netlink: 'syz.4.5793': attribute type 11 has an invalid length. [ 905.275172][T28547] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5798'. [ 905.467102][T28551] netlink: 'syz.2.5798': attribute type 1 has an invalid length. [ 905.554958][T28551] bond5: option mode: invalid value (8) [ 905.570279][T28551] bond5 (unregistering): Released all slaves [ 905.984852][T28562] sit0: entered promiscuous mode [ 906.095049][T28562] netlink: 'syz.1.5800': attribute type 1 has an invalid length. [ 906.095076][T28562] netlink: 1 bytes leftover after parsing attributes in process `syz.1.5800'. [ 906.238379][T28575] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5801'. [ 906.269556][T28575] netlink: 'syz.4.5801': attribute type 10 has an invalid length. [ 906.271159][T28575] netlink: 'syz.4.5801': attribute type 10 has an invalid length. [ 906.271373][T28575] netlink: 'syz.4.5801': attribute type 10 has an invalid length. [ 906.271554][T28575] netlink: 'syz.4.5801': attribute type 10 has an invalid length. [ 911.460745][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 916.580705][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 926.821148][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 960.388008][T28609] __nla_validate_parse: 1 callbacks suppressed [ 960.388033][T28609] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5811'. [ 960.478908][T28610] ÿÿÿÿÿÿ: renamed from virt_wifi0 [ 960.776747][T28619] net_ratelimit: 59 callbacks suppressed [ 960.776772][T28619] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 960.920050][T28634] netlink: ct_mark mask cannot be 0 [ 960.920084][T28634] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 960.957028][T28637] netlink: Setting conntrack mark requires 'commit' flag. [ 960.957071][T28637] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 961.298035][T28652] bond11 (unregistering): Released all slaves [ 961.839105][T28652] bond11 (unregistering): Released all slaves [ 961.915451][T28670] validate_nla: 64 callbacks suppressed [ 961.915498][T28670] netlink: 'syz.2.5825': attribute type 1 has an invalid length. [ 962.052490][T28671] netlink: 'syz.0.5826': attribute type 1 has an invalid length. [ 962.466151][T28693] netlink: 'syz.3.5830': attribute type 16 has an invalid length. [ 962.466176][T28693] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5830'. [ 962.569254][T28702] xt_REDIRECT: bad MAP_IPS. [ 963.096392][T28713] bond5: option packets_per_slave: invalid value (18446744073709551615) [ 963.096424][T28713] bond5: option packets_per_slave: allowed values 0 - 65535 [ 963.130696][T28713] bond5 (unregistering): Released all slaves [ 963.469556][T28731] netlink: 'syz.0.5840': attribute type 10 has an invalid length. [ 963.496604][T28731] mac80211_hwsim hwsim43 wlan0: entered allmulticast mode [ 963.564042][T28739] netlink: 'syz.3.5842': attribute type 2 has an invalid length. [ 963.564066][T28739] netlink: 7 bytes leftover after parsing attributes in process `syz.3.5842'. [ 963.595953][T28731] team0: Port device wlan0 added [ 963.680950][T28743] ip_tables: iptables: counters copy to user failed while replacing table [ 963.849320][T28746] xt_hl: Unknown Hop Limit match mode: 206 [ 963.892246][T28734] tipc: Enabling of bearer rejected, already enabled [ 964.171503][T28750] ip_tables: iptables: counters copy to user failed while replacing table [ 964.215136][T28753] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 964.217012][T28753] netlink: 'syz.3.5849': attribute type 21 has an invalid length. [ 964.217100][T28753] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 964.217136][T28753] IPv6: NLM_F_CREATE should be set when creating new route [ 964.217184][T28753] IPv6: NLM_F_CREATE should be set when creating new route [ 964.217223][T28753] IPv6: NLM_F_CREATE should be set when creating new route [ 964.268007][T28758] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5851'. [ 964.810925][T28775] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5857'. [ 965.207339][T28782] netlink: 44 bytes leftover after parsing attributes in process `syz.4.5858'. [ 965.375023][T28784] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5858'. [ 965.375052][T28784] netlink: 14 bytes leftover after parsing attributes in process `syz.4.5858'. [ 965.706901][T28773] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5856'. [ 965.706939][T28773] openvswitch: netlink: Missing key (keys=c0, expected=500) [ 965.965285][T28805] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5864'. [ 965.992062][T28805] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5864'. [ 966.149586][T28811] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5867'. [ 966.164950][T28811] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5867'. [ 966.173422][T28805] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 966.482216][T28822] netlink: NAT attribute has 8 unknown bytes [ 966.482370][T28822] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 966.546193][T28815] netlink: 4768 bytes leftover after parsing attributes in process `syz.1.5866'. [ 966.558681][T28822] No such timeout policy "syz1" [ 966.987088][T28840] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5872'. [ 967.103809][T28845] netlink: 'syz.2.5873': attribute type 1 has an invalid length. [ 967.104072][T28845] netlink: 224 bytes leftover after parsing attributes in process `syz.2.5873'. [ 967.410437][T28854] netlink: 'syz.0.5875': attribute type 1 has an invalid length. [ 967.445865][T28851] xt_CT: You must specify a L4 protocol and not use inversions on it [ 967.704811][T28859] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5876'. [ 967.830682][T28864] netlink: 'syz.2.5876': attribute type 11 has an invalid length. [ 967.832973][T28864] xt_REDIRECT: bad MAP_IPS. [ 967.932872][T28866] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5880'. [ 968.492787][T28866] bridge12: entered promiscuous mode [ 968.516640][T28866] bond14: (slave bridge12): Enslaving as an active interface with an up link [ 968.668700][ T5625] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 968.681176][ T5625] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 968.686441][ T5625] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 968.688414][ T5625] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 968.708384][ T5625] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 969.082775][T28897] ip_tables: iptables: counters copy to user failed while replacing table [ 969.194949][T23057] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 969.194987][T23057] netdevsim netdevsim3 eth3 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 969.507718][T23057] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 969.507758][T23057] netdevsim netdevsim3 eth2 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 969.805476][T23057] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 969.805514][T23057] netdevsim netdevsim3 eth1 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 970.151936][T23119] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 970.152017][T23119] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 970.152054][T23119] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 970.152089][T23119] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 970.394354][T23057] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 970.394391][T23057] netdevsim netdevsim3 eth0 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 970.713313][T28921] pim6reg: left allmulticast mode [ 970.822219][ T5627] Bluetooth: hci1: command tx timeout [ 970.923499][T28934] __nla_validate_parse: 1 callbacks suppressed [ 970.923526][T28934] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5893'. [ 971.150761][T28934] bond15: option lacp_strict: mode dependency failed, not supported in mode balance-rr(0) [ 971.173074][T28934] bond15 (unregistering): Released all slaves [ 971.174303][T28945] netlink: 104 bytes leftover after parsing attributes in process `syz.4.5897'. [ 971.281324][T23016] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 971.287249][T28884] rxe_eth0 speed is unknown, defaulting to 1000 [ 971.425345][T28949] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5895'. [ 971.494085][T23016] netdevsim netdevsim3 eth4: set [1, 0] type 2 family 0 port 6081 - 0 [ 971.514045][T23013] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 971.593967][T28956] ip_tables: iptables: counters copy to user failed while replacing table [ 971.747793][T28957] netlink: 'syz.0.5899': attribute type 5 has an invalid length. [ 971.817324][T28960] netlink: 14 bytes leftover after parsing attributes in process `syz.2.5900'. [ 972.700220][T23057] team0: Port device xfrm0 removed [ 972.902424][ T5627] Bluetooth: hci1: command tx timeout [ 972.996525][T23057] .` (unregistering): Released all slaves [ 973.028428][T23057] bond1 (unregistering): Released all slaves [ 973.055651][T23057] bond2 (unregistering): Released all slaves [ 973.088990][T23057] bond3 (unregistering): Released all slaves [ 973.130208][T23057] bond0 (unregistering): Released all slaves [ 973.162339][T23057] bond4 (unregistering): Released all slaves [ 973.249931][T28960] team0: Port device dummy0 removed [ 973.313512][T23062] netdevsim netdevsim3 eth5: set [1, 0] type 2 family 0 port 6081 - 0 [ 973.336669][T28884] wg0 speed is unknown, defaulting to 1000 [ 973.502883][T23057] ovs-s: left promiscuous mode [ 973.633143][ T5280] 8021q: adding VLAN 0 to HW filter on device eth2 [ 973.664640][T23057] tipc: Disabling bearer [ 973.664892][T23057] tipc: Disabling bearer [ 973.708363][T23057] tipc: Left network mode [ 973.947928][T29001] tipc: Started in network mode [ 973.947962][T29001] tipc: Node identity e0000001, cluster identity 4711 [ 973.948019][T29001] tipc: Enabling of bearer rejected, failed to enable media [ 974.046353][T29002] erspan0: entered promiscuous mode [ 974.142565][T29002] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5906'. [ 974.864334][T28884] C speed is unknown, defaulting to 1000 [ 974.871366][T28884] wg0 speed is unknown, defaulting to 1000 [ 974.990602][ T5627] Bluetooth: hci1: command tx timeout [ 975.246051][T29044] netlink: 'syz.0.5910': attribute type 1 has an invalid length. [ 975.702168][T29044] 8021q: adding VLAN 0 to HW filter on device bond15 [ 975.806887][T29029] bond15: (slave veth0_to_bond): making interface the new active one [ 975.825662][T29029] bond15: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 975.848639][T29050] bond15: entered promiscuous mode [ 975.848667][T29050] veth0_to_bond: entered promiscuous mode [ 975.848916][T29050] bond15: entered allmulticast mode [ 975.848931][T29050] veth0_to_bond: entered allmulticast mode [ 976.036643][T29054] bond5: option arp_all_targets: invalid value (18446744073709551613) [ 976.119961][T29054] bond5 (unregistering): Released all slaves [ 976.237199][T29059] bond5: option arp_all_targets: invalid value (18446744073709551613) [ 976.256207][T29059] bond5 (unregistering): Released all slaves [ 976.408769][ T5280] 8021q: adding VLAN 0 to HW filter on device eth3 [ 977.061106][ T5627] Bluetooth: hci1: command tx timeout [ 977.181155][T29077] Bluetooth: hci0: unsupported parameter 5135 [ 977.181182][T29077] Bluetooth: hci0: unsupported parameter 8192 [ 977.181195][T29077] Bluetooth: hci0: unsupported parameter 5135 [ 977.181208][T29077] Bluetooth: hci0: unsupported parameter 8192 [ 977.296517][T29077] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 978.448599][T29109] netlink: 'syz.2.5923': attribute type 2 has an invalid length. [ 978.772095][T29115] netlink: 'syz.0.5924': attribute type 9 has an invalid length. [ 978.879649][T29121] netlink: 'syz.2.5926': attribute type 1 has an invalid length. [ 978.879676][T29121] netlink: 512 bytes leftover after parsing attributes in process `syz.2.5926'. [ 979.359716][T29099] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 980.067036][T29119] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5926'. [ 980.160303][ T5280] 8021q: adding VLAN 0 to HW filter on device eth4 [ 980.580285][T28884] bridge0: port 1(bridge_slave_0) entered blocking state [ 980.584466][T28884] bridge0: port 1(bridge_slave_0) entered disabled state [ 980.608274][T28884] bridge_slave_0: entered allmulticast mode [ 980.617649][T28884] bridge_slave_0: entered promiscuous mode [ 980.626787][T28884] bridge0: port 2(bridge_slave_1) entered blocking state [ 980.626939][T28884] bridge0: port 2(bridge_slave_1) entered disabled state [ 980.627144][T28884] bridge_slave_1: entered allmulticast mode [ 980.635479][T28884] bridge_slave_1: entered promiscuous mode [ 980.938557][T28884] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 980.982299][T28884] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 981.238363][T28884] team0: Port device team_slave_0 added [ 981.239789][T23057] IPVS: stop unused estimator thread 0... [ 981.254920][T28884] team0: Port device team_slave_1 added [ 981.482494][T28884] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 981.482521][T28884] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 981.482550][T28884] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 981.495318][T28884] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 981.495337][T28884] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 