last executing test programs: 9m31.882064274s ago: executing program 32 (id=932): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x1, 0x70bd31, 0x25dfdc01, {0x0, 0x0, 0x0, 0x0, 0x14318, 0x628d0}, [@IFLA_IFNAME={0x14, 0x3, 'erspan0\x00'}, @IFLA_AF_SPEC={0x14, 0x1a, 0x0, 0x1, [@AF_INET={0x10, 0x2, 0x0, 0x1, {0xc, 0x1, 0x0, 0x1, [{0x8, 0x21}]}}]}]}, 0x30faa1dc7d60a5db}, 0x1, 0x0, 0x0, 0x20000085}, 0x4000) 9m31.597627917s ago: executing program 33 (id=936): r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000000)={0x0, 0x2, 0x4}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000080)={0xd, 0x2, 0x209, 0x87, 0x10, 0x3, 0x401, 0x400, r1}, &(0x7f00000000c0)=0x20) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r3, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x64, 0x7, 0x6, 0x201, 0x0, 0x0, {0x3, 0x0, 0x4}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x9}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x64}, 0x1, 0x0, 0x0, 0x4048050}, 0x20004005) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000240)={r2, 0x7f, "62d41576e540cf39577bd2a0c7643700318ba0bf902c256341c11f0588f5375c22984b63df0d7fc368e314a642bc6f4f8d0646134a51e6441798d1e86657c32a6e884f147640b8c1d7e1f2bcb188804ea07513ee57c461d30f531bef64e2b8a9f5c9e96a11e574d17afab523a34ff188096ca5fcd7c3744b9d891d9cba1d3f"}, &(0x7f0000000300)=0x87) r4 = socket$kcm(0x29, 0x7, 0x0) recvmsg$kcm(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000340)=""/2, 0x2}], 0x1, &(0x7f00000003c0)=""/199, 0xc7}, 0x10060) r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0) sendto$x25(r5, &(0x7f0000000500)="a9cf464c2f36", 0x6, 0x80, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000580)=0x14) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000640)={'syztnl2\x00', &(0x7f00000005c0)={'tunl0\x00', r6, 0x20, 0x7800, 0x6, 0x4, {{0x13, 0x4, 0x1, 0x2, 0x4c, 0x67, 0x0, 0x4, 0x4, 0x0, @multicast2, @empty, {[@cipso={0x86, 0x13, 0x0, [{0x2, 0xd, "1393c555ec5af52525852a"}]}, @lsrr={0x83, 0x13, 0xcc, [@loopback, @rand_addr=0x64010101, @private=0xe, @empty]}, @ssrr={0x89, 0x3, 0xec}, @generic={0xc7, 0xc, "399ed87ed7935070f1ec"}]}}}}}) socket$kcm(0x29, 0x5, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000680), r0) r8 = openat$cgroup(0xffffffffffffffff, &(0x7f00000006c0)='syz0\x00', 0x200002, 0x0) r9 = openat$cgroup_ro(r8, &(0x7f0000000700)='pids.events\x00', 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r9, 0x89f1, &(0x7f0000000840)={'syztnl2\x00', &(0x7f0000000740)={'syztnl0\x00', r7, 0x8000, 0x7, 0x4, 0x8, {{0x29, 0x4, 0x0, 0x5, 0xa4, 0x65, 0x0, 0xf8, 0x4, 0x0, @broadcast, @loopback, {[@rr={0x7, 0x7, 0xf0, [@loopback]}, @cipso={0x86, 0x37, 0x3, [{0x0, 0x3, '{'}, {0x0, 0xe, "9dc8536f4f931b1d910077e7"}, {0x6, 0x3, "7f"}, {0x1, 0x7, "6b049b173e"}, {0x5, 0x6, "3e7dfff8"}, {0x5, 0x9, "45f57c96ff7d86"}, {0x7, 0x7, ')/6mW'}]}, @end, @ra={0x94, 0x4, 0x1}, @noop, @lsrr={0x83, 0x17, 0xda, [@multicast2, @multicast2, @broadcast, @rand_addr=0x64010101, @multicast2]}, @timestamp={0x44, 0xc, 0xcc, 0x0, 0x1, [0x798a6fb6, 0x8]}, @rr={0x7, 0x27, 0x87, [@multicast1, @loopback, @dev={0xac, 0x14, 0x14, 0x1c}, @private=0xa010101, @local, @empty, @dev={0xac, 0x14, 0x14, 0x22}, @empty, @empty]}]}}}}}) bind$packet(r9, &(0x7f0000000880)={0x11, 0x9, r10, 0x1, 0x4, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x14) socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet_sctp_SCTP_RTOINFO(r9, 0x84, 0x0, &(0x7f00000008c0)={r2, 0x9, 0xc0000000, 0x401}, &(0x7f0000000900)=0x10) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r9, 0x84, 0x22, &(0x7f0000000940)={0x1, 0x0, 0x8, 0x6, r11}, &(0x7f0000000980)=0x10) connect$can_bcm(r9, &(0x7f00000009c0), 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) r13 = syz_genetlink_get_family_id$tipc(&(0x7f0000000a40), r9) sendmsg$TIPC_CMD_SHOW_PORTS(r9, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x1c, r13, 0x300, 0x70bd2c, 0x25dfdbfc, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004000}, 0x8000) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000c40)={@cgroup=r8, 0x24, 0x0, 0x7, &(0x7f0000000b40)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, &(0x7f0000000b80)=[0x0, 0x0], &(0x7f0000000bc0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000c00)=[0x0, 0x0, 0x0, 0x0]}, 0x40) write$tun(r9, &(0x7f0000000c80)={@void, @val={0x3, 0x80, 0xff00, 0x2, 0x8}, @mpls={[{0xf55, 0x0, 0x1}, {0x6, 0x0, 0x1}, {0x91d, 0x0, 0x1}, {0x2, 0x0, 0x1}, {0x4}, {0x5}, {0x7}, {0x5}, {0x5, 0x0, 0x1}], @ipv4=@igmp={{0x7, 0x4, 0x3, 0x8, 0xa6, 0x67, 0x0, 0xf3, 0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, {[@ssrr={0x89, 0x7, 0xce, [@multicast1]}]}}, {0x13, 0x8, 0x0, @remote, "a69ab87169364d20a613206bd2161d37cf1a240098516826deea5c074a58c191769292d0a32be2f8e80532cddde7e75b1ba010578a36b1d5f37110e74da5ac3d6aca215e581ab8b853bd57b43776ec86b59a7e01a063c8edfa6d8a2301e5a5b1d435ee4468f8ca5f7b314f3a1f366b173a23b715ad01511d2d33067c60f59ac832f0"}}}}, 0xd4) setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, &(0x7f0000000d80)=[{{0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x1}}, {{0x2, 0x0, 0x1, 0x1}, {0x3, 0x1, 0x1, 0x1}}, {{0x0, 0x1, 0x1}, {0x4, 0x0, 0x1, 0x1}}, {{0x1}, {0x4, 0x1, 0x0, 0x1}}], 0x20) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r9, 0x84, 0x75, &(0x7f0000000dc0)={r12}, &(0x7f0000000e00)=0x8) sendmsg$TIPC_CMD_SET_NETID(r9, &(0x7f0000000f00)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e80)={0x24, r13, 0x400, 0x70bd2c, 0x25dfdbfe, {{}, {}, {0x8, 0x2, 0x80}}, ["", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4040040}, 0x8000) 8m47.510871221s ago: executing program 0 (id=1468): bpf$PROG_BIND_MAP(0x23, 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@private2, 0x7ff, 0x0, 0x0, 0x2, 0x6af6, 0x81}, &(0x7f0000000080)=0x20) sendto$inet6(r0, &(0x7f0000000000)="c5", 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0xfffffffe, @local, 0x13}, 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r0, 0x84, 0x1c, 0x0, &(0x7f0000000100)) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xc, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000500000000000000b64f7110b5000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 8m46.488877391s ago: executing program 0 (id=1484): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x16) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000140), 0x4) (async) getsockopt$bt_hci(r1, 0x11a, 0x2, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r4, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="e000000010000905000000000000000008004300ff030000a90000002b0e13e735a3184f123d6da2f1acfac0ee2dd2b184b27db1f302de337c0004000000000000bf852c8986626691b01b5f44e4ce28715f2d28"], 0xe0}], 0x1}, 0x0) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r3) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async, rerun: 32) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) (rerun: 32) close(r6) (async, rerun: 64) connect$inet6(r1, &(0x7f0000000300)={0xa, 0x4e22, 0x9, @private1, 0x6}, 0x1c) (async, rerun: 64) r7 = socket$unix(0x1, 0x1, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newqdisc={0x68, 0x24, 0x4ee4e6a52ff56541, 0x20, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x3c, 0x2, [@TCA_TBF_PBURST={0x8, 0x7, 0xb86}, @TCA_TBF_PARMS={0x28, 0x1, {{0xa, 0x2, 0xfffc, 0x7, 0xcc, 0x3}, {0x0, 0x1, 0x7, 0x8, 0x5, 0x9}, 0xa6, 0x8, 0x1bb6}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000001}, 0x6080) sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r9, {}, {0x2, 0xb}, {0x1, 0x5}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x22000004}, 0x4008000) ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 8m46.05170303s ago: executing program 0 (id=1491): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'geneve1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000d80)=@newlink={0x34, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, r1, 0x300, 0x8002}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ip6vti={{0xb}, {0x4}}}]}, 0x34}}, 0x0) socket(0x400000000010, 0x3, 0x0) (async) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000440)={r5, &(0x7f0000000400), 0x0}, 0x20) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @broadcast}) r8 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r11, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r13 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r13, &(0x7f00000005c0)="24785466124cebc6c81c38c136a9", 0xe, 0x40000c0, &(0x7f00000001c0)={0x11, 0xf8, r12, 0x1, 0xd8, 0x6, @remote}, 0x14) (async) sendto$packet(r13, &(0x7f00000005c0)="24785466124cebc6c81c38c136a9", 0xe, 0x40000c0, &(0x7f00000001c0)={0x11, 0xf8, r12, 0x1, 0xd8, 0x6, @remote}, 0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000940)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r4, {0xf000, 0xffff}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) r14 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) sendmsg$GTP_CMD_DELPDP(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x0, 0x20, 0x70bd2d, 0x25dfdbfc, {}, [@GTPA_NET_NS_FD={0x8, 0x7, r14}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8005}, 0x100) splice(r2, &(0x7f0000000180)=0x8, r0, &(0x7f0000000200)=0x10000, 0x0, 0x2) 8m45.822205144s ago: executing program 0 (id=1496): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="280000001900010000000000000002001c140000fe00000101"], 0x28}}, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) syz_emit_ethernet(0xbe, &(0x7f00000005c0)={@broadcast, @random="17043a73dbde", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty=0xac1414aa, @dev, {[@cipso={0x86, 0x3e, 0x0, [{0x0, 0x5, "66d281"}, {0x0, 0x11, "6f03057a91f875ccf5bd5d0a5b319a"}, {0x0, 0x10, "6253659c41d7d6a461f45f9d37fa"}, {0x0, 0x3, "91"}, {0x0, 0x7, "ccb3e82d2e"}, {0x0, 0x8, "a33b7a6b9500"}]}, @rr={0x7, 0x3}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@private}, {@private}, {}, {@remote}, {@private}, {@remote}, {@private}]}]}}}}}}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWRULE={0x80, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_EXPRESSIONS={0x54, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x16}, @NFTA_CT_DIRECTION={0x5}]}}}, {0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x11}, @NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0xc}, @NFTA_CT_DIRECTION={0x5, 0x3, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0xa8}, 0x1, 0x0, 0x0, 0x840}, 0x0) close(0x4) r3 = accept$packet(0xffffffffffffffff, &(0x7f0000000280), &(0x7f00000002c0)=0x14) setsockopt$packet_int(r3, 0x107, 0x3, &(0x7f0000000340)=0xe912, 0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x8, [@decl_tag={0x10, 0x0, 0x0, 0x11, 0x1, 0xffffffffffffffff}]}, {0x0, [0x0, 0x0, 0x5f, 0x61, 0x0, 0x61]}}, &(0x7f00000000c0)=""/2, 0x30, 0x2, 0x1}, 0x28) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r6, 0x8b22, &(0x7f0000000040)) ioctl$F2FS_IOC_MOVE_RANGE(r6, 0xc020f509, &(0x7f0000000180)={r4, 0x5, 0x2, 0x1}) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r7, 0x114, 0xa, &(0x7f0000000240), 0x1) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x30, r5, 0x8, 0x70bd29, 0x25dfdbfe, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x48091) setsockopt$inet_udp_int(r4, 0x11, 0xb, &(0x7f0000000200)=0x7f, 0x4) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x4e24, @empty}, 0x10) syz_emit_ethernet(0xbe, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x0) r8 = socket$kcm(0x23, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r8, 0x541b, &(0x7f0000000440)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, r0, 0x0) listen(0xffffffffffffffff, 0x8) close(0x4) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) 8m45.782064289s ago: executing program 1 (id=1498): r0 = socket$netlink(0x10, 0x3, 0x5) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000640)=0x1802, 0x4) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0xfd, &(0x7f00000004c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x40) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x8084) 8m45.41773108s ago: executing program 1 (id=1504): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x119000, 0x0) ioctl$PPPIOCGDEBUG(r1, 0x80047441, &(0x7f0000000080)) ioctl$sock_inet_SIOCGIFBRDADDR(r0, 0x8919, &(0x7f00000000c0)={'netdevsim0\x00', {0x2, 0x0, @remote}}) r2 = syz_init_net_socket$ax25(0x3, 0x2, 0x1) r3 = accept(r2, &(0x7f0000000100)=@l2={0x1f, 0x0, @fixed}, &(0x7f0000000180)=0x80) ioctl$SIOCX25GFACILITIES(r3, 0x89e2, &(0x7f00000001c0)) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)={0x1b, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xd8da, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2, 0x5}, 0x50) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001540)={&(0x7f00000004c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x56, 0x56, 0x9, [@datasec={0x8, 0x6, 0x0, 0xf, 0x2, [{0x5, 0x8, 0xfffffffd}, {0x4, 0x3, 0x5af}, {0x3, 0x55, 0x200}, {0x1, 0x8, 0x9}, {0x5, 0x5f24}, {0x4, 0x7, 0x80000000}], "e943"}]}, {0x0, [0x0, 0x61, 0x30, 0x67, 0x61, 0x0, 0x30]}}, &(0x7f0000000540)=""/4096, 0x79, 0x1000, 0x0, 0xffff, 0x10000}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000016c0)={0x18, 0x29, &(0x7f0000000280)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xa}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}}, @printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xf}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000400)='syzkaller\x00', 0x2, 0x69, &(0x7f0000000440)=""/105, 0x41000, 0x2, '\x00', 0x0, 0x0, r5, 0x8, &(0x7f0000001580)={0x1, 0x3}, 0x8, 0x10, &(0x7f00000015c0)={0x5, 0x9, 0x9, 0x1}, 0x10, 0x0, 0x0, 0xa, 0x0, &(0x7f0000001600)=[{0x3, 0x2, 0x7, 0x5}, {0x5, 0x4, 0x7, 0xb}, {0x3, 0x3, 0xd, 0x2}, {0x5, 0x4, 0xf, 0x6}, {0x5, 0x1, 0x3, 0x1}, {0x1, 0x4, 0x8, 0xb}, {0x0, 0x1, 0xc, 0x4}, {0x5, 0x3, 0x6, 0x9}, {0x1, 0x5, 0x10, 0x8}, {0x4, 0x3, 0x1, 0x3}], 0x10, 0x101}, 0x94) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f00000017c0), r3) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r3, &(0x7f00000018c0)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001880)={&(0x7f0000001800)={0x7c, r6, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xb}, @MPTCP_PM_ATTR_ADDR={0x38, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1c}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x42}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x1}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x7}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000010}, 0x40) r7 = openat$cgroup(0xffffffffffffffff, &(0x7f0000001900)='syz0\x00', 0x200002, 0x0) openat$cgroup_freezer_state(r7, &(0x7f0000001940), 0x2, 0x0) socket$inet6(0xa, 0x1, 0x0) openat$cgroup_procs(r7, &(0x7f0000001980)='cgroup.threads\x00', 0x2, 0x0) ioctl$PPPIOCDISCONN(r1, 0x7439) r8 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) sendto$netrom(r8, &(0x7f00000019c0)="fbd895abd9063aa3e8c7bb63c4d4dab4eb15b0961605d3dd3266a6eced62ca172befa9e2cd0ed3885631664d91bd17176eee6d3bd1c15e63738705786634be2f2ace6c8e7c5709e8e50355e5db348f1b1f5458a5e2e6509f247398fd40013a979b45a5", 0x63, 0x800, 0x0, 0x0) r9 = openat$cgroup_netprio_ifpriomap(r4, &(0x7f0000001a40), 0x2, 0x0) r10 = socket$phonet(0x23, 0x2, 0x1) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000001a80)={r10}) write$cgroup_netprio_ifpriomap(r9, &(0x7f0000001ac0)={'nr0', 0x32, 0x31}, 0x6) r12 = syz_genetlink_get_family_id$mptcp(&(0x7f0000001b40), r11) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000001b80)={'macsec0\x00', 0x0}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001c40)={r3, 0x58, &(0x7f0000001bc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$MPTCP_PM_CMD_ANNOUNCE(r11, &(0x7f0000001d80)={&(0x7f0000001b00)={0x10, 0x0, 0x0, 0x81400800}, 0xc, &(0x7f0000001d40)={&(0x7f0000001c80)={0xbc, r12, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x34, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r13}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x34, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r14}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x11}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x8}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x9}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x1}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x81}]}, 0xbc}, 0x1, 0x0, 0x0, 0x18}, 0x8000) r15 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001e00), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_SEC_PARAMS(0xffffffffffffffff, &(0x7f0000001f00)={&(0x7f0000001dc0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001ec0)={&(0x7f0000001e40)={0x6c, r15, 0x400, 0x70bd25, 0x25dfdbfb, {}, [@NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x2c, 0x5}, @NL802154_ATTR_SEC_OUT_KEY_ID={0x1c, 0x2b, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x101}, @NL802154_KEY_ID_ATTR_MODE={0x8}]}, @NL802154_ATTR_SEC_ENABLED={0x5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SEC_ENABLED={0x5}, @NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x2c, 0x8}, @NL802154_ATTR_SEC_OUT_KEY_ID={0x10, 0x2b, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0xffffffffffffffca}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20040000}, 0x2400c000) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r4, 0x40049366, &(0x7f0000001f40)=0x1) 8m45.272110097s ago: executing program 5 (id=1507): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000080000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000005400038008000140000000000800024000000000400003801400010076657468305f746f5f2872696467650014000100767863616e310000000000000000000014000100767863616e31"], 0xc8}}, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r1, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4) setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x1a, &(0x7f0000000240)={0x1, 'veth0_to_team\x00'}, 0x18) syz_emit_ethernet(0xbe, &(0x7f0000000380)={@multicast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x24, 0x0, {0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x35}, {[@cipso={0x86, 0x77, 0x0, [{0x5, 0xc, "e256b28c04000000fb52"}, {0x0, 0x9, "789607671442eb"}, {0x0, 0xe, "7434954373561de584b703c8"}, {0x0, 0x9, "e706d30bd224f8"}, {0x6, 0x12, "076a652ec101f20ccbc3c9cfa11cab1a"}, {0x0, 0x10, "c600"/14}, {0x0, 0xa, "6580a5e97612fe86"}, {0x0, 0x12, "73bc2300ad9d19a30000000000000000"}, {0x0, 0x7, "c8f46976e7"}]}, @cipso={0x86, 0x6}]}}}}}}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000080000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000005400038008000140000000000800024000000000400003801400010076657468305f746f5f2872696467650014000100767863616e310000000000000000000014000100767863616e31"], 0xc8}}, 0x0) (async) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) setsockopt$inet_int(r1, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4) (async) setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x1a, &(0x7f0000000240)={0x1, 'veth0_to_team\x00'}, 0x18) (async) syz_emit_ethernet(0xbe, &(0x7f0000000380)={@multicast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x24, 0x0, {0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x35}, {[@cipso={0x86, 0x77, 0x0, [{0x5, 0xc, "e256b28c04000000fb52"}, {0x0, 0x9, "789607671442eb"}, {0x0, 0xe, "7434954373561de584b703c8"}, {0x0, 0x9, "e706d30bd224f8"}, {0x6, 0x12, "076a652ec101f20ccbc3c9cfa11cab1a"}, {0x0, 0x10, "c600"/14}, {0x0, 0xa, "6580a5e97612fe86"}, {0x0, 0x12, "73bc2300ad9d19a30000000000000000"}, {0x0, 0x7, "c8f46976e7"}]}, @cipso={0x86, 0x6}]}}}}}}}, 0x0) (async) 8m45.100951039s ago: executing program 5 (id=1509): openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='freezer.self_freezing\x00', 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0xc, 0xe, &(0x7f0000001400)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000100)={0x0, 0x2}, 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x1f00, 0x18, 0x19, &(0x7f00000007c0)="9f44948721919580684010a40566", 0x0, 0x7ff, 0x0, 0xb1, 0x0, &(0x7f0000000700)="389ceff69d08b0af1cc71b6262d50660bbaf31a7f8cd6a6f911beb65d5fe6b54bf21a66489121f24fefd198059288c9b735e1898e77a7469489a249292c02a72bc193a3008ebdbf4e9dd4ee8fcceef55402c913c8dd0ebece1330aaa93ece835c5044a246a5967e3acd7c950b3b19f351830e545eb9bc3a9c6dd22ce97f1f857cfe8b68a2370b69ea336006b589368f92deb68f3dfc6f2bfee09f8342da437fce5dcdf658e453e3132bb42067575318c39", &(0x7f0000000380)="8c5911c525f5cf4c4ecf207ad2ec", 0x0, 0x0, 0xffffffff}, 0x23) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha20\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) r2 = accept4(r1, 0x0, 0x0, 0x80000) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r3) sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000000100000004000480080002000100000008000100000000001c00088004000c8014"], 0x44}}, 0x0) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000080), r3) recvmmsg(r2, &(0x7f0000000600)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000680)=""/242, 0xf2}], 0x1}, 0xebea}], 0x1, 0x40000001, 0x0) sendmsg$IPCTNL_MSG_EXP_DELETE(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)={0xb4, 0x2, 0x2, 0x401, 0x0, 0x0, {0x7, 0x0, 0x7}, [@CTA_EXPECT_NAT={0xa0, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_TUPLE={0x90, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x8c}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @CTA_EXPECT_NAT_TUPLE={0x4}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x874c8455725ed668}, 0x200488c8) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000b40), 0x2328}}, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f0000000c40)={'filter\x00', 0x7, 0x4, 0x3c8, 0xe8, 0xe8, 0x0, 0x2e0, 0x2e0, 0x2e0, 0x4, &(0x7f0000000040), {[{{@arp={@empty, @broadcast, 0xff000000, 0x0, 0x0, 0xc, {@empty, {[0x0, 0x0, 0xff, 0xff, 0x0, 0xff]}}, {@empty, {[0x0, 0x0, 0xff, 0x0, 0xff, 0xff]}}, 0xe, 0x3c1, 0x5, 0x7745, 0x0, 0x6, 'bond0\x00', 'veth1_to_team\x00', {0xff}, {0xff}, 0x0, 0x3ff8dd6dd6934ea0}, 0xc0, 0xe8}, @unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x3, 0x5, 0x1}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x1, 0xb, 0x2}}}, {{@arp={@multicast1, @local, 0xffffffff, 0xffffff00, 0x8, 0x6, {@mac, {[0x0, 0x0, 0x0, 0xff]}}, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x34}, {[0x0, 0xff, 0x0, 0x0, 0x0, 0xff]}}, 0x4, 0x9, 0x100, 0x0, 0x1, 0x3, 'veth0_to_bond\x00', 'sit0\x00', {}, {}, 0x0, 0x1e2}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010100, 0x2}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) 8m44.98156125s ago: executing program 1 (id=1511): r0 = socket$inet(0x2, 0x5, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto]}}, 0x0, 0x26}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000080)={r1, 0x20, &(0x7f0000000040)={0xffffffffffffffff, 0x2, 0x0, 0x0}}, 0x10) (async) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000080)="441f0803000000a8c94ef56491ee54be0e1c2074ed27c1c6fe76cef3e2", 0x1d) (async, rerun: 32) getsockopt$inet_opts(r0, 0x0, 0x4, 0x0, &(0x7f0000000180)) (rerun: 32) 8m44.89287769s ago: executing program 5 (id=1513): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="000224bd7000fbdbdf250200000005003d000600008008000b01"], 0x24}, 0x1, 0x0, 0x0, 0x4008091}, 0x20040000) sendmsg$NL80211_CMD_SET_COALESCE(r1, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, r2, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8}, @void}}}, 0x28}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_CMD_RESET_LINK_STATS(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002602000000dbdf2501000000000000000c410000000c00147377f5e04a7d16f92f"], 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x4000000) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r3, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x28, r5, 0x1, 0x70bd2b, 0x25dfdbff, {{}, {}, {0xc, 0x14, 'syz1\x00'}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x84}, 0x4040800) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000000b00010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)={{0x14}, [@NFT_MSG_DELRULE={0x1b4, 0x8, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFTA_RULE_EXPRESSIONS={0x194, 0x4, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_SOCKET_LEVEL={0x8, 0x3, 0xe2}, @NFTA_SOCKET_LEVEL={0x8, 0x3, 0xb5}, @NFTA_SOCKET_KEY={0x8}, @NFTA_SOCKET_LEVEL={0x8, 0x3, 0xa1}, @NFTA_SOCKET_LEVEL={0x8, 0x3, 0x30}, @NFTA_SOCKET_LEVEL={0x8, 0x3, 0x83}]}}}, {0x50, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_NAT_FLAGS={0x8, 0x7, 0x1, 0x0, 0x84}, @NFTA_NAT_FLAGS={0x8, 0x7, 0x1, 0x0, 0x20}, @NFTA_NAT_REG_PROTO_MAX={0x8, 0x6, 0x1, 0x0, 0x11}, @NFTA_NAT_REG_ADDR_MAX={0x8, 0x4, 0x1, 0x0, 0xd}, @NFTA_NAT_REG_ADDR_MAX={0x8, 0x4, 0x1, 0x0, 0x10}, @NFTA_NAT_REG_ADDR_MIN={0x8, 0x3, 0x1, 0x0, 0x14}, @NFTA_NAT_TYPE={0x8}, @NFTA_NAT_REG_PROTO_MAX={0x8, 0x6, 0x1, 0x0, 0xe}]}}}, {0x14, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}, {0x48, 0x1, 0x0, 0x1, @dup={{0x8}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x8}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x11}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xf}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xb}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xf}]}}}, {0x10, 0x1, 0x0, 0x1, @limit={{0xa}, @void}}, {0x1c, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_INNER_NUM={0x8}]}}}, {0x2c, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xfffffffffffffffe}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x7a71cc43}]}}}, {0x34, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_LIMIT_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_LIMIT_BURST={0x8, 0x3, 0x1, 0x0, 0x9}, @NFTA_LIMIT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFTA_LIMIT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}]}}}, {0x14, 0x1, 0x0, 0x1, @immediate={{0xe}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0x1dc}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800) sendmsg$NFT_BATCH(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000740)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x8}}], {0x14}}, 0x3c}, 0x1, 0x0, 0x0, 0x4008004}, 0x4000000) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) (async) sendmsg$NL80211_CMD_SET_WIPHY(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="000224bd7000fbdbdf250200000005003d000600008008000b01"], 0x24}, 0x1, 0x0, 0x0, 0x4008091}, 0x20040000) (async) sendmsg$NL80211_CMD_SET_COALESCE(r1, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, r2, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8}, @void}}}, 0x28}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) (async) sendmsg$TIPC_CMD_RESET_LINK_STATS(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002602000000dbdf2501000000000000000c410000000c00147377f5e04a7d16f92f"], 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x4000000) (async) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r3, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x28, r5, 0x1, 0x70bd2b, 0x25dfdbff, {{}, {}, {0xc, 0x14, 'syz1\x00'}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x84}, 0x4040800) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000000b00010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)={{0x14}, [@NFT_MSG_DELRULE={0x1b4, 0x8, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFTA_RULE_EXPRESSIONS={0x194, 0x4, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_SOCKET_LEVEL={0x8, 0x3, 0xe2}, @NFTA_SOCKET_LEVEL={0x8, 0x3, 0xb5}, @NFTA_SOCKET_KEY={0x8}, @NFTA_SOCKET_LEVEL={0x8, 0x3, 0xa1}, @NFTA_SOCKET_LEVEL={0x8, 0x3, 0x30}, @NFTA_SOCKET_LEVEL={0x8, 0x3, 0x83}]}}}, {0x50, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_NAT_FLAGS={0x8, 0x7, 0x1, 0x0, 0x84}, @NFTA_NAT_FLAGS={0x8, 0x7, 0x1, 0x0, 0x20}, @NFTA_NAT_REG_PROTO_MAX={0x8, 0x6, 0x1, 0x0, 0x11}, @NFTA_NAT_REG_ADDR_MAX={0x8, 0x4, 0x1, 0x0, 0xd}, @NFTA_NAT_REG_ADDR_MAX={0x8, 0x4, 0x1, 0x0, 0x10}, @NFTA_NAT_REG_ADDR_MIN={0x8, 0x3, 0x1, 0x0, 0x14}, @NFTA_NAT_TYPE={0x8}, @NFTA_NAT_REG_PROTO_MAX={0x8, 0x6, 0x1, 0x0, 0xe}]}}}, {0x14, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}, {0x48, 0x1, 0x0, 0x1, @dup={{0x8}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x8}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x11}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xf}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xb}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xf}]}}}, {0x10, 0x1, 0x0, 0x1, @limit={{0xa}, @void}}, {0x1c, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_INNER_NUM={0x8}]}}}, {0x2c, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xfffffffffffffffe}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x7a71cc43}]}}}, {0x34, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_LIMIT_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_LIMIT_BURST={0x8, 0x3, 0x1, 0x0, 0x9}, @NFTA_LIMIT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFTA_LIMIT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}]}}}, {0x14, 0x1, 0x0, 0x1, @immediate={{0xe}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0x1dc}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000740)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x8}}], {0x14}}, 0x3c}, 0x1, 0x0, 0x0, 0x4008004}, 0x4000000) (async) 8m44.761012918s ago: executing program 1 (id=1516): r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$netlink(0x10, 0x3, 0xa) r2 = socket(0x10, 0x3, 0x6) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYRESOCT=r5, @ANYRES64=r4, @ANYRESDEC=r0, @ANYRES64=r4, @ANYRESOCT=r0, @ANYBLOB="af411dbd3d0dd5bac19f3a70bf40cfeaf88f4fb48a0d00bf9d3c5fee30bb0c"], 0x48}, 0x1, 0x0, 0x0, 0x4010}, 0x10) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0x2}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x8040094}, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000480)=0x14) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000900)=@newqdisc={0x24, 0x24, 0x10, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {}, {0x9, 0xffff}, {0x0, 0xffff}}}, 0x24}}, 0x4000800) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha512)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r7 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r7, &(0x7f0000004780)=[{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000500)="32a4", 0x2}], 0x1, 0x0, 0x0, 0x24004000}], 0x1, 0x80) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x103880, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r9 = socket$kcm(0x2, 0xa, 0x2) sendmsg$can_j1939(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)="77137bc77233f629617b42ecf348972ee438f071aa6707fffafce2a65f54eabccc0a7b3428139dcd0b413d217201aab455684dc89bc647dc01d0b23d4f0be62bd08ca5109f8687d3bcd28d0f1053799f60228e4aca70967f44cb00d6072d9de04f22aa4c2f95e41ff6aff67de899c4645566d905a446de977164ea156d387f54eeebb9ddb03d576ac75d98a86206a2889458fd22895cbd84eb4a6c051720e67dece44e227eff7ea01f672cd1f24cad02ca0f55b2c25b095c68709bd387e2c59a9f2f53de22ee26a3ada49f5e816cb8ff99b6a7b004321da0767788bbab491a4ee986ca691912afbcd0351b993fb37ab3", 0xf0}, 0x1, 0x0, 0x0, 0x4005}, 0x4004) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCETHTOOL(r10, 0x8946, &(0x7f0000000100)={'erspan0\x00', &(0x7f0000000040)=@ethtool_wolinfo={0x4b, 0x7, 0x1ff, "fac16a590b17"}}) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000180)={'wlan0\x00', @multicast}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000ec0)={'ip6tnl0\x00', &(0x7f0000000e40)={'ip6_vti0\x00', 0x0, 0x2f, 0xff, 0x8, 0x3, 0x2, @mcast2, @empty, 0x7, 0x20, 0xffffffff, 0x8}}) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) r12 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000400)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r12, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef", 0x11) sendmsg$IPSET_CMD_CREATE(r11, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="0000000002000000000000000000000000000000dd08935858076be8292db15fbf246aa4a77568a4852a92e0649a0a338ae4c62fc61036a66e9a7128870fbee704ae0ff3813140fa3ac8148aca00b8cea3914ec3170920ee253503fe32f22dbe6c6831148ecce09631c21798bab69b844161a67db01e6b3884a08b8a3894a38f13da4f19e0efb21becfe643adfbf651f2466290ae7ff9d6f1b5939d11348e563e419c373402fc6825f32f41f97bd557ceb21e204c3d0869cacec6ebe9f3f1b9ebf0fc6372ee6939a3576fc9d33b8ce9d22b440fbab9c13963b5914bc951d89588799f7f3fc7580221c87f0a6669c32"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 