last executing test programs: 4m32.98928605s ago: executing program 4 (id=4670): r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) socket$l2tp6(0xa, 0x2, 0x73) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) sendmmsg$inet6(r2, &(0x7f0000000240)=[{{&(0x7f0000000480)={0xa, 0x4e24, 0x20000004, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8e}, 0x1c, &(0x7f0000000d80)=[{&(0x7f0000000c40)="ea", 0x1}], 0x1}}, {{&(0x7f0000000000)={0xa, 0x4e1e, 0x7, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x23}}, 0x401}, 0x1c, &(0x7f00000001c0)=[{&(0x7f00000003c0)="f5", 0x1}], 0x1}}], 0x2, 0x40) shutdown(r2, 0x1) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000004c0)={0x0, @in6={{0xa, 0x4e24, 0x0, @empty, 0x4}}, 0x8, 0x1, 0xfffffe01, 0x0, 0xb3550aa4ba878386, 0x2, 0x2}, 0x9c) ioctl$sock_bt_hidp_HIDPCONNADD(r0, 0x400448c8, &(0x7f0000000340)={r1, r1, 0xd, 0x2, &(0x7f0000000040)="ee7d", 0x9, 0x1, 0x16c0, 0x5505, 0x8b, 0x1, 0x9, 'syz0\x00'}) 4m32.897703809s ago: executing program 4 (id=4672): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_REMOVEDEF(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, r1, 0x4, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0xffffffffffffffff}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x2b}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @initdev={0xac, 0x1e, 0x1, 0x0}}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @remote}}, @NLBL_MGMT_A_DOMAIN={0x7, 0x1, '\xc7&\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x8040}, 0x40000) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r2, 0x84, 0x12, &(0x7f0000000180), 0x4) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000200), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r3, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x64008854}, 0x4008004) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000340), r0) sendmsg$NFC_CMD_SE_IO(r0, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, r5, 0x300, 0x70bd2c, 0x25dfdbff, {}, [@NFC_ATTR_SE_INDEX={0x8, 0x15, 0x1}]}, 0x1c}}, 0x4850) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000440)='blkio.bfq.io_wait_time_recursive\x00', 0x0, 0x0) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000500)={'batadv_slave_0\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r6, &(0x7f0000000600)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x6c, r7, 0x82a, 0x70bd2a, 0x25dfdbff, {}, [@HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40080}, 0x800) r9 = accept$ax25(r6, &(0x7f0000000640)={{0x3, @default}, [@remote, @rose, @remote, @remote, @default, @null, @netrom, @rose]}, &(0x7f00000006c0)=0x48) ioctl$sock_ax25_SIOCDELRT(r9, 0x890c, &(0x7f0000000700)={@bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x4, [@null, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast]}) ioctl$sock_netrom_SIOCADDRT(r6, 0x890b, &(0x7f0000000780)={0x0, @default, @bpq0, 0x1, 'syz0\x00', @bcast, 0x0, 0x3, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}]}) syz_genetlink_get_family_id$nbd(&(0x7f0000000800), r0) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000880), r4) sendmsg$TIPC_NL_NET_GET(r6, &(0x7f00000009c0)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000980)={&(0x7f00000008c0)={0xb8, r10, 0x10, 0x70bd27, 0x25dfdbfc, {}, [@TIPC_NLA_SOCK={0x48, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xec}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7fffffff}]}]}, @TIPC_NLA_NET={0x5c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x5}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xffff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8e1}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}]}]}, 0xb8}, 0x1, 0x0, 0x0, 0x8004}, 0x4000000) syz_genetlink_get_family_id$fou(&(0x7f0000000a00), r6) ioctl$AUTOFS_IOC_EXPIRE(r4, 0x810c9365, &(0x7f0000000a40)={{0x3, 0x1}, 0x100, './file0\x00'}) r11 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000bc0), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000c00)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000c40)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000c80)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LIST_IFACE(r0, &(0x7f0000000d80)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000cc0)={0x74, r11, 0x800, 0x70bd29, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r12}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r13}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r14}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x74}, 0x1, 0x0, 0x0, 0x40040c1}, 0x20040840) sendmsg$NFC_CMD_SE_IO(0xffffffffffffffff, &(0x7f0000000f40)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000f00)={&(0x7f0000000e00)={0xf0, r5, 0x800, 0x70bd25, 0x25dfdbfc, {}, [@NFC_ATTR_SE_APDU={0xd9, 0x19, "89ee446b3f4266491a61d7c39dec34d64b503188f20d8d39791e87685a7ed3ab15592eb8d238d9d9562d1815ef707bf4e26e56088b5f6a9eec6e58a21887b8fded388a00653bc5e8868101c5a70fce1f57b5abb671e062a40838762ac8c6d990dcfae73b80f4cda6cd9bbee12e63d58e17de15362cfcfc5868017541c53492b94b3d44e66cbd1e734c29c0a3bcb0441a573667260c18411baab454518c546a1e85d47cda96d11c6821e05ae464c611a8033bde7218ab130d4a35ed960e57eaa00a9e35aaf4658d576e4dbbed8c075a0da30ac2f535"}]}, 0xf0}}, 0x40000) r15 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000fc0), r0) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r0, &(0x7f0000001100)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000010c0)={&(0x7f0000001040)={0x64, r15, 0x100, 0x70bd29, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r13}, @NL802154_ATTR_CCA_ED_LEVEL={0x8, 0xe, 0x2}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_CCA_ED_LEVEL={0x8, 0xe, 0x2}, @NL802154_ATTR_CCA_ED_LEVEL={0x8, 0xe, 0x4}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r14}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r14}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r13}, @NL802154_ATTR_CCA_ED_LEVEL={0x8, 0xe, 0x10}]}, 0x64}, 0x1, 0x0, 0x0, 0x8000}, 0x10) 4m32.709466699s ago: executing program 4 (id=4674): socket$inet6_sctp(0xa, 0x1, 0x84) (async) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f0000000100)=0x8001, 0x4) (async) setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f0000000100)=0x8001, 0x4) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FD_FRAMES(r1, 0x65, 0x5, &(0x7f0000000040)=0x1, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'lo\x00'}) sendmsg$can_raw(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000200)=@canfd={{0x3, 0x1, 0x1}, 0x19, 0x3, 0x0, 0x0, "240a86003584b924cac358fd4eb444c5fe6eee297e3a4c67d606757d568df33e2c5213673263b835cf2ba3a79fc2bf9b84364474135f7c9d64abb3c843d4d8be"}, 0x48}, 0x2, 0x0, 0x0, 0x24000884}, 0x30048009) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0xa, @empty, 0x9}, 0x1c) socket$inet6_sctp(0xa, 0x1, 0x84) (async) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2a, &(0x7f0000000080)={0x20, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x1, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x4e23, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}}}}, 0x108) close(0x3) (async) close(0x3) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0041, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r4, &(0x7f0000000080)=ANY=[], 0xfdef) socket$inet_sctp(0x2, 0x5, 0x84) syz_init_net_socket$ax25(0x3, 0x5, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2000000, 0x11, r2, 0x3d10b000) close(0x4) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000100)={0x0, @in={{0x2, 0x4e24, @rand_addr=0x64010101}}, 0x3, 0x6}, 0x0) (async) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000100)={0x0, @in={{0x2, 0x4e24, @rand_addr=0x64010101}}, 0x3, 0x6}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r5, 0x0, 0x32600) sendmmsg$inet6(r0, &(0x7f0000000480)=[{{&(0x7f0000000040)={0xa, 0x4e23, 0xb, @loopback, 0x1}, 0x1c, &(0x7f0000000380)=[{&(0x7f0000000140)='2', 0x1}], 0x1}}], 0x1, 0x8000) (async) sendmmsg$inet6(r0, &(0x7f0000000480)=[{{&(0x7f0000000040)={0xa, 0x4e23, 0xb, @loopback, 0x1}, 0x1c, &(0x7f0000000380)=[{&(0x7f0000000140)='2', 0x1}], 0x1}}], 0x1, 0x8000) socket$nl_crypto(0x10, 0x3, 0x15) (async) r6 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r6, &(0x7f0000000880)={0x0, 0x0, 0x0}, 0x0) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r7, &(0x7f0000000140)={0xa, 0x4e23, 0x100002, @ipv4={'\x00', '\xff\xff', @empty}, 0x1e}, 0x1c) sendmmsg$inet6(r7, &(0x7f0000000680)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0xab, @loopback, 0x8}, 0x1c, &(0x7f0000000780)=[{&(0x7f0000000900)='2', 0x1}], 0x1}}], 0x1, 0x20000054) (async) sendmmsg$inet6(r7, &(0x7f0000000680)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0xab, @loopback, 0x8}, 0x1c, &(0x7f0000000780)=[{&(0x7f0000000900)='2', 0x1}], 0x1}}], 0x1, 0x20000054) bpf$MAP_CREATE(0x0, 0x0, 0x0) (async) bpf$MAP_CREATE(0x0, 0x0, 0x0) 4m32.397123973s ago: executing program 4 (id=4679): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) socket$inet6(0xa, 0x5, 0x0) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x4080) openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched_retired(r2, 0x0, 0x4000) bind$unix(0xffffffffffffffff, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x7, &(0x7f00000001c0)={&(0x7f0000000100)=@dellinkprop={0x4c, 0x6d, 0x2ec9b2c728e3c67, 0x70bd2b, 0x25dfdaff, {0x0, 0x0, 0x0, 0x0, 0x41001, 0x4b904}, [@IFLA_PROP_LIST={0x18, 0x34, 0x0, 0x1, [{0x14, 0x35, 'veth1_to_bond\x00'}]}, @IFLA_IFNAME={0x14, 0x3, 'veth1_to_bond\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000014}, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000140)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x50) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@setlink={0x2c, 0x13, 0x1, 0x70bd29, 0x25dfdbf8, {0x0, 0x0, 0x0, r1, 0x3007, 0x409}, [@IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8804) 4m32.213820785s ago: executing program 4 (id=4680): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000040)={0x0, 0x0, "d607f8f9951e76c13f64323723e7eecdf40c363423eb3d259266ec9c37865c6c1a4640ce1b22bb3327ef4f001d34c09f39c3539e4f8d3ee0878ae95bc7f52363c468b257ff3e24852548deb01efd54f11ed2c41d078b9cf1fc8f72566153c97e4af37017ea6b16b694bb4a6e4606c3fb19d1d2bd3c8c4e97da2213f9d5c3b90400000000000000c279f03558083906666827d61dcc3a633bffff250b5a293e3877adc1660edbc9a0307a25720a170e7f5670e419dc44febf7ddc73fd4a5a0b6c28665f7f46c7084e17c809268103a2584ab40a68e528329d97afc3612e325c1eb4a3ab2e156a97444800", "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"}) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0xc, &(0x7f0000000040)=0x8, 0x4) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="380000001a0001000000000000000a008020"], 0x38}}, 0x0) shutdown(r0, 0x0) unshare(0x22020400) bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000003c0)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e21, @private=0xa010101}]}, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000004c0)=0x8) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f0000000100)={r4, 0xffff}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000040)={r4, 0x10, &(0x7f0000000080)=[@in6={0xa, 0x4e21, 0x40, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4}]}, &(0x7f0000000440)=0xfffffe82) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000280)={r5, 0x40}, 0x8) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="08000000040000000400000006"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB="1809000000000000000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7030000070000008500000021000000b70000000000000095"], &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 4m32.05699136s ago: executing program 4 (id=4684): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x50, 0x2, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x6}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x8800}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x60, 0x9, 0x6, 0x3, 0x0, 0x0, {0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x38, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_PROTO={0x5, 0x7, 0xff}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010101}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4080}, 0x48810) recvmsg(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f000000c080)=[{&(0x7f000000acc0)=""/4076, 0xfec}, {&(0x7f000000bec0)=""/21, 0x15}], 0x2}, 0x20) unshare(0x6a040000) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)=ANY=[@ANYBLOB="0213f803030000002cbd7000fddbdf250100", @ANYRES64=r3], 0x18}}, 0x2080) 4m16.929495797s ago: executing program 32 (id=4684): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x50, 0x2, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x6}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x8800}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x60, 0x9, 0x6, 0x3, 0x0, 0x0, {0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x38, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_PROTO={0x5, 0x7, 0xff}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010101}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4080}, 0x48810) recvmsg(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f000000c080)=[{&(0x7f000000acc0)=""/4076, 0xfec}, {&(0x7f000000bec0)=""/21, 0x15}], 0x2}, 0x20) unshare(0x6a040000) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)=ANY=[@ANYBLOB="0213f803030000002cbd7000fddbdf250100", @ANYRES64=r3], 0x18}}, 0x2080) 5.836531782s ago: executing program 2 (id=7085): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = accept4$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, &(0x7f0000000040)=0x10, 0x80800) (async) r2 = socket$inet_sctp(0x2, 0x4, 0x84) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f0000000080)=0x8d, 0x4) (async) getsockopt(0xffffffffffffffff, 0x5, 0x5, &(0x7f00000000c0)=""/54, &(0x7f0000000100)=0x36) (async) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000140)={0xa, 0x4e22, 0xd, @mcast1, 0x6}, 0x1c) (async) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) (async) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000000180)={0x0, 0xb6f1}, &(0x7f00000001c0)=0x8) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r4, 0x84, 0x70, &(0x7f0000000200)={r5, @in={{0x2, 0x4e24, @local}}, [0x4, 0x3, 0x0, 0x0, 0x2, 0x6, 0x3, 0xff, 0x1, 0x2, 0x6d45557e, 0xf6, 0x5, 0x7, 0x101]}, &(0x7f0000000300)=0x100) (async) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r1, 0x110, 0x4, &(0x7f0000000340)=0x1, 0x4) (async) setsockopt$nfc_llcp_NFC_LLCP_MIUX(0xffffffffffffffff, 0x118, 0x1, &(0x7f0000000380)=0x1f2, 0x4) syz_emit_ethernet(0x1bb, &(0x7f00000003c0)={@multicast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @val={@val={0x88a8, 0x7, 0x0, 0x2}, {0x8100, 0x3, 0x0, 0x3}}, {@ipv4={0x800, @udp={{0x45, 0x4, 0x0, 0x1c, 0x1a5, 0x67, 0x0, 0x7, 0x11, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, {[@noop, @timestamp_prespec={0x44, 0x4c, 0x34, 0x3, 0x4, [{@multicast1, 0x1}, {@multicast2, 0x119fb1f}, {@multicast1, 0x5}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x9}, {@private=0xa010102, 0x3ab}, {@rand_addr=0x64010101, 0x1a8}, {@local, 0x5}, {@broadcast, 0x4}, {@dev={0xac, 0x14, 0x14, 0x39}, 0x3}]}, @noop, @timestamp_addr={0x44, 0x4c, 0x9a, 0x1, 0xf, [{@broadcast, 0x5}, {@loopback, 0x800}, {@rand_addr=0x64010102, 0x25d}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xfffffff9}, {@rand_addr=0x64010101, 0x9}, {@broadcast, 0x2}, {@remote, 0x6}, {@broadcast, 0x1}, {@multicast1, 0x6}]}, @timestamp={0x44, 0x20, 0xc3, 0x0, 0x6, [0x1000, 0x7ff, 0x7, 0x10, 0x87, 0x0, 0x1ee]}, @cipso={0x86, 0x34, 0x0, [{0x1, 0xa, "eba3e5c8dd238b0d"}, {0x2, 0xe, "d4632a8b4a62a58f0d6e17a2"}, {0x0, 0x10, "cbc6bd31d1c5a2ace05b54700ee2"}, {0x5, 0x6, "20e08e52"}]}, @generic={0x82, 0x10, "04e8e5227580021da88822b04725"}]}}, {0x4e21, 0x4e22, 0x91, 0x0, @opaque="0c8a32a51b9367f97650afa3362a81e7f745432b175ff962e1a5963be96b83013e8bfd29c260bcb742d00cd5b727a8cba286ca870c966f58cd19d1ea6bea0ea37705bed40d62a93a82615710bacdcf757bf89c28e1dc50506f5e3d298245fdda481b6286cdd6c6850f1e94b0491d410ed4b1e5c259a67b9df09fc456b421ec07542a3df7afd57a9ddb"}}}}}, &(0x7f0000000580)={0x0, 0x2, [0xd5b, 0x859, 0xbae, 0x987]}) (async) bind$alg(r3, &(0x7f00000005c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd128\x00'}, 0x58) getsockopt$CAN_RAW_LOOPBACK(r4, 0x65, 0x3, &(0x7f0000000640), &(0x7f0000000680)=0x4) (async) r7 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$PPPIOCGFLAGS(r7, 0x8004745a, &(0x7f00000006c0)) (async) setsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000700)=@int=0x5, 0x4) (async) socket$kcm(0x29, 0x5, 0x0) (async) r8 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000740)={0x100, 0xa, 0x8, 0x10000, 0xfffffff9}) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000d00)={'syztnl1\x00', &(0x7f0000000c80)={'syztnl2\x00', 0x0, 0x29, 0x2, 0xf8, 0x0, 0x20, @private0={0xfc, 0x0, '\x00', 0x1}, @loopback, 0x7800, 0x8, 0xff, 0x6}}) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000dc0)={'ip6gre0\x00', &(0x7f0000000d40)={'ip6_vti0\x00', 0x0, 0x0, 0x4, 0x0, 0x1c1, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast2, 0x40, 0x80, 0x9, 0x81}}) (async) getsockopt$inet_mreqn(r8, 0x0, 0x23, &(0x7f0000002140)={@rand_addr, @broadcast, 0x0}, &(0x7f0000002180)=0xc) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000002d80)={'syztnl2\x00', &(0x7f0000002d00)={'syztnl2\x00', 0x0, 0x29, 0x81, 0xe, 0x300, 0x32, @local, @mcast1, 0x40, 0x20, 0x598, 0x9}}) sendmmsg$inet(r1, &(0x7f0000002e40)=[{{&(0x7f0000000780)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000ac0)=[{&(0x7f00000007c0)="8d92dcf60cb15ea2c457317a46294cbecb1e03cd6c541a9c7f49290caebe1c6c2fc7690ae87c6f3ed7dcb4df80957d6fe40161c18313eb4100fb1204f7ee5698cc7d6608a7c45f1e719fbfc054be106419f64c56420fd0415d78159bb1051e7550f325dc4a9fab0e7f10466df11055531f770b1e3795b0c1800524936aa21478c51ba4f7912090e1d9ab29c8a0afc9ee21a19794f5aaac0cdcae64b7562ae2e523988dd1ddc731d562f9fbc7b51bbe57cc786105c68931113e8c365aa026", 0xbe}, {&(0x7f0000000880)="0c810eac979e05e4897e40d8d95242268935e02cf3a01f126ad2e102af676b7c5159fa9eabf3740f737ba7d8c269b5aeba4e94ae63e50c6316ae71739ebd0585c81be6592cb292b2b27685214a95e6d921f9d56c5c6001d8efd818718b6d78d62a1765af12eb5686ebcd2a4a39bb462f8f83204cb98845f5fe857f82076005", 0x7f}, {&(0x7f0000000900)="ba8f9de5d6adeb09b67cfdad2aa52f26a18b091b6fd83e6f343b4c5a3846f5469cc5a14dfac4a376efe4cd67a44227b9abec69345c589c515542a2f617acc6f2a80ed65a0676a1f12ce794e00b279b9641d21265ccbc257c88f6bff4297d17d87a32344d91eeafa19a008fa63069bc60", 0x70}, {&(0x7f0000000980)="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", 0xfd}, {&(0x7f0000000a80)="75ab0a", 0x3}], 0x5, &(0x7f0000000b40)=[@ip_tos_int={{0x14, 0x0, 0x1, 0xa}}, @ip_tos_u8={{0x11}}, @ip_tos_u8={{0x11}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xbd2}}], 0x60}}, {{&(0x7f0000000bc0)={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000c40)=[{&(0x7f0000000c00)="d57d74ae314740efac112619f79ebd", 0xf}], 0x1, &(0x7f0000000e00)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x3}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r9, @private=0xa010101, @loopback}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x6}}, @ip_ttl={{0x14}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r10, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010100}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x6}}, @ip_ttl={{0x14, 0x0, 0x2, 0x7fffffff}}, @ip_retopts={{0x50, 0x0, 0x7, {[@generic={0x7, 0x12, "6e2b0def69698eb47f0a90864182ae1d"}, @rr={0x7, 0x7, 0x74, [@multicast1]}, @timestamp_addr={0x44, 0x1c, 0xe4, 0x1, 0x4, [{@multicast2, 0xfffffffa}, {@loopback, 0xcd}, {@multicast2, 0x6}]}, @generic={0x7, 0x9, "6a5f9e5ded665f"}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x3a}}], 0x120}}, {{0x0, 0x0, &(0x7f0000001f40)=[{&(0x7f0000000f40)="11c01c6db98c7dc31927dd0c78bdc4e489615cc48bbc55fe66a208e7ec161d81e73bac0b57b15bb13ba0305f814783422d5672ed68bf15b0a22fa443b72e9d7d3f6329039adcbc49d23ab50df2358b624755a1eee768fb80e2abbb5853f64e33ee92bb8985c6dcbf85dcb4228f531b5d5f5087d85433033f1334d7ca61bba8c96e45d55adfa203255401e1821af3026712cd900daa28c895b4c7195813faa44127fea5a1305b9d30f3508063e1bbc61b70606d854d83235006eb582a2626496bf2359d9a48bd33c911525bffac5210b5abba7f173dd3ae5a6e9fe9a3f330a5386da11002a809da58e184c4d1f40809a10ba924bc5a506a627b2d2f66405e4c62b00f630684b48de2802da5603a632b2ee852afc87edfa67462d6ad8aa8f164dfae11d799c773eb0e62faa2ff05b39697a85646fc0554c3548366d92340b1a5589d5acca1db1f962d88738b4bb93ac80f9c64e4be2b56cc5225ef44a86472edceacecde5421100d7c5adda5b3f5a93635abbf462864c5dc0a853640dc5eadae9cc79209eee1af1483d37f6e50803e1662389c67e90a823860dbac9271350677d20634f8d1d9ab0a18046339df344abf5c513ef8030b77c4c320c0cedc138358d0d9fd5f46cf131178dace026bcbf6eb8f7632588462b0900f784083a2204d5b258f5bdc9cb97c3eb1c0d6d3a67bf169f4b861d131096d51f8361c09d88cd76cee3ca63695059249cd45e9593d56a9c7db162f19f48cc5373b0079a8c79b849400dcb9895d68b983d8437bc66784d55abb9c119bdc7cfbc5d629ac699fbf5d79f5ee11904aca780ad34c55444383de0f92bffda9261c36e81dc313307ac8b6dcd9cfb9d29e4aa819e57a03fcbc652857763008b16910760f741f62c591c9132a1d7057cb9ddac07618aab695c224e2efdcf33a7f71aef65fb6b378c3257e1ebc56c562a001c6c6cc0a9a91b984a6c168bf27a823e03ad42cedc4bfbb8dd5837daeef0dc77ec9e7364a9fd5e35e2f2fe0b72060d5b37ad25225adb199642774c05ad54c8c372766d6e4105ac39e9523b56ef3206987c48112f278da2ee6a01f3290f25e03018ca69d4548b77feb9353f3dd4faa2b841829e350b89d147f639f14ba10b4ca61b1bf8f488e5c78541aab3940bb5bd0c7311614f2782d1fba97290dc75dad1344e65753a75bed7d5ea8c8fe859e13ceeb9b34db86017cbc84a2cf40bfa222042edaa918694b69746bdef3e5c52b7e81517ef11d7cbb278da4aeca07058807a278dcfc85716ec161ca4460aad273b654d1f19d14f97f83dad673ca3b8d37c0db5b914524e72a3ec47d60462d59bbaa20cc589219f1fade391df6938f15ab06fc44f1475086cb6973b1360bb8286e35352c43a6f2bc80e0b2420cddcba74a2a4fb6628f5626a41b011aa33ed7f9f73c3596ba5fc6b190a2ccf8a40df5bba3ebf14232cf991756b2b96331607b84cfeb610e795069be061793936eeb24ccdaaef1fb972aa1be1fbb09e0764f2f8bec68382c1242ce088912ff99a176d0c99b97f8894470c8d4c84bd39aab011ec6282fde1db1384f8ac364c5093515b73b2cd5a8d37ee501206f5bb9122e6aaa57efbb1690f312e519e2f3310fef73f4c27eb5dcea0a02ca60f7828f117a0886a41623e41f74a2d3ae1ed8612127be5699e404011e49fc71614fc3c75db5835dfa8be0e6f7917962e8fb5ab98c343c20fd128d496b75727794f5f79b9f454d0abf1d5c6f0dbb01bb70e990fb3dc46128297f39d210ecb9bf9c7316a2d624fbbabfe2c99cfeadc2450a9e684080385f949c5c973efb5d876a60424a2772b90dcc1d64c6cc2c165ebc5ed7123f8fe7ae0f6b91976a2bf6b09b0993e975c2c24ea3452daf626cceea4f4f6fb920315437a904d779a05f92e826df634cb094bc56e5c3e9041fbd0a576241aff73274badd9210242b306ac34e7d98414350585d28f206e5575ac1fc6136babe84db1db14324bb0cb91cc850835a74755b474cbb29b3af1d4e7c0e001ef4428e173c263b87d0e4512a67ca76c8492e9c9b360aea2644f5acb2ef9d52248273de0b47692df642ff1c8f0ec1a1aae3ae5170c6977f19014c7b93dec75d92ee32bb829b496a4d5292c7bfd54c0a40732a324b5a409e6f349ce0d30ac4ad01b33e204dec16a06089f17fbd252d43d2aa704862e5a1c766b850477c63968d7779653f7c681d0649227823610bbe7367e587c84bc3769aa0d67da0c7c3add1e86d1bea452b81a08ef6ed6f7d66c5fb2510f46a71d3c36f2b30a0410d0f5bbf599ab7812f4555a2b21289afdb47518ca46eb9f3695b63d4366261fc863aa9bb2d0c83afd5d6bf4481f5ccb5d653f1eb9e1f5576c764526ce1ce112345e62f0a1f8ce48674f5e9c28bf24f4716d8c07ec9f3bd8d61b2e728594ef91330471902c6520d9361a56b1fa16170ca55866d825444f2ce971d76d4d74d32ba332002d487c3c6a1837fb50a74db8001587de9c927f3e6b44a931552f1f269b6abde49eeddef9102936c82fef40819a0e1f153c01f620201e7aaa199fd5a15d266b5b6a7a6baa6ca02ef19dde863cadd90e8d908040b6e5cdb1cae6b100840d4926ec7bf2fd7ce17c38888d8c3c956b673d7b0679085e0318c1b507d5b4dd8b70b7b1388412faf5cabf20c2304c88c387f096de229b9dd02a9a2ff626fcf77507c075db0490245cb33f84311e3a1f3f966b130595636a06c2597990ee7c6237b174221dc3aed8f0f97f8b88916e5a68bc4a4791731fef0313709b240a84fdc5466d3e217e10aa2b5bfd56cc5bb6a7324449a0a687f5e9451e3ba029411a747c8251683cfb80f0276a9b5cfb9f99359ecd7fc71862efc3821e9cf3bdfbe23f9cf7d667e08be6981fdf171ce9d23d544931e755511380b8b2c389d57a843e9b4cc907e44784392400e4951d897dcfc76a5e12857608a550b1691996f32df34df5dbc57456bf637c7f0f72586fbbea2d000a9de78073259091a720427f70d5fa92ac13885b11bcfa52e1ea3bcb0074dcd96dc38bfe632b17812424cba72db540f099c1597e55c8ff9596ac7a84885e7f2d85b3a7bc595d1ca908faa93e3e86041bbbc148318c77120e598a7382704d435a0e2dd3e46ed2e5801e25a68e4bab726b49b1f64d2b2e98020768cab645331ffb79bb76086859afe0c1022aaa2271d66f95eee553775030e6928a3fe848add5d1e1b160222ef0e85cadafc21b0880ab79ed3060790131383ac17d392c6d10d6a0fa73ee448fb7cf7e3afd99a28eb1ce974db37781b64459fedd2a4bcf80ab3b40a52fe0198bd3561d82bbf25afe50fb7aac5e4fcde2350f78f9646a4e30e603537dba6216d5fdcec12840c7777ee27597bdff3cd56f7c35c9d86f4031b0026008b1c15f8a5141ed08dd9c03dba0a1c1f344b92df65a0d97c7a015c2aa2d5a632a0f1751e9bf1caebd4751832b951c5bc854722faaa9c64e98e19178256ac3f17b5936d7b149da7a3ad01e9249375dd8b411bf5657f769c8b04f3ee7e6cad46efa6bd08028e8c8feb29c276ef1b33ca817cbff968a989cb66310453348e431b16cdab8e48ac6e15703301c1b1e64aad5975613df23d107f1d1cc3938538962e957b434c1e398f0344bab5c9133a16ad61d0e28955c5529e31b7b91b9e55925e412e0fe59ff879f99683a8d439cea0517bd920d6ceb9a8bfab0b8dfa781e433ffc8ea6376b2bdb5c72e05fd1266206072fb39e5aaedfd7e0dadd8353aa9b4d32bb77f13405056183f0943ade9d4605b5f2900a608d3c37542c19dfb15819b681c2015ca3f36abbacf00d13708f0ad6b404eef737e114d3b8bbe2f9fc14f15c22c56664bf2a2c04a67e5b93400f8fb65669d8ed181e97e343d6c251be992ce043746779dadc9830eeafcd51ad615ac1bd4f8cbb54ee5e1d85e956f06bbf740326a3ddb73abefd7a545cf5db97371cee85d6d3e12ea70f1e8ffb09da39e9b6bb804d3b529f84df6b698000772b783fefbde3319aa81fd0221023bb47612e676b1665fd884310db6050aa42da63bec672f9589f1c651d14fb8763bf26a759c3acfd6f96f023f9bdc82d8a8607afab0029fadecf94aec87f3e5e0889b4f198f7707116d6f183a2aa5ccec489b71e7b95b737a796ae694f694b0171c239f7d6a7f9b9bf458e0bf94a71992d57d904613d296d2c87e6588217bab23b8654b8539d6b0cece09519a540f1bfca3fef71730218b59da459321622f060430550965c0fb6b7e185ede5bd32b5b4d0af828e78a4490077bffa59407c71ac68b0297c4f3600f35d4101d9f0df29085a5f6e23241139bfacea00b1e45b6264e3760c5eeee45b063a6a405d4345b7c23dfdf2ffcc5f9346c16931b81efa7cf76d73eff6982586df63a1399d36ab5f0e3ae631367c6232ed9324f6f0ec99a7c682af960ef102e288c6032e64118c2a6cbb6480d78da3700572d1d3e360093ce54a4d198de7422fbf75221bb2e757828318bd53c82cafa5d141f9604648f4498d867da556730df4f865b67c4e61c962e284199772c677f97492df1b5dc4a10a1da4bb525123a47d25fcd3be52845d732c939a587a1a5aa49abf8a3a43f97c21cb9d4e929a0cc134d32c8ed95e3778a5e1f57ee3eddc61c4a847ebe67a22f587e1ceaf60dba82e260b01d363edc3fb2861b97c21b88726eb05e25579e2eec397e4eb535b83148033ff2510aa2adee901e1bf76b61beea53ac5de27825ef426888d848ebb8c2bada207ae3b440d504ee92bc4bf21505059e2d66b1ff527fb533049652b51f1aa7f88d5ca4a5eb4ee67ee03bb5e47cd2be087b95ba832d6742f1b2575969e6a8d4824be41c57058c3cb72bde6c27991cdd7ff12f010ca3a820a68a63e601f812f98c60aceca3c7022a945f4cf60e1631ce5074d98811b99635d51c6a1aac0f0357274680b8302151a8ccf94a3ac6afe524d9e5bf4908187d1c2bb7bb6478cf1718acbbb71b10ddcee554be555546c0e2fc4f8dc6adbf828c8837917a32e76ba95d61a83edd6f7e0c5938eb538a7b4c118d19c5293e82ce5047eae63e80d357555f233d7e5776e1e22e0836224dbc5cf852d35d0a37f42c04dce4945e6100c132ba45c1c4bcc0d4091a9da583c071c333074ad19c7a9958589c2fb52dcee3b7187514c40186cf9e607255c8ba8d34e7602e43f34bfcafb430f51cbd17ac8bc36b187e6c2239b05751b2bf1582267956bc9218fe627727d8e523fc2e031d5b811b654b663b32aad01e6e219a28d6f969be36185592fc5bb290ac96fc7a3666ed365ff6ecd50c7e62d258dc90c2a22824e94a677e739df66621e57721ae2bc395240810c147d104368de5445d339090fb8a0175c0db4d1f856d137e2d163faaadf1c24bc5d92e6295af22b65fd303ba03c318e4aad630933bb82cfb033708bf8d76696f69925523ab04277aa41fe418750cffa8df3621fbb689b43ac20b0b775d190ba01625f7ddd7a38f3af3ec3cafde874ef4ca40732462f36198aa8089de2c4625780afed2b965881b224b4cefea6c29872562f96914fe8aa9e0948de045763f635e365456af5d92d10328b4731e4aadbec4cc5eaa6fafa9ca3b876e6ddf4c1186c293e216b80cedd3b6b879f5226086a992a2182a952a955172b7ecddf61411b6c3650a38e79a991f8cd2b26eb339ab4edb8c975839d5a5d41b33fa2c98c1097b964b9acaa37292e911558dc5b4d07293f94fd24484bc67347fa8334588b3f5067222bd7f1421aff162bb231445ec7c5237155dfae808db743f107a7f12cd6aea6f75630", 