last executing test programs: 5m54.483138278s ago: executing program 4 (id=1938): socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000680)) socket$inet_mptcp(0x2, 0x1, 0x106) socket$packet(0x11, 0x3, 0x300) pipe(&(0x7f00000000c0)) socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socket(0x2b, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000018010000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SYS_GET(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x18, 0x1406, 0x300, 0x70bd27, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}}, 0x40855) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a300000000040000000160a01000000000000000000010000000900010073797a30000000000900020073797a3000000000140003800800014000000000080002400000000050000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000001c000380980003801400010076657468305f746f5f68737200000000080007400000ae"], 0xd8}}, 0x0) 5m53.802102057s ago: executing program 4 (id=1943): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x48000) mmap(&(0x7f0000196000/0x1000)=nil, 0x1000, 0x0, 0x840000000000a132, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)="4c0000001200ff09ff3a150099a283ff07b8008000f0ffff000000060040150024001d00120511a09798bc593ab6821148a730cc33a49868c62b2ca654a6613b6aab9d25bf46050d3c3a2b04", 0x4c}], 0x1}, 0x4008000) recvfrom(r0, 0x0, 0x0, 0x40000000, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='freezer.parent_freezing\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) r3 = socket$nl_rdma(0x10, 0x3, 0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1e, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000004071122000000000009500"/32], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="30000000001401"], 0x30}}, 0x0) mmap(&(0x7f0000215000/0x1000)=nil, 0x1000, 0x0, 0x6011, r2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0xd, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfff}, 0x94) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f00000001c0)={'wpan0\x00'}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000005c0)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYBLOB="6a9d845e1abbd84991af2de9efb602a240d5185c0ca60b4ce7c4773de36773260afae3a745933d596ef2c22259480053e2d35dfb9c159a4ab91318428592a77964a774be79a2a7058bba31e9f3e99824dea2396bdafbc2830729f7eb7ff8d5973a0738ec40312d89903ec64248a547878bafc2391a65676aedde786727be0f85667da99dbd7f27dd2fa5192e95a7f3b3d785a7129dc07b0520a11777e34dc7fab0b35b367d560d78ecfd0a651a400696199e5fe72bdbf9e474e58383f0", @ANYBLOB="3f9d00000000000000001700000008000300", @ANYRESOCT, @ANYBLOB="60003080050002000000000014000400403a050c5bae9c544ef2b6d713459a7a1c000180050002000000000008000400050000000800010002000000240003"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x20000814) r5 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r5, 0x8992, &(0x7f0000000580)={'ip6gre0\x00', 0x1}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_BITWISE_SREG={0x8}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x7fffffff}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x84}}, 0x0) sendmsg$NL802154_CMD_SET_SHORT_ADDR(0xffffffffffffffff, 0x0, 0x4004891) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x13, r2, 0xd1383000) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0x100000b, 0x4000010, r7, 0x8503e000) mmap(&(0x7f0000867000/0x2000)=nil, 0x2000, 0x0, 0x11, r7, 0x1000) mmap(&(0x7f00008b7000/0x4000)=nil, 0x4000, 0x0, 0x46506b5acbba091a, r1, 0x0) epoll_create1(0x0) getsockopt$IP_SET_OP_VERSION(r2, 0x1, 0x53, &(0x7f0000000240), &(0x7f0000000300)=0x8) 5m53.598239697s ago: executing program 3 (id=1946): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TYPE(r1, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, 0xfffffffffffffffc, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00', 0x0}) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x11, &(0x7f0000000080)=0x7fb, 0x4) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="4c0000001000010025bd7000fddbdf2500000000", @ANYRES32=r3, @ANYBLOB="10080400895504002c001280110001006272696467655f736c6176650000000014000580050028"], 0x4c}, 0x1, 0x0, 0x0, 0x200404c1}, 0x4040010) 5m53.47976857s ago: executing program 0 (id=1947): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x12, &(0x7f0000000040)={@local, @empty, @void, {@generic={0x7, "c03ea896"}}}, 0x0) r1 = socket(0x10, 0x3, 0x6) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0x8}}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32b}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @loopback}]}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x9}]}, 0x40}}, 0x0) r3 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x2, [], 0x0, [0x4, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x5c4, 0x0, 0x0, 0x0, 0x3dc], [0x3, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x10000, {0x0, 0x0, 0x0, r4, {0x0, 0x5}, {0x1, 0xffff}, {0x2, 0x3}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x8041}, 0x800) 5m53.411721893s ago: executing program 4 (id=1948): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x300, 0x0, 0x0, {0x7a}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERY_INTVL={0xc, 0x21, 0x7d}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x34041043}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00"], 0x50}}, 0x4008840) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket(0x10, 0x3, 0x0) sendto$inet6(r4, &(0x7f0000000080)="7800000018002507b9409b02ffff48000203be04020406050a02040c5c000900580006080a0000000d0085a168d0bf46d32345653600648d040012000a00000049935ade4a460c89b6ec0cff3959547f509058ba86c902007a00004a32000407160012000a0000000000e000e218d1dd3b6ed538f2523250", 0x78, 0x0, 0x0, 0x52) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_CONFIG(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001fc0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="017917000000000020020c00000008000400000000bb"], 0x1c}}, 0x0) ioctl$sock_SIOCBRDELBR(r2, 0x89a3, &(0x7f0000000200)='hsr0\x00') r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r7 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_MMAP_OFFSETS(r7, 0x11b, 0x8, 0xffffffffffffffff, &(0x7f00000001c0)=0x4) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="4cab7b773448f545017951ffd0dc22d5a47658ec12b7835e71b9eba83783fee2e6e4981db4640c19f0ba17b11e97a7c9be1e2f487004ef86c579fe7e2415e5898e24939a3ff2f38cf6c0b9a1840dfe58ee1db29d4ffddb64258c0283b4a2da875c7fc8b6cf911245fafb4115bb9d8e3a793feaf19b6eccc716f76336beab5282d07d2e813a962b19135cdf599b54d71cbffce231be3bd45b4c48b10244522c13155b65d2eb5b891fd5410cbda08eafda3d78f2c65ab417d4f05f6c43e765766e352b47f2265659460d144be1dcd37d9191453ec6bd", @ANYRES16=r6, @ANYBLOB="0501ffffffff0a0000002e00000008000300", @ANYRES32=r8, @ANYBLOB="040034003d43cc6e66be00a8ea2bede3611fcfcd9eb98702177ebf3be8b9c0b06d0000000000cc000400cc00"], 