8m44.66297317s ago: executing program 5 (id=1517): syz_emit_ethernet(0x7a, &(0x7f00000002c0)={@remote, @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "92c01f", 0x44, 0x2f, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @loopback}, {[], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x1}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21}}}}}}}, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000f2ffffff0000000000000000850000001700000095"], &(0x7f0000000080)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r1, 0x0, 0x2000, 0x2000, &(0x7f0000000040)="976d9023d56482cd284a63da539706d7009be646625bd75b025352ebe557df463106baeed6c2d75549b140f143fb8bb67bfe5b308b8d05758115c7ad", &(0x7f0000000180)=""/114, 0x0, 0x0, 0xd8, 0xc4, &(0x7f0000000400)="cf2240e6919817e49555d221b4e6c6ba11c4d974ddab2318db7b52cee499399a00be4b710e9246d7bca28cc8346eb84414e45f3f4633f4acb77bf8cc38c4c16fe035905db79cdc0be634a915662c4cac58ae94706f86ea320f339c21399b5bb7607044916c63c528ab4149718d6215a9a3749113c268e49b2b9dae91ed804e5ac5d4ec7ac9c5fd67a76f9a2b06f7304f6e81221a751008e786e1edde82cf1ecb76cb4cd71cf781ea3a19b917a1e215b1a6c7ee605b32b91eaae38517fde4303d5f2b1e63e9e52ae4b197fd72de1f71801e1f9f1369d1f530", &(0x7f0000000280)="bf049fd184f7b03c21d9bcddc4eef9ebb6a0da3eb91c56454e873dd7336ccf21a1eeb8da7adf80d6e06ef46c7f36222fadaed2103c286468b3f44adee51445bd1bedf8fcc1c0b9fdc8b3829b1bf0c9d2d409cdecb12ad033e299c029331993ae9760345bf7feb91ee96b0eee19454ad3dbce5019b68c114ff1921a9b4665744c7784ac6736101a70592d83c448a84c31ec60bb901d96ea99471d823ee523318878ee704a8d9502b566cad45587cb74ea8259c1c0a926fc09499395b2db5af40bb6f4c526", 0x0, 0x8000}, 0x24) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b35, &(0x7f0000000000)={'wlan1\x00'}) r2 = accept4$x25(0xffffffffffffffff, &(0x7f0000000040)={0x9, @remote}, &(0x7f0000000080)=0x12, 0x81800) ioctl$F2FS_IOC_RESIZE_FS(r0, 0x4008f510, &(0x7f0000000100)=0x401) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r3, 0x6, 0x15, &(0x7f00000001c0), 0x4) ioctl$SIOCX25SCAUSEDIAG(r2, 0x89ec, &(0x7f00000000c0)={0x9, 0xd}) 8m44.455280878s ago: executing program 5 (id=1520): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_IDLE(r0, 0x103, 0x7, &(0x7f0000000040)=0x2000000, 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x5, 0x0, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4890) (async) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4890) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_USERDATA={0x41, 0x7, 0x1, 0x0, "ddebab30013bd7ee0c67b6cdf54cb98e13def2b2e606f216b6f62c49a9bd74efab42f3140f7e53f2e122afb3fd7a04e1673b96490a4f52aa0b96c9ba06"}]}], {0x14}}, 0x98}}, 0x0) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_USERDATA={0x41, 0x7, 0x1, 0x0, "ddebab30013bd7ee0c67b6cdf54cb98e13def2b2e606f216b6f62c49a9bd74efab42f3140f7e53f2e122afb3fd7a04e1673b96490a4f52aa0b96c9ba06"}]}], {0x14}}, 0x98}}, 0x0) 8m44.409514603s ago: executing program 0 (id=1521): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) (async) r3 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) (async) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) syz_emit_ethernet(0x58, &(0x7f00000002c0)={@random="9f0fb34289a8", @remote, @val={@val={0x88a8, 0x6, 0x0, 0x1}, {0x8100, 0x1, 0x1, 0x3}}, {@mpls_mc={0x8848, {[{0x4, 0x0, 0x1}], @ipv6=@dccp_packet={0x2, 0x6, "daff06", 0x16, 0x21, 0x0, @dev={0xfe, 0x80, '\x00', 0x29}, @mcast2, {[], {{0x4e22, 0x4e24, 0x4, 0x1, 0x7, 0x0, 0x0, 0x8, 0x0, "9004e0", 0x80, "75dbe4"}, "cfd440de0671"}}}}}}}, &(0x7f0000000040)={0x1, 0x1, [0x2ad, 0x8a9, 0xad3, 0xb4b]}) (async) syz_emit_ethernet(0x58, &(0x7f00000002c0)={@random="9f0fb34289a8", @remote, @val={@val={0x88a8, 0x6, 0x0, 0x1}, {0x8100, 0x1, 0x1, 0x3}}, {@mpls_mc={0x8848, {[{0x4, 0x0, 0x1}], @ipv6=@dccp_packet={0x2, 0x6, "daff06", 0x16, 0x21, 0x0, @dev={0xfe, 0x80, '\x00', 0x29}, @mcast2, {[], {{0x4e22, 0x4e24, 0x4, 0x1, 0x7, 0x0, 0x0, 0x8, 0x0, "9004e0", 0x80, "75dbe4"}, "cfd440de0671"}}}}}}}, &(0x7f0000000040)={0x1, 0x1, [0x2ad, 0x8a9, 0xad3, 0xb4b]}) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001000)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd2d, 0x25dfdc00, {0x0, 0x0, 0x0, r8, {0x0, 0x3}, {}, {0xfff3, 0xffe0}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}, @TCA_CHAIN={0x8, 0xb, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x50}, 0x0) socket(0x400000000010, 0x3, 0x0) (async) r9 = socket(0x400000000010, 0x3, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) recvmsg$can_raw(r9, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x100) sendmsg$nl_route_sched(r9, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000006080)=@delchain={0x2c, 0x66, 0x221, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r11, {0x0, 0xfff2}, {}, {0xb, 0xfff3}}, [@TCA_CHAIN={0x8, 0xb, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8848}, 0x20004800) (async) sendmsg$nl_route_sched(r9, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000006080)=@delchain={0x2c, 0x66, 0x221, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r11, {0x0, 0xfff2}, {}, {0xb, 0xfff3}}, [@TCA_CHAIN={0x8, 0xb, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8848}, 0x20004800) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)={0x20, 0x2c, 0x117, 0x0, 0x0, {0x3, 0x7c}, [@nested={0x8, 0x1, 0x0, 0x1, [@typed={0x4, 0x6}]}, @nested={0x4, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x38, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_COMPAT={0xc, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x29}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}]}], {0x14, 0x11, 0x20}}, 0x60}, 0x1, 0x0, 0x0, 0x8010}, 0x0) 8m44.189100842s ago: executing program 1 (id=1522): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={0x0, 0x144}}, 0x20000000) r1 = socket(0x1e, 0x4, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0xfffffffc}, 0x10) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) recvmmsg(r2, &(0x7f0000002840)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000480)=""/4085, 0xff5}], 0x1}, 0xbe58}], 0x1, 0x7ffeedc0, 0x0) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0xffffffff}, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r4, 0x11b, 0x3, &(0x7f00000001c0)=0x800, 0x4) r5 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r5, &(0x7f0000000100)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000060000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff0000000309", 0x48}], 0x1) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x28, r6, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x28}}, 0x0) 8m44.187941608s ago: executing program 0 (id=1523): r0 = socket$igmp(0x2, 0x3, 0x2) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000004c0)={'vxcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000500)={0x1d, r2, 0x1, {0x1}, 0xff}, 0x18) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x25dfdbfe, {0x2, 0x0, 0x10, 0x0, 0xfd, 0x4, 0xfe, 0x2, 0x20000000}, [@RTA_NH_ID={0x8, 0x1e, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4010) r4 = socket$inet(0xa, 0x801, 0x84) connect$inet(r4, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) listen(r4, 0x8) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) r6 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={0xffffffffffffffff}, 0x4) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000001c0)={0x4c, r5, 0x1, 0x0, 0x25dfdbfb, {0x41}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xfffffffffffffecd}, {0x8, 0x87}}]}, 0x4c}}, 0x0) r8 = accept4(r4, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r8, 0x84, 0x1a, &(0x7f0000000440), &(0x7f00000001c0)=0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x37}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r9, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000006c0)='./cgroup/cgroup.procs/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000010a40)=[0x93e6], 0x0, 0x0, 0x1}}, 0x40) bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0)={0x0, r6}, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x0, 0x2000000000000108, &(0x7f0000000740)=ANY=[@ANYBLOB="750400000000000000000000000000008510000000000000"], &(0x7f0000001800)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) 8m43.667167974s ago: executing program 34 (id=1523): r0 = socket$igmp(0x2, 0x3, 0x2) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000004c0)={'vxcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000500)={0x1d, r2, 0x1, {0x1}, 0xff}, 0x18) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x25dfdbfe, {0x2, 0x0, 0x10, 0x0, 0xfd, 0x4, 0xfe, 0x2, 0x20000000}, [@RTA_NH_ID={0x8, 0x1e, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4010) r4 = socket$inet(0xa, 0x801, 0x84) connect$inet(r4, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) listen(r4, 0x8) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) r6 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={0xffffffffffffffff}, 0x4) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000001c0)={0x4c, r5, 0x1, 0x0, 0x25dfdbfb, {0x41}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xfffffffffffffecd}, {0x8, 0x87}}]}, 0x4c}}, 0x0) r8 = accept4(r4, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r8, 0x84, 0x1a, &(0x7f0000000440), &(0x7f00000001c0)=0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x37}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r9, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000006c0)='./cgroup/cgroup.procs/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000010a40)=[0x93e6], 0x0, 0x0, 0x1}}, 0x40) bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0)={0x0, r6}, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x0, 0x2000000000000108, &(0x7f0000000740)=ANY=[@ANYBLOB="750400000000000000000000000000008510000000000000"], &(0x7f0000001800)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) 8m43.636792756s ago: executing program 1 (id=1525): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x4, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000dd0a00000000000073014a00000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7, 0x0, 0xffffffffffffffff, 0x300}, 0x48) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000180)={0x0, 0x2, 0x5, 0x5}) 8m43.41583472s ago: executing program 35 (id=1525): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x4, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000dd0a00000000000073014a00000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7, 0x0, 0xffffffffffffffff, 0x300}, 0x48) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000180)={0x0, 0x2, 0x5, 0x5}) 8m43.407963122s ago: executing program 5 (id=1526): r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x9, 0x1}}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001300)=@newtfilter={0x70, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0x9}, {}, {0x1, 0xfff1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x40, 0x2, [@TCA_CGROUP_EMATCHES={0x3c, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x2c, 0x1, 0x0, 0x0, {{0x3, 0x9, 0x80}, [@TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x7}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x4}, @TCA_EM_IPT_MATCH_DATA={0x4}]}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}]}]}}]}, 0x70}}, 0x1) r2 = socket$netlink(0x10, 0x3, 0x0) accept4$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000080)=0x14, 0x400) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 8m43.407312468s ago: executing program 36 (id=1526): r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x9, 0x1}}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001300)=@newtfilter={0x70, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0x9}, {}, {0x1, 0xfff1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x40, 0x2, [@TCA_CGROUP_EMATCHES={0x3c, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x2c, 0x1, 0x0, 0x0, {{0x3, 0x9, 0x80}, [@TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x7}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x4}, @TCA_EM_IPT_MATCH_DATA={0x4}]}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}]}]}}]}, 0x70}}, 0x1) r2 = socket$netlink(0x10, 0x3, 0x0) accept4$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000080)=0x14, 0x400) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 6m53.57034775s ago: executing program 7 (id=2782): r0 = socket$igmp6(0xa, 0x3, 0x3a) setsockopt$MRT6_TABLE(r0, 0x29, 0xcf, &(0x7f0000000000)=0xfd, 0x4) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000940)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000016c0)={{0x14}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @exthdr={{0xb}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x68}}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={0x14, 0x1, 0x8, 0x0, 0x0, 0x0, {0x2, 0x0, 0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) 6m53.456364014s ago: executing program 7 (id=2785): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0xa4, 0x0, 0x9, 0x801, 0x0, 0x0, {}, [@NFCTH_PRIV_DATA_LEN={0x8}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_TUPLE={0x3c, 0x2, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @NFCTH_TUPLE={0x40, 0x2, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010102}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}]}, 0xa4}}, 0x0) 6m53.34951083s ago: executing program 7 (id=2787): r0 = socket(0x2a, 0x2, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="c40000001900674c000000000000000000000000000000000000000000000000ac1e000100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="01000000000000000000000000000000000000000000000000000000000000000056d70082b800a9890080000000000000929500000900000000000000ffffff0000000000000000b0acb9010000000000000000040000000000000000000000000400000000000000000000000000000a00100001"], 0xc4}}, 0x4c050) syz_emit_ethernet(0x46, &(0x7f00000009c0)={@link_local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x10, 0x3a, 0xff, @dev, @mcast2, {[], @ndisc_ra}}}}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r2, 0x400, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @void}}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1c}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x88}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x74}}, 0x0) 6m53.217544371s ago: executing program 7 (id=2790): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003"], 0xfc}}, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="14010000200001010000000000000000010100800c00"], 0x114}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000854000000800000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000107010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newlink={0x34, 0x10, 0x609, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @lowpan={{0xb}, {0x4}}}]}, 0x34}}, 0x0) 6m50.952414016s ago: executing program 7 (id=2794): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000000c0)='subflow_check_data_avail\x00', r0, 0x0, 0x200000}, 0x18) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0xb, &(0x7f0000000640)=ANY=[], &(0x7f00000004c0)='GPL\x00', 0x4, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x94) r2 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r2, &(0x7f0000000000)={0x18, 0x2, {0x0, @local}}, 0x1e) connect$pptp(r2, &(0x7f0000000080)={0x18, 0x2, {0x0, @rand_addr=0x64010102}}, 0x1e) connect$pptp(r2, &(0x7f0000000040)={0x18, 0x2, {0x2, @rand_addr=0x64010102}}, 0x1e) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f00000000c0)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001640)=ANY=[@ANYBLOB='D\n\x00\x00', @ANYRES16=r4, @ANYBLOB="05002abd7000fddbdf2501000000060006004e240000fc0908802804008024000100dbffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0004098070000080060001000a00000014000200fe80000000000000000000000000000a0500030000000000060001000a00000014000200fe8000000000000000000000000000aa0500030001000000060001000a00000014000200fe8000000000000000000000000000aa0500030003000000a0000080060001000a0000001400020000000000000000000000ffff640101010500030000000000060001000a00000014000200fe8000000000000000000000000000bb0500030002000000060001000200000008000200ac1414aa0500030002000000060001000a00000014000200fc00000000000000000000000000000105000300020000000600010002000000080002000a0101020500030001000000d0000080060001000200000008000200ac1e01010500030000000000060001000a00000014000200000000000000000000000000000000000500030000000000060001000200000008000200ac1414bb0500030006000000060001000a00000014000200fe8000000000000000000000000000420500030001000000060001000a00000014000200fc02000000000000000000000000000105000300020000000600010002000000080002007f0000010500030002000000060001000200000008000200000000000500030002000000ac000080060001000200000008000200ac1414aa0500030001000000060001000a00000014000200fc00000000000000000000000000000005000300020000000600010002000000080002000a01010105000300000000000600010002000000080002007f0000010500030001000000060001000200000008000200e00000010500030001000000060001000a0000001400020020010000000000000000000000000001050003000200000064000080060001000a00000014000200fe8000000000000000000000000000bb0500030001000000060001000a00000014000200ff0100000000000000000000000000010500030002000000060001000200000008000200ac1414aa05000300000000000c010080060001000200000008000200000000000500030001000000060001000a00000014000200fe8000000000000000000000000000410500030003000000060001000a00000014000200ff0100000000000000000000000000010500030000000000060001000a00000014000200fc0100000000000000000000000000010500030000000000060001000a00000014000200fc0200000000000000000000000000000500030003000000060001000200000008000200ac1414aa0500030003000000060001000a00000014000200fc0200000000000000000000000000010500030001000000060001000a00000014000200fe80000000000000000000000000002b050003000200000040000080080003000000000008000a000100000024000100f44da367a88ee6564f020211456727082f5cebee8b1bf5eb7337341b459b392208000300030000008c00008024000100975c9d81c983c8209ee781254b899f8ed925ae9f0923c23c62f53c57cdbf691c24000100f44da367a88ee6564f020211456727082f5cebee8b1bf5eb7337341b459b392208000a000100000024000100d1732899f611cd8994034d7f413dc957630e5493c285aca40065cb6311be696b1400040002004e22000000000000000000000000040500807002098094000080060001000a00000014000200000000000000000000000000000000000500030002000000060001000200000008000200ffffffff0500030000000000060001000200000008000200e000000105000300020000000600010002000000080002007f0000010500030002000000060001000a000000140002000000000000000000000000000000000105000300010000004c000080060001000200000008000200ac1414bb0500030002000000060001000200000008000200640100fe0500030001000000060001000200000008000200ac1414bb0500030002000000e8000080060001000a00000014000200200100000000000000000000000000010500030000000000060001000200000008000200e000000205000300020000000600010002000000080002006401010005000300020000000600010002000000080002007f00000105000300010000000600010002000000080002007f0000010500030001000000060001000a00000014000200fe8000000000000000000000000000bb0500030002000000060001000200000008000200e00000010500030003000000060001000a00000014000200200100000000000000000000000000020500030001000000880000800600010002000000080002000000000005000300000000000600010002000000080002006401010205000300000000000600010002000000080002007f0000010500030003000000060001000a00000014000200200100000000000000000000000000000500030001000000060001000200000008000200ac14142d05000300010000001c000080060001000200000008000200ffffffff0500030003000000080003000200000024000100f44da367a88ee6564f020211456727082f5cebee8b1bf5eb7337341b459b39221c02098058000080060001000200000008000200000000000500030003000000060001000200000008000200ac1414aa0500030001000000060001000a00000014000200fe880000000000000000000000000101050003000100000040000080060001000200000008000200ac1e00010500030001000000060001000a0000001400020000000000000000000000ffff0a010102050003000300000000010080060001000200000008000200ac1e00010500030000000000060001000a00000014000200fe8800000000000000000000000000010500030003000000060001000200000008000200000000000500030002000000060001000200000008000200ffffffff0500030000000000060001000a00000014000200ff0200000000000000000000000000010500030000000000060001000a00000014000200200100000000000000000000000000010500030003000000060001000200000008000200e000000105000300000000000600010002000000080002007f00000105000300020000000600010002000000080002000a010100050003000000000064000080060001000200000008000200ac1414aa0500030000000000060001000a00000014000200fe8000000000000000000000000000aa0500030000000000060001000a000000140002002001000000000000000000000000000205000300010000001c000080060001000200000008000200ac141416050003000100000024000100d1732899f611cd8994034d7f413dc957630e5493c285aca40065cb6311be696b240002000f1b8b82264208ab1a2dce776c03b9f348f500ef8e7606466943f5ba2ae2881e08000100", @ANYRES32=r5, @ANYBLOB="240003"], 0xa44}, 0x1, 0x0, 0x0, 0x4000}, 0x40) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000000c0)='subflow_check_data_avail\x00', r1, 0x0, 0x200000}, 0x18) close(0xffffffffffffffff) close(0x3) r6 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r6, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000081) 6m50.569080108s ago: executing program 7 (id=2801): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) unshare(0x22020400) bpf$BPF_TASK_FD_QUERY(0x24, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100001000000000000000000abc920000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d08000c40000000020800034000000110140000001000010000000000000000000084000ab5bd34b7e249056ee6eb132f2bfadc0800ae8240125b3f5d4c7ac80a0d0f4a1d0e92b414985c8ba6491e7cc934856a2e2eb0a35f0151213f3d34050c6ba00000"], 0x94}}, 0x0) 6m50.295822682s ago: executing program 37 (id=2801): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) unshare(0x22020400) bpf$BPF_TASK_FD_QUERY(0x24, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100001000000000000000000abc920000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d08000c40000000020800034000000110140000001000010000000000000000000084000ab5bd34b7e249056ee6eb132f2bfadc0800ae8240125b3f5d4c7ac80a0d0f4a1d0e92b414985c8ba6491e7cc934856a2e2eb0a35f0151213f3d34050c6ba00000"], 0x94}}, 0x0) 2m18.754087724s ago: executing program 2 (id=5795): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newtaction={0x6c, 0x30, 0x1, 0x0, 0x0, {}, [{0x58, 0x1, [@m_mpls={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x4}}, @TCA_MPLS_LABEL={0x8}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) (async, rerun: 64) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000200001"], 0xb8}}, 0x0) (rerun: 64) 2m18.416784714s ago: executing program 2 (id=5800): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_XFRM_DIR={0x5}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xcc}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0xbf}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0xc, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) ioctl$IMSETDEVNAME(0xffffffffffffffff, 0x80184947, 0x0) sendmsg$nl_route(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=@newlink={0x38, 0x10, 0x437, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4048b}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_TTL={0x5, 0x4, 0x7}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4c050}, 0x4000804) 2m18.310686395s ago: executing program 2 (id=5802): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$NFNL_MSG_COMPAT_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000006c0)=ANY=[], 0x14}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@gettaction={0x40, 0x32, 0x800, 0x70bd25, 0x25dfdbfb, {}, [@action_gd=@TCA_ACT_TAB={0x2c, 0x1, [{0xc, 0x14, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xe97}}, {0xc, 0x11, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1ff}}, {0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}]}]}, 0x40}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0xa) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r1, 0x0, 0x0}, 0x20) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000600)={'ip6tnl0\x00', 0x0, 0x2f, 0x4, 0x0, 0x3, 0x8, @remote, @mcast2, 0x1, 0x1, 0xb3, 0xb16}}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000680)=ANY=[@ANYBLOB="440000001000030400000000feffffff00000000", @ANYRES32=r3, @ANYBLOB="05220000eddf00006970366772650000020000000800040009000000370446ff23664241e2fa2f6608a23ed4b8b2c18a47b9dacd138a1f8d68b60672c5d3e9042a22933d2cefa24e0bc991162dd3f0ac846f67fc121440746793167e5776a95772734f919c486ec764082f17840a911cd57bec"], 0x44}, 0x1, 0xba01}, 0x0) 2m18.06960075s ago: executing program 2 (id=5804): sendmsg$tipc(0xffffffffffffffff, &(0x7f0000001800)={0x0, 0x0, &(0x7f0000001640)=[{&(0x7f0000000440)="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", 0x188}], 0x1}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000000580)=ANY=[@ANYBLOB="680200000005010400000000000000000000000054020100"/40], 0x268}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, 0x0, 0xc000) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000080)={0x3c, r2, 0x1, 0x70bd24, 0x25dfdbfe, {}, [@ETHTOOL_A_LINKINFO_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x9}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x39}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20009005}, 0x4000080) 2m17.941098261s ago: executing program 2 (id=5808): syz_emit_ethernet(0xbe, &(0x7f00000000c0)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e22, 0x9c, 0x0, @wg}}}}}, 0x0) syz_emit_ethernet(0x9e, &(0x7f0000000180)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x90, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e22, 0x7c, 0x0, @wg=@data={0x4, 0x0, 0x0, '\x00'/100}}}}}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x34, r1, 0xb97534d5fe9704cf, 0x70bd2c, 0x25dfdbfb, {{0x12}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_WME={0xc, 0x81, [@NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x6}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x40084}, 0x2009c058) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000800), r3) sendmsg$IEEE802154_SCAN_REQ(r3, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x2c, r4, 0xd5c15c672e322a81, 0x0, 0x0, {}, [@IEEE802154_ATTR_CHANNELS={0x8}, @IEEE802154_ATTR_DURATION={0x5}, @IEEE802154_ATTR_SCAN_TYPE={0x5}]}, 0x2c}}, 0x0) r5 = socket(0x2, 0x80805, 0x0) close(0x3) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001"], 0xb8}}, 0x0) r8 = epoll_create1(0x0) ioctl$FS_IOC_SETFLAGS(r8, 0x40088a01, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r7, &(0x7f0000000580)={0x40000008}) sendmmsg$inet_sctp(r5, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[], 0x30}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r5, 0x6, 0x16, &(0x7f0000000040)=[@timestamp], 0x1) ioctl$AUTOFS_IOC_READY(r6, 0x9360, 0x4000) 2m17.74149991s ago: executing program 2 (id=5811): r0 = socket$pppl2tp(0x18, 0x1, 0x1) getsockopt(r0, 0x8, 0x80000001, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="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", @ANYRESOCT=r0], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x4, 0x4, 0x12}, 0x48) r3 = socket$can_raw(0x1d, 0x3, 0x1) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000740)=@newtaction={0x78, 0x30, 0xb, 0x0, 0x0, {}, [{0x64, 0x1, [@m_ct={0x60, 0x1, 0x0, 0x0, {{0x7}, {0x38, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}, @TCA_CT_MARK={0x8, 0x10}, @TCA_CT_LABELS={0x14, 0x7, "296524f13eb7394549979c0db12f7a74"}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x78}}, 0x0) r5 = epoll_create(0x7) r6 = epoll_create1(0x0) r7 = epoll_create(0x7) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000180)) r8 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r5, &(0x7f0000000000)={0x40000000}) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r8, &(0x7f0000000100)={0x5}) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) bind$can_raw(r3, &(0x7f00000001c0)={0x1d, r9}, 0x10) setsockopt$CAN_RAW_FILTER(r3, 0x65, 0x1, 0x0, 0x0) r10 = socket(0x10, 0x3, 0x0) write(r10, &(0x7f0000000000)="2400000011005f0414f9f4070009041f810000000e0000000000000008000f0001000000", 0x24) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@map=r2, r1, 0x26}, 0x10) close(r2) 2m2.637672752s ago: executing program 38 (id=5811): r0 = socket$pppl2tp(0x18, 0x1, 0x1) getsockopt(r0, 0x8, 0x80000001, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="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", @ANYRESOCT=r0], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x4, 0x4, 0x12}, 0x48) r3 = socket$can_raw(0x1d, 0x3, 0x1) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000740)=@newtaction={0x78, 0x30, 0xb, 0x0, 0x0, {}, [{0x64, 0x1, [@m_ct={0x60, 0x1, 0x0, 0x0, {{0x7}, {0x38, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}, @TCA_CT_MARK={0x8, 0x10}, @TCA_CT_LABELS={0x14, 0x7, "296524f13eb7394549979c0db12f7a74"}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x78}}, 0x0) r5 = epoll_create(0x7) r6 = epoll_create1(0x0) r7 = epoll_create(0x7) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000180)) r8 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r5, &(0x7f0000000000)={0x40000000}) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r8, &(0x7f0000000100)={0x5}) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) bind$can_raw(r3, &(0x7f00000001c0)={0x1d, r9}, 0x10) setsockopt$CAN_RAW_FILTER(r3, 0x65, 0x1, 0x0, 0x0) r10 = socket(0x10, 0x3, 0x0) write(r10, &(0x7f0000000000)="2400000011005f0414f9f4070009041f810000000e0000000000000008000f0001000000", 0x24) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@map=r2, r1, 0x26}, 0x10) close(r2) 2.007116435s ago: executing program 9 (id=7124): connect$pptp(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0x2, {0x0, @remote}}, 0x1e) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000080)={0x0, 'syz_tun\x00', {0x4}, 0xa}) r1 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) sendmsg$NFT_BATCH(r1, &(0x7f0000000700)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000140)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWTABLE={0x2c, 0x0, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x3}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWSET={0x504, 0x9, 0xa, 0x3, 0x0, 0x0, {0x3}, [@NFTA_SET_USERDATA={0x88, 0xd, 0x1, 0x0, "19f8d9818156b801cd6df866b556a7ed5a1b1897cfa8e3ced0d705947614899b18a8d0638469795431d2e627ec3ea4f9cb8af6a0182d6c765f8f367d9f6b5d0e182e0d80849c047d2a1b2a530b5c9cd8881aed9bc7ee618e80ea3927bd3566a62500c0da29ee763778d495ab464e261cfb6ff7fe530d0d861e9737ebf38b3e7b2a8ce1b3"}, @NFTA_SET_USERDATA={0xcb, 0xd, 0x1, 0x0, "290a9e6913fad6d0d27b8ae2854e613b43174fc1b7e1f5fabae84c16d9bb4f432e3b2d6842d356caa2b755d67bc5dcea8c21e2d2870b81e08757a99ae55243786b812b9fbbde2ce9347e522b23db25b7fd267924a0772c48a50fbcd30e763670b9a87ebafd9c70b1f1d9ffef85cbfef8f6e01a5d0316a677023d59315c6ac82056aff9dfb9509a06138a11e6f3be70ced0d96c61a249be0de955fb653dfdf70c6a02964317e5a3b902df5a00164dd1eb5fb1d263f7a1d6e08e409463b6b2f3064aff50bdb9a93f"}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x1}, @NFTA_SET_USERDATA={0xba, 0xd, 0x1, 0x0, "f557a4deb94fd147d1fd46776a36665ccccbfb798fa86c10f975474ea8e427e868c9163528c06058519facf351c8549eb77525218d93bbd0f2f433969770f52f49cf621d631fa57ceb2822e55aada3d81fd0f68f3cbc8d5fe7b9b94b85482d630d5d2651edc70cabfafeae72a5866d5ce59f62f7ff333933c7d5166c068e204fc93561bb5f89bb1be11632904f0dbb54c64697572a2252c078cb2877d69ffd41bfa671d9f79d55a81d76eb23fa79a72654aff820d77e"}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0xa}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1b}, @NFTA_SET_DESC={0x2a8, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x7fff}, @NFTA_SET_DESC_CONCAT={0x104, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5d57}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x65f}]}, {0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfe0c}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x33}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}, {0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffe01}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xb}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xb8f6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}]}, {0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xcd}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}]}, {0x3c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffeffff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x10001}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}]}]}, @NFTA_SET_DESC_CONCAT={0x130, 