0x1000}], 0x1, &(0x7f0000001f80)=[@ip_retopts={{0x54, 0x0, 0x7, {[@lsrr={0x83, 0x7, 0xc3, [@empty]}, @noop, @end, @rr={0x7, 0xf, 0x4e, [@private=0xa010100, @rand_addr=0x64010100, @local]}, @end, @end, @rr={0x7, 0xf, 0xbf, [@loopback, @multicast1, @private=0xa010101]}, @timestamp={0x44, 0x18, 0x3c, 0x0, 0x2, [0x6, 0x8, 0x5, 0x7f, 0x2]}]}}}], 0x58}}, {{0x0, 0x0, &(0x7f0000002100)=[{&(0x7f0000002000)="0687e4882a43a87655199b54440f4f38089891f8e68ca376fcf47d03112535c586f1e7b6f00a90d88d4875db", 0x2c}, {&(0x7f0000002040)="b7da428e7c9059ceb1a2d4521c5563255ba1f61a9fd289fb5dca47f3e221e5219bb0db657bf9b8864f9ad5a738345631279f8c2c2a388a69f171462e956d045be0a34828d24931a88ce988f3caf46fa0d6c051f0921b4ce46f", 0x59}, {&(0x7f00000020c0)="a018c3c633f1c21cc6dba61a81501c292a3fc07d268d313597", 0x19}], 0x3, &(0x7f00000021c0)=[@ip_retopts={{0x94, 0x0, 0x7, {[@cipso={0x86, 0x46, 0x3, [{0x1, 0x7, "cf9dc6cce0"}, {0x5, 0x12, "3b8e0e75b521093cd544afba95db74f8"}, {0x5, 0xc, "144d495443f742bfac5a"}, {0x2, 0xd, "e49a756497918e6604c202"}, {0x1, 0x6, "3db8ff9b"}, {0x0, 0x8, "2e1f049160c8"}]}, @lsrr={0x83, 0x1f, 0xfa, [@rand_addr=0x64010102, @loopback, @dev={0xac, 0x14, 0x14, 0x32}, @broadcast, @dev={0xac, 0x14, 0x14, 0x15}, @multicast2, @loopback]}, @ssrr={0x89, 0x1b, 0x23, [@loopback, @empty, @multicast1, @loopback, @remote, @loopback]}, @ra={0x94, 0x4, 0x1}]}}}, @ip_ttl={{0x14}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x3c}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x8}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x2}}, @ip_retopts={{0x48, 0x0, 0x7, {[@rr={0x7, 0xb, 0x11, [@private=0xa010100, @remote]}, @ra={0x94, 0x4, 0x1}, @timestamp_addr={0x44, 0x24, 0x83, 0x1, 0xe, [{@private=0xa010100, 0x2}, {@local, 0x40}, {@private=0xa010101, 0x101}, {@multicast2, 0xa}]}, @generic={0x0, 0x4, "5ae6"}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r11, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x8}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xdbe9}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast2, @local}}}], 0x1b0}}, {{0x0, 0x0, &(0x7f0000002540)=[{&(0x7f0000002380)="aa3f0bed2efccbbeaa68001541ac2253682cfc4772d6580edde4ebe174f26fc1f05b5e7225c90c8d2c1ae6a1d2c14f60bb1953276aeb8d7584502e69f9051e24ac860f78a08fa66e8b532276ef478466bde8dc35d906f29368ed190c59334384c4c02f13484c4d78e8b688ee531eefec5c02f88f78c991a283d44a50eba85cd3bdb8316c7cce4104b2f3380a0ffa8ee7db325c68625a62e23f72a78881a3682b1a0c6bfe196d0b6414f72ae9400142de10637c38ada958110178db0fe8e230d07a65786afb845412775e9c36c1dc6c", 0xcf}, {&(0x7f0000002480)="adf6f6fec48cb3780eeb2bde94806c7b614be94a960404a0a4be5386d9f1", 0x1e}, {&(0x7f00000024c0)="ece3f2742f85f63df521344d91e253536787181001e322ebcbeb6b74e3cc8c095ed4574e3270413963c47c3b30c91e4e0683481a08c972c05fdab441b755b5edeb0bf42ede567f2d6711e60f98b5ff1195e71646eee2d006a4b8abeab89a111d", 0x60}], 0x3, &(0x7f0000002580)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x9}}, @ip_ttl={{0x14, 0x0, 0x2, 0xa9}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x9}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x5}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xc}}], 0x78}}, {{&(0x7f0000002600)={0x2, 0x4e22, @multicast1}, 0x10, &(0x7f0000002980)=[{&(0x7f0000002640)="a875e99d6f07becc234a6c8105520951392d632f517db28d65f321736774d804cac9", 0x22}, {&(0x7f0000002680)="58d4cfe54d0256042467cec664db65b85d2abdff625299977ce701033ad39cd28d9fc1b0199f4a85dc8b414f916065bf4f24a44ed1c696b9c5b6d02bf35d447eadec5fdcac1ec34aba44f6432a232503c5fb6f60d29c293713a0abc11c22aabb6208f5983127ba4369768e86cb077422b9aa06f81fd63dcfca8f9145069a2e2027da1dfbce1ba9f615ed7a6766f0837d06cc59ff28b2cf194b0f807063cd6a6dbc93cf354a0a868fdbe4debed64b339cf90d04e61c7c7b95f8a6ff4b9ed2c53ed17004", 0xc3}, {&(0x7f0000002780)="5c934a9fbc594e6af8aeafa667083a9a1fb5ffaaaa62ae944995e66efb45ffca112025dddf8c93025e22c03527c62969912e8c6281f1c9d3d1baa59f287dad7888304f510dddd1bc9045b171e028", 0x4e}, {&(0x7f0000002800)="1bc5547a1713b1534d6ee619111d513ef69974767acccc761fa6d8f0ac597672073d0df7be1dd26417b2872fb3485fad72ec221e3286563f83f05474e17f1549de5626420fb136883afbefe4b061157a399a8fd9586a7433ab333e17dd7b62f735a9e1e1890b1f1aec8155e0c8d48c6126ed77858743ca26e19836c548da629b1672773863b2", 0x86}, {&(0x7f00000028c0)="1eab8bad8601a417bbabfb6363d7fdef63fa88f169989c68e32f4c65d6e74c17bfe5d9ef52905f48210205d3a2ec0536800bd4c947627e25b199a540a16973c120700641bc7c52756bed96b657dd72a01414d60d2b0e63c6203672c6a3daf140f3c7d9df7113222b40a90388f85d3c42aa2f1b5386d8962ba636c91fc7a2874bcb44ba0c87dd34d3", 0x88}], 0x5}}, {{0x0, 0x0, &(0x7f0000002cc0)=[{&(0x7f0000002a00)="dba8e12495c2835dc9adbb1dec63693b7ddd72fb3a18db7cc4118f4625214c24e1c940ed22d5bcc7224af0ece82f63199758c03ac1e3d6196e4525eda6eb16efe664b8ef4702fbacf7219c92142c0746c04bf5ef317dc5e7d3c1eb3172e970df691125a4b28e6b4527ddbda378e48748d4cef81272669dac565a68bb6387", 0x7e}, {&(0x7f0000002a80)="838d0b5e49b039b7b8676c17860d9260f85992ba1924dc05df71b6176c4b0a05c1c5ddf8c68f5f2ad7b2480b6ed10d2c109d06a2e4f15994122b010b3125e7798e7a6f2ff48b959d85eb5ef983c14a2f33e4492117b19e3fabfef54912d676ea4ef7adf65beda81bd23ff5a15abd9b0eb3affb42a1e26be1ca6290188abf5037f2334df5a7a693347dfe64e9961d11644aa3262360d3a482a68d48b1eec18cfcb3053924a4a9090827928110f8f307c981f1bd9a9a5dec167358", 0xba}, {&(0x7f0000002b40)="bfa9cb0938e953526af2dec3c03c00583e645ecc7eca0d9841f1466c98165fe0a226ed993ba148a8efcd24e1b9a94f444d8892f140d9ed123cdd3149fcef29cf240a392942d99287b07c027d9c786c9a1012faa9683d6c73c4e9d34792bfd78cb9b9c69f10360d1c105a85e7c0fbc13787388b5ba28db28428b64da15d3a8bd695b3a662d6e5e0057f07cb0c4b8eb30826ae06241a27f63098a35048814fc1d181b1ae29", 0xa4}, {&(0x7f0000002c00)="b9b41a826ef763cb305eee35d027e7ff86bb35ca1dd713988e60f41b19887842a520081c7a70a33282fe8170a7f8740a71f91cff2114b4bbc609bd267920b15232c39ac4b91954eb8bdf027fc48de4aa38c7d54ab22a1b796e3535b2f99c4544723089924c3c78955f2b0a740fc4457031873d45e0fdc3107dd61a0c3ff0138c90f50a9f02898479c81c1f04609476ba2324b4deb327decb9b692f52d2df62afa9d95e282236e41e8de9bc62f96404bd69a01f", 0xb3}], 0x4, &(0x7f0000002dc0)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x5}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x44}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r12, @broadcast, @remote}}}], 0x50}}], 0x7, 0x44851) setsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000003000)={r6, 0x1, 0xffffff01, 0x44}, 0x10) r13 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_MPATH(r13, &(0x7f0000003140)={&(0x7f0000003040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000003100)={&(0x7f0000003080)={0x44, 0x0, 0x800, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x4051) ioctl$NILFS_IOCTL_GET_SUSTAT(0xffffffffffffffff, 0x80306e85, &(0x7f0000003180)) 5.597816268s ago: executing program 2 (id=7088): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000009c0), r0) (async) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x60ae0}], 0x318, 0x0, 0xdb0, 0xf5ffffff}, 0x0) (async) sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0x18, &(0x7f00000000c0), 0x31}, 0x0) (async) close(0x3) (async) r3 = socket$netlink(0x10, 0x3, 0x0) (async) r4 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYBLOB], 0x3c}}, 0x0) (async) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async) r7 = accept4(r6, 0x0, 0x0, 0x800) sendmmsg$alg(r7, &(0x7f0000000340)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x44844) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) (async) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c00000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800900010076657468000000000400028008000a00", @ANYRES32=r5], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) (async) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e00000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r9}, 0xc) (async) r10 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="0209fa000400080000007000fedbdf250100180007ff00000100140057000000"], 0x20}}, 0x24000800) (async) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}}, 0x0) (async) connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) (async) r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r12, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) ioctl$TUNSETGROUP(r12, 0x400454ce, 0x0) 5.307271048s ago: executing program 2 (id=7092): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) sendfile(r0, r1, &(0x7f0000000280)=0x4fb, 0xe16d) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r2, 0x5}, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newtfilter={0x9c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r9, {0xffe0, 0xfff1}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x9, 0x400, 0x20000008, 0x6, 0x7}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}, @TCA_CHAIN={0x8, 0xb, 0x1000}, @TCA_CHAIN={0x8}, @TCA_RATE={0x6, 0x5, {0x1, 0x9}}]}, 0x9c}, 0x1, 0x0, 0x0, 0x20000010}, 0x4040) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000c00)=@newchain={0x2c, 0x64, 0x1, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, r9, {0xe, 0xb}, {}, {0x3, 0x3}}, [@TCA_CHAIN={0x8, 0xb, 0x8}]}, 0x2c}}, 0x0) 4.981358958s ago: executing program 2 (id=7096): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$igmp(0x2, 0x3, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), r2) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000180)) (async) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000180)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_GET(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000280)={0x20, r3, 0x1, 0x70bd27, 0x25dfdbff, {}, [{{0x8, 0x1, r4}, {0x4}}]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x200000c0) (async) sendmsg$TEAM_CMD_OPTIONS_GET(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000280)={0x20, r3, 0x1, 0x70bd27, 0x25dfdbff, {}, [{{0x8, 0x1, r4}, {0x4}}]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x200000c0) bind$netlink(r2, &(0x7f0000000080), 0xffffffffffffff2b) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000c00000009"], 0x50) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000c00000009"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x18, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280), &(0x7f0000000280), 0x800084, r5}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r6, 0x4) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000040)={0x1, 0x1, 0x5, 0x3, @vifc_lcl_addr=@empty, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) (async) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000040)={0x1, 0x1, 0x5, 0x3, @vifc_lcl_addr=@empty, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) 2.561674937s ago: executing program 0 (id=7122): sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x48, 0x0, 0x10, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x6}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x100}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x9}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x9}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x40081c4}, 0x44000) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100626f6e640000000018000280140008"], 0x48}}, 0x0) sendmmsg$inet(r0, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_STATS(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x14, 0x5, 0x1, 0x3, 0x0, 0x0, {0x8, 0x0, 0x5}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f0000000040)={'pim6reg1\x00', {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}}) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x48, 0x0, 0x10, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x6}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x100}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x9}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x9}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x40081c4}, 0x44000) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100626f6e640000000018000280140008"], 0x48}}, 0x0) (async) sendmmsg$inet(r0, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$IPCTNL_MSG_CT_GET_STATS(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x14, 0x5, 0x1, 0x3, 0x0, 0x0, {0x8, 0x0, 0x5}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x0) (async) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f0000000040)={'pim6reg1\x00', {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}}) (async) 2.457476619s ago: executing program 1 (id=7123): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0x2a}}, 0x1c) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x402, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000800)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000840)=0x14) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) (async) r3 = socket(0xa, 0x3, 0x3a) ioctl$sock_TIOCINQ(r3, 0x541b, &(0x7f0000000080)) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'macsec0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@getchain={0x24, 0x11, 0x839, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0x9, 0x6}, {0x6}, {0x2}}}, 0x24}}, 0x0) (async) write$tun(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="034886dd09032800050030000300600000001228290081e949b93897bc3b0000000000007d01ff020000000000000000000000000001"], 0xfdef) sendmmsg$inet6(r1, &(0x7f0000000700)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x3, @mcast2}, 0x1c, 0x0}}, {{&(0x7f0000000200)={0xa, 0x4e21, 0x7, @empty, 0x46}, 0x1c, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="140000"], 0x30}}], 0x2, 0x8c4) setsockopt$inet6_udp_int(r0, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="18080000090000004831672372a3701e00000010000000008819b51773dd47c081d3a0066de3dc2d25bd483649289eb2b3dea9e1770ed548f84cc487a24258ce5cf8453446de2c2d7dc12173"], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222}, 0x94) (async) socket$pppl2tp(0x18, 0x1, 0x1) r7 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) socket$kcm(0x2, 0xa, 0x2) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newtaction={0x64, 0x30, 0xb, 0x0, 0x0, {}, [{0x50, 0x1, [@m_ct={0x4c, 0x1, 0x0, 0x0, {{0x7}, {0x24, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}, @TCA_CT_ZONE={0x6, 0x4, 0x1ff}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) (async) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @random="97d3d7a95fed"}) write$tun(r7, &(0x7f0000000340)=ANY=[@ANYBLOB="0a000000bbbbbbbbbbbbaaaaaaaaaabb86dd6d002000001311ff00000000000000000000000000000000ff0200000003000000000000e9ffff004f194e"], 0x4b) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000ffff26bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0000000063180300480012800b000100697036746e6c00003800028008000100", @ANYRES32, @ANYBLOB="14000300200100000000000000000000000000010400130014000200fea84a"], 0x68}, 0x1, 0x0, 0x0, 0x14008005}, 0x20008090) (async) socket$kcm(0x21, 0x2, 0x2) (async) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) 2.045741125s ago: executing program 0 (id=7125): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="9feb01001800006cd043560f75000000000024d0e2471dc9f0000000240000000a000000080000000000000700000000000000000000000903000000080000000000000f0120000000000000000000005f00"], 0x0, 0x46}, 0x28) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x2}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETSNDBUF(r2, 0x400454d4, &(0x7f0000000380)=0x2) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x3, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc}, 0x94) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, 0x0, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast}) poll(&(0x7f0000000180)=[{r4, 0x40}], 0x1, 0x9) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x4001, 0x3, 0x390, 0x220, 0x700001b, 0x148, 0x220, 0x148, 0x2f8, 0x206, 0x240, 0x2f8, 0x240, 0x7fffffe, 0x0, {[{{@ip={@local, @rand_addr, 0x0, 0x0, 'veth1_macvtap\x00', 'bond_slave_1\x00', {0xff}, {}, 0x0, 0x1}, 0x1ea, 0x200, 0x220, 0x0, {0x390, 0x8f00}, [@common=@inet=@hashlimit2={{0x150}, {'ip6tnl0\x00', {0x5, 0x1ff, 0x1, 0x5, 0x1, 0x100, 0x1, 0x8, 0x20}, {0x8}}}, @common=@set={{0x40}, {{0x0, [0x5, 0x4, 0x7, 0x2, 0x1], 0x1, 0x6}}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0xb0, 0xd8, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x1, 0x6275dd3c01ecbf44, 0x2, 0x5, 0x2], 0x4, 0x2}}}]}, @common=@unspec=@NFQUEUE3={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000010000000000000100000a6c000000060a0b166787e89c2fc5eab50200000a4000048018000180080001006f7366000c000280080001400000000424000180090007000000737100000000140002800800024000000017080003400000000f0900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a"], 0x94}, 0x1, 0x0, 0x0, 0x850}, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0x20, &(0x7f0000000440)={&(0x7f00000002c0)=""/35, 0x23, 0x0, &(0x7f0000000400)=""/6, 0x6}}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1, 0x4, &(0x7f0000000700)=ANY=[@ANYRES32], &(0x7f0000000080)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000040)={r6, r7, 0x25, 0x2, @void}, 0x10) socketpair(0x1f, 0xa, 0x0, &(0x7f00000000c0)) sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x208000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x14, 0x0, 0x20, 0x70bd26, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0xc011}, 0x800) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r8, &(0x7f0000000140)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r8, 0x0) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r9, 0x84, 0x71, &(0x7f0000000180)={0x0, 0x7fff}, &(0x7f00000001c0)=0x8) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_BT_SNDMTU(r11, 0x112, 0xc, 0x0, &(0x7f0000000040)) r12 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$GTP_CMD_NEWPDP(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)={0x38, r12, 0x1, 0x3, 0x0, {}, [@GTPA_LINK={0x8}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_VERSION={0x8}, @GTPA_TID={0xc}]}, 0x38}}, 0x0) 1.908399522s ago: executing program 1 (id=7127): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@newtclass={0x24, 0x28, 0x4, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x9, 0xa}, {0x7, 0x9}, {0xb, 0xf}}}, 0x24}}, 0x80000) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=@newlink={0x54, 0x10, 0x401, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x38491}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_IFLAGS={0x6, 0x2, 0xa036}]}}}, @IFLA_IFNAME={0x14, 0x3, 'nicvf0\x00'}]}, 0x54}}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r2, 0x0) sendmsg$AUDIT_MAKE_EQUIV(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x28, 0x3f7, 0x200, 0x70bd2b, 0x25dfdbfb, {0x7, 0x7, './file0', './file0'}, ["", "", "", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x14}, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0xa}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELRULE={0x38, 0x8, 0xa, 0x3, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x5}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x8c}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) 1.806321484s ago: executing program 5 (id=7129): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x46, &(0x7f00000000c0)={@local, @random="7f0a00034011", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @time_exceeded={0xb, 0x2, 0x0, 0x12, 0x0, 0x2802, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, @loopback, @private}, "000088be00000000"}}}}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="2c020000", @ANYRES16=r4, @ANYBLOB="010000000000000000000100000008000700000000001400020077673000000000000000000000000000fc010880080100801400040002004e207f0000010000000000000000c40009801c000080060001000200000008000200ac141432050003000000000058000080060001000200000008000200640101020500030003000000060001000a00000014000200ff0200000000000000000000000000010500030003000000060001000200000008000200ac141481050003000300007218647c8781a39040021d4be87e73c100ff0100000000000000000000000000010500030000000000060001000a00000014000200fe8000000000000000000000000000bb0500030001000000240001000000000000000000000000000000000000000000000000000000000000000000060005"], 0x22c}, 0x1, 0x0, 0x0, 0xc811}, 0x40000) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3000004, 0x11, r5, 0x9040d000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000006000000000000000200008409010000040000000400000001000000000000000001000009000000003000002e"], &(0x7f0000000f40)=""/4079, 0x42, 0xfef, 0x8}, 0x28) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x8, 0x2) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) r7 = socket$rxrpc(0x21, 0x2, 0x2) accept4(r7, &(0x7f0000000200)=@caif=@util, &(0x7f0000000280)=0x80, 0x80800) sendmsg$IEEE802154_LLSEC_SETPARAMS(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002dbd7000fedbdf252500000005002a008000000008000200", @ANYRES32=r6, @ANYBLOB="050029000100c200"], 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x800) 1.725344067s ago: executing program 3 (id=7130): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000d001ae3d41040000000000000000950000000000340035f128d17fae2c9cc0d3ca9591b099db36f03c6f02a07e5e0f424fd27763e5f914cacbd27f2bbc"], &(0x7f0000000300)='GPL\x00'}, 0x80) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r1, r2, 0x25, 0x4, @val=@uprobe_multi={0x0, 0x0, 0x0, 0xff}}, 0x40) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630080fc00082c00db5b6861589bcfe8875a060300000023000000000000000000000000ac1414aa33"], 0xfdef) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000980)={0x6, 0x3, &(0x7f0000000500)=ANY=[@ANYRESHEX=0x0, @ANYRES16=r1, @ANYRES64=0x0, @ANYRESOCT=r3], &(0x7f0000000200)='syzkaller\x00', 0x800}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0x1, 0x0, &(0x7f0000000580)='%', 0x0, 0xd01, 0xbe02, 0x0, 0x0, 0x0, 0x0, 0x2, 0x31, 0x9}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r5, 0x84, 0xc, &(0x7f0000000280)=@assoc_value={0x0}, &(0x7f0000000880)=0x8) r7 = socket(0x35, 0x2, 0x0) sendmmsg$inet(r7, &(0x7f0000000c00)=[{{&(0x7f0000000140)={0x2, 0x0, @rand_addr=0x64010100}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000240)='P', 0x1}], 0x1}}, {{&(0x7f0000000180)={0x2, 0x4e20, @local}, 0x10, &(0x7f0000000080)=[{&(0x7f00000004c0)="89", 0x1}], 0x1}}], 0x2, 0x0) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r7, 0x84, 0x17, &(0x7f0000001140)=@sack_info={r6, 0xef, 0x6}, 0xc) r8 = socket(0x2, 0x80805, 0x0) getsockopt$bt_hci(r8, 0x84, 0x85, 0x0, 0x0) r9 = socket$kcm(0x10, 0x2, 0x0) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x3, 0xc, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000000}, 0x94) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r9, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0x5}}) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(0xffffffffffffffff, 0x4048587b, 0x0) ioctl$XFS_IOC_START_COMMIT(r10, 0x80585882, &(0x7f0000000340)) r11 = socket$kcm(0x10, 0x2, 0x0) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r12, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="50000000090601020000000000000000030000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0c00148008000140ac1414190c000280080001"], 0x50}, 0x1, 0x0, 0x0, 0xd24f4d5758661d46}, 0x4) sendmsg$kcm(r11, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb92e0a4831371400000069bd6efb2502eaf60d000300020400bf050005001206", 0x2e}], 0x1}, 0x48000) socket$igmp6(0xa, 0x3, 0x2) r13 = socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$NL80211_CMD_REQ_SET_REG(r13, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r14, @ANYBLOB="01002bbd7000fddbdf251b00000008009a0001000000", @ANYRES32=r13], 0x24}}, 0x40004) 1.724449557s ago: executing program 1 (id=7131): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x4, &(0x7f0000000380)=ANY=[@ANYRES16], &(0x7f0000000100)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40}, 0x94) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wg0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wg1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'veth1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) ioctl$sock_TIOCOUTQ(r1, 0x5411, &(0x7f0000000300)) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000280)=0x0, &(0x7f00000002c0)=0x4) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r1, &(0x7f0000000500)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000004c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="d8000000", @ANYRES16=r2, @ANYBLOB="000425bd7000fcdbdf25040000001400018008000100", @ANYRES32=r3, @ANYBLOB="08400102", @ANYRES32=r4, @ANYBLOB="700001801400020069705f7674693000000000000000000008000300000000000800030000000000140002007663616e30000000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r5, @ANYBLOB="08000100", @ANYRES32=r6, @ANYBLOB="08000100", @ANYRES32=r7, @ANYBLOB="140002006d6163766c616e300000000000000000400001801400020067656e6576653000000000000000000014000200626f6e645f736c6176655f3100000000140002006272696467655f736c6176655f310000"], 0xd8}, 0x1, 0x0, 0x0, 0x4008841}, 0xc0) 1.677252652s ago: executing program 5 (id=7132): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) getsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ip_vti0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x5}, @IFLA_BOND_PRIMARY={0x8, 0xb, r2}]}}}]}, 0x44}}, 0x0) 1.396039219s ago: executing program 5 (id=7133): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000480)={'vlan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000480)={'vlan1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x2c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x0, 0xc800}, [@IFLA_ADDRESS={0xa}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) close(r3) ioctl$SIOCSIFHWADDR(r3, 0x8b26, &(0x7f0000000080)={'wlan1\x00', @random="000000f900"}) sendmsg$OSF_MSG_ADD(r3, &(0x7f0000000c40)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000c00)={&(0x7f00000004c0)={0x710, 0x0, 0x5, 0x201, 0x0, 0x0, {0x5, 0x0, 0x2}, [{{0x254, 0x1, {{0x3, 0x5}, 0x3c, 0x1, 0xf800, 0x4, 0x20, 'syz1\x00', "3ee9a221cdc30284c72862d58ce99284b203c5df412def09888941010c14a0f0", "7e3cb03af237c37a97f20f3018d23622139b7ed7f7c773a5cd9c0f1baffa817b", [{0x4, 0xe8, {0x3, 0x3}}, {0x787, 0x8, {0x2, 0xb}}, {0x3, 0x8, {0x0, 0xfffff421}}, {0x1, 0x7, {0x2, 0x2}}, {0x2, 0x5, {0x3}}, {0x2, 0x8}, {0x7f, 0xffff, {0x0, 0x400}}, {0xc1ed, 0x6, {0x3, 0x8}}, {0xf801, 0x1, {0x2, 0x1}}, {0x3ff, 0x516a, {0x0, 0x1}}, {0x6, 0x5, {0x0, 0xe}}, {0x5, 0x1, {0x3, 0x5}}, {0x7, 0x1, {0x0, 0x200}}, {0x2, 0x7, {0x2, 0x81}}, {0x7f, 0x3, {0x1, 0xb}}, {0x9, 0x4, {0x2, 0x1}}, {0x4, 0x7, {0x0, 0x4}}, {0x8313, 0x9, {0x2, 0x4}}, {0xfffb, 0x0, {0x3, 0xffff}}, {0x12, 0x1000, {0x1, 0x1}}, {0x55, 