0xac}, 0x1, 0x0, 0x0, 0x800}, 0x4004050) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_ZERO(r9, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)={0xa8, 0x0, 0x51d7c4032b0834fb, 0x70bd27, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x82a1}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xe}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7fff}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3eaa}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_SERVICE={0x64, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x21, 0x3}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast2}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x49}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x6}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x10}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@rand_addr=0x64010100}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x4880}, 0x1) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="0100000000000000000001000010000000000b"], 0x28}}, 0x0) sendmsg$TIPC_NL_KEY_SET(r9, &(0x7f0000000100)={0x0, 0x2800, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r10, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) sendmsg$TIPC_NL_BEARER_SET(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010028bd7000fddbdf2505000000200001800d0001007564703a73797a32"], 0x34}, 0x1, 0x0, 0x0, 0x4c445}, 0x4040140) 5m53.318250336s ago: executing program 3 (id=1949): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000004c0)={0x50, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x40e}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x50}}, 0x0) 5m53.276910171s ago: executing program 3 (id=1951): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = accept4$x25(0xffffffffffffffff, &(0x7f00000000c0)={0x9, @remote}, &(0x7f00000001c0)=0x12, 0x80800) ioctl$sock_x25_SIOCADDRT(r1, 0x890b, &(0x7f0000000200)={@null, 0x7, 'nr0\x00'}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r2, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @local, 0x5}, 0x1c) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="2c385a7af3", 0x5) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=ANY=[@ANYBLOB="600000000206050000000000000000000000000005000400000000000900020073797a3200000000140007800500140080ff000008000840000000000500050002000000050001000600000011000300686173683a6970"], 0x60}}, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYRES8=r2, @ANYRES8=r2], 0x20}}, 0x4044000) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) r5 = accept4(r3, 0x0, 0x0, 0x800) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000480)={0x2, 'macvlan1\x00', 0x3}, 0x18) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)="0400000000000000", 0x8}, {&(0x7f0000000900)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed886e7cb51726d00000b37b4fe073eeb0958730481ec71ef418b99fff46e701672ab628ae2c8cc70f9e977d00a80285bd944488", 0x6c}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x4000011}], 0x1, 0x40810) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000800)=""/88, 0x58}, {&(0x7f0000000740)=""/78, 0x4e}], 0x2}, 0x50) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000004c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0100000000000000000017000000540006803c00040067636d286165732900000000000000000000000000000000000000000000000014000000e3de3d7b4cd07ec3ee777de774fc7987cca41989140003"], 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x4008014) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000000)={0x84, @remote, 0x0, 0x0, 'dh\x00', 0x20, 0xfffffffe, 0x8000007f}, 0x2c) socket(0x2, 0x80805, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3032, 0xffffffffffffffff, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000003f80)={&(0x7f0000000140)="989cdc29fb84a0e2aa93c580738767c298aef1f1f33b9fd5c2c2356dd29f8e7db5ae81b4d70d5c3bd2ccec2d7df8bc799caafa81178cdb34f0985369563fc91b8c101a30ba243dc909da4daad882e07f0c61343f68c41899f79661064d85610036fbf3fa1158c5896f5187395d9f6e3a09096f2a0000", 0x76}}, 0x20040040) syz_emit_ethernet(0x36, &(0x7f0000000540)=ANY=[@ANYRES32=r4], 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x43}, 0x94) 5m53.263207324s ago: executing program 0 (id=1952): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x14, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x5c}}, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000340)="8a226ff432407a7f5fd09590d734f795e12e57ce9fed3f0300eb6368ed559a85603b0080", 0x24}], 0x2) r3 = socket(0x2b, 0x80801, 0x1) connect$inet6(r3, &(0x7f00000001c0)={0xa, 0x4, 0x3ff, @empty, 0x1}, 0x1c) ioctl$sock_TIOCOUTQ(r3, 0x5411, &(0x7f0000000080)) r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1c, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x1, 0x4, 0x0, 0x6}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8b36, &(0x7f0000000000)={'wlan0\x00'}) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r1, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002"], 0x44}}, 0x0) 5m53.05422165s ago: executing program 0 (id=1953): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$smc(&(0x7f00000033c0), r1) sendmsg$SMC_PNETID_ADD(r1, &(0x7f00000034c0)={0x0, 0x0, &(0x7f0000003480)={&(0x7f0000000000)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010028bd7000fedbdf2502000000090001007b"], 0x34}, 0x1, 0x0, 0x0, 0x850c081d989709a5}, 0x40000) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000070000000000000055090100000000009500000000000000bf91fa0000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (rerun: 32) 5m52.978090099s ago: executing program 3 (id=1955): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r1, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000580)={0x1c8, r2, 0x0, 0x70bd25, 0x25dfdbfd, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x8}, {0x6, 0x11, 0x770}, {0x8, 0x15, 0x2}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x40800}, {0x6, 0x11, 0xffff}, {0x8, 0x15, 0x7ff}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x7fff}, {0x6, 0x11, 0x400}, {0x8, 0x15, 0x7f}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x9}, {0x6, 0x11, 0x6}, {0x8, 0x15, 0x5}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x10000}, {0x6, 0x11, 0x90}, {0x8, 0x15, 0x7}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x101}, {0x6, 0x11, 0x4}, {0x8, 0x15, 0x9}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0xd}, {0x6, 0x11, 0xf8d}, {0x8, 0x15, 0xd}}]}, 0x1c8}, 0x1, 0x0, 0x0, 