0x2, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xbc}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2a7}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x95}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7525}]}, {0x4c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x776b}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x101}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffffd}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffff62d}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xac}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x40}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}]}, {0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xe}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5988}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6df4ad46}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xb0f0}]}]}, @NFTA_SET_DESC_CONCAT={0x58, 0x2, 0x0, 0x1, [{0x54, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xf}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x31}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3ff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x40a}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}]}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x6}]}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x23}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x3}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x558}, 0x1, 0x0, 0x0, 0x20000000}, 0x4080) sendmsg$NL80211_CMD_LEAVE_IBSS(r1, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x14, 0x0, 0x8, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0xc000}, 0x4004051) getsockname$inet(r1, &(0x7f0000000840), &(0x7f0000000880)=0x10) r2 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000900)=@o_path={&(0x7f00000008c0)='./file0\x00', 0x0, 0x10, r0}, 0x18) r3 = gettid() getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000b00)={0x0}, &(0x7f0000000b40)=0xc) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000b80)={0x0, 0x0, 0x0}, &(0x7f0000000bc0)=0xc) ioctl$NS_GET_OWNER_UID(r1, 0xb704, &(0x7f0000002180)=0x0) r7 = getgid() r8 = socket$inet6_sctp(0xa, 0x1, 0x84) r9 = openat$cgroup_type(r1, &(0x7f00000021c0), 0x2, 0x0) ioctl$NS_GET_OWNER_UID(r1, 0xb704, &(0x7f0000002200)=0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000002240)={0x0, 0x0, 0x0}, &(0x7f0000002280)=0xc) ioctl$NS_GET_OWNER_UID(r1, 0xb704, &(0x7f00000022c0)=0x0) r13 = getgid() r14 = accept$ax25(0xffffffffffffffff, &(0x7f0000002300)={{0x3, @bcast}, [@default, @default, @remote, @remote, @remote, @default]}, &(0x7f0000002380)=0x48) r15 = accept$inet6(r0, &(0x7f00000023c0)={0xa, 0x0, 0x0, @private0}, &(0x7f0000002400)=0x1c) r16 = getuid() getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000002440)={0x0, 0x0, 0x0}, &(0x7f0000002480)=0xc) sendmmsg$unix(r1, &(0x7f00000025c0)=[{{&(0x7f0000000940)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000000ac0)=[{&(0x7f00000009c0)="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", 0xfe}], 0x1, &(0x7f0000000c00)=[@rights={{0x28, 0x1, 0x1, [r0, r0, r1, r1, r2, r2]}}, @cred={{0x1c, 0x1, 0x2, {r4, 0xee00, r5}}}], 0x48, 0x10}}, {{&(0x7f0000000c80)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000002000)=[{&(0x7f0000000d00)="3b46095f5a8e0d37a59f5a349857193f46ca59c54805ef1c773ffff3f8ab6811f571b37043ed", 0x26}, {&(0x7f0000000d40)="3ae30a92af3ae2216444b66e2438cc4107060a757b010456ec5b44ce9dbd7f6837d21d7987e561a300a536970d979c41624d04218cd4aff5df882d7b70c8f8bdb33954e8c1f2ec0f1fb64ff467cfc3559e30eecbe4bba17b49ddca04eb88ee948dcdd8a0b73c41ef68f479690cfccf8b54204a7a0881c5512fef9853d8df195a5294c6d6c61a55657a2649", 0x8b}, {&(0x7f0000000e00)="cb40bf08e33526f520ebb21456a510cc84af670f80b44d4ca279413abc486a5e15d01d4d3a1fbfb06fc756ebac74c3b5e77af987e7082c07316f628d1813512e4f336554143710b072de04d0db6c2bfe43155beb7d98261a8339b87bb6636d74e0f75bdf6d37fe848e96200f3dd2892e6bcceac740105ac0c88e577a9c144bfad8dd44c1460ec84575e5d064ff457e6d04069cda90b5190e1d6ad3be7cb29b1d7cc85315224ca440", 0xa8}, {&(0x7f0000000ec0)="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", 0x1000}, {&(0x7f0000001ec0)="04d1f8", 0x3}, {&(0x7f0000001f00)="2d897696d56bd0f3a778ab3e261965712a6baa2176b3b3210db94b30ac5c6fecaf35990139f89ebd96a0dba3f1f6d5a161a05dcbd8cd1c4402c61464d5da65e50a6a534afa56907cce22103989f25baf1cb052250c56340a1a12d948c9d87bcc61d4b400e817fd1a4c4d9c133640186925cecdb600a0e73db99b23f325ef982aa59bbcb0c23809f9834ba4ca2606de2979bf1d931dc13cd233db91cacd9c7b8b4d296c565041f74da4a117263a716450f09211e54a02bf2e0846c8173539a05e33183ec222bbd71c5b009c63a80e74600aae215b44", 0xd5}], 0x6, &(0x7f0000002080), 0x0, 0x40004}}, {{&(0x7f00000020c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000002140), 0x0, &(0x7f00000024c0)=[@cred={{0x1c, 0x1, 0x2, {r3, r6, r7}}}, @rights={{0x30, 0x1, 0x1, [r1, r0, r2, r8, r2, r2, r9, r1]}}, @cred={{0x1c, 0x1, 0x2, {r3, r10, r11}}}, @cred={{0x1c, 0x1, 0x2, {r3, r12, r13}}}, @rights={{0x30, 0x1, 0x1, [r0, r0, r1, 0xffffffffffffffff, r0, r0, r14, r15]}}, @cred={{0x1c, 0x1, 0x2, {r3, r16, r17}}}], 0xe0, 0x4000000}}], 0x3, 0x80) ioctl$EXT4_IOC_GROUP_ADD(r9, 0x40286608, &(0x7f0000002680)={0x4, 0x2, 0x81, 0xffffffffffff39ad, 0x1000, 0xa}) syz_genetlink_get_family_id$SEG6(&(0x7f00000026c0), r1) syz_emit_ethernet(0xd0, &(0x7f0000002700)={@empty, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @val={@void, {0x8100, 0x0, 0x1, 0x1}}, {@ipv4={0x800, @icmp={{0x1c, 0x4, 0x1, 0x1e, 0xbe, 0x65, 0x0, 0x1, 0x1, 0x0, @multicast1, @loopback, {[@noop, @ra={0x94, 0x4, 0x1}, @generic={0x44, 0x12, "c0029f7b36ade23832096e4c37570f2f"}, @cipso={0x86, 0x45, 0xffffffffffffffff, [{0x6, 0xe, "8bb56e3fda9cbe7ce7834f07"}, {0xeb6b7cec80dd8820, 0xf, "7930d956519040d628e61a800e"}, {0x5, 0x11, "b8544063de75df189d429ce403da63"}, {0x5, 0x11, "4eef6e109f551045ba6f2e3344fa8f"}]}]}}, @time_exceeded={0xb, 0x0, 0x0, 0x0, 0x8, 0x0, {0x10, 0x4, 0x1, 0x14, 0x7, 0x68, 0x3ff, 0x8, 0x84, 0x5, @empty, @multicast2, {[@ssrr={0x89, 0xf, 0x62, [@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @local]}, @timestamp={0x44, 0x14, 0xf0, 0x0, 0xe, [0xa011, 0x4, 0xfffffff8, 0x7d]}, @lsrr={0x83, 0x3, 0x44}, @timestamp={0x44, 0x4, 0x28, 0x0, 0x8}]}}, "e9a59b52b2b5"}}}}}, &(0x7f0000002800)={0x1, 0x4, [0xac0, 0x921, 0x9, 0x9ec]}) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r8, 0x84, 0x71, &(0x7f0000002840)={0x0, 0x1}, 0x8) getsockopt$inet_udp_int(r1, 0x11, 0x2, &(0x7f0000002880), &(0x7f00000028c0)=0x4) 1.948784397s ago: executing program 8 (id=7126): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x200002, 0x0) mkdirat$cgroup(r1, &(0x7f00000000c0)='syz1\x00', 0x1ff) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r0, 0x111, 0x3, 0x20000008, 0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x12, 0x3, 0x8, 0x2}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r2, &(0x7f0000000700), 0x0}, 0x20) 1.89550186s ago: executing program 9 (id=7128): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) bind$netlink(r1, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=@newlink={0x44, 0x10, 0x40d, 0x70bd2f, 0x1ffffffc, {0x0, 0x0, 0x0, r2, 0x40046}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x4}, @IFLA_BOND_XMIT_HASH_POLICY={0x5, 0xe, 0x2}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40040}, 0x8000) sendmsg$nl_route(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x200e3}, [@IFLA_MASTER={0xffffffffffffff9a, 0xa, r2}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 1.781881537s ago: executing program 8 (id=7130): r0 = accept(0xffffffffffffffff, &(0x7f0000000000)=@alg, &(0x7f0000000080)=0x80) setsockopt$inet_sctp6_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f00000000c0)=0x8000, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000140), r0) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000180)={0x0, @private, @local}, &(0x7f00000001c0)=0xc) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000300)={'tunl0\x00', &(0x7f0000000240)={'ip_vti0\x00', 0x0, 0x7800, 0x8, 0x5, 0x6, {{0x27, 0x4, 0x1, 0x3d, 0x9c, 0x68, 0x0, 0x2, 0x29, 0x0, @loopback, @multicast2, {[@cipso={0x86, 0x58, 0x3, [{0x5, 0x11, "db69628d7f8d05a294049796fd194f"}, {0x7, 0xf, "c6c80d90553b0d2ff994bd0bcb"}, {0x7, 0x5, "8e2532"}, {0x2, 0x7, 'C6A-\b'}, {0x7, 0x4, "b41c"}, {0x5, 0x9, "d73897d19db2ad"}, {0x6, 0x5, "9b12f5"}, {0x6, 0xa, "130b7115c8f05796"}, {0x6, 0xa, "58b78107530e2bef"}]}, @timestamp_prespec={0x44, 0x1c, 0x15, 0x3, 0x1, [{@empty, 0x4}, {@multicast1, 0x3}, {@loopback, 0x2}]}, @ssrr={0x89, 0x7, 0xdb, [@initdev={0xac, 0x1e, 0x1, 0x0}]}, @end, @end, @ssrr={0x89, 0xb, 0x86, [@private=0xa010100, @initdev={0xac, 0x1e, 0x0, 0x0}]}]}}}}}) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r1, &(0x7f00000004c0)={&(0x7f0000000100), 0xc, &(0x7f0000000480)={&(0x7f0000000340)={0x114, r2, 0x800, 0x70bd2a, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x4c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x1c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r3}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x20, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x48, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xe}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r5}]}]}, 0x114}, 0x1, 0x0, 0x0, 0x8000}, 0x8001) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000000500)=[@in6={0xa, 0x4e20, 0x6, @private0}, @in={0x2, 0x4e23, @private=0xa010102}, @in6={0xa, 0x4e20, 0x2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x37}}, 0x1}, @in={0x2, 0x4e23, @empty}, @in6={0xa, 0x4e20, 0x6a01743f, @loopback, 0x3ff}, @in={0x2, 0x4e23, @multicast2}, @in6={0xa, 0x4e20, 0x102, @dev={0xfe, 0x80, '\x00', 0x28}}, @in={0x2, 0x4e21, @rand_addr=0x64010100}, @in6={0xa, 0x4e20, 0xfff, @private1={0xfc, 0x1, '\x00', 0x1}}], 0xcc) getsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000600), &(0x7f0000000640)=0x8) sendmmsg$sock(r0, &(0x7f0000002a40)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000680)="7222756999df023ab54fffce0d631c7f61a77877619bbca8d274caacbfcb8f5602fe0e33a7f25b6ab170cd8258f74f81dd8ff3e36ef1d798327e48cbdf47060b1da9017cc8b54f64bd08d7ccb1f8886146ca0d223cf692c463f23c509968e9d38d4a159c59f4548f54eff4b3d76d9f62396610419543c0cbef0884e8afcae1c8e7410de5632128922f8296de2225d25770475afb0647a56db79306c128144b8247113ef55a342f4ea792f6dc9f560f71e8afab44", 0xb4}], 0x1, &(0x7f0000000780)=[@timestamping={{0x14, 0x1, 0x25, 0x6e67}}], 0x18}}, {{&(0x7f00000007c0)=@sco, 0x80, &(0x7f0000000e80)=[{&(0x7f0000000840)="f81c554744d4d114fea23676bc9a95d7c5b21787113cfb110b46a31d6016e703afe2ea0b4253fa3770258efaaa59d09f6683ecf17eaf59d6fea1977415ceb83ff845052548cd0c2aa47cbca70bf14c06088d06afe15b63cec84efc67eaa7a96ad20f99b6e9b1c224845064484b65331a7ce4f8af00fdb57c684327c1c9e65711f0fa6a8f5c87641015ecd6a2e69e0dd3cec0610a5b5af754badccdba4ff8cf0a8272b14bbb7dc018e2343813466afbda0330c8f798c6c667e807d8bb9125c8bb1cdf6e03c8fe2afcd3cec5be458d97b502", 0xd1}, {&(0x7f0000000940)="72afc469c364c3dd9dd62e26b541949b5235f9dd39d4ded424649607a6ba6cccbf5937aaed2ff282fe7c17811081a39283ea44ad33e2e7838f90aab2ff072035c50ce2377036ecf9397e5fc9e01a7feff3b81863ecb2704f30ed752da5eca2b7424002caab59f56c1f75dd67a7e72fbb2bdc22bcfe58b6788bc637af611c645bf36723cc1de4f82a34f0e15e0871e78cf6d7247522ee9f0e6c171ef48341a03f5a38eb5a17d33a2206f58f2786f5591afdc3f0e5fe15679ee4f8c4716a7f7a3044cea9da79afccd8dd9bee0da2dc247e89", 0xd1}, {&(0x7f0000000a40)="cc1c788a63226d9ab7413e41a2bd7cce4c8a26947ef8dbc95d5b2817797655b94b57f9b053c3a41087fc27750ee5a72c789b84152202966e81b4f00c33b879d28b005a55a101c96b764fa97e6edf800e7a92c8326379538abb7d270c2ff9c048ec8373b34ded859c69c04c855a6b2c", 0x6f}, {&(0x7f0000000ac0)="041016bf134091212df38c36543c33777e9267f012658b092eca713bca565947e69f9ed7806b094543b2282aefad0feea98d1351cfb63abd97d61e23446062f18365550a9730cbb763a92fc57b226e545ab4c5c9c8a71120f9f8c8f1e82fbcc60cff25541aced66d4de29354705b7fa5cee57bd795f6aa72e6d8ca579aef8695897d6c9c37bcb670a5c2fe51f94e573657d7c92aa1f6", 0x96}, {&(0x7f0000000b80)="06daed8ccbbec98363310d8c40aa50f828f264e1001fb0d371f9b21257ad550a28142ef3befd7219c297abd5950af18b83fc73f5bd184e3e6ab430d6652fe3be4b672b0d34ae59bbaa4e710c4bde289a65fc2ff86342b2a60f9d5f5457bb8475c0d2f560a950c43e04d915a9a27cd8c414838467ff205755499dad75153815f39fa3509f17a0f7541b699616", 0x8c}, {&(0x7f0000000c40)="a480006a18032b371c0b0434df26257511020b60d5dddc0171a8092ad2e038dd", 0x20}, {&(0x7f0000000c80)="63d178434a7513f600bd9637ecec29b511fcec585b4e93332493a9c1900fedb1e154d5e12c153cec9a81c0ba79258f22951f1bb47512ed5a583f3dddda2d12b4ec1499483c0e1543a34c99d81bcb982a211d16324f608cc8ab88aa68823582ddfe63afb95dd8ef7a500210814a905360ddbff9d359d2d96789d9994c077008ec0513f1d36510fdbb5b1c40158421cf52a54d6f6ce4271b05a23d794253624809699bd95026e31fccbb0bc38d1c693d2278fe45ee694624087828b1b3e39bef3628", 0xc1}, {&(0x7f0000000d80)}, {&(0x7f0000000dc0)="c87d25309ea34dd2fa2ab0e09aa46d774c341cf6c9282127581d222b18fb4cf61d32028c16509f136080799296f46a808458bf9aa44d8141fccca8c16150b5be968fc63ca08462aa86edb4630f475a8bd309404eb865e0785f094d3063d7eeb684458a1fb2ef5a80287c38ad1dc8ccb3146c068a05fd2b4dba12432e0a5e02253e2a0f79fb75b04c35f94d778acca26320da", 0x92}], 0x9}}, {{&(0x7f0000000f40)=@ieee802154={0x24, @short={0x2, 0xffff, 0xffff}}, 0x80, &(0x7f00000010c0)=[{&(0x7f0000000fc0)="ca627bfe73c62d1f75c55cfd43941ed87ece2c23a7d0393f9fa13f4db1fd7f840b33df3a6086f59a875de27c99f217d3b0ba4720204bf4a5a5c4bbf145a799d822ce593c36953459a2d489152c59fcb61385445ca104791df5c1da40d71bd0d607be0cb01e2ae7ac1e1a0c0c3d9d1230222a274945efe7c92fd80f21a8239a4bda877388526551d184d3a59b67297de0b4b1b59b4259e4bc45", 0x99}, {&(0x7f0000001080)="e0d9af7a1e1a0d", 0x7}], 0x2, &(0x7f0000001100)=[@timestamping={{0x14}}, @timestamping={{0x14}}, @mark={{0x14, 0x1, 0x24, 0x6}}, @mark={{0x14, 0x1, 0x24, 0xb37d}}, @mark={{0x14, 0x1, 0x24, 0x44}}, @mark={{0x14, 0x1, 0x24, 0x9}}], 0x90}}, {{&(0x7f00000011c0)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e22, @broadcast}, 0x0, 0x1, 0x3, 0x1}}, 0x80, &(0x7f00000025c0)=[{&(0x7f0000001240)}, {&(0x7f0000001280)="dd710b043c65790d5a929de8ba21374be93a142ad94f2de0c89b0f4c8b024998c555d951a35e4fb9c7ecedb4b18f99a6f03a5c5e39459427751f3dd695732620e68cefee7c5372423e6227f40650839dce51025b5850363a9944eeb67ac404652e697d", 0x63}, {&(0x7f0000001300)="a53a61fd4d77c89b42c9b0b41dde77c6f8b5311bba112e17c76759dd28b544f979ef935f54ad56f415c3e59cdc9e3cd07cf2ee3fa2f867f2715773ec0bfc1eefd814409ed2258b610b80088a635eba09447de6087642fb321c0cf971d0e661379310dfce877928dcdd2d553fe8a085d35da0ec2a39ea74ae108a4e272482de6ad0db65d316574fba5829a78e38798258fc0356515170e53a9d9c174dabcdb9f6175f646a80d81c8bb3a1a42c2a70e4b5c4835b8af674d670a57dd508ed04845a77aa1876b9d7193f16b59e505ad77df11962fcf5f64bb7d6ce", 0xd9}, {&(0x7f0000001400)="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", 0x1000}, {&(0x7f0000002400)="fbed09ff7e6f648c0a9ce17b1aa49ac2cc3926e0b096a6c7131bee2fbafff91c468214914c5d22b92cdde8590500d63986eba0f4ace92fc346e63f298abd93f3eaa0d5f3b40a75ea8ee141d2091c3e8e04afa4fed4c111d2edc4b96bdc14e2a225bad5cc6ec5779ffd3414dde9ec0a526b455e1c4e015482e1a67133ce08cff159e3e8364b6dc97414b95435428f4d94c248665c8d383e4a5b132b94b81555a97cb810a8b7f56eb83c334c", 0xab}, {&(0x7f00000024c0)="d3d1cbc648fee51ccdceb9980c458580981525ca1775278c70fdef05c96f4e5ce64adac604cc455def494977e4f50fb4becb692a5c570e1e6c1e4eb5b87eea9dfcafd78b78b75bc05ceb9dcbc06c762dbfad72e6d81753f2dd8e543c1fade6ae85d29c50f50aa79ef514b90b68be33539564c00c63683962f74c63b75efc3035e101ebeb56d9c53f3b2da3926a1783e6cf4093676564c0b2343cf329771f287f8665698e8082243a47c6818eeb56c18902d4ca59fe4e6e9a3045d90599cc1d672c65c8acd9f0d6d1982ac0ef39962f367d0893d3b1a9c5be4c5dca0cb2fd9d8606e8b77589ef08b99e2d1f1f82f2bce6b2298c38bfa3d7c1d2", 0xf9}], 0x6, &(0x7f0000002640)=[@timestamping={{0x14, 0x1, 0x25, 0xfc}}, @txtime={{0x18}}, @timestamping={{0x14, 0x1, 0x25, 0x1}}], 0x48}}, {{&(0x7f00000026c0)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x19}}, 0x2, 0x3, 0x2, 0x1}}, 0x80, &(0x7f00000029c0)=[{&(0x7f0000002740)="4b56db918f8e3b14d341ac0982df6bafb89e06469faae475994ec56d39a6cf6ceedb61c05a7a18e90c5806c6222ba59fcdbed7709745c114be65e2f5c5a5fc3831c2dd12bb67c82c46c8c02379874be4a614", 0x52}, {&(0x7f00000027c0)="367124d35ea9f6a7254427c73b3ef3706af39b3b2a8253728dfff289c65262630905fa5b4bcf0ef13aafe415614460c73554cb168372e7dc3d254ef88ac508a9493e97056f04f333c85d93f58192440a363cba3179f1888d683efa7da42d0e61f18c0efa75b7d830369465e894bf35134302e6e1be395fe1833eb73eacade9a64c045e2183e6d6474099e1659f9ce4ef66493b92018a87840b0d98f4fa6c472123d522e26dd5b3eb93065f4f6d69eb48d4f03539717fb0cc7f4a43c104920edd6f", 0xc1}, {&(0x7f00000028c0)="a40c725280c4887c86589e52e42f640daf749084afcd5bdcecca6789c9c974cf5733cdcbee71028e17084f558d5476d389ce0d521cb31ba5501193cb39526529f59f4b9b31e30c4191b25b692dad9fe380d18fcfbe783605568f7b131e50a1200ec6d3487d359ee89e7f5ecb213d5890c00cdb715a7411db61c4fbbec3658aac186e5d3eb503648a262e5872c0cd246746026c59988910c73275bbbb295ebc4196e27f09108d78424325bcfab7b31511cf3f11d77fa52e952e6dc5cedf6069124786e638d15a0f50696d9d223c7b3bdc2917ba88f005572ec36aa996ed04cf427bb8ff117414c637", 0xe8}], 0x3, &(0x7f0000002a00)=[@mark={{0x14, 0x1, 0x24, 0x5}}], 0x18}}], 0x5, 0x40001) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000002b80)={0x0, @in6={{0xa, 0x4e20, 0x3, @remote, 0x5}}, [0xfffffffffffffffc, 0x4, 0x5, 0xff, 0x8, 0x26, 0xffffffffffffffff, 0x4, 0xfffffffffffffff1, 0x3, 0x7ff, 0x0, 0x2, 0x1, 0xff]}, &(0x7f0000002c80)=0x100) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000002cc0)={r6, 0x241f704d}, 0xc) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000002d00)={r6, 0x22d, 0x1}, 0x8) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000002d80), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_STATS(r0, &(0x7f0000002e40)={&(0x7f0000002d40)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000002e00)={&(0x7f0000002dc0)={0x1c, r7, 0x8, 0x70bd25, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x44000) socket$inet(0x2, 0x4, 0x40) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000002f40)={&(0x7f0000002e80)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000002f00)={&(0x7f0000002ec0)={0x1c, 0x0, 0x1, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x74}, @void, @void}}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x48000}, 0x4001) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000002f80)={r6, 0x2, 0x0, 0x100, 0x8}, &(0x7f0000002fc0)=0x18) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000003000)={r8, 0x6}, 0x8) r9 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r9, 0x84, 0x21, &(0x7f0000003040), &(0x7f0000003080)=0x4) r10 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000030c0)={r8, 0x6}, 0x8) ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(r10, 0xf505, 0x0) setsockopt$inet_int(r9, 0x0, 0x3d, &(0x7f0000003100)=0x80, 0x4) getsockopt$MISDN_TIME_STAMP(r1, 0x0, 0x1, &(0x7f0000003140), &(0x7f0000003180)=0x4) r11 = syz_genetlink_get_family_id$batadv(&(0x7f0000003200), r0) sendmsg$BATADV_CMD_GET_GATEWAYS(r1, &(0x7f0000003300)={&(0x7f00000031c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000032c0)={&(0x7f0000003240)={0x50, r11, 0x0, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x10}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x80000001}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) sendmsg$NL80211_CMD_TDLS_MGMT(r0, &(0x7f0000003500)={&(0x7f0000003340)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000034c0)={&(0x7f0000003400)={0xb4, 0x0, 0x800, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0x8}, @NL80211_ATTR_IE={0x16, 0x2a, [@ibss={0x6, 0x2, 0xfffc}, @ext_channel_switch={0x3c, 0x4, {0x0, 0x8, 0x142, 0x5}}, @supported_rates={0x1, 0x6, [{0x38}, {0x0, 0x1}, {0x1, 0x1}, {0xc, 0x1}, {0x4, 0x1}, {0x9, 0x1}]}]}, @NL80211_ATTR_IE={0x6e, 0x2a, [@preq={0x82, 0x30, {{0x1, 0x0, 0x1}, 0xf9, 0xf0, 0x5, @device_b, 0x7, @void, 0x631, 0x9a, 0x2, [{{0x1}, @broadcast, 0x4}, {{}, @device_b, 0x7}]}}, @ssid={0x0, 0x6, @default_ap_ssid}, @prep={0x83, 0x25, {{0x0, 0x1}, 0xd, 0x19, @device_a, 0x3, @value, 0xf, 0x5, @device_a, 0x2}}, @mesh_config={0x71, 0x7, {0x1, 0x0, 0x1, 0x1, 0x2, 0x0, 0x49}}]}, @NL80211_ATTR_TDLS_PEER_CAPABILITY={0x8, 0xcb, 0x9}]}, 0xb4}, 0x1, 0x0, 0x0, 0x20000004}, 0x1) 1.716127628s ago: executing program 6 (id=7131): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000001ac0)=0x2000002b, 0x26) (async) socket$inet_icmp(0x2, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000480)={'gretap0\x00', 0x0}) sendto$packet(r0, &(0x7f00000002c0)="05031600d3fc140000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x13, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="7a0a00ff000000007110760000000000950000000000000076063202ddc1667f9214fb94e35fc6ac824d814732ac8e67fc471d45bd46b04d2b5156b8e3164c98b31feb9e81cff821d3e7631664d7a9ae865fbaf3ac9bb50b0a63faefd4904d11cece9ca5f1c4bc258a08b2a8fb1f35744846dabefbc685db47457972a7658a05d8955f99110cb67f5a21fa05e2f0"], &(0x7f0000000480)='syzkaller\x00'}, 0x80) (async, rerun: 64) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 64) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x4, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x558}}, 0x40) (async, rerun: 64) sendmsg$NFT_MSG_GETSETELEM(r3, &(0x7f0000000240)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000200)={&(0x7f00000004c0)={0x48, 0xd, 0xa, 0x301, 0x0, 0x0, {0x5}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000010}, 0x4000000) (rerun: 64) 1.712065706s ago: executing program 9 (id=7132): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f0000000a40)={0x3, {{0x2, 0x4e21, @multicast1}}}, 0x90) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_HELLO_TIME={0x8, 0x2, 0x3}]}}}]}, 0x3c}}, 0x0) 1.699261793s ago: executing program 3 (id=7133): r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x5, 0x1}, {}, {0x8, 0x7}}, [@filter_kind_options=@f_flow={{0x9}, {0xc, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x15625}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20020804}, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000001400000008000a00fc000000180001"], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="b40a000040000900000000000000000003000000040060809c0a01"], 0xab4}, 0x1, 0x0, 0x0, 0x80}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r4) getsockname$packet(r4, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x5, 0x32, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=@dellink={0x120, 0x11, 0x1, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, r5, 0x4280, 0x10000}, [@IFLA_IFALIASn={0x4}, @IFLA_IFALIASn={0x4}, @IFLA_PROP_LIST={0xa4, 0x34, 0x0, 0x1, [{0x14, 0x35, 'pim6reg1\x00'}, {0x14, 0x35, 'nr0\x00'}, {0x14, 0x35, 'ipvlan0\x00'}, {0x14, 0x35, 'veth0_macvtap\x00'}, {0x14, 0x35, 'pim6reg0\x00'}, {0x14, 0x35, 'vlan1\x00'}, {0x14, 0x35, 'syzkaller1\x00'}, {0x14, 0x35, 'ipvlan0\x00'}]}, @IFLA_PORT_SELF={0x3c, 0x19, 0x0, 0x1, [@IFLA_PORT_VF={0x8, 0x1, 0x6}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "b91f52dcf297d0979910ae6d577503d9"}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "b55983d6234ca414eaa86055cd424c6c"}, @IFLA_PORT_REQUEST={0x5, 0x6, 0xf8}]}, @IFLA_LINK_NETNSID={0x8, 0x25, 0x3}, @IFLA_NUM_RX_QUEUES={0x8, 0x20, 0x7}, @IFLA_PHYS_PORT_ID={0x5, 0x22, "f0"}]}, 0x120}, 0x1, 0x0, 0x0, 0x40010}, 0x4c040) sendmmsg$inet(r3, &(0x7f0000000700)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000d00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @dev={0xac, 0x14, 0x14, 0x7}, @remote}}}], 0x20}}], 0x1, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000001c0)=ANY=[@ANYRES32=r1, @ANYRES16=r1, @ANYBLOB="010326bd6000000000002d"], 0x20}, 0x1, 0x0, 0x0, 0x40904}, 0x20040814) 1.611540305s ago: executing program 9 (id=7135): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) (async) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=@newqdisc={0x3c, 0x24, 0xe0b, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0xffe0, 0xd064db0e491fa98f}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_MEMORY={0x8, 0xa, 0x842}]}}]}, 0x3c}}, 0x4000080) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r5 = socket(0x400000000010, 0x3, 0x0) (async) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_QUANTUM={0x8, 0x3, 0x7331c94d}]}}]}, 0x38}}, 0x0) (async) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14) (async) sendto$inet6(r0, &(0x7f0000000800)="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", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0) 1.565285466s ago: executing program 3 (id=7136): connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x0, @none, 0x701, 0x1}, 0xe) syz_emit_ethernet(0x12, &(0x7f00000002c0)={@broadcast, @remote, @val={@void, {0x8100, 0x6, 0x1, 0x3}}, {@generic={0x86dd}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000080)=@framed={{}, [@ldst={0x2, 0x2, 0x3, 0x1, 0x0, 0x3d}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.numa_stat\x00', 0x26e1, 0x0) close(r0) ioctl$SIOCSIFHWADDR(r0, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100"}) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x16, 0x16, &(0x7f0000000f40)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000140)={r0, &(0x7f0000000080)="8d7f3414786c42779303b03701c9d83af6ce65dfbf77a41d04d3bd9ed0cfbc66e8"}, 0x20) 1.552187622s ago: executing program 6 (id=7137): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$kcm(0x11, 0x6, 0x0) syz_emit_ethernet(0x32, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa000800490000240000000000009078ac1414bbac1414358907efffffffff860600000000000000f6c1be4dc0271e9a1c486ff7acbe7dad37a34a45e89fc217c86ff9e2b6772be0aa242f371e10db1e3d8899ec7efc03d754d8ec2577f9c0a4001a29af1e90b4c6358948737f377d3293fddfb61e65ff2bc1721caf085f38"], 0x0) (async, rerun: 32) setsockopt$sock_attach_bpf(r1, 0x107, 0xf, &(0x7f0000000000), 0x4) (async, rerun: 32) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000006800010000000000000000000a0000000400000004000b"], 0x1c}}, 0x0) (async, rerun: 32) r3 = socket(0x10, 0x3, 0x0) r4 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r4, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x20) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100000000000000000001000500050007000000000008000900030000001400200000000000000000000000e1ffe000000108000a0000000000060002000100000014001f"], 0x5c}, 0x1, 0x6c}, 0x0) (async) r7 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r9, &(0x7f0000000100)=ANY=[], 0x32600) (async) unshare(0x20400) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000005, 0x80010, r9, 0x0) (async, rerun: 64) bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0) (async, rerun: 64) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=@newqdisc={0x80, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4c, 0x2, [@TCA_FQ_CODEL_QUANTUM={0x8, 0x6, 0x8}, @TCA_FQ_CODEL_LIMIT={0x8, 0x2, 0x10}, @TCA_FQ_CODEL_FLOWS={0x8, 0x5, 0x9}, @TCA_FQ_CODEL_FLOWS={0x8, 0x5, 0x683}, @TCA_FQ_CODEL_TARGET={0x8, 0x1, 0x5}, @TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5, 0xb, 0x44}, @TCA_FQ_CODEL_MEMORY_LIMIT={0x8, 0x9, 0x10000}, @TCA_FQ_CODEL_INTERVAL={0x8, 0x3, 0xffffffc0}, @TCA_FQ_CODEL_DROP_BATCH_SIZE={0x8, 0x8, 0x1}]}}]}, 0x80}}, 0x0) sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000180)=@hci={0x1f, 0x0, 0x5}, 0x80, &(0x7f0000000200)=[{&(0x7f00000002c0)="1c393502dda1a67d93b1ceccbe972c4fef9c33ecf2d824f3a33513f45f472bbdc8e3a2275f2587f0da0b3ae419bed996116448f90d113ce98aa985f379d729430858f5cb9a668a1800bf2354b33cdff83033de518580a3080d7f4cc2406e071138439e1566dd17983ee153ab672f362d3292e24a9952f18ec3d8b37bb3391096c1d4442a754899299321c03cbcfb98a26994b2a072c2b9d9c70d619545e5f61b050e40166d2ff57dcc008f24fd5339e7bc21e25863f80d2487c30b6bf781608a31d68e9319ab1712d8f5bdde849c040417c864cbfd3923dcb9fc6bdc2ea53334184b03efcb631dc68f0a7b6e13eea4b80d4237120e32932ca4e2b50bad0a35496d36a191d91f03b477b9587bc0ba489932e34f819fa1524ebad53a3d94b46c6aeff4f42fa067729fbb2862c09d337a75e0c8429d4bfe0dee2e1e23e8c22787178600ecca135623731e4701f35bd4e7c936a8ee274120e7662328a5aba1161b05889b045696721c79bff0547efe051f3c5de77fdd3c77afd41a1a7747a982b7efb013c9d6bac7d3ad1f9b7c3a5a1448b35696f03bca1c875e346edc55b7a271c3e5f3c0df72c8e4d7cccfa2e9b598f0ae06efbc1a5d5bd91aed6b32deccf7755cef50fab72633c802533b9d94f17f9be978f2514c47671575ee528fbdddc6194328e605e4d10e293756d20eb8a545f2bfe48df5d1d98a270458392a0a57647dcb8ee005e78877a072d12d0429b9b9957a695c3289b4a59469691115e6ba204181708b9d1ae47418ed594b8128f20c100f5485a84e60d73ab818da73fab78caf42afd1f8", 0x243}], 0x1}, 0x9cdc2384056f48b8) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a300000000040000000160a01000000000000000000010000000900010073797a30000000000900020073797a3000000000140003800800014000000000080002400000000050000000160a0103000b000000000000010000000900020073797a30000000000900010073797a30000000001c000380"], 0xd8}}, 0x0) sendfile(r7, r9, &(0x7f0000000540), 0x1) 1.344940621s ago: executing program 8 (id=7138): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@ipmr_delroute={0x30, 0x19, 0x1, 0x0, 0x0, {0x80, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, 0x5}, [@RTA_MULTIPATH={0xc, 0x9, {0x8}}, @RTA_PREFSRC={0x8, 0x7, @multicast2}]}, 0x30}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a300000000040000000030a010200e5000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a300000000068000000060a010400000000000000000100000008000b40000000000900010073797a3000000000400004803c0001800a0001006c696d69740000002c0002800c000240000000008000000108000440000000010c0001400000000000000008080005400000000114000000110001"], 0xf0}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r2, 0x89f1, &(0x7f0000000000)={'ip6tnl0\x00', &(0x7f0000000140)=@ethtool_cmd={0x3a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x45}}) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="48010000100001000000080000000000fe880000000000000000000000000001fe80000000000000000000000000000000000000000000000a0020005c000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac1414bb0000000000000000000000000000000033000000fc0200000000000000000000000000010000000000000000ffffffffffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdffffffffffffff0000000000000019000000000000000000000000000000000000000000000000000000000a00028000000000000000004c001400736d330000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c0015005907350009000000"], 0x148}, 0x1, 0x0, 0x0, 0x20004001}, 0x0) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x4001}, 0xfea3) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r7, {0x0, 0x1}, {0xffff, 0x2}, {0x0, 0xc}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x40, 0x2c, 0xd3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0xffff, 0xf}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_flower={{0xb}, {0x10, 0x2, [@TCA_FLOWER_KEY_ETH_DST={0xa, 0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x80) r8 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), r4) sendmsg$TIPC_CMD_GET_LINKS(r5, &(0x7f0000000500)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, r8, 0x300, 0x70bd2c, 0x25dfdbfd, {{}, {}, {0x8, 0x11, 0x3}}, ["", "", "", "", "", "", "", "", ""]}, 0x24}}, 0x40000) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="b00000000002010400000000000000000700000608000940ffffffff080004400000008108001840000000032000018006000340000200001400018008000100ac1414aa08000200ffffffff0800044000000056b1d50b1d04075c000a8008000140000000015000028014000180080001007f00000108000200640101000c000280050001002f0000002c0001801400030020"], 0xb0}, 0x1, 0x0, 0x0, 0x8004}, 0x10) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000005e"], 0x1c}}, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x1, 0x31, 0x30, 0x65, 0x0, 0x9, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote}, @source_quench={0x4, 0x0, 0x0, 0x0, {0x5, 