0xb9, {0x2, 0x6}}, {0x8, 0x8, {0x1, 0xa55}}, {0x1ff, 0xff, {0x0, 0x1dc}}, {0x5, 0x14fc, {0x2, 0xd25}}, {0x7, 0x3, {0x0, 0x5}}, {0x6, 0xef1f, {0x1, 0x2}}, {0x8, 0xf, {0x2, 0x8001}}, {0x1, 0x3, {0x0, 0x5}}, {0x9, 0x99f4, {0x1}}, {0x1, 0x3, {0x3, 0x6}}, {0xb7, 0x9, {0x3, 0xffffffff}}, {0x100, 0xed4, {0x1, 0x4}}, {0x9, 0x9, {0x1, 0x100}}, {0x9, 0x1, {0x0, 0x3ff}}, {0xfff, 0x24, {0x1, 0x8000000}}, {0xc9, 0x200, {0x3, 0x3}}, {0x8, 0x222, {0x2, 0x6}}, {0x0, 0x5, {0x2, 0x5}}, {0x7ff, 0x0, {0x0, 0x7}}, {0x1, 0x60, {0x2, 0x7}}]}}}, {{0x254, 0x1, {{0x0, 0x10000}, 0x5, 0x8f, 0x8, 0x1, 0xa, 'syz0\x00', "261cd6301b21430a4f360a39cb03da9cafb1feb7fad65b658bc4337eb890a655", "63d32427af5dca8f130b33105aa702e58d2f8029391481f99fd44e0100d6c29d", [{0x9, 0x4, {0x2, 0x8}}, {0x1, 0x81, {0x2, 0x1}}, {0x81, 0x8, {0x3, 0x6}}, {0x1, 0xe5, {0x0, 0x9}}, {0x4, 0x0, {0x1, 0x5}}, {0xb221, 0x9, {0x3, 0xb1}}, {0x3, 0x8, {0x0, 0xffffffff}}, {0x1000, 0x4, {0x2, 0xfffffff7}}, {0x7, 0x0, {0x2, 0x1ff}}, {0x3, 0x4, {0x3, 0x7fffffff}}, {0x0, 0x2, {0x3, 0xffff}}, {0xfff, 0x3ff, {0x2, 0x3}}, {0x6, 0x8000, {0x3}}, {0x7f, 0x3, {0x3, 0x1}}, {0x3, 0x1, {0x0, 0xf}}, {0x7, 0x5e3, {0x1, 0x5}}, {0x5, 0x4, {0x0, 0x5}}, {0x101, 0x7, {0x0, 0x1}}, {0x8, 0x4, {0x3, 0xfffffffc}}, {0x5, 0x246, {0x0, 0x3}}, {0x5, 0x5, {0x2, 0x8001}}, {0xcb94, 0x8e, {0x2, 0x8}}, {0x5, 0xa0, {0x1, 0xffffffff}}, {0x401, 0x4, {0x2, 0x200}}, {0x6, 0xffff, {0x3, 0xf}}, {0x0, 0x0, {0x0, 0x4}}, {0x1, 0x2, {0x1, 0x9}}, {0x0, 0x3, {0x3, 0xffff}}, {0xd65b, 0x1, {0x0, 0x838}}, {0x3, 0x1, {0x0, 0xd9}}, {0x4, 0x100, {0x0, 0x2}}, {0x3, 0x8, {0x0, 0x5}}, {0x9a, 0x9, {0x0, 0x8}}, {0xfeff, 0x9, {0x2, 0x4}}, {0x800, 0x0, {0x1, 0x3}}, {0x8001, 0x6, {0x3, 0x2}}, {0x6, 0x5, {0x2, 0x10}}, {0x3, 0x5, {0x1, 0xffffff01}}, {0x4, 0x66a2, {0x0, 0x4}}, {0xfff9, 0x200, {0x2, 0xffff0aa8}}]}}}, {{0x254, 0x1, {{0x0, 0x8}, 0x4, 0xf8, 0x37, 0x5, 0x1d, 'syz1\x00', "941590b629f633a914ac36e75914574fa1ae6f06155ec4a90949cd4f2f25539d", "7d43273fa271b5f38a038a4783ccd32f1f4150500c2eb9f0134400151081503c", [{0xfff8, 0x4, {0x1, 0x80}}, {0xb41, 0x980, {0x2, 0xa}}, {0x40, 0x5, {0x2, 0x1000}}, {0x1, 0x4, {0x0, 0xa39}}, {0x40, 0xf, {0x2, 0x2}}, {0xfeff, 0x8001, {0x2}}, {0x18cb, 0x4a, {0x3, 0xffffffae}}, {0x8, 0x5, {0x2, 0x7}}, {0x2, 0x0, {0x0, 0x388d}}, {0x2, 0x100, {0x2, 0x6}}, {0x8ce, 0x1, {0x1}}, {0x2, 0x8, {0x3, 0x3}}, {0x6, 0x40, {0x1, 0x1ba}}, {0x5, 0x2, {0x2, 0x80000001}}, {0x9, 0x67f, {0x2, 0x9}}, {0x2, 0x1d, {0x0, 0xd04}}, {0xf2f4, 0x68b3, {0x1, 0xd5}}, {0xf9e, 0x374, {0x0, 0x8}}, {0x7, 0x37d, {0x1, 0x10000}}, {0x5, 0x1, {0x1, 0xf}}, {0x10, 0x6, {0x3, 0x1c0000}}, {0x1, 0x6, {0x2, 0x3}}, {0x673f, 0xe, {0x0, 0x5}}, {0x5, 0x4, {0x1, 0x2}}, {0x3, 0x1, {0x1, 0x5}}, {0x5, 0x101, {0x2, 0x3cf}}, {0x9, 0x9, {0x0, 0xffffffff}}, {0x100, 0x1, {0x3, 0x1}}, {0x4, 0x7f, {0x0, 0x6}}, {0x7, 0x0, {0x1, 0xad15}}, {0xff87, 0x6, {0x3, 0x1f}}, {0x7, 0x9, {0x0, 0x8}}, {0x400, 0x7, {0x0, 0x2}}, {0x1, 0x40, {0x2, 0x1}}, {0x6, 0xc, {0x1, 0x7}}, {0x7, 0x40, {0x2, 0x3}}, {0x80, 0x1, {0x3, 0x400}}, {0x2, 0x6, {0x1, 0x3}}, {0x800, 0x1, {0x0, 0xa3}}, {0x4, 0x7, {0x2, 0x6183}}]}}}]}, 0x710}, 0x1, 0x0, 0x0, 0x40001}, 0x8810) (async) sendmsg$OSF_MSG_ADD(r3, &(0x7f0000000c40)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000c00)={&(0x7f00000004c0)={0x710, 0x0, 0x5, 0x201, 0x0, 0x0, {0x5, 0x0, 0x2}, [{{0x254, 0x1, {{0x3, 0x5}, 0x3c, 0x1, 0xf800, 0x4, 0x20, 'syz1\x00', "3ee9a221cdc30284c72862d58ce99284b203c5df412def09888941010c14a0f0", "7e3cb03af237c37a97f20f3018d23622139b7ed7f7c773a5cd9c0f1baffa817b", [{0x4, 0xe8, {0x3, 0x3}}, {0x787, 0x8, {0x2, 0xb}}, {0x3, 0x8, {0x0, 0xfffff421}}, {0x1, 0x7, {0x2, 0x2}}, {0x2, 0x5, {0x3}}, {0x2, 0x8}, {0x7f, 0xffff, {0x0, 0x400}}, {0xc1ed, 0x6, {0x3, 0x8}}, {0xf801, 0x1, {0x2, 0x1}}, {0x3ff, 0x516a, {0x0, 0x1}}, {0x6, 0x5, {0x0, 0xe}}, {0x5, 0x1, {0x3, 0x5}}, {0x7, 0x1, {0x0, 0x200}}, {0x2, 0x7, {0x2, 0x81}}, {0x7f, 0x3, {0x1, 0xb}}, {0x9, 0x4, {0x2, 0x1}}, {0x4, 0x7, {0x0, 0x4}}, {0x8313, 0x9, {0x2, 0x4}}, {0xfffb, 0x0, {0x3, 0xffff}}, {0x12, 0x1000, {0x1, 0x1}}, {0x55, 0xb9, {0x2, 0x6}}, {0x8, 0x8, {0x1, 0xa55}}, {0x1ff, 0xff, {0x0, 0x1dc}}, {0x5, 0x14fc, {0x2, 0xd25}}, {0x7, 0x3, {0x0, 0x5}}, {0x6, 0xef1f, {0x1, 0x2}}, {0x8, 0xf, {0x2, 0x8001}}, {0x1, 0x3, {0x0, 0x5}}, {0x9, 0x99f4, {0x1}}, {0x1, 0x3, {0x3, 0x6}}, {0xb7, 0x9, {0x3, 0xffffffff}}, {0x100, 0xed4, {0x1, 0x4}}, {0x9, 0x9, {0x1, 0x100}}, {0x9, 0x1, {0x0, 0x3ff}}, {0xfff, 0x24, {0x1, 0x8000000}}, {0xc9, 0x200, {0x3, 0x3}}, {0x8, 0x222, {0x2, 0x6}}, {0x0, 0x5, {0x2, 0x5}}, {0x7ff, 0x0, {0x0, 0x7}}, {0x1, 0x60, {0x2, 0x7}}]}}}, {{0x254, 0x1, {{0x0, 0x10000}, 0x5, 0x8f, 0x8, 0x1, 0xa, 'syz0\x00', "261cd6301b21430a4f360a39cb03da9cafb1feb7fad65b658bc4337eb890a655", "63d32427af5dca8f130b33105aa702e58d2f8029391481f99fd44e0100d6c29d", [{0x9, 0x4, {0x2, 0x8}}, {0x1, 0x81, {0x2, 0x1}}, {0x81, 0x8, {0x3, 0x6}}, {0x1, 0xe5, {0x0, 0x9}}, {0x4, 0x0, {0x1, 0x5}}, {0xb221, 0x9, {0x3, 0xb1}}, {0x3, 0x8, {0x0, 0xffffffff}}, {0x1000, 0x4, {0x2, 0xfffffff7}}, {0x7, 0x0, {0x2, 0x1ff}}, {0x3, 0x4, {0x3, 0x7fffffff}}, {0x0, 0x2, {0x3, 0xffff}}, {0xfff, 0x3ff, {0x2, 0x3}}, {0x6, 0x8000, {0x3}}, {0x7f, 0x3, {0x3, 0x1}}, {0x3, 0x1, {0x0, 0xf}}, {0x7, 0x5e3, {0x1, 0x5}}, {0x5, 0x4, {0x0, 0x5}}, {0x101, 0x7, {0x0, 0x1}}, {0x8, 0x4, {0x3, 0xfffffffc}}, {0x5, 0x246, {0x0, 0x3}}, {0x5, 0x5, {0x2, 0x8001}}, {0xcb94, 0x8e, {0x2, 0x8}}, {0x5, 0xa0, {0x1, 0xffffffff}}, {0x401, 0x4, {0x2, 0x200}}, {0x6, 0xffff, {0x3, 0xf}}, {0x0, 0x0, {0x0, 0x4}}, {0x1, 0x2, {0x1, 0x9}}, {0x0, 0x3, {0x3, 0xffff}}, {0xd65b, 0x1, {0x0, 0x838}}, {0x3, 0x1, {0x0, 0xd9}}, {0x4, 0x100, {0x0, 0x2}}, {0x3, 0x8, {0x0, 0x5}}, {0x9a, 0x9, {0x0, 0x8}}, {0xfeff, 0x9, {0x2, 0x4}}, {0x800, 0x0, {0x1, 0x3}}, {0x8001, 0x6, {0x3, 0x2}}, {0x6, 0x5, {0x2, 0x10}}, {0x3, 0x5, {0x1, 0xffffff01}}, {0x4, 0x66a2, {0x0, 0x4}}, {0xfff9, 0x200, {0x2, 0xffff0aa8}}]}}}, {{0x254, 0x1, {{0x0, 0x8}, 0x4, 0xf8, 0x37, 0x5, 0x1d, 'syz1\x00', "941590b629f633a914ac36e75914574fa1ae6f06155ec4a90949cd4f2f25539d", "7d43273fa271b5f38a038a4783ccd32f1f4150500c2eb9f0134400151081503c", [{0xfff8, 0x4, {0x1, 0x80}}, {0xb41, 0x980, {0x2, 0xa}}, {0x40, 0x5, {0x2, 0x1000}}, {0x1, 0x4, {0x0, 0xa39}}, {0x40, 0xf, {0x2, 0x2}}, {0xfeff, 0x8001, {0x2}}, {0x18cb, 0x4a, {0x3, 0xffffffae}}, {0x8, 0x5, {0x2, 0x7}}, {0x2, 0x0, {0x0, 0x388d}}, {0x2, 0x100, {0x2, 0x6}}, {0x8ce, 0x1, {0x1}}, {0x2, 0x8, {0x3, 0x3}}, {0x6, 0x40, {0x1, 0x1ba}}, {0x5, 0x2, {0x2, 0x80000001}}, {0x9, 0x67f, {0x2, 0x9}}, {0x2, 0x1d, {0x0, 0xd04}}, {0xf2f4, 0x68b3, {0x1, 0xd5}}, {0xf9e, 0x374, {0x0, 0x8}}, {0x7, 0x37d, {0x1, 0x10000}}, {0x5, 0x1, {0x1, 0xf}}, {0x10, 0x6, {0x3, 0x1c0000}}, {0x1, 0x6, {0x2, 0x3}}, {0x673f, 0xe, {0x0, 0x5}}, {0x5, 0x4, {0x1, 0x2}}, {0x3, 0x1, {0x1, 0x5}}, {0x5, 0x101, {0x2, 0x3cf}}, {0x9, 0x9, {0x0, 0xffffffff}}, {0x100, 0x1, {0x3, 0x1}}, {0x4, 0x7f, {0x0, 0x6}}, {0x7, 0x0, {0x1, 0xad15}}, {0xff87, 0x6, {0x3, 0x1f}}, {0x7, 0x9, {0x0, 0x8}}, {0x400, 0x7, {0x0, 0x2}}, {0x1, 0x40, {0x2, 0x1}}, {0x6, 0xc, {0x1, 0x7}}, {0x7, 0x40, {0x2, 0x3}}, {0x80, 0x1, {0x3, 0x400}}, {0x2, 0x6, {0x1, 0x3}}, {0x800, 0x1, {0x0, 0xa3}}, {0x4, 0x7, {0x2, 0x6183}}]}}}]}, 0x710}, 0x1, 0x0, 0x0, 0x40001}, 0x8810) 1.321342433s ago: executing program 3 (id=7134): bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) syz_80211_inject_frame(&(0x7f0000000300), 0x0, 0x0) (async) r0 = socket(0x840000000002, 0x3, 0x100) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r0, &(0x7f0000005240), 0x4000095, 0x0) (async) bind$rds(r0, 0x0, 0x0) (async) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, [0x1, 0x2, 0xfffe, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe, 0x1000]}}}}]}, 0x88}, 0x1, 0x0, 0x0, 0x4040}, 0x20000000) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000001c0)={r3, @in6={{0xa, 0x4e22, 0xffff, @mcast1, 0x101}}, 0xd5, 0x6, 0x57f, 0x8000004, 0x21, 0x4001, 0x8}, &(0x7f0000000040)=0x9c) (async) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, &(0x7f0000000240)={r3, @in={{0x2, 0x4e22, @rand_addr=0x64010100}}}, 0x84) (async, rerun: 32) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x620000, 0x0) (rerun: 32) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000140)={'gretap0\x00', 0x100}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETSNDBUF(r4, 0x400454d4, &(0x7f0000000380)=0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast}) (async, rerun: 32) r6 = socket$pppoe(0x18, 0x1, 0x0) (rerun: 32) connect$pppoe(r6, &(0x7f0000000040)={0x18, 0x0, {0x4001, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x18}, 'ip6gre0\x00'}}, 0x1e) ioctl$sock_SIOCADDDLCI(r6, 0x80047437, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000037c0)={0x0, 0x0, 0x0}, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1e0000000100000001000000f8ffff", @ANYRES32, @ANYBLOB="02000000000000000000", @ANYRES32], 0x50) (async) syz_emit_ethernet(0x3e, &(0x7f0000000a00)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa0019b686dd606410a600080000fe800000000000f4ffffffffffffff1efe8000000000000000000000000000aa2b00000000"], 0x0) (async) sendto$inet(r0, &(0x7f00000003c0)="249524b26fd1621fffb191ff624e7c576b4f369a5cc92c6c3066843b8dc38302d59486e76fab4e36318b156a8306b3f6f38b68c6c760f09cb9a580ffa692d36320eefc00fcddc9b1823207ab2d02f4cb181890bdec443d791ded9f788baa27925e286eba1e2d89ec3a2cd8bf100926f8be1578ffe1cc2bef430f3695df78ba50dc019570b4e9a734e8d3be6d32d637b8bf7f01fedd305052524399e8a4a3baeeb1b80d2d8cc1a4a07f36deade12756add127242a1d32b3ff2b", 0xb9, 0x40, &(0x7f0000000480)={0x2, 0x4e24, @broadcast}, 0x10) (async) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000540), r1) sendmsg$TIPC_NL_BEARER_SET(r1, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000d40)={0x14, r7, 0x200, 0x70bd26, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0xd0}, 0x4010) (async) ioctl$sock_SIOCSPGRP(r0, 0x8902, 0x0) (async) ioctl$HCIINQUIRY(r0, 0x800448f0, 0x0) (async, rerun: 32) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000000)={{{@in=@private=0xa010100, @in=@loopback, 0x4e20, 0x401, 0x4e22, 0x0, 0xa, 0xa0, 0x1a0}, {0x4, 0x7, 0x9, 0x7, 0x8, 0x0, 0x4, 0x6}, {0xffff, 0x2, 0x9, 0x6}, 0x400, 0x6e6bb2, 0x2, 0x1, 0x1, 0x3}, {{@in=@local, 0x4d3, 0x33}, 0x2, @in=@loopback, 0x3500, 0x3, 0x1, 0xff, 0x8002, 0x64, 0x95}}, 0xe8) (async, rerun: 32) socket$inet_icmp_raw(0x2, 0x3, 0x1) 1.241096085s ago: executing program 5 (id=7135): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="18020000000000000000000000000030850000002c00000095000000000000002b4003fe37a077ae55f52c0d80a2649baca85309be96d5a45bbbdb5ff7ffffffd075b3eee14473f51be98db7efbb059842badcfc81364470e8e04acb807fbbabc68abdcce9f672b6bb61c302dfd5c11071adac29fd64d33a3502fbeb1ed99dd0e792f24c420bfcc2635421d339ad521d6953b1137850d9e9ebf65ee988ea2dbee528678eb47efb7b3f19046c6f1bd1bf56e5853ed96137f95b3a11954ed1c8a8676468cf2405e48723d4b1ff"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x1000, &(0x7f0000001400)=""/4106, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x18) (async) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="18020000000000000000000000000030850000002c00000095000000000000002b4003fe37a077ae55f52c0d80a2649baca85309be96d5a45bbbdb5ff7ffffffd075b3eee14473f51be98db7efbb059842badcfc81364470e8e04acb807fbbabc68abdcce9f672b6bb61c302dfd5c11071adac29fd64d33a3502fbeb1ed99dd0e792f24c420bfcc2635421d339ad521d6953b1137850d9e9ebf65ee988ea2dbee528678eb47efb7b3f19046c6f1bd1bf56e5853ed96137f95b3a11954ed1c8a8676468cf2405e48723d4b1ff"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x1000, &(0x7f0000001400)=""/4106, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x18) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r2, 0x0, 0x14, 0x0, &(0x7f0000000380)="f6f4e9a1d78ad62ceef1884386dd78bb3fb7dbfc", 0x0, 0xa1b, 0x0, 0x2, 0x0, &(0x7f0000000700)="010a", 0x0}, 0x50) socket(0x2, 0x80805, 0x0) (async) r3 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010102, 0x4e20, 0x3, 'lblcr\x00', 0x1, 0xa7e, 0x70}, 0x2c) (async) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010102, 0x4e20, 0x3, 'lblcr\x00', 0x1, 0xa7e, 0x70}, 0x2c) connect$can_bcm(r3, &(0x7f0000000040), 0x10) socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000014c0)=@newtaction={0x7c, 0x30, 0x800, 0x0, 0x0, {}, [{0x68, 0x1, [@m_tunnel_key={0x64, 0x1, 0x0, 0x0, {{0xf}, {0x34, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x0, 0x0, 0x0, 0x0, 0x4}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @empty}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x7c}}, 0x8050) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x30, r7, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}]}]}, 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) r8 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r8, 0x0, 0x40, &(0x7f0000000600)=@nat={'nat\x00', 0x670, 0x5, 0x368, 0x228, 0x2d0, 0xffffffff, 0xd8, 0x170, 0x2d0, 0x2d0, 0xffffffff, 0x2d0, 0x2d0, 0x5, 0x0, {[{{@ip={@rand_addr=0x640100fc, @rand_addr=0x64010101, 0xff, 0x0, 'veth1_macvtap\x00', 'ipvlan1\x00', {0xff}, {}, 0x33, 0x2, 0x14}, 0x0, 0xa0, 0xd8, 0x48, {}, [@common=@ah={{0x30}, {[0x1, 0x3], 0xff}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0xf, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id=0x67, @port=0x4e24}}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, 0x0, 0x0, 'virt_wifi0\x00', 'veth1_vlan\x00'}, 0x0, 0x70, 0xb8}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0xe, @ipv6=@ipv4={'\x00', '\xff\xff', @empty}, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @icmp_id=0x65, @port=0x4e21}}}, {{@ip={@private=0xa010100, @empty, 0x0, 0x0, 'nicvf0\x00', 'nr0\x00'}, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @rand_addr, @dev={0xac, 0x14, 0x14, 0x2a}, @gre_key=0xe, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c8) r9 = accept4$inet6(r5, &(0x7f0000000280)={0xa, 0x0, 0x0, @local}, &(0x7f0000000540)=0x1c, 0x80000) ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(r9, 0xf505, 0x0) (async) ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(r9, 0xf505, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000240)={0x0, r4}, 0x8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r10, 0x1, 0x4c, &(0x7f0000000000), 0x4) (async) setsockopt$sock_attach_bpf(r10, 0x1, 0x4c, &(0x7f0000000000), 0x4) recvmsg$unix(r10, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x40002100) bind$inet(r3, &(0x7f0000000580)={0x2, 0x4e22, @empty}, 0x10) ioctl$TUNSETNOCSUM(r11, 0x80087601, 0x100000000010001) (async) ioctl$TUNSETNOCSUM(r11, 0x80087601, 0x100000000010001) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@ipv4_newroute={0x4c, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x5}, @RTA_ENCAP={0x28, 0x16, 0x0, 0x1, @SEG6_IPTUNNEL_SRH={0x24, 0x1, {{0x2, {0x0, 0x0, 0x4, 0x0, 0x0, 0x30}}, [@private2={0xfc, 0x2, '\x00', 0x1}]}}}]}, 0x4c}}, 0x0) (async) sendmsg$nl_route(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@ipv4_newroute={0x4c, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x5}, @RTA_ENCAP={0x28, 0x16, 0x0, 0x1, @SEG6_IPTUNNEL_SRH={0x24, 0x1, {{0x2, {0x0, 0x0, 0x4, 0x0, 0x0, 0x30}}, [@private2={0xfc, 0x2, '\x00', 0x1}]}}}]}, 0x4c}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x18, &(0x7f0000000480)=ANY=[@ANYBLOB="180000008f000000000000000902048018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000007b703000000080000850000000c000000bf092000000000003609010000000000950000000000040018010000786c6c2500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb702000008000000b7030000080000008500000006000000bd0af4ff00000000bf91000000000000b702000003000000850000002a000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x3e, 0xff0, &(0x7f0000002440)=""/4080, 0x41100, 0x20, '\x00', 0x0, 0x0, r11, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) socket$inet(0x2, 0x5, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r0}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0) 1.101604758s ago: executing program 3 (id=7136): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x87}]}, &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="0000000000000000000051229dc9", 0x0, 0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) socket(0xa, 0x2, 0x0) (async) r1 = socket(0xa, 0x2, 0x0) connect$unix(r1, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e20}, 0x6e) r2 = accept4$phonet_pipe(r1, 0x0, &(0x7f0000000000), 0x80000) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_buf(r3, 0x6, 0x1a, 0x0, &(0x7f0000000040)) (async) getsockopt$inet6_tcp_buf(r3, 0x6, 0x1a, 0x0, &(0x7f0000000040)) getsockopt$PNPIPE_IFINDEX(r2, 0x113, 0x2, &(0x7f0000000080), &(0x7f00000000c0)=0x4) socket$netlink(0x10, 0x3, 0x0) (async) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r5, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r6, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64"], 0x3c}}, 0x40000) (async) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r6, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64"], 0x3c}}, 0x40000) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x70bd28, 0x25dfdbfc, {0x2, 0x8, 0x1, 0xc8, r6}, [@IFA_LOCAL={0x8, 0x2, @multicast1}]}, 0x20}, 0x1, 0x0, 0x0, 0x4014}, 0x40000c0) sendmsg$key(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="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"/288], 0x120}}, 0x40084) r7 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000180)=0xffffffffffffffff, 0x4) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000280)={r7, r0, 0x0, r0}, 0x10) 928.742609ms ago: executing program 3 (id=7137): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f00000004c0)={0x2, 'pim6reg0\x00', {0x8}, 0x200}) (async) ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f00000004c0)={0x2, 'pim6reg0\x00', {0x8}, 0x200}) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a58000000060a0b040000000000000000020000000900010073797a30000000000900020073797a32000000002c0004802800018008000100661eff412c6fa874103c52050f756962001c000280080001400000000c08000240000000030800034000000032140000001100010000000000000100000000000a"], 0x80}, 0x1, 0x0, 0x0, 0x20000884}, 0xc000) sendmsg$NFQNL_MSG_VERDICT_BATCH(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x14, 0x3, 0x3, 0x401, 0x0, 0x0, {0x0, 0x0, 0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x81) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32], 0x1c}}, 0x4008054) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000180)) (async) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000180)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000001c0)=0x0) sendmsg$NFC_CMD_ENABLE_SE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x4c, r2, 0x0, 0x70bd27, 0x25dfdbfd, {}, [@NFC_ATTR_SE_INDEX={0x8}, @NFC_ATTR_SE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r3}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0xc0}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0xc0}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0xc4) 927.550196ms ago: executing program 0 (id=7138): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="06000000040000000600000008"], 0x50) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="240102000000000000000002000000100002800c000280050001000000000000004dfb14628ebba798afddb518cb38a105b1352a655d0a9a390ab0"], 0x24}}, 0x0) r3 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000200)={'vxcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000000380)={0x1d, r4, 0x1, {0x0, 0x0, 0x1}, 0xfd}, 0x18) writev(r3, &(0x7f00000000c0)=[{0x0}, {&(0x7f0000000300)='7', 0x1}], 0x2) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c00000015000504e1ff4319918e00352d"], 0x2c}}, 0x60040050) sendmsg$SMC_PNETID_DEL(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000fedbdf25020202000900030073797a300000000009000100737b7a"], 0x40}, 0x1, 0x40030000000000, 0x0, 0x800}, 0x80) sendmsg$NFNL_MSG_CTHELPER_GET(r5, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[@ANYBLOB="240000000109230000000000000000000a00000005000000000000800000000000000000"], 0x24}, 0x1, 0x0, 0x0, 0x24054884}, 0x24000825) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000000080)=@newtaction={0x78, 0x30, 0x9, 0x0, 0x0, {}, [{0x64, 0x1, [@m_skbedit={0x60, 0x1, 0x0, 0x0, {{0xc}, {0x34, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_QUEUE_MAPPING={0x6}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x9}}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x1}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x6}]}, {0x4}, {0xc, 0x8}, {0xc, 0x9}}}]}]}, 0x78}}, 0x0) getuid() syz_genetlink_get_family_id$mptcp(&(0x7f0000000440), r5) poll(0x0, 0x0, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r9 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r9, &(0x7f00000004c0)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}}, 0x1c, 0x0}}, {{&(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback={0x97}, 0x7}, 0x1c, 0x0, 0x0, &(0x7f0000000540)=ANY=[], 0x30}}], 0x2, 0x0) r10 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r10, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) recvmmsg(r10, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x0, 0x0) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fb7d0000000000000000000018150000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000220000008500000015000000850000000700000095"], &(0x7f0000000340)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r11, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0857f9f582f0300000000000000", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x50) 686.421407ms ago: executing program 3 (id=7139): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)={{0x14}, [@NFT_MSG_DELSETELEM={0x14, 0xe, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x8}}, @NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x4}]}}}, {0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0xc}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xa8}}, 0x0) (async) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYRESOCT=r1, @ANYRES32=r1, @ANYBLOB="08001a00", @ANYRES64=r1, @ANYBLOB="08001b", @ANYRES64=r1, @ANYBLOB='\f\x00C'], 0x18c0}, 0x1, 0x0, 0x0, 0x880}, 0x1) (async) ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0xc0385869, &(0x7f00000001c0)={r0, &(0x7f0000000080)='{/#{!\x00', 0x20000, &(0x7f0000000100)={@align=0x7, {0x5, 0x1, 0x909c, 0x3}}, 0x5, &(0x7f0000000140), &(0x7f0000000180)=0x6}) write$cgroup_netprio_ifpriomap(r2, &(0x7f0000000280)={'virt_wifi0', 0x32, 0x36}, 0xd) 617.473423ms ago: executing program 0 (id=7140): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140080001000010000000000000000000000000a2800dfff000a0101000000005e1affd502000000010080797a300000000008000240010000032c00000003ffff0900010073797a300000000009000300bb79a23c9a5f664f6f9814bf267a32"], 0x7c}}, 0x20000080) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)={{0x14}, [@NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x3c, 0x4, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, @dynset={{0xb}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_DYNSET_SREG_KEY={0x8, 0x4, 0x1, 0x0, 0x11}, @NFTA_DYNSET_SET_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_DYNSET_OP={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_DYNSET_SET_ID={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x90}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[], 0x40}, 0x1, 0x0, 0x0, 0x20000801}, 0x40008) 504.759839ms ago: executing program 3 (id=7141): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={0x0, 0x0, 0x43}, 0x28) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x1c, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r3, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000580)={r2, r4, 0x25, 0x8, @val=@netkit={@void, @value=r1}}, 0x1c) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000000)=[@in6={0xa, 0x4e21, 0x5, @private2, 0x9}], 0x1c) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000140)={0x0, @in6={{0xa, 0x4e21, 0x1641, @private2, 0xfffffff9}}, 0xfff, 0x9}, &(0x7f0000000200)=0x90) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x4, 0xbfffffff, 0xfffffffe, {0x0, 0x0, 0x0, 0x0, {0x3, 0xfff3}, {0xa, 0xe}, {0xa, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_DQ_RATE_ESTIMATOR={0x8, 0xc, 0x1}, @TCA_FQ_PIE_MEMORY_LIMIT={0x8, 0x8, 0x6}]}}]}, 0x44}}, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) 502.948029ms ago: executing program 1 (id=7142): socket$inet6_sctp(0xa, 0x5, 0x84) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB="600000001000030400000000fedbdf2500007400f728ab93db3c140d69363e3273752c18fb3ff28f25abc8f645000ea41d2c292d330aaf5f6c5bf158a72d1c01b4de725a894ffa6fc8934ef3402a646fc57b88bf57de4902c3699b4f6c9b7fa498e9356c7906056c02f02b4f9b6708737b9fe80ffb8fda620b071256eb58a45c85d673480dcf8a9036c4ea97302c3a5dbcfe7135", @ANYRES32, @ANYRES64=r0], 0x60}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x20802, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, 0x0) r3 = socket(0x1e, 0x2, 0x8) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'dummy0\x00'}) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) setsockopt(0xffffffffffffffff, 0xc, 0x7f, 0x0, 0x0) ioctl$sock_netdev_private(r5, 0x8914, &(0x7f0000000000)) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB="140100002e00010000000000fbdbdd250401f2800c00160002ac0f0000000000140017"], 0x114}], 0x1, 0x0, 0x0, 0x41}, 0x4008080) ioctl$sock_rose_SIOCADDRT(r3, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x6, @null, @bpq0, 0x0, [@bcast, @bcast, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, @bcast]}) r7 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r3, 0x890b, &(0x7f00000007c0)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0xfffd, @null, @rose={'rose', 0x0}, 0x5, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @null, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}) connect$rose(r7, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1, @null}, 0x1c) connect$rose(r7, &(0x7f00000000c0)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x3, [@bcast, @null, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}]}, 0x40) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r8, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000080)={0xfffbfffc, 0x8, 0x1, 0x6}, 0x10) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @private=0xa010100}, 0x10) connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x0) 491.150794ms ago: executing program 0 (id=7143): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=@newlink={0x44, 0x10, 0x44b, 0x0, 0x25dfdbfe, {0x7a, 0x0, 0x0, 0x0, 0x0, 0x1400}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_IGMP_VERSION={0x5, 0x2b, 0x2}, @IFLA_BR_AGEING_TIME={0x8}]}}}]}, 0x44}}, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000380)={@remote, @random="50a245d5cde0", @val={@void, {0x8100, 0x5, 0x0, 0x3}}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @loopback}, @timestamp_reply={0x12, 0x0, 0x0, 0xdffe, 0x2, 0x1, 0x0, 0x3}}}}}, 0x0) (async) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = socket$kcm(0x10, 0x2, 0x10) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r3, 0x11b, 0x2, &(0x7f00000002c0)=0x100, 0x4) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000004c0)='cpuacct.stat\x00', 0x275a, 0x0) write$cgroup_subtree(r5, &(0x7f0000000200)=ANY=[], 