981.495359][T28884] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 981.769157][T28884] hsr_slave_0: entered promiscuous mode [ 981.775335][T28884] hsr_slave_1: entered promiscuous mode [ 981.776272][T28884] debugfs: 'hsr0' already exists in 'hsr' [ 981.776305][T28884] Cannot create hsr debugfs directory [ 981.793136][T29177] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 982.427737][T28884] netdevsim netdevsim3 eth5 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 982.662296][T29227] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5947'. [ 982.664810][T29229] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5946'. [ 982.664868][T29229] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5946'. [ 982.771776][T28884] netdevsim netdevsim3 eth4 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 983.126172][T28884] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 983.195907][T29251] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5950'. [ 983.515020][T28884] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 983.515903][T29259] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5951'. [ 983.625024][T29240] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5948'. [ 984.215104][T28884] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 984.235149][T29280] xt_cluster: you have exceeded the maximum number of cluster nodes (2048 > 32) [ 984.237957][T28884] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 984.271002][T28884] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 984.278657][T29280] netlink: 'syz.2.5956': attribute type 11 has an invalid length. [ 984.301249][T28884] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 984.336615][T28884] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 984.354147][T28884] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 984.355209][T28884] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 984.360100][T29280] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5956'. [ 984.400302][T28884] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 985.062802][T28884] 8021q: adding VLAN 0 to HW filter on device bond0 [ 985.118182][T28884] 8021q: adding VLAN 0 to HW filter on device team0 [ 985.155557][T23062] bridge0: port 1(bridge_slave_0) entered blocking state [ 985.155695][T23062] bridge0: port 1(bridge_slave_0) entered forwarding state [ 985.211377][T23057] bridge0: port 2(bridge_slave_1) entered blocking state [ 985.211503][T23057] bridge0: port 2(bridge_slave_1) entered forwarding state [ 985.218751][T29333] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 985.218795][T29333] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 985.218814][T29333] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 986.476919][T29378] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5974'. [ 986.527574][T28884] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 986.695102][T28884] veth0_vlan: entered promiscuous mode [ 986.734901][T28884] veth1_vlan: entered promiscuous mode [ 986.771565][T29391] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5976'. [ 986.785503][T29391] netlink: 88 bytes leftover after parsing attributes in process `syz.2.5976'. [ 986.954676][T28884] veth0_macvtap: entered promiscuous mode [ 986.977640][T28884] veth1_macvtap: entered promiscuous mode [ 987.059184][T28884] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 987.098617][T28884] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 987.132787][T23121] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 987.193421][T23013] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 987.352656][T23062] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 987.352989][T23062] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 987.433675][T23094] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 987.433701][T23094] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 987.546583][T29415] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5981'. [ 987.687003][T23094] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 987.687029][T23094] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 988.284251][T29440] netlink: 72 bytes leftover after parsing attributes in process `syz.0.5987'. [ 988.284813][T29440] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5987'. [ 988.325413][T29444] rdma_op ffff88802903ba38 conn xmit_rdma 0000000000000000 [ 988.339117][T29444] netlink: 'syz.1.5988': attribute type 12 has an invalid length. [ 988.456861][T29443] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5989'. [ 988.878136][T29461] netlink: 'syz.1.5993': attribute type 32 has an invalid length. [ 988.878160][T29461] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5993'. [ 988.878458][T29462] netlink: 'syz.1.5993': attribute type 1 has an invalid length. [ 989.044232][T29461] bond11: Setting coupled_control to off (0) [ 989.045258][T29476] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5995'. [ 989.406877][T29488] __nla_validate_parse: 5 callbacks suppressed [ 989.406899][T29488] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5998'. [ 989.434909][ T5625] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 989.441351][ T5625] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 989.451697][ T5625] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 989.472307][ T5625] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 989.473059][ T5625] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 989.474543][T29494] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5998'. [ 989.515810][T29488] bond5: Invalid ad_actor_system MAC address. [ 989.515855][T29488] bond5: option ad_actor_system: invalid value (1) [ 989.526792][T29488] bond5 (unregistering): Released all slaves [ 989.766660][T29494] bond5: Invalid ad_actor_system MAC address. [ 989.766684][T29494] bond5: option ad_actor_system: invalid value (1) [ 989.795372][T29494] bond5 (unregistering): Released all slaves [ 990.105878][T29512] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6001'. [ 990.152194][T29518] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6002'. [ 990.294500][T29512] 8021q: VLANs not supported on ip6_vti0 [ 990.318078][T29523] netlink: 'syz.2.6004': attribute type 3 has an invalid length. [ 990.359863][T29523] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6004'. [ 990.689701][T23013] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 990.689740][T23013] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 990.689767][T23013] netdevsim netdevsim4 eth3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 990.952557][T23013] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 990.952598][T23013] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 990.952624][T23013] netdevsim netdevsim4 eth2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 991.083442][T23013] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 991.083484][T23013] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 991.083512][T23013] netdevsim netdevsim4 eth1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 991.342650][T23013] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 991.342689][T23013] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 991.342714][T23013] netdevsim netdevsim4 eth0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 991.541236][ T5627] Bluetooth: hci5: command tx timeout [ 991.571249][T29486] rxe_eth0 speed is unknown, defaulting to 1000 [ 991.812621][T29581] IPVS: lblc: FWM 3 0x00000003 - no destination available [ 991.893238][T23095] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 991.992349][T23095] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 991.992519][T29590] lo: entered promiscuous mode [ 992.017595][T29590] netlink: 'syz.3.6016': attribute type 2 has an invalid length. [ 992.017621][T29590] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 992.098780][T29596] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6017'. [ 992.098904][T29596] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6017'. [ 992.313476][T23094] netdevsim netdevsim4 eth4: set [1, 0] type 2 family 0 port 6081 - 0 [ 992.445262][T29603] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6019'. [ 992.506207][T29606] netlink: 6 bytes leftover after parsing attributes in process `syz.3.6020'. [ 992.606164][T23013] pim6reg: left allmulticast mode [ 992.608198][T23013] pimreg3: left allmulticast mode [ 993.323811][T23013] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 993.324107][T23013] bond_slave_0: left allmulticast mode [ 993.326408][T23013] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 993.326693][T23013] bond_slave_1: left allmulticast mode [ 993.329242][T23013] bond0 (unregistering): (slave veth0_to_bond): Releasing backup interface [ 993.329924][T23013] veth0_to_bond: left allmulticast mode [ 993.387854][T23013] bond0 (unregistering): Released all slaves [ 993.397578][T23013] bond1 (unregistering): Released all slaves [ 993.412890][T23013] bond2 (unregistering): Released all slaves [ 993.432379][T23013] bond3 (unregistering): Released all slaves [ 993.444363][T23013] bond4 (unregistering): Released all slaves [ 993.463055][T23013] bond5 (unregistering): Released all slaves [ 993.479524][T23013] bond6 (unregistering): Released all slaves [ 993.496282][T23013] bond7 (unregistering): Released all slaves [ 993.515136][T23013] bond8 (unregistering): Released all slaves [ 993.528075][T23013] bond9 (unregistering): (slave C): Releasing backup interface [ 993.528468][T23013] bond9 (unregistering): (slave C): last VLAN challenged slave left bond - VLAN blocking is removed [ 993.528676][T23013] bond9 (unregistering): Released all slaves [ 993.570843][T23013] bond10 (unregistering): Released all slaves [ 993.581351][T23013] bond11 (unregistering): Released all slaves [ 993.596889][T23013] bond12 (unregistering): Released all slaves [ 993.620932][ T5627] Bluetooth: hci5: command tx timeout [ 993.623426][T23013] bond13 (unregistering): Released all slaves [ 993.637555][T23013] bond14 (unregistering): Released all slaves [ 993.653837][T23013] bond15 (unregistering): (slave veth9): Releasing active interface [ 993.657233][T23013] bond15 (unregistering): (slave veth11): Releasing active interface [ 993.659116][T23013] bond15 (unregistering): Released all slaves [ 993.704331][T29601] veth3: entered allmulticast mode [ 993.716639][T29486] wg0 speed is unknown, defaulting to 1000 [ 993.876336][T23094] netdevsim netdevsim4 eth5: set [1, 0] type 2 family 0 port 6081 - 0 [ 994.311317][T23013] : left promiscuous mode [ 994.485579][T23013] tipc: Left network mode [ 994.485672][T29638] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6028'. [ 994.628543][T29486] C speed is unknown, defaulting to 1000 [ 994.647381][T29486] wg0 speed is unknown, defaulting to 1000 [ 995.703847][ T5627] Bluetooth: hci5: command tx timeout [ 996.068265][T29692] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6039'. [ 996.187019][ T5280] 8021q: adding VLAN 0 to HW filter on device eth2 [ 996.360865][T29694] syzkaller0: entered promiscuous mode [ 996.360977][T29694] syzkaller0: entered allmulticast mode [ 996.479049][T29706] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6043'. [ 996.508478][T29694] vlan4: entered allmulticast mode [ 996.508507][T29694] bond0: entered allmulticast mode [ 996.532453][T29711] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6044'. [ 996.532486][T29711] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6044'. [ 996.532506][T29711] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6044'. [ 996.536569][T29708] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6043'. [ 996.603332][T29713] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6044'. [ 996.657503][T29713] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6044'. [ 996.663931][T29713] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6044'. [ 997.470264][T29746] xt_cluster: node mask cannot exceed total number of nodes [ 997.587216][T29486] bridge0: port 1(bridge_slave_0) entered blocking state [ 997.587415][T29486] bridge0: port 1(bridge_slave_0) entered disabled state [ 997.587591][T29486] bridge_slave_0: entered allmulticast mode [ 997.621437][T29486] bridge_slave_0: entered promiscuous mode [ 997.639590][T29486] bridge0: port 2(bridge_slave_1) entered blocking state [ 997.641718][T29486] bridge0: port 2(bridge_slave_1) entered disabled state [ 997.641945][T29486] bridge_slave_1: entered allmulticast mode [ 997.644186][T29486] bridge_slave_1: entered promiscuous mode [ 997.781954][ T5627] Bluetooth: hci5: command tx timeout [ 998.003605][T29486] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 998.008886][T29486] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 998.197856][T29773] openvswitch: netlink: Missing key (keys=40, expected=100) [ 998.436284][T29486] team0: Port device team_slave_0 added [ 998.452416][T29486] team0: Port device team_slave_1 added [ 998.879591][T29486] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 998.879611][T29486] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 998.879638][T29486] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 998.918338][T29486] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 998.918356][T29486] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 