0x4, 0x1, 0x5, 0x0, 0x65, 0x174, 0xd, 0x73, 0x6, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}}}, 0x0) 1.343564912s ago: executing program 3 (id=7139): r0 = socket$tipc(0x1e, 0x5, 0x0) (async, rerun: 32) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000240)=@deltaction={0xc8, 0x31, 0x430, 0x70bd25, 0x25dfdbfc, {}, [@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xff}}]}, @TCA_ACT_TAB={0x4}, @TCA_ACT_TAB={0x38, 0x1, [{0x10, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0xc, 0x19, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0xc, 0x19, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0xc, 0xc, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}]}, @TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x60}}]}, @TCA_ACT_TAB={0x38, 0x1, [{0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0x10, 0x17, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0xc, 0xa, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x80000000}}, {0xc, 0x1f, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}]}, @TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x12, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}]}]}, 0xc8}, 0x1, 0x0, 0x0, 0x40001}, 0x40800) (async, rerun: 32) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) (async) preadv(r1, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) (async) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0x41}, 0x10) (async, rerun: 64) bind$tipc(r0, 0x0, 0x0) (rerun: 64) setsockopt$TIPC_IMPORTANCE(r0, 0x10f, 0x7f, &(0x7f0000000040)=0x1, 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x403, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20101, 0x382}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_UDP_ZERO_CSUM6_TX={0x5}]}}}]}, 0x3c}, 0x1, 0xba01}, 0x810) (async, rerun: 32) r3 = socket$netlink(0x10, 0x3, 0xa) (rerun: 32) sendmsg$nl_crypto(r3, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000140)=ANY=[@ANYBLOB="10d700001400010025bde81cfedbdf2544949b670a59b6e362870bbe8946ebd1f4c8be75c8b24a5f6a7e1ba7992551f74fe5f9d03658b7e6d9d956e435d720d905e2c9bde7859d2317dca429aea0c884aa8ad02ba73f76bc78535e1e0cac93c8f93dbaf95c8f4a50b5a4e4e4e3431582db60f6fd9c6f7b0b5f13b226092c4cacc17bceed0da2b4b331c3ae7c3323073ed87be7757e3682181fc1f72a1d159a13e44a0ad6a31065761b4dad15dd0780b95499f052d0ffb3c5e51ca01b44a08514e6ceda38c128352f3f5df05ea495c62cce64f4570718aedcaebacf28c4c0d5c4f36eb7c7e2df9b2ae3aec2bc2f5171294c5225cfbe"], 0x10}, 0x1, 0x0, 0x0, 0x4040000}, 0x4004010) sendmsg$tipc(r0, &(0x7f0000000340)={&(0x7f0000000000)=@name={0x1e, 0x2, 0x3, {{0x41, 0x1}}}, 0x10, 0x0}, 0x1) 1.343172283s ago: executing program 9 (id=7140): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000080)={0x37, 0x800000, 0x7, 0x9, 0x1ff}) write$bt_hci(r0, &(0x7f0000000080)=ANY=[], 0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r2 = socket(0x10, 0x3, 0x0) accept$alg(r2, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'\x00', 0x0}) r4 = accept4$unix(r1, &(0x7f0000000000), &(0x7f0000000080)=0x6e, 0x800) recvfrom$unix(r4, &(0x7f00000000c0)=""/24, 0x18, 0x20, &(0x7f0000000140)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=@newqdisc={0xac, 0x24, 0xf0b, 0x20, 0x25dfdbff, {0x60, 0x0, 0x0, r3, {0x0, 0xc}, {0xffff, 0xffff}, {0x0, 0xffe0}}, [@TCA_STAB={0x88, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x4, 0x6, 0x10, 0x4, 0x2, 0x6863, 0xc05, 0x6}}, {0x10, 0x2, [0x101, 0x0, 0x2, 0x1, 0x5, 0x84]}}, {{0x1c, 0x1, {0x80, 0x9, 0xa, 0x8a, 0x1, 0x80000000, 0x5, 0x4}}, {0xc, 0x2, [0x2, 0x2780, 0x3, 0xe]}}, {{0x1c, 0x1, {0x6, 0x2, 0xc000, 0x9, 0x1, 0x9f, 0x5702, 0x7}}, {0x12, 0x2, [0x9, 0x3, 0x6, 0xb, 0x5, 0x4427, 0x7]}}]}]}, 0xac}, 0x1, 0x0, 0x0, 0x20000805}, 0x20000000) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="480000002e00090025bd70000000000004000000320016"], 0x48}, 0x1, 0x0, 0x0, 0x42804}, 0x84) socket$alg(0x26, 0x5, 0x0) 1.342614721s ago: executing program 6 (id=7141): unshare(0x6020400) r0 = socket$vsock_stream(0x28, 0x1, 0x0) shutdown(r0, 0x300) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10) getsockopt$bt_hci(r1, 0x84, 0x84, &(0x7f0000000040)=""/4146, &(0x7f0000000000)=0x1032) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000300)={0x1, 0x1000}, 0x4) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000080)=0xf3e, 0x62) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x43}, 0x94) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0xf5ffffff, &(0x7f0000000000)='%', 0x0, 0xd01, 0xbe02, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) getsockopt$SO_COOKIE(r2, 0x1, 0x39, &(0x7f0000000100), &(0x7f0000000140)=0x8) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r4) r5 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r5, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r6}, &(0x7f0000000000), &(0x7f0000000080)=r4}, 0x20) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000001080), r7) r8 = socket$isdn(0x22, 0x3, 0x21) sendto$isdn(r8, &(0x7f00000010c0)={0xff, 0x1, "25edb1fa582208c7e406d01a43c5f9f3a1e25a90172b5e321b57aec94143fc0c8d67592b1cb71d1b8322b9b37e1baf847793e60e1d8b2f38320e3b0c0dbf"}, 0x46, 0x10, &(0x7f0000001140)={0x22, 0x2, 0x1, 0x6, 0xff}, 0x6) recvmmsg(r2, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000000c0)=""/27, 0x1b}], 0x1}, 0x7}, {{0x0, 0x0, 0x0}, 0x4}], 0x2, 0x0, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCGSTAMPNS(r9, 0x8907, &(0x7f0000001180)) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0xc09, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @multicast}]}, 0x40}}, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) 1.15720404s ago: executing program 3 (id=7142): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x47c0a}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_LIMIT={0x5, 0x6, 0x4}]}}}]}, 0x3c}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r3, 0x114, 0x8, &(0x7f0000000600), 0x4) setsockopt$SO_RDS_TRANSPORT(r3, 0x114, 0x8, 0xfffffffffffffffe, 0x0) r4 = socket$phonet_pipe(0x23, 0x5, 0x2) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000040)={'vlan0\x00', &(0x7f00000000c0)=@ethtool_cmd={0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}) accept$phonet_pipe(r4, 0x0, 0x0) r6 = socket$rxrpc(0x21, 0x2, 0x2) r7 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r7, &(0x7f0000000340)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x0, @local}}, 0x24) bind$rxrpc(r7, &(0x7f0000001280)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, 0x24) bind$rxrpc(r6, &(0x7f0000000200)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}}, 0x24) close(r6) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000580)={0x20, r8, 0x1, 0x70bd2d, 0x0, {0x22}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x20}}, 0x880) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x3, 0xc, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000000000000000000000008500000011000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r9, 0x0, 0x10, 0x10, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000090c00"/20, @ANYRES32=0x0, @ANYBLOB="8100050000000000280012800b00e8ff6272696467650000020002800c002300000000000000000005002a0001000000a5ec6a36457ce6d8d1d088653fec36366ac0830faf73a84dabe57159cc7d5077791d1e04579d1735555914a8a091da444cf85dfb708366d18ef310f059c7d5277ad2d1be7b6b57e8675b9b46c35aec6c4772ca761eec745b2552ac7045"], 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x40080) syz_init_net_socket$ax25(0x3, 0x5, 0x6) sendmsg$nl_route(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)=@ipv4_getnexthop={0x30, 0x6a, 0x222, 0x70bd2d, 0x25dfdbfc, {}, [@NHA_FDB={0x4}, @NHA_ID={0x8}, @NHA_GROUPS={0x4}, @NHA_FDB={0x4}, @NHA_FDB={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x4014}, 0x20004004) bpf$TOKEN_CREATE(0x24, &(0x7f0000000180)={0x0, r2}, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0xd, 0x4, &(0x7f00000001c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) 1.065114721s ago: executing program 8 (id=7143): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r5, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x1c, r4, 0x1, 0x70bd2c, 0x4, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}]}, 0x1c}}, 0x20) (async) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r6, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r7, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) (async, rerun: 64) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x38, 0x0, 0x108, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x7fffffff, 0x7}}}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x7}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x7}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x4004014) (async, rerun: 64) r8 = socket(0x10, 0x3, 0x0) setsockopt$MRT_DEL_MFC(r8, 0x0, 0xcd, &(0x7f00000001c0)={@local, @multicast1, 0xffffffffffffffff, "2d42899b150ed00e9bb2af46ce5fd4d058a5343fcd69d3a9582a95333905e77c", 0x8, 0x9, 0x0, 0x1}, 0x3c) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000000c0)={'gretap0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r10, {0x0, 0x5}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x3}]}}]}, 0x3c}}, 0x4000000) 1.001530347s ago: executing program 9 (id=7144): r0 = socket(0x2, 0x80805, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x304}, '\x00', "877dab43c700", '\x00', "0100"}, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8b04, &(0x7f0000000000)={'wlan1\x00'}) write$rfkill(r1, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000340)={'wg2\x00', {0x2, 0x4e24, @empty}}) syz_emit_ethernet(0x62, &(0x7f00000005c0)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x3, 0x54, 0x64, 0x0, 0x7, 0x6, 0x0, @remote, @remote}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x10, 0x10, 0x6071, 0x0, 0xe7, {[@mptcp=@add_addr={0x1e, 0xa, 0x0, 0xa, 0xe, @multicast1}, @mss={0x2, 0x4, 0x3}, @timestamp={0x8, 0xa, 0x400040, 0x7fffffff}, @mss={0x2, 0x4, 0x7ff}, @sack={0x5, 0xe, [0x40, 0x8, 0x5]}]}}}}}}}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0xfff, 0x5}, 0x48) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x4}, 0x38) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x12, 0x3, 0x8, 0x2}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r4, &(0x7f0000000700), 0x0}, 0x20) r5 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x41, &(0x7f0000000000)=0x2512, 0x4) sendmmsg$inet6(r5, &(0x7f00000000c0)=[{{&(0x7f00000001c0)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x0) recvfrom(r5, 0x0, 0x0, 0x2000, 0x0, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x4e24, 0x4f, @mcast2, 0x3}, 0x1c) getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x81, &(0x7f0000000140)={'nat\x00', 0x0, 0x4, 0xa6, [0x7, 0x4, 0x7, 0x200, 0x9, 0x9], 0x4, &(0x7f0000000000)=[{}, {}, {}, {}], &(0x7f0000000040)=""/166}, &(0x7f00000001c0)=0x78) 879.728944ms ago: executing program 8 (id=7145): r0 = accept4$ax25(0xffffffffffffffff, &(0x7f0000000240)={{0x3, @rose}, [@rose, @remote, @default, @remote, @netrom, @null, @bcast]}, &(0x7f0000000040)=0x48, 0x0) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000140)={0x0, 0x8}, 0x8) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="280000001e00010a03000000848b009b2d"], 0x28}}, 0x0) r2 = socket(0x10, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="440000001000010400000000000000000000ca", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b00010065727370616e000014"], 0x44}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a000000010003b0e2a1a86eb2636037f00000000", @ANYRES32=r3, @ANYBLOB="0200000000008000800012000800010076746936"], 0xa0}}, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x75, 0x0, &(0x7f0000000080)) r5 = socket(0x10, 0x3, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r7, 0x84, 0x10, &(0x7f0000000200)=@assoc_value={0x0, 0x20}, 0x8) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x66960000) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000007c0)=@newtaction={0x7c, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x68, 0x1, [@m_tunnel_key={0x64, 0x1, 0x0, 0x0, {{0xf}, {0x34, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0xb, @loopback={0x400000004000000}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x7c}}, 0x0) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r9, 0x0, 0x41, &(0x7f0000000fc0)=ANY=[@ANYBLOB="726177020000000000000066490000000000000000000000000000000000000002"], 0x48) ioctl$BTRFS_IOC_RM_DEV(r6, 0x5000940b, &(0x7f0000000480)={{r6}, "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"}) r10 = socket$inet(0x2, 0x2, 0x1) setsockopt$sock_int(r10, 0x1, 0x5, &(0x7f0000000440)=0x1, 0x4) sendmsg$inet(r10, &(0x7f0000000100)={&(0x7f0000000000)={0x2, 0x0, @empty}, 0x10, &(0x7f0000000140)=[{&(0x7f00000001c0)="0fa9d98b3b5a9cfd3ff1", 0xa}, {&(0x7f0000000040)="000000070020ac", 0x7}], 0x2}, 0x40) sendmmsg(r5, &(0x7f0000000000), 0x400000000000235, 0x0) 835.45726ms ago: executing program 3 (id=7146): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000500)={r0, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x4, 0x601, 0x1}}, 0x20) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r2, 0x84, 0x11, &(0x7f00000002c0)="1af3050000f2bd5b", 0x8) bind$inet6(r1, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e) sendto$inet6(r1, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x2, @loopback, 0xfffffffd}}, 0x0, 0x0, 0x300, 0x0, 0x54, 0x6}, 0x9c) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000340), r3) sendmsg$ETHTOOL_MSG_COALESCE_SET(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x34, r4, 0x1, 0x70bd2e, 0x0, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES={0x8, 0x3, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x104}, 0x20000000) 712.699005ms ago: executing program 8 (id=7147): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f0000000000)={0x77359400}, 0x10) recvmmsg(r1, &(0x7f0000007900)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000240)=ANY=[@ANYRES16=r0], 0x28}, 0x1, 0x0, 0x0, 0x40001}, 0x4004) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="04"], 0x14}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x30, 0x2c, 0xd27, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x7}, {0x3}, {0x7, 0xe}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x84}, 0x8000) syz_genetlink_get_family_id$nfc(&(0x7f0000000000), r4) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000200), r4) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="301000a3", @ANYRES16=r5, @ANYBLOB="1d3200000000000000001000000014000f00fe8000000000000000000000000000bb0800010000000000"], 0x30}}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='pids.events\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="61154c000000000061134c0000000000bfa00000000000000705000008004ef02d3501000000000095000000000000006916000000000000bf67000000000000350605000fff07206706000004000000160302000ee60060bf500000000000000f650000000000006507f9ff0100000007070000cddfffff1e75000000000000bf54000000000000070400000400f9ffad4301000000000095000000000000001500000000000000950000000000000032ed3c"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, r6}, 0x94) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="bc1b0000400007012bbd700000000000017c00000400c2800c0001800600060065580000971b0280540211"], 0x1bbc}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 711.84635ms ago: executing program 3 (id=7148): r0 = socket$unix(0x1, 0x5, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000"], 0x64}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYRESDEC=r1, @ANYRESDEC=r1, @ANYBLOB="1dcca077be72efa14ca903e1ce122a90fd15a9e1c1e2bfcc7306d4895774bbce197341fce590e422eb97a2ba182cf78d29743c15de70c89a2a3feb0899913bc7b0389408cca235f2971d3ab8a5fa40cc28bc4cf66a6cfdb233b74485b0f6f7d3ff89bb8ecc49e82a28f3fe649a2a165423bf0d4af421f31b0d527315052b9cdbca495b066245647658d815b755", @ANYRESHEX=0x0, @ANYRES64, @ANYBLOB="fb2ff5e058d438a436cf3b8c86646241f93a94c95466088c7442ff876b1e8afbc8cbdd7480fa89570879d09c4d346a3f1c89e6368db40800d24828c8c7c00437aa0fc383e5ceabef7ce449ee740dca0e16ad", @ANYRESOCT=r0, @ANYRESOCT=r0, @ANYRESDEC=r1], 0x48}}, 0x8000) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@newlink={0x5c, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GRE_IFLAGS={0x6, 0x2, 0x30}, @IFLA_GRE_LOCAL={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @loopback}}]}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x9}]}, 0x5c}}, 0x0) bind$unix(r0, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r0, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) connect$unix(r3, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000002640)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000340)="b2", 0x1}], 0x1, &(0x7f00000006c0)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES8=r0], 0x18, 0x10}}], 0x1, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) connect$inet6(r7, 0x0, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@bridge_setlink={0x34, 0x13, 0xa2f, 0x70bd2b, 0x0, {0x7, 0x0, 0x68, r5, 0x960, 0x22265}, [@IFLA_LINKINFO={0x14, 0x1a, 0x0, 0x1, @vlan={{0x9}, {0x4, 0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x11}, 0x8014) sendmsg$kcm(r7, &(0x7f0000000400)={&(0x7f0000000180)=@x25={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x2}}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000380)="3e197ef7413242a23df5c40611576ca03a6341bb61d87fdd78fb2397e02c9c3cdf8b35aab63b4190489725075bda0ddd40886e3a943ab194e9e7a27ccff90e1d8a3e2ee1bb7fcc9312520f1fa4dd6d7af8c6cedcb1a6def26957e27c3b589960356e2deb9a99f8eee6191a2044433191389e0a", 0x73}, {&(0x7f0000000700)="e9e08008c3caaeebbf56fe64eb0e29e14c01a7b8cb72b33349e8731aec356507375899928eb9cb81d4fff6dfcbfab6abb98c19681e2528fd7bf6df54b3cfb0df08e7b8d60e0d7f0fa4b8e7ca6a0a3a3fa8e948ecbaea4bdc8ba21b7e2307d547b71d908ad63d9f2fa548ac55864bc47842eabb1e57808cfad40215a5f4920554d8fe9476a276f9dccbbe665ad763402d8fba37ec5998e5004496910bbaf5b5b421e3efe6f9a5d52482fc9e4f0c227c43974b517ed0acee54e76a5652cc32904620637be03a", 0xc5}], 0x2, &(0x7f0000000800)=[{0x1010, 0x102, 0x1d, "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"}, {0xc0, 0x3a, 0x0, "a18ac841f6199e74b3740ae4c9e3bb3bce7b1df0ef491d5917d3cf5df14ce64cb6054a86c8978946182fb288aa948687c7e3c28d0471143371cfe92c815d9b7fa9e261e9638780ccbb4719c195404305d030a142c229db2bf90c20ddc5e2770b33b5d0947a5a2e85d10d426679e7db569480f33e715014005d7299d87b01612a74ddd4ef0dda9b855bb56dcde49e64dc24ea76e5f501f0782b04a194a93318a9a8902184709a12f66bcb43d4"}, {0xf0, 0x102, 0x5, "900622ede6bb5d9b2b35ed92ec5f51371a34ea8b15ea8b731cde85458cca26160489e3cad47f87e4e8f2cecb058a0aa9ef8d0331975945ef0ab1be95c82936b8b81e0eafe6fb37fe9bf4d4a29c5ebe23a27ce489ab87c536a0a63b2aa3cddbcb947a355b08e7891f2567a7c1f842526140b24a946c7ea8a0c62cb77382c50e34b4299dbec9bdbe68c04b67b05018ed3995956bfba2c108dd818bec7d543962b92a832372ebdf9ed65df81d561b19ebad07e25cee0a7643e893d1e15be644d3411d6af576a82ac5496a06ab5c4676094dc0248338d6b36f3d4e5f8f5f58c2a9"}, {0xe8, 0x118, 0x10001, "751c76520de4747588436f0605454fa57d85f3ccbe88fa6368047b02ef38aab86b84d294b2022567497d52aa02f25a3a2756b428f7e1e9bd0cb9c8f3ea58092c0400d6eccc225cf21fbe9f8710dc07fa8912263b88d435559c10992682a54aaa7df40ff68876e8bc1da8691db49a8c449f26abdd6aa3edc2bbcf7ad6a1a111f592a9aadb8a6b96027b725e1561a84a5915c50aeb1c664d7d0ff4e39bbd0bf5c391e3ae8b042a328a2161ba8a942bc44610a5b7ac6483616629638a2315b4bf4a53012dddf72e56b5c259112c733a460b6308061f"}], 0x12a8}, 0x8040) accept(r0, 0x0, 0x0) 629.403446ms ago: executing program 4 (id=7150): r0 = socket$inet6_udp(0xa, 0x2, 0x0) shutdown(r0, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000880)={0x30, 0x40, 0x119, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0xc, 0x142, 0x0, 0x1, [@typed={0x8, 0xa, 0x0, 0x0, @u32=0x2892348f}]}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x4, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x48814}, 0xc000) sendmsg$xdp(0xffffffffffffffff, 0x0, 0x44040050) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r1, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000000000000020000002c0004802800018007000100637400000000000000080001400000000108000240000000160900010073797a30000000000900020073797a32000000001400000011000100000000000000"], 0x80}}, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) 520.844665ms ago: executing program 4 (id=7151): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6(0xa, 0x1, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000001280)="b7", 0x1) getsockopt$bt_hci(r3, 0x84, 0x1, &(0x7f0000001280)=""/4107, &(0x7f00000000c0)=0x100b) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r2) r4 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r4, 0x6, 0x1a, 0x0, &(0x7f0000000140)=0x21) getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)=@newlink={0x68, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x50483}, [@IFLA_LINKINFO={0x48, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x38, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @mcast1}, @IFLA_IPTUN_ENCAP_DPORT={0x6, 0x12, 0x4e23}, @IFLA_IPTUN_FLAGS={0x8, 0x8, 0x17}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}, @IFLA_IPTUN_ENCAP_LIMIT={0x5, 0x6, 0x7}]}}}]}, 0x68}, 0x1, 0x0, 0x0, 0x9005}, 0x0) sendmmsg$inet(r1, &(0x7f0000000880)=[{{&(0x7f0000000580)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYRES8=0x0, @ANYRES16=r0, @ANYRES16=r6], 0x24}, 0x1, 0x0, 0x0, 0x20004015}, 0x448d0) 507.319097ms ago: executing program 4 (id=7152): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000001c0)={0x14, r1, 0x1}, 0x14}}, 0x0) (async) r2 = socket$inet(0x2, 0x3, 0x1) setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$TUNSETLINK(r4, 0x400454cd, 0x306) (async) close(r5) (async) socket(0x2, 0x5, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) (async, rerun: 32) r6 = socket$unix(0x1, 0x2, 0x0) (rerun: 32) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmmsg$inet(r3, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r7, @dev={0xac, 0x14, 0x14, 0x41}, @empty}}}], 0x20}}], 0x1, 0x8000004) (async) sendmsg$inet(r2, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @private=0xa010100}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x60000000}, 0x8000) (async) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x6125c0, 0x0) 410.997558ms ago: executing program 6 (id=7153): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000100), r0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000500000000001c00128009000100626f6e64000000000c00028008000a00fdffffff"], 0x3c}}, 0x0) sendmsg$IEEE802154_LLSEC_LIST_DEV(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x14, r1, 0x70b, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000051}, 0x40000a0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="c40000001900674c000000000000000000000000000000000000000000000000ac1e000100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="01000000000000000000000000000000000000000000000000000000000000000056d70082b800a9890080000000000000929500000900000000000000ffffff0000000000000000b0acb9010000000000000000040000000000000000000000000400000000000000000000000000000a00100001"], 0xc4}}, 0x4c050) syz_emit_ethernet(0x3ee, &(0x7f0000000a40)={@link_local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x3b8, 0x3a, 0xff, @dev, @mcast2, {[@srh={0x87, 0x4, 0x4, 0x2, 0x2, 0x40, 0x7ff, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private2={0xfc, 0x2, '\x00', 0x2}]}, @dstopts={0x3c, 0x1c, '\x00', [@generic={0x3, 0xcb, "bd2a357e93b45626bbfd169aeafb8de186b4bf3b4f24d2dd6845a3ff1a92131334d7ea70db98b136a863ae2b14df45b3f9feca816a22ad7cb50deda9b7d8e0a66efe669bd516bf977de716cac738b8843a0a0be6a528e8d86a1b90ee0496c909a511d8e5c5b45cb8b7309e4d861cd4c68b0b95b102bf30e50fe255f0befc8c9cf3bf6825cf3cc2748e6fde7b2e6fb2664b6eeeb42aa6a0882111143df7124868569a35e71976dc317878e0c45a47da68c6955130cb8847d88dd4442f54c009c2d907a881298cf7f09e6282"}, @hao={0xc9, 0x10, @local}, @ra={0x5, 0x2, 0x400}]}, @dstopts={0x5f1e8c4b34143f33, 0x1d, '\x00', [@enc_lim={0x4, 0x1, 0x1}, @padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x20, {0x0, 0x6, 0x0, 0x60d0, [0x800, 0x2, 0x5]}}, @jumbo={0xc2, 0x4, 0xffffffff}, @generic={0x81, 0xae, "83ca7fb1ea551b500690918b5a1536dea1c092413c6459411c272439d0c53715d54d7c3f05aa14c146d67ff028c70ca88e08ade58b2884bcae5a85400a3a51e99c18d7fe7375eeb4d231cf8f10e603f4b3e74a6e5f7ef8b9dc43470528ab186a4ef5ab2403829bff93362a0fff0d9d896086754897d5dcfb28943d69e5c974e0bc14ac3f67821d5f8730a24ea7a4f17c5492d851c603de08ccc08d150cfe94a21ee7b18b69ddc72cbe57dd66de64"}, @jumbo={0xc2, 0x4, 0x212}]}, @dstopts={0x1, 0x2, '\x00', [@pad1, @jumbo={0xc2, 0x4, 0xc}, @ra={0x5, 0x2, 0x9}, @ra={0x5, 0x2, 0x3}]}, @dstopts={0x3b, 0x21, '\x00', [@generic={0x5, 0xde, "0d4d6c40d1c75e13270afd397a778c511bcde69325058b71055b8a47dc39207c65fd9ca04eee7771b3c3085b92d8bcf5ec375299273a7948c74e13dc80583f048601f1570fe043c4a25e0b5ef9e8b72e241ec645b6ce1681adf503fd2a913277e11ebdf48f47814ecd01c5198c25426a3fb8e59df33e92fc8a0fd8b05f125543cf21521985c4b2b4027d134bf0577bdc121bf402002b5488b1aeafdfd8e9240dca8e07ac0e032a56847e93d3083aac684c654af77cac29267d4de5973fb5dd58b38b96a53c6b426d57f2e39e96ca3326e5e35a567a9f68bb082b4e49931d"}, @pad1, @pad1, @jumbo={0xc2, 0x4, 0xfa}, @enc_lim={0x4, 0x1, 0x1}, @calipso={0x7, 0x10, {0x1, 0x2, 0x2, 0xf7, [0xaae]}}, @pad1, @ra, @ra={0x5, 0x2, 0x2}]}, @fragment={0x21, 0x0, 0x5, 0x1, 0x0, 0x8, 0x64}, @routing={0x1d, 0xa, 0x2, 0x0, 0x0, [@loopback, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @loopback, @mcast1]}], @ndisc_ra}}}}}, 0x0) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)={0x4c, r5, 0x1, 0x70bd2a, 0x25dfdbff, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0xffffffffffffff23, 0xb, 0x9}, {0x6, 0x11, 0xffff}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x40800) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r6) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000340), r9) sendmsg$NLBL_MGMT_C_ADDDEF(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x4c, r10, 0x830b318aaeefb05f, 0x70bd27, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @local}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private1={0xfc, 0x1, '\x00', 0x1}}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4040}, 0x2040010) sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) sendmsg$TIPC_CMD_SET_LINK_PRI(r3, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000240)={&(0x7f0000000440)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="000129bd7000fda1df2501000000000000006f3b30415b4bf9c608410000004c00180000800073797a3100000d00"/106], 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x4044) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000001500)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'veth1_to_bridge\x00'}, @IFLA_NET_NS_FD={0x8}]}, 0x3c}}, 0x0) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) r13 = syz_genetlink_get_family_id$nfc(&(0x7f0000000e80), r12) sendmsg$NFC_CMD_DISABLE_SE(r12, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000000f80)={0x1c, r13, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x8e054) sendmsg$NFC_CMD_GET_SE(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x14, r13, 0x600, 0x70bd25, 0x25dfdbfe, {}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x2000001}, 0x4044001) r14 = socket$tipc(0x1e, 0x5, 0x0) getsockopt$TIPC_CONN_TIMEOUT(r14, 0x10f, 0x82, &(0x7f00000004c0), &(0x7f0000002640)=0x4) r15 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r15, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@ipv4_newrule={0x24, 0x20, 0x301, 0x70bd2b, 0x3, {0x2, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x8, 0xf}, [@FRA_GENERIC_POLICY=@FRA_SPORT_RANGE={0x8, 0x17, {0x4e21, 0x4e22}}]}, 0x24}}, 0x42094) 321.083171ms ago: executing program 4 (id=7154): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000080)={0x10, 0x3, 0x1, 0x7fff, 0x4, 0x5, 0xffffffff, 0x3}, &(0x7f0000000140)=0x20) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="60000000100001040100"/20, @ANYRES32=0x0, @ANYBLOB="7b130000000000003800128008000100677470002c00028008000100", @ANYRES32, @ANYBLOB="08000300", @ANYBLOB="0181c0eea16345b5a7"], 0x60}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00'}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x20000000ed071, 0xffffffffffffffff, 0xfffff000) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800006, 0x7000001, 0x6e073, 0xffffffffffffffff, 0x2000) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000040)={'syztnl2\x00', &(0x7f0000000280)={'syztnl2\x00', 0x0, 0x80, 0x8, 0x100, 0x4, {{0x5, 0x4, 0x2, 0x4, 0x14, 0x66, 0x0, 0x5, 0x29, 0x0, @empty, @dev={0xac, 0x14, 0x14, 0x2b}}}}}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r4, 0x6, 0x19, 0x0, &(0x7f0000000080)) getpeername(r4, &(0x7f0000001080)=@llc, &(0x7f0000001100)=0x80) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)}], 0x1}, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$bt_hci(r5, 0x84, 0x0, &(0x7f0000000080)=""/4057, &(0x7f0000000000)=0xfd9) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000180)={r0, 0xffffffff, 0x558d, 0x2d}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, &(0x7f0000000080)=ANY=[@ANYBLOB="1805000000000000000000000000000085100000f700000018000000000000000000000000000000660000000000000018000000000000000000000000000800950000000000010000000000000000009500000000000008"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', r3, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x31a19b3c}, 0x94) 206.110126ms ago: executing program 6 (id=7155): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_HEADER(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x14, 0xc, 0x6, 0x401, 0x0, 0x0, {0x2, 0x0, 0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) r1 = socket(0x10, 0x3, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r3, 0x107, 0xf, &(0x7f00000000c0), 0x4) (async, rerun: 32) sendmsg$kcm(r3, &(0x7f0000000200)={&(0x7f0000000100)=@phonet={0x23, 0x8, 0x0, 0x14}, 0x80, &(0x7f0000000300)=[{&(0x7f00000005c0)="270502001c0014000600002fb96dbcf7bae105000700810005004305", 0x1c}, {&(0x7f0000000000)="e554bb04af32f00bd876eeb8fc34327593e96bf36c295e881635b36a9e42f58a565fac0f8d6628", 0x27}, {&(0x7f0000000240)="5b031dd8039205f8cc40318dc3121dc15b7a5d3f5752e3bddaeacb09df17d165bdad4937e1fa9a009a5f43673b5f52567f161eeef23560254e433aeb6681043f9db23654fc8fba6465563cb23e6c6ce96a115b95540e9f5d55559bec8863e6539393546cfcb244a0f262495ce975112bb88097274eb166e4ede1b0723d305505e99c7fce0f9b35e284c6a75e8ed700e14d13543abfb86e32da5f16173c00f3416c636ba392c68b758667a2", 0xab}, {&(0x7f0000000040)="02f69007e4febac171a477c68da8c6277ee9487eb445a0c7dacf112ebf8535c3919cb27dbf86a47918a0e73c843382db1bdefd9f6c736f12eb4a54c87fda21c59393e29c2ccde1c47fd458d9aa8db51908f37d84360833ad6e7b734177ce17d04de1e994", 0x64}, {&(0x7f0000000180)="59806920069869e0cbf5d479f78a586b3d0f97c19e9992f716ffc05ada3f6f62e4ba35392d3fd7a7d111eba5e03c485d958843856bd9a6139d27d27d125e24ebdb5e42fb449e962cb471a28845390acb36eb4e737c385b101055523cbe86fc70d92e3745e5c7edc8130947375b2d61a744c4fc7f6d7766f8bf", 0x79}, {&(0x7f0000000600)="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", 0xc5c}], 0x6}, 0x20000800) (rerun: 32) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610418000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x1, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffd8b, 0xffffffffffffffff}, 0x48) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@loopback, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x6e6bb6}, {{@in=@dev, 0x0, 0x2b}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x100000}}, 0xe8) (async) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="680000001000ffff25bd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="1720000021200000400012800c0001006d6163766c616e0030000280080003000300000008000100100000001c0005800a000400aaaaaaaaaa2d00000a0004003426f7b68ed1000008000500", @ANYRES32=r4], 0x68}, 0x1, 0x0, 0x0, 0x1}, 0x8000002) (async) sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0xfc) 177.707173ms ago: executing program 4 (id=7156): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000180)="080027226da0d6c1", 0x8}], 0x1}, 0x31c467c443849ffc) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x34, r2, 0x1, 0x70bd2b, 0x0, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_TX={0x5}]}, 