0x10448) (async) unshare(0x400) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58) r7 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r7, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x33e000, 0x1000}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(r7, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) setsockopt$XDP_RX_RING(r7, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) (async, rerun: 64) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000180)=0x4, 0x4) (async, rerun: 64) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000340)=0x1, 0x4) (async, rerun: 64) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000140)={'batadv_slave_1\x00', 0x0}) (async, rerun: 64) setsockopt$XDP_UMEM_FILL_RING(r7, 0x11b, 0x5, &(0x7f0000000300)=0x1, 0x4) bind$xdp(r7, &(0x7f0000000100)={0x2c, 0x0, r8}, 0x10) (async) bind$xdp(r3, &(0x7f0000000240)={0x2c, 0x1, r4, 0x1d, r7}, 0x10) write$nci(r1, &(0x7f0000000080)=@NCI_OP_CORE_RESET_NTF={0x0, 0x0, 0x3, 0x0, 0x7f, {0x81, 0x9, 0x1, 0xe8, 0x5, 0x8}}, 0xc) 325.26762ms ago: executing program 2 (id=7144): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000180)={0x20, 0xff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x2, 0x0, 0x93}, 0xe) (async) ioctl$int_in(r0, 0x5452, &(0x7f0000000280)=0xffffffffffffffff) (async) sendto$inet6(r0, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) (async) shutdown(r0, 0x1) (async) ioctl(r0, 0x2, &(0x7f0000000080)="c303153846c322d7d27cccd7a4f24cab332ce163676e0eadca2792c3f02064d304ed4748b535f039ec560ffe6af48e0f82ebf09ad0ec9874da1560988ea077d979b5ae2e039bd3c049dacd2308a0e962d53c4bf842ad22093c494632d9c7ba13bfc77a98efb46d946661ba6d16ddd6217f475459f15c067c73d2fb34") (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x11, 0xb8}, [@ldst={0x5}], {0x95, 0x0, 0x74}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) 322.428822ms ago: executing program 1 (id=7145): r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000040)={0x0, 0x7, 0x30, 0xfff, 0x80}, &(0x7f0000000080)=0x18) setsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f00000000c0)={r1, 0x3ff, 0x5198, 0x9}, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r3, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@L2TP_ATTR_IP_SADDR={0x8, 0x18, @remote}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008081}, 0x4880) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r2) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000800)=ANY=[@ANYBLOB="84010000", @ANYRES16=r4, @ANYBLOB="0100d8000000000000000100000004000480080002000100000008000100000000000400088058010c8054000b8008000900000000d8"], 0x184}}, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) (async) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000040)={0x0, 0x7, 0x30, 0xfff, 0x80}, &(0x7f0000000080)=0x18) (async) setsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f00000000c0)={r1, 0x3ff, 0x5198, 0x9}, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) (async) sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r3, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@L2TP_ATTR_IP_SADDR={0x8, 0x18, @remote}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008081}, 0x4880) (async) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r2) (async) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000800)=ANY=[@ANYBLOB="84010000", @ANYRES16=r4, @ANYBLOB="0100d8000000000000000100000004000480080002000100000008000100000000000400088058010c8054000b8008000900000000d8"], 0x184}}, 0x0) (async) 213.395311ms ago: executing program 5 (id=7146): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_ENCAP(r0, 0x113, 0x1, &(0x7f0000000600), &(0x7f0000000640)=0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e000000180100000000372500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) setsockopt$inet6_tcp_buf(r2, 0x6, 0x1f, &(0x7f0000000680)="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", 0x1000) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000580)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000003000000030000000000e20201000000005f001d348f451b824b14ba0bc9c3a2d9326f998c82df8a71dcb576b59054a8473643881526e834ac443cb1497f388a07caec47"], &(0x7f0000000480)=""/231, 0x27, 0xe7, 0x0, 0x9, 0x10000}, 0x28) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_ext={0x1c, 0x2, &(0x7f00000002c0)=@raw=[@map_idx_val={0x18, 0x4, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x2}], &(0x7f00000000c0)='syzkaller\x00', 0x7, 0x1d, &(0x7f0000000100)=""/29, 0x41100, 0x0, '\x00', 0x0, 0x0, r3, 0x8, &(0x7f0000000180)={0x6, 0x7}, 0x8, 0x10, 0x0, 0x0, 0x112e9, r1, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) 177.59559ms ago: executing program 5 (id=7147): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYRES8=r3, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800900010076657468000000000400028008000a00", @ANYBLOB="1fe99a39d0fbe7e6e6acc5a4acb54f8841b0825cfebc2c2f17"], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000084) listen(0xffffffffffffffff, 0x400004) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8000}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=@newlink={0x48, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @gre={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e20}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x4}, @IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e22}]}}}]}, 0x48}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}}, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) socket(0x10, 0x803, 0x0) (async) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYRES8=r3, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800900010076657468000000000400028008000a00", @ANYBLOB="1fe99a39d0fbe7e6e6acc5a4acb54f8841b0825cfebc2c2f17"], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000084) (async) listen(0xffffffffffffffff, 0x400004) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8000}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=@newlink={0x48, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @gre={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e20}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x4}, @IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e22}]}}}]}, 0x48}}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}}, 0x0) (async) 95.007768ms ago: executing program 1 (id=7148): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in6={{0xa, 0x4e21, 0x1, @mcast2, 0x5}}, 0x4, 0xea, 0x2000440, 0x0, 0x10, 0x6, 0x8}, 0x9c) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x0, 0x0, 0xffffffff}, 0x1c) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f00005d3000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0xfffff000) mmap(&(0x7f00004a3000/0x1000)=nil, 0x1000, 0x0, 0x13, r2, 0x0) mmap(&(0x7f000086a000/0x2000)=nil, 0x2000, 0x4, 0x11, r2, 0x2000) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'ip6tnl0\x00', 0x0}) sendto$packet(r3, &(0x7f00000002c0)="05031612d3fc140000004788031c09103c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000640)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r8, 0x11b, 0x4, &(0x7f0000000140)={0xfffffffffffffffc, 0x23000, 0x1000, 0x8, 0x2}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r7, r6, 0x25, 0x0, @val=@perf_event={0x200}}, 0x18) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000000)={r6, 0x1, 0x6, @multicast}, 0x10) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_buf(r9, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0xd, &(0x7f0000000080)=ANY=[@ANYBLOB="1802000000000000000000000000000085100000010000009500000000000000200000000001000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000002885000000c700000095"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0x98, &(0x7f00000001c0)=""/152, 0x41000, 0xa}, 0x23) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@updpolicy={0xc4, 0x19, 0x1, 0x70bd2d, 0x0, {{@in6=@empty, @in6=@mcast1, 0x200, 0x0, 0x4e24, 0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x7ffffffffffffffe, 0xc, 0x0, 0x3ff, 0x0, 0xffffffffffffffff}, {0x0, 0x8000, 0x407ffffffffffe, 0x800000000000002}, 0x2000007, 0x0, 0x1, 0x0, 0x1}, [@policy_type={0xa, 0x10, {0x1}}]}, 0xc4}, 0x1, 0x0, 0x0, 0x40}, 0x8040040) socket(0x1e, 0x5, 0x20000) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r11, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x200280d0}, 0x40) socket$nl_route(0x10, 0x3, 0x0) 695.763µs ago: executing program 0 (id=7149): r0 = socket$alg(0x26, 0x5, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000000200)={0x0, 'veth1_to_bond\x00', {0xeffffff4}}) socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x1c, 0x1, 0x4, 0x401, 0x0, 0x0, {}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x1c, 0x1, 0x4, 0x101, 0x0, 0x0, {}, [@NFULA_CFG_CMD={0x5, 0x1, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4001}, 0x0) socket$netlink(0x10, 0x3, 0x400000000000004) socket$nl_route(0x10, 0x3, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x50) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x7, 0x4, 0x1f00, 0x3ff}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x20, 0x5, 0x2, 0xfffff010}, {0x28, 0x7, 0x0, 0xa56e}, {0x6, 0x0, 0x0, 0xa1d}]}, 0x10) sendmmsg(r4, &(0x7f0000000180), 0x4000190, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@ipv4_newrule={0x34, 0x20, 0x1, 0x70bd26, 0x25dfdbfb, {0x2, 0x10, 0x10, 0x0, 0x9, 0x0, 0x0, 0x6, 0x10006}, [@FRA_SRC={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x2a}}, @FRA_FLOW={0x8, 0xb, 0x6}, @FRA_DST={0x8, 0x1, @empty}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x4004804) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xe, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x43}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r2, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) 0s ago: executing program 2 (id=7150): syz_emit_ethernet(0xaf, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb5500450000a1000400000073737800000000e00000014e20ffff008d9078b4e1fa95765798262e83e352be08f88858937290daa680842f452c30d6040000000000000038848cde35b72a6259f080b611ec951e601467dd381201b1a8402587b51fe0ecbb44d049159db7957b28fbe8c64d72d611c9"], 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000002100000426b17000fedbdf2502142000050000081400000008000200ffffffff08000d0400000008000200c00000020c000c4000ffff00000000"], 0x40}}, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x800) r2 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000700)={0x0, r0}, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000006c0)={&(0x7f0000000340)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x4, [@var={0x2, 0x0, 0x0, 0xe, 0x4}, @decl_tag={0x7, 0x0, 0x0, 0x11, 0x1, 0x8}]}, {0x0, [0x51, 0x61]}}, &(0x7f0000000600)=""/133, 0x3c, 0x85, 0x1, 0x7, 0x10000, @value=r2}, 0x28) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f00000014c0)=0x10000b, 0x4) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x3}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="02000000040000000400000001"], 0x50) close(0x3) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x9, 0x2, 0x9, 0x8, 0x40}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000012c0)={{r4}, &(0x7f0000001240), &(0x7f0000001280)}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000010000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000500000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000001c0)={r5, 0xffffffffffffffff, 0x60000000}, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@gettfilter={0x3c, 0x2e, 0x100, 0x70bc28, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x10, 0xfff1}, {0xe, 0xf}, {0x8, 0xffff}}, [{0x8, 0xb, 0x5}, {0x8, 0xb, 0x9}, {0x8, 0xb, 0xc11}]}, 0x3c}}, 0x0) r6 = socket$kcm(0x10, 0x2, 0x10) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0xc, &(0x7f0000000040)=@framed={{0x18, 0x2, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x27}, @printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xb}, {0x85, 0x0, 0x0, 0x9b}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x25, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r7, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000580)={0x0, @loopback, @private}, &(0x7f0000000740)=0xc) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) kernel console output (not intermixed with test programs): 551': attribute type 4 has an invalid length. [ 703.761575][T28695] lo speed is unknown, defaulting to 1000 [ 703.779894][T28706] lo speed is unknown, defaulting to 1000 [ 703.921944][T28728] x_tables: duplicate entry at hook 3 [ 704.103737][T28738] xt_hashlimit: size too large, truncated to 1048576 [ 705.699029][T28821] netlink: 'syz.3.5569': attribute type 1 has an invalid length. [ 705.732581][T28821] __nla_validate_parse: 9 callbacks suppressed [ 705.732599][T28821] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5569'. [ 707.195720][T28745] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 707.357853][T28831] 0ªî{X¹¦: left allmulticast mode [ 707.404531][T28831] geneve1: left promiscuous mode [ 707.438217][T28831] geneve2: left promiscuous mode [ 707.458610][T28831] geneve2: left allmulticast mode [ 707.481113][T28831] vlan3: left allmulticast mode [ 707.503560][T28831] macvtap0: left allmulticast mode [ 707.527972][T28831] vlan5: left allmulticast mode [ 707.550544][T28831] bond5: left allmulticast mode [ 707.569161][T28831] geneve3: left allmulticast mode [ 707.635242][T28831] bond9: left promiscuous mode [ 707.671618][T28831] geneve4: left promiscuous mode [ 707.729415][T16808] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 707.744467][T16808] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 707.755977][T16808] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 707.771964][T16808] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 707.781269][T16808] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 707.816166][ T1164] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 707.835601][ T1164] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 707.856300][T28856] netlink: 'syz.5.5577': attribute type 29 has an invalid length. [ 707.879634][T28857] netlink: 'syz.5.5577': attribute type 29 has an invalid length. [ 707.882062][T28856] netlink: 500 bytes leftover after parsing attributes in process `syz.5.5577'. [ 707.916751][ T1164] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 707.948359][ T1164] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 708.053784][T28862] netlink: ct family unspecified [ 708.060348][T28862] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 708.129218][T28852] lo speed is unknown, defaulting to 1000 [ 709.040346][T28872] 8021q: adding VLAN 0 to HW filter on device macsec0 [ 709.242525][T28886] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5586'. [ 709.327940][T28889] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5587'. [ 709.433266][T28852] chnl_net:caif_netlink_parms(): no params data found [ 709.631767][T28897] netlink: 48 bytes leftover after parsing attributes in process `syz.5.5590'. [ 709.689362][T28852] bridge0: port 1(bridge_slave_0) entered blocking state [ 709.704391][T28852] bridge0: port 1(bridge_slave_0) entered disabled state [ 709.713390][T28852] bridge_slave_0: entered allmulticast mode [ 709.722185][T28852] bridge_slave_0: entered promiscuous mode [ 709.732815][T28852] bridge0: port 2(bridge_slave_1) entered blocking state [ 709.740688][T28852] bridge0: port 2(bridge_slave_1) entered disabled state [ 709.749049][T28852] bridge_slave_1: entered allmulticast mode [ 709.758579][T28852] bridge_slave_1: entered promiscuous mode [ 709.882351][ T5843] Bluetooth: hci0: command tx timeout [ 709.963487][T28852] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 709.993148][T28852] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 710.021640][T28915] netlink: 320 bytes leftover after parsing attributes in process `syz.3.5593'. [ 710.031707][T28915] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5593'. [ 710.041311][T28915] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5593'. [ 710.050714][T28915] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5593'. [ 710.357504][T28852] team0: Port device team_slave_0 added [ 710.506336][T28852] team0: Port device team_slave_1 added [ 710.716698][T28931] syzkaller0: entered promiscuous mode [ 710.722193][T28931] syzkaller0: entered allmulticast mode [ 710.763527][T28852] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 710.772531][T28852] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 710.799446][T28852] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 711.966033][ T5843] Bluetooth: hci0: command tx timeout [ 712.959313][T14441] lec:lec_start_xmit: lec0:No lecd attached [ 713.137400][T28852] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 713.144373][T28852] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 713.172956][T28852] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 713.265079][T28939] lo speed is unknown, defaulting to 1000 [ 713.387302][T28852] hsr_slave_0: entered promiscuous mode [ 713.394017][T28852] hsr_slave_1: entered promiscuous mode [ 713.503389][T28961] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 713.532109][T28962] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5605'. [ 713.652395][T28962] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5605'. [ 713.719267][T28966] netlink: 'syz.5.5606': attribute type 10 has an invalid length. [ 713.739364][T28966] netlink: 16154 bytes leftover after parsing attributes in process `syz.5.5606'. [ 713.802643][T17103] .70·X: left promiscuous mode [ 713.819655][T17103] bridge0: port 1(.70·X) entered disabled state [ 713.881221][T17103] vlan2: left promiscuous mode [ 713.892512][T17103] team0: left promiscuous mode [ 713.902359][T17103] bond0: left promiscuous mode [ 713.912098][T17103] bridge4: port 3(vlan2) entered disabled state [ 713.932316][T17103] veth3: left allmulticast mode [ 713.945689][T17103] veth3: left promiscuous mode [ 713.955893][T17103] bridge4: port 1(veth3) entered disabled state [ 713.992874][T17103] veth0_to_bond: left allmulticast mode [ 714.001434][T28988] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5609'. [ 714.004746][T17103] veth0_to_bond: left promiscuous mode [ 714.030934][T17103] bridge5: port 2(veth0_to_bond) entered disabled state [ 714.044671][T17103] veth5: left allmulticast mode [ 714.046103][ T5843] Bluetooth: hci0: command tx timeout [ 714.052195][T17103] veth5: left promiscuous mode [ 714.073153][T17103] bridge5: port 1(veth5) entered disabled state [ 714.112123][T17103] dvmrp1: left allmulticast mode [ 714.496036][T17103] bond4 (unregistering): (slave gretap1): Releasing active interface [ 714.649484][T17103] bond2 (unregistering): (slave bridge2): Releasing active interface [ 715.018882][T17103] .` (unregistering): Released all slaves [ 715.029252][T17103] bond1 (unregistering): Released all slaves [ 715.042260][T17103] bond2 (unregistering): Released all slaves [ 715.058432][T17103] bond3 (unregistering): Released all slaves [ 715.071903][T17103] bond4 (unregistering): Released all slaves [ 715.092360][T17103] bond0 (unregistering): left allmulticast mode [ 715.099381][T17103] team0: Port device bond0 removed [ 715.105936][T17103] bond0 (unregistering): Released all slaves [ 715.123351][T17103] bond5 (unregistering): Released all slaves [ 715.136408][T17103] bond6 (unregistering): Released all slaves [ 715.150551][T17103] bond7 (unregistering): (slave bond8): Releasing backup interface [ 715.164608][T17103] bond8 (unregistering): left promiscuous mode [ 715.171358][T17103] bond7 (unregistering): Released all slaves [ 715.184331][T17103] bond8 (unregistering): Released all slaves [ 715.214414][ T5507] 8021q: adding VLAN 0 to HW filter on device eth5 [ 715.446568][T17103] tipc: Disabling bearer [ 715.466335][T17103] tipc: Left network mode [ 715.913207][T29015] xt_connbytes: Forcing CT accounting to be enabled [ 716.116132][ T5843] Bluetooth: hci0: command tx timeout [ 716.200533][T29033] sctp: [Deprecated]: syz.5.5620 (pid 29033) Use of int in maxseg socket option. [ 716.200533][T29033] Use struct sctp_assoc_value instead [ 716.205819][T29034] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5619'. [ 716.342038][T29025] lo speed is unknown, defaulting to 1000 [ 716.356307][ C1] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 716.824736][T29048] syzkaller0: entered promiscuous mode [ 716.855395][T29048] syzkaller0: entered allmulticast mode [ 716.954208][T29054] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5623'. [ 717.012041][T29067] bond3: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 717.063384][T29067] bond3 (unregistering): Released all slaves [ 717.586232][T29095] netlink: 40 bytes leftover after parsing attributes in process `syz.5.5631'. [ 717.668150][T29100] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5633'. [ 717.719973][T29102] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5632'. [ 717.730115][T28852] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 717.737668][T29100] ipt_REJECT: TCP_RESET invalid for non-tcp [ 717.763710][T28852] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 717.796446][T28852] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 717.823788][T28852] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 717.879339][T17103] hsr_slave_0: left promiscuous mode [ 717.900044][T17103] hsr_slave_1: left promiscuous mode [ 718.224719][T29123] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5636'. [ 718.675510][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5720 ms [ 718.683611][ C1] lec:lec_tx_timeout: lec0 [ 718.819846][T29128] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5638'. [ 721.150966][T28852] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 721.169872][T28852] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 721.182435][T28852] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 721.213268][T28852] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 721.254519][T29123] mac80211_hwsim hwsim46 syzkaller0: left promiscuous mode [ 721.265541][T29123] mac80211_hwsim hwsim46 syzkaller0: left allmulticast mode [ 721.781406][T29177] batadv_slave_1: entered promiscuous mode [ 721.815229][T29177] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5644'. [ 721.902521][T28852] 8021q: adding VLAN 0 to HW filter on device bond0 [ 721.913933][T29187] GUP no longer grows the stack in syz.5.5647 (29187): 200000004000-20000000a000 (200000002000) [ 721.966977][T29187] CPU: 1 UID: 0 PID: 29187 Comm: syz.5.5647 Not tainted syzkaller #0 PREEMPT(full) [ 721.967005][T29187] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 721.967025][T29187] Call Trace: [ 721.967032][T29187] [ 721.967041][T29187] dump_stack_lvl+0xe8/0x150 [ 721.967080][T29187] __get_user_pages+0x2378/0x2720 [ 721.967141][T29187] ? lruvec_stat_mod_folio+0x6e/0x3e0 [ 721.967184][T29187] __gup_longterm_locked+0x3db/0x1630 [ 721.967215][T29187] ? xdp_umem_pin_pages+0xca/0x340 [ 721.967256][T29187] pin_user_pages+0x9d/0xd0 [ 721.967280][T29187] xdp_umem_pin_pages+0x11b/0x340 [ 721.967312][T29187] xdp_umem_create+0x631/0x8b0 [ 721.967348][T29187] xsk_setsockopt+0x860/0x990 [ 721.967374][T29187] ? __pfx_xsk_setsockopt+0x10/0x10 [ 721.967403][T29187] ? __fget_files+0x2a/0x420 [ 721.967422][T29187] ? aa_sock_opt_perm+0xff/0x1a0 [ 721.967447][T29187] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 721.967471][T29187] ? __pfx_xsk_setsockopt+0x10/0x10 [ 721.967496][T29187] do_sock_setsockopt+0x17c/0x1b0 [ 721.967524][T29187] __x64_sys_setsockopt+0x13d/0x1b0 [ 721.967548][T29187] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 721.967569][T29187] do_syscall_64+0x15f/0xf80 [ 721.967596][T29187] ? trace_irq_disable+0x3b/0x140 [ 721.967623][T29187] ? clear_bhb_loop+0x40/0x90 [ 721.967648][T29187] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 721.967666][T29187] RIP: 0033:0x7fce6bf9cdd9 [ 721.967686][T29187] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 721.967703][T29187] RSP: 002b:00007fce6ceb8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 721.967724][T29187] RAX: ffffffffffffffda RBX: 00007fce6c215fa0 RCX: 00007fce6bf9cdd9 [ 721.967737][T29187] RDX: 0000000000000004 RSI: 000000000000011b RDI: 0000000000000005 [ 721.967748][T29187] RBP: 00007fce6c032d69 R08: 0000000000000020 R09: 0000000000000000 [ 721.967760][T29187] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000000 [ 721.967773][T29187] R13: 00007fce6c216038 R14: 00007fce6c215fa0 R15: 00007ffd04519068 [ 721.967805][T29187] [ 722.187455][T28852] 8021q: adding VLAN 0 to HW filter on device team0 [ 722.264669][T17103] IPVS: stop unused estimator thread 0... [ 722.316056][ T6336] bridge0: port 1(bridge_slave_0) entered blocking state [ 722.323217][ T6336] bridge0: port 1(bridge_slave_0) entered forwarding state [ 722.348946][ T6336] bridge0: port 2(bridge_slave_1) entered blocking state [ 722.356137][ T6336] bridge0: port 2(bridge_slave_1) entered forwarding state [ 722.539356][T29176] batadv_slave_1: left promiscuous mode [ 722.564376][T29209] syzkaller1: entered promiscuous mode [ 722.573137][T29209] syzkaller1: entered allmulticast mode [ 723.243112][T29255] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5653'. [ 723.314074][T29257] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5653'. [ 723.518684][T29262] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5657'. [ 723.580225][T28852] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 723.803306][T28852] veth0_vlan: entered promiscuous mode [ 723.873423][T28852] veth1_vlan: entered promiscuous mode [ 723.972029][T28852] veth0_macvtap: entered promiscuous mode [ 724.011773][T28852] veth1_macvtap: entered promiscuous mode [ 724.072608][T28852] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 724.114776][T28852] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 724.164119][T29290] tunl0: Caught tx_queue_len zero misconfig [ 724.212856][T29290] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 724.225140][ T1126] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 724.250147][ T1126] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 724.287806][T29294] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 724.305227][ T1126] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 724.317925][ T1126] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 724.573468][T29311] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5668'. [ 724.583225][T29308] pim6reg99999991: entered allmulticast mode [ 724.631782][T29311] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 724.703282][T29311] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 724.792184][ T1116] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 724.817181][ T1116] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 724.941755][ T1158] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 724.969191][ T1158] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 725.070837][T29325] siw: device registration error -23 [ 725.083681][T29327] netlink: 'syz.2.5673': attribute type 13 has an invalid length. [ 725.094310][T29327] netlink: 'syz.2.5673': attribute type 17 has an invalid length. [ 725.102880][T29327] netlink: 'syz.2.5673': attribute type 27 has an invalid length. [ 725.222861][T29331] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5673'. [ 725.288312][T29335] openvswitch: netlink: IP tunnel dst address not specified [ 725.320970][T29332] sch_tbf: burst 0 is lower than device sit0 mtu (1480) ! [ 725.346683][T29327] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5673'. [ 725.849001][T29335] bridge0: port 2(bridge_slave_1) entered disabled state [ 725.856537][T29335] bridge0: port 1(bridge_slave_0) entered disabled state [ 726.008935][T29354] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5677'. [ 726.302854][T29335] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 726.337563][T29335] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 726.833938][ T1164] netdevsim netdevsim5 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 726.842599][T29364] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5681'. [ 726.858795][ T1164] netdevsim netdevsim5 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 726.873773][ T1164] netdevsim netdevsim5 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 726.882375][ T1164] netdevsim netdevsim5 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 726.883467][T29366] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5679'. [ 727.285917][T29389] syzkaller1: entered promiscuous mode [ 727.306686][T29389] syzkaller1: entered allmulticast mode [ 727.534446][T29389] syzkaller1: left promiscuous mode [ 727.561531][T29408] netlink: 248 bytes leftover after parsing attributes in process `syz.3.5693'. [ 727.724949][T29410] lo: entered promiscuous mode [ 727.736925][T29410] lo: entered allmulticast mode [ 728.050397][T29432] netlink: 'syz.1.5701': attribute type 1 has an invalid length. [ 728.059442][T29432] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5701'. [ 728.110334][T29434] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5701'. [ 728.162709][T29432] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5701'. [ 728.231317][ T1164] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 728.243751][ T1164] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 728.270245][ T1164] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 728.294028][ T1164] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 728.465855][T29453] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 728.513897][T29456] geneve1: entered promiscuous mode [ 728.599210][T29458] xt_policy: too many policy elements [ 728.648598][T29461] xt_hashlimit: size too large, truncated to 1048576 [ 728.657745][T29447] lo speed is unknown, defaulting to 1000 [ 728.979595][T29473] veth15: entered promiscuous mode [ 729.217565][T29479] netlink: 'syz.2.5713': attribute type 4 has an invalid length. [ 729.263845][T29479] .