0x4004}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001300)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x34, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0xfffc}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffd}]}], {0x14}}, 0x7c}}, 0x0) 5m52.969154136s ago: executing program 4 (id=1956): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x10, 0x80002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x16, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="7a0a00ff00000028711052000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x90) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c0000005e00679a3601ffc4910700004f78d4c1a0731cccff"], 0x1c}}, 0x0) recvmmsg$unix(r1, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000001380)=""/4096, 0x1000}], 0x1}}], 0x14, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) r3 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f00000024c0)=@raw={'raw\x00', 0x8, 0x3, 0xc98, 0x908, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0xbc8, 0xffffffff, 0xffffffff, 0xbc8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x0, 0x0, 0x4}, 0x0, 0x8e0, 0x908, 0x0, {}, [@common=@unspec=@u32={{0x7e0}, {[{[{0xd8800000, 0x1}, {0xec, 0x2}, {0x6, 0x3}, {0x80}, {0x6, 0x2}, {0x10000, 0x2}, {0xd}, {0x2}, {0x4, 0x3}, {0x1, 0x1}, {0x4}], [{0x9, 0xfffffffb}, {0x7, 0x7}, {0x2, 0x80000000}, {0x9, 0x1}, {0x799, 0x8001}, {0x0, 0x2}, {0xc2, 0x5}, {0x8, 0x1000}, {0x40, 0x9}, {0xff, 0x81}, {0x636, 0x6}], 0x6}, {[{0x8, 0x2}, {0xe000}, {0xb8b4, 0x1}, {0x3c5f9b87, 0x3}, {0x3, 0x1}, {}, {0x29b5, 0x2}, {0x54a2f77, 0x3}, {0x3, 0x3}, {0x1000, 0x2}, {0x1, 0x2}], [{0x6, 0x5}, {0x5, 0x7}, {0x2, 0x3}, {0x80000000, 0x2}, {0xee84, 0x8000}, {0x9, 0x9}, {0x3800000, 0x3}, {0x800, 0x9}, {0xfffffffa, 0x1}, {0x0, 0x2}, {0x7, 0x7}], 0x4, 0x3}, {[{0x286f, 0x1}, {0x554b, 0x3}, {0x0, 0x3}, {0x6, 0x3}, {0x5}, {0x9, 0x1}, {0x6000000, 0x3}, {0x400, 0x3}, {0x9, 0x2}, {0x8001, 0x2}, {0xc5bf}], [{0x6, 0x7f}, {0x5, 0xfffffff9}, {0x7, 0x8}, {0xb, 0x3}, {0x8, 0x9}, {0x2}, {0x7}, {0x7, 0x1000}, {0xfff, 0x2e4}, {0x0, 0x400}, {0x0, 0x8}], 0xb, 0x4}, {[{0x5, 0x2}, {0x2, 0x1}, {0x6, 0x3}, {0xfffffffc, 0x1}, {0x4, 0x3}, {0x10001}, {0xca0, 0x2}, {0x10, 0x1}, {0x8, 0x1}, {0x6796, 0x3}, {0x8, 0x1}], [{0x6, 0x6}, {0x1, 0x7}, {0x5, 0x9}, {0xffff, 0x2}, {0xc, 0x5}, {0x51a3, 0x3}, {0x8, 0x5}, {0xfffffff7, 0x9}, {0xd0, 0x1}, {0xfffffff8, 0x8}, {0x7656, 0x2}], 0x7}, {[{0x2, 0x2}, {0x10001}, {0x4eb}, {0x10000, 0x3}, {0x2, 0x2}, {0x3}, {0x81}, {0x4, 0x1}, {0x10001, 0x2}, {0x9, 0x3}, {0x1, 0x2}], [{0x4}, {0x0, 0x400}, {0xd9a8, 0x7}, {0x1000, 0x8f8}, {0x3, 0x10001}, {0x2745, 0x7c67}, {0x6, 0x80}, {0xfffffff9, 0x2}, {0xffff, 0x2}, {0x1000, 0x9}, {0x3, 0x2}], 0x3, 0x4}, {[{0xabb918, 0x1}, {0x3, 0x1}, {0x8, 0x2}, {0x9, 0x1}, {0x2}, {0x9, 0x1}, {0x80000000, 0x3}, {0x1, 0x2}, {0x0, 0xc49aafde8229cbf1}, {0x4, 0x1}, {0x3, 0x2}], [{0x8b, 0x9}, {0x6, 0x553}, {0x1, 0xe0}, {0x3, 0x4ad}, {0x0, 0x10001}, {0x1, 0x2}, {0xd1, 0x100}, {0x6, 0x7641}, {0x2, 0xfffffffc}, {0x2, 0x4}, {0x9, 0x2}], 0x1, 0x1}, {[{0x8015, 0x3}, {0x3, 0x1}, {0x1, 0x2}, {0x0, 0x2}, {0x37b, 0x3}, {0x5}, {0x2, 0x3}, {0x1, 0x2}, {0x7f, 0x2}, {0x6, 0x2}, {0xfffffff6, 0x2}], [{0x9, 0x7}, {0x8, 0x7}, {0x6, 0x4}, {0x800, 0x80000001}, {0x0, 0x10000}, {0x2, 0x3b58}, {0x4ca7ea08, 0x8001}, {0x0, 0xa9b}, {0x1ff, 0x4000}, {0x5, 0x2}, {0x8, 0x4}], 0xa, 0xb}, {[{0x10001, 0x3}, {0x3}, {0xc, 0x1}, {0x7a, 0x3}, {0x6, 0x1}, {0x80000001, 0x3}, {0x4, 0x2}, {0xa}, {0x401, 0x1}, {0x9}, {0xfffffffe, 0x2}], [{0x200, 0x1}, {0x8, 0x1aaa}, {0x706, 0x9}, {0x9, 0x2}, {0x4, 0x7}, {0x5, 0x9}, {0x3}, {0x5, 0xbf789c5e}, {0x8, 0x3}, {0x7, 0x10001}, {0x1}], 0xa, 0x1}, {[{0xc2}, {0x5, 0x1}, {0x7cd72bba}, {0x8, 0x2}, {0x400}, {0x7ff, 0x3}, {0x10001}, {0xe1a}, {0x9, 0x3}, {0xfffffffc, 0x3}, {0x9}], [{0x10, 0x4}, {0x1, 0x10000}, {0xbf9, 0x6}, {0x4}, {0x101, 0x8}, {0x100, 0x4}, {0x0, 0xb6e}, {0x7f, 0x8}, {0x9, 0x7}, {0x800, 0x92a}, {0xd, 0x2}], 0x9, 0x2}, {[{0x8, 0x3}, {0x80000002}, {0x8, 0x3}, {0x4, 0x2}, {0x1, 0x3}, {0x4}, {0x4, 0x1}, {0x1, 0x3}, {0xc, 0x3}, {0x101, 0x2}, {0x1}], [{0x4, 0x3}, {0x0, 0x8}, {0xffffe5cb, 0x1}, {0x7f, 0x2}, {0x40, 0xffffffff}, {0x2, 0x7}, {0x7fff, 0x6}, {0x0, 0x8}, {0xffffff2e, 0x7ff}, {0x90, 0xa}, {0x3, 0x7}], 0x6, 0x2}, {[{0x1ff}, {0x5, 0x2}, {0x10001, 0x1}, {0x2, 0x2}, {0xff, 0x1}, {0x1, 0x1}, {0x800, 0x3}, {0x80000001, 0x2}, {0x1ef6, 0x2}, {0x1, 0x2}, {0xba, 0x3}], [{0x18d, 0x5}, {0x0, 0x2}, {0xdf91, 0x1}, {0x3, 0x6}, {0x4, 0x7ff}, {0xa64, 0x101}, {0x7, 0x4}, {0x401, 0x2}, {0x7ff}, {0x0, 0xd4}, {0xef}], 0x2, 0x7}], 0xfe}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x80}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0xc4, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff, 0x40}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0xffffffffffffffff, 0x0, 0x41, 0x0, 0x2, 0x1004, 0x6, 0x3}}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x8000, 0x16a, 0x1, 'syz1\x00', 'syz0\x00', {0x80000001}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0xcf8) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xc, &(0x7f0000000a40)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000180100002020692100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r4}, 0xc) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x50) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r6, r7, 0x5}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r6}, &(0x7f00000006c0), &(0x7f0000000700)=r5}, 0x20) r8 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x6c, &(0x7f0000002780)={0x0, 0xfffffffffffffee7, "82cc6d42c24169cd7f281f9788656df835b3ebee33fe0d572287f3b09b626a170ceb92d9e20f66850212c133"}, &(0x7f00000027c0)=0x34) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) r11 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r11, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x4e23, @private=0xa010102}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r11, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r10, 0x84, 0x6c, &(0x7f0000000280)={r12}, &(0x7f0000000340)=0x8) sendmmsg$inet_sctp(r1, &(0x7f00000028c0)=[{&(0x7f0000000140)=@in6={0xa, 0x4e21, 0x7fff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7f}, 0x1c, &(0x7f0000000180)=[{&(0x7f0000000780)="c6a8d27544045cdc646737343c769624cbf7e6e7cc71e6248a732978ad8989838fd10ed50813b50f85242c33c49b8e394352b128a48d3d7fa5dedb1eb5d36825c5474e297cbd5c41e21bfbf604c4f8ebb09d582786", 0x55}, {&(0x7f0000000940)="a032131e99afea2aa3dc7307543957f9006a10c9e694f1e830f433e8f201314ca369eacd3ca08b34e4a79cecbc5814de160f02479a31c24eee74d83c2212ec8fcf3928ca4c3df0c3ed4affe586af5292222806339f44c533b33b4f6c191ce376ea583e9b41f0f1819e48ac13879f0e064300fe12e884d9577b8dee3505e51ae232fa7b6ae816f2be5774f52d1cf997e0ad86449135c3d9527fd553335cbf15662f2c59f9718861030fb915271de2aa48faa2d9cfee464513ee640f202ccde8d1c717ce7824e84c895eea8f951c", 