998.918380][T29486] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 998.924934][ T5280] 8021q: adding VLAN 0 to HW filter on device eth3 [ 999.418987][T29486] hsr_slave_0: entered promiscuous mode [ 999.429522][T29486] hsr_slave_1: entered promiscuous mode [ 999.438520][T29486] debugfs: 'hsr0' already exists in 'hsr' [ 999.438548][T29486] Cannot create hsr debugfs directory [ 999.493012][T23013] hsr_slave_0: left promiscuous mode [ 999.497581][T23013] hsr_slave_1: left promiscuous mode [ 999.527356][T23013] veth1_macvtap: left promiscuous mode [ 999.527402][T23013] veth0_macvtap: left promiscuous mode [ 999.527715][T23013] veth1_vlan: left promiscuous mode [ 999.739463][T29829] __nla_validate_parse: 66 callbacks suppressed [ 999.739488][T29829] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6069'. [ 999.834592][T29836] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6069'. [ 1000.732263][T29827] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6070'. [ 1001.895240][T29486] netdevsim netdevsim4 eth5 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1002.235239][T29892] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6079'. [ 1002.235265][T29892] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6079'. [ 1002.235284][T29892] netlink: 14 bytes leftover after parsing attributes in process `syz.1.6079'. [ 1002.364318][T29486] netdevsim netdevsim4 eth4 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1002.366320][T23013] IPVS: stop unused estimator thread 0... [ 1002.738901][T29486] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1002.980224][T29486] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1003.038965][T29908] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.6081'. [ 1003.056721][T29906] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.6081'. [ 1003.253972][T29912] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6082'. [ 1003.427265][T29919] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6083'. [ 1004.400974][T29861] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1004.477613][T29486] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1004.507206][T29486] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1004.509123][T29486] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1004.545295][T29486] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1004.581919][T29486] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1004.683080][T29486] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1004.685691][T29486] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1004.728959][T29486] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1004.988283][T29486] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1005.067630][T29486] 8021q: adding VLAN 0 to HW filter on device team0 [ 1005.116338][T23094] bridge0: port 1(bridge_slave_0) entered blocking state [ 1005.116479][T23094] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1005.184072][T23062] bridge0: port 2(bridge_slave_1) entered blocking state [ 1005.184206][T23062] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1005.375918][T29974] netlink: 'syz.0.6088': attribute type 3 has an invalid length. [ 1005.771615][T29991] bond5: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-alb(6) [ 1005.789209][T29991] bond5 (unregistering): Released all slaves [ 1006.161406][T29991] bond5: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-alb(6) [ 1006.168654][T29991] bond5 (unregistering): Released all slaves [ 1006.257569][T30012] __nla_validate_parse: 1 callbacks suppressed [ 1006.257594][T30012] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6096'. [ 1006.340305][T29991] bond5: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-alb(6) [ 1006.357904][T29991] bond5 (unregistering): Released all slaves [ 1006.861993][T30044] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6100'. [ 1007.206073][T30057] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1007.635573][T30070] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6105'. [ 1007.673433][T29486] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1008.147522][T30095] netlink: 'syz.1.6110': attribute type 21 has an invalid length. [ 1008.147549][T30095] netlink: 128 bytes leftover after parsing attributes in process `syz.1.6110'. [ 1008.147624][T30095] netlink: 3 bytes leftover after parsing attributes in process `syz.1.6110'. [ 1008.295916][T30100] macsec1: entered promiscuous mode [ 1008.295951][T30100] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 1008.296498][T30100] macsec1: entered allmulticast mode [ 1008.296529][T30100] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 1008.335559][T30100] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 1008.338761][T30100] netdevsim netdevsim3 netdevsim0: left allmulticast mode [ 1008.404558][T29036] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 1008.670445][T29486] veth0_vlan: entered promiscuous mode [ 1008.709049][T29486] veth1_vlan: entered promiscuous mode [ 1008.742421][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1008.787814][T30123] sit2: entered promiscuous mode [ 1008.787842][T30123] sit2: entered allmulticast mode [ 1008.832462][T30114] bond17 (unregistering): Released all slaves [ 1008.866122][T30129] syzkaller0: left promiscuous mode [ 1008.866163][T30129] syzkaller0: left allmulticast mode [ 1008.925302][T29486] veth0_macvtap: entered promiscuous mode [ 1008.964004][T29486] veth1_macvtap: entered promiscuous mode [ 1009.041957][T29486] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1009.087548][T29486] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1009.134245][T23094] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1009.134300][T23094] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1009.134334][T23094] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1009.134364][T23094] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1009.159673][T30139] xt_l2tp: unknown flags: 43 [ 1009.275308][T30149] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6124'. [ 1009.576006][T23121] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1009.576033][T23121] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1009.663387][T23094] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1009.663414][T23094] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1009.697691][T30153] netlink: 14463 bytes leftover after parsing attributes in process `syz.1.6126'. [ 1009.834234][T30161] sctp: [Deprecated]: syz.1.6129 (pid 30161) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1009.834234][T30161] Use struct sctp_sack_info instead [ 1009.867345][T30161] sctp: [Deprecated]: syz.1.6129 (pid 30161) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1009.867345][T30161] Use struct sctp_sack_info instead [ 1009.978873][T30166] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6130'. [ 1010.037579][T30173] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6131'. [ 1010.118932][T30173] hsr_slave_1 (unregistering): left promiscuous mode [ 1010.157201][ T31] audit: type=1800 audit(1792175710.956:6): pid=30186 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.6135" name="memory.events" dev="tmpfs" ino=23 res=0 errno=0 [ 1010.158235][T30171] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6132'. [ 1010.160362][ T31] audit: type=1804 audit(1792175710.956:7): pid=30186 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.6135" name="/newroot/1/memory.events" dev="tmpfs" ino=23 res=1 errno=0 [ 1010.366909][T30186] netlink: 'syz.4.6135': attribute type 39 has an invalid length. [ 1010.826864][T30212] netlink: 'syz.1.6140': attribute type 1 has an invalid length. [ 1011.352938][T30225] netlink: 'syz.4.6144': attribute type 1 has an invalid length. [ 1011.605578][T30217] bond9: (slave veth0_to_bond): Releasing active interface [ 1011.672612][T30217] bond12: (slave veth0_to_bond): making interface the new active one [ 1011.676737][T30217] bond12: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 1011.792953][T30212] 8021q: adding VLAN 0 to HW filter on device bond12 [ 1011.897599][T30235] netlink: 'syz.3.6146': attribute type 1 has an invalid length. [ 1012.004798][T30245] netlink: 'syz.0.6149': attribute type 83 has an invalid length. [ 1012.037349][T30246] __nla_validate_parse: 4 callbacks suppressed [ 1012.037374][T30246] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6148'. [ 1012.145624][T30247] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6148'. [ 1012.229468][T30260] netlink: 68 bytes leftover after parsing attributes in process `syz.0.6150'. [ 1012.229495][T30260] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6150'. [ 1012.231753][T30257] netlink: 208 bytes leftover after parsing attributes in process `syz.2.6153'. [ 1012.231778][T30257] openvswitch: netlink: Flow actions attr not present in new flow. [ 1012.288742][T30254] bond1: option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 1012.301744][T30254] bond1 (unregistering): Released all slaves [ 1012.363756][T30251] netlink: 'syz.0.6150': attribute type 1 has an invalid length. [ 1012.697007][T30273] tunl0: entered promiscuous mode [ 1012.711827][T30273] netlink: 'syz.0.6157': attribute type 3 has an invalid length. [ 1012.711852][T30273] netlink: 9 bytes leftover after parsing attributes in process `syz.0.6157'. [ 1012.988108][T30285] netlink: 'syz.4.6159': attribute type 21 has an invalid length. [ 1012.988203][T30285] netlink: 132 bytes leftover after parsing attributes in process `syz.4.6159'. [ 1013.271233][T30292] netlink: 14719 bytes leftover after parsing attributes in process `syz.0.6162'. [ 1013.535181][T30304] Unknown options in mask 4 [ 1014.093173][T30323] netlink: 'syz.1.6173': attribute type 58 has an invalid length. [ 1014.093198][T30323] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6173'. [ 1014.149621][T30325] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6173'. [ 1014.855204][T30353] netlink: 'syz.4.6183': attribute type 1 has an invalid length. [ 1015.281678][T30370] Bluetooth: hci0: load_link_keys: expected 3 bytes, got 28 bytes [ 1015.495117][T30372] netlink: 'syz.1.6189': attribute type 1 has an invalid length. [ 1015.495163][T30372] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1015.515729][T30375] syzkaller0: entered promiscuous mode [ 1015.515752][T30375] syzkaller0: entered allmulticast mode [ 1015.826446][T30378] openvswitch: netlink: Multiple metadata blocks provided [ 1015.831176][T30378] ip_tables: iptables: counters copy to user failed while replacing table [ 1016.062697][T30392] IPVS: set_ctl: invalid protocol: 103 172.30.1.1:20004 [ 1016.126037][T30394] nbd: must specify at least one socket [ 1016.455344][T30412] x_tables: duplicate underflow at hook 2 [ 1016.776328][T30426] openvswitch: netlink: Geneve opt len 3 is not a multiple of 4. [ 1016.838521][ T5627] block nbd1: Receive control failed (result -32) [ 1017.083211][T30430] Cannot find set identified by id 0 to match [ 1017.314886][T30443] vlan1: entered allmulticast mode [ 1017.314913][T30443] veth0_vlan: entered allmulticast mode [ 1017.548692][T30446] netlink: Conntrack attr type has unexpected length (type=0, length=8, expected=0) [ 1017.548740][T30446] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1018.094646][T30472] __nla_validate_parse: 7 callbacks suppressed [ 1018.094668][T30472] netlink: 104 bytes leftover after parsing attributes in process `syz.0.6212'. [ 1018.554233][T30484] ip_tables: iptables: counters copy to user failed while replacing table [ 1018.852953][T30497] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6217'. [ 1019.050177][T30505] netlink: 'syz.0.6219': attribute type 2 has an invalid length. [ 1019.050205][T30505] netlink: 100 bytes leftover after parsing attributes in process `syz.0.6219'. [ 1019.648468][T30520] netlink: 44 bytes leftover after parsing attributes in process `syz.1.6224'. [ 1019.731255][T30520] netlink: 44 bytes leftover after parsing attributes in process `syz.1.6224'. [ 1019.987607][T30533] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6229'. [ 1020.296760][T30544] netlink: 'syz.0.6231': attribute type 1 has an invalid length. [ 1020.338748][T30547] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6233'. [ 1020.375088][T30547] netlink: 'syz.4.6233': attribute type 16 has an invalid length. [ 1020.385518][T30547] netlink: 'syz.4.6233': attribute type 14 has an invalid length. [ 1020.525186][T30555] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6235'. [ 1020.762171][T30559] xt_l2tp: v2 doesn't support IP mode [ 1020.927231][T30563] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6238'. [ 1020.992131][T30565] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6239'. [ 1021.133842][T30569] 8021q: VLANs not supported on ip6tnl0 [ 1021.198381][T30573] netlink: 'syz.4.6243': attribute type 2 has an invalid length. [ 1021.300160][T30573] : entered promiscuous mode [ 1021.314375][T30577] mac80211_hwsim hwsim69 ÿ: renamed from wlan1 (while UP) [ 1021.517750][T30584] openvswitch: netlink: Invalid VLAN frame [ 1021.657627][T30594] ip_tables: iptables: counters copy to user failed while replacing table [ 1023.194494][T30635] nbd: socks must be embedded in a SOCK_ITEM attr [ 1023.328606][ T5625] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1023.345802][ T5625] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1023.348307][ T5625] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1023.368675][ T5625] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1023.369394][ T5625] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1023.715058][T30650] x_tables: duplicate underflow at hook 1 [ 1024.403534][T30668] __nla_validate_parse: 2 callbacks suppressed [ 1024.403561][T30668] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6268'. [ 1024.403587][T30668] openvswitch: netlink: Missing key (keys=c0, expected=20080) [ 1024.425717][T23119] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1024.425753][T23119] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1024.425776][T23119] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 1024.425799][T23119] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 2] type 2 family 0 port 19999 - 0 [ 1024.425829][T23119] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 3] type 2 family 0 port 43389 - 0 [ 1024.645932][T30674] netlink: 76 bytes leftover after parsing attributes in process `syz.3.6269'. [ 1024.746433][T30674] netlink: 'syz.3.6269': attribute type 1 has an invalid length. [ 1024.811858][T23119] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1024.811898][T23119] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1024.811925][T23119] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 1024.811949][T23119] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 2] type 2 family 0 port 19999 - 0 [ 1024.811972][T23119] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 3] type 2 family 0 port 43389 - 0 [ 1025.064669][T23119] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1025.089407][T23119] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1025.089444][T23119] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 1025.089470][T23119] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 2] type 2 family 0 port 19999 - 0 [ 1025.089496][T23119] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 3] type 2 family 0 port 43389 - 0 [ 1025.216991][T30637] rxe_eth0 speed is unknown, defaulting to 1000 [ 1025.361533][T23119] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1025.361572][T23119] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1025.361597][T23119] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 1025.361622][T23119] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 2] type 2 family 0 port 19999 - 0 [ 1025.361647][T23119] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 3] type 2 family 0 port 43389 - 0 [ 1025.461080][ T5627] Bluetooth: hci3: command tx timeout [ 1025.779381][T30691] netlink: 'syz.2.6275': attribute type 1 has an invalid length. [ 1025.779406][T30691] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6275'. [ 1026.122837][T30691] netlink: 'syz.2.6275': attribute type 1 has an invalid length. [ 1026.122863][T30691] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6275'. [ 1026.123503][T30691] netlink: 'syz.2.6275': attribute type 1 has an invalid length. [ 1026.123524][T30691] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6275'. [ 1026.123708][T30691] netlink: 'syz.2.6275': attribute type 1 has an invalid length. [ 1026.123729][T30691] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6275'. [ 1026.285863][T30691] netlink: 'syz.2.6275': attribute type 1 has an invalid length. [ 1026.285889][T30691] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6275'. [ 1026.286070][T30691] netlink: 'syz.2.6275': attribute type 1 has an invalid length. [ 1026.286162][T30691] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6275'. [ 1026.286333][T30691] netlink: 'syz.2.6275': attribute type 1 has an invalid length. [ 1026.286345][T30691] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6275'. [ 1026.286583][T30691] netlink: 'syz.2.6275': attribute type 1 has an invalid length. [ 1026.286596][T30691] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6275'. [ 1026.286757][T30691] netlink: 'syz.2.6275': attribute type 1 has an invalid length. [ 1026.393760][T30637] wg0 speed is unknown, defaulting to 1000 [ 1026.409923][T23095] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1026.572047][T23094] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1026.572414][T23012] netdevsim netdevsim0 eth4: set [1, 0] type 2 family 0 port 6081 - 0 [ 1026.595150][T23094] netdevsim netdevsim0 eth5: set [1, 0] type 2 family 0 port 6081 - 0 [ 1027.088399][T23119] bond_slave_0: left promiscuous mode [ 1027.088438][T23119] bond_slave_1: left promiscuous mode [ 1027.178656][T30727] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 1027.550622][ T5627] Bluetooth: hci3: command tx timeout [ 1028.703293][T23119] bond10 (unregistering): (slave gretap4): Releasing backup interface [ 1029.012279][T23119] bond1 (unregistering): (slave bridge1): Releasing active interface [ 1029.076481][T23119] bond3 (unregistering): (slave bridge3): Releasing backup interface [ 1029.076508][T23119] bond3 (unregistering): (slave bridge3): the permanent HWaddr of slave - 5a:16:56:b5:6c:1f - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 1029.076536][T23119] bridge3 (unregistering): left promiscuous mode [ 1029.076559][T23119] bond3 (unregistering): (slave bridge4): making interface the new active one [ 1029.076573][T23119] bridge4 (unregistering): entered promiscuous mode [ 1029.142578][T23119] bond3 (unregistering): (slave bridge4): Releasing backup interface [ 1029.142609][T23119] bridge4 (unregistering): left promiscuous mode [ 1029.142632][T23119] bond3 (unregistering): (slave bridge5): making interface the new active one [ 1029.142647][T23119] bridge5 (unregistering): entered promiscuous mode [ 1029.196581][T23119] bond3 (unregistering): (slave bridge5): Releasing backup interface [ 1029.196611][T23119] bridge5 (unregistering): left promiscuous mode [ 1029.253121][T23119] bond7 (unregistering): (slave bridge7): Releasing backup interface [ 1029.278104][T23119] bond9 (unregistering): (slave bridge8): Releasing active interface [ 1029.407604][T23119] bond14 (unregistering): (slave bridge12): Releasing backup interface [ 1029.429727][T23119] bond0 (unregistering): left allmulticast mode [ 1029.429753][T23119] bond_slave_0: left allmulticast mode [ 1029.429772][T23119] bond_slave_1: left allmulticast mode [ 1029.454170][T23119] bond5 (unregistering): (slave macvlan2): Removing an active aggregator [ 1029.454938][T23119] bond5 (unregistering): (slave macvlan2): Releasing backup interface [ 1029.455615][T23119] macvlan2 (unregistering): left allmulticast mode [ 1029.494798][T23119] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1029.499426][T23119] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1029.520029][T23119] bond0 (unregistering): Released all slaves [ 1029.537153][T23119] bond1 (unregistering): Released all slaves [ 1029.571834][T23119] bond2 (unregistering): Released all slaves [ 1029.620857][ T5627] Bluetooth: hci3: command tx timeout [ 1029.663979][T23119] bond3 (unregistering): Released all slaves [ 1029.691636][T23119] bond4 (unregistering): Released all slaves [ 1029.722120][T23119] bond5 (unregistering): Released all slaves [ 1029.761024][T23119] bond6 (unregistering): Released all slaves [ 1029.785608][T23119] bond7 (unregistering): Released all slaves [ 1029.807550][T23119] bond8 (unregistering): Released all slaves [ 1029.848172][T23119] bond9 (unregistering): Released all slaves [ 1029.880016][T23119] bond10 (unregistering): (slave bond11): Releasing backup interface [ 1029.893885][T23119] bond10 (unregistering): Released all slaves [ 1029.918539][T23119] bond11 (unregistering): Released all slaves [ 1029.950646][T23119] bond12 (unregistering): Released all slaves [ 1029.975729][T23119] bond13 (unregistering): Released all slaves [ 1030.013972][T23119] bond14 (unregistering): Released all slaves [ 1030.039880][T23119] bond15 (unregistering): (slave veth0_to_bond): Releasing active interface [ 1030.039913][T23119] veth0_to_bond: left promiscuous mode [ 1030.040205][T23119] veth0_to_bond: left allmulticast mode [ 1030.075493][T23119] bond15 (unregistering): Released all slaves [ 1030.101746][T23119] bond16 (unregistering): Released all slaves [ 1030.145013][T29038] wg0 speed is unknown, defaulting to 1000 [ 1030.145047][T29038] syz0: Port: 1 Link DOWN [ 1030.146618][T30728] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 1030.149984][T30637] C speed is unknown, defaulting to 1000 [ 1030.154185][ T5280] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1030.327003][T30637] wg0 speed is unknown, defaulting to 1000 [ 1030.364959][T23119] : left promiscuous mode [ 1030.817063][T30765] bond13: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 1030.836418][T30765] bond13 (unregistering): Released all slaves [ 1031.704470][ T5625] Bluetooth: hci3: command tx timeout [ 1031.972442][T30804] __nla_validate_parse: 25 callbacks suppressed [ 1031.972468][T30804] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6290'. [ 1032.728731][T30826] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6295'. [ 1032.778417][ T5280] 8021q: adding VLAN 0 to HW filter on device eth3 [ 1032.778910][T30827] syzkaller1: entered promiscuous mode [ 1032.778929][T30827] syzkaller1: entered allmulticast mode [ 1032.781398][T30831] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6296'. [ 1032.843257][T23119] team0: Port device wlan0 removed [ 1032.957563][T30840] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6296'. [ 1033.191309][T30637] bridge0: port 1(bridge_slave_0) entered blocking state [ 1033.191483][T30637] bridge0: port 1(bridge_slave_0) entered disabled state [ 1033.191653][T30637] bridge_slave_0: entered allmulticast mode [ 1033.194016][T30637] bridge_slave_0: entered promiscuous mode [ 1033.197731][T30637] bridge0: port 2(bridge_slave_1) entered blocking state [ 1033.197878][T30637] bridge0: port 2(bridge_slave_1) entered disabled state [ 1033.198007][T30637] bridge_slave_1: entered allmulticast mode [ 1033.200028][T30637] bridge_slave_1: entered promiscuous mode [ 1033.541928][T30850] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6300'. [ 1033.544338][T30850] xt_hl: Unknown Hop Limit match mode: 206 [ 1033.544924][T30850] netlink: 252 bytes leftover after parsing attributes in process `syz.4.6300'. [ 1033.644539][T30637] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1033.685460][T30637] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1033.784477][ T5625] Bluetooth: hci3: command 0x0405 tx timeout [ 1033.877167][T30859] netlink: NAT attribute has 5 unknown bytes [ 1033.877207][T30859] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1033.948427][T30860] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6301'. [ 1033.955043][T30861] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6302'. [ 1033.968683][T30861] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6302'. [ 1034.067193][T30861] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1034.121866][T30637] team0: Port device team_slave_0 added [ 1034.186628][T30637] team0: Port device team_slave_1 added [ 1034.327791][T30881] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6308'. [ 1034.352245][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1034.509178][T30637] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1034.509199][T30637] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1034.509226][T30637] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1034.553099][T30637] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1034.553117][T30637] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1034.553141][T30637] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1034.594332][ T5625] block nbd2: Receive control failed (result -32) [ 1034.652966][T30883] validate_nla: 23 callbacks suppressed [ 1034.652993][T30883] netlink: 'syz.3.6310': attribute type 1 has an invalid length. [ 1034.799788][T23121] IPVS: starting estimator thread 0... [ 1034.811867][T30897] sctp: [Deprecated]: syz.1.6312 (pid 30897) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1034.811867][T30897] Use struct sctp_sack_info instead [ 1034.857355][T30889] IPVS: rr: UDP [fe80::aa]:8080 - no destination available [ 1034.892340][T30898] IPVS: using max 36 ests per chain, 86400 per kthread [ 1035.075759][T30883] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1035.216934][T30888] bond1: (slave gretap1): making interface the new active one [ 1035.218030][T30888] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 1035.368705][T23119] hsr_slave_0: left promiscuous mode [ 1035.379184][T23119] hsr_slave_1: left promiscuous mode [ 1035.505154][T23119] veth1_vlan: left promiscuous mode [ 1035.505235][T23119] veth0_vlan: left promiscuous mode [ 1035.945188][T23119] team0 (unregistering): Port device team_slave_1 removed [ 1035.977075][T23119] team0 (unregistering): Port device team_slave_0 removed [ 1036.069949][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807d789000: rx timeout, send abort [ 1036.070140][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88807d789000: 0x10000: (3) A timeout occurred and this is the connection abort to close the session. [ 1036.107704][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807ac18800: rx timeout, send abort [ 1036.108022][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88807ac18800: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 1036.108433][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807ae41800: rx timeout, send abort [ 1036.108696][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88807ae41800: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 1036.149083][T23057] smbdirect: ib_dev[syz0] removed [ 1036.278320][T23119] team0 (unregistering): Port device dummy0 removed [ 1036.337210][T30637] hsr_slave_0: entered promiscuous mode [ 1036.338041][T30637] hsr_slave_1: entered promiscuous mode [ 1036.340637][ T5280] 8021q: adding VLAN 0 to HW filter on device eth4 [ 1036.459036][T30927] bond13: entered promiscuous mode [ 1036.459069][T30927] bond13: entered allmulticast mode [ 1036.462834][T30927] 8021q: adding VLAN 0 to HW filter on device bond13 [ 1036.509410][T30935] openvswitch: netlink: Message has 8 unknown bytes. [ 1036.659913][T30936] netlink: 'syz.3.6321': attribute type 3 has an invalid length. [ 1036.715926][T30939] netlink: 'syz.2.6322': attribute type 10 has an invalid length. [ 1036.831748][T30939] bridge0: entered allmulticast mode [ 1036.859265][T30939] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 1036.924646][T30941] bond0: (slave bridge0): Releasing backup interface [ 1036.928884][T30941] bridge0 (unregistering): left allmulticast mode [ 1036.943484][T30947] openvswitch: netlink: Missing key (keys=c0, expected=100) [ 1037.259782][T23121] IPVS: starting estimator thread 0... [ 1037.275089][T30956] __nla_validate_parse: 3 callbacks suppressed [ 1037.275109][T30956] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6327'. [ 1037.349472][T30956] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6327'. [ 1037.371742][T30959] IPVS: using max 29 ests per chain, 69600 per kthread [ 1037.444348][T23119] IPVS: stop unused estimator thread 0... [ 1037.692275][T30968] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6329'. [ 1037.975000][T30637] netdevsim netdevsim0 eth5 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1038.194309][T30988] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1038.216910][T30989] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6332'. [ 1038.319939][T30637] netdevsim netdevsim0 eth4 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1038.403066][T30990] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 1038.555367][T30637] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1038.664737][T31004] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6336'. [ 1038.690202][T31004] veth4: entered promiscuous mode [ 1038.690228][T31004] veth4: entered allmulticast mode [ 1038.896918][T30637] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1039.002308][T31014] netlink: 'syz.2.6339': attribute type 1 has an invalid length. [ 1039.119638][T31022] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1039.136188][T31014] bond6: entered promiscuous mode [ 1039.151264][T31014] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1039.243157][T31014] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1039.243558][T31014] bond6: (slave gre1): The slave device specified does not support setting the MAC address [ 1039.243582][T31014] bond6: (slave gre1): Setting fail_over_mac to active for active-backup mode [ 1039.270019][T31014] bond6: (slave gre1): making interface the new active one [ 1039.270049][T31014] gre1: entered promiscuous mode [ 1039.307669][T31014] bond6: (slave gre1): Enslaving as an active interface with an up link [ 1039.461163][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1039.600017][T31015] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6340'. [ 1040.093585][T30637] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1040.118258][T30637] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1040.129324][T30637] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1040.154688][T30637] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1040.157397][T30637] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1040.190511][T30637] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1040.191718][T30637] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1040.219676][T30637] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1040.270186][T31052] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6349'. [ 1040.489632][T31052] bridge0: port 2(bridge_slave_1) entered disabled state [ 1040.736092][T30637] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1040.814688][T31072] netlink: 72 bytes leftover after parsing attributes in process `syz.2.6351'. [ 1040.814730][T31072] netlink: 72 bytes leftover after parsing attributes in process `syz.2.6351'. [ 1040.828835][T30637] 8021q: adding VLAN 0 to HW filter on device team0 [ 1040.873747][T23095] bridge0: port 1(bridge_slave_0) entered blocking state [ 1040.873887][T23095] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1040.899584][T23121] bridge0: port 2(bridge_slave_1) entered blocking state [ 1040.899706][T23121] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1041.435353][T31100] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6356'. [ 1041.435400][T31100] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1041.748311][T31112] netlink: 'syz.4.6358': attribute type 1 has an invalid length. [ 1041.789718][T31112] bond1: entered promiscuous mode [ 1041.793687][T31112] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1041.838341][T31112] ipvlan2: entered allmulticast mode [ 1041.838365][T31112] bond1: entered allmulticast mode [ 1041.841033][T31112] bond1: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1041.841058][T31112] bond1: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 1041.841072][T31112] bond1: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 1041.845592][T31112] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 1042.551579][T31139] netlink: 108 bytes leftover after parsing attributes in process `syz.3.6360'. [ 1042.577598][T31103] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6357'. [ 1042.626074][T31103] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6357'. [ 1042.730047][T30637] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1042.857367][T31142] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000 [ 1042.887365][T31149] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6363'. [ 1042.947392][T30637] veth0_vlan: entered promiscuous mode [ 1042.968604][T30637] veth1_vlan: entered promiscuous mode [ 1043.106581][T30637] veth0_macvtap: entered promiscuous mode [ 1043.147687][T30637] veth1_macvtap: entered promiscuous mode [ 1043.239074][T30637] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1043.275427][T30637] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1043.418857][T23119] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1043.419517][T23013] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1043.419571][T23013] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1043.532914][T23095] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1043.679035][T23057] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1043.679062][T23057] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1043.795309][T23121] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1043.795334][T23121] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1044.114548][T31188] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6257'. [ 1044.249998][T31194] rxe_eth0 speed is unknown, defaulting to 1000 [ 1044.338562][T31197] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6374'. [ 1045.139484][ T5627] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1045.160917][ T5627] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1045.162738][ T5627] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1045.191833][ T5627] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1045.194041][ T5627] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1045.731942][T31194] wg0 speed is unknown, defaulting to 1000 [ 1046.195037][T23094] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 1046.195077][T23094] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1046.336483][T31194] C speed is unknown, defaulting to 1000 [ 1046.463136][T31257] x_tables: duplicate underflow at hook 2 [ 1046.655157][T23094] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 1046.655199][T23094] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1046.976922][T23094] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 1046.976963][T23094] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1047.017302][T31286] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6390'. [ 1047.017333][T31286] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6390'. [ 1047.017348][T31286] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6390'. [ 1047.084912][T31288] mac80211_hwsim hwsim47 wlan1: entered promiscuous mode [ 1047.304973][ T5625] Bluetooth: hci4: command tx timeout [ 1047.346561][T31225] rxe_eth0 speed is unknown, defaulting to 1000 [ 1047.632111][T23057] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1047.748711][T31300] netlink: 'syz.4.6395': attribute type 4 has an invalid length. [ 1047.802246][T23057] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1047.930031][T31306] netlink: 256 bytes leftover after parsing attributes in process `syz.4.6397'. [ 1048.003217][T31311] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6398'. [ 1048.103124][T23119] netdevsim netdevsim1 eth5: set [1, 0] type 2 family 0 port 6081 - 0 [ 1048.103229][T23119] netdevsim netdevsim1 eth4: set [1, 0] type 2 family 0 port 6081 - 0 [ 1048.187161][T23094] pim6reg: left allmulticast mode [ 1048.379704][T31316] x_tables: duplicate underflow at hook 3 [ 1049.380546][ T5625] Bluetooth: hci4: command tx timeout [ 1049.445940][T23094] bond2 (unregistering): (slave gretap1): Releasing backup interface [ 1049.626850][T23094] bond7 (unregistering): (slave bridge0): Releasing backup interface [ 1049.673404][T23094] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1049.675721][T23094] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1049.677282][T23094] bond0 (unregistering): Released all slaves [ 1049.685966][T23094] bond1 (unregistering): Released all slaves [ 1049.725707][T23094] bond2 (unregistering): (slave bond3): Releasing backup interface [ 1049.728099][T23094] bond2 (unregistering): Released all slaves [ 1049.751151][T23094] bond3 (unregistering): Released all slaves [ 1049.766045][T23094] bond4 (unregistering): Released all slaves [ 1049.784856][T23094] bond5 (unregistering): Released all slaves [ 1049.796355][T23094] bond6 (unregistering): Released all slaves [ 1049.814803][T23094] bond7 (unregistering): Released all slaves [ 1049.833367][T23094] bond8 (unregistering): Released all slaves [ 1049.849764][T23094] bond9 (unregistering): Released all slaves [ 1049.863448][T23094] bond10 (unregistering): Released all slaves [ 1049.881265][T23094] bond11 (unregistering): Released all slaves [ 1049.906078][T23094] bond12 (unregistering): (slave veth0_to_bond): Releasing active interface [ 1049.907555][T23094] bond12 (unregistering): Released all slaves [ 1049.935906][T23094] bond13 (unregistering): Released all slaves [ 1049.951565][T23094] bond14 (unregistering): Released all slaves [ 1049.985038][T31225] wg0 speed is unknown, defaulting to 1000 [ 1050.022413][T31344] syzkaller0: entered promiscuous mode [ 1050.022440][T31344] syzkaller0: entered allmulticast mode [ 1050.060886][T31346] tipc: Enabled bearer , priority 0 [ 1050.117038][ T5280] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1050.214295][T23094] tipc: Disabling bearer [ 1050.214460][T23094] tipc: Left network mode [ 1050.550014][T31379] netlink: 176 bytes leftover after parsing attributes in process `syz.4.6411'. [ 1050.622524][T31383] netlink: 112 bytes leftover after parsing attributes in process `syz.3.6409'. [ 1050.946059][T31225] C speed is unknown, defaulting to 1000 [ 1051.424437][T31412] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6417'. [ 1051.447510][T31400] pim6reg: entered allmulticast mode [ 1051.460674][ T5625] Bluetooth: hci4: command tx timeout [ 1051.749663][T31408] bridge2: entered promiscuous mode [ 1051.749741][T31408] bridge2: entered allmulticast mode [ 1052.301771][ T5280] 8021q: adding VLAN 0 to HW filter on device eth3 [ 1052.378184][T31453] ip_tables: iptables: counters copy to user failed while replacing table [ 1052.403319][T31449] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6423'. [ 1052.949203][T31474] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6428'. [ 1053.429868][T31488] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6430'. [ 1053.542008][ T5625] Bluetooth: hci4: command tx timeout [ 1053.607958][T31497] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6430'. [ 1053.607987][T31497] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6430'. [ 1054.195952][T31474] netlink: 1196 bytes leftover after parsing attributes in process `syz.3.6428'. [ 1054.278147][T23094] hsr_slave_0: left promiscuous mode [ 1054.289012][T23094] hsr_slave_1: left promiscuous mode [ 1054.410861][T23094] veth1_macvtap: left promiscuous mode [ 1054.410905][T23094] veth0_macvtap: left