`: renamed from bond0 (while UP) [ 729.327698][T29484] ipt_REJECT: TCP_RESET invalid for non-tcp [ 729.663892][T29494] syzkaller1: entered promiscuous mode [ 729.676479][T29494] syzkaller1: entered allmulticast mode [ 729.834260][T29491] Bluetooth: hci3: Opcode 0x0401 failed: -4 [ 729.846287][T29493] Bluetooth: hci3: Opcode 0x0401 failed: -4 [ 730.049090][T29528] __nla_validate_parse: 5 callbacks suppressed [ 730.049109][T29528] netlink: 14585 bytes leftover after parsing attributes in process `syz.0.5727'. [ 730.076251][T29521] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5726'. [ 730.088586][T29519] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5725'. [ 730.141312][T29531] netlink: 'syz.0.5728': attribute type 1 has an invalid length. [ 730.204691][T29531] 8021q: adding VLAN 0 to HW filter on device bond16 [ 730.278567][T29535] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5728'. [ 730.307728][T29531] bond16: (slave gretap1): making interface the new active one [ 730.318209][T29531] bond16: (slave gretap1): Enslaving as an active interface with an up link [ 730.331824][T29541] netlink: 52 bytes leftover after parsing attributes in process `syz.0.5728'. [ 730.390660][T29541] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 730.498974][T29535] bond16 (unregistering): (slave gretap1): Releasing active interface [ 730.534105][T29535] bond16 (unregistering): Released all slaves [ 730.727477][T29566] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5738'. [ 730.757093][T29566] openvswitch: netlink: Flow key attr not present in new flow. [ 731.217682][T29594] netlink: 14 bytes leftover after parsing attributes in process `syz.5.5743'. [ 731.293093][T29594] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 731.351145][T29601] sctp: [Deprecated]: syz.0.5748 (pid 29601) Use of struct sctp_assoc_value in delayed_ack socket option. [ 731.351145][T29601] Use struct sctp_sack_info instead [ 731.390332][T29594] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 731.432315][T29594] bond0 (unregistering): Released all slaves [ 731.722320][T29616] IPVS: sh: FWM 3 0x00000003 - no destination available [ 731.759229][T29608] lo speed is unknown, defaulting to 1000 [ 731.780572][ C0] IPVS: sh: FWM 3 0x00000003 - no destination available [ 731.795982][ T5843] Bluetooth: hci3: command 0x0401 tx timeout [ 731.891115][T29631] xt_CT: You must specify a L4 protocol and not use inversions on it [ 731.997340][T29627] lo speed is unknown, defaulting to 1000 [ 732.258694][T29642] netlink: 140 bytes leftover after parsing attributes in process `syz.3.5762'. [ 732.276156][T29642] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check. [ 732.441171][T29645] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5762'. [ 732.475869][T29645] openvswitch: netlink: Flow key attr not present in new flow. [ 732.815313][T29665] Bluetooth: MGMT ver 1.23 [ 732.886165][T29667] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5769'. [ 733.099735][T29674] netlink: 'syz.0.5771': attribute type 1 has an invalid length. [ 733.673665][T29699] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 733.863742][T29710] Cannot find set identified by id 65534 to match [ 733.875796][ T5843] Bluetooth: hci3: command 0x0401 tx timeout [ 734.037487][T29710] lo speed is unknown, defaulting to 1000 [ 734.094901][T29717] lo speed is unknown, defaulting to 1000 [ 735.254935][T29759] netlink: 'syz.3.5798': attribute type 61 has an invalid length. [ 735.379466][T29768] lo speed is unknown, defaulting to 1000 [ 735.529871][T29774] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 735.537193][T29774] IPv6: NLM_F_CREATE should be set when creating new route [ 735.544435][T29774] IPv6: NLM_F_CREATE should be set when creating new route [ 735.551731][T29774] IPv6: NLM_F_CREATE should be set when creating new route [ 735.785233][T29787] netlink: 'syz.5.5805': attribute type 1 has an invalid length. [ 735.899338][T29787] bond0: entered promiscuous mode [ 735.904851][T29787] 8021q: adding VLAN 0 to HW filter on device bond0 [ 735.925823][T29770] __nla_validate_parse: 4 callbacks suppressed [ 735.925841][T29770] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5800'. [ 735.947443][T29799] netlink: 76 bytes leftover after parsing attributes in process `syz.1.5806'. [ 736.049244][T29800] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5807'. [ 736.496793][T29826] lo speed is unknown, defaulting to 1000 [ 736.628513][T29832] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5815'. [ 737.013226][T29846] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5819'. [ 737.498645][T29874] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5824'. [ 737.541120][T29874] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5824'. [ 737.580514][T29874] bond0: left promiscuous mode [ 737.640224][T29879] netlink: 'syz.3.5826': attribute type 11 has an invalid length. [ 737.779777][T29886] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5828'. [ 737.787165][T29884] dvmrp0: entered allmulticast mode [ 737.791642][T29887] netlink: 548 bytes leftover after parsing attributes in process `syz.5.5829'. [ 738.008281][T29905] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5834'. [ 738.323934][T29924] lo speed is unknown, defaulting to 1000 [ 738.465250][T29937] veth0_to_hsr: Caught tx_queue_len zero misconfig [ 738.594632][T29880] delete_channel: no stack [ 739.304460][T29970] netlink: 'syz.5.5849': attribute type 1 has an invalid length. [ 739.348508][T29973] syz_tun: entered allmulticast mode [ 739.512285][T29973] syz_tun (unregistering): left allmulticast mode [ 739.664044][T29981] syzkaller0: entered promiscuous mode [ 739.693383][T29981] syzkaller0: entered allmulticast mode [ 740.006818][T30006] bridge0: port 4(veth0_to_bridge) entered blocking state [ 740.033038][T30006] bridge0: port 4(veth0_to_bridge) entered disabled state [ 740.067977][T30006] veth0_to_bridge: entered allmulticast mode [ 740.102606][T30006] veth0_to_bridge: entered promiscuous mode [ 740.501080][T30028] bond1: (slave vcan1): refused to change device type [ 740.700024][T30036] pimreg0: entered promiscuous mode [ 740.706959][T30036] pimreg0: entered allmulticast mode [ 740.730061][T30043] dummy0: entered promiscuous mode [ 740.744869][T30043] dummy0: entered allmulticast mode [ 740.970612][T30048] __nla_validate_parse: 26 callbacks suppressed [ 740.970632][T30048] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5866'. [ 741.162423][T30067] netlink: 'syz.1.5870': attribute type 12 has an invalid length. [ 741.252222][T30069] 8021q: adding VLAN 0 to HW filter on device .` [ 741.293362][T30069] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 741.882206][T30097] syz_tun: entered promiscuous mode [ 741.899913][T30097] syz_tun: entered allmulticast mode [ 741.925070][T16808] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 741.943776][T16808] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 741.961439][T16808] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 741.971580][T16808] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 741.982486][T16808] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 742.019730][T30097] netlink: 48 bytes leftover after parsing attributes in process `syz.5.5877'. [ 742.419893][T30109] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5878'. [ 742.420495][T30113] Bluetooth: MGMT ver 1.23 [ 742.472654][ T13] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 742.502303][ T13] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 742.662991][T30102] lo speed is unknown, defaulting to 1000 [ 742.801780][T30135] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5884'. [ 742.810243][ T13] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 742.878995][ T13] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 743.118722][ T13] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 743.151604][ T13] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 743.364845][ T13] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 743.386465][T30163] netlink: 64 bytes leftover after parsing attributes in process `syz.5.5890'. [ 743.395604][ T13] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 743.520100][T30164] bridge0: port 1(vlan6) entered blocking state [ 743.547516][T30164] bridge0: port 1(vlan6) entered disabled state [ 743.559013][T30164] vlan6: entered allmulticast mode [ 743.564760][T30164] bridge0: entered allmulticast mode [ 743.578297][T30164] vlan6: left allmulticast mode [ 743.598643][T30164] bridge0: left allmulticast mode [ 743.615356][T30177] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5893'. [ 744.035916][ T5843] Bluetooth: hci5: command tx timeout [ 744.079896][T30193] netlink: 76 bytes leftover after parsing attributes in process `syz.5.5898'. [ 744.417625][T30102] chnl_net:caif_netlink_parms(): no params data found [ 744.478142][T30206] netlink: 'syz.1.5903': attribute type 39 has an invalid length. [ 744.698550][ T13] bond11: left allmulticast mode [ 744.713437][ T13] bridge0: port 2(bond11) entered disabled state [ 744.727553][ T13] bond10: left allmulticast mode [ 744.733630][ T13] bridge0: port 1(bond10) entered disabled state [ 744.912722][ T13] bond3 (unregistering): (slave ip6gre1): Releasing backup interface [ 744.931913][ T13] ip6gre1 (unregistering): left promiscuous mode [ 744.956647][ T13] bond9 (unregistering): (slave ip6gretap1): Removing an active aggregator [ 744.965862][ T13] bond9 (unregistering): (slave ip6gretap1): Releasing backup interface [ 745.451669][T30233] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5910'. [ 745.699427][ T13] bond12 (unregistering): (slave bridge9): Releasing backup interface [ 745.708369][ T13] bridge9 (unregistering): left promiscuous mode [ 745.800141][ T13] .` (unregistering): Released all slaves [ 745.810031][ T13] bond1 (unregistering): Released all slaves [ 745.824641][ T13] bond2 (unregistering): (slave veth3): Releasing backup interface [ 745.832712][ T13] veth3: left promiscuous mode [ 745.845360][ T13] bond2 (unregistering): Released all slaves [ 745.860274][ T13] bond0 (unregistering): left promiscuous mode [ 745.870229][ T13] bond0 (unregistering): Released all slaves [ 745.885082][ T13] bond3 (unregistering): Released all slaves [ 745.903496][ T13] bond4 (unregistering): Released all slaves [ 745.919215][ T13] bond5 (unregistering): Released all slaves [ 745.933680][ T13] bond6 (unregistering): (slave veth5): Releasing backup interface [ 745.943190][ T13] bond6 (unregistering): Released all slaves [ 745.962408][ T13] bond7 (unregistering): Released all slaves [ 745.976631][ T13] bond8 (unregistering): Released all slaves [ 745.988930][ T13] bond9 (unregistering): Released all slaves [ 746.003236][ T13] bond10 (unregistering): Released all slaves [ 746.025570][ T13] bond11 (unregistering): Released all slaves [ 746.040152][ T13] bond12 (unregistering): Released all slaves [ 746.058296][ T13] bond13 (unregistering): Released all slaves [ 746.073101][ T13] bond14 (unregistering): (slave veth11): Releasing backup interface [ 746.081315][ T13] veth11: left promiscuous mode [ 746.092654][ T13] bond14 (unregistering): Released all slaves [ 746.106816][ T13] bond15 (unregistering): Released all slaves [ 746.115860][ T5843] Bluetooth: hci5: command tx timeout [ 746.323953][ T13] : left promiscuous mode [ 746.451866][T30243] netlink: 'syz.1.5912': attribute type 16 has an invalid length. [ 746.463353][T30243] netlink: 64138 bytes leftover after parsing attributes in process `syz.1.5912'. [ 746.491686][T30102] bridge0: port 1(bridge_slave_0) entered blocking state [ 746.519100][T30102] bridge0: port 1(bridge_slave_0) entered disabled state [ 746.541393][T30102] bridge_slave_0: entered allmulticast mode [ 746.567470][T30102] bridge_slave_0: entered promiscuous mode [ 746.591039][T30102] bridge0: port 2(bridge_slave_1) entered blocking state [ 746.617461][T30102] bridge0: port 2(bridge_slave_1) entered disabled state [ 746.626659][T30102] bridge_slave_1: entered allmulticast mode [ 746.650290][T30102] bridge_slave_1: entered promiscuous mode [ 746.683436][ T13] tipc: Disabling bearer [ 746.705761][ T13] tipc: Left network mode [ 746.830423][T30257] batadv_slave_0: entered promiscuous mode [ 746.860434][T30102] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 746.927164][T30102] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 747.051689][T30270] netlink: 'syz.5.5917': attribute type 49 has an invalid length. [ 747.086392][ T1316] lec:lec_start_xmit: lec0:No lecd attached [ 747.115513][T30256] batadv_slave_0: left promiscuous mode [ 747.124349][T30102] team0: Port device team_slave_0 added [ 747.143894][T30102] team0: Port device team_slave_1 added [ 747.323075][T30102] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 747.342197][ T13] IPVS: stopping backup sync thread 23172 ... [ 747.367523][T30102] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 747.396528][T30102] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 747.455187][T30102] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 747.470389][T30102] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 747.514234][T30102] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 747.924210][T30300] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5924'. [ 748.014961][T30102] hsr_slave_0: entered promiscuous mode [ 748.022378][T30102] hsr_slave_1: entered promiscuous mode [ 748.028991][T30102] debugfs: 'hsr0' already exists in 'hsr' [ 748.034761][T30102] Cannot create hsr debugfs directory [ 748.056039][T30306] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5925'. [ 748.114449][T30300] 8021q: adding VLAN 0 to HW filter on device bond12 [ 748.145298][T30303] bond12: option mode: unable to set because the bond device is up [ 748.179280][T30291] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 748.197088][ T5843] Bluetooth: hci5: command tx timeout [ 748.300213][T30291] syzkaller0: entered promiscuous mode [ 748.358219][T30291] syzkaller0: entered allmulticast mode [ 748.479929][T30325] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5927'. [ 748.619874][T30297] lo speed is unknown, defaulting to 1000 [ 748.880400][T30337] netlink: 660 bytes leftover after parsing attributes in process `syz.2.5929'. [ 748.901518][T30337] netlink: 76 bytes leftover after parsing attributes in process `syz.2.5929'. [ 749.141348][T30349] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5932'. [ 749.208391][T30350] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5932'. [ 749.266030][T30354] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5932'. [ 749.276543][T30349] 8021q: adding VLAN 0 to HW filter on device bond0 [ 749.328351][T30349] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5932'. [ 749.425317][ T13] hsr_slave_0: left promiscuous mode [ 749.432178][ T13] hsr_slave_1: left promiscuous mode [ 749.469838][ T13] veth0_macvtap: left promiscuous mode [ 749.510977][ C0] vcan0: j1939_tp_rxtimer: 0xffff888058ca3800: rx timeout, send abort [ 749.858224][T30358] bridge0: port 2(bridge_slave_1) entered listening state [ 749.883686][T30358] bridge0: port 2(bridge_slave_1) entered disabled state [ 750.278993][ T5843] Bluetooth: hci5: command tx timeout [ 750.347715][ T13] IPVS: stop unused estimator thread 0... [ 750.618982][T30386] dvmrp0: entered allmulticast mode [ 750.693584][T10630] IPVS: starting estimator thread 0... [ 750.851449][T30392] IPVS: using max 37 ests per chain, 88800 per kthread [ 750.988733][T30402] netlink: 'syz.3.5943': attribute type 1 has an invalid length. [ 751.218101][T30405] bond13: (slave bridge9): making interface the new active one [ 751.230744][T30405] bond13: (slave bridge9): Enslaving as an active interface with an up link [ 751.346372][T30407] bond13: (slave vlan6): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 751.591137][T30102] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 751.633326][T30102] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 751.672933][T30102] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 751.700933][T30102] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 751.723604][T30102] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 751.754151][T30102] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 751.786456][T30102] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 751.831126][T30102] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 751.861144][T30431] lo: entered allmulticast mode [ 751.873772][T30431] lo: left allmulticast mode [ 752.089556][T30448] xt_hashlimit: size too large, truncated to 1048576 [ 752.128183][T30450] __nla_validate_parse: 2 callbacks suppressed [ 752.128200][T30450] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5952'. [ 752.179828][T30102] 8021q: adding VLAN 0 to HW filter on device bond0 [ 752.273951][T30102] 8021q: adding VLAN 0 to HW filter on device team0 [ 752.325470][ T1116] bridge0: port 1(bridge_slave_0) entered blocking state [ 752.332696][ T1116] bridge0: port 1(bridge_slave_0) entered forwarding state [ 752.383897][ T1116] bridge0: port 2(bridge_slave_1) entered blocking state [ 752.391115][ T1116] bridge0: port 2(bridge_slave_1) entered forwarding state [ 752.456208][T17103] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 752.490790][T17103] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 752.499044][T30460] netlink: 632 bytes leftover after parsing attributes in process `syz.5.5954'. [ 752.502532][T30461] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 752.675510][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5590 ms [ 752.683613][ C1] lec:lec_tx_timeout: lec0 [ 752.770159][T30470] netlink: 84 bytes leftover after parsing attributes in process `syz.1.5956'. [ 752.819454][T30470] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5956'. [ 752.856048][T30470] netlink: 224 bytes leftover after parsing attributes in process `syz.1.5956'. [ 752.874615][T30476] A link change request failed with some changes committed already. Interface veth0_to_bridge may have been left with an inconsistent configuration, please check. [ 753.108196][T30484] netlink: 'syz.1.5958': attribute type 16 has an invalid length. [ 753.109420][T30481] vlan3: entered allmulticast mode [ 753.128904][T30484] netlink: 'syz.1.5958': attribute type 17 has an invalid length. [ 753.154087][T30481] bond0: entered allmulticast mode [ 753.301957][T30102] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 753.486856][T30102] veth0_vlan: entered promiscuous mode [ 753.516971][T30496] netlink: 48 bytes leftover after parsing attributes in process `syz.3.5962'. [ 753.520144][T30499] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5964'. [ 753.542815][T30102] veth1_vlan: entered promiscuous mode [ 753.659696][T30102] veth0_macvtap: entered promiscuous mode [ 753.697534][T30102] veth1_macvtap: entered promiscuous mode [ 753.787501][T30102] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 753.813782][T30511] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5966'. [ 753.851918][T30102] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 753.940594][ T1158] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 753.974066][ T1158] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 754.000143][ T1158] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 754.089176][T30521] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5969'. [ 754.101918][ T1158] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 754.173456][T30525] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5970'. [ 754.204713][T30525] openvswitch: netlink: Invalid VLAN frame [ 754.237187][T30525] batadv_slave_0: Caught tx_queue_len zero misconfig [ 754.304619][ T1158] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 754.328429][ T1158] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 754.420211][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 754.444197][T30532] sctp: [Deprecated]: syz.3.5972 (pid 30532) Use of int in max_burst socket option. [ 754.444197][T30532] Use struct sctp_assoc_value instead [ 754.459755][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 754.489863][T30532] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 754.824126][T30538] bond2: entered promiscuous mode [ 754.848811][T16808] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 754.862906][T16808] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 754.872371][T30538] 8021q: adding VLAN 0 to HW filter on device bond2 [ 754.879400][T16808] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 754.888497][T16808] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 754.896635][T16808] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 755.076905][T30538] 8021q: adding VLAN 0 to HW filter on device bond2 [ 755.106195][T30538] bond2: (slave sit1): The slave device specified does not support setting the MAC address [ 755.140049][T30538] bond2: (slave sit1): Error -95 calling set_mac_address [ 755.293841][T30550] lo speed is unknown, defaulting to 1000 [ 755.422355][T30567] lo speed is unknown, defaulting to 1000 [ 755.446901][T30574] netlink: 'syz.1.5984': attribute type 210 has an invalid length. [ 755.514070][T30575] lo: left allmulticast mode [ 755.813828][T30575] dummy0: left allmulticast mode [ 756.326263][T30593] vlan0: entered promiscuous mode [ 756.341932][T30550] chnl_net:caif_netlink_parms(): no params data found [ 756.652358][T30550] bridge0: port 1(bridge_slave_0) entered blocking state [ 756.679311][T30550] bridge0: port 1(bridge_slave_0) entered disabled state [ 756.723815][T30550] bridge_slave_0: entered allmulticast mode [ 756.761212][T30550] bridge_slave_0: entered promiscuous mode [ 756.800556][T30550] bridge0: port 2(bridge_slave_1) entered blocking state [ 756.830967][T30550] bridge0: port 2(bridge_slave_1) entered disabled state [ 756.848910][T30550] bridge_slave_1: entered allmulticast mode [ 756.867502][T30550] bridge_slave_1: entered promiscuous mode [ 756.946276][T30550] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 756.969422][T30550] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 757.006426][ T5843] Bluetooth: hci2: command tx timeout [ 757.113420][T30550] team0: Port device team_slave_0 added [ 757.136927][T30550] team0: Port device team_slave_1 added [ 757.175156][T30550] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 757.182381][T30550] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 757.229473][T30550] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 757.257433][T30550] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 757.264886][T30550] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 757.295333][T30550] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 757.487729][T30550] hsr_slave_0: entered promiscuous mode [ 757.503979][T30638] xt_hashlimit: size too large, truncated to 1048576 [ 757.509732][T30550] hsr_slave_1: entered promiscuous mode [ 757.520266][T30639] xt_hashlimit: size too large, truncated to 1048576 [ 757.527054][T30550] debugfs: 'hsr0' already exists in 'hsr' [ 757.527078][T30550] Cannot create hsr debugfs directory [ 758.156453][T30663] IPVS: sh: FWM 3 0x00000003 - no destination available [ 758.235676][T30662] tipc: Enabling of bearer rejected, failed to enable media [ 758.400319][T30660] lo speed is unknown, defaulting to 1000 [ 758.783572][T30680] __nla_validate_parse: 4 callbacks suppressed [ 758.783591][T30680] netlink: 4832 bytes leftover after parsing attributes in process `syz.2.6007'. [ 758.960707][T30683] RDS: rds_bind could not find a transport for fc02::, load rds_tcp or rds_rdma? [ 759.029391][T30680] lo speed is unknown, defaulting to 1000 [ 759.077801][ T5843] Bluetooth: hci2: command tx timeout [ 759.144146][T30686] netlink: 'syz.5.6008': attribute type 1 has an invalid length. [ 759.264586][T30695] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 759.316506][T30686] 8021q: adding VLAN 0 to HW filter on device bond3 [ 759.351341][T30691] bond3: (slave geneve3): making interface the new active one [ 759.363534][T30691] bond3: (slave geneve3): Enslaving as an active interface with an up link [ 759.373854][T30690] lo speed is unknown, defaulting to 1000 [ 759.399281][ T1116] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 759.455099][ T1116] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 759.465124][ T1116] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 