0x34}}, 0x240008c0) 678.873µs ago: executing program 4 (id=7157): r0 = socket(0x10, 0x3, 0x0) (async) socketpair(0x22, 0x80803, 0x0, &(0x7f0000000400)) recvmmsg(r0, &(0x7f00000032c0)=[{{&(0x7f0000000100)=@ieee802154={0x24, @long}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000040)=""/57, 0x39}, {&(0x7f0000000180)=""/74, 0x4a}, {&(0x7f0000000e80)=""/4096, 0x1000}, {&(0x7f0000000200)=""/194, 0xc2}], 0x4}, 0xad}, {{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000340)=""/135, 0x87}, {&(0x7f0000000400)=""/49, 0x31}, {&(0x7f0000000440)=""/89, 0x59}, {&(0x7f00000004c0)=""/3, 0x3}, {&(0x7f0000000500)=""/94, 0x5e}, {&(0x7f0000000580)=""/9, 0x9}, {&(0x7f00000005c0)=""/215, 0xd7}, {&(0x7f00000006c0)=""/71, 0x47}], 0x8, &(0x7f00000007c0)=""/151, 0x97}, 0x10}, {{&(0x7f0000000880)=@in6={0xa, 0x0, 0x0, @local}, 0x80, &(0x7f0000002ec0)=[{&(0x7f0000001e80)=""/4096, 0x1000}, {&(0x7f0000000900)=""/118, 0x76}, {&(0x7f0000000980)=""/57, 0x39}, {&(0x7f00000009c0)=""/130, 0x82}, {&(0x7f0000000a80)=""/156, 0x9c}, {&(0x7f0000000b40)=""/65, 0x41}, {&(0x7f0000000bc0)=""/196, 0xc4}, {&(0x7f0000000cc0)=""/88, 0x58}, {&(0x7f0000000d40)=""/212, 0xd4}, {&(0x7f0000002e80)=""/12, 0xc}], 0xa, &(0x7f0000002f80)=""/55, 0x37}, 0x1}, {{&(0x7f0000002fc0)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x80, &(0x7f00000031c0)=[{&(0x7f0000003040)=""/167, 0xa7}, {&(0x7f0000003100)=""/90, 0x5a}, {&(0x7f0000003180)=""/47, 0x2f}], 0x3, &(0x7f0000003200)=""/173, 0xad}, 0x6a2}], 0x4, 0x40000002, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000e40)=@newqdisc={0x40, 0x24, 0x3fe3aa0262d8c583, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xf}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8}}]}, 0x40}, 0x1, 0x0, 0x0, 0xc082}, 0x2000400c) 0s ago: executing program 6 (id=7158): ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r2 = socket(0x1d, 0x4, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="7fff0000000000002800128009000100766c616e000000001800028006000100340200000c0002001f0000001e00000008000500", @ANYRES32=r1], 0x50}}, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0xc, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001880)=ANY=[@ANYBLOB="500000001000210400000000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="adffa888e16000002800128009000100766c616e00000000180002800c0002000e0000000a000000060001000004000008000500", @ANYRES32=r4], 0x50}}, 0x2) kernel console output (not intermixed with test programs): eg socket option. [ 557.436745][T24317] Use struct sctp_assoc_value instead [ 557.532294][T24320] netlink: 'syz.2.5216': attribute type 26 has an invalid length. [ 557.544648][T24320] netlink: 'syz.2.5216': attribute type 26 has an invalid length. [ 557.887785][T24336] Cannot find add_set index 2 as target [ 558.065819][T24343] geneve3: entered promiscuous mode [ 558.077609][ T6129] netdevsim netdevsim8 netdevsim0: set [1, 1] type 2 family 0 port 20002 - 0 [ 558.096068][ T6129] netdevsim netdevsim8 netdevsim1: set [1, 1] type 2 family 0 port 20002 - 0 [ 558.121304][ T6129] netdevsim netdevsim8 netdevsim2: set [1, 1] type 2 family 0 port 20002 - 0 [ 558.150818][ T6129] netdevsim netdevsim8 netdevsim3: set [1, 1] type 2 family 0 port 20002 - 0 [ 558.247486][T24353] netlink: 'syz.9.5229': attribute type 4 has an invalid length. [ 558.289091][T24357] net_ratelimit: 25 callbacks suppressed [ 558.289114][T24357] IPVS: dh: SCTP 172.20.20.187:0 - no destination available [ 558.315249][T15601] IPVS: starting estimator thread 0... [ 558.353949][T24365] netlink: 'syz.9.5229': attribute type 4 has an invalid length. [ 558.423850][T24361] IPVS: using max 26 ests per chain, 62400 per kthread [ 559.010097][T24407] netlink: 'syz.3.5245': attribute type 13 has an invalid length. [ 559.234249][T24416] bridge2: entered promiscuous mode [ 559.245058][T24416] bridge2: entered allmulticast mode [ 559.317266][T24424] C: renamed from lo [ 559.349430][T24424] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 559.558223][ T30] audit: type=1107 audit(1765133347.036:10): pid=24433 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='Ù‹5ž÷Œ•%èÍUýAÊÃËÙ ë0ä™l…t¿Ý•/Öÿ Ž6òŠ¨Šç›' [ 559.697330][T24443] syzkaller0: entered promiscuous mode [ 559.715264][T24443] syzkaller0: entered allmulticast mode [ 559.790821][T24443] tipc: Enabled bearer , priority 0 [ 559.802330][T24441] tipc: Resetting bearer [ 559.875090][T24441] tipc: Disabling bearer [ 559.954560][T24451] netlink: 'syz.2.5256': attribute type 11 has an invalid length. [ 559.983751][T24451] __nla_validate_parse: 13 callbacks suppressed [ 559.983775][T24451] netlink: 224 bytes leftover after parsing attributes in process `syz.2.5256'. [ 560.232871][T24481] netlink: 'syz.6.5266': attribute type 12 has an invalid length. [ 560.246768][T24482] netlink: 'syz.9.5265': attribute type 12 has an invalid length. [ 560.284906][T24482] netlink: 'syz.9.5265': attribute type 29 has an invalid length. [ 560.312255][T24482] netlink: 148 bytes leftover after parsing attributes in process `syz.9.5265'. [ 560.332389][T24482] netlink: 59 bytes leftover after parsing attributes in process `syz.9.5265'. [ 560.400585][T24493] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5269'. [ 560.412913][T24487] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 560.425938][T24493] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5269'. [ 560.446047][T24493] vxcan0: entered allmulticast mode [ 560.453088][T24487] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 560.459329][T24487] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 560.496598][T24487] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 560.502874][T24487] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 560.531498][T24498] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 560.533128][T24487] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 560.583964][T24487] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 560.594953][T24487] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 560.601222][T24487] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 560.634444][T24487] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 560.640698][T24487] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 560.654128][T24487] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 560.668779][T24487] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 560.680738][T24487] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 560.706593][T24506] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 560.740056][T24487] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 560.746883][T24487] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 560.747843][T24510] "syz.3.5276" (24510) uses obsolete ecb(arc4) skcipher [ 560.753208][T24487] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 560.753241][T24487] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 560.753269][T24487] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 560.753295][T24487] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 560.753320][T24487] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 560.753346][T24487] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 560.753372][T24487] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 560.753398][T24487] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 560.753423][T24487] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 560.753449][T24487] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 560.753474][T24487] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 560.753500][T24487] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 560.753525][T24487] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 560.753549][T24487] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 560.852048][T24487] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 560.860868][T24502] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5274'. [ 560.879075][T24502] macvtap1: entered allmulticast mode [ 560.897055][T24502] veth0_macvtap: entered allmulticast mode [ 560.905091][T24487] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 560.911481][T24487] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 561.134346][T24528] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5281'. [ 561.145471][T24528] netlink: 48 bytes leftover after parsing attributes in process `syz.3.5281'. [ 561.157245][T24528] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5281'. [ 561.167623][T24528] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5281'. [ 561.377018][T24538] netlink: 'syz.3.5287': attribute type 1 has an invalid length. [ 561.580974][T24556] netdevsim netdevsim8: loading /lib/firmware/. failed with error -22 [ 561.590346][T24556] netdevsim netdevsim8: Direct firmware load for . failed with error -22 [ 561.600079][T24556] netdevsim netdevsim8: Falling back to sysfs fallback for: . [ 562.529948][T24604] netlink: 'syz.2.5306': attribute type 5 has an invalid length. [ 562.747889][T24619] netlink: 'syz.8.5309': attribute type 1 has an invalid length. [ 562.767346][T24619] netlink: 'syz.8.5309': attribute type 3 has an invalid length. [ 563.533827][T24624] netlink: 'syz.3.5312': attribute type 1 has an invalid length. [ 563.631990][T24627] block nbd5: Unsupported socket: should be TCP or UNIX. [ 563.826842][T24640] wlan0 speed is unknown, defaulting to 1000 [ 563.861496][T24640] wg1 speed is unknown, defaulting to 1000 [ 563.973529][T24654] netlink: zone id is out of range [ 563.984353][T24654] netlink: zone id is out of range [ 563.999418][T24654] netlink: zone id is out of range [ 564.017927][T24654] netlink: get zone limit has 4 unknown bytes [ 564.228190][T24667] syz_tun: entered promiscuous mode [ 564.430484][T24680] SET target dimension over the limit! [ 564.438471][T24681] netlink: 'syz.9.5329': attribute type 1 has an invalid length. [ 564.447991][T24681] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 564.896843][T24692] tipc: Enabled bearer , priority 0 [ 564.917033][T24692] +: renamed from team_slave_1 (while UP) [ 564.935892][T24696] sctp: [Deprecated]: syz.3.5334 (pid 24696) Use of int in maxseg socket option. [ 564.935892][T24696] Use struct sctp_assoc_value instead [ 565.077594][T24687] tipc: Disabling bearer [ 565.126087][T24706] __nla_validate_parse: 16 callbacks suppressed [ 565.126111][T24706] netlink: 260 bytes leftover after parsing attributes in process `syz.2.5338'. [ 565.861232][T18603] netdevsim netdevsim8 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 565.872160][T18603] netdevsim netdevsim8 netdevsim0: unset [1, 0] type 2 family 0 port 19999 - 0 [ 565.881515][T18603] netdevsim netdevsim8 netdevsim0: unset [1, 1] type 2 family 0 port 20002 - 0 [ 565.892297][T24735] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 565.917046][T24737] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 566.053851][T18603] netdevsim netdevsim8 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 566.062796][T18603] netdevsim netdevsim8 netdevsim1: unset [1, 0] type 2 family 0 port 19999 - 0 [ 566.103349][T18603] netdevsim netdevsim8 netdevsim1: unset [1, 1] type 2 family 0 port 20002 - 0 [ 566.494034][T18603] netdevsim netdevsim8 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 566.504048][T18603] netdevsim netdevsim8 netdevsim2: unset [1, 0] type 2 family 0 port 19999 - 0 [ 566.513703][T18603] netdevsim netdevsim8 netdevsim2: unset [1, 1] type 2 family 0 port 20002 - 0 [ 566.544854][T18603] netdevsim netdevsim8 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 566.558153][T18603] netdevsim netdevsim8 netdevsim3: unset [1, 0] type 2 family 0 port 19999 - 0 [ 566.588631][T18603] netdevsim netdevsim8 netdevsim3: unset [1, 1] type 2 family 0 port 20002 - 0 [ 566.604293][T24753] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5351'. [ 566.666131][T24755] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 567.045201][T24800] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 567.316581][T24811] netlink: 36 bytes leftover after parsing attributes in process `syz.9.5368'. [ 567.329863][T24811] netlink: 12 bytes leftover after parsing attributes in process `syz.9.5368'. [ 567.411439][T24817] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5371'. [ 567.424565][T24817] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5371'. [ 567.843430][T24835] netlink: 96 bytes leftover after parsing attributes in process `syz.9.5374'. [ 568.171196][T24855] tipc: Enabling of bearer rejected, failed to enable media [ 568.190428][T24859] netlink: 'syz.8.5380': attribute type 1 has an invalid length. [ 568.221185][T24859] netlink: 224 bytes leftover after parsing attributes in process `syz.8.5380'. [ 568.299526][T24859] net veth1_virt_wifi .: renamed from virt_wifi0 [ 568.429172][T24871] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5385'. [ 568.439861][T24869] netlink: 28 bytes leftover after parsing attributes in process `syz.9.5384'. [ 568.567169][T24883] nbd: couldn't find a device at index 9 [ 568.601114][T24883] netlink: 'syz.9.5389': attribute type 10 has an invalid length. [ 568.625360][T24888] netlink: 'syz.9.5389': attribute type 1 has an invalid length. [ 568.743948][T24891] netlink: 'syz.9.5392': attribute type 7 has an invalid length. [ 568.752207][T24891] netlink: 'syz.9.5392': attribute type 8 has an invalid length. [ 568.775532][T24891] bridge3: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 568.925338][T24900] bond2 (unregistering): Released all slaves [ 569.004943][T24908] xt_cluster: node mask cannot exceed total number of nodes [ 569.500611][T24935] bond0: (slave rose0): Error: Device can not be enslaved while up [ 569.897411][T24955] netlink: 'syz.3.5413': attribute type 1 has an invalid length. [ 569.980213][T24955] bond3: (slave gretap1): making interface the new active one [ 569.997930][T24955] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 570.057941][T24963] tipc: Enabled bearer , priority 0 [ 570.097261][T24963] mac80211_hwsim hwsim49 syzkaller0: entered promiscuous mode [ 570.106368][T24963] mac80211_hwsim hwsim49 syzkaller0: entered allmulticast mode [ 570.116110][T24963] tipc: Resetting bearer [ 570.128493][T24963] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 570.150309][T24965] netlink: 'syz.9.5416': attribute type 1 has an invalid length. [ 570.158824][T24965] netlink: 'syz.9.5416': attribute type 2 has an invalid length. [ 570.170579][T24961] __nla_validate_parse: 13 callbacks suppressed [ 570.170600][T24961] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5413'. [ 570.191838][T24961] bond3 (unregistering): (slave gretap1): Releasing active interface [ 570.204711][T24961] bond3 (unregistering): Released all slaves [ 570.256774][T24963] tipc: Resetting bearer [ 570.264339][T24968] team0: No ports can be present during mode change [ 570.829000][T25003] sctp: [Deprecated]: syz.8.5428 (pid 25003) Use of struct sctp_assoc_value in delayed_ack socket option. [ 570.829000][T25003] Use struct sctp_sack_info instead [ 570.916564][T25018] netlink: 'syz.9.5430': attribute type 3 has an invalid length. [ 570.943708][T25017] netlink: 'syz.9.5430': attribute type 3 has an invalid length. [ 571.217468][T25035] netlink: 24 bytes leftover after parsing attributes in process `syz.9.5436'. [ 571.398029][T25046] netlink: 212360 bytes leftover after parsing attributes in process `syz.9.5440'. [ 571.755713][T25060] can: request_module (can-proto-0) failed. [ 571.987647][T25083] netlink: 272 bytes leftover after parsing attributes in process `syz.6.5449'. [ 572.218785][T25091] 8021q: adding VLAN 0 to HW filter on device bond0 [ 572.363222][T25105] vlan2: entered promiscuous mode [ 572.369640][T25105] bond0: (slave vlan2): Opening slave failed [ 572.398437][T25104] dummy0: entered promiscuous mode [ 572.412699][T25104] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 572.431697][T25110] netlink: 3 bytes leftover after parsing attributes in process `syz.3.5459'. [ 572.435759][T25111] netlink: 3 bytes leftover after parsing attributes in process `syz.3.5459'. [ 572.451213][T25107] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 572.490625][T25111] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5459'. [ 572.597238][T25118] netlink: 52 bytes leftover after parsing attributes in process `syz.6.5461'. [ 572.751645][T25122] syzkaller0: entered promiscuous mode [ 572.772804][T25122] syzkaller0: entered allmulticast mode [ 572.808133][T25122] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5463'. [ 572.870241][T25122] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5463'. [ 573.158233][T25149] syzkaller0: entered promiscuous mode [ 573.175850][T25149] syzkaller0: entered allmulticast mode [ 573.188345][T25150] openvswitch: netlink: Missing key (keys=40, expected=100) [ 573.486667][T25169] ipt_REJECT: TCP_RESET invalid for non-tcp [ 574.495131][T25234] netlink: 'syz.6.5497': attribute type 4 has an invalid length. [ 574.575254][T25238] netlink: 'syz.6.5499': attribute type 2 has an invalid length. [ 574.716785][T25244] veth0_macvtap: left promiscuous mode [ 575.906577][T25303] netlink: 'syz.8.5520': attribute type 83 has an invalid length. [ 575.915970][T25299] wlan0 speed is unknown, defaulting to 1000 [ 575.937047][T25299] wg1 speed is unknown, defaulting to 1000 [ 575.984860][T25309] netlink: 'syz.6.5521': attribute type 11 has an invalid length. [ 575.987774][T25310] bond0: (slave rose0): Error: Device can not be enslaved while up [ 576.187319][T25313] team0: Caught tx_queue_len zero misconfig [ 576.200924][T25315] tunl0: entered promiscuous mode [ 576.207655][T25315] netlink: 'syz.2.5524': attribute type 3 has an invalid length. [ 576.215740][T25315] __nla_validate_parse: 12 callbacks suppressed [ 576.215759][T25315] netlink: 9 bytes leftover after parsing attributes in process `syz.2.5524'. [ 576.284184][T25315] netlink: 56 bytes leftover after parsing attributes in process `syz.2.5524'. [ 576.427193][T25325] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 576.461775][T25325] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 576.706321][T25325] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 576.742049][T25325] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 576.998291][T25325] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 577.011139][T25363] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5534'. [ 577.025405][T25325] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 577.241549][T25325] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 577.261694][T25325] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 577.287132][T25375] bridge4: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 577.305082][T25365] bond0: entered promiscuous mode [ 577.311871][T25365] batadv0: entered promiscuous mode [ 577.319377][T25365] batadv0: left promiscuous mode [ 577.327998][T25365] bond0: left promiscuous mode [ 577.481255][ T13] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 20004 - 0 [ 577.506217][ T13] netdevsim netdevsim6 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 577.520269][T25385] veth0: entered promiscuous mode [ 577.544022][T25389] netlink: 'syz.8.5543': attribute type 2 has an invalid length. [ 577.552482][T25389] netlink: 244 bytes leftover after parsing attributes in process `syz.8.5543'. [ 577.568689][ T13] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 20004 - 0 [ 577.583824][ T13] netdevsim netdevsim6 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 577.592085][ T13] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 20004 - 0 [ 577.609996][ T13] netdevsim netdevsim6 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 577.620405][T25384] veth0: left promiscuous mode [ 577.716812][T13034] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 20004 - 0 [ 577.726910][T13034] netdevsim netdevsim6 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 577.886655][T25400] xt_l2tp: missing protocol rule (udp|l2tpip) [ 577.974031][T25407] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5546'. [ 577.992696][T25406] net veth1_virt_wifi .: renamed from virt_wifi0 [ 578.164284][T25414] tipc: Enabling of bearer rejected, media not registered [ 578.303553][T25425] netlink: 76 bytes leftover after parsing attributes in process `syz.3.5555'. [ 578.361807][T25423] IPVS: Scheduler module ip_vs_sip not found [ 578.602474][T25438] bridge7: entered promiscuous mode [ 578.675169][T25438] bridge7: entered allmulticast mode [ 578.694654][T25438] team0: Port device bridge7 added [ 578.741697][T25438] netlink: 'syz.6.5560': attribute type 3 has an invalid length. [ 578.759548][T25438] bridge0: port 1(team0) entered blocking state [ 578.780282][T25438] bridge0: port 1(team0) entered disabled state [ 578.797963][T25438] team0: entered allmulticast mode [ 578.813726][T25438] dummy0: entered allmulticast mode [ 578.846068][T25438] team0: left allmulticast mode [ 578.857070][T25438] dummy0: left allmulticast mode [ 579.139923][T25452] set match dimension is over the limit! [ 579.179644][T25452] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5562'. [ 579.199170][T25451] syzkaller0: entered promiscuous mode [ 579.221175][T25451] syzkaller0: entered allmulticast mode [ 579.526313][T25474] netlink: 212360 bytes leftover after parsing attributes in process `syz.9.5571'. [ 579.591667][T25480] xt_l2tp: v2 doesn't support IP mode [ 580.133918][T25512] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5582'. [ 580.308055][T25525] netlink: 184 bytes leftover after parsing attributes in process `syz.3.5587'. [ 580.369701][T25529] SET target dimension over the limit! [ 580.482445][T25512] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 580.504521][T25512] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 580.524968][T25512] bond0 (unregistering): Released all slaves [ 580.594867][T25530] syzkaller1: entered promiscuous mode [ 580.610666][T25530] syzkaller1: entered allmulticast mode [ 580.731761][T25544] openvswitch: netlink: IP tunnel dst address not specified [ 580.840726][T25541] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 581.123792][ T5848] Bluetooth: hci2: command 0x0405 tx timeout [ 581.135909][T25565] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input7 [ 581.370889][T25586] netlink: 'syz.6.5603': attribute type 30 has an invalid length. [ 581.445621][T25586] bond7: option arp_missed_max: invalid value (0) [ 581.466239][T25586] bond7: option arp_missed_max: allowed values 1 - 255 [ 581.497584][T25586] bond7 (unregistering): Released all slaves [ 582.245658][T18603] netdevsim netdevsim9 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 582.284251][T18603] netdevsim netdevsim9 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 582.299310][T18603] netdevsim netdevsim9 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 582.310852][T18603] netdevsim netdevsim9 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 582.350467][T25622] __nla_validate_parse: 4 callbacks suppressed [ 582.350486][T25622] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5614'. [ 582.479412][T25628] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5616'. [ 582.553767][T25634] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5618'. [ 582.646390][T25637] netlink: 'syz.8.5621': attribute type 1 has an invalid length. [ 582.681396][T25647] netlink: 20 bytes leftover after parsing attributes in process `syz.9.5622'. [ 583.044100][T25671] netlink: 'syz.8.5628': attribute type 21 has an invalid length. [ 583.083490][T25671] netlink: 128 bytes leftover after parsing attributes in process `syz.8.5628'. [ 583.092738][T25671] netlink: 'syz.8.5628': attribute type 5 has an invalid length. [ 583.118474][T25671] netlink: 3 bytes leftover after parsing attributes in process `syz.8.5628'. [ 583.478279][T25690] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5633'. [ 583.666803][T25690] hsr_slave_0 (unregistering): left promiscuous mode [ 583.692172][T25696] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5635'. [ 583.722938][T25696] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5635'. [ 583.837022][T25700] syzkaller0: entered promiscuous mode [ 583.842575][T25700] syzkaller0: entered allmulticast mode [ 583.862785][T25704] netlink: 20 bytes leftover after parsing attributes in process `syz.8.5637'. [ 583.946396][T25706] ip6tnl0: Caught tx_queue_len zero misconfig [ 584.304093][T25731] xt_TCPMSS: Only works on TCP SYN packets [ 584.329149][T25732] openvswitch: netlink: Flow key attr not present in new flow. [ 584.553285][T25744] netlink: 'syz.6.5652': attribute type 10 has an invalid length. [ 585.007801][T25764] erspan0: entered promiscuous mode [ 585.027388][T25764] erspan0: left allmulticast mode [ 585.183816][T25770] `: (slave bridge_slave_1): Releasing backup interface [ 585.209636][T25770] `: (slave bond_slave_0): Releasing backup interface [ 585.224348][T25770] `: (slave bond_slave_1): Releasing backup interface [ 585.236140][T25770] team_slave_0: left promiscuous mode [ 585.246596][T25770] team0: Port device team_slave_0 removed [ 585.254729][T25770] team_slave_1: left promiscuous mode [ 585.264910][T25770] team0: Port device team_slave_1 removed [ 585.272161][T25770] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 585.281053][T25770] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 585.346239][T25772] syzkaller0: entered promiscuous mode [ 585.351970][T25772] syzkaller0: entered allmulticast mode [ 587.550022][T25819] netlink: 'syz.3.5669': attribute type 1 has an invalid length. [ 587.660773][T25819] bond4: entered promiscuous mode [ 587.712527][T25819] bond4: entered allmulticast mode [ 587.725950][T25819] 8021q: adding VLAN 0 to HW filter on device bond4 [ 587.831759][T25822] macvlan2: entered promiscuous mode [ 587.885681][T25822] macvlan2: entered allmulticast mode [ 587.914418][T25822] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 588.102032][T25848] tipc: Enabling of bearer rejected, already enabled [ 588.132545][T25843] __nla_validate_parse: 8 callbacks suppressed [ 588.132567][T25843] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5673'. [ 588.171915][T25842] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5673'. [ 588.182574][T25849] wg1: entered promiscuous mode [ 588.187972][T25849] wg1: entered allmulticast mode [ 588.499933][T25876] netlink: 224 bytes leftover after parsing attributes in process `syz.2.5682'. [ 588.535773][T25876] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5682'. [ 589.004352][T25906] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 589.044221][T25911] RDS: rds_bind could not find a transport for ::ffff:100.1.1.1, load rds_tcp or rds_rdma? [ 589.091961][T25914] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5696'. [ 589.102138][T25914] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5696'. [ 589.131200][T25914] netlink: 'syz.8.5696': attribute type 3 has an invalid length. [ 589.141491][T25910] syzkaller0: entered promiscuous mode [ 589.150445][T25910] syzkaller0: entered allmulticast mode [ 589.264773][T25920] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5698'. [ 589.291029][T25920] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5698'. [ 589.310230][T25923] syzkaller0: entered promiscuous mode [ 589.324046][T25923] syzkaller0: entered allmulticast mode [ 589.419720][T25925] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 589.444228][T25926] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 590.000138][T25970] netlink: 'syz.8.5712': attribute type 12 has an invalid length. [ 590.096528][T25970] bond2: option primary_reselect: invalid value (255) [ 590.107029][T25970] bond2 (unregistering): Released all slaves [ 590.631272][T26007] netlink: 32 bytes leftover after parsing attributes in process `syz.8.5720'. [ 590.835505][T26023] netlink: 'syz.2.5723': attribute type 1 has an invalid length. [ 590.916023][T26023] 8021q: adding VLAN 0 to HW filter on device bond9 [ 590.930279][T26023] bond8: (slave bond9): making interface the new active one [ 590.940640][T26023] bond8: (slave bond9): Enslaving as an active interface with an up link [ 591.040924][T26035] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5725'. [ 591.069684][T26035] netlink: 'syz.6.5725': attribute type 10 has an invalid length. [ 591.091543][T26035] geneve0: entered promiscuous mode [ 591.104793][T26035] team0: Port device geneve0 added [ 591.115901][T26041] netlink: 'syz.6.5725': attribute type 10 has an invalid length. [ 591.349474][T26056] xt_cgroup: invalid path, errno=-2 [ 591.597744][T26072] netlink: 'syz.3.5735': attribute type 1 has an invalid length. [ 592.103888][T26110] IPv6: NLM_F_CREATE should be specified when creating new route [ 592.206045][T26115] netlink: 'syz.6.5745': attribute type 1 has an invalid length. [ 592.236634][T26115] netlink: 'syz.6.5745': attribute type 7 has an invalid length. [ 592.277385][T26115] netlink: 'syz.6.5745': attribute type 8 has an invalid length. [ 592.875669][T26167] netlink: 'syz.6.5760': attribute type 10 has an invalid length. [ 592.878660][T26159] netlink: 'syz.9.5759': attribute type 10 has an invalid length. [ 592.927169][T26168] netlink: 'syz.6.5760': attribute type 10 has an invalid length. [ 592.939725][T26159] team0: Port device geneve0 added [ 593.000370][T26168] team0: Port device dummy0 removed [ 593.010666][T26168] dummy0: left promiscuous mode [ 593.024868][T26168] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 593.037343][T26172] netlink: 'syz.8.5763': attribute type 1 has an invalid length. [ 593.299919][T26189] __nla_validate_parse: 13 callbacks suppressed [ 593.299940][T26189] netlink: 28 bytes leftover after parsing attributes in process `syz.9.5767'. [ 593.333548][T26189] netlink: 'syz.9.5767': attribute type 7 has an invalid length. [ 593.358994][T26189] netlink: 'syz.9.5767': attribute type 8 has an invalid length. [ 593.404118][T26189] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5767'. [ 593.452093][T26195] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5770'. [ 593.582436][T26201] netlink: 'syz.9.5772': attribute type 10 has an invalid length. [ 593.634810][T26201] team0: Device veth1_macvtap failed to register rx_handler [ 594.217219][T21755] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 594.229399][T21755] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 594.238408][T21755] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 594.248393][T21755] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 594.257969][T21755] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 594.319136][T26217] wlan0 speed is unknown, defaulting to 1000 [ 594.355657][T26217] wg1 speed is unknown, defaulting to 1000 [ 594.365502][T26228] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5774'. [ 594.439275][T26230] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 594.810360][T26250] netlink: 'syz.2.5783': attribute type 1 has an invalid length. [ 594.932210][T26217] chnl_net:caif_netlink_parms(): no params data found [ 594.959601][T26255] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5785'. [ 595.200414][T26217] bridge0: port 1(bridge_slave_0) entered blocking state [ 595.210969][T26217] bridge0: port 1(bridge_slave_0) entered disabled state [ 595.219026][T26217] bridge_slave_0: entered allmulticast mode [ 595.228133][T26217] bridge_slave_0: entered promiscuous mode [ 595.246455][T26217] bridge0: port 2(bridge_slave_1) entered blocking state [ 595.254921][T26217] bridge0: port 2(bridge_slave_1) entered disabled state [ 595.262254][T26217] bridge_slave_1: entered allmulticast mode [ 595.271660][T26217] bridge_slave_1: entered promiscuous mode [ 595.361134][T26217] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 595.388104][T26217] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 595.440411][T26287] netlink: 112 bytes leftover after parsing attributes in process `syz.6.5793'. [ 595.486286][T26217] team0: Port device team_slave_0 added [ 595.500896][T26217] team0: Port device team_slave_1 added [ 595.518855][T26295] netlink: 108 bytes leftover after parsing attributes in process `syz.2.5795'. [ 595.545394][T26295] netlink: 108 bytes leftover after parsing attributes in process `syz.2.5795'. [ 595.555009][T26293] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5795'. [ 595.555144][T26293] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5795'. [ 595.610878][T26217] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 595.629313][T26217] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 595.677514][T26217] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 595.714234][T26217] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 595.727166][T26217] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 595.782140][T26217] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 595.901822][T26302] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 595.909898][T26302] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 595.917899][T26302] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 595.925883][T26302] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 595.933990][T26302] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 595.941950][T26302] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 595.949990][T26302] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 595.957996][T26302] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 595.966096][T26302] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 595.974168][T26302] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 596.030174][T26217] hsr_slave_0: entered promiscuous mode [ 596.054748][T26217] hsr_slave_1: entered promiscuous mode [ 596.067666][T26217] debugfs: 'hsr0' already exists in 'hsr' [ 596.083613][T26217] Cannot create hsr debugfs directory [ 596.275691][T26322] netlink: 'syz.9.5807': attribute type 11 has an invalid length. [ 596.336214][ T5848] Bluetooth: hci1: command tx timeout [ 596.480410][T26217] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 596.507231][T26217] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 596.726924][T26217] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 596.743417][T26217] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 596.851241][T26217] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 596.887996][T26217] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 597.030641][T26217] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 597.054735][T26217] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 597.092733][T26366] sctp: [Deprecated]: syz.9.5818 (pid 26366) Use of int in maxseg socket option. [ 597.092733][T26366] Use struct sctp_assoc_value instead [ 597.257430][T26372] vcan0 (unregistering): left allmulticast mode [ 597.369701][T26378] netlink: 'syz.8.5821': attribute type 1 has an invalid length. [ 597.397702][T26217] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 597.433987][T26217] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 597.458037][T26217] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 597.505132][T26217] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 597.665449][T26217] 8021q: adding VLAN 0 to HW filter on device bond0 [ 597.708963][T26217] 8021q: adding VLAN 0 to HW filter on device team0 [ 597.746622][ T6044] bridge0: port 1(bridge_slave_0) entered blocking state [ 597.753912][ T6044] bridge0: port 1(bridge_slave_0) entered forwarding state [ 597.805739][ T6044] bridge0: port 2(bridge_slave_1) entered blocking state [ 597.813058][ T6044] bridge0: port 2(bridge_slave_1) entered forwarding state [ 597.925501][T26411] wireguard0: entered promiscuous mode [ 597.937322][T26411] wireguard0: entered allmulticast mode [ 597.954348][T26411] team0: Device wireguard0 is of different type [ 598.069799][T26417] syz_tun: entered allmulticast mode [ 598.086678][T26416] syz_tun: left allmulticast mode [ 598.280268][T26426] netlink: 'syz.8.5836': attribute type 1 has an invalid length. [ 598.290429][T26427] netlink: 'syz.9.5835': attribute type 12 has an invalid length. [ 598.385645][T26426] bond2: entered promiscuous mode [ 598.398915][T26426] bond2: entered allmulticast mode [ 598.406874][T26426] 8021q: adding VLAN 0 to HW filter on device bond2 [ 598.415134][ T5848] Bluetooth: hci1: command tx timeout [ 598.423624][T26427] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR [ 598.424644][T26434] batadv_slave_1: entered promiscuous mode [ 598.461931][T26424] batadv_slave_1: left promiscuous mode [ 598.559029][T26217] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 598.740617][T26217] veth0_vlan: entered promiscuous mode [ 598.792284][T26217] veth1_vlan: entered promiscuous mode [ 598.850307][T26459] tipc: Resetting bearer [ 598.876743][T26459] tipc: Enabling of bearer rejected, already enabled [ 598.954339][T26217] veth0_macvtap: entered promiscuous mode [ 598.969811][T26217] veth1_macvtap: entered promiscuous mode [ 599.008636][T26217] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 599.036067][T26217] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 599.081840][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 599.109943][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 599.128538][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 599.140193][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 599.221011][T26473] geneve2: entered promiscuous mode [ 599.286917][T26478] netlink: 'syz.6.5850': attribute type 1 has an invalid length. [ 599.493688][T13040] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 599.510574][T13040] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 599.568446][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 599.595194][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 599.719877][T26492] __nla_validate_parse: 135 callbacks suppressed [ 599.719901][T26492] netlink: 104 bytes leftover after parsing attributes in process `syz.6.5852'. [ 599.758982][T26492] netlink: 20 bytes leftover after parsing attributes in process `syz.6.5852'. [ 599.995788][T26503] netlink: 'syz.6.5856': attribute type 11 has an invalid length. [ 600.005102][T26503] netlink: 'syz.6.5856': attribute type 11 has an invalid length. [ 600.013802][T26503] netlink: 224 bytes leftover after parsing attributes in process `syz.6.5856'. [ 600.320198][T26521] netlink: 56 bytes leftover after parsing attributes in process `syz.8.5864'. [ 600.485842][ T5848] Bluetooth: hci1: command tx timeout [ 600.511257][T26532] tipc: Started in network mode [ 600.523227][T26532] tipc: Node identity 7ebf561ee1ac, cluster identity 4711 [ 600.530597][T26532] tipc: Enabled bearer , priority 0 [ 600.598664][T26532] syzkaller0: entered promiscuous mode [ 600.607798][T26532] syzkaller0: entered allmulticast mode [ 600.614444][T26532] tipc: Resetting bearer [ 600.628182][T26531] tipc: Resetting bearer [ 600.677157][T26541] netlink: 24 bytes leftover after parsing attributes in process `syz.9.5870'. [ 602.565843][ T5848] Bluetooth: hci1: command tx timeout [ 602.715191][T26531] tipc: Disabling bearer [ 602.748662][T26548] syzkaller1: entered promiscuous mode [ 602.763782][T26548] syzkaller1: entered allmulticast mode [ 602.799253][T15602] tipc: Node number set to 2668844574 [ 602.890282][T26555] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 602.900847][T26560] netlink: 'syz.3.5875': attribute type 33 has an invalid length. [ 602.910031][T26555] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 602.919180][T26555] gretap1: entered promiscuous mode [ 602.924538][T26555] gretap1: entered allmulticast mode [ 602.935187][T26561] netlink: 'syz.8.5873': attribute type 1 has an invalid length. [ 602.943112][T26557] pim6reg: entered allmulticast mode [ 602.973999][T26561] netlink: 136 bytes leftover after parsing attributes in process `syz.8.5873'. [ 602.996182][T26561] netlink: 'syz.8.5873': attribute type 1 has an invalid length. [ 603.008149][T26555] netlink: 'syz.8.5873': attribute type 6 has an invalid length. [ 603.245219][T26578] netlink: 'syz.3.5880': attribute type 1 has an invalid length. [ 603.259692][T26578] 8021q: VLANs not supported on wg1 [ 603.317420][T26578] bridge_slave_1: left allmulticast mode [ 603.327852][T26578] bridge_slave_1: left promiscuous mode [ 603.334600][T26578] bridge0: port 2(bridge_slave_1) entered disabled state [ 603.350441][T26578] bridge_slave_0: left allmulticast mode [ 603.367359][T26578] bridge_slave_0: left promiscuous mode [ 603.385382][T26578] bridge0: port 1(bridge_slave_0) entered disabled state [ 603.668416][T26601] veth0: entered promiscuous mode [ 603.675167][T26601] veth0: left promiscuous mode [ 603.748115][T26604] netlink: 48 bytes leftover after parsing attributes in process `syz.6.5888'. [ 604.101528][T26620] No such timeout policy "syz0" [ 604.110506][T26620] netlink: 'syz.3.5893': attribute type 13 has an invalid length. [ 604.128678][T26620] veth0_macvtap: left promiscuous mode [ 604.144626][T26620] macvtap0: entered allmulticast mode [ 604.160554][T26620] macvtap0: refused to change device tx_queue_len [ 604.424161][T26639] netlink: 'syz.6.5900': attribute type 13 has an invalid length. [ 604.434964][T26636] net_ratelimit: 45 callbacks suppressed [ 604.434985][T26636] openvswitch: netlink: nsh attr 0 has unexpected len 32768 expected 0 [ 604.463124][T26636] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 604.543890][T26640] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5899'. [ 604.579005][T26639] tipc: Resetting bearer [ 604.586859][T26639] tipc: Resetting bearer [ 604.747065][T26654] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5903'. [ 604.959148][T26669] netlink: 'syz.9.5909': attribute type 1 has an invalid length. [ 605.014247][T26669] 8021q: adding VLAN 0 to HW filter on device bond0 [ 605.034056][T26672] bond0: option arp_interval: mode dependency failed, not supported in mode balance-alb(6) [ 605.208650][T26681] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 605.255328][T26683] nbd: illegal input index 2958377 [ 605.290687][T26685] netlink: 'syz.6.5914': attribute type 1 has an invalid length. [ 605.310449][T26685] netlink: 'syz.6.5914': attribute type 1 has an invalid length. [ 605.335671][T26686] netlink: 20 bytes leftover after parsing attributes in process `syz.6.5914'. [ 605.350670][T26686] netlink: 20 bytes leftover after parsing attributes in process `syz.6.5914'. [ 605.397908][T26692] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5916'. [ 605.399731][T26690] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5915'. [ 605.409824][T26692] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5916'. [ 605.834166][T26715] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5923'. [ 606.044568][T26723] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5924'. [ 606.548666][T26756] sctp: [Deprecated]: syz.9.5933 (pid 26756) Use of int in max_burst socket option. [ 606.548666][T26756] Use struct sctp_assoc_value instead [ 606.708667][T26764] netlink: 24 bytes leftover after parsing attributes in process `syz.9.5936'. [ 606.930119][T26774] can: request_module (can-proto-0) failed. [ 607.078463][T26788] tipc: Resetting bearer [ 607.137209][T26794] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5941'. [ 607.148554][ T3448] nci: nci_rsp_packet: unknown rsp opcode 0x805 [ 607.166918][T26794] xfrm1: entered promiscuous mode [ 607.172322][T26794] xfrm1: entered allmulticast mode [ 607.745927][T26802] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 607.820701][T26802] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 607.924204][T21755] Bluetooth: hci1: command 0x0405 tx timeout [ 608.051864][T26810] IPVS: Error joining to the multicast group [ 608.145350][T26805] syzkaller1: entered promiscuous mode [ 608.164616][T26805] syzkaller1: entered allmulticast mode [ 608.702328][T26848] netlink: 'syz.3.5960': attribute type 32 has an invalid length. [ 608.705181][T26844] can: request_module (can-proto-3) failed. [ 608.811513][T26848] bond1: option coupled_control: invalid value (105) [ 608.832689][T26848] bond1 (unregistering): Released all slaves [ 608.949757][T26863] syzkaller0: entered promiscuous mode [ 608.967843][T26863] syzkaller0: entered allmulticast mode [ 609.146569][T26874] wlan0 speed is unknown, defaulting to 1000 [ 609.156125][T26874] wg1 speed is unknown, defaulting to 1000 [ 609.437058][T26887] ipt_REJECT: ECHOREPLY no longer supported. [ 609.450426][T26885] netlink: 'syz.3.5973': attribute type 4 has an invalid length. [ 609.512214][T26895] netlink: 'syz.3.5973': attribute type 4 has an invalid length. [ 609.694990][T26902] netlink: 'syz.9.5976': attribute type 10 has an invalid length. [ 609.711601][T26902] bridge0: port 3(team0) entered blocking state [ 609.719555][T26902] bridge0: port 3(team0) entered disabled state [ 609.726892][T26902] team0: entered allmulticast mode [ 609.732158][T26902] team_slave_0: entered allmulticast mode [ 609.739102][T26902] +: entered allmulticast mode [ 609.744445][T26902] geneve0: entered allmulticast mode [ 609.754331][T26902] team0: entered promiscuous mode [ 609.760574][T26902] team_slave_0: entered promiscuous mode [ 609.766745][T26902] +: entered promiscuous mode [ 609.777599][T26902] geneve0: entered promiscuous mode [ 609.789768][T26902] bridge0: port 3(team0) entered blocking state [ 609.796253][T26902] bridge0: port 3(team0) entered forwarding state [ 609.869726][T26914] __nla_validate_parse: 13 callbacks suppressed [ 609.869747][T26914] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5978'. [ 609.956508][T26914] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5978'. [ 610.117443][T26930] IPv6: sit1: Disabled Multicast RS [ 610.128745][T26929] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5983'. [ 610.142893][T26930] sit1: entered allmulticast mode [ 610.207396][T26937] netlink: 'syz.6.5985': attribute type 32 has an invalid length. [ 610.235426][T26937] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5985'. [ 610.290676][T26937] bond8: option coupled_control: invalid value (110) [ 610.341589][T26937] bond8 (unregistering): Released all slaves [ 610.406358][T26952] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5989'. [ 610.419522][T26952] openvswitch: netlink: Flow actions attr not present in new flow. [ 610.535858][T26962] netlink: 'syz.8.5992': attribute type 2 has an invalid length. [ 610.870062][T26985] netlink: 44 bytes leftover after parsing attributes in process `syz.3.6000'. [ 611.096066][T27002] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6004'. [ 611.430773][T27020] nbd: must specify a size in bytes for the device [ 611.440234][T27020] netlink: 'syz.8.6012': attribute type 11 has an invalid length. [ 611.442478][T27018] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 611.456058][T27020] netlink: 'syz.8.6012': attribute type 4 has an invalid length. [ 611.465733][T27020] netlink: 199768 bytes leftover after parsing attributes in process `syz.8.6012'. [ 611.733987][T27035] tipc: Enabled bearer , priority 0 [ 611.761737][T27035] syzkaller0: entered promiscuous mode [ 611.837404][T27039] xt_CT: No such helper "pptp" [ 611.887731][T27032] tipc: Resetting bearer [ 611.944685][T27032] tipc: Disabling bearer [ 612.071593][ T5848] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 612.085151][ T5848] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 612.094591][ T5848] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 612.104317][ T5848] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 612.114443][ T5848] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 612.139145][T27054] netlink: 36 bytes leftover after parsing attributes in process `syz.9.6021'. [ 612.207124][T27048] wlan0 speed is unknown, defaulting to 1000 [ 612.218328][T27048] wg1 speed is unknown, defaulting to 1000 [ 612.344971][T27061] netlink: 20 bytes leftover after parsing attributes in process `syz.6.6023'. [ 612.479447][T27048] chnl_net:caif_netlink_parms(): no params data found [ 612.650729][T27048] bridge0: port 1(bridge_slave_0) entered blocking state [ 612.658194][T27048] bridge0: port 1(bridge_slave_0) entered disabled state [ 612.668364][T27048] bridge_slave_0: entered allmulticast mode [ 612.678487][T27048] bridge_slave_0: entered promiscuous mode [ 612.688721][T27048] bridge0: port 2(bridge_slave_1) entered blocking state [ 612.696399][T27048] bridge0: port 2(bridge_slave_1) entered disabled state [ 612.704511][T27048] bridge_slave_1: entered allmulticast mode [ 612.712601][T27048] bridge_slave_1: entered promiscuous mode [ 612.719504][T27079] "syz.9.6026" (27079) uses obsolete ecb(arc4) skcipher [ 612.798591][T27079] pim6reg1: entered promiscuous mode [ 612.810816][T27079] pim6reg1: entered allmulticast mode [ 612.846315][T27048] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 612.885878][T27048] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 613.031842][T27048] team0: Port device team_slave_0 added [ 613.055220][T27048] team0: Port device team_slave_1 added [ 613.191436][T27048] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 613.211217][T27048] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 613.252226][T27048] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 613.266719][T27048] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 613.277817][T27048] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 613.307330][T27048] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 613.417425][T27109] xt_hashlimit: max too large, truncated to 1048576 [ 613.461094][T27048] hsr_slave_0: entered promiscuous mode [ 613.469054][T27048] hsr_slave_1: entered promiscuous mode [ 613.476249][T27048] debugfs: 'hsr0' already exists in 'hsr' [ 613.482365][T27048] Cannot create hsr debugfs directory [ 613.502191][T27113] bond0: entered promiscuous mode [ 613.507616][T27113] dummy0: entered promiscuous mode [ 613.519026][T27113] bond0: left promiscuous mode [ 613.524524][T27113] dummy0: left promiscuous mode [ 613.930148][T27138] syzkaller0: entered promiscuous mode [ 613.940912][T27138] syzkaller0: entered allmulticast mode [ 614.133493][T27153] netlink: 'syz.3.6049': attribute type 4 has an invalid length. [ 614.165862][ T5848] Bluetooth: hci4: command tx timeout [ 614.251211][T27155] netlink: 'syz.6.6048': attribute type 3 has an invalid length. [ 614.331530][T27163] syzkaller0: entered promiscuous mode [ 614.337387][T27163] syzkaller0: entered allmulticast mode [ 614.355919][T27160] tipc: Enabled bearer , priority 0 [ 614.402543][T27159] tipc: Resetting bearer [ 614.470290][T27159] tipc: Disabling bearer [ 614.608348][T27175] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 614.938907][T27048] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 614.974782][T27048] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 615.003917][T27048] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 615.024773][T27048] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 615.079551][T27203] netlink: 'syz.6.6058': attribute type 1 has an invalid length. [ 615.231306][T27048] 8021q: adding VLAN 0 to HW filter on device bond0 [ 615.275537][T27209] __nla_validate_parse: 14 callbacks suppressed [ 615.275559][T27209] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6059'. [ 615.294994][T27048] 8021q: adding VLAN 0 to HW filter on device team0 [ 615.315043][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 615.322253][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 615.356345][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 615.363602][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 615.482885][T27220] IPVS: set_ctl: invalid protocol: 60 172.20.20.187:20000 [ 615.559624][T27220] IPVS: set_ctl: invalid protocol: 64 104.0.1.0:768 [ 615.612236][T27228] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6066'. [ 615.829444][T27236] tipc: Enabled bearer , priority 0 [ 615.843862][T27236] syzkaller0: entered promiscuous mode [ 615.849954][T27239] netlink: 64 bytes leftover after parsing attributes in process `syz.9.6071'. [ 615.852062][T27236] syzkaller0: entered allmulticast mode [ 615.890039][T27240] bond0: entered promiscuous mode [ 615.896611][T27240] dummy0: entered promiscuous mode [ 615.904469][T27240] batadv0: entered promiscuous mode [ 615.912173][T27240] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 615.938718][T27048] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 616.013759][T27244] tipc: Resetting bearer [ 616.031739][T27247] sctp: [Deprecated]: syz.9.6072 (pid 27247) Use of int in maxseg socket option. [ 616.031739][T27247] Use struct sctp_assoc_value instead [ 616.188223][T27255] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6074'. [ 616.199304][T27254] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6074'. [ 616.210507][T27235] tipc: Resetting bearer [ 616.253757][ T5848] Bluetooth: hci4: command tx timeout [ 616.261633][T27235] tipc: Disabling bearer [ 616.665361][T27280] netlink: 'syz.3.6083': attribute type 21 has an invalid length. [ 616.688576][T27048] veth0_vlan: entered promiscuous mode [ 616.730189][T27048] veth1_vlan: entered promiscuous mode [ 616.755279][T27280] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6083'. [ 616.785997][T27281] netlink: 'syz.3.6083': attribute type 29 has an invalid length. [ 616.815549][T27280] netlink: 'syz.3.6083': attribute type 29 has an invalid length. [ 616.840721][ T30] audit: type=1107 audit(1765133404.306:11): pid=27289 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 616.928973][T27048] veth0_macvtap: entered promiscuous mode [ 617.102286][T27048] veth1_macvtap: entered promiscuous mode [ 617.110311][T27299] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6088'. [ 617.241293][T27048] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 617.254516][T27304] netlink: 'syz.8.6090': attribute type 1 has an invalid length. [ 617.275122][T27304] netlink: 224 bytes leftover after parsing attributes in process `syz.8.6090'. [ 617.305831][T27048] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 617.346791][T18605] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 617.383915][T18605] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 617.392714][T18605] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 617.447671][T18605] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 617.585791][T27320] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6096'. [ 617.801343][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 617.829664][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 617.904811][T27338] netlink: 'syz.6.6100': attribute type 21 has an invalid length. [ 617.944012][T27338] netlink: 132 bytes leftover after parsing attributes in process `syz.6.6100'. [ 617.981746][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 617.992047][T27342] netlink: ct family unspecified [ 618.000186][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 618.010899][T27342] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 618.323528][ T5848] Bluetooth: hci4: command tx timeout [ 619.107270][T27415] nbd: couldn't find device at index 9 [ 619.208530][T27419] netlink: 'syz.3.6123': attribute type 30 has an invalid length. [ 619.444877][ T5840] block nbd3: Receive control failed (result -22) [ 620.097461][T27454] netlink: 'syz.9.6132': attribute type 83 has an invalid length. [ 620.200417][T27462] bridge_slave_1: left allmulticast mode [ 620.219716][T27462] bridge_slave_1: left promiscuous mode [ 620.235868][T27462] bridge0: port 2(bridge_slave_1) entered disabled state [ 620.320949][T27462] bridge_slave_0: left allmulticast mode [ 620.334493][T27462] bridge_slave_0: left promiscuous mode [ 620.350639][T27462] bridge0: port 1(bridge_slave_0) entered disabled state [ 620.405211][ T5840] Bluetooth: hci4: command tx timeout [ 620.469953][T27465] macsec0: entered promiscuous mode [ 620.490103][T27465] macsec0: entered allmulticast mode [ 620.496089][T27467] veth1_macvtap: entered allmulticast mode [ 620.525982][T27467] macsec0: left promiscuous mode [ 620.531200][T27467] macsec0: left allmulticast mode [ 620.556931][T27467] veth1_macvtap: left allmulticast mode [ 620.835900][T27495] __nla_validate_parse: 4 callbacks suppressed [ 620.835921][T27495] netlink: 28 bytes leftover after parsing attributes in process `syz.8.6144'. [ 621.049081][T27514] netlink: 'syz.4.6150': attribute type 1 has an invalid length. [ 621.062651][T27512] netlink: 'syz.8.6149': attribute type 13 has an invalid length. [ 621.071698][T27514] netlink: 'syz.4.6150': attribute type 1 has an invalid length. [ 621.097113][T27514] netlink: 'syz.4.6150': attribute type 1 has an invalid length. [ 621.136645][T27514] netlink: 'syz.4.6150': attribute type 2 has an invalid length. [ 621.186350][T27514] netlink: 76 bytes leftover after parsing attributes in process `syz.4.6150'. [ 621.345901][T27527] netlink: 224 bytes leftover after parsing attributes in process `syz.3.6153'. [ 621.355993][T27527] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6153'. [ 621.409681][T27529] netlink: 64 bytes leftover after parsing attributes in process `syz.6.6154'. [ 621.494851][T27538] netlink: 100 bytes leftover after parsing attributes in process `syz.9.6155'. [ 621.509814][T27537] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6157'. [ 621.526317][ T5840] Bluetooth: hci5: command 0x0406 tx timeout [ 621.699773][T27548] netlink: 100 bytes leftover after parsing attributes in process `syz.9.6160'. [ 621.732624][T27552] netlink: 100 bytes leftover after parsing attributes in process `syz.9.6160'. [ 621.801018][T27558] netlink: 'syz.3.6163': attribute type 29 has an invalid length. [ 621.839370][T27558] netlink: 'syz.3.6163': attribute type 29 has an invalid length. [ 621.914928][T27562] netlink: 12 bytes leftover after parsing attributes in process `syz.8.6165'. [ 622.389894][T27567] ip6tnl0: Caught tx_queue_len zero misconfig [ 622.410667][T27577] syzkaller0: entered promiscuous mode [ 622.418097][T27577] syzkaller0: entered allmulticast mode [ 622.544358][T27601] tipc: Enabled bearer , priority 0 [ 622.572329][T27601] syzkaller0: entered promiscuous mode [ 622.587346][T27601] syzkaller0: entered allmulticast mode [ 622.695217][T27601] tipc: Resetting bearer [ 622.715342][T27600] tipc: Resetting bearer [ 622.774232][T27607] x_tables: duplicate underflow at hook 1 [ 622.780711][T27600] tipc: Disabling bearer [ 622.798017][T27613] netlink: 'syz.4.6179': attribute type 1 has an invalid length. [ 622.930489][T27619] netlink: 'syz.4.6179': attribute type 1 has an invalid length. [ 623.491536][T27656] x_tables: duplicate underflow at hook 2 [ 623.773366][T27681] Cannot find add_set index 2 as target [ 624.216416][T27703] 8021q: adding VLAN 0 to HW filter on device bond1 [ 624.231017][T27703] "syz.4.6207" (27703) uses obsolete ecb(arc4) skcipher [ 624.275959][T27710] bridge_slave_0: default FDB implementation only supports local addresses [ 624.507702][T27727] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 624.515108][T27727] IPv6: NLM_F_CREATE should be set when creating new route [ 624.958913][T27751] 8021q: adding VLAN 0 to HW filter on device bond8 [ 625.207032][T27771] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 625.214690][T15604] IPVS: starting estimator thread 0... [ 625.226461][T27774] validate_nla: 4 callbacks suppressed [ 625.226483][T27774] netlink: 'syz.9.6228': attribute type 25 has an invalid length. [ 625.243882][T27775] ip_tunnel: non-ECT from 2.0.0.0 with TOS=0x3 [ 625.263644][T27778] sock: sock_timestamping_bind_phc: sock not bind to device [ 625.344237][T27776] IPVS: using max 27 ests per chain, 64800 per kthread [ 625.351265][T27785] netlink: 'syz.6.6231': attribute type 29 has an invalid length. [ 625.361934][T27785] netlink: 'syz.6.6231': attribute type 29 has an invalid length. [ 625.400877][T27785] netlink: 'syz.6.6231': attribute type 29 has an invalid length. [ 625.409541][T27774] netlink: 'syz.9.6228': attribute type 25 has an invalid length. [ 625.435538][T27785] netlink: 'syz.6.6231': attribute type 29 has an invalid length. [ 626.037060][T27811] __nla_validate_parse: 27 callbacks suppressed [ 626.037083][T27811] netlink: 212368 bytes leftover after parsing attributes in process `syz.8.6236'. [ 626.055146][T27811] netlink: 'syz.8.6236': attribute type 29 has an invalid length. [ 626.073768][T27811] netlink: 'syz.8.6236': attribute type 29 has an invalid length. [ 626.090645][T27811] netlink: 500 bytes leftover after parsing attributes in process `syz.8.6236'. [ 626.270761][T27820] netlink: 'syz.8.6239': attribute type 1 has an invalid length. [ 626.295664][T27820] netlink: 'syz.8.6239': attribute type 11 has an invalid length. [ 626.308643][T27820] netlink: 224 bytes leftover after parsing attributes in process `syz.8.6239'. [ 626.321707][T27823] bridge2: entered promiscuous mode [ 626.334960][T27823] bridge2: entered allmulticast mode [ 626.377627][T27830] IPv6: NLM_F_CREATE should be specified when creating new route [ 626.410639][T27830] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 626.417967][T27830] IPv6: NLM_F_CREATE should be set when creating new route [ 626.529840][T27835] netlink: 12 bytes leftover after parsing attributes in process `syz.8.6242'. [ 626.784445][T27847] can: request_module (can-proto-0) failed. [ 627.274477][T27868] netlink: 224 bytes leftover after parsing attributes in process `syz.4.6250'. [ 627.414141][T27868] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6250'. [ 627.429169][T27879] syzkaller0: entered promiscuous mode [ 627.445993][T27879] syzkaller0: entered allmulticast mode [ 627.466019][T27879] TC_ACT_REPEAT abuse ? [ 627.494683][T27868] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6250'. [ 627.538689][T27884] netlink: 20 bytes leftover after parsing attributes in process `syz.9.6255'. [ 627.540675][T27868] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6250'. [ 627.739562][T27892] netlink: 24 bytes leftover after parsing attributes in process `syz.6.6257'. [ 627.794275][T27892] openvswitch: netlink: Flow key attr not present in new flow. [ 627.875476][T27899] siw: device registration error -23 [ 627.905596][T27901] syzkaller0: entered promiscuous mode [ 627.931952][T27901] syzkaller0: entered allmulticast mode [ 628.900452][T27961] tipc: Enabling of bearer rejected, already enabled [ 629.106374][T27973] bond1: (slave geneve2): making interface the new active one [ 629.145791][T27973] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 629.163412][ T6044] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 629.203723][ T6044] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 629.225994][ T6044] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 629.271124][ T6044] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 629.798318][ T6302] netdevsim netdevsim7 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 629.819195][ T6302] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 629.949008][ T6302] netdevsim netdevsim7 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 629.964193][ T6302] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 630.007733][T28024] bond3: (slave gretap0): Device is not bonding slave [ 630.018083][T28024] bond3: option active_slave: invalid value (gretap0) [ 630.030693][T28024] bond3 (unregistering): Released all slaves [ 630.079697][ T6302] netdevsim netdevsim7 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 630.091791][ T6302] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 630.213610][ T6302] netdevsim netdevsim7 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 630.237651][ T6302] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 630.385757][T28043] x_tables: duplicate underflow at hook 1 [ 630.467098][ T6302] bridge_slave_0: left allmulticast mode [ 630.477760][ T6302] bridge_slave_0: left promiscuous mode [ 630.488014][ T6302] bridge0: port 1(bridge_slave_0) entered disabled state [ 630.757860][T28057] validate_nla: 4 callbacks suppressed [ 630.757881][T28057] netlink: 'syz.9.6304': attribute type 1 has an invalid length. [ 630.925040][T28071] netlink: 'syz.8.6309': attribute type 10 has an invalid length. [ 631.004153][T28072] netlink: 'syz.8.6309': attribute type 10 has an invalid