promiscuous mode [ 1054.411007][T23094] veth1_vlan: left promiscuous mode [ 1054.411084][T23094] veth0_vlan: left promiscuous mode [ 1055.039255][T31538] netlink: 72 bytes leftover after parsing attributes in process `syz.0.6436'. [ 1055.188895][T23094] team0 (unregistering): Port device team_slave_1 removed [ 1055.224044][T23094] team0 (unregistering): Port device team_slave_0 removed [ 1055.464686][ T5280] 8021q: adding VLAN 0 to HW filter on device eth4 [ 1055.465018][T29036] infiniband syz_device_name_32_chars_1234567: ib_query_port failed (-19) [ 1055.470239][T23057] smbdirect: ib_dev[syz_device_name_32_chars_1234567] removed [ 1055.709344][T31225] bridge0: port 1(bridge_slave_0) entered blocking state [ 1055.709843][T31225] bridge0: port 1(bridge_slave_0) entered disabled state [ 1055.710013][T31225] bridge_slave_0: entered allmulticast mode [ 1055.755031][T31225] bridge_slave_0: entered promiscuous mode [ 1055.778643][T31225] bridge0: port 2(bridge_slave_1) entered blocking state [ 1055.778771][T31225] bridge0: port 2(bridge_slave_1) entered disabled state [ 1055.778968][T31225] bridge_slave_1: entered allmulticast mode [ 1055.819218][T31225] bridge_slave_1: entered promiscuous mode [ 1055.857739][T31561] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 1055.906390][T31561] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6441'. [ 1055.908272][T31225] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1056.087936][T31561] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1056.099006][T31225] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1056.160205][T31225] team0: Port device team_slave_0 added [ 1056.171096][T31225] team0: Port device team_slave_1 added [ 1056.211973][T23094] IPVS: stop unused estimator thread 0... [ 1056.230274][T31225] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1056.230293][T31225] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1056.230316][T31225] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1056.285968][T31225] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1056.285989][T31225] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1056.286016][T31225] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1056.383130][T31579] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6446'. [ 1056.899233][T31225] hsr_slave_0: entered promiscuous mode [ 1056.923615][T31588] netlink: 'syz.4.6447': attribute type 2 has an invalid length. [ 1056.923643][T31588] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6447'. [ 1056.926113][T31225] hsr_slave_1: entered promiscuous mode [ 1056.928769][T31225] debugfs: 'hsr0' already exists in 'hsr' [ 1056.964294][T31225] Cannot create hsr debugfs directory [ 1057.079243][T31594] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6450'. [ 1057.337023][T31596] ip_tables: iptables: counters copy to user failed while replacing table [ 1057.337687][T31596] IPVS: rr: TCP 127.0.0.1:21 - no destination available [ 1057.424414][T31604] netlink: 'syz.3.6452': attribute type 1 has an invalid length. [ 1057.544647][T31604] bond2: entered promiscuous mode [ 1057.548141][T31604] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1057.794834][T31618] mac80211_hwsim hwsim71 wlan1: entered promiscuous mode [ 1057.794869][T31618] mac80211_hwsim hwsim71 wlan1: entered allmulticast mode [ 1058.076836][ T5280] 8021q: adding VLAN 0 to HW filter on device eth5 [ 1058.078195][T31636] __nla_validate_parse: 4 callbacks suppressed [ 1058.078214][T31636] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6456'. [ 1058.256143][T31225] netdevsim netdevsim1 eth5 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1058.416312][T31644] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6458'. [ 1058.483687][T31225] netdevsim netdevsim1 eth4 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1058.485853][T31648] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6458'. [ 1058.585942][T31653] netlink: 72 bytes leftover after parsing attributes in process `syz.3.6460'. [ 1058.736659][T31225] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1058.812520][T31658] veth1_macvtap: left promiscuous mode [ 1058.812555][T31658] macsec0: entered allmulticast mode [ 1058.827704][T31658] veth1_macvtap: entered promiscuous mode [ 1058.827727][T31658] veth1_macvtap: entered allmulticast mode [ 1058.827856][T31658] macsec0: left allmulticast mode [ 1058.827870][T31658] veth1_macvtap: left allmulticast mode [ 1058.949775][T31666] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6464'. [ 1059.047306][T31225] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1059.099256][T31673] netlink: 'syz.3.6465': attribute type 9 has an invalid length. [ 1059.499424][T31685] netlink: 9 bytes leftover after parsing attributes in process `syz.4.6468'. [ 1059.651028][T31685] 0·: renamed from hsr0 (while UP) [ 1059.653227][T31685] 0·: entered allmulticast mode [ 1059.653252][T31685] hsr_slave_0: entered allmulticast mode [ 1059.653269][T31685] hsr_slave_1: entered allmulticast mode [ 1059.653818][T31685] A link change request failed with some changes committed already. Interface c0· may have been left with an inconsistent configuration, please check. [ 1059.754854][T31225] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1059.774906][T31225] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1059.775909][T31225] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1059.806299][T31225] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1059.807367][T31225] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1059.839058][T31225] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1059.852595][T31225] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1059.878148][T31225] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1060.249504][ T5625] Bluetooth: hci3: unexpected event 0x13 length: 321 > 255 [ 1060.418819][T31225] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1060.546178][T31225] 8021q: adding VLAN 0 to HW filter on device team0 [ 1060.571398][T31729] batman_adv: batadv0: Adding interface: veth0 [ 1060.571420][T31729] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1060.571453][T31729] batman_adv: batadv0: Interface activated: veth0 [ 1060.593439][T23094] bridge0: port 1(bridge_slave_0) entered blocking state [ 1060.593552][T23094] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1060.638037][T23094] bridge0: port 2(bridge_slave_1) entered blocking state [ 1060.638156][T23094] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1060.651128][T31729] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1060.651157][T31729] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1060.657233][T31729] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1060.659911][T31729] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1060.668948][T31729] batman_adv: batadv0: Interface deactivated: veth0 [ 1060.668973][T31729] batman_adv: batadv0: Removing interface: veth0 [ 1061.304130][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1061.515810][T31736] mac80211_hwsim hwsim71 wlan1: left promiscuous mode [ 1061.522231][T31736] bond1: left promiscuous mode [ 1061.565050][T31736] bridge2: left promiscuous mode [ 1061.591384][T23016] bridge0: port 2(bridge_slave_1) entered blocking state [ 1061.591517][T23016] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1061.766662][T31752] netlink: 'syz.3.6482': attribute type 4 has an invalid length. [ 1061.919503][T31758] netlink: 72 bytes leftover after parsing attributes in process `syz.4.6484'. [ 1061.919533][T31758] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6484'. [ 1061.919547][T31758] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6484'. [ 1061.951957][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1062.000797][T31760] netlink: 72 bytes leftover after parsing attributes in process `syz.4.6484'. [ 1062.216021][T31756] bridge0: port 2(bridge_slave_1) entered disabled state [ 1062.216979][T31756] bridge0: port 1(bridge_slave_0) entered disabled state [ 1062.765094][T23129] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1062.780550][T23095] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1062.781275][T23095] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1062.781316][T23095] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1062.991605][T31789] l2tp_ppp: sess 2/0: no socket in recv [ 1063.018427][T31794] l2tp_ppp: sess 2/0: no socket in recv [ 1063.160951][T31796] netlink: 'syz.0.6490': attribute type 30 has an invalid length. [ 1063.681152][T31225] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1063.762861][T31828] __nla_validate_parse: 7 callbacks suppressed [ 1063.762891][T31828] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6497'. [ 1063.763087][T31828] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6497'. [ 1063.979150][T31225] veth0_vlan: entered promiscuous mode [ 1064.047550][T31225] veth1_vlan: entered promiscuous mode [ 1064.178117][T31838] bridge0: entered promiscuous mode [ 1064.178160][T31838] bridge0: entered allmulticast mode [ 1064.195760][T31225] veth0_macvtap: entered promiscuous mode [ 1064.200036][T31843] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6503'. [ 1064.228030][T31843] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1064.244818][T31225] veth1_macvtap: entered promiscuous mode [ 1064.285361][T31225] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1064.306554][T31225] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1064.341354][T23095] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1064.362035][T23094] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1064.362086][T23094] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1064.362154][T23094] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1064.489281][T31845] netlink: 284 bytes leftover after parsing attributes in process `syz.4.6504'. [ 1064.489309][T31845] openvswitch: netlink: Flow key attr not present in new flow. [ 1064.575206][T31855] tipc: Can't bind to reserved service type 2 [ 1064.660280][T23094] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1064.660308][T23094] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1064.746924][T23016] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1064.746951][T23016] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1065.189108][T31880] geneve2: entered promiscuous mode [ 1065.530870][T31897] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6518'. [ 1065.778943][T31905] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6520'. [ 1065.948401][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1065.984689][ T5627] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1065.991131][ T5627] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1065.994970][ T5627] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1066.001504][ T5627] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1066.002226][ T5627] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1066.342715][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1066.495820][T31907] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1066.763459][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1067.118285][T31996] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 0, id = 0 [ 1067.131688][T31998] netlink: 'syz.1.6529': attribute type 4 has an invalid length. [ 1067.131712][T31998] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6529'. [ 1067.160571][T31998] netlink: 'syz.1.6529': attribute type 4 has an invalid length. [ 1067.160601][T31998] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6529'. [ 1067.189378][T31998] netlink: 'syz.1.6529': attribute type 4 has an invalid length. [ 1067.189431][T31998] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6529'. [ 1067.217911][T31998] netlink: 'syz.1.6529': attribute type 4 has an invalid length. [ 1067.217934][T31998] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6529'. [ 1067.253337][T31998] netlink: 'syz.1.6529': attribute type 4 has an invalid length. [ 1067.278176][T31998] netlink: 'syz.1.6529': attribute type 4 has an invalid length. [ 1067.299615][T31998] netlink: 'syz.1.6529': attribute type 4 has an invalid length. [ 1067.304206][T31998] netlink: 'syz.1.6529': attribute type 4 has an invalid length. [ 1067.307267][T31998] netlink: 'syz.1.6529': attribute type 4 has an invalid length. [ 1067.590331][T31929] rxe_eth0 speed is unknown, defaulting to 1000 [ 1068.121242][ T5625] Bluetooth: hci2: command tx timeout [ 1068.223748][T31929] wg0 speed is unknown, defaulting to 1000 [ 1069.113462][T32077] bond1: entered allmulticast mode [ 1069.113950][T32077] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1069.116735][T32080] __nla_validate_parse: 62 callbacks suppressed [ 1069.116756][T32080] netlink: 14 bytes leftover after parsing attributes in process `syz.0.6548'. [ 1069.257038][T32080] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1069.287863][T32080] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1069.303079][T32080] bond0 (unregistering): Released all slaves [ 1069.599515][T32098] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6552'. [ 1069.777940][T31929] bridge0: port 1(bridge_slave_0) entered blocking state [ 1069.779767][T31929] bridge0: port 1(bridge_slave_0) entered disabled state [ 