759.540998][ T1116] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 759.652817][T30550] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 759.676833][T30550] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 759.697680][T30550] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 759.711188][T30550] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 759.728454][T30550] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 759.749527][T30550] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 759.766490][T30550] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 759.803452][T30550] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 760.037641][T30719] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6013'. [ 760.157261][T30728] netlink: 'syz.0.6015': attribute type 3 has an invalid length. [ 760.188080][T30728] netlink: 3 bytes leftover after parsing attributes in process `syz.0.6015'. [ 760.219501][T30719] bond5 (unregistering): Released all slaves [ 760.444488][T30550] 8021q: adding VLAN 0 to HW filter on device bond0 [ 760.491778][T30550] 8021q: adding VLAN 0 to HW filter on device team0 [ 760.528370][T30744] netlink: 'syz.0.6019': attribute type 21 has an invalid length. [ 760.542313][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 760.549529][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 760.555935][T30748] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6021'. [ 760.570508][T17103] bridge0: port 2(bridge_slave_1) entered blocking state [ 760.577747][T17103] bridge0: port 2(bridge_slave_1) entered forwarding state [ 760.693198][T30754] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6022'. [ 760.734377][T30754] netlink: 348 bytes leftover after parsing attributes in process `syz.0.6022'. [ 760.748739][T30754] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6022'. [ 760.768695][T30754] netlink: 348 bytes leftover after parsing attributes in process `syz.0.6022'. [ 760.798997][T30754] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6022'. [ 761.031955][T30762] lo speed is unknown, defaulting to 1000 [ 761.156678][ T5843] Bluetooth: hci2: command tx timeout [ 761.699778][T30803] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6026'. [ 761.923256][T30802] tipc: Enabled bearer , priority 0 [ 762.141398][T30769] lo speed is unknown, defaulting to 1000 [ 762.398062][T30815] nbd: must specify at least one socket [ 762.424371][T30550] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 762.762343][T30550] veth0_vlan: entered promiscuous mode [ 762.829693][T30550] veth1_vlan: entered promiscuous mode [ 763.037639][T30550] veth0_macvtap: entered promiscuous mode [ 763.072562][T30550] veth1_macvtap: entered promiscuous mode [ 763.107774][T30829] mac80211_hwsim hwsim50 syzkaller0: entered promiscuous mode [ 763.117585][T30832] openvswitch: netlink: Port -1 exceeds max allowable 65535 [ 763.132335][T30829] mac80211_hwsim hwsim50 syzkaller0: entered allmulticast mode [ 763.153071][T30829] tipc: Resetting bearer [ 763.237688][ T5843] Bluetooth: hci2: command tx timeout [ 763.377563][T30550] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 763.415982][T30550] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 763.421425][T30840] IPVS: Scheduler module ip_vs_sip not found [ 763.461080][ T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 763.494972][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 763.564509][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 763.589888][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 763.651347][T30848] sit2: entered promiscuous mode [ 763.981352][ T13] tipc: Resetting bearer [ 764.013385][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 764.052068][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 764.161361][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 764.179466][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 764.600945][T30838] netlink: 'syz.0.6038': attribute type 1 has an invalid length. [ 764.873808][T30885] __nla_validate_parse: 4 callbacks suppressed [ 764.873828][T30885] netlink: 52 bytes leftover after parsing attributes in process `syz.3.6048'. [ 765.088065][T30893] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 765.109041][T30893] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 765.122558][T30898] netlink: 'syz.3.6050': attribute type 10 has an invalid length. [ 765.148545][T30898] netlink: 228 bytes leftover after parsing attributes in process `syz.3.6050'. [ 765.307769][T30893] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 765.311506][T30894] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 765.316629][T30893] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 765.403774][T30910] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6052'. [ 765.427994][T30910] netlink: 542 bytes leftover after parsing attributes in process `syz.2.6052'. [ 765.512067][T30898] smc: removing net device wlan0 with user defined pnetid SYZ0 [ 765.843121][T30924] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6053'. [ 765.979547][T30927] syzkaller0: entered promiscuous mode [ 766.001132][T30927] syzkaller0: entered allmulticast mode [ 766.192212][T30934] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6056'. [ 766.234120][T30934] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 766.774084][T30963] netlink: 'syz.3.6060': attribute type 5 has an invalid length. [ 766.907102][T30975] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6063'. [ 767.072083][T30990] xt_TCPMSS: Only works on TCP SYN packets [ 767.145221][T30994] veth1_to_bridge: entered allmulticast mode [ 767.337653][T30991] syzkaller0: entered promiscuous mode [ 767.343279][T30991] syzkaller0: entered allmulticast mode [ 767.364404][T31008] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6068'. [ 767.391697][T31008] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6068'. [ 767.423175][T31008] netlink: 'syz.3.6068': attribute type 5 has an invalid length. [ 767.469912][ T6336] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 767.470800][T31008] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6068'. [ 767.497951][T31008] netlink: 'syz.3.6068': attribute type 5 has an invalid length. [ 767.506266][ T6336] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 767.518395][ T6336] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 767.540863][ T6336] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 770.800480][T31023] lo speed is unknown, defaulting to 1000 [ 770.934175][T31069] __nla_validate_parse: 1 callbacks suppressed [ 770.934192][T31069] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6081'. [ 770.967516][T31069] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6081'. [ 770.988945][T31071] netlink: 'syz.3.6080': attribute type 11 has an invalid length. [ 771.002692][T31069] netlink: 'syz.2.6081': attribute type 7 has an invalid length. [ 771.018356][T31071] netlink: 'syz.3.6080': attribute type 11 has an invalid length. [ 771.037247][T31071] netlink: 204 bytes leftover after parsing attributes in process `syz.3.6080'. [ 771.065072][T31071] netlink: 36 bytes leftover after parsing attributes in process `syz.3.6080'. [ 771.183388][T31081] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6082'. [ 771.300600][ T13] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 771.322702][T17103] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 771.377729][T17103] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 771.398803][T17103] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 771.456887][T31088] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6085'. [ 771.661395][T31088] bridge0: port 2(bridge_slave_1) entered disabled state [ 771.669135][T31088] bridge0: port 1(bridge_slave_0) entered disabled state [ 771.793539][T31088] veth1_to_bridge: left allmulticast mode [ 771.835084][T31088] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 771.853201][T31088] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 772.131704][T31112] tipc: Resetting bearer [ 772.192213][T17103] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 772.207492][T17103] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 772.216690][T17103] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 772.225845][T17103] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 772.257915][T17103] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 772.267962][T17103] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 772.289936][T17103] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 772.318946][T17103] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 772.419039][T17103] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 772.439634][T17103] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 772.459268][T17103] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 772.492618][T17103] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 772.584858][T31141] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6099'. [ 772.630447][T31141] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6099'. [ 772.659284][T31146] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_tx_wq": -EINTR [ 772.894691][T31165] netlink: 'syz.3.6103': attribute type 10 has an invalid length. [ 773.006457][T31165] team0: Port device dummy0 added [ 773.073535][T31173] netlink: 'syz.5.6106': attribute type 178 has an invalid length. [ 773.195021][T31179] netlink: 169 bytes leftover after parsing attributes in process `syz.2.6108'. [ 773.291072][T31186] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6110'. [ 773.369878][ T806] IPVS: starting estimator thread 0... [ 773.476377][T31193] IPVS: using max 35 ests per chain, 84000 per kthread [ 773.855232][T31219] IPVS: set_ctl: invalid protocol: 255 100.1.1.0:20003 [ 773.875256][T31222] openvswitch: netlink: Flow actions attr not present in new flow. [ 774.266761][T31247] €Â0: renamed from batadv_slave_1 [ 774.319641][T31247] netlink: 'syz.5.6131': attribute type 1 has an invalid length. [ 774.490331][T31255] bond5: (slave vxcan1): The slave device specified does not support setting the MAC address [ 774.547296][T31267] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 774.554580][T31267] IPv6: NLM_F_CREATE should be set when creating new route [ 774.561846][T31267] IPv6: NLM_F_CREATE should be set when creating new route [ 774.569052][T31267] IPv6: NLM_F_CREATE should be set when creating new route [ 774.621733][T31255] bond5: (slave vxcan1): Error -95 calling set_mac_address [ 774.730596][T31247] bond5: (slave gretap1): making interface the new active one [ 774.746116][T31247] bond5: (slave gretap1): Enslaving as an active interface with an up link [ 774.817358][T31267] macvlan3: entered promiscuous mode [ 774.835737][T31267] macvlan3: entered allmulticast mode [ 774.848624][T31267] bond5: entered promiscuous mode [ 774.863955][T31267] gretap1: entered promiscuous mode [ 774.875372][T31267] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 774.889731][T31267] bond5: (slave macvlan3): the slave hw address is in use by the bond; giving it the hw address of gretap1 [ 774.902070][T31267] bond5: left promiscuous mode [ 774.908552][T31267] gretap1: left promiscuous mode [ 775.084757][T31291] xt_recent: Unsupported userspace flags (000000b1) [ 775.188801][T31295] ipvlan2: entered allmulticast mode [ 775.209197][T31295] syz_tun: entered allmulticast mode [ 775.384064][T31305] vlan0: entered promiscuous mode [ 775.447083][T31308] ip6gre1: entered promiscuous mode [ 775.457901][T31308] ip6gre1: entered allmulticast mode [ 775.500378][T31301] lo speed is unknown, defaulting to 1000 [ 775.618313][T31312] lo speed is unknown, defaulting to 1000 [ 776.011720][T31314] __nla_validate_parse: 13 callbacks suppressed [ 776.011737][T31314] netlink: 132 bytes leftover after parsing attributes in process `syz.0.6149'. [ 776.107557][T31332] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6152'. [ 776.162475][T31332] IPVS: Error connecting to the multicast addr [ 776.251087][T14441] lec:lec_start_xmit: lec0:No lecd attached [ 776.287361][T31343] bond9: Removing last arp target with arp_interval on [ 776.445177][T31353] openvswitch: netlink: VXLAN extension message has 3 unknown bytes. [ 776.521611][T31349] lo speed is unknown, defaulting to 1000 [ 776.806314][T31362] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6160'. [ 776.827519][T31361] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6159'. [ 776.977060][T31362] bond10: entered promiscuous mode [ 777.003416][T31362] 8021q: adding VLAN 0 to HW filter on device bond10 [ 777.072493][T31363] workqueue: Failed to create a rescuer kthread for wq "bond11": -EINTR [ 777.264650][T31392] x_tables: unsorted underflow at hook 2 [ 777.297075][T31395] netlink: 'syz.1.6164': attribute type 30 has an invalid length. [ 777.368826][T31397] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6165'. [ 777.922174][T31395] bond3: option arp_missed_max: invalid value (0) [ 777.935676][T31395] bond3: option arp_missed_max: allowed values 1 - 255 [ 777.995313][T31395] bond3 (unregistering): Released all slaves [ 778.171636][T31408] kthread_run failed with err -4 [ 778.501107][T31444] set match dimension is over the limit! [ 778.640205][T31441] bond6: option tlb_dynamic_lb: invalid value (5) [ 778.669812][T31441] bond6 (unregistering): Released all slaves [ 778.845302][T31461] syzkaller0: entered promiscuous mode [ 779.023602][T31478] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6182'. [ 779.053337][T31476] netlink: 4356 bytes leftover after parsing attributes in process `syz.2.6181'. [ 779.086454][T31476] netlink: 4356 bytes leftover after parsing attributes in process `syz.2.6181'. [ 779.121826][T31484] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6185'. [ 779.432401][T31494] netlink: 192 bytes leftover after parsing attributes in process `syz.1.6189'. [ 779.583940][T31497] lo speed is unknown, defaulting to 1000 [ 779.660104][T31517] netlink: 'syz.0.6195': attribute type 1 has an invalid length. [ 779.724326][T31523] xt_hashlimit: size too large, truncated to 1048576 [ 779.724332][T31522] xt_hashlimit: size too large, truncated to 1048576 [ 780.164348][T31543] syzkaller0: entered promiscuous mode [ 780.190332][T31543] syzkaller0: entered allmulticast mode [ 780.212246][T31543] TC_ACT_REPEAT abuse ? [ 780.720427][T31570] pim6reg1: entered promiscuous mode [ 780.726092][T31570] pim6reg1: entered allmulticast mode [ 781.690334][T31610] __nla_validate_parse: 5 callbacks suppressed [ 781.690352][T31610] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6218'. [ 781.715500][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5460 ms [ 781.723542][ C1] lec:lec_tx_timeout: lec0 [ 781.740424][T31610] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6218'. [ 781.767504][T31611] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6218'. [ 781.768191][T31613] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6218'. [ 781.778206][T31611] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6218'. [ 781.800306][T31611] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6218'. [ 781.810837][T31611] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6218'. [ 781.824688][T31611] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6218'. [ 781.886352][T31613] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6218'. [ 781.969303][T31613] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6218'. [ 782.301496][T31629] team_slave_0: entered promiscuous mode [ 782.319754][T31629] team_slave_0: left promiscuous mode [ 782.509015][T31642] netlink: 'syz.0.6227': attribute type 8 has an invalid length. [ 782.614043][T31642] bond0: entered promiscuous mode [ 782.627863][T31642] bond_slave_0: entered promiscuous mode [ 782.638286][T31642] bond_slave_1: entered promiscuous mode [ 782.651721][T31642] gretap0: entered promiscuous mode [ 782.673332][T31642] hsr1: entered promiscuous mode [ 782.707421][T31649] ipvlan2: entered allmulticast mode [ 782.715636][T31649] syz_tun: entered allmulticast mode [ 782.966290][T31669] ¾x9ÿ: renamed from bridge_slave_0 [ 783.021823][T31667] bridge_slave_0: left allmulticast mode [ 783.043649][T31667] bridge_slave_0: left promiscuous mode [ 783.062354][T31667] bridge0: port 1(bridge_slave_0) entered disabled state [ 783.111408][T31667] bridge_slave_1: left promiscuous mode [ 783.130264][T31667] bridge0: port 2(bridge_slave_1) entered disabled state [ 783.187747][T31667] bond0: (slave bond_slave_0): Releasing backup interface [ 783.247430][T31667] bond0: (slave bond_slave_1): Releasing backup interface [ 783.331910][T31667] team0: Port device team_slave_0 removed [ 783.363080][T31667] team0: Port device team_slave_1 removed [ 783.391341][T31667] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 783.766952][T31699] policy can only be matched on NF_INET_PRE_ROUTING [ 783.766973][T31699] unable to load match [ 783.801569][T31701] netlink: 'syz.5.6239': attribute type 1 has an invalid length. [ 783.926862][T31701] 8021q: adding VLAN 0 to HW filter on device bond6 [ 784.007094][T31705] bond6 (unregistering): Released all slaves [ 784.391549][T31722] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check. [ 784.471233][T31722] syzkaller0: entered promiscuous mode [ 784.506025][T31722] syzkaller0: entered allmulticast mode [ 785.893798][T31785] netlink: 'syz.3.6260': attribute type 4 has an invalid length. [ 785.919768][T31788] netlink: 'syz.3.6260': attribute type 4 has an invalid length. [ 787.164081][T31841] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 787.369194][T31850] __nla_validate_parse: 11 callbacks suppressed [ 787.369215][T31850] netlink: 88 bytes leftover after parsing attributes in process `syz.1.6273'. [ 787.902183][T31874] xt_hashlimit: max too large, truncated to 1048576 [ 787.909594][T31874] xt_ecn: cannot match TCP bits for non-tcp packets [ 788.048017][T31877] sysfs: cannot create duplicate filename '/class/ieee80211/!' [ 788.067966][T31877] CPU: 0 UID: 0 PID: 31877 Comm: syz.2.6280 Not tainted syzkaller #0 PREEMPT(full) [ 788.067991][T31877] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 788.068004][T31877] Call Trace: [ 788.068012][T31877] [ 788.068021][T31877] dump_stack_lvl+0xe8/0x150 [ 788.068062][T31877] sysfs_warn_dup+0x8e/0xa0 [ 788.068084][T31877] sysfs_do_create_link_sd+0xc0/0x110 [ 788.068108][T31877] device_add_class_symlinks+0x1cf/0x240 [ 788.068139][T31877] device_add+0x475/0xbb0 [ 788.068170][T31877] wiphy_register+0x1dc5/0x2dc0 [ 788.068211][T31877] ? __pfx_wiphy_register+0x10/0x10 [ 788.068234][T31877] ? __pfx_netdev_run_todo+0x10/0x10 [ 788.068256][T31877] ? minstrel_ht_alloc+0x6e0/0x7e0 [ 788.068282][T31877] ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0 [ 788.068311][T31877] ieee80211_register_hw+0x3d82/0x4a70 [ 788.068352][T31877] ? ieee80211_register_hw+0x1901/0x4a70 [ 788.068400][T31877] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 788.068429][T31877] ? __asan_memset+0x22/0x50 [ 788.068449][T31877] ? __hrtimer_setup+0x1b7/0x260 [ 788.068470][T31877] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 788.068496][T31877] mac80211_hwsim_new_radio+0x3334/0x5ba0 [ 788.068548][T31877] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 788.068567][T31877] ? kstrndup+0xbf/0x160 [ 788.068602][T31877] hwsim_new_radio_nl+0xf6a/0x1c00 [ 788.068647][T31877] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 788.068677][T31877] ? rcu_is_watching+0x15/0xb0 [ 788.068697][T31877] ? trace_kmalloc+0x2a/0xf0 [ 788.068726][T31877] ? __nla_parse+0x40/0x60 [ 788.068751][T31877] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 788.068776][T31877] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 788.068806][T31877] genl_family_rcv_msg_doit+0x22a/0x330 [ 788.068838][T31877] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 788.068876][T31877] ? bpf_lsm_capable+0x9/0x20 [ 788.068901][T31877] ? security_capable+0x7e/0x2c0 [ 788.068935][T31877] genl_rcv_msg+0x61c/0x7a0 [ 788.068965][T31877] ? __pfx_genl_rcv_msg+0x10/0x10 [ 788.068987][T31877] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 788.069024][T31877] netlink_rcv_skb+0x232/0x4b0 [ 788.069045][T31877] ? __pfx_genl_rcv_msg+0x10/0x10 [ 788.069076][T31877] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 788.069111][T31877] ? down_read+0x270/0x2e0 [ 788.069136][T31877] ? genl_rcv+0xd/0x40 [ 788.069161][T31877] genl_rcv+0x28/0x40 [ 788.069180][T31877] netlink_unicast+0x75c/0x8e0 [ 788.069217][T31877] netlink_sendmsg+0x813/0xb40 [ 788.069246][T31877] ? __pfx_netlink_sendmsg+0x10/0x10 [ 788.069268][T31877] ? aa_sock_msg_perm+0xf1/0x1b0 [ 788.069287][T31877] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 788.069310][T31877] ____sys_sendmsg+0x972/0x9f0 [ 788.069330][T31877] ? __might_fault+0xaf/0x130 [ 788.069357][T31877] ? __pfx_____sys_sendmsg+0x10/0x10 [ 788.069390][T31877] ? import_iovec+0x73/0xa0 [ 788.069414][T31877] ___sys_sendmsg+0x2a5/0x360 [ 788.069432][T31877] ? __lock_acquire+0x6b5/0x2cf0 [ 788.069462][T31877] ? __pfx____sys_sendmsg+0x10/0x10 [ 788.069488][T31877] ? futex_wait+0x2a2/0x390 [ 788.069537][T31877] ? __fget_files+0x2a/0x420 [ 788.069555][T31877] ? __fget_files+0x3a0/0x420 [ 788.069585][T31877] __x64_sys_sendmsg+0x1bd/0x2a0 [ 788.069609][T31877] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 788.069638][T31877] ? rcu_is_watching+0x15/0xb0 [ 788.069668][T31877] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 788.069688][T31877] do_syscall_64+0x15f/0xf80 [ 788.069711][T31877] ? trace_irq_disable+0x3b/0x140 [ 788.069733][T31877] ? clear_bhb_loop+0x40/0x90 [ 788.069754][T31877] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 788.069773][T31877] RIP: 0033:0x7ffa6f79cdd9 [ 788.069790][T31877] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 788.069804][T31877] RSP: 002b:00007ffa705e0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 788.069822][T31877] RAX: ffffffffffffffda RBX: 00007ffa6fa15fa0 RCX: 00007ffa6f79cdd9 [ 788.069835][T31877] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000006 [ 788.069846][T31877] RBP: 00007ffa6f832d69 R08: 0000000000000000 R09: 0000000000000000 [ 788.069857][T31877] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 788.069867][T31877] R13: 00007ffa6fa16038 R14: 00007ffa6fa15fa0 R15: 00007fffad48c838 [ 788.069899][T31877] [ 788.133450][T31889] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6283'. [ 788.613510][T31904] netlink: 11 bytes leftover after parsing attributes in process `syz.2.6287'. [ 788.801366][T31913] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6290'. [ 788.810875][T31913] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6290'. [ 789.011568][T31928] netlink: 'syz.0.6294': attribute type 1 has an invalid length. [ 789.650130][T31953] netlink: 36 bytes leftover after parsing attributes in process `syz.5.6300'. [ 790.403950][T31928] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 790.404199][T31940] netlink: 'syz.3.6292': attribute type 3 has an invalid length. [ 790.584919][ T1164] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 790.619983][ T1164] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 790.637625][ T1164] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 790.680243][ T1164] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 790.722304][ T1164] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 790.757781][ T1164] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 790.801680][ T1164] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 790.852740][ T1164] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 790.920535][T31972] netlink: 72 bytes leftover after parsing attributes in process `syz.5.6304'. [ 790.967972][T31972] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6304'. [ 790.986166][T31972] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6304'. [ 791.059363][T31959] lo speed is unknown, defaulting to 1000 [ 791.060839][T31981] netlink: 152 bytes leftover after parsing attributes in process `syz.1.6306'. [ 791.309377][T32004] syzkaller1: entered promiscuous mode [ 791.315032][T32004] syzkaller1: entered allmulticast mode [ 793.785332][T31983] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 793.858561][T31991] smc: adding net device wlan0 with user defined pnetid SYZ0 [ 794.057825][T32020] __nla_validate_parse: 2 callbacks suppressed [ 794.057843][T32020] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6314'. [ 794.078855][T32023] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6313'. [ 794.281277][T32020] bond3: Invalid ad_actor_system MAC address. [ 794.319515][T32020] bond3: option ad_actor_system: invalid value (7) [ 794.365394][T32020] bond3 (unregistering): Released all slaves [ 794.633955][T32036] lo speed is unknown, defaulting to 1000 [ 794.920161][T32065] netlink: 60 bytes leftover after parsing attributes in process `syz.5.6322'. [ 795.179510][T32044] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 795.195269][T32070] netlink: 'syz.5.6323': attribute type 1 has an invalid length. [ 795.220823][T32070] netlink: 20 bytes leftover after parsing attributes in process `syz.5.6323'. [ 795.245566][T32070] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6323'. [ 795.275757][T32075] netlink: 'syz.5.6323': attribute type 10 has an invalid length. [ 795.341035][T32075] team0: Port device veth1 added [ 795.418200][T32084] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6325'. [ 795.487143][T32084] gtp1: entered promiscuous mode [ 795.530616][T32084] gtp1: entered allmulticast mode [ 795.930755][T32119] netlink: 128 bytes leftover after parsing attributes in process `syz.0.6334'. [ 795.935720][T32113] netlink: 'syz.2.6333': attribute type 21 has an invalid length. [ 795.967184][T32113] netlink: 128 bytes leftover after parsing attributes in process `syz.2.6333'. [ 795.981344][T32110] lo speed is unknown, defaulting to 1000 [ 795.998957][T32113] netlink: 'syz.2.6333': attribute type 4 has an invalid length. [ 796.013868][T32113] netlink: 'syz.2.6333': attribute type 5 has an invalid length. [ 796.022667][T32113] netlink: 3 bytes leftover after parsing attributes in process `syz.2.6333'. [ 796.109063][T32113] mac80211_hwsim hwsim50 syzkaller0: left promiscuous mode [ 796.139037][T32113] mac80211_hwsim hwsim50 syzkaller0: left allmulticast mode [ 796.154918][T32113] tipc: Resetting bearer [ 796.830239][T32158] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6343'. [ 796.935167][T32162] syzkaller0: entered promiscuous mode [ 797.176507][T32180] IPv6: sit1: Disabled Multicast RS [ 797.298679][T32184] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 797.469820][T32201] syzkaller1: entered promiscuous mode [ 797.480195][T32201] syzkaller1: entered allmulticast mode [ 797.519309][T32198] geneve1: left promiscuous mode [ 797.527698][T32198] sit1: left allmulticast mode [ 797.555322][T32198] vlan3: left allmulticast mode [ 797.564855][T32198] bond0: left allmulticast mode [ 797.598718][T32207] netlink: 'syz.2.6357': attribute type 3 has an invalid length. [ 797.608104][T32207] netlink: 'syz.2.6357': attribute type 3 has an invalid length. [ 797.647110][T32213] netlink: 'syz.1.6358': attribute