0xcd}, {&(0x7f0000000ac0)="478c479b781a2b68655c25702e20076aa7bd8e24f3429ffa584c7d059e3ba384477d4da352cc5e7682289e358b44701543ec8bfe5b569c72858c063804019676ace04794419cbcc2659cf110833fb042cbfa1e389fe4a52c89aa725d3665441a70816b8de88a19e9a37bbbd18ee21a7619b566574baf2d7eafa3a2617f5740b5a2b0ad1735ecb065f05cdf267d8813b7f416ce5ae77a98b9bd58360e6f0cc8e3f194248b2f5eac449a0daeb4c0031b24773d35aa398ef2573173d5a5c923a968cb3f1a8e164f", 0xc6}, {&(0x7f0000000bc0)="693253ff728c3a033a212059a31295b4f6105dc326ccc9abb9383f0fbc025411a16b67681eb844794a726d2823bd078acf3d48dd86e3775db878ab47159d079a340b219c3e0fdda9ba15e1e3aa5adb6a61b3be6d3d83bc0c7eb73756072c9a6c3e8e58397119d442e70147dde421241f559ee339e720d57c7b20c775f27b67696c73d3a9eb2521ead658f41eca1f4b947371fa23384f3567f72ee2d42d1de97e3ad317eb74e5e9f94ca0216151afde31f1a5388eeb23fd9114ac6a1c439ade1b08cb2869dc25e0e7b5ce", 0xca}], 0x4, &(0x7f0000000800)=[@dstaddrv4={0x18, 0x84, 0x7, @loopback}, @sndrcv={0x30, 0x84, 0x1, {0xd, 0x4, 0x5, 0x2, 0xcd36, 0x2, 0x4, 0x11}}, @authinfo={0x18, 0x84, 0x6, {0x2}}, @dstaddrv4={0x18, 0x84, 0x7, @broadcast}], 0x78, 0x8089}, {&(0x7f0000000300)=@in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000f40)=[{&(0x7f0000000440)="bd63ed4c4ba5bcfdd9b0be95107e82a3b2e9657828c0b80a3c538165ac3ae4", 0x1f}, {&(0x7f0000000cc0)="1bb7f08d23f80f882f75cbb122b8e8ec4bf345afc27cd951f9019004f9b16cad3272d10f493284a8b9e49f1a2ba2f6f3f61c212573287535fc4071528ff82c6746f0f2edbfc83206cf27307dfe0067e91d1307c1b8b6206a2241cf29ff53d1c02f4a0fe382e27cf03374e7740f184c0e403d7f999405eb", 0x77}, {&(0x7f0000000d40)="778e53bbcaedb86a4aeb45a4360ba708884e264bfae799d1d07f09798c846e6b2f4ff86b55284f0a3f547b6c04067bf0cc401509f9c53264553afdd9941e0612d236428a8e4b467584d8db44d8", 0x4d}, {&(0x7f0000000dc0)="75f6219b9c397a2296e9e459acac6a1ece67d76033558c6739b07e8b9e5faee3619aa76f22f7850ea5eeb752b1d0c01b59374a4c4e6b21a587e5c30d1cdebfe8cdcaf228335fe989e0134b2a82dec6775351949a16a064f63b5a4dca170e5c1a9ece14d75a27c314557c69249de65c7851", 0x71}, {&(0x7f0000000e40)="ae75aa2e7329510d94b3c45479e36b643a14688eced70ee3e888a5b261179ed37de20ae589fa3d1f1f8cdef6eaba4f213ea8192469da03ce76f0622e971fc3457f433c2311acb67e8326463739eb733db4178dd9cb9b9b24d528b0e097737223dc0f9304ed131ae895954f96d40c74d9530bf796d05f6bcfae676aaf50a1c2292bfea5e7522d9dc686845f2f217390add76aaca6a23e6a6c300fa9b77e4ad853ce16be4afe91c7c525b55b61d6851a4f02275ff43340c4272667ae67e6b29f56d22b654572c5c67d22b633ea9500d4016d38c19bd4872364aada92b2ee44f0ee6cabbc447ae28e83", 0xe8}], 0x5, &(0x7f0000000880)=[@prinfo={0x18, 0x84, 0x5, {0x20, 0x1}}], 0x18, 0x4014010}, {&(0x7f0000000fc0)=@in={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000002380)=[{&(0x7f0000001000)="ee2b348e601619718e5d9e80db56cb581cf1d01e6c17fd706383d086c0c8d64f944b761671198e6efae46cbbcf711aea33b20d887730d40148c3c2ba3876605e4885d52cb48066b88ac8e4a0a5fb0780c68a64ce2aa54fe15d9673d90dfa239bc5a5ca3b53b8d61fc0d360469a8256077a5342e8c0e2dc51235fb90e376c3b2580e733893aa6d2d7be752f5a9b8fd5f692e8e3a178d8173105a495d23a68e88eca070b534993218bb1cef16f7851319f48aeacc82da1587aa7fbbc981c058fbb7f6f9e5a9b29c90521d78a624cb3ae4573b0cc", 0xd3}, {&(0x7f0000001100)="4c07a910df8d27e7ce532e5e3c3a2f291ab1717daced009857fd763600cba3f58ad11ddd4110c9c05619fd71642b139677d5a34120cfbcf2b974b8b138516c20fee73c8186d2dfc5dfac6c671b53fc328e50c1f81ee62725bf12a9e2158d25cd332c3d0ebbc7e392856f679dd7aa6ed3a926dee6ab712fe3a4d3889a926ae079d4e09cf62d1eb40e89d658d46e4c56d057b0f8fc6af1bc17dfac9502c5eac831aec1da0ff59eeeb4a6bfe17e21b8d822107370e7a53952748f4dd23665b6b081de0bc332b3e4712868a0922d0cb8c929b8aea478c872e2ce6cd5a2e5f0a0e9992af59726a8447b70e801feb37e5b309751a81c6a25", 0xf5}, {&(0x7f0000001200)="ece2e91c3625dffa59eb79b18561cdf85a5184de1cfc0abcadca528163aea3e632cce5f52461f08b8bf0378cccae145f8c8a3d3b5e2733515c7084bd34143b2e05c9dfc3ee87e147800cd677428e087d8d8efcdb16e22bffd2ed2b2c6ff37e9c09598efaeada4ee03d349c7ba22ad6ebeb7788d7265c35955169fe2ae0f60f57a03f82e0e0ac06eb409ffa5f367c861db693febc28f380f9ea633e3b7608748066a5c728f2da635340bb33c8832ab9936674f80c19360356a0a9a546cbc40f089eda", 0xc2}, {&(0x7f0000001300)="99e9ad245936", 0x6}], 0x4, &(0x7f00000023c0)=ANY=[@ANYBLOB="200000001b32c8fb42af673208000000fe8000000000000000000000000000f46f000000000000008400000006000000f9ff000000000000"], 0x38, 0x80}, {&(0x7f0000002400)=@in6={0xa, 0x4e23, 0x8, @private2, 0x5}, 0x1c, &(0x7f0000002740)=[{&(0x7f0000002440)="c7d1776355409b3f3e0ce97408d5795c54d2e76dc91ca670ccb2d11761a80c20f1a2efec39677f94d522eeb36fe7549d168c75fdd4f0496df511173cbf28fb45ff46ff", 0x43}, {&(0x7f00000024c0)="038cc88ccc046c40555019cbea84397d1e89b0aa4ca2e360da8f42b7c2013ec8d72ad877067bfd0ab997da4cef38b8ca351a046892aeb24869a2c32ee962ae89a2c951bf676f473f3aa9b766709db0e70bf4427dc1e3e11a2ef36f3f926f45370d95137fe026e4c40e55cd532cd30ce27bef0df2a402b351afaa4f79a510570e9a3e033682ddb8610daf56947806774899756d92d3033fe2a4d0c155865a73651143930bf7d65e01c58766694f01039a435107b5c80212af0a0eed4bb200334057e875068092fabe965bf76d9059e176f974624e805a5bad0fccd0e320baa42fd256f1aabe9449148c7e", 0xea}, {&(0x7f00000025c0)="8219461f48bd8dd1932b385a366c826117e2c49132071f06ae62676c76b5e748fd88b84634231a34e86e9128ec1306aed3a16fa2fd840a95c55368c2a7889c0846df5b", 0x43}, {&(0x7f0000002640)="864259fd60b85d7d0d19d52ddc2c25a68f59c93a7ef77e024fb9269d0cb0d61bae30ec2c7b5376d8bc304f619f6eed3bc389975b24a93770fdce8e4b5c1a3994e66c0c5353b88cf2d7adbacdf7bdcacf4a27417e567c86963bf02de77d6acfd455a0800798581d06f7d4fbe658f59f60ad32cd63765e2aee78e885179b58923d7d6f3511d50a3a07cd0e1729f574a7a54870fccb95d9c3a254bfaa0c4c765a3f15af26d9c682a66496470148e710e32187a7b78dfd8cbf7fa3bcf261074a0a6d2b13923c1c6d6cf7f1876f79157d7d61c8a416ac7d0ec63cd6b3dd840207e9f2bf0acfa6cfaa34", 0xe7}], 0x4, &(0x7f0000002800)=[@prinfo={0x18, 0x84, 0x5, {0x0, 0x9}}, @sndinfo={0x20, 0x84, 0x2, {0x7, 0x1, 0x1, 0x8, r9}}, @init={0x18, 0x84, 0x0, {0x5, 0x2, 0x3, 0xfff9}}, @sndrcv={0x30, 0x84, 0x1, {0x1, 0x3, 0x8008, 0x2, 0xff, 0x0, 0x3, 0xfffffffb, r12}}, @dstaddrv6={0x20, 0x84, 0x8, @private0={0xfc, 0x0, '\x00', 0x1}}, @authinfo={0x18}], 0xb8, 0x20008040}], 0x4, 0x40000) r13 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)=ANY=[@ANYRES32=r13, @ANYRES32=r8, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r13}, &(0x7f0000000000), &(0x7f0000000080)=r2}, 0x20) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_MSG_GETTABLE(r0, &(0x7f0000000280)={0x0, 0x3, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000010a0102cbd700000000000011000000"], 0x14}}, 0x0) recvmmsg(r0, &(0x7f00000058c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 