1069.779976][T31929] bridge_slave_0: entered allmulticast mode [ 1069.788272][T31929] bridge_slave_0: entered promiscuous mode [ 1069.798393][T31929] bridge0: port 2(bridge_slave_1) entered blocking state [ 1069.798557][T31929] bridge0: port 2(bridge_slave_1) entered disabled state [ 1069.798725][T31929] bridge_slave_1: entered allmulticast mode [ 1069.805745][T31929] bridge_slave_1: entered promiscuous mode [ 1069.855946][T32108] netlink: 88 bytes leftover after parsing attributes in process `syz.1.6554'. [ 1069.938903][T31929] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1069.959515][T31929] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1070.173619][T31929] team0: Port device team_slave_0 added [ 1070.182100][ T5625] Bluetooth: hci2: command tx timeout [ 1070.187869][T31929] team0: Port device team_slave_1 added [ 1070.268939][T32115] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6555'. [ 1070.300107][T31929] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1070.300128][T31929] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1070.300156][T31929] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1070.315428][T31929] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1070.315447][T31929] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1070.315472][T31929] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1070.391274][T32124] validate_nla: 56 callbacks suppressed [ 1070.391298][T32124] netlink: 'syz.4.6557': attribute type 23 has an invalid length. [ 1070.434053][T31934] hid-generic 0005:4C4A:4155.0001: item fetching failed at offset 0/1 [ 1070.435135][T31934] hid-generic 0005:4C4A:4155.0001: probe with driver hid-generic failed with error -22 [ 1070.630210][T31929] hsr_slave_0: entered promiscuous mode [ 1070.633463][T31929] hsr_slave_1: entered promiscuous mode [ 1070.638897][T31929] debugfs: 'hsr0' already exists in 'hsr' [ 1070.638923][T31929] Cannot create hsr debugfs directory [ 1071.363220][T32134] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1071.418411][T31929] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1071.418449][T31929] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1071.418474][T31929] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 1071.578836][T32143] sctp: [Deprecated]: syz.4.6563 (pid 32143) Use of int in max_burst socket option. [ 1071.578836][T32143] Use struct sctp_assoc_value instead [ 1071.955807][T31929] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1071.955856][T31929] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1071.955882][T31929] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 1072.231982][T31929] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1072.232022][T31929] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1072.232047][T31929] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 1072.262621][ T5627] Bluetooth: hci2: command tx timeout [ 1072.605556][T31929] netdevsim netdevsim2 netdevsim0 (unregistering): left allmulticast mode [ 1072.606120][T31929] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1072.606150][T31929] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1072.606175][T31929] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 1073.055670][T32181] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 1073.121267][T31929] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1073.148318][T31929] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1073.150092][T31929] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1073.182019][T31929] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1073.188379][T31929] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1073.218876][T31929] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1073.228479][T31929] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1073.237933][T32189] netlink: 44 bytes leftover after parsing attributes in process `syz.4.6574'. [ 1073.249773][T31929] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1073.275107][T32189] netlink: 44 bytes leftover after parsing attributes in process `syz.4.6574'. [ 1073.275315][T32189] netlink: 44 bytes leftover after parsing attributes in process `syz.4.6574'. [ 1073.275527][T32189] netlink: 44 bytes leftover after parsing attributes in process `syz.4.6574'. [ 1073.275761][T32189] netlink: 44 bytes leftover after parsing attributes in process `syz.4.6574'. [ 1073.276016][T32189] netlink: 44 bytes leftover after parsing attributes in process `syz.4.6574'. [ 1073.804555][T31929] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1073.874996][T31929] 8021q: adding VLAN 0 to HW filter on device team0 [ 1073.902013][T23062] bridge0: port 1(bridge_slave_0) entered blocking state [ 1073.902148][T23062] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1073.936934][T23016] bridge0: port 2(bridge_slave_1) entered blocking state [ 1073.937054][T23016] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1074.096239][T32224] RDS: rds_bind could not find a transport for fc01::1, load rds_tcp or rds_rdma? [ 1074.126157][T32235] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 1074.206836][T32235] __nla_validate_parse: 60 callbacks suppressed [ 1074.206861][T32235] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6586'. [ 1074.340555][ T5627] Bluetooth: hci2: command tx timeout [ 1074.476859][T32244] bond3: entered allmulticast mode [ 1074.481826][T32244] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1074.527803][T32245] netlink: 52 bytes leftover after parsing attributes in process `syz.3.6588'. [ 1074.939871][T32259] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 1074.942205][T32259] team0: Device ipvlan2 is already an upper device of the team interface [ 1074.967590][T32261] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1075.099661][T32263] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 1075.102678][T32263] team0: Device ipvlan2 is already an upper device of the team interface [ 1075.134169][T32275] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6594'. [ 1075.299755][T32275] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6594'. [ 1075.392053][T32283] bond2: entered promiscuous mode [ 1075.392187][T32283] bond2: entered allmulticast mode [ 1075.392682][T32283] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1075.622294][T31929] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1075.743017][T32303] netlink: 'syz.0.6599': attribute type 10 has an invalid length. [ 1075.879370][T31929] veth0_vlan: entered promiscuous mode [ 1075.925877][T31929] veth1_vlan: entered promiscuous mode [ 1076.200694][T32323] 8021q: VLANs not supported on ip6_vti0 [ 1076.208290][T31929] veth0_macvtap: entered promiscuous mode [ 1076.353669][T31929] veth1_macvtap: entered promiscuous mode [ 1076.391276][T31929] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1076.422829][T31929] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1076.435038][T23106] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1076.435556][T23106] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1076.435873][T23106] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1076.436385][T23094] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1076.567847][T32332] openvswitch: netlink: Tunnel attr 68 out of range max 16 [ 1076.661233][T32333] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6607'. [ 1076.661297][T32333] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6607'. [ 1076.709354][T32333] gretap0: entered promiscuous mode [ 1076.716990][T32333] gretap0: left promiscuous mode [ 1076.819081][T23095] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1076.819117][T23095] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1076.930227][T23016] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1076.930253][T23016] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1077.437089][T32358] netlink: 100 bytes leftover after parsing attributes in process `syz.0.6613'. [ 1077.626053][T32365] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6614'. [ 1077.657527][T32366] netlink: 'syz.0.6616': attribute type 10 has an invalid length. [ 1077.673641][T32368] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6617'. [ 1077.678525][T32366] IPVS: set_ctl: invalid protocol: 0 172.20.20.0:0 [ 1077.698222][T32366] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6616'. [ 1078.182360][T32397] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 1078.348128][T32404] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1078.490029][T32406] netlink: NAT attribute has 1 unknown bytes [ 1078.490070][T32406] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1079.513490][T32468] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 1079.604557][T32475] __nla_validate_parse: 2 callbacks suppressed [ 1079.604582][T32475] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6655'. [ 1079.604622][T32475] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6655'. [ 1079.604622][T32472] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6654'. [ 1079.837903][T32482] ip_tables: iptables: counters copy to user failed while replacing table [ 1079.878313][T32482] syzkaller1: entered promiscuous mode [ 1079.878342][T32482] syzkaller1: entered allmulticast mode [ 1080.255666][T32503] netlink: 'syz.4.6664': attribute type 11 has an invalid length. [ 1080.255695][T32503] netlink: 224 bytes leftover after parsing attributes in process `syz.4.6664'. [ 1080.256401][T32503] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6664'. [ 1080.277731][T32504] netlink: 9 bytes leftover after parsing attributes in process `syz.2.6665'. [ 1080.315610][T32504] gretap0: entered promiscuous mode [ 1080.396160][T32518] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6670'. [ 1080.894960][T32541] netlink: 104 bytes leftover after parsing attributes in process `syz.4.6677'. [ 1081.263601][T32568] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6682'. [ 1081.587565][T32577] hsr0: entered allmulticast mode [ 1081.587593][T32577] hsr_slave_0: entered allmulticast mode [ 1081.768282][T32585] smc: ib device syz2 ibport 1 applied user defined pnetid SYZ2 [ 1082.000723][T32599] bond0: option miimon: invalid value (18446744071829782528) [ 1082.000756][T32599] bond0: option miimon: allowed values 0 - 2147483647 [ 1082.156453][T32604] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6695'. [ 1082.171874][T32610] netlink: 'syz.3.6698': attribute type 1 has an invalid length. [ 1082.171897][T32610] netlink: 'syz.3.6698': attribute type 2 has an invalid length. [ 1082.504108][T32629] veth0: entered promiscuous mode [ 1082.516669][T32627] veth0: left promiscuous mode [ 1082.582153][T32633] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1082.582247][T32633] gretap1: entered promiscuous mode [ 1082.582264][T32633] gretap1: entered allmulticast mode [ 1083.340638][T32680] ip_tables: iptables: counters copy to user failed while replacing table [ 1083.342548][T32680] IPVS: rr: TCP 127.0.0.1:21 - no destination available [ 1083.710326][T32708] openvswitch: netlink: IPv4 frag type 132 is out of range max 2 [ 1084.001280][T32723] netlink: 'syz.3.6728': attribute type 32 has an invalid length. [ 1084.345200][T32726] netlink: Failed to add nicvf0 helper -22 [ 1084.345264][T32726] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1084.700236][T32746] __nla_validate_parse: 8 callbacks suppressed [ 1084.700258][T32746] netlink: 116 bytes leftover after parsing attributes in process `syz.0.6733'. [ 1084.725462][T32750] netlink: 'syz.1.6734': attribute type 3 has an invalid length. [ 1084.755626][T32754] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6735'. [ 1084.770453][T32748] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6732'. [ 1085.368773][ T313] geneve2: entered promiscuous mode [ 1085.368830][ T313] geneve2: entered allmulticast mode [ 1085.392847][T23094] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0 [ 1085.393647][T23094] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 1085.393684][T23094] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 1085.393716][T23094] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0 [ 1085.578834][ T321] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6746'. [ 1085.578861][ T321] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6746'. [ 1085.829688][ T342] netlink: NAT attribute has 5 unknown bytes [ 1085.829729][ T342] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1085.854948][ T340] netlink: 52 bytes leftover after parsing attributes in process `syz.2.6751'. [ 1086.040804][T23055] IPVS: starting estimator thread 0... [ 1086.118456][ T359] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6756'. [ 1086.118496][ T359] openvswitch: netlink: Flow key attr not present in new flow. [ 1086.120261][ T359] ipt_REJECT: TCP_RESET invalid for non-tcp [ 1086.130971][ T356] IPVS: using max 31 ests per chain, 74400 per kthread [ 1086.154379][ T359] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6756'. [ 1086.263368][ T362] netlink: 'syz.4.6757': attribute type 10 has an invalid length. [ 1086.376445][ T365] xt_TCPMSS: Only works on TCP SYN packets [ 1086.432492][ T372] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6760'. [ 1086.566554][ T370] IPVS: Scheduler module ip_vs_mh not found [ 1086.702454][ T387] netlink: 