length. [ 631.220853][ T6302] bond1 (unregistering): (slave bridge1): Releasing backup interface [ 631.229815][ T6302] bond1 (unregistering): (slave bridge1): the permanent HWaddr of slave - 9e:6c:d1:ed:82:ca - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 631.248778][ T6302] bridge1 (unregistering): left promiscuous mode [ 631.255955][ T6302] bond1 (unregistering): (slave bridge2): making interface the new active one [ 631.266637][ T6302] bridge2 (unregistering): entered promiscuous mode [ 631.323623][T28084] __nla_validate_parse: 16 callbacks suppressed [ 631.323646][T28084] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6313'. [ 631.341365][ T6302] bond1 (unregistering): (slave bridge2): Releasing backup interface [ 631.351665][ T6302] bridge2 (unregistering): left promiscuous mode [ 631.715228][ T6302] bond1 (unregistering): Released all slaves [ 631.730533][ T6302] bond2 (unregistering): Released all slaves [ 631.745983][ T6302] bond3 (unregistering): Released all slaves [ 631.903818][ T6302] bond0 (unregistering): (slave veth5): Releasing active interface [ 631.914981][ T6302] bond0 (unregistering): Released all slaves [ 631.932590][ T6302] bond4 (unregistering): Released all slaves [ 631.969170][T28071] team0: Failed to send options change via netlink (err -105) [ 631.995586][T28071] team0: Port device dummy0 added [ 632.027427][T28072] team0: Failed to send options change via netlink (err -105) [ 632.036758][T28072] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 632.048400][T28072] team0: Port device dummy0 removed [ 632.058228][T28072] dummy0: entered promiscuous mode [ 632.065725][T28072] dummy0: entered allmulticast mode [ 632.106987][T28072] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 632.237748][T28086] netlink: 65039 bytes leftover after parsing attributes in process `syz.6.6313'. [ 632.251422][T28088] netlink: 20 bytes leftover after parsing attributes in process `syz.9.6314'. [ 632.285338][T28089] bridge0: port 1(bridge_slave_0) entered learning state [ 632.433741][T28104] : entered promiscuous mode [ 632.531532][ T6302] hsr_slave_0: left promiscuous mode [ 632.575560][ T6302] hsr_slave_1: left promiscuous mode [ 632.588286][ T6302] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 632.611981][ T6302] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 632.631639][ T6302] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 632.657513][ T6302] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 632.709224][ T6302] veth1_macvtap: left promiscuous mode [ 632.730010][ T6302] veth0_macvtap: left promiscuous mode [ 632.750617][T28132] IPVS: length: 253 != 24 [ 632.750910][ T6302] veth1_vlan: left promiscuous mode [ 632.785036][ T6302] veth0_vlan: left promiscuous mode [ 633.646428][T28154] netlink: 'syz.3.6325': attribute type 1 has an invalid length. [ 633.647020][ T6302] team0 (unregistering): Port device team_slave_1 removed [ 633.710153][ T6302] team0 (unregistering): Port device team_slave_0 removed [ 634.272443][T28131] tipc: Enabling of bearer rejected, failed to enable media [ 634.282904][T28133] netlink: 20 bytes leftover after parsing attributes in process `syz.8.6323'. [ 634.428833][T28155] bond2 (unregistering): Released all slaves [ 634.531059][T28156] ip6tnl1: entered promiscuous mode [ 634.543094][T28156] ip6tnl1: entered allmulticast mode [ 634.855749][T28181] netlink: 'syz.8.6332': attribute type 2 has an invalid length. [ 634.913621][T28183] 8021q: VLANs not supported on gre0 [ 634.927522][T28181] : entered promiscuous mode [ 635.069212][ T6302] IPVS: stop unused estimator thread 0... [ 635.295627][T28210] netlink: 24 bytes leftover after parsing attributes in process `syz.9.6342'. [ 635.307504][T28200] netlink: 'syz.8.6340': attribute type 1 has an invalid length. [ 635.319933][T28211] vcan0: tx drop: invalid sa for name 0x0040000000000000 [ 635.354492][T28210] netlink: 36 bytes leftover after parsing attributes in process `syz.9.6342'. [ 635.399195][ T5937] IPVS: starting estimator thread 0... [ 635.427722][T28200] bond4: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 635.441627][T28200] bond4: (slave ipvlan0): The slave device specified does not support setting the MAC address [ 635.456406][T28200] bond4: (slave ipvlan0): Setting fail_over_mac to active for active-backup mode [ 635.514265][T28215] IPVS: using max 28 ests per chain, 67200 per kthread [ 635.656857][T28222] syzkaller1: entered promiscuous mode [ 635.665062][T28222] syzkaller1: entered allmulticast mode [ 635.798525][T28233] Bluetooth: MGMT ver 1.23 [ 635.902329][T28240] netlink: 'syz.3.6351': attribute type 23 has an invalid length. [ 635.931912][T28241] netlink: 'syz.3.6351': attribute type 23 has an invalid length. [ 636.217636][ T30] audit: type=1107 audit(1765133423.696:12): pid=28251 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 636.220555][ T30] audit: type=1107 audit(1765133423.696:13): pid=28251 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 636.324435][T28261] IPVS: set_ctl: invalid protocol: 0 224.0.0.1:20004 [ 636.495678][T28266] netlink: 12 bytes leftover after parsing attributes in process `syz.9.6358'. [ 636.537762][T28267] netlink: 12 bytes leftover after parsing attributes in process `syz.9.6358'. [ 636.573823][T28266] netlink: 16 bytes leftover after parsing attributes in process `syz.9.6358'. [ 636.586042][T28267] netlink: 16 bytes leftover after parsing attributes in process `syz.9.6358'. [ 636.881690][T28295] bridge0: port 3(team0) entered disabled state [ 636.929189][T28295] bridge0: port 1(bridge_slave_0) entered disabled state [ 636.961653][T28295] bridge0: port 2(bridge_slave_1) entered disabled state [ 637.089837][T28299] netlink: 96 bytes leftover after parsing attributes in process `syz.8.6365'. [ 637.117081][T28313] batadv_slave_1: entered promiscuous mode [ 637.212568][T28317] netlink: 104 bytes leftover after parsing attributes in process `syz.8.6370'. [ 637.356502][T28325] netlink: 212368 bytes leftover after parsing attributes in process `syz.9.6371'. [ 637.378368][T28323] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6373'. [ 637.500739][T28333] IPVS: set_ctl: invalid protocol: 11612 172.20.20.11:21 [ 637.672631][T28346] netlink: 72 bytes leftover after parsing attributes in process `syz.6.6381'. [ 637.694208][T28346] netlink: 72 bytes leftover after parsing attributes in process `syz.6.6381'. [ 637.729813][T28349] sch_fq: defrate 0 ignored. [ 637.736394][T28350] netlink: 'syz.8.6382': attribute type 4 has an invalid length. [ 637.866435][T28310] batadv_slave_1: left promiscuous mode [ 637.927269][T28362] tipc: Enabled bearer , priority 0 [ 637.939179][T28362] syzkaller0: entered promiscuous mode [ 637.951728][T28362] syzkaller0: entered allmulticast mode [ 637.967641][T28363] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 637.996520][T28367] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 638.034860][T28359] tipc: Resetting bearer [ 638.077005][T28370] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 638.092689][T28359] tipc: Disabling bearer [ 638.302184][T28384] netlink: 'syz.8.6392': attribute type 2 has an invalid length. [ 638.435066][T28391] bond0: Caught tx_queue_len zero misconfig [ 638.756064][T28407] xt_cluster: node mask cannot exceed total number of nodes [ 639.305014][T28438] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 639.457800][T28437] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 639.476992][T28437] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 639.719293][T28437] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 639.739071][T28437] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 640.149794][T28437] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 640.190976][T28437] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 642.396146][T28468] tipc: Enabling of bearer rejected, failed to enable media [ 642.507597][T28437] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 642.518320][T28437] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 642.539936][T28488] __nla_validate_parse: 13 callbacks suppressed [ 642.539952][T28488] netlink: 8 bytes leftover after parsing attributes in process `syz.9.6419'. [ 642.764352][T28488] netlink: 'syz.9.6419': attribute type 11 has an invalid length. [ 642.786761][ T378] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 20004 - 0 [ 642.796746][T28497] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6423'. [ 642.814688][ T378] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 642.827107][T28497] veth0_to_team: entered promiscuous mode [ 642.847950][T28497] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6423'. [ 642.898598][ T378] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 20004 - 0 [ 642.902280][T28496] block nbd7: Unsupported socket: should be TCP or UNIX. [ 642.929660][ T378] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 642.939245][ T378] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 20004 - 0 [ 642.958415][ T378] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 642.988680][T28496] nbd: couldn't find a device at index 9 [ 643.029346][ T378] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 20004 - 0 [ 643.055617][ T378] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 643.117904][T28513] netlink: 44 bytes leftover after parsing attributes in process `syz.4.6428'. [ 643.135724][T28513] netlink: 44 bytes leftover after parsing attributes in process `syz.4.6428'. [ 643.308548][T28520] netlink: 'syz.6.6431': attribute type 1 has an invalid length. [ 643.371745][T28520] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR [ 643.396632][T28530] netlink: 12 bytes leftover after parsing attributes in process `syz.9.6433'. [ 643.488719][T28530] syzkaller0: entered promiscuous mode [ 643.504422][T28530] syzkaller0: entered allmulticast mode [ 643.931006][T28544] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6437'. [ 643.973755][T28544] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6437'. [ 644.102790][T28563] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 644.322739][T28580] netlink: 212368 bytes leftover after parsing attributes in process `syz.8.6446'. [ 644.517573][T28567] syz_tun: left promiscuous mode [ 644.719488][T28567] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 645.185567][T28567] vlan2: left promiscuous mode [ 645.190424][T28567] bridge0: left promiscuous mode [ 645.207401][T28567] xfrm1: left promiscuous mode [ 645.212232][T28567] xfrm1: left allmulticast mode [ 645.218610][T28567] bridge2: left promiscuous mode [ 645.224595][T28567] bridge2: left allmulticast mode [ 645.234036][T28567] veth0_macvtap: left allmulticast mode [ 645.243802][T28567] macvtap1: left allmulticast mode [ 645.273847][T28567] geneve2: left promiscuous mode [ 645.426373][ T3448] netdevsim netdevsim9 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 645.463113][ T3448] netdevsim netdevsim9 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 645.498171][ T3448] netdevsim netdevsim9 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 645.542093][ T3448] netdevsim netdevsim9 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 645.589771][ T3448] netdevsim netdevsim9 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 645.621851][T28619] netlink: 104 bytes leftover after parsing attributes in process `syz.6.6451'. [ 645.622302][ T3448] netdevsim netdevsim9 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 645.681186][ T3448] netdevsim netdevsim9 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 645.691961][ T3448] netdevsim netdevsim9 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 645.711868][T28621] batadv1: entered allmulticast mode [ 645.866567][T28635] mac80211_hwsim hwsim48 wlan0: Caught tx_queue_len zero misconfig [ 646.024291][T28643] atomic_op ffff888029235998 conn xmit_atomic 0000000000000000 [ 646.223817][T28658] netlink: 'syz.3.6464': attribute type 1 has an invalid length. [ 646.276696][T28663] sctp: [Deprecated]: syz.6.6465 (pid 28663) Use of struct sctp_assoc_value in delayed_ack socket option. [ 646.276696][T28663] Use struct sctp_sack_info instead [ 646.277956][T28658] macvlan0: entered promiscuous mode [ 646.298603][T28658] macvlan0: entered allmulticast mode [ 646.308492][T28658] bond2: entered promiscuous mode [ 646.314738][T28658] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 646.350453][T28658] bond2: left promiscuous mode [ 646.567564][T28679] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 646.574951][T28679] IPv6: NLM_F_CREATE should be set when creating new route [ 646.988818][T28697] syzkaller0: entered promiscuous mode [ 646.995840][T28697] syzkaller0: entered allmulticast mode [ 647.047398][T28702] netlink: 'syz.8.6482': attribute type 4 has an invalid length. [ 647.655614][T28735] syzkaller0: entered promiscuous mode [ 647.673652][T28735] syzkaller0: entered allmulticast mode [ 647.709621][T28735] __nla_validate_parse: 11 callbacks suppressed [ 647.709645][T28735] netlink: 224 bytes leftover after parsing attributes in process `syz.8.6491'. [ 648.164868][ T5840] Bluetooth: hci4: command 0x0405 tx timeout [ 648.266233][T28762] bond3: option lp_interval: invalid value (0) [ 648.275047][T28762] bond3: option lp_interval: allowed values 1 - 2147483647 [ 648.299429][T28762] bond3 (unregistering): Released all slaves [ 648.397694][T28772] bond3: option packets_per_slave: invalid value (18446744073709551615) [ 648.412500][T28772] bond3: option packets_per_slave: allowed values 0 - 65535 [ 648.498705][T28772] bond3 (unregistering): Released all slaves [ 648.669325][T28786] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6506'. [ 648.717225][T28793] netlink: 'syz.8.6505': attribute type 4 has an invalid length. [ 649.030964][T28812] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6513'. [ 649.034570][T28804] netlink: 72 bytes leftover after parsing attributes in process `syz.4.6512'. [ 649.040466][T28811] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6513'. [ 649.271347][T28818] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6516'. [ 649.291538][T28816] netlink: 'syz.6.6515': attribute type 15 has an invalid length. [ 649.301378][T28818] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 649.325777][T28816] netlink: 36 bytes leftover after parsing attributes in process `syz.6.6515'. [ 649.789513][T28839] netlink: 'syz.9.6520': attribute type 1 has an invalid length. [ 649.791152][T28841] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6521'. [ 649.807569][T28841] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6521'. [ 649.862754][T28839] 8021q: adding VLAN 0 to HW filter on device bond1 [ 649.968268][T28837] bond1: entered promiscuous mode [ 649.985074][T28837] bond1: entered allmulticast mode [ 650.114096][T28846] syzkaller0: entered promiscuous mode [ 650.120016][T28846] syzkaller0: entered allmulticast mode [ 650.136216][T28848] ipt_REJECT: TCP_RESET invalid for non-tcp [ 650.352432][T28857] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 653.528804][T28851] !: renamed from dummy0 (while UP) [ 653.701754][T28871] ip6gre1: entered allmulticast mode [ 653.794393][T28871] xt_l2tp: missing protocol rule (udp|l2tpip) [ 654.011480][T28890] syzkaller1: entered promiscuous mode [ 654.030729][T28890] syzkaller1: entered allmulticast mode [ 654.315096][T28905] netlink: 60 bytes leftover after parsing attributes in process `syz.8.6538'. [ 654.666408][T28923] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6541'. [ 654.832082][T28931] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6545'. [ 654.882298][T28936] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6545'. [ 654.975924][T28939] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6547'. [ 655.087409][T28941] netlink: 48 bytes leftover after parsing attributes in process `syz.9.6546'. [ 655.144553][T28941] netlink: 44 bytes leftover after parsing attributes in process `syz.9.6546'. [ 655.366751][T28965] openvswitch: netlink: Tunnel attr 3 has unexpected len 0 expected 1 [ 655.376347][T28960] xt_CONNSECMARK: invalid mode: 0 [ 655.381607][T28967] netlink: 'syz.9.6554': attribute type 18 has an invalid length. [ 655.401252][T28967] netlink: 'syz.9.6554': attribute type 18 has an invalid length. [ 655.415086][T28960] xt_CONNSECMARK: invalid mode: 0 [ 655.473675][T28967] netlink: 'syz.9.6554': attribute type 18 has an invalid length. [ 655.503606][T28967] netlink: 'syz.9.6554': attribute type 18 has an invalid length. [ 655.513611][T28973] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6555'. [ 655.559812][T28967] netlink: 'syz.9.6554': attribute type 18 has an invalid length. [ 655.569862][T28973] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6555'. [ 655.600683][T28967] netlink: 'syz.9.6554': attribute type 18 has an invalid length. [ 655.620801][T28967] netlink: 'syz.9.6554': attribute type 18 has an invalid length. [ 655.641420][T28967] netlink: 'syz.9.6554': attribute type 18 has an invalid length. [ 655.664625][T28967] netlink: 'syz.9.6554': attribute type 18 has an invalid length. [ 655.689867][T28967] netlink: 'syz.9.6554': attribute type 18 has an invalid length. [ 655.759604][T28983] mac80211_hwsim hwsim49 syzkaller0: Caught tx_queue_len zero misconfig [ 655.836180][T28986] macvtap1: entered allmulticast mode [ 655.857532][T28986] veth0_macvtap: entered allmulticast mode [ 655.921767][T28996] IPVS: set_ctl: invalid protocol: 60 10.1.1.1:20003 [ 656.126429][T29000] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6565'. [ 656.382763][T29012] : entered promiscuous mode [ 656.399105][T29014] syzkaller1: entered promiscuous mode [ 656.418008][T29014] syzkaller1: entered allmulticast mode [ 656.803198][ T5840] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 657.074676][T29039] bond9: (slave ip6gretap2): making interface the new active one [ 657.105048][T29051] Cannot find add_set index 2 as target [ 657.120719][T29039] bond9: (slave ip6gretap2): Enslaving as an active interface with an up link [ 657.928104][T29091] nbd: must specify a size in bytes for the device [ 658.201963][T29097] bond3 (unregistering): Released all slaves [ 658.571445][ T378] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 658.598098][ T378] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 658.610314][ T378] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 658.625027][ T378] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 658.628137][T21755] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 658.658455][T21755] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 658.669127][T21755] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 658.677342][T21755] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 658.686526][T21755] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 658.751827][T29113] wlan0 speed is unknown, defaulting to 1000 [ 658.774931][T29113] wg1 speed is unknown, defaulting to 1000 [ 659.124971][T29135] x_tables: duplicate underflow at hook 2 [ 659.389632][T29152] tipc: Enabled bearer , priority 0 [ 659.407676][T29152] syzkaller0: entered promiscuous mode [ 659.432834][T29152] syzkaller0: entered allmulticast mode [ 659.486472][T29113] chnl_net:caif_netlink_parms(): no params data found [ 659.540751][T29152] tipc: Resetting bearer [ 659.632197][T29151] tipc: Resetting bearer [ 659.663889][T29151] tipc: Disabling bearer [ 659.832893][T29113] bridge0: port 1(bridge_slave_0) entered blocking state [ 659.854478][T29113] bridge0: port 1(bridge_slave_0) entered disabled state [ 659.861979][T29113] bridge_slave_0: entered allmulticast mode [ 659.885933][T29113] bridge_slave_0: entered promiscuous mode [ 659.904997][T29113] bridge0: port 2(bridge_slave_1) entered blocking state [ 659.912641][T29113] bridge0: port 2(bridge_slave_1) entered disabled state [ 659.933380][T29113] bridge_slave_1: entered allmulticast mode [ 659.942268][T29113] bridge_slave_1: entered promiscuous mode [ 660.113454][T29167] __nla_validate_parse: 16 callbacks suppressed [ 660.113475][T29167] netlink: 68 bytes leftover after parsing attributes in process `syz.3.6605'. [ 660.158999][T29176] netlink: 24 bytes leftover after parsing attributes in process `syz.8.6607'. [ 660.252329][T29113] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 660.298063][T29113] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 660.436622][T29113] team0: Port device team_slave_0 added [ 660.447988][T29113] team0: Port device team_slave_1 added [ 660.458834][T29186] netlink: 512 bytes leftover after parsing attributes in process `syz.9.6609'. [ 660.495841][T29190] validate_nla: 27 callbacks suppressed [ 660.495864][T29190] netlink: 'syz.8.6611': attribute type 83 has an invalid length. [ 660.585321][T29113] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 660.592329][T29113] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 660.642162][T29113] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 660.660621][T29113] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 660.668359][T29113] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 660.719286][T29113] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 660.731157][ T5840] Bluetooth: hci3: command tx timeout [ 660.741361][T29194] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0 [ 660.880942][T29214] x_tables: unsorted underflow at hook 4 [ 660.926068][T29214] netlink: 'syz.3.6618': attribute type 13 has an invalid length. [ 660.938163][T29113] hsr_slave_0: entered promiscuous mode [ 660.956400][T29113] hsr_slave_1: entered promiscuous mode [ 660.964244][T29113] debugfs: 'hsr0' already exists in 'hsr' [ 660.973943][T29217] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6619'. [ 660.993643][T29113] Cannot create hsr debugfs directory [ 661.056011][T29227] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 661.077166][T29227] netlink: 'syz.4.6620': attribute type 3 has an invalid length. [ 661.189283][T29231] netlink: 40 bytes leftover after parsing attributes in process `syz.9.6622'. [ 661.260500][T29236] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6624'. [ 661.298474][T29237] bond5: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 661.328636][T29237] bond5 (unregistering): Released all slaves [ 661.518915][T29251] xt_policy: too many policy elements [ 661.696481][T29260] netlink: 'syz.8.6630': attribute type 1 has an invalid length. [ 661.718768][T29113] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 661.744884][T29113] netdevsim netdevsim6 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 661.772777][T29260] netlink: 'syz.8.6630': attribute type 11 has an invalid length. [ 661.798238][T29260] netlink: 224 bytes leftover after parsing attributes in process `syz.8.6630'. [ 661.870137][T29113] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 661.904153][T29113] netdevsim netdevsim6 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 661.970852][T29113] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 661.995878][T29113] netdevsim netdevsim6 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 662.011383][T29278] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6634'. [ 662.060774][T29273] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6633'. [ 662.084758][T29288] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6635'. [ 662.177499][T29113] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 662.195615][T29113] netdevsim netdevsim6 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 662.234668][T29291] netlink: 'syz.3.6638': attribute type 29 has an invalid length. [ 662.312078][T29291] ip6tnl0: Caught tx_queue_len zero misconfig [ 662.352553][T29291] bond3: option packets_per_slave: invalid value (18446744073709551615) [ 662.380093][T29291] bond3: option packets_per_slave: allowed values 0 - 65535 [ 662.406695][T29291] bond3 (unregistering): Released all slaves [ 662.433035][T29306] syzkaller0: entered promiscuous mode [ 662.438885][T29306] syzkaller0: entered allmulticast mode [ 662.539815][T29306] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 662.698855][T29321] lo: Caught tx_queue_len zero misconfig [ 662.729280][T29113] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 662.748141][T29113] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 662.778112][T29113] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 662.801224][T29113] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 662.808705][ T5840] Bluetooth: hci3: command tx timeout [ 662.940465][T29113] 8021q: adding VLAN 0 to HW filter on device bond0 [ 662.975620][T29337] wlan0 speed is unknown, defaulting to 1000 [ 662.990999][T29337] wg1 speed is unknown, defaulting to 1000 [ 662.998388][T29113] 8021q: adding VLAN 0 to HW filter on device team0 [ 663.043708][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 663.050968][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 663.121984][ T378] bridge0: port 2(bridge_slave_1) entered blocking state [ 663.129388][ T378] bridge0: port 2(bridge_slave_1) entered forwarding state [ 663.428949][T29350] syzkaller0: entered promiscuous mode [ 663.435027][T29350] syzkaller0: entered allmulticast mode [ 663.495536][T29113] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 663.742425][T29360] netlink: 'syz.8.6654': attribute type 12 has an invalid length. [ 663.812351][T29366] netlink: 'syz.4.6656': attribute type 18 has an invalid length. [ 663.957242][T29376] sctp: [Deprecated]: syz.3.6657 (pid 29376) Use of int in maxseg socket option. [ 663.957242][T29376] Use struct sctp_assoc_value instead [ 663.991087][T29375] sctp: [Deprecated]: syz.3.6657 (pid 29375) Use of int in maxseg socket option. [ 663.991087][T29375] Use struct sctp_assoc_value instead [ 664.099161][T29113] veth0_vlan: entered promiscuous mode [ 664.140260][T29383] syzkaller1: entered promiscuous mode [ 664.169505][T29383] syzkaller1: entered allmulticast mode [ 664.210759][T29113] veth1_vlan: entered promiscuous mode [ 664.329478][T29113] veth0_macvtap: entered promiscuous mode [ 664.340223][T29113] veth1_macvtap: entered promiscuous mode [ 664.371654][T29113] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 664.397713][T29113] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 664.421146][T18603] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 664.430502][T18603] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 664.444556][T18603] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 664.458513][T18603] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 664.615786][ T378] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 664.637440][ T378] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 664.693978][T18604] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 664.708685][T18604] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 664.883316][ T5840] Bluetooth: hci3: command tx timeout [ 664.893844][T29407] bond0: (slave bond_slave_1): Releasing backup interface [ 664.920029][T29407] bond_slave_1 (unregistering): left promiscuous mode [ 664.942697][T29407] bond_slave_1 (unregistering): left allmulticast mode [ 665.158346][T29419] gre1: entered promiscuous mode [ 665.164013][T29419] gre1: entered allmulticast mode [ 665.417548][T29435] sctp: [Deprecated]: syz.8.6674 (pid 29435) Use of struct sctp_assoc_value in delayed_ack socket option. [ 665.417548][T29435] Use struct sctp_sack_info instead [ 665.483454][T29435] bridge3: the hash_elasticity option has been deprecated and is always 16 [ 665.549894][T29439] __nla_validate_parse: 8 callbacks suppressed [ 665.549915][T29439] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6676'. [ 665.567759][T29441] netlink: 56 bytes leftover after parsing attributes in process `syz.6.6677'. [ 665.739682][T29451] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6680'. [ 665.768246][T29451] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6680'. [ 665.861318][T29458] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 665.908887][T29458] ip6t_srh: unknown srh match flags 4000 [ 666.470868][T29498] netlink: 12 bytes leftover after parsing attributes in process `syz.9.6695'. [ 666.512239][ T12] nci: nci_rf_discover_ntf_packet: unsupported rf_tech_and_mode 0x18 [ 666.717304][T29508] netlink: 'syz.3.6698': attribute type 1 has an invalid length. [ 666.800877][T29508] 8021q: adding VLAN 0 to HW filter on device bond3 [ 666.854655][T29518] 8021q: adding VLAN 0 to HW filter on device bond3 [ 666.861962][T29518] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 666.889307][T29518] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 666.924655][T29508] gretap1: entered promiscuous mode [ 666.935815][T29508] bond3: (slave gretap1): making interface the new active one [ 666.947478][T29508] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 666.970546][ T5840] Bluetooth: hci3: command tx timeout [ 666.975006][T29520] macvlan0: entered promiscuous mode [ 666.981939][T29520] macvlan0: entered allmulticast mode [ 666.988856][T29520] bond3: entered promiscuous mode [ 666.998007][T29520] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 667.010722][T29520] bond3: (slave macvlan0): the slave hw address is in use by the bond; giving it the hw address of gretap1 [ 667.025689][T29520] bond3: left promiscuous mode [ 667.390344][T29534] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6703'. [ 667.402593][T29534] netlink: 44 bytes leftover after parsing attributes in process `syz.6.6703'. [ 667.540806][T29545] IPVS: set_ctl: invalid protocol: 58 127.0.0.1:20001 [ 667.803860][T29555] gre0: entered promiscuous mode [ 667.809090][T29555] gre0: entered allmulticast mode [ 667.864811][T29555] bond5: option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 667.877923][T29555] bond5 (unregistering): Released all slaves [ 667.988055][T29569] netlink: 16 bytes leftover after parsing attributes in process `syz.9.6713'. [ 668.118048][T29576] netlink: 'syz.9.6715': attribute type 13 has an invalid length. [ 668.226760][T29576] bond1: left promiscuous mode [ 668.231764][T29576] bond1: left allmulticast mode [ 668.238103][T29576] ip6gre1: left allmulticast mode [ 668.366142][T29585] bond1 (unregistering): Released all slaves [ 668.410949][T29588] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6719'. [ 668.464168][T29590] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 668.651071][T29599] netlink: 32 bytes leftover after parsing attributes in process `syz.8.6719'. [ 668.701431][T29592] bond0: (slave bond_slave_0): Releasing backup interface [ 668.728815][T29592] bond0: (slave bond_slave_1): Releasing backup interface [ 668.755119][T29592] team0: Port device team_slave_0 removed [ 668.793202][T29592] team0: Port device team_slave_1 removed [ 668.817907][T29592] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 668.838758][T29592] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 668.862664][T29592] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 668.897277][T29592] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 668.940485][T29592] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 669.530450][T29639] bond5: Unable to set down delay as MII monitoring is disabled [ 669.587358][T29639] bond5 (unregistering): Released all slaves [ 670.509486][T29676] tipc: New replicast peer: 255.255.255.255 [ 670.535321][T29676] tipc: Enabled bearer , priority 10 [ 670.668807][T29682] __nla_validate_parse: 1 callbacks suppressed [ 670.668831][T29682] netlink: 36 bytes leftover after parsing attributes in process `syz.9.6748'. [ 670.883853][T28613] IPVS: starting estimator thread 0... [ 670.993116][T29686] IPVS: using max 27 ests per chain, 64800 per kthread [ 671.382354][T29722] ip6t_srh: unknown srh match flags 4000 [ 671.398652][T29722] netlink: 'syz.9.6759': attribute type 1 has an invalid length. [ 671.529967][T29726] netlink: 32 bytes leftover after parsing attributes in process `syz.6.6761'. [ 671.694083][T29739] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6765'. [ 671.764195][T29743] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6767'. [ 671.784634][T29743] netlink: 