5m52.84790514s ago: executing program 0 (id=1959): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f0000000080)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x13}, [@ldst={0x4, 0x0, 0x4, 0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2}, 0x48) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x7, 0x10012, r1, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000240), &(0x7f0000000280)=r0}, 0x20) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000300), &(0x7f0000000340)=r0}, 0x20) r5 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000003c0)={0xffffffffffffffff, 0x7, 0x18}, 0xc) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xa, 0x4, 0xfff, 0x7}, 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r6}, &(0x7f0000000000), &(0x7f0000000040)=r7}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x6, 0x3, &(0x7f0000000040)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @map_idx={0x18, 0x6, 0x5, 0x0, 0x9}], &(0x7f0000000100)='GPL\x00', 0x0, 0x57, &(0x7f0000000140)=""/87, 0x41000, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x5, 0x2}, 0x8, 0x10, &(0x7f0000000200)={0x3, 0xb, 0x32e467ce, 0x4}, 0x10, 0x0, 0x0, 0x7, &(0x7f0000000400)=[0xffffffffffffffff, r1, r2, r3, r4, r5, r6], &(0x7f0000000440)=[{0x0, 0x3, 0x0, 0x3}, {0x0, 0x3, 0xe, 0xb}, {0x4, 0x4, 0xe, 0x6}, {0x5, 0x4, 0x5, 0xa}, {0x3, 0x2, 0x0, 0x9}, {0x1, 0x2, 0xf, 0xb}, {0x0, 0x2, 0xb, 0x1}], 0x10, 0x3ff}, 0x94) 5m52.738261377s ago: executing program 3 (id=1960): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000c80)=ANY=[@ANYBLOB="cc000000", @ANYRES16=r1, @ANYBLOB="050000000000000000000f00000008000300", @ANYRES32=0x0, @ANYBLOB="55000e0080000000080211000000080211000001505050505050000000000000000000009d92fd67da8a"], 0xcc}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a5c000000060a0b040000000000000000020000002c0004802800018007000100637400001c0002800800014000000002080002400000000105000300030000000900010073797a30000000000900020073797a32"], 0x84}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000f10000000000000020000018010000202070250000000000202020db09f8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000ca00000095"], &(0x7f0000000400)='GPL\x00', 0x1}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0xc, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000091108c000000000095"], &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) close(r3) recvmsg$unix(0xffffffffffffffff, 0x0, 0x2102) r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r4) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r5, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, 0x0}, 0x8) r7 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=r6, 0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={r7, 0x0, 0x0}, 0x10) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=ANY=[@ANYBLOB="800000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000003b005000128009000100766c616e000000004000028006000100000000000c00020000000000000000000c00020000000000000000001c0004800c00060004000000000800000a0001"], 0x80}, 0x1, 0xba01}, 0x0) 5m52.708391851s ago: executing program 4 (id=1961): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) connect$qrtr(r1, &(0x7f0000000080)={0x2a, 0x4, 0x2}, 0xc) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xf}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x7fff}}]}, 0x38}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x1, 0x3}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r7, 0x84, 0x10, &(0x7f0000000580)=@sack_info={0x0, 0x9, 0x2}, 0xc) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40004}, 0x4000) sendmsg$alg(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000400)="f28cfee2e3fc84c29c3d0b6cc6bf8ea9eb892adbdddf8feced78cc0a3345857b3eb81634c45409b2418e2d80ecbd8fda2a4047aafd53167cf174a7743c8ee6385de5734d600f9154187bc9a8654f65050b37a036ee46a27cbaaa6211c772a119aa73c09857243c2eb89d4c710de483cbcd6bbe76acac7e8a12c5d049080f6ab0c34e8358690268fb657e0a9677bd28f5cc2fdeb3ec5500a91986b797b98aadbcf8b8ec384f01d46ed98d037050364b9b01c5", 0xb2}, {&(0x7f0000000180)="b006d0de0485e2c9d6", 0x9}, {&(0x7f00000004c0)="62750dc2134238bb3a0511b91b80992880c7a3457c154d0135f3991939c2a45ae1db95e78d8b6b99bf8079b3ac9b7aa75628de5be10f5744adf99647fb8bcd5612e3cde07311f5a7cde0284495bdafbd594e603a2ed12ce92d2fea924c25d8d2fd62c5837b6b5f1401ddd6d31b7f3c0030f78ec9a40b92dd46370b56140941cb5b562a50df95ae3ce5d44dc03791f04dc966baaae6f7df65", 0x98}, {&(0x7f0000000600)="dd41f4690f3109e423771f950a77f9baf34a6fd7fbb1972ee26e0d1b1d19a7f66a61d370118a49ebd352b9f66293c99e6f1abb1db80aa031c8ec28e8e8b062a94f6d3b75348aa8fb672ae692d66acccedac405822f136f61706ac5abdbe5951aefb2b55513372ea0c8abc83435b77c5ee42a16c6af2eb974715dec82093505378e47399cd2d8bbf7bb", 0x89}, {&(0x7f00000002c0)="736af3879a9394b05acd39f4a6bc7ca4e0c9e6cfdb21d851598b3cc65c3f268b4424e3dc2e71a6564632b6308eb1784e0e34bc06fc997ce0745a83bbe680a02665a5ea1896441694cb1182388e07839f0cde824fb3284759a399b39dd039", 0x5e}, {&(0x7f0000000200)="1bedbd1725c95a8b1482014337b2c10e3e5cb7b433e9837d4cac4ab62ea8941d716cff486cebdff23a0ce6c3b3640c0ed7822d0079", 0x35}, {&(0x7f00000006c0)="11e55b82eb214fa94a9a94b4fa3cfdb05935473feaceab6a0908062d555319022c5800405a414164b258c8f9b47247add4c096420aa6a13d387b93417cddb0f6f0acc785ad997d482756a3fe737e83c1d1aeda4c4635daf90500846e4fdbda1533862377da59520013cc7df5b73d05ccb08ca74dbca26be42a01ad1147508d69470589f67a2a5631e439360527bdda16", 0x90}, {&(0x7f0000000780)="77620f048fca06adb3e7823fb9bc3f7944d1e93489144675217d33a5613bfec938fccea15c583e045158e97176a7a769c51a731d5e8d5735fb4fa3efb0cc770f7edf9059ca", 0x45}], 0x8, &(0x7f0000000880)=[@op={0x18}, @op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x9}, @iv={0xc0, 0x117, 0x2, 0xa7, "dccbace679885b92c24d5cfe4b6e44bddd55ff8f612e12780debad55487fb6c5de889fafff8e7dfe96e156f1a9bd3c085907838626d4990a903e56c83dbe46a0e269e603e63839a7419d3b3609ed1d8278b6b8e40e61a0b11937f36edeb053d9618d1e8e3693c8b797ef1ec104d1e3900e0bbd822c053d986dc3a4709f2a6c93e4b5644f10a0c2410263bc1bea312d718f75acf4d2344e78d5b1f9dc7117ca80a1d9a975f3bb25"}], 0x108, 0x20000105}, 0x40) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), r4) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) socket(0x400000000010, 0x3, 0x0) (async) connect$qrtr(r1, &(0x7f0000000080)={0x2a, 0x4, 0x2}, 0xc) (async) socket$unix(0x1, 0x2, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xf}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x7fff}}]}, 0x38}}, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x1, 0x3}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) (async) socket(0x400000000010, 0x3, 0x0) (async) socket$unix(0x1, 0x1, 0x0) (async) socket$inet6_sctp(0xa, 0x5, 