604 bytes leftover after parsing attributes in process `syz.0.6765'. [ 1086.803105][ T394] bridge1: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 1087.289970][ T421] netlink: 'syz.4.6775': attribute type 32 has an invalid length. [ 1087.305437][ T421] netlink: 'syz.4.6775': attribute type 11 has an invalid length. [ 1087.326576][ T414] syzkaller0: entered promiscuous mode [ 1087.326624][ T414] syzkaller0: entered allmulticast mode [ 1091.862890][ T471] __nla_validate_parse: 5 callbacks suppressed [ 1091.862918][ T471] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6795'. [ 1091.901827][ T475] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6793'. [ 1091.901858][ T475] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6793'. [ 1091.905655][ T475] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6793'. [ 1091.905679][ T475] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6793'. [ 1091.931947][ T475] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6793'. [ 1091.931976][ T475] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6793'. [ 1092.138115][ T488] ip_tables: iptables: counters copy to user failed while replacing table [ 1092.189278][ T487] netlink: 'syz.3.6798': attribute type 5 has an invalid length. [ 1092.189305][ T487] netlink: 'syz.3.6798': attribute type 9 has an invalid length. [ 1092.189320][ T487] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6798'. [ 1092.199090][ T491] 0: reclassify loop, rule prio 0, protocol 03 [ 1092.741354][ T5627] Bluetooth: hci1: command 0x0406 tx timeout [ 1093.742511][ T543] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6808'. [ 1094.624493][ T551] netlink: 'syz.1.6809': attribute type 83 has an invalid length. [ 1094.762351][ T561] netlink: 'syz.2.6812': attribute type 13 has an invalid length. [ 1094.862337][ T561] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6812'. [ 1095.038960][T23055] IPVS: starting estimator thread 0... [ 1095.048919][ T565] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 1095.123246][ T569] IPVS: using max 26 ests per chain, 62400 per kthread [ 1096.840986][ T616] Dead loop on virtual device ip6_vti0 (net 404), fix it urgently! [ 1096.923348][ T624] __nla_validate_parse: 4 callbacks suppressed [ 1096.923375][ T624] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6832'. [ 1097.227914][ T632] lo: left promiscuous mode [ 1097.872579][ T639] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6835'. [ 1098.569555][ T663] xt_hashlimit: size too large, truncated to 1048576 [ 1098.569809][ T663] xt_hashlimit: max too large, truncated to 1048576 [ 1098.569900][ T663] xt_hashlimit: invalid rate [ 1098.698911][ T663] netlink: 'syz.0.6844': attribute type 21 has an invalid length. [ 1098.720080][ T663] netlink: 156 bytes leftover after parsing attributes in process `syz.0.6844'. [ 1098.809035][ T669] netlink: 164 bytes leftover after parsing attributes in process `syz.3.6846'. [ 1101.953593][ T752] netlink: 'syz.3.6861': attribute type 1 has an invalid length. [ 1102.496900][ T761] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6862'. [ 1103.309649][ T773] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6867'. [ 1103.779194][ T790] x_tables: duplicate underflow at hook 2 [ 1104.736348][ T807] netlink: 'syz.1.6873': attribute type 1 has an invalid length. [ 1105.216195][ T807] veth3: entered promiscuous mode [ 1105.240020][ T819] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6876'. [ 1105.283110][ T819] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6876'. [ 1105.324646][ T819] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6876'. [ 1105.390880][ T31] audit: type=1804 audit(1792175806.186:8): pid=821 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.6875" name="/newroot/177/cgroup.controllers" dev="tmpfs" ino=921 res=1 errno=0 [ 1105.390943][ T31] audit: type=1800 audit(1792175806.186:9): pid=821 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.6875" name="cgroup.controllers" dev="tmpfs" ino=921 res=0 errno=0 [ 1105.474649][ T819] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6876'. [ 1105.546820][ T819] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6876'. [ 1105.584565][ T819] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6876'. [ 1105.615049][ T819] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6876'. [ 1105.638665][ T819] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6876'. [ 1108.528018][ T842] __nla_validate_parse: 9 callbacks suppressed [ 1108.528045][ T842] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6883'. [ 1108.764071][ T842] veth4: entered promiscuous mode [ 1108.764098][ T842] veth4: entered allmulticast mode [ 1108.928062][ T869] bridge0: port 1(bridge_slave_0) entered disabled state [ 1108.957464][ T869] bridge0: port 2(bridge_slave_1) entered disabled state [ 1109.894949][ T893] netlink: 3604 bytes leftover after parsing attributes in process `syz.1.6895'. [ 1110.855012][ T912] netlink: 9 bytes leftover after parsing attributes in process `syz.2.6901'. [ 1111.319562][ T924] nft_compat: unsupported protocol 5 [ 1111.840829][ T953] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6908'. [ 1113.222922][ T5625] Bluetooth: hci5: command 0x0406 tx timeout [ 1113.666451][ T967] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1113.681585][ T968] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6911'. [ 1113.681615][ T968] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6911'. [ 1113.872270][ T967] tc_dump_action: action bad kind [ 1114.213659][ T977] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6913'. [ 1114.623133][ T979] netlink: 'syz.4.6913': attribute type 2 has an invalid length. [ 1115.155283][ T984] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6915'. [ 1115.190577][ T984] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6915'. [ 1115.885691][ T994] IPVS: set_ctl: invalid protocol: 47 172.20.20.187:20000 [ 1115.974244][ T994] IPVS: set_ctl: invalid protocol: 46 172.30.1.4:20001 [ 1116.455810][ T999] IPVS: set_ctl: invalid protocol: 43 127.0.0.1:20000 [ 1116.860751][ T1006] ip_tables: iptables: counters copy to user failed while replacing table [ 1117.059970][ T1006] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 1117.287853][ T1010] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6925'. [ 1125.200079][ C0] sched: DL replenish lagged too much [ 1131.631804][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1150.200552][ T5625] Bluetooth: hci3: command 0x0405 tx timeout [ 1260.800283][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 1260.807937][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P1011/1:b..l [ 1260.816376][ C0] rcu: (detected by 0, t=10503 jiffies, g=185813, q=497343 ncpus=2) [ 1260.824666][ C0] task:syz.2.6926 state:R running task stack:25128 pid:1011 tgid:1011 ppid:31929 task_flags:0x400040 flags:0x00080002 [ 1260.838523][ C0] Call Trace: [ 1260.841954][ C0] [ 1260.845026][ C0] __schedule+0x17db/0x58f0 [ 1260.849596][ C0] ? __asan_memcpy+0x40/0x70 [ 1260.854387][ C0] ? __lock_acquire+0x747/0x2de0 [ 1260.859396][ C0] ? __pfx___schedule+0x10/0x10 [ 1260.864565][ C0] ? __lock_acquire+0x747/0x2de0 [ 1260.869568][ C0] preempt_schedule_irq+0x4b/0x90 [ 1260.874642][ C0] irqentry_exit+0x14f/0x920 [ 1260.879374][ C0] ? trace_irq_disable+0x3b/0x140 [ 1260.884552][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1260.890775][ C0] RIP: 0010:lock_acquire+0x232/0x350 [ 1260.896110][ C0] Code: ff ff ff e8 30 5d 45 0a f7 44 24 10 00 02 00 00 0f 84 38 ff ff ff 65 48 8b 05 42 a7 f2 12 48 3b 44 24 50 75 33 fb 48 83 c4 58 <5b> 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc 48 8d 3d f7 44 da [ 1260.916121][ C0] RSP: 0018:ffffc9000d8b6ce0 EFLAGS: 00000292 [ 1260.922246][ C0] RAX: a5dff150611cf700 RBX: 0000000000000000 RCX: 0000000000000046 [ 1260.930262][ C0] RDX: 000000009c18122f RSI: ffffffff8e6f1e7e RDI: ffffffff8c6ddb80 [ 1260.938461][ C0] RBP: ffff8880372e9f40 R08: ffffffff817811df R09: 0000000000000000 [ 1260.946496][ C0] R10: ffffc9000d8b6e18 R11: ffffffff81b2c5e0 R12: ffffffff8fd5c8e0 [ 1260.954683][ C0] R13: 0000000000000002 R14: 0000000000000000 R15: 0000000000000246 [ 1260.962707][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1260.968985][ C0] ? unwind_next_frame+0x8f/0x2550 [ 1260.974369][ C0] ? do_syscall_64+0x166/0x520 [ 1260.979174][ C0] ? unwind_next_frame+0x8f/0x2550 [ 1260.984357][ C0] unwind_next_frame+0xac/0x2550 [ 1260.989549][ C0] ? unwind_next_frame+0x8f/0x2550 [ 1260.994803][ C0] ? __x64_sys_mprotect+0x80/0x90 [ 1261.000021][ C0] ? unwind_next_frame+0x8f/0x2550 [ 1261.005282][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1261.011572][ C0] arch_stack_walk+0x11b/0x150 [ 1261.016565][ C0] ? do_syscall_64+0x166/0x520 [ 1261.021761][ C0] ? fill_pool+0x163/0x610 [ 1261.026299][ C0] stack_trace_save+0xa9/0x100 [ 1261.031114][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 1261.036560][ C0] kasan_save_track+0x3e/0x80 [ 1261.041281][ C0] ? kasan_save_track+0x3e/0x80 [ 1261.046265][ C0] ? __kasan_slab_alloc+0x6c/0x80 [ 1261.051425][ C0] ? kmem_cache_alloc_noprof+0x2b9/0x600 [ 1261.057193][ C0] ? fill_pool+0x163/0x610 [ 1261.062096][ C0] ? debug_object_activate+0x38d/0x420 [ 1261.067762][ C0] ? call_rcu+0x43/0x8b0 [ 1261.072143][ C0] ? __slab_free+0x274/0x2c0 [ 1261.076870][ C0] ? qlist_free_all+0x99/0x100 [ 1261.081710][ C0] ? kasan_quarantine_reduce+0x148/0x160 [ 1261.087562][ C0] ? __kasan_slab_alloc+0x22/0x80 [ 1261.092640][ C0] ? kmem_cache_alloc_noprof+0x2b9/0x600 [ 1261.098341][ C0] ? mas_alloc_nodes+0x291/0x350 [ 1261.103509][ C0] ? mas_preallocate+0x42a/0x840 [ 1261.108622][ C0] ? __split_vma+0x2fb/0xa60 [ 1261.113450][ C0] ? vma_modify+0x13e7/0x1bc0 [ 1261.118271][ C0] ? vma_modify_flags+0x2a4/0x3c0 [ 1261.123339][ C0] ? mprotect_fixup+0x51a/0xad0 [ 1261.128226][ C0] ? do_mprotect_pkey+0x8e7/0xd10 [ 1261.133380][ C0] ? __x64_sys_mprotect+0x80/0x90 [ 1261.138553][ C0] ? do_syscall_64+0x166/0x520 [ 1261.143437][ C0] __kasan_slab_alloc+0x6c/0x80 [ 1261.148624][ C0] kmem_cache_alloc_noprof+0x2b9/0x600 [ 1261.154143][ C0] ? fill_pool+0x163/0x610 [ 1261.159053][ C0] ? kmem_cache_alloc_noprof+0x156/0x600 [ 1261.164831][ C0] ? fill_pool+0x163/0x610 [ 1261.169307][ C0] ? debug_object_activate+0x364/0x420 [ 1261.175102][ C0] fill_pool+0x163/0x610 [ 1261.179404][ C0] ? __pfx_fill_pool+0x10/0x10 [ 1261.184219][ C0] ? rcu_is_watching+0x16/0xb0 [ 1261.189333][ C0] ? debug_object_activate+0x364/0x420 [ 1261.194855][ C0] debug_object_activate+0x38d/0x420 [ 1261.200241][ C0] ? __pfx_rcu_free_slab+0x10/0x10 [ 1261.205381][ C0] call_rcu+0x43/0x8b0 [ 1261.209503][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1261.215440][ C0] __slab_free+0x274/0x2c0 [ 1261.220007][ C0] qlist_free_all+0x99/0x100 [ 1261.224729][ C0] ? mas_alloc_nodes+0x291/0x350 [ 1261.229802][ C0] ? kmem_cache_alloc_noprof+0x156/0x600 [ 1261.235477][ C0] kasan_quarantine_reduce+0x148/0x160 [ 1261.241153][ C0] __kasan_slab_alloc+0x22/0x80 [ 1261.246064][ C0] kmem_cache_alloc_noprof+0x2b9/0x600 [ 1261.252124][ C0] ? mas_alloc_nodes+0x291/0x350 [ 1261.257121][ C0] ? kmem_cache_alloc_noprof+0x156/0x600 [ 1261.262919][ C0] ? mas_alloc_nodes+0x291/0x350 [ 1261.268031][ C0] mas_alloc_nodes+0x291/0x350 [ 1261.272864][ C0] mas_preallocate+0x42a/0x840 [ 1261.277682][ C0] ? rcu_is_watching+0x16/0xb0 [ 1261.282607][ C0] ? trace_kmem_cache_alloc+0x29/0xe0 [ 1261.288052][ C0] ? __pfx_mas_preallocate+0x10/0x10 [ 1261.293499][ C0] ? anon_vma_name+0x61/0x210 [ 1261.298257][ C0] ? __mas_set_range+0x11a/0x3a0 [ 1261.303535][ C0] __split_vma+0x2fb/0xa60 [ 1261.308192][ C0] ? __pfx___split_vma+0x10/0x10 [ 1261.313238][ C0] vma_modify+0x13e7/0x1bc0 [ 1261.317834][ C0] vma_modify_flags+0x2a4/0x3c0 [ 1261.322817][ C0] ? __pfx_vma_modify_flags+0x10/0x10 [ 1261.328525][ C0] ? rcu_is_watching+0x16/0xb0 [ 1261.333345][ C0] ? percpu_counter_add_batch+0xec/0x1d0 [ 1261.339118][ C0] ? __vm_enough_memory+0x11a/0x380 [ 1261.344397][ C0] mprotect_fixup+0x51a/0xad0 [ 1261.349308][ C0] ? __pfx_mprotect_fixup+0x10/0x10 [ 1261.354643][ C0] ? mas_next_slot+0xc91/0xd70 [ 1261.359821][ C0] do_mprotect_pkey+0x8e7/0xd10 [ 1261.364828][ C0] ? __pfx_do_mprotect_pkey+0x10/0x10 [ 1261.370437][ C0] ? vm_mmap_pgoff+0x31c/0x4e0 [ 1261.375294][ C0] ? vm_mmap_pgoff+0x35a/0x4e0 [ 1261.380196][ C0] ? __pfx___se_sys_futex+0x10/0x10 [ 1261.385616][ C0] ? rcu_is_watching+0x16/0xb0 [ 1261.390460][ C0] __x64_sys_mprotect+0x80/0x90 [ 1261.395406][ C0] do_syscall_64+0x166/0x520 [ 1261.400074][ C0] ? trace_irq_disable+0x3b/0x140 [ 1261.405509][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1261.411881][ C0] ? clear_bhb_loop+0x70/0xc0 [ 1261.416620][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1261.422834][ C0] RIP: 0033:0x7f349919e357 [ 1261.427306][ C0] RSP: 002b:00007ffdf2c72c78 EFLAGS: 00000206 ORIG_RAX: 000000000000000a [ 1261.435960][ C0] RAX: ffffffffffffffda RBX: 00007f349a0a56c0 RCX: 00007f349919e357 [ 1261.444415][ C0] RDX: 0000000000000003 RSI: 0000000000020000 RDI: 00007f349a086000 [ 1261.452430][ C0] RBP: 0000000000000000 R08: 00000000ffffffff R09: 0000000000000000 [ 1261.460533][ C0] R10: 0000000000021000 R11: 0000000000000206 R12: 00007ffdf2c72dd0 [ 1261.468646][ C0] R13: ffffffffffffffc0 R14: 0000000000001000 R15: 0000000000000000 [ 1261.476837][ C0]