24 bytes leftover after parsing attributes in process `syz.6.6767'. [ 671.899143][T29743] netdevsim netdevsim6: Direct firmware load for failed with error -2 [ 671.934358][T29743] netdevsim netdevsim6: Falling back to sysfs fallback for: [ 672.159987][T29771] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6778'. [ 672.244269][T29773] SET target dimension over the limit! [ 672.491815][T29794] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6785'. [ 672.524234][T29794] netlink: 24 bytes leftover after parsing attributes in process `syz.8.6785'. [ 672.689798][T29800] netlink: 28 bytes leftover after parsing attributes in process `syz.6.6787'. [ 672.703288][T29800] netlink: 28 bytes leftover after parsing attributes in process `syz.6.6787'. [ 672.730462][T29800] erspan0: entered promiscuous mode [ 672.756499][T29800] batadv_slave_1: entered promiscuous mode [ 672.773228][T29800] batadv_slave_1: left promiscuous mode [ 672.793060][T29800] erspan0: left promiscuous mode [ 673.003729][T29822] Cannot find add_set index 2 as target [ 673.017844][T29822] sctp: [Deprecated]: syz.6.6793 (pid 29822) Use of struct sctp_assoc_value in delayed_ack socket option. [ 673.017844][T29822] Use struct sctp_sack_info instead [ 673.058960][T29822] delete_channel: no stack [ 673.059934][T29825] syzkaller0: entered promiscuous mode [ 673.076546][T29825] syzkaller0: entered allmulticast mode [ 673.088175][T29824] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 673.209442][T29831] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 673.221687][T29833] geneve2: entered promiscuous mode [ 673.236414][T29833] geneve2: entered allmulticast mode [ 673.467145][T29846] ip6gre2: entered allmulticast mode [ 673.710159][T29865] lo: entered promiscuous mode [ 673.720185][T29865] tunl0: entered promiscuous mode [ 673.729708][T29865] gre0: entered promiscuous mode [ 673.747562][T29865] gretap0: entered promiscuous mode [ 673.762779][T29865] erspan0: entered promiscuous mode [ 673.778298][T29865] ip_vti0: entered promiscuous mode [ 674.051268][T29878] netlink: 'syz.8.6806': attribute type 1 has an invalid length. [ 674.679561][T29913] bond0: (slave bond_slave_0): Releasing backup interface [ 674.712323][T29913] bond0: (slave bond_slave_1): Releasing backup interface [ 674.741446][T29913] team0: Port device team_slave_0 removed [ 674.761965][T29913] team0: Port device team_slave_1 removed [ 674.772580][T29913] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 674.780798][T29913] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 674.791427][T29913] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 674.802481][T29913] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 674.813336][T29913] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 674.959501][T29930] macvtap1: entered promiscuous mode [ 674.969102][T29930] vlan0: entered promiscuous mode [ 674.983833][T29930] macvtap1: entered allmulticast mode [ 674.989409][T29930] vlan0: entered allmulticast mode [ 674.995066][T29930] veth0_vlan: entered allmulticast mode [ 675.424721][T29961] netlink: 'syz.9.6831': attribute type 22 has an invalid length. [ 675.576887][T29974] team_slave_1: Caught tx_queue_len zero misconfig [ 675.671776][T29977] dvmrp0: entered allmulticast mode [ 675.678189][T29981] netlink: 'syz.4.6837': attribute type 1 has an invalid length. [ 675.686017][T29970] __nla_validate_parse: 9 callbacks suppressed [ 675.686038][T29970] netlink: 28 bytes leftover after parsing attributes in process `syz.6.6833'. [ 675.704253][T29981] netlink: 'syz.4.6837': attribute type 1 has an invalid length. [ 675.717527][T29981] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6837'. [ 675.793585][T29984] netlink: 60 bytes leftover after parsing attributes in process `syz.4.6839'. [ 675.815609][T29985] netlink: 60 bytes leftover after parsing attributes in process `syz.4.6839'. [ 675.936104][T29992] bond0: (slave caif0): The slave device specified does not support setting the MAC address [ 675.948448][T29992] bond0: (slave caif0): Error -95 calling set_mac_address [ 676.106375][T30001] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6844'. [ 676.118948][T30001] netlink: 'syz.6.6844': attribute type 1 has an invalid length. [ 676.224603][T30010] tipc: Enabled bearer , priority 0 [ 676.234253][T30010] syzkaller0: entered promiscuous mode [ 676.241434][T30010] syzkaller0: entered allmulticast mode [ 676.254416][T30010] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 676.300665][T30010] tipc: Resetting bearer [ 676.329232][T30014] macvtap0: Device is already in use. [ 676.341512][T30009] tipc: Resetting bearer [ 676.371861][T30009] tipc: Disabling bearer [ 676.381920][T30014] tipc: Enabling of bearer rejected, media not registered [ 676.638425][T30026] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6854'. [ 676.660536][T30026] nbd: must specify a size in bytes for the device [ 676.674929][T30027] netlink: 'syz.9.6855': attribute type 9 has an invalid length. [ 676.694082][T30035] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6857'. [ 676.694121][T30031] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6857'. [ 676.961437][T30049] netlink: 'syz.8.6858': attribute type 1 has an invalid length. [ 677.089539][T30049] 8021q: adding VLAN 0 to HW filter on device bond5 [ 677.185493][T30065] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 677.235015][T30070] openvswitch: netlink: IP tunnel dst address not specified [ 677.267422][T30065] bond1: (slave lo): Enslaving as a backup interface with an up link [ 677.297394][T30065] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 677.633275][T30083] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6865'. [ 677.759982][T30086] sctp: [Deprecated]: syz.9.6866 (pid 30086) Use of int in max_burst socket option deprecated. [ 677.759982][T30086] Use struct sctp_assoc_value instead [ 677.792519][ T30] audit: type=1800 audit(1765133465.266:14): pid=30088 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.6867" name="memory.events" dev="tmpfs" ino=1145 res=0 errno=0 [ 677.826679][T30088] pim6reg1: entered promiscuous mode [ 677.832125][T30088] pim6reg1: entered allmulticast mode [ 677.930099][T30095] openvswitch: netlink: Key type 12014 is out of range max 32 [ 677.938770][T30093] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 40 [ 678.056479][T30103] syzkaller0: entered promiscuous mode [ 678.071131][T30103] syzkaller0: entered allmulticast mode [ 678.080064][T30108] Cannot find add_set index 2 as target [ 678.107458][T30107] netlink: 8 bytes leftover after parsing attributes in process `syz.9.6875'. [ 678.181929][T30107] netlink: 'syz.9.6875': attribute type 12 has an invalid length. [ 678.216207][T30117] netlink: 'syz.9.6875': attribute type 4 has an invalid length. [ 678.236898][T18603] netdevsim netdevsim9 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 678.248925][T30119] netlink: 'syz.3.6877': attribute type 3 has an invalid length. [ 678.258677][T18603] netdevsim netdevsim9 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 678.292616][T18603] netdevsim netdevsim9 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 678.331423][T18603] netdevsim netdevsim9 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 678.811941][T30147] tipc: Enabled bearer , priority 0 [ 678.857000][T30150] syzkaller0: entered promiscuous mode [ 678.868151][T30150] syzkaller0: entered allmulticast mode [ 678.957363][T30167] tipc: Resetting bearer [ 679.033442][T30150] tipc: Resetting bearer [ 679.120630][T30150] tipc: Disabling bearer [ 679.669149][T30200] validate_nla: 3 callbacks suppressed [ 679.669173][T30200] netlink: 'syz.6.6901': attribute type 1 has an invalid length. [ 679.836954][T30220] netlink: 'syz.9.6905': attribute type 10 has an invalid length. [ 679.856227][T30218] wlan0 speed is unknown, defaulting to 1000 [ 679.875455][T30220] dummy0: entered promiscuous mode [ 679.880845][T30220] dummy0: entered allmulticast mode [ 679.912448][T30220] team0: Failed to send options change via netlink (err -105) [ 679.928335][T30220] team0: Port device dummy0 added [ 679.953434][T30218] wg1 speed is unknown, defaulting to 1000 [ 680.279886][T30236] netdevsim netdevsim9 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 680.314747][T30245] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 680.519607][T30249] netlink: 'syz.4.6915': attribute type 1 has an invalid length. [ 680.592043][T30236] netdevsim netdevsim9 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 680.632791][T30253] tipc: Started in network mode [ 680.639032][T30253] tipc: Node identity 7e9ee3a7c8e4, cluster identity 4711 [ 680.647051][T30253] tipc: Enabled bearer , priority 0 [ 680.655834][T30249] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 680.763243][T30257] syzkaller0: entered promiscuous mode [ 680.769034][T30257] syzkaller0: entered allmulticast mode [ 680.777217][T30257] tipc: Resetting bearer [ 680.809892][T30236] netdevsim netdevsim9 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 680.859111][T30252] tipc: Resetting bearer [ 680.887758][T30270] netlink: 'syz.3.6921': attribute type 1 has an invalid length. [ 680.896065][T30270] netlink: 'syz.3.6921': attribute type 4 has an invalid length. [ 680.904602][T30270] __nla_validate_parse: 16 callbacks suppressed [ 680.904623][T30270] netlink: 9422 bytes leftover after parsing attributes in process `syz.3.6921'. [ 680.935527][T30270] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6921'. [ 681.552473][T30266] Bluetooth: hci0: Opcode 0x0c20 failed: -4 [ 681.670987][T30281] netlink: 'syz.8.6924': attribute type 10 has an invalid length. [ 681.680417][T30281] netlink: 228 bytes leftover after parsing attributes in process `syz.8.6924'. [ 683.402414][T30252] tipc: Disabling bearer [ 683.457519][T28602] tipc: Node number set to 3061506983 [ 683.500322][T30236] netdevsim netdevsim9 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 683.765752][T17753] netdevsim netdevsim9 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 683.793453][T30302] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6931'. [ 683.805815][T17753] netdevsim netdevsim9 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 683.831989][T17753] netdevsim netdevsim9 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 683.840848][T30299] nbd: couldn't find device at index 6 [ 683.863767][T30302] netlink: 132 bytes leftover after parsing attributes in process `syz.4.6931'. [ 683.876012][T17753] netdevsim netdevsim9 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 684.561893][T30347] IPv6: NLM_F_REPLACE set, but no existing node found! [ 684.592409][T30347] bond0: (slave caif0): refused to change device type [ 684.622153][T30350] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6946'. [ 684.679239][T30350] bond0: entered promiscuous mode [ 684.694631][T30350] bond_slave_0: entered promiscuous mode [ 684.705870][T30350] bond_slave_1: entered promiscuous mode [ 684.735281][T30350] bond0: left promiscuous mode [ 684.740252][T30350] bond_slave_0: left promiscuous mode [ 684.761366][T30350] bond_slave_1: left promiscuous mode [ 684.786327][T30356] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6948'. [ 684.898152][T30365] netlink: 16 bytes leftover after parsing attributes in process `syz.8.6951'. [ 685.129905][T30373] 8021q: adding VLAN 0 to HW filter on device bond6 [ 685.139012][T30373] caif0: mtu less than device minimum [ 685.179912][T30378] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6955'. [ 685.227958][T30378] netlink: 44 bytes leftover after parsing attributes in process `syz.4.6955'. [ 685.388248][T30384] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 685.486632][T30390] team0: Mode changed to "loadbalance" [ 685.799051][T30406] 8021q: adding VLAN 0 to HW filter on device bond0 [ 685.824246][T30408] netlink: 'syz.4.6966': attribute type 1 has an invalid length. [ 685.832035][T30408] netlink: 'syz.4.6966': attribute type 3 has an invalid length. [ 685.840554][T30408] netlink: 'syz.4.6966': attribute type 7 has an invalid length. [ 685.856460][T30408] netlink: 'syz.4.6966': attribute type 8 has an invalid length. [ 685.864693][T30408] NCSI netlink: No device for ifindex 131092 [ 685.871158][T30414] netlink: 'syz.9.6970': attribute type 1 has an invalid length. [ 686.384231][T30450] netlink: 'syz.8.6981': attribute type 1 has an invalid length. [ 686.430746][T30450] 8021q: adding VLAN 0 to HW filter on device bond7 [ 686.458870][T30453] netlink: 'syz.9.6982': attribute type 5 has an invalid length. [ 686.515575][T30450] 8021q: adding VLAN 0 to HW filter on device bond7 [ 686.525780][T30450] bond7: (slave vxcan5): The slave device specified does not support setting the MAC address [ 686.537530][T30450] bond7: (slave vxcan5): Error -95 calling set_mac_address [ 686.579705][T30460] __nla_validate_parse: 4 callbacks suppressed [ 686.579726][T30460] netlink: 28 bytes leftover after parsing attributes in process `syz.8.6981'. [ 686.597073][T30460] 8021q: adding VLAN 0 to HW filter on device bond7 [ 686.620229][T30454] veth13: entered promiscuous mode [ 686.630371][T30454] bond7: (slave veth13): Enslaving as an active interface with a down link [ 686.655896][T30459] IPv6: sit1: Disabled Multicast RS [ 686.662474][T30459] sit1: entered allmulticast mode [ 686.697407][T30460] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6981'. [ 687.001364][T30478] netlink: 28 bytes leftover after parsing attributes in process `syz.8.6991'. [ 687.021741][T30478] netlink: 28 bytes leftover after parsing attributes in process `syz.8.6991'. [ 687.081608][T30484] netlink: 28 bytes leftover after parsing attributes in process `syz.8.6991'. [ 687.104207][T30484] netlink: 28 bytes leftover after parsing attributes in process `syz.8.6991'. [ 687.177832][T30490] netlink: 'syz.4.6994': attribute type 12 has an invalid length. [ 687.352055][T30499] netlink: 64 bytes leftover after parsing attributes in process `syz.4.6998'. [ 687.385975][T30492] wlan0 speed is unknown, defaulting to 1000 [ 687.395022][T30495] netlink: 288 bytes leftover after parsing attributes in process `syz.9.6995'. [ 687.416192][T30492] wg1 speed is unknown, defaulting to 1000 [ 687.654746][T30516] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7005'. [ 687.780174][T30512] netlink: 8 bytes leftover after parsing attributes in process `syz.9.7003'. [ 688.062316][T30539] sctp: [Deprecated]: syz.8.7010 (pid 30539) Use of struct sctp_assoc_value in delayed_ack socket option. [ 688.062316][T30539] Use struct sctp_sack_info instead [ 688.159118][T30542] block nbd0: reconnected socket [ 688.211461][T21755] block nbd0: Receive control failed (result -32) [ 688.287143][T30548] sctp: [Deprecated]: syz.4.7013 (pid 30548) Use of int in maxseg socket option. [ 688.287143][T30548] Use struct sctp_assoc_value instead [ 688.348378][T30554] IPVS: set_ctl: invalid protocol: 59 172.20.20.61:20003 [ 688.462775][T30560] netlink: 'syz.8.7017': attribute type 4 has an invalid length. [ 688.462775][T30561] netlink: 'syz.8.7017': attribute type 4 has an invalid length. [ 688.606761][T30571] digital: digital_start_poll: Unknown protocol [ 688.752140][T30580] syzkaller1: entered promiscuous mode [ 688.757905][T30580] syzkaller1: entered allmulticast mode [ 689.117998][T30602] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_virt_wifi, syncid = 0, id = 0 [ 689.238430][T30607] netdevsim netdevsim6: loading /lib/firmware/. failed with error -22 [ 689.254224][T30607] netdevsim netdevsim6: Direct firmware load for . failed with error -22 [ 689.274428][T30607] netdevsim netdevsim6: Falling back to sysfs fallback for: . [ 689.325130][T30609] netdevsim netdevsim6: loading /lib/firmware/. failed with error -22 [ 689.359501][T30609] netdevsim netdevsim6: Direct firmware load for . failed with error -22 [ 689.388882][T30609] netdevsim netdevsim6: Falling back to sysfs fallback for: . [ 689.660271][T30628] 8021q: adding VLAN 0 to HW filter on device bond2 [ 689.761818][T30633] 8021q: adding VLAN 0 to HW filter on device bond2 [ 689.787769][T30633] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 689.806588][T30633] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 689.880445][T30628] gretap1: entered promiscuous mode [ 689.940373][T30628] bond2: (slave gretap1): making interface the new active one [ 689.961816][T30628] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 689.995977][T30637] macvlan2: entered promiscuous mode [ 690.003467][T30637] macvlan2: entered allmulticast mode [ 690.009992][T30637] bond2: entered promiscuous mode [ 690.017313][T30637] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 690.029519][T30637] bond2: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap1 [ 690.043957][T30637] bond2: left promiscuous mode [ 690.313170][T30662] IPVS: length: 164 != 677485752 [ 690.620356][T30684] tipc: Enabling not permitted [ 690.657024][T30684] tipc: Enabling of bearer rejected, failed to enable media [ 690.675700][T30688] gre0: entered promiscuous mode [ 690.690171][T30688] gre0: entered allmulticast mode [ 691.234019][T30723] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 691.281379][T30723] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 691.412525][T30731] validate_nla: 6 callbacks suppressed [ 691.412547][T30731] netlink: 'syz.3.7065': attribute type 24 has an invalid length. [ 691.591041][T30742] nft_compat: unsupported protocol 0 [ 691.738101][T30756] __nla_validate_parse: 15 callbacks suppressed [ 691.738122][T30756] netlink: 81 bytes leftover after parsing attributes in process `syz.3.7074'. [ 691.764325][T30759] netlink: 212368 bytes leftover after parsing attributes in process `syz.8.7075'. [ 691.791946][T30756] bond0: Caught tx_queue_len zero misconfig [ 691.878354][T30765] xt_CT: You must specify a L4 protocol and not use inversions on it [ 691.886486][T30767] netlink: 'syz.3.7077': attribute type 142 has an invalid length. [ 692.085682][T30774] can: request_module (can-proto-0) failed. [ 692.106434][T30778] netlink: 88 bytes leftover after parsing attributes in process `syz.8.7083'. [ 692.230101][T30783] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7084'. [ 692.504805][T30803] syz_tun: entered allmulticast mode [ 692.550035][T30806] x_tables: duplicate underflow at hook 2 [ 692.570207][T30803] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7091'. [ 692.570338][T30806] x_tables: duplicate underflow at hook 2 [ 692.594219][T30806] x_tables: duplicate underflow at hook 2 [ 692.600792][T30806] x_tables: duplicate underflow at hook 2 [ 692.619875][T30811] veth0: entered promiscuous mode [ 692.630524][T30811] veth0: left promiscuous mode [ 692.636894][T30806] x_tables: duplicate underflow at hook 2 [ 692.640561][T30813] netlink: 'syz.3.7094': attribute type 1 has an invalid length. [ 692.722283][T30819] bond4: (slave gretap2): making interface the new active one [ 692.737030][T30819] bond4: (slave gretap2): Enslaving as an active interface with an up link [ 692.748860][T30803] syz_tun: left allmulticast mode [ 692.802204][T30813] syzkaller1: entered promiscuous mode [ 692.828001][T30827] netlink: 'syz.9.7099': attribute type 11 has an invalid length. [ 692.848309][T30813] syzkaller1: entered allmulticast mode [ 693.066367][T30843] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 693.270261][T30857] sctp: [Deprecated]: syz.6.7106 (pid 30857) Use of struct sctp_assoc_value in delayed_ack socket option. [ 693.270261][T30857] Use struct sctp_sack_info instead [ 693.305885][T30851] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7106'. [ 693.337710][T30862] netlink: 'syz.9.7110': attribute type 1 has an invalid length. [ 693.350105][T30851] netlink: 24 bytes leftover after parsing attributes in process `syz.6.7106'. [ 693.505427][T30873] netlink: 40 bytes leftover after parsing attributes in process `syz.3.7112'. [ 713.683931][T21755] Bluetooth: hci2: command 0x0405 tx timeout [ 718.803215][ T5840] Bluetooth: hci1: command 0x0405 tx timeout [ 732.025921][T30905] sock: sock_timestamping_bind_phc: sock not bind to device [ 732.036130][T30906] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7120'. [ 732.044483][T30911] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7118'. [ 732.067602][T30906] openvswitch: netlink: VXLAN extension 30 out of range max 1 [ 732.232476][T30918] netlink: 132 bytes leftover after parsing attributes in process `syz.4.7123'. [ 732.362020][T30927] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7129'. [ 732.406594][T30925] netlink: 16 bytes leftover after parsing attributes in process `syz.9.7128'. [ 732.553728][T30944] openvswitch: netlink: Duplicate key (type 1). [ 732.653274][T30950] netlink: 12 bytes leftover after parsing attributes in process `syz.9.7135'. [ 732.935178][T30975] netlink: 'syz.9.7140': attribute type 11 has an invalid length. [ 733.181644][T30985] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7142'. [ 733.337228][T30997] netlink: 4 bytes leftover after parsing attributes in process `syz.8.7145'. [ 733.350771][T30997] sctp: [Deprecated]: syz.8.7145 (pid 30997) Use of struct sctp_assoc_value in delayed_ack socket option. [ 733.350771][T30997] Use struct sctp_sack_info instead [ 733.371593][T30997] netlink: 8 bytes leftover after parsing attributes in process `syz.8.7145'. [ 733.532030][T31006] openvswitch: netlink: nsh attr 60 is out of range max 3 [ 733.541560][T31006] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 733.576596][T31008] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7150'. [ 733.809458][T31017] bond3: option arp_all_targets: invalid value (18446744073709551613) [ 733.820627][T31017] bond3 (unregistering): Released all slaves [ 733.862172][T31020] tipc: Enabling of bearer rejected, failed to enable media [ 734.042423][T31027] team_slave_0: entered promiscuous mode [ 734.048202][T31027] team_slave_1: entered promiscuous mode [ 734.056190][T31027] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 734.071923][T31030] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 734.079890][T30993] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 734.086544][T30993] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 734.098308][T30993] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 734.105852][T30993] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 734.134394][T30993] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 734.143791][T30993] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 734.171908][T30993] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 734.178525][T30993] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 734.192180][T30993] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 734.198909][T30993] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 734.241468][T30993] ------------[ cut here ]------------ [ 734.248158][T30993] refcount_t: underflow; use-after-free. [ 734.253911][T30993] WARNING: lib/refcount.c:28 at 0x0, CPU#1: syz.9.7144/30993 [ 734.261326][T30993] Modules linked in: [ 734.265989][T30993] CPU: 1 UID: 0 PID: 30993 Comm: syz.9.7144 Not tainted syzkaller #0 PREEMPT(full) [ 734.275939][T30993] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 734.286201][T30993] RIP: 0010:refcount_warn_saturate+0xb2/0x110 [ 734.292331][T30993] Code: 74 26 00 0b 67 48 0f b9 3a eb 4a e8 d8 d2 36 fd 48 8d 3d 71 26 00 0b 67 48 0f b9 3a eb 37 e8 c5 d2 36 fd 48 8d 3d 6e 26 00 0b <67> 48 0f b9 3a eb 24 e8 b2 d2 36 fd 48 8d 3d 6b 26 00 0b 67 48 0f [ 734.313624][T30993] RSP: 0018:ffffc90004ebf7b8 EFLAGS: 00010287 [ 734.319763][T30993] RAX: ffffffff848a779b RBX: 0000000000000003 RCX: 0000000000080000 [ 734.328579][T30993] RDX: ffffc90015819000 RSI: 00000000000196e0 RDI: ffffffff8f8a9e10 [ 734.336930][T30993] RBP: 0000000000000000 R08: ffff88807ce05b80 R09: 0000000000000005 [ 734.345343][T30993] R10: 0000000000000004 R11: 0000000000000002 R12: ffff888027c5e400 [ 734.353623][T30993] R13: ffff888057e12060 R14: ffff888057e12078 R15: dffffc0000000000 [ 734.361676][T30993] FS: 00007fb69783f6c0(0000) GS:ffff8881261b1000(0000) knlGS:0000000000000000 [ 734.370769][T30993] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 734.377918][T30993] CR2: 000000110c2d981c CR3: 0000000054fec000 CR4: 00000000003526f0 [ 734.386040][T30993] Call Trace: [ 734.389461][T30993] [ 734.392520][T30993] klist_dec_and_del+0x3c7/0x3d0 [ 734.393898][T31035] can: request_module (can-proto-0) failed. [ 734.397706][T30993] klist_remove+0x1bd/0x340 [ 734.408713][T30993] ? __pfx_klist_children_put+0x10/0x10 [ 734.414479][T30993] ? __pfx_klist_remove+0x10/0x10 [ 734.419566][T30993] ? kobject_move+0x5a6/0x6e0 [ 734.425304][T30993] ? __pfx_kobject_move+0x10/0x10 [ 734.431370][T30993] ? do_raw_spin_unlock+0x122/0x240 [ 734.437046][T30993] ? get_device_parent+0x366/0x3a0 [ 734.442275][T30993] device_move+0x193/0x700 [ 734.446866][T30993] hci_conn_del_sysfs+0xb8/0x170 [ 734.451868][T30993] hci_conn_del+0xc36/0x11b0 [ 734.456672][T30993] hci_conn_hash_flush+0x191/0x230 [ 734.461955][T30993] hci_dev_close_sync+0x821/0xff0 [ 734.467351][T30993] ? __pfx_hci_dev_close_sync+0x10/0x10 [ 734.473034][T30993] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 734.479071][T30993] hci_dev_do_close+0x2f/0x90 [ 734.484206][T30993] hci_rfkill_set_block+0x21d/0x2e0 [ 734.490097][T30993] ? __pfx_hci_rfkill_set_block+0x10/0x10 [ 734.496349][T30993] rfkill_set_block+0x1d2/0x440 [ 734.501403][T30993] rfkill_fop_write+0x44b/0x570 [ 734.506387][T30993] ? __pfx_rfkill_fop_write+0x10/0x10 [ 734.511842][T30993] ? security_kernfs_init_security+0x270/0x290 [ 734.518185][T30993] ? rw_verify_area+0x255/0x4d0 [ 734.523484][T30993] ? __pfx_rfkill_fop_write+0x10/0x10 [ 734.528917][T30993] vfs_write+0x27e/0xb30 [ 734.533311][T30993] ? __pfx_vfs_write+0x10/0x10 [ 734.538592][T30993] ? __fget_files+0x2a/0x420 [ 734.543463][T30993] ? __fget_files+0x2a/0x420 [ 734.548381][T30993] ? __fget_files+0x3a0/0x420 [ 734.554286][T30993] ? __fget_files+0x2a/0x420 [ 734.558965][T30993] ksys_write+0x145/0x250 [ 734.564218][T30993] ? __pfx_ksys_write+0x10/0x10 [ 734.569133][T30993] ? do_syscall_64+0xbe/0xf80 [ 734.573971][T30993] do_syscall_64+0xfa/0xf80 [ 734.578557][T30993] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 734.584945][T30993] ? clear_bhb_loop+0x60/0xb0 [ 734.589751][T30993] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 734.596371][T30993] RIP: 0033:0x7fb69698f749 [ 734.600846][T30993] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 734.620981][T30993] RSP: 002b:00007fb69783f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 734.629534][T30993] RAX: ffffffffffffffda RBX: 00007fb696be5fa0 RCX: 00007fb69698f749 [ 734.637842][T30993] RDX: 0000000000000008 RSI: 0000200000000080 RDI: 0000000000000004 [ 734.646425][T30993] RBP: 00007fb696a13f91 R08: 0000000000000000 R09: 0000000000000000 [ 734.654842][T30993] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 734.664839][T30993] R13: 00007fb696be6038 R14: 00007fb696be5fa0 R15: 00007ffdc19c3138 [ 734.673281][T30993] [ 734.676380][T30993] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 734.683781][T30993] CPU: 1 UID: 0 PID: 30993 Comm: syz.9.7144 Not tainted syzkaller #0 PREEMPT(full) [ 734.693166][T30993] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 734.703247][T30993] Call Trace: [ 734.706566][T30993] [ 734.710014][T30993] dump_stack_lvl+0x99/0x250 [ 734.715575][T30993] ? __asan_memcpy+0x40/0x70 [ 734.720490][T30993] ? __pfx_dump_stack_lvl+0x10/0x10 [ 734.725736][T30993] ? __pfx__printk+0x10/0x10 [ 734.730420][T30993] vpanic+0x237/0x6d0 [ 734.734448][T30993] ? __pfx_vpanic+0x10/0x10 [ 734.738994][T30993] ? is_bpf_text_address+0x292/0x2b0 [ 734.744393][T30993] ? is_bpf_text_address+0x26/0x2b0 [ 734.749642][T30993] panic+0xb9/0xc0 [ 734.753582][T30993] ? __pfx_panic+0x10/0x10 [ 734.758381][T30993] __warn+0x317/0x4b0 [ 734.762405][T30993] __report_bug+0x288/0x500 [ 734.767662][T30993] ? __pfx_stack_trace_save+0x10/0x10 [ 734.773139][T30993] ? __pfx___report_bug+0x10/0x10 [ 734.778220][T30993] ? __pv_queued_spin_lock_slowpath+0xa05/0xb60 [ 734.784484][T30993] ? __lock_acquire+0x146f/0x2cf0 [ 734.789550][T30993] report_bug_entry+0x16a/0x220 [ 734.794436][T30993] ? refcount_warn_saturate+0xb2/0x110 [ 734.799934][T30993] ? refcount_warn_saturate+0xb7/0x110 [ 734.805476][T30993] handle_bug+0xca/0x200 [ 734.809762][T30993] exc_invalid_op+0x1a/0x50 [ 734.814929][T30993] asm_exc_invalid_op+0x1a/0x20 [ 734.820778][T30993] RIP: 0010:refcount_warn_saturate+0xb2/0x110 [ 734.826894][T30993] Code: 74 26 00 0b 67 48 0f b9 3a eb 4a e8 d8 d2 36 fd 48 8d 3d 71 26 00 0b 67 48 0f b9 3a eb 37 e8 c5 d2 36 fd 48 8d 3d 6e 26 00 0b <67> 48 0f b9 3a eb 24 e8 b2 d2 36 fd 48 8d 3d 6b 26 00 0b 67 48 0f [ 734.846883][T30993] RSP: 0018:ffffc90004ebf7b8 EFLAGS: 00010287 [ 734.852977][T30993] RAX: ffffffff848a779b RBX: 0000000000000003 RCX: 0000000000080000 [ 734.861051][T30993] RDX: ffffc90015819000 RSI: 00000000000196e0 RDI: ffffffff8f8a9e10 [ 734.870633][T30993] RBP: 0000000000000000 R08: ffff88807ce05b80 R09: 0000000000000005 [ 734.878863][T30993] R10: 0000000000000004 R11: 0000000000000002 R12: ffff888027c5e400 [ 734.886890][T30993] R13: ffff888057e12060 R14: ffff888057e12078 R15: dffffc0000000000 [ 734.894916][T30993] ? refcount_warn_saturate+0xab/0x110 [ 734.900453][T30993] ? refcount_warn_saturate+0xab/0x110 [ 734.905937][T30993] klist_dec_and_del+0x3c7/0x3d0 [ 734.910953][T30993] klist_remove+0x1bd/0x340 [ 734.915742][T30993] ? __pfx_klist_children_put+0x10/0x10 [ 734.922367][T30993] ? __pfx_klist_remove+0x10/0x10 [ 734.927525][T30993] ? kobject_move+0x5a6/0x6e0 [ 734.932244][T30993] ? __pfx_kobject_move+0x10/0x10 [ 734.937302][T30993] ? do_raw_spin_unlock+0x122/0x240 [ 734.942526][T30993] ? get_device_parent+0x366/0x3a0 [ 734.947663][T30993] device_move+0x193/0x700 [ 734.952113][T30993] hci_conn_del_sysfs+0xb8/0x170 [ 734.957080][T30993] hci_conn_del+0xc36/0x11b0 [ 734.961784][T30993] hci_conn_hash_flush+0x191/0x230 [ 734.967806][T30993] hci_dev_close_sync+0x821/0xff0 [ 734.973140][T30993] ? __pfx_hci_dev_close_sync+0x10/0x10 [ 734.978739][T30993] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 734.985018][T30993] hci_dev_do_close+0x2f/0x90 [ 734.989803][T30993] hci_rfkill_set_block+0x21d/0x2e0 [ 734.995023][T30993] ? __pfx_hci_rfkill_set_block+0x10/0x10 [ 735.000848][T30993] rfkill_set_block+0x1d2/0x440 [ 735.005817][T30993] rfkill_fop_write+0x44b/0x570 [ 735.010695][T30993] ? __pfx_rfkill_fop_write+0x10/0x10 [ 735.016527][T30993] ? security_kernfs_init_security+0x270/0x290 [ 735.022721][T30993] ? rw_verify_area+0x255/0x4d0 [ 735.028291][T30993] ? __pfx_rfkill_fop_write+0x10/0x10 [ 735.033835][T30993] vfs_write+0x27e/0xb30 [ 735.038228][T30993] ? __pfx_vfs_write+0x10/0x10 [ 735.043009][T30993] ? __fget_files+0x2a/0x420 [ 735.047626][T30993] ? __fget_files+0x2a/0x420 [ 735.052225][T30993] ? __fget_files+0x3a0/0x420 [ 735.056914][T30993] ? __fget_files+0x2a/0x420 [ 735.061527][T30993] ksys_write+0x145/0x250 [ 735.065880][T30993] ? __pfx_ksys_write+0x10/0x10 [ 735.070760][T30993] ? do_syscall_64+0xbe/0xf80 [ 735.075571][T30993] do_syscall_64+0xfa/0xf80 [ 735.080106][T30993] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 735.086998][T30993] ? clear_bhb_loop+0x60/0xb0 [ 735.092106][T30993] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 735.098034][T30993] RIP: 0033:0x7fb69698f749 [ 735.102469][T30993] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 735.122095][T30993] RSP: 002b:00007fb69783f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 735.130624][T30993] RAX: ffffffffffffffda RBX: 00007fb696be5fa0 RCX: 00007fb69698f749 [ 735.140388][T30993] RDX: 0000000000000008 RSI: 0000200000000080 RDI: 0000000000000004 [ 735.148650][T30993] RBP: 00007fb696a13f91 R08: 0000000000000000 R09: 0000000000000000 [ 735.156643][T30993] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 735.164634][T30993] R13: 00007fb696be6038 R14: 00007fb696be5fa0 R15: 00007ffdc19c3138 [ 735.172639][T30993] [ 735.175986][T30993] Kernel Offset: disabled [ 735.180352][T30993] Rebooting in 86400 seconds..