0x84) (async) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r7, 0x84, 0x10, &(0x7f0000000580)=@sack_info={0x0, 0x9, 0x2}, 0xc) (async) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40004}, 0x4000) (async) sendmsg$alg(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000400)="f28cfee2e3fc84c29c3d0b6cc6bf8ea9eb892adbdddf8feced78cc0a3345857b3eb81634c45409b2418e2d80ecbd8fda2a4047aafd53167cf174a7743c8ee6385de5734d600f9154187bc9a8654f65050b37a036ee46a27cbaaa6211c772a119aa73c09857243c2eb89d4c710de483cbcd6bbe76acac7e8a12c5d049080f6ab0c34e8358690268fb657e0a9677bd28f5cc2fdeb3ec5500a91986b797b98aadbcf8b8ec384f01d46ed98d037050364b9b01c5", 0xb2}, {&(0x7f0000000180)="b006d0de0485e2c9d6", 0x9}, {&(0x7f00000004c0)="62750dc2134238bb3a0511b91b80992880c7a3457c154d0135f3991939c2a45ae1db95e78d8b6b99bf8079b3ac9b7aa75628de5be10f5744adf99647fb8bcd5612e3cde07311f5a7cde0284495bdafbd594e603a2ed12ce92d2fea924c25d8d2fd62c5837b6b5f1401ddd6d31b7f3c0030f78ec9a40b92dd46370b56140941cb5b562a50df95ae3ce5d44dc03791f04dc966baaae6f7df65", 0x98}, {&(0x7f0000000600)="dd41f4690f3109e423771f950a77f9baf34a6fd7fbb1972ee26e0d1b1d19a7f66a61d370118a49ebd352b9f66293c99e6f1abb1db80aa031c8ec28e8e8b062a94f6d3b75348aa8fb672ae692d66acccedac405822f136f61706ac5abdbe5951aefb2b55513372ea0c8abc83435b77c5ee42a16c6af2eb974715dec82093505378e47399cd2d8bbf7bb", 0x89}, {&(0x7f00000002c0)="736af3879a9394b05acd39f4a6bc7ca4e0c9e6cfdb21d851598b3cc65c3f268b4424e3dc2e71a6564632b6308eb1784e0e34bc06fc997ce0745a83bbe680a02665a5ea1896441694cb1182388e07839f0cde824fb3284759a399b39dd039", 0x5e}, {&(0x7f0000000200)="1bedbd1725c95a8b1482014337b2c10e3e5cb7b433e9837d4cac4ab62ea8941d716cff486cebdff23a0ce6c3b3640c0ed7822d0079", 0x35}, {&(0x7f00000006c0)="11e55b82eb214fa94a9a94b4fa3cfdb05935473feaceab6a0908062d555319022c5800405a414164b258c8f9b47247add4c096420aa6a13d387b93417cddb0f6f0acc785ad997d482756a3fe737e83c1d1aeda4c4635daf90500846e4fdbda1533862377da59520013cc7df5b73d05ccb08ca74dbca26be42a01ad1147508d69470589f67a2a5631e439360527bdda16", 0x90}, {&(0x7f0000000780)="77620f048fca06adb3e7823fb9bc3f7944d1e93489144675217d33a5613bfec938fccea15c583e045158e97176a7a769c51a731d5e8d5735fb4fa3efb0cc770f7edf9059ca", 0x45}], 0x8, &(0x7f0000000880)=[@op={0x18}, @op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x9}, @iv={0xc0, 0x117, 0x2, 0xa7, "dccbace679885b92c24d5cfe4b6e44bddd55ff8f612e12780debad55487fb6c5de889fafff8e7dfe96e156f1a9bd3c085907838626d4990a903e56c83dbe46a0e269e603e63839a7419d3b3609ed1d8278b6b8e40e61a0b11937f36edeb053d9618d1e8e3693c8b797ef1ec104d1e3900e0bbd822c053d986dc3a4709f2a6c93e4b5644f10a0c2410263bc1bea312d718f75acf4d2344e78d5b1f9dc7117ca80a1d9a975f3bb25"}], 0x108, 0x20000105}, 0x40) (async) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), r4) (async) 5m52.662056999s ago: executing program 0 (id=1962): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="3c00000010000400000000000000000000000000637bfda69ff596c0594e37f38154537c39395207f9a7309defcd396b57831fb307c77927af335f58929d91ac96effd7077fb1089767e2369ae59d19968bfeeb37f54e6c2c6a7cbdfb6d74f6220dec9070266a900f4b1d5ee20e13d07808a647ae6a1f5c22e5125d54f538beb34a736ffe4c02dec27e705b820db131a9a4bf3aa8d3860846ed20b32eb2b8b8d07b02e27e3fad1eb5930a823bac2a8", @ANYRES32=0x0, @ANYBLOB="00010000000000001c00128009000100626f6e64000000000c00028005001d0000000000"], 0x3c}}, 0x54) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)={0x2, 0x5, 0x0, 0x9, 0xe, 0x0, 0xffffffff, 0x0, [@sadb_x_kmaddress={0x5, 0x19, 0x0, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x35}}}, @sadb_x_kmaddress={0x7, 0x19, 0x0, @in={0x2, 0x4e21, @loopback}, @in6={0xa, 0x4e21, 0x9, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8001}}]}, 0x70}}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz0\x00', 0x200002, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) (async) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f00000000c0)={0x0, 0xff1}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000180)={r3, 0xb}, 0xc) 5m52.324682268s ago: executing program 4 (id=1967): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = socket$l2tp(0x2, 0x2, 0x73) ioctl$F2FS_IOC_GARBAGE_COLLECT(r1, 0x4004f506, &(0x7f0000000100)=0x1) connect$netrom(r0, &(0x7f0000000000)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x804}, [@bcast, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc500000000c0a010100000000000000000a0000070900020073797a31000000000900010073797a310000000024000380200000800800034000000002140007800c000100636f756e7465720004000280140000001100010000000000000000000100000a57a7131f1cd837f21dd911f557825f074e5d39f8b79fe509a792bb2e7ba23c387c0468ab9d8fe98a9f56647c5412408a6787957593d20b51c8ba094f83c3c3d5c644bc3bf174e0ab5e63b3fe65c81ce916c6dd32e91aba0a"], 0xb4}, 0x1, 0x0, 0x0, 0x24000850}, 0x40) close(r2) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000000)={'ip6gre0\x00', 0x0, 0x4, 0xb, 0x5, 0x3, 0x10, @mcast2, @local, 0x0, 0x8, 0xfffffff9, 0xe}}) sendmsg$nl_route_sched(r3, &(0x7f0000005c40)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000140)=@delqdisc={0x64, 0x25, 0x8ba2fe5809b78ca0, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x2, 0x3}, {0xffe0, 0xd}, {0xd, 0x2}}, [@qdisc_kind_options=@q_ingress={0xc}, @qdisc_kind_options=@q_hhf={{0x8}, {0x2c, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x8, 0x4, 0x80000000}, @TCA_HHF_ADMIT_BYTES={0x8, 0x5, 0x6}, @TCA_HHF_QUANTUM={0x8, 0x2, 0x2}, @TCA_HHF_HH_FLOWS_LIMIT={0x8, 0x3, 0x4}, @TCA_HHF_BACKLOG_LIMIT={0x8}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x80}, 0x0) 5m51.8899488s ago: executing program 32 (id=1967): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = socket$l2tp(0x2, 0x2, 0x73) ioctl$F2FS_IOC_GARBAGE_COLLECT(r1, 0x4004f506, &(0x7f0000000100)=0x1) connect$netrom(r0, &(0x7f0000000000)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x804}, [@bcast, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0xb4}, 0x1, 0x0, 0x0, 0x24000850}, 0x40) close(r2) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000000)={'ip6gre0\x00', 0x0, 0x4, 0xb, 0x5, 0x3, 0x10, @mcast2, @local, 0x0, 0x8, 0xfffffff9, 0xe}}) sendmsg$nl_route_sched(r3, &(0x7f0000005c40)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000140)=@delqdisc={0x64, 0x25, 0x8ba2fe5809b78ca0, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x2, 0x3}, {0xffe0, 0xd}, {0xd, 0x2}}, [@qdisc_kind_options=@q_ingress={0xc}, @qdisc_kind_options=@q_hhf={{0x8}, {0x2c, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x8, 0x4, 0x80000000}, @TCA_HHF_ADMIT_BYTES={0x8, 0x5, 0x6}, @TCA_HHF_QUANTUM={0x8, 0x2, 0x2}, @TCA_HHF_HH_FLOWS_LIMIT={0x8, 0x3, 0x4}, @TCA_HHF_BACKLOG_LIMIT={0x8}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x80}, 