type 8 has an invalid length. [ 797.684074][ T13] netdevsim netdevsim5 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 797.715069][ T13] netdevsim netdevsim5 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 797.742599][ T13] netdevsim netdevsim5 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 797.822679][T32218] Bluetooth: MGMT ver 1.23 [ 797.854311][T32219] xt_hashlimit: size too large, truncated to 1048576 [ 797.861455][ T13] netdevsim netdevsim5 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 798.006864][T20026] IPVS: starting estimator thread 0... [ 798.118790][T32236] IPVS: using max 31 ests per chain, 74400 per kthread [ 798.133630][T32228] netlink: 'syz.3.6363': attribute type 39 has an invalid length. [ 798.453823][T32251] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 798.483249][T32253] bond3: option arp_validate: mode dependency failed, not supported in mode 802.3ad(4) [ 798.494768][T32253] bond3 (unregistering): Released all slaves [ 798.529032][T32254] bond3: option arp_validate: mode dependency failed, not supported in mode 802.3ad(4) [ 798.567458][T32254] bond3 (unregistering): Released all slaves [ 798.773805][T32263] sctp: [Deprecated]: syz.5.6372 (pid 32263) Use of struct sctp_assoc_value in delayed_ack socket option. [ 798.773805][T32263] Use struct sctp_sack_info instead [ 798.813752][T32267] netlink: 'syz.1.6374': attribute type 32 has an invalid length. [ 799.120627][T32282] __nla_validate_parse: 5 callbacks suppressed [ 799.120640][T32282] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6378'. [ 799.224257][T32287] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6378'. [ 799.402832][T32289] bond11: entered promiscuous mode [ 799.408678][T32289] 8021q: adding VLAN 0 to HW filter on device bond11 [ 799.661764][T32306] tipc: Enabling of bearer rejected, failed to enable media [ 800.015047][T32317] bridge2: the hash_elasticity option has been deprecated and is always 16 [ 800.031664][T32317] bridge2: entered allmulticast mode [ 800.166892][T32336] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6396'. [ 800.482274][T32355] netlink: 64 bytes leftover after parsing attributes in process `syz.3.6401'. [ 800.503803][T32355] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6401'. [ 800.548465][T32355] bond1 (unregistering): Released all slaves [ 800.579216][T32363] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6401'. [ 800.651450][T32363] macvlan2: entered allmulticast mode [ 800.673484][T32363] hsr0: entered allmulticast mode [ 800.700576][T32363] hsr_slave_0: entered allmulticast mode [ 800.715010][T32363] hsr_slave_1: entered allmulticast mode [ 800.743039][T32367] validate_nla: 4 callbacks suppressed [ 800.743053][T32367] netlink: 'syz.5.6403': attribute type 4 has an invalid length. [ 800.761010][T32367] netlink: 240 bytes leftover after parsing attributes in process `syz.5.6403'. [ 800.789175][T32368] netlink: 'syz.5.6403': attribute type 4 has an invalid length. [ 800.819962][T32368] netlink: 240 bytes leftover after parsing attributes in process `syz.5.6403'. [ 800.895215][T32376] syzkaller0: entered promiscuous mode [ 800.928689][T32376] syzkaller0: entered allmulticast mode [ 800.959188][T32381] netlink: 44 bytes leftover after parsing attributes in process `syz.5.6409'. [ 800.993055][T32383] hsr0: left allmulticast mode [ 801.005687][T32383] hsr_slave_0: left allmulticast mode [ 801.020128][T32383] hsr_slave_1: left allmulticast mode [ 801.109549][T32392] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6412'. [ 801.164900][T32383] vlan2: entered allmulticast mode [ 801.176116][T32383] bridge0: port 3(vlan2) entered blocking state [ 801.194156][T32383] bridge0: port 3(vlan2) entered disabled state [ 801.222184][T32383] vlan2: entered promiscuous mode [ 801.261359][T32394] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 801.870560][T32424] veth3: entered promiscuous mode [ 801.946594][T32425] veth5: entered promiscuous mode [ 804.416759][T32409] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 804.620943][T32466] __nla_validate_parse: 9 callbacks suppressed [ 804.620961][T32466] netlink: 660 bytes leftover after parsing attributes in process `syz.3.6430'. [ 804.649020][T32466] netlink: 76 bytes leftover after parsing attributes in process `syz.3.6430'. [ 804.681759][T32470] netlink: 'syz.5.6431': attribute type 1 has an invalid length. [ 804.703268][T32474] xt_hashlimit: max too large, truncated to 1048576 [ 804.710924][T32470] netlink: 244 bytes leftover after parsing attributes in process `syz.5.6431'. [ 804.720523][T32474] xt_bpf: check failed: parse error [ 804.905040][T32480] IPv6: sit3: Disabled Multicast RS [ 804.941001][T32485] macsec1: entered allmulticast mode [ 804.963912][T32485] macsec0: entered allmulticast mode [ 804.978278][T32485] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 805.055067][T32495] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6437'. [ 805.154571][T32500] sctp: [Deprecated]: syz.2.6438 (pid 32500) Use of struct sctp_assoc_value in delayed_ack socket option. [ 805.154571][T32500] Use struct sctp_sack_info instead [ 805.157069][T32501] netlink: 4768 bytes leftover after parsing attributes in process `syz.3.6439'. [ 805.196156][T32501] netlink: 4768 bytes leftover after parsing attributes in process `syz.3.6439'. [ 805.233564][T32501] netlink: 'syz.3.6439': attribute type 21 has an invalid length. [ 805.263324][T32501] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6439'. [ 805.460466][T32515] lo speed is unknown, defaulting to 1000 [ 805.469686][T32521] netlink: 'syz.3.6443': attribute type 6 has an invalid length. [ 805.664168][T32528] netlink: 'syz.5.6448': attribute type 13 has an invalid length. [ 805.675557][T32528] netlink: 'syz.5.6448': attribute type 17 has an invalid length. [ 805.690632][T32522] lo speed is unknown, defaulting to 1000 [ 805.842106][T32536] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6448'. [ 805.857917][T32528] bridge0: left promiscuous mode [ 805.866656][T32528] 8021q: adding VLAN 0 to HW filter on device team0 [ 805.881040][T32528] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 806.943106][T32591] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6457'. [ 807.057723][T32595] netlink: 'syz.1.6458': attribute type 9 has an invalid length. [ 807.281647][T32597] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 808.530164][ T1316] lec:lec_start_xmit: lec0:No lecd attached [ 809.030356][T32545] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 809.267944][T32666] macsec0: entered promiscuous mode [ 809.351169][T32669] x_tables: duplicate underflow at hook 3 [ 809.440648][T32671] netlink: 36 bytes leftover after parsing attributes in process `syz.3.6472'. [ 809.603756][T32682] tipc: Started in network mode [ 809.632097][T32682] tipc: Node identity d2b461b169eb, cluster identity 4711 [ 809.663847][T32682] tipc: Enabled bearer , priority 0 [ 809.746755][T32681] tipc: Disabling bearer [ 810.938254][T32748] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6487'. [ 811.038955][T32751] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6488'. [ 811.086087][T32737] bridge0: port 2(bridge_slave_1) entered disabled state [ 811.093816][T32737] bridge0: port 1(bridge_slave_0) entered disabled state [ 811.110559][T32751] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input7 [ 811.406725][T32737] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 811.440492][T32737] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 811.867275][T32756] netlink: 'syz.3.6489': attribute type 39 has an invalid length. [ 811.893392][ T13] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 811.902499][ T13] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 811.915987][T32724] lo speed is unknown, defaulting to 1000 [ 811.945830][ T13] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 812.017819][ T13] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 812.220038][ T303] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6494'. [ 812.242097][ T305] netlink: 'syz.3.6495': attribute type 1 has an invalid length. [ 812.250991][ T305] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 812.434189][ T315] netlink: 36 bytes leftover after parsing attributes in process `syz.3.6496'. [ 812.489175][ T315] netlink: 'syz.3.6496': attribute type 1 has an invalid length. [ 812.598582][ T323] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6500'. [ 812.674171][ T315] 8021q: adding VLAN 0 to HW filter on device bond1 [ 813.438545][ T343] lo speed is unknown, defaulting to 1000 [ 813.715948][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5180 ms [ 813.724014][ C1] lec:lec_tx_timeout: lec0 [ 814.061005][ T374] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6516'. [ 814.093902][ T378] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 814.139431][ T378] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 814.153025][T28853] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 814.163624][ T376] macvtap1: entered promiscuous mode [ 814.170435][ T376] bridge0: entered promiscuous mode [ 814.176436][T28853] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 814.186264][T28853] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 814.210604][ T376] bridge0: port 3(macvtap1) entered blocking state [ 814.218359][ T376] bridge0: port 3(macvtap1) entered disabled state [ 814.245885][ T376] macvtap1: entered allmulticast mode [ 814.258359][ T376] bridge0: entered allmulticast mode [ 814.299140][ T376] macvtap1: left allmulticast mode [ 814.319496][ T376] bridge0: left allmulticast mode [ 814.340068][ T376] bridge0: left promiscuous mode [ 814.509352][ T388] netlink: 104 bytes leftover after parsing attributes in process `syz.5.6519'. [ 814.518528][ T369] lo speed is unknown, defaulting to 1000 [ 814.756455][ T397] netlink: 'syz.0.6521': attribute type 1 has an invalid length. [ 814.770938][ T377] lo speed is unknown, defaulting to 1000 [ 814.779292][ T397] netlink: 1008 bytes leftover after parsing attributes in process `syz.0.6521'. [ 815.111559][ T416] netlink: 32 bytes leftover after parsing attributes in process `syz.5.6529'. [ 815.165763][ T416] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6529'. [ 815.308158][ T425] lo speed is unknown, defaulting to 1000 [ 815.408827][ T377] chnl_net:caif_netlink_parms(): no params data found [ 815.499201][ T434] lo speed is unknown, defaulting to 1000 [ 815.715944][T28853] Bluetooth: hci3: command 0x0401 tx timeout [ 815.729284][ T447] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 815.729646][ T448] netlink: 'syz.5.6534': attribute type 11 has an invalid length. [ 815.746693][ T447] batadv1: entered promiscuous mode [ 815.755160][ T447] team0: Port device batadv1 added [ 815.762557][ T377] bridge0: port 1(bridge_slave_0) entered blocking state [ 815.775787][ T377] bridge0: port 1(bridge_slave_0) entered disabled state [ 815.783708][ T377] bridge_slave_0: entered allmulticast mode [ 815.793753][ T377] bridge_slave_0: entered promiscuous mode [ 815.819995][ T377] bridge0: port 2(bridge_slave_1) entered blocking state [ 815.832831][ T377] bridge0: port 2(bridge_slave_1) entered disabled state [ 815.855928][ T377] bridge_slave_1: entered allmulticast mode [ 815.863999][ T377] bridge_slave_1: entered promiscuous mode [ 815.959252][ T377] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 815.972035][ T377] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 815.983537][ T452] __nla_validate_parse: 3 callbacks suppressed [ 815.983555][ T452] netlink: 36 bytes leftover after parsing attributes in process `syz.3.6536'. [ 816.141473][ T377] team0: Port device team_slave_0 added [ 816.150626][ T377] team0: Port device team_slave_1 added [ 816.192174][ T456] netlink: 'syz.0.6537': attribute type 39 has an invalid length. [ 816.275821][T16808] Bluetooth: hci4: command tx timeout [ 816.390726][ T377] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 816.436840][ T377] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 816.440312][ T465] can: request_module (can-proto-3) failed. [ 816.471196][ T377] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 816.499103][ T377] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 816.528737][ T377] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 816.611036][ T377] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 816.643755][ T476] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 816.822984][ T377] hsr_slave_0: entered promiscuous mode [ 816.846874][ T377] hsr_slave_1: entered promiscuous mode [ 816.864332][ T377] debugfs: 'hsr0' already exists in 'hsr' [ 816.875831][ T377] Cannot create hsr debugfs directory [ 817.048249][ T499] lo speed is unknown, defaulting to 1000 [ 817.133523][ T507] syzkaller1: entered allmulticast mode [ 817.191797][ T488] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6542'. [ 817.344097][ T516] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6549'. [ 817.816708][ T535] netlink: 41 bytes leftover after parsing attributes in process `syz.0.6553'. [ 817.833154][ T535] netlink: 116 bytes leftover after parsing attributes in process `syz.0.6553'. [ 817.875334][ T535] netlink: 41 bytes leftover after parsing attributes in process `syz.0.6553'. [ 817.904727][ T534] netlink: 41 bytes leftover after parsing attributes in process `syz.0.6553'. [ 817.916641][ T534] netlink: 116 bytes leftover after parsing attributes in process `syz.0.6553'. [ 817.925911][ T534] netlink: 41 bytes leftover after parsing attributes in process `syz.0.6553'. [ 818.357446][T16808] Bluetooth: hci4: command tx timeout [ 818.396450][ T377] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 818.403746][ T554] netlink: 34 bytes leftover after parsing attributes in process `syz.0.6558'. [ 818.440812][ T377] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 818.464954][ T377] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 818.501836][ T377] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 818.529233][ T377] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 818.542890][ T561] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 818.556474][ T377] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 818.569841][ T377] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 818.590185][ T377] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 818.787809][ T377] 8021q: adding VLAN 0 to HW filter on device bond0 [ 818.847690][ T377] 8021q: adding VLAN 0 to HW filter on device team0 [ 818.881305][ T1158] bridge0: port 1(bridge_slave_0) entered blocking state [ 818.888549][ T1158] bridge0: port 1(bridge_slave_0) entered forwarding state [ 819.035162][ T577] bond3: entered promiscuous mode [ 819.041751][ T577] 8021q: adding VLAN 0 to HW filter on device bond3 [ 819.067315][ T579] bridge2: entered promiscuous mode [ 819.073373][ T579] bond3: (slave bridge2): Enslaving as an active interface with an up link [ 819.086369][ T1158] bridge0: port 2(bridge_slave_1) entered blocking state [ 819.093539][ T1158] bridge0: port 2(bridge_slave_1) entered forwarding state [ 819.215835][ T595] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 819.278481][ T599] x_tables: ip_tables: RATEEST.0 target: invalid size 32 (kernel) != (user) 0 [ 819.312972][ T600] vlan2: entered promiscuous mode [ 819.328357][ T600] bridge0: entered promiscuous mode [ 819.473540][ T606] tipc: Enabled bearer , priority 0 [ 819.510563][ T602] syzkaller0: entered promiscuous mode [ 819.537201][ T602] syzkaller0: entered allmulticast mode [ 819.584427][ T601] tipc: Resetting bearer [ 819.672544][ T601] tipc: Disabling bearer [ 819.856813][ T634] Can't find ip_set type hash:ip,por [ 819.921282][ T641] Bluetooth: MGMT ver 1.23 [ 819.973117][ T377] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 820.149293][ T377] veth0_vlan: entered promiscuous mode [ 820.232899][ T377] veth1_vlan: entered promiscuous mode [ 820.236871][ T662] netlink: 'syz.0.6583': attribute type 1 has an invalid length. [ 820.295942][ T377] veth0_macvtap: entered promiscuous mode [ 820.310202][ T377] veth1_macvtap: entered promiscuous mode [ 820.354500][ T377] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 820.409394][ T669] syzkaller0: entered promiscuous mode [ 820.415007][ T669] syzkaller0: entered allmulticast mode [ 820.433437][ T377] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 820.440941][T16808] Bluetooth: hci4: command tx timeout [ 820.515165][ T982] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 820.559922][ T982] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 820.582636][ T982] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 820.622705][ T982] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 820.774104][ T1158] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 820.782922][ T1158] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 820.916211][ T982] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 820.934290][ T982] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 821.252667][ T712] xt_CT: You must specify a L4 protocol and not use inversions on it [ 821.253178][ T712] __nla_validate_parse: 5 callbacks suppressed [ 821.253194][ T712] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6592'. [ 821.346237][ T718] netlink: 'syz.5.6592': attribute type 39 has an invalid length. [ 821.372035][ T712] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6592'. [ 821.414313][ T712] netlink: 20 bytes leftover after parsing attributes in process `syz.5.6592'. [ 821.720622][ T737] openvswitch: netlink: Duplicate or invalid key (type 0). [ 821.731471][ T738] netlink: 'syz.2.6601': attribute type 1 has an invalid length. [ 821.739603][ T737] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 821.782125][ T738] bond0: (slave ip6erspan0): Enslaving as an active interface with an up link [ 821.921853][ T746] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6603'. [ 822.110832][ T741] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6603'. [ 822.267540][ T766] netlink: 'syz.1.6607': attribute type 11 has an invalid length. [ 822.291830][ T766] netlink: 199828 bytes leftover after parsing attributes in process `syz.1.6607'. [ 822.314268][ T771] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6608'. [ 822.344045][ T771] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6608'. [ 822.361014][ T771] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6608'. [ 822.380221][ T771] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6608'. [ 822.434009][ T776] netlink: 'syz.5.6610': attribute type 4 has an invalid length. [ 822.517089][T16808] Bluetooth: hci4: command tx timeout [ 822.544165][ T778] syzkaller0: entered promiscuous mode [ 822.550455][ T778] syzkaller0: entered allmulticast mode [ 823.546591][ T828] bridge0: port 2(bridge_slave_1) entered disabled state [ 823.554271][ T828] bridge0: port 1(bridge_slave_0) entered disabled state [ 823.715003][ T828] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 823.748013][ T828] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 824.032556][T17103] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 824.070157][T17103] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 824.088053][T17103] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 824.137311][ T836] tun0: tun_chr_ioctl cmd 1074025675 [ 824.159583][ T836] tun0: persist enabled [ 824.173799][ T835] tun0: tun_chr_ioctl cmd 1074025675 [ 824.201885][ T835] tun0: persist enabled [ 824.219241][ T835] netlink: 'syz.5.6626': attribute type 1 has an invalid length. [ 824.233356][T17103] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 824.247861][ T837] tun0: tun_chr_ioctl cmd 1074025673 [ 824.391708][ T845] tipc: Started in network mode [ 824.414890][ T845] tipc: Node identity ac14140f, cluster identity 4711 [ 824.446381][ T845] tipc: New replicast peer: 172.20.20.170 [ 824.472951][ T845] tipc: Enabled bearer , priority 5 [ 824.606164][ T862] macvtap1: entered promiscuous mode [ 824.612514][ T862] macvtap1: entered allmulticast mode [ 824.618509][ T862] veth1_vlan: entered allmulticast mode [ 824.691163][ T862] macvtap2: entered promiscuous mode [ 824.698616][ T862] macvtap2: entered allmulticast mode [ 824.799941][ T873] syzkaller0: entered promiscuous mode [ 824.805861][ T873] syzkaller0: entered allmulticast mode [ 824.974899][ T878] xt_hashlimit: size too large, truncated to 1048576 [ 825.587161][ T8117] tipc: Node number set to 2886997007 [ 825.792031][ T915] IPVS: set_ctl: invalid protocol: 41 224.0.0.1:20002 [ 826.129630][ T954] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 826.763535][ T981] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 827.356055][ T1010] __nla_validate_parse: 4 callbacks suppressed [ 827.356074][ T1010] netlink: 48 bytes leftover after parsing attributes in process `syz.5.6675'. [ 827.397637][ T1001] syzkaller1: entered promiscuous mode [ 827.403346][ T1001] syzkaller1: entered allmulticast mode [ 827.412836][ T1001] openvswitch: netlink: Actions may not be safe on all matching packets [ 827.616962][ T1023] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6679'. [ 827.665129][ T1032] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6678'. [ 827.706810][ T1032] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6678'. [ 827.876947][ T1040] netlink: 'syz.2.6682': attribute type 1 has an invalid length. [ 827.940628][ T1048] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6684'. [ 828.012096][ T1053] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6685'. [ 828.081646][ T1063] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 830.488381][ T1024] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 830.614371][ T13] vlan4: left allmulticast mode [ 830.645976][ T13] geneve0: left allmulticast mode [ 830.672207][ T13] vlan4: left promiscuous mode [ 830.677599][ T1083] xt_l2tp: invalid flags combination: 8 [ 830.719692][ T13] geneve0: left promiscuous mode [ 830.735335][ T13] bridge0: port 4(vlan4) entered disabled state [ 830.758282][ T13] bond1: left promiscuous mode [ 830.770217][ T8117] IPVS: starting estimator thread 0... [ 830.779518][ T13] bond1: left allmulticast mode [ 830.784523][ T13] bridge0: port 3(bond1) entered disabled state [ 830.799943][ T1095] netlink: 4768 bytes leftover after parsing attributes in process `syz.3.6694'. [ 830.834892][ T13] dvmrp0: left allmulticast mode [ 830.885641][ T1090] IPVS: using max 36 ests per chain, 86400 per kthread [ 831.053011][ T13] bond5 (unregistering): (slave geneve3): Releasing active interface [ 831.501326][ T13] bond11 (unregistering): (slave bridge8): Releasing active interface [ 831.560520][ T13] bond13 (unregistering): (slave bridge9): Releasing active interface [ 831.619131][ T13] bond0 (unregistering): Released all slaves [ 831.629829][ T13] bond1 (unregistering): Released all slaves [ 831.643154][ T13] bond2 (unregistering): Released all slaves [ 831.658732][ T13] bond3 (unregistering): Released all slaves [ 831.672510][ T13] bond4 (unregistering): Released all slaves [ 831.692823][ T13] bond5 (unregistering): Released all slaves [ 831.708915][ T13] bond6 (unregistering): Released all slaves [ 831.726472][ T13] bond7 (unregistering): Released all slaves [ 831.742684][ T13] bond8 (unregistering): Released all slaves [ 831.761626][ T13] bond9 (unregistering): Released all slaves [ 831.775388][ T13] bond10 (unregistering): Released all slaves [ 831.791936][ T13] bond11 (unregistering): (slave veth9): Releasing active interface [ 831.805779][ T13] bond11 (unregistering): Released all slaves [ 831.822088][ T13] bond12 (unregistering): Released all slaves [ 831.839810][ T13] bond13 (unregistering): Released all slaves [ 831.967171][ T1088] lo speed is unknown, defaulting to 1000 [ 832.104773][ T13] tipc: Disabling bearer [ 832.118668][ T13] tipc: Left network mode [ 832.409522][ T1121] lo speed is unknown, defaulting to 1000 [ 832.642113][ T1140] syzkaller0: entered promiscuous mode [ 832.894278][ T13] hsr_slave_0: left promiscuous mode [ 832.909384][ T13] hsr_slave_1: left promiscuous mode [ 832.935401][ T13] pim6reg99999991 (unregistering): left allmulticast mode [ 833.197487][ T1163] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6709'. [ 833.987071][ T1182] netlink: 52 bytes leftover after parsing attributes in process `syz.5.6716'. [ 834.056346][ T1186] netlink: 'syz.1.6717': attribute type 1 has an invalid length. [ 834.073590][ T1168] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6709'. [ 834.293802][ T1186] 8021q: adding VLAN 0 to HW filter on device bond3 [ 834.381557][ T1186] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6717'. [ 834.453540][ T1191] veth3: entered promiscuous mode [ 834.492646][ T1191] bond3: (slave veth3): Enslaving as an active interface with an up link [ 834.522488][ T1189] netlink: 20 bytes leftover after parsing attributes in process `syz.5.6716'. [ 834.748944][ T1224] geneve2: entered promiscuous mode [ 834.763208][ T1224] geneve2: entered allmulticast mode [ 834.822103][ T1228] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6723'. [ 834.841885][ T1231] netlink: 268 bytes leftover after parsing attributes in process `syz.3.6722'. [ 834.877858][ T13] IPVS: stop unused estimator thread 0... [ 835.104984][ T1245] openvswitch: netlink: IP tunnel dst address not specified [ 835.137080][ T1249] Bluetooth: MGMT ver 1.23 [ 835.168990][ T1249] netlink: 64 bytes leftover after parsing attributes in process `syz.0.6729'. [ 835.398914][ T1261] block nbd0: not configured, cannot reconfigure [ 835.544299][ T1251] macsec1: entered promiscuous mode [ 835.691042][ T1271] syzkaller0: entered promiscuous mode [ 835.723438][ T1271] syzkaller0: entered allmulticast mode [ 836.031758][ T1287] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6736'. [ 836.072342][ T1287] netlink: 7 bytes leftover after parsing attributes in process `syz.1.6736'. [ 836.459453][ T1308] netlink: 'syz.0.6743': attribute type 1 has an invalid length. [ 836.620913][ T1308] PKCS7: Unknown OID: [4] (bad) [ 836.643309][ T1308] PKCS7: Only support pkcs7_signedData type [ 836.658966][ T1314] bond4: (slave bridge3): Enslaving as a backup interface with an up link [ 836.694968][ T1321] RDS: rds_bind could not find a transport for fc02::, load rds_tcp or rds_rdma? [ 836.728752][ T1308] macvlan4: entered promiscuous mode [ 836.741483][ T1308] macvlan4: entered allmulticast mode [ 836.748230][ T1308] bond4: entered promiscuous mode [ 836.753362][ T1308] bridge3: entered promiscuous mode [ 836.760179][ T1308] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 836.768938][ T1308] bond4: left promiscuous mode [ 836.773740][ T1308] bridge3: left promiscuous mode [ 836.796954][ T1319] lo speed is unknown, defaulting to 1000 [ 837.584839][ T1364] xt_hashlimit: size too large, truncated to 1048576 [ 838.101545][ T1385] netlink: 'syz.0.6757': attribute type 4 has an invalid length. [ 838.119384][ T1385] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 838.475740][ T1406] __nla_validate_parse: 5 callbacks suppressed [ 838.475758][ T1406] netlink: 148 bytes leftover after parsing attributes in process `syz.0.6763'. [ 838.805777][ T1427] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 838.828582][ T1427] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 838.905072][ T1427] netlink: 16178 bytes leftover after parsing attributes in process `syz.5.6768'. [ 838.939907][ T1433] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6770'. [ 838.942494][ T1434] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6771'. [ 838.962147][ T1427] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 838.995884][ T1427] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 839.132528][ T1437] netlink: 'syz.2.6771': attribute type 3 has an invalid length. [ 839.166912][ T1442] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6772'. [ 839.203305][ T1434] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6771'. [ 839.250692][ T1434] geneve2: entered promiscuous mode [ 839.260245][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 839.288034][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 839.307605][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 839.332496][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 839.668795][T14441] lec:lec_start_xmit: lec0:No lecd attached [ 839.713663][ T1465] lo speed is unknown, defaulting to 1000 [ 839.804611][ T1475] €Â0: renamed from batadv_slave_1 [ 839.977010][ T1487] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6785'. [ 840.042100][ T1491] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6785'. [ 840.099701][ T1493] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6789'. [ 840.139987][ T1487] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 840.150798][ T1493] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6789'. [ 840.479340][ T1512] bond4: entered promiscuous mode [ 840.523431][ T1512] bond4: entered allmulticast mode [ 840.550327][ T1512] 8021q: adding VLAN 0 to HW filter on device bond4 [ 841.039297][ T1540] netlink: 'syz.5.6802': attribute type 10 has an invalid length. [ 841.057224][ T1539] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 841.094745][ T1540] team0: Port device dummy0 added [ 841.114409][ T1540] dummy0: entered promiscuous mode [ 841.176019][ T1545] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 841.315825][ T1562] x_tables: duplicate underflow at hook 1 [ 841.527080][ T1570] xt_TCPMSS: Only works on TCP SYN packets [ 841.538072][ T1577] tipc: Resetting bearer [ 841.700004][ T1583] tipc: Enabling of bearer rejected, failed to enable media [ 841.730309][ T1587] x_tables: duplicate underflow at hook 2 [ 842.247349][ T1607] lo speed is unknown, defaulting to 1000 [ 842.510810][ T1623] Cannot find add_set index 3 as target [ 842.869651][ T1643] netlink: 'syz.2.6823': attribute type 83 has an invalid length. [ 843.573689][ T1687] netlink: 'syz.3.6834': attribute type 1 has an invalid length. [ 843.736975][ T1687] 8021q: adding VLAN 0 to HW filter on device bond2 [ 843.796995][ T1699] __nla_validate_parse: 12 callbacks suppressed [ 843.797020][ T1699] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6835'. [ 843.842563][ T1691] bond2: (slave veth7): Enslaving as an active interface with an up link [ 844.488795][ T1733] bridge0: entered allmulticast mode [ 844.675491][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 844.683567][ C1] lec:lec_tx_timeout: lec0 [ 844.753308][ T1748] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 844.763869][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 844.909444][ T1757] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6851'. [ 845.092999][ T1771] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6855'. [ 845.119391][ T1771] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6855'. [ 845.221125][ T1777] netlink: 'syz.5.6855': attribute type 13 has an invalid length. [ 845.248415][ T1777] netlink: 'syz.5.6855': attribute type 17 has an invalid length. [ 845.479208][ T1787] netlink: 56 bytes leftover after parsing attributes in process `syz.0.6856'. [ 845.519750][ T1787] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6856'. [ 845.607995][ T1771] batadv1: left promiscuous mode [ 845.832060][ T1777] 8021q: adding VLAN 0 to HW filter on device team0 [ 845.860353][ T1777] dummy0: left promiscuous mode [ 845.870824][ T1777] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 845.904835][ T1767] delete_channel: no stack [ 846.006090][ T1768] lo speed is unknown, defaulting to 1000 [ 846.468207][ T1846] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6865'. [ 846.773092][ T1854] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6868'. [ 846.977384][ T1866] netlink: 'syz.3.6871': attribute type 9 has an invalid length. [ 847.667918][ T1900] netlink: 'syz.0.6879': attribute type 5 has an invalid length. [ 847.793148][ T1906] lo speed is unknown, defaulting to 1000 [ 848.360571][ T1943] netlink: 'syz.1.6889': attribute type 21 has an invalid length. [ 848.388294][ T1943] netlink: 'syz.1.6889': attribute type 6 has an invalid length. [ 848.413913][ T1943] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6889'. [ 848.476369][ T1943] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 848.487321][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 848.765115][ T1957] netlink: 104 bytes leftover after parsing attributes in process `syz.1.6892'. [ 848.846251][ T1959] netlink: 'syz.5.6893': attribute type 1 has an invalid length. [ 848.978480][ T1964] lo speed is unknown, defaulting to 1000 [ 849.010330][ T1971] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6896'. [ 849.029103][ T1971] netlink: 11 bytes leftover after parsing attributes in process `syz.1.6896'. [ 849.312567][ T1985] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6899'. [ 849.368044][ T1990] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6901'. [ 849.388281][ T1991] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6901'. [ 849.417136][ T1991] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6901'. [ 849.582494][ T1990] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 849.739188][ T2010] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6905'. [ 849.820576][ T2017] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 849.854342][ T2022] netlink: zone id is out of range [ 849.898341][ T2027] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6906'. [ 849.909936][ T2022] netlink: zone id is out of range [ 849.924823][ T2022] netlink: zone id is out of range [ 849.934126][ T2014] lo speed is unknown, defaulting to 1000 [ 849.946678][ T2022] netlink: zone id is out of range [ 849.964620][ T2022] netlink: zone id is out of range [ 849.982571][ T2022] netlink: zone id is out of range [ 850.000885][ T2022] netlink: zone id is out of range [ 850.022017][ T2022] netlink: zone id is out of range [ 850.062947][ T2032] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6910'. [ 850.090205][ T2032] netlink: 'syz.3.6910': attribute type 1 has an invalid length. [ 850.332774][ T2043] bond3: (slave geneve2): making interface the new active one [ 850.361034][ T2043] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 850.371301][ T6336] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 20004 - 0 [ 850.380781][ T6336] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 20004 - 0 [ 850.392944][ T6336] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 20004 - 0 [ 850.402846][ T6336] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 20004 - 0 [ 850.416833][ T2056] netlink: 128 bytes leftover after parsing attributes in process `syz.0.6914'. [ 850.712562][ T2073] netlink: 'syz.3.6916': attribute type 298 has an invalid length. [ 851.194177][ T2109] smc: net device wlan0 erased user defined pnetid SYZ0 [ 851.500704][ T2113] lo speed is unknown, defaulting to 1000 [ 853.364108][ T13] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 20004 - 0 [ 853.392480][ T13] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 20004 - 0 [ 853.450336][ T1126] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 20004 - 0 [ 853.483791][ T1126] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 20004 - 0 [ 853.510927][ T2223] macsec0: entered promiscuous mode [ 853.524000][ T2223] dummy0: entered promiscuous mode [ 853.540380][ T2223] macsec0: entered allmulticast mode [ 853.557046][ T2223] dummy0: entered allmulticast mode [ 853.574783][ T2223] dummy0: left allmulticast mode [ 853.585864][ T2223] dummy0: left promiscuous mode [ 853.807290][ T2240] bond0: entered promiscuous mode [ 853.837307][ T2240] gretap0: entered promiscuous mode [ 853.860104][ T2240] debugfs: 'hsr1' already exists in 'hsr' [ 853.876754][ T2240] Cannot create hsr debugfs directory [ 853.890617][ T2240] hsr1: entered promiscuous mode [ 853.909303][ T29] audit: type=1804 audit(1777244619.057:13): pid=2249 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.6955" name="/newroot/201/cgroup.controllers" dev="tmpfs" ino=1044 res=1 errno=0 [ 853.938241][ T29] audit: type=1800 audit(1777244619.077:14): pid=2249 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.6955" name="cgroup.controllers" dev="tmpfs" ino=1044 res=0 errno=0 [ 854.004186][ T29] audit: type=1804 audit(1777244619.097:15): pid=2249 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.6955" name="/newroot/201/cgroup.controllers" dev="tmpfs" ino=1044 res=1 errno=0 [ 854.312059][ T2266] __nla_validate_parse: 11 callbacks suppressed [ 854.312077][ T2266] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6959'. [ 854.448987][ T2272] netlink: 'syz.0.6960': attribute type 1 has an invalid length. [ 854.519261][ T2272] 8021q: adding VLAN 0 to HW filter on device bond5 [ 854.812595][ T2297] bond0: (slave bond_slave_1): Releasing backup interface [ 854.858811][ T2297] bond_slave_1: left promiscuous mode [ 855.042249][ T2312] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6968'. [ 855.100938][ T2312] Cannot find add_set index 3 as target [ 855.105165][ T2314] syzkaller0: entered promiscuous mode [ 855.120167][ T2314] syzkaller0: entered allmulticast mode [ 855.160934][ T2317] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6970'. [ 855.515962][ T2332] netlink: 'syz.0.6974': attribute type 10 has an invalid length. [ 855.578419][ T2332] team0: Device wg1 is of different type [ 855.617739][ T2339] netlink: 'syz.5.6973': attribute type 1 has an invalid length. [ 855.689811][ T2339] bond6: entered promiscuous mode [ 855.695408][ T2339] 8021q: adding VLAN 0 to HW filter on device bond6 [ 855.773191][ T2339] bond6: (slave bridge4): making interface the new active one [ 855.792400][ T2339] bridge4: entered promiscuous mode [ 855.842541][ T2339] bridge4: left promiscuous mode [ 856.249452][ T2369] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6980'. [ 856.792604][ T2407] netlink: 'syz.2.6987': attribute type 1 has an invalid length. [ 856.829622][ T2405] netlink: 'syz.2.6987': attribute type 1 has an invalid length. [ 856.950597][ T2417] net_ratelimit: 32 callbacks suppressed [ 856.950614][ T2417] netlink: zone id is out of range [ 856.984255][ T2416] netlink: zone id is out of range [ 857.061069][ T2407] 8021q: adding VLAN 0 to HW filter on device bond1 [ 857.203997][ T2442] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 857.350254][ T2458] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 857.671871][ T2485] netlink: 'syz.2.7000': attribute type 4 has an invalid length. [ 857.713341][ T2486] netlink: 'syz.2.7000': attribute type 4 has an invalid length. [ 857.727750][ T2480] can: request_module (can-proto-0) failed. [ 857.756825][ T2493] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 857.767394][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 857.831254][ T2474] lo speed is unknown, defaulting to 1000 [ 858.193338][ T2519] lo speed is unknown, defaulting to 1000 [ 858.400505][ T2542] netlink: zone id is out of range [ 858.433206][ T2542] netlink: zone id is out of range [ 858.464670][ T2542] netlink: zone id is out of range [ 858.490255][ T2542] netlink: zone id is out of range [ 858.724540][ T2566] netlink: 'syz.1.7011': attribute type 15 has an invalid length. [ 858.758544][ T2566] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7011'. [ 859.144777][ T2602] netlink: 'syz.1.7018': attribute type 7 has an invalid length. [ 859.164362][ T2602] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7018'. [ 859.197046][ T2602] netlink: 'syz.1.7018': attribute type 7 has an invalid length. [ 859.231356][ T2602] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7018'. [ 859.409948][ T2619] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 859.859226][ T2635] netlink: 'syz.3.7022': attribute type 1 has an invalid length. [ 859.873347][ T2635] netlink: 'syz.3.7022': attribute type 2 has an invalid length. [ 859.883661][ T2635] netlink: 'syz.3.7022': attribute type 3 has an invalid length. [ 859.971072][ T2630] netlink: 32 bytes leftover after parsing attributes in process `syz.2.7020'. [ 860.300847][ T2667] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7027'. [ 860.330461][ T2668] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7025'. [ 860.602795][ T2680] tipc: Enabled bearer , priority 0 [ 860.633363][ T2680] mac80211_hwsim hwsim73 syzkaller0: entered promiscuous mode [ 860.665941][ T2680] mac80211_hwsim hwsim73 syzkaller0: entered allmulticast mode [ 860.715225][ T2689] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 860.748823][ T2680] tipc: Resetting bearer [ 860.763958][ T2695] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7031'. [ 860.971751][ T2701] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7033'. [ 860.989004][ T2701] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7033'. [ 861.574944][ T2736] netlink: 132 bytes leftover after parsing attributes in process `syz.5.7038'. [ 861.601382][T10630] tipc: Node number set to 3143590321 [ 861.619411][ T2736] netlink: 132 bytes leftover after parsing attributes in process `syz.5.7038'. [ 861.848986][ T2758] netlink: 'syz.5.7042': attribute type 1 has an invalid length. [ 861.963038][ T2758] bond7: entered promiscuous mode [ 861.988553][ T2768] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7042'. [ 862.010483][ T2758] bond7: entered allmulticast mode [ 862.017473][ T2758] 8021q: adding VLAN 0 to HW filter on device bond7 [ 862.087302][ T2765] erspan2: entered allmulticast mode [ 862.146678][ T2765] bond7: (slave erspan2): making interface the new active one [ 862.184862][ T2765] erspan2: entered promiscuous mode [ 862.235321][ T2765] bond7: (slave erspan2): Enslaving as an active interface with an up link [ 862.443757][ T2802] netlink: 228 bytes leftover after parsing attributes in process `syz.3.7049'. [ 862.669541][ T2765] syz.5.7042 (2765) used greatest stack depth: 17216 bytes left [ 862.791223][ T2823] tipc: Enabling of bearer rejected, failed to enable media [ 862.999074][ T2830] ±ÿ: renamed from lo [ 863.247789][ T2856] dvmrp1: entered allmulticast mode [ 863.265794][ T2847] dvmrp1: left allmulticast mode [ 863.319989][ T2847] x_tables: duplicate underflow at hook 2 [ 863.414929][ T2884] netlink: 'syz.3.7066': attribute type 6 has an invalid length. [ 863.646497][ T2896] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 863.982786][ T2851] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 864.502545][ T2916] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 864.830493][ T2926] tipc: Started in network mode [ 864.840110][ T2926] tipc: Node identity c29740cacbcf, cluster identity 4711 [ 864.856706][ T2926] tipc: Enabled bearer , priority 0 [ 864.869430][ T2926] syzkaller0: entered promiscuous mode [ 864.885843][ T2926] syzkaller0: entered allmulticast mode [ 864.924714][ T2926] tipc: Resetting bearer [ 864.937803][ T2925] tipc: Resetting bearer [ 864.978071][ T2925] tipc: Disabling bearer [ 865.089244][ T2931] netlink: 'syz.0.7077': attribute type 1 has an invalid length. [ 865.121644][ T2931] __nla_validate_parse: 1 callbacks suppressed [ 865.121660][ T2931] netlink: 224 bytes leftover after parsing attributes in process `syz.0.7077'. [ 865.641543][ T2949] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7082'. [ 865.651903][ T2949] netlink: 65011 bytes leftover after parsing attributes in process `syz.5.7082'. [ 865.726755][ T2950] lo speed is unknown, defaulting to 1000 [ 865.755332][ T2953] netlink: 'syz.1.7083': attribute type 1 has an invalid length. [ 865.827027][ T2953] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7083'. [ 865.836689][ T2953] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7083'. [ 865.846456][ T2953] netlink: 'syz.1.7083': attribute type 12 has an invalid length. [ 865.877444][ T2955] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7083'. [ 865.895723][ T2955] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7083'. [ 865.906046][ T2955] netlink: 'syz.1.7083': attribute type 20 has an invalid length. [ 865.915081][ T1126] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 865.933429][ T1126] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 865.942549][ T1126] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 865.952155][ T1126] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 866.421462][ T2976] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7088'. [ 867.113453][ T3010] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7097'. [ 867.134265][ T3015] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7095'. [ 867.167762][ T3008] dvmrp1: entered allmulticast mode [ 867.213973][ T3019] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 867.741333][ T3040] lo speed is unknown, defaulting to 1000 [ 867.757449][ T3036] IPVS: set_ctl: invalid protocol: 41 255.255.255.255:20001 [ 868.370490][ T3055] block nbd0: not configured, cannot reconfigure [ 868.946855][ T3074] bond6: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 869.005794][ T3074] bond6 (unregistering): Released all slaves [ 869.313031][ T3088] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 869.619530][ T3094] bond6: ARP target 9.0.0.0 is already present [ 869.637224][ T3094] bond6: option arp_ip_target: invalid value (9) [ 869.659025][ T3094] bond6 (unregistering): Released all slaves [ 869.814121][ T3102] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 869.963957][ T1316] lec:lec_start_xmit: lec0:No lecd attached [ 870.079026][ T3128] pim6reg1: entered promiscuous mode [ 870.087277][ T3128] pim6reg1: entered allmulticast mode [ 870.127282][ T3128] xt_NFQUEUE: number of total queues is 0 [ 870.313872][ T3138] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 870.342949][ T3138] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 870.373352][ T3143] __nla_validate_parse: 5 callbacks suppressed [ 870.373371][ T3143] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7130'. [ 870.463613][ T3142] 8021q: adding VLAN 0 to HW filter on device bond8 [ 870.674986][ T3149] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 870.873262][ T3161] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7136'. [ 870.883163][ T3160] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7136'. [ 870.923290][ T3160] bond4: entered promiscuous mode [ 870.930066][ T3160] 8021q: adding VLAN 0 to HW filter on device bond4 [ 870.970267][ T3157] net_ratelimit: 22 callbacks suppressed [ 870.970287][ T3157] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 871.009967][ T3167] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7137'. [ 871.028918][ T3167] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7137'. [ 871.040025][ T3169] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7138'. [ 871.049635][ T3169] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7138'. [ 871.061091][ T3169] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7138'. [ 871.099211][ T3167] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7137'. [ 871.109509][ T3167] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7137'. [ 871.519895][ T3184] netlink: 'syz.1.7142': attribute type 11 has an invalid length. [ 871.528279][ T3184] netlink: 'syz.1.7142': attribute type 23 has an invalid length. [ 871.850625][ T3213] netlink: 'syz.5.7147': attribute type 1 has an invalid length. [ 871.972734][ T3213] 8021q: adding VLAN 0 to HW filter on device bond9 [ 872.040442][T28853] Bluetooth: hci5: command 0x0406 tx timeout [ 872.067750][ T6336] [ 872.070121][ T6336] ============================================ [ 872.076268][ T6336] WARNING: possible recursive locking detected [ 872.082425][ T6336] syzkaller #0 Not tainted [ 872.086836][ T6336] -------------------------------------------- [ 872.092986][ T6336] kworker/u8:14/6336 is trying to acquire lock: [ 872.099212][ T6336] ffff88802271e958 (&qdisc_xmit_lock_key#3){+.-.}-{3:3}, at: sch_direct_xmit+0x15f/0x4c0 [ 872.109042][ T6336] [ 872.109042][ T6336] but task is already holding lock: [ 872.116386][ T6336] ffff8880aa696558 (&qdisc_xmit_lock_key#3){+.-.}-{3:3}, at: sch_direct_xmit+0x15f/0x4c0 [ 872.126209][ T6336] [ 872.126209][ T6336] other info that might help us debug this: [ 872.134248][ T6336] Possible unsafe locking scenario: [ 872.134248][ T6336] [ 872.141676][ T6336] CPU0 [ 872.144937][ T6336] ---- [ 872.148196][ T6336] lock(&qdisc_xmit_lock_key#3); [ 872.153226][ T6336] lock(&qdisc_xmit_lock_key#3); [ 872.158244][ T6336] [ 872.158244][ T6336] *** DEADLOCK *** [ 872.158244][ T6336] [ 872.166368][ T6336] May be due to missing lock nesting notation [ 872.166368][ T6336] [ 872.174674][ T6336] 10 locks held by kworker/u8:14/6336: [ 872.180127][ T6336] #0: ffff88805a297140 ((wq_completion)bond7#6){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 872.191183][ T6336] #1: ffffc90005effc40 ((work_completion)(&(&bond->alb_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 872.204054][ T6336] #2: ffffffff8e95cce0 (rcu_read_lock){....}-{1:3}, at: bond_alb_monitor+0xf8/0x17e0 [ 872.213627][ T6336] #3: ffffffff8e95cd40 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x2b6/0x3950 [ 872.223536][ T6336] #4: ffff888033feb228 (dev->qdisc_tx_busylock ?: &qdisc_tx_busylock#5){+...}-{3:3}, at: __dev_queue_xmit+0x11a6/0x3950 [ 872.236141][ T6336] #5: ffff8880aa696558 (&qdisc_xmit_lock_key#3){+.-.}-{3:3}, at: sch_direct_xmit+0x15f/0x4c0 [ 872.246490][ T6336] #6: ffffffff8e95cce0 (rcu_read_lock){....}-{1:3}, at: ip_output+0x5b/0x450 [ 872.255355][ T6336] #7: ffffffff8e95cce0 (rcu_read_lock){....}-{1:3}, at: ip_finish_output2+0x3c2/0x1070 [ 872.265086][ T6336] #8: ffffffff8e95cd40 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x2b6/0x3950 [ 872.274990][ T6336] #9: ffff88803b1cc228 (dev->qdisc_tx_busylock ?: &qdisc_tx_busylock#5){+...}-{3:3}, at: __dev_queue_xmit+0x11a6/0x3950 [ 872.287596][ T6336] [ 872.287596][ T6336] stack backtrace: [ 872.293476][ T6336] CPU: 1 UID: 0 PID: 6336 Comm: kworker/u8:14 Not tainted syzkaller #0 PREEMPT(full) [ 872.293494][ T6336] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 872.293504][ T6336] Workqueue: bond7 bond_alb_monitor [ 872.293523][ T6336] Call Trace: [ 872.293530][ T6336] [ 872.293536][ T6336] dump_stack_lvl+0xe8/0x150 [ 872.293560][ T6336] print_deadlock_bug+0x279/0x290 [ 872.293577][ T6336] __lock_acquire+0x253f/0x2cf0 [ 872.293599][ T6336] ? fib_table_lookup+0x11ba/0x16e0 [ 872.293624][ T6336] ? sch_direct_xmit+0x15f/0x4c0 [ 872.293644][ T6336] lock_acquire+0x106/0x350 [ 872.293663][ T6336] ? sch_direct_xmit+0x15f/0x4c0 [ 872.293687][ T6336] _raw_spin_lock+0x2e/0x40 [ 872.293703][ T6336] ? sch_direct_xmit+0x15f/0x4c0 [ 872.293722][ T6336] sch_direct_xmit+0x15f/0x4c0 [ 872.293743][ T6336] ? __pfx_sch_direct_xmit+0x10/0x10 [ 872.293766][ T6336] __dev_queue_xmit+0x180f/0x3950 [ 872.293785][ T6336] ? __dev_queue_xmit+0x2b6/0x3950 [ 872.293805][ T6336] ? __pfx___dev_queue_xmit+0x10/0x10 [ 872.293821][ T6336] ? neigh_resolve_output+0x438/0x750 [ 872.293843][ T6336] ? eth_header+0x11b/0x200 [ 872.293858][ T6336] ? __asan_memcpy+0x40/0x70 [ 872.293881][ T6336] ? ip_finish_output2+0x3c2/0x1070 [ 872.293898][ T6336] ip_finish_output2+0xca9/0x1070 [ 872.293914][ T6336] ? ip_skb_dst_mtu+0x80b/0xa50 [ 872.293930][ T6336] ? ip_finish_output+0x40e/0x530 [ 872.293947][ T6336] ip_output+0x29f/0x450 [ 872.293961][ T6336] ? ip_output+0x5b/0x450 [ 872.293976][ T6336] iptunnel_xmit+0x621/0xd10 [ 872.293998][ T6336] ip_tunnel_xmit+0x193a/0x1f20 [ 872.294020][ T6336] ? __pfx_ip_tunnel_xmit+0x10/0x10 [ 872.294037][ T6336] ? __pfx_gre_build_header+0x10/0x10 [ 872.294056][ T6336] ? kfree+0x1c5/0x640 [ 872.294070][ T6336] ? pskb_expand_head+0x458/0x1390 [ 872.294087][ T6336] __gre_xmit+0x19e/0x240 [ 872.294101][ T6336] ? __pfx___gre_xmit+0x10/0x10 [ 872.294117][ T6336] erspan_xmit+0xa41/0x14d0 [ 872.294133][ T6336] ? ret_from_fork_asm+0x1a/0x30 [ 872.294148][ T6336] ? __pfx_erspan_xmit+0x10/0x10 [ 872.294165][ T6336] dev_hard_start_xmit+0x2cd/0x830 [ 872.294186][ T6336] sch_direct_xmit+0x251/0x4c0 [ 872.294207][ T6336] ? __pfx_sch_direct_xmit+0x10/0x10 [ 872.294226][ T6336] ? kthread+0x330/0x470 [ 872.294243][ T6336] __dev_queue_xmit+0x180f/0x3950 [ 872.294262][ T6336] ? __dev_queue_xmit+0x2b6/0x3950 [ 872.294282][ T6336] ? __pfx___dev_queue_xmit+0x10/0x10 [ 872.294299][ T6336] ? rcu_is_watching+0x15/0xb0 [ 872.294314][ T6336] ? trace_kmem_cache_alloc+0x29/0xe0 [ 872.294330][ T6336] ? kmem_cache_alloc_node_noprof+0x3ce/0x690 [ 872.294351][ T6336] ? alb_send_lp_vid+0x14e/0x550 [ 872.294366][ T6336] alb_send_lp_vid+0x348/0x550 [ 872.294382][ T6336] ? __pfx_alb_send_lp_vid+0x10/0x10 [ 872.294401][ T6336] alb_send_learning_packets+0x12c/0x300 [ 872.294416][ T6336] ? __pfx_alb_send_learning_packets+0x10/0x10 [ 872.294430][ T6336] ? bond_alb_monitor+0xf8/0x17e0 [ 872.294445][ T6336] ? netdev_lower_get_next_private_rcu+0x9f/0x100 [ 872.294467][ T6336] bond_alb_monitor+0x3d5/0x17e0 [ 872.294482][ T6336] ? bond_alb_monitor+0xf8/0x17e0 [ 872.294495][ T6336] ? __pfx_bond_alb_monitor+0x10/0x10 [ 872.294510][ T6336] ? process_scheduled_works+0xa70/0x1860 [ 872.294530][ T6336] ? process_scheduled_works+0xa70/0x1860 [ 872.294550][ T6336] process_scheduled_works+0xb5d/0x1860 [ 872.294579][ T6336] ? __pfx_process_scheduled_works+0x10/0x10 [ 872.294601][ T6336] ? assign_work+0x3d5/0x5e0 [ 872.294621][ T6336] worker_thread+0xa53/0xfc0 [ 872.294649][ T6336] kthread+0x388/0x470 [ 872.294664][ T6336] ? __pfx_worker_thread+0x10/0x10 [ 872.294682][ T6336] ? __pfx_kthread+0x10/0x10 [ 872.294698][ T6336] ret_from_fork+0x514/0xb70 [ 872.294719][ T6336] ? __pfx_ret_from_fork+0x10/0x10 [ 872.294738][ T6336] ? __switch_to+0xc79/0x1410 [ 872.294757][ T6336] ? __pfx_kthread+0x10/0x10 [ 872.294772][ T6336] ret_from_fork_asm+0x1a/0x30 [ 872.294791][ T6336] [ 872.833454][ T3217] bond6: left promiscuous mode [ 872.842927][ T3217] bond7: left promiscuous mode [ 872.849035][ T3217] erspan2: left promiscuous mode [ 872.854035][ T3217] bond7: left allmulticast mode [ 872.866643][ T3217] erspan2: left allmulticast mode [ 872.890259][ T3213] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 872.898128][ T3213] bond9: (slave batadv2): making interface the new active one [ 872.906311][ T3213] bond9: (slave batadv2): Enslaving as an active interface with an up link [ 875.715611][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5740 ms [ 875.723641][ C1] lec:lec_tx_timeout: lec0