0x0) 5m51.874962807s ago: executing program 0 (id=1969): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000fc0), 0xffffffffffffffff) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000000)={r3, 0x4}, 0x8) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}]}, &(0x7f0000000180)=0x10) r5 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000200)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f00000000c0)={r6, @in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, &(0x7f00000001c0)=0x9c) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x30, r1, 0xb15, 0x80000, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}]}, 0x30}}, 0x80) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0xa}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x15}, @NFTA_CT_DIRECTION={0x5, 0x3, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)={0x28, 0xb, 0x6, 0x201, 0x0, 0x0, {0xa, 0x0, 0x9}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x4040000) 5m51.814118363s ago: executing program 33 (id=1969): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000fc0), 0xffffffffffffffff) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000000)={r3, 0x4}, 0x8) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}]}, &(0x7f0000000180)=0x10) r5 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000200)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f00000000c0)={r6, @in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, &(0x7f00000001c0)=0x9c) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x30, r1, 0xb15, 0x80000, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}]}, 0x30}}, 0x80) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0xa}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x15}, @NFTA_CT_DIRECTION={0x5, 0x3, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)={0x28, 0xb, 0x6, 0x201, 0x0, 0x0, {0xa, 0x0, 0x9}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x4040000) 5m51.765616514s ago: executing program 3 (id=1972): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000007c0)={0x58, r1, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PEERS={0x30, 0x8, 0x0, 0x1, [{0x2c, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_ALLOWEDIPS={0x4}]}]}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x4004844}, 0x40000) 5m51.680638507s ago: executing program 34 (id=1972): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000007c0)={0x58, r1, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PEERS={0x30, 0x8, 0x0, 0x1, [{0x2c, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_ALLOWEDIPS={0x4}]}]}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x4004844}, 0x40000) 10.792712405s ago: executing program 1 (id=5232): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha384\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x80800) recvmsg$unix(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000100)=""/151, 0x97}], 0x1}, 0x10020) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x2, 0x4, 0x5, 0x1, 0x100}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000016c0)={0x6, 0xf, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018210000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b70300000000000085000000cf000000bf0900000000000055090100000000409500000000000000bf91000000000000b7020000000000008500000000000000b70000000000000095"], &(0x7f0000000040)='GPL\x00'}, 0x90) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f00000003c0)={'batadv_slave_1\x00', 0x0}) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a300000000040000000030a01080000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d65746100000000140002800800014000000012080002400000002214000000110001"], 0xd8}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@delchain={0x1c, 0x5f, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x5, 0xf}, {0xffe0, 0x8}}}, 0x24}}, 0x4040850) 10.361735485s ago: executing program 1 (id=5237): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_DELOBJ={0x0, 0x14, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x8}, [@NFTA_OBJ_TABLE={0x0, 0x1, 'syz1\x00'}, @NFTA_OBJ_TABLE={0x0, 0x1, 'syz1\x00'}, @NFTA_OBJ_USERDATA={0x0, 0x8, "bcb581dd6e59087bd13c0329da66d24c4313e5a415"}, @NFTA_OBJ_TYPE={0x0, 0x3, 0x1, 0x0, 0x6}, @NFTA_OBJ_TABLE={0x0, 0x1, 'syz1\x00'}]}], {0x14}}, 0x74}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x66772}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_DELOBJ={0x0, 0x14, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x8}, [@NFTA_OBJ_TABLE={0x0, 0x1, 'syz1\x00'}, @NFTA_OBJ_TABLE={0x0, 0x1, 'syz1\x00'}, @NFTA_OBJ_USERDATA={0x0, 0x8, "bcb581dd6e59087bd13c0329da66d24c4313e5a415"}, @NFTA_OBJ_TYPE={0x0, 0x3, 0x1, 0x0, 0x6}, @NFTA_OBJ_TABLE={0x0, 0x1, 'syz1\x00'}]}], {0x14}}, 0x74}}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x66772}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) (async) 10.159941346s ago: executing program 1 (id=5240): bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0), 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000014ab0000000000000071122e0000000000950000000000"], &(0x7f0000000040)='GPL\x00', 0x10, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) (async, rerun: 32) r0 = socket$inet6_sctp(0xa, 0x801, 0x84) (async, rerun: 32) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) r2 = socket$inet(0xa, 0x801, 0x84) listen(r2, 0x8) r3 = socket$netlink(0x10, 0x3, 0x4) writev(r3, &(0x7f0000000280)=[{&(0x7f0000000680)="4800000014001d0d09074beafd0d8c560284606080ffe0064e204e3031d32944bf20590000a2bc5603ca00000f7f8907000020008d42188fedc22eedc6d100000101ff0000000309", 0x48}], 0x1) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x102, 0x0) close(r4) (async) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async, rerun: 32) r5 = socket$nl_route(0x10, 0x3, 0x0) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=@getqdisc={0x44, 0x26, 0x1, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0xc, 0x10}, {0xfff2, 0xfff2}, {0x0, 0xfff3}}, [{0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) r8 = socket$nl_crypto(0x10, 0x3, 0x15) (async) sendmsg$DEVLINK_CMD_RATE_NEW(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x40, 0x0, 0x0, 0x0, 0xfffffffe, {}, [@DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0x7f}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x40}}, 0x0) sendmsg$nl_crypto(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f0000000120003"], 0xf0}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r7, {0x0, 0xd}, {0xb, 0xb}, {0xa, 0xb}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x9}, @TCA_FQ_CE_THRESHOLD={0x8, 0xc, 0x9}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x2001c061}, 0x4008000) (async) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000002c0)={'syzkaller0\x00', 0x0}) (async, rerun: 32) r11 = socket$packet(0x11, 0x2, 0x300) (rerun: 32) sendto$packet(r11, 0x0, 0x0, 0x40, &(0x7f00000001c0)={0x11, 0x88a8, r10, 0x1, 0xd8, 0x6, @random="98c8ca7122df"}, 0x14) sendto$inet6(r0, &(0x7f0000000080)='J', 0x1, 0x0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) (async, rerun: 64) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 64) sendmsg$NFT_BATCH(r12, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r12, &(0x7f0000000500)={0x0, 0xfffffffffffffedb, &(0x7f0000000000)={&(0x7f0000000700)={{0x14}, [@NFT_MSG_DELOBJ={0x19c, 0x14, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x7}, [@NFTA_OBJ_USERDATA={0xfc, 0x8, "ce88fa41017a0c0808906c07405a8e196f7a927574a537c833312e99410e7ed6f8780438a3c370960f407a7b699e14f20185a72b8d53538bff842fd77c8ff54d94cabb5e0eda596f68de4783f777193e377c13ca0d22967ae4614f1f92896914c7a25ebd0ee986c617c65a7f85253dea41cb8081f2733906d1e69343585dfce698a63cc549edd5cd5cd698fbe06f71bf7a5e5b314c474cc8f11e2894bf0fae2851296641776eb1cc7f3e5adafd0a0d1a8320bd52d91aa670d682cccfd425517bb2b98b73c24de4b0ae547d86c91df465844c3668d7d3e244625b7c3b2c5d03d1b0ac2554e0e55f960990e520603f1cc272698ed7f65e88a3"}, @NFTA_OBJ_USERDATA={0x32, 0x8, "3747b5e1f96818cec0ce2d2311e81206623911684bf963ea2ffc5277a69a8190bab927f4deb69fab4e385a165d74"}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x3}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x3}]}], {0x14}}, 0x1c4}, 0x1, 0x0, 0x0, 0x1d62fa6ab37d8919}, 0x0) shutdown(r0, 0x1) 9.83292071s ago: executing program 1 (id=5245): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) r1 = syz_genetlink_get_family_id$smc(&(0x7f00000033c0), r0) sendmsg$SMC_PNETID_ADD(r0, &(0x7f00000034c0)={0x0, 0x0, &(0x7f0000003480)={&(0x7f0000000000)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010028bd7000fedbdf2502000000090001007b"], 0x34}, 0x1, 0x0, 0x0, 0x850c081d989709a5}, 0x40000) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000027c0)=@newtfilter={0x874, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, 0x0, {0x0, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x840, 0x2, [@TCA_MATCHALL_ACT={0x83c, 0x2, [@m_police={0x838, 0x1, 0x0, 0x0, {{0xb}, {0x80c, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x1ff, 0x3, 0x10000, 0x81, 0x7f, 0xfffffffb, 0x4, 0x2, 0xffffffc0, 0x5, 0x2234, 0x7f, 0x81b, 0x800, 0x5, 0x0, 0x3, 0x7ed53619, 0x1, 0x2, 0x9644, 0x4, 0x58b, 0x85a, 0x3ff, 0x9, 0x2, 0x1, 0x0, 0x80000000, 0x10001, 0x790, 0x5, 0xab2, 0xfffffff9, 0x1a77, 0x9, 0x3, 0x400, 0x63c, 0xffff8001, 0xffffffff, 0x1, 0x5, 0x1, 0x5b1f, 0x7b0, 0x7, 0x100, 0x6, 0xd, 0xff, 0x3, 0x10000, 0x6, 0x6b7, 0x1ff, 0x80, 0x4, 0x7, 0x3, 0xa14, 0x3, 0x2, 0x80000000, 0x81, 0x7, 0x8, 0x5, 0x10001, 0xf7, 0x3, 0xfffffff9, 0x9, 0x4, 0x8, 0xfff, 0x3, 0x1, 0x6, 0x7, 0x8, 0x100, 0xc0000000, 0x6, 0x6, 0x6, 0x12a, 0x80000001, 0x8, 0x1d24, 0x2, 0x9, 0x0, 0x7f, 0x7, 0x863c, 0xff, 0x24, 0x5, 0x7, 0x6, 0x7a, 0x8, 0x0, 0x7, 0x470, 0x7f, 0x6, 0x0, 0x1, 0x0, 0x4, 0x9, 0x61, 0x200, 0x6, 0x2, 0x2, 0x6, 0x10001, 0x8, 0x7, 0xf, 0xda56, 0x7ffffffe, 0x80, 0x2f0cb955, 0x7, 0xfed, 0xf, 0x6ae, 0x2, 0x1, 0x9, 0x8001, 0x0, 0xec000, 0x0, 0x1, 0x2, 0xfffffffb, 0x7, 0x8, 0x4, 0x1, 0xffffcf1b, 0x282, 0x5517bc7b, 0x3, 0x4, 0xb6b, 0x5, 0x0, 0xac, 0x9, 0x6, 0x10, 0x9, 0x8, 0x80000001, 0x0, 0x74, 0x2, 0x7fffffff, 0x0, 0xa, 0x6, 0xffffffff, 0x8, 0x2, 0x7, 0x7f, 0x5, 0x3, 0xa, 0x1, 0x0, 0x9, 0x300, 0x5, 0x3, 0x6, 0xffffffff, 0xffb, 0xff, 0x5, 0x8, 0x3, 0x2, 0x5, 0xfca, 0x399d, 0x6, 0x8ab6, 0x18000, 0x2, 0xfffffff9, 0x2, 0x2, 0x528c, 0x5, 0x200, 0xac, 0xf, 0xd05, 0x9a2ce73, 0x4, 0x6, 0xe074, 0x6b10, 0x5, 0x1, 0x6, 0xb, 0xa26, 0xaf6, 0x0, 0xec, 0x8, 0xde16, 0xc418, 0xffffffff, 0xffffffff, 0x9, 0x400, 0x80001, 0x5, 0x354d, 0x5, 0x2, 0x1, 0x2007, 0x1, 0x177, 0x7, 0x0, 0x80, 0x5, 0x8, 0xfffffffb, 0x9, 0xe7b, 0x0, 0x7, 0x42bf, 0x10000, 0x9, 0x9, 0x6, 0x4b75, 0x80000001, 0x1000, 0x5915, 0x10001, 0x1]}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x1080, 0x4, 0xec2, 0x6, 0x8, 0x400, 0x5, 0x1, 0x7, 0x470, 0x487, 0x100, 0xa99, 0xffffff01, 0x5, 0x37f, 0x30, 0x6, 0x3, 0x3, 0x800, 0xd2f5, 0x40, 0x4, 0x4, 0x5, 0x7, 0x12, 0x2, 0x8, 0x101, 0xffffffff, 0x2, 0x10000, 0xa6, 0x3, 0x10000, 0x5, 0x4, 0x0, 0x3, 0x0, 0xd, 0x40006, 0x98, 0x8, 0x6, 0x9, 0x1000, 0xb3000, 0xf, 0x3, 0x9, 0xb4, 0x94d, 0x9, 0x8, 0x6, 0x100, 0xec0, 0xffff, 0x4, 0x2, 0x3ff, 0x3e, 0xb828, 0x0, 0x0, 0x365, 0x8, 0x8, 0xf, 0x1, 0xfffffffe, 0xfffffff6, 0x93, 0x7ff, 0x92, 0x0, 0x7, 0xfffffffc, 0x7ff, 0x9, 0x2, 0x0, 0x2, 0x8, 0x4, 0x3, 0x9, 0xc, 0x0, 0x3, 0x3, 0x400, 0x100000, 0x7f, 0x2, 0x8, 0x4, 0x7, 0x4, 0x7, 0xfffffffa, 0x101, 0xadd9, 0x1, 0x0, 0x7, 0x7fffffff, 0x2, 0x4, 0x0, 0x9, 0x4, 0x3, 0x8, 0x9, 0x6, 0x6, 0x2, 0xb, 0x3, 0x7f, 0xffff, 0x401, 0x1685, 0xa252, 0x2, 0x200, 0x3, 0x1, 0x400, 0xfffffffc, 0xfffffffc, 0x1000, 0x7ff, 0x1, 0x1f6, 0x751, 0x7, 0x40000000, 0x4, 0xffffdbb7, 0x50, 0xf, 0xf, 0xe, 0x3, 0x0, 0x81, 0xfff80000, 0x7a7, 0x1, 0x6, 0x3, 0x8, 0x7, 0x5, 0x2, 0x0, 0x4e8, 0x80, 0x3, 0x8, 0x5, 0x0, 0x5, 0x7fff, 0x7, 0x8, 0x6a4941c5, 0x2ea567b4, 0x8, 0x80000000, 0x6, 0x40, 0x2, 0xfff, 0x8, 0x7, 0x1, 0x1, 0x0, 0x0, 0xd3bed341, 0x691f, 0x0, 0x2, 0x9, 0x6, 0x0, 0x1ff, 0x3, 0x3, 0x6, 0x5fc8462f, 0x0, 0x7, 0xffff, 0xfffffffc, 0x5, 0x0, 0xb9a6, 0x522, 0x2, 0x2, 0x900, 0x8, 0xbb99, 0xb8000000, 0x8, 0xffffff01, 0xc0a1, 0x8, 0x8, 0x7, 0x59, 0x9, 0x2, 0x101, 0x5f502dca, 0x7, 0x0, 0x4, 0x6, 0x80000001, 0x3, 0xffffff97, 0x2, 0xfff, 0x1, 0x40, 0x8, 0x3, 0x710, 0x8, 0x1, 0xfffff339, 0x3, 0x8001, 0x1, 0x8001, 0x9, 0x8, 0xfffffffa, 0x8, 0x9, 0x3, 0xe, 0x10000, 0x9, 0x9, 0x7, 0xfffffff8]}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x874}, 0x1, 0x0, 0x0, 0x10}, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000140)={'filter\x00', 0x3b, "fb8a32fa5ed25cd8c1f13de551af0280fc00d3b077768eb6fd9d2847b928437762eee788e5a8c96ea375b17913f9f236409a2ab1e1bec180ae0ef6"}, &(0x7f00000001c0)=0x5f) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002e00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021840000000c0a0101000000000000d955070000000900020073797a31000000000900010073797a30000000005800038054000080080003400000000248000b80340001800a0001006c696d69740000002400028008000440000000010c00024000000000000000000c000140"], 0x108}}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'bond_slave_0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@bridge_delneigh={0x30, 0x1c, 0x1, 0xfffffffd, 0x0, {0x7, 0x0, 0x0, r4, 0x80, 0xbb}, [@NDA_LLADDR={0xa, 0x2, @dev}, @NDA_VLAN={0x6, 0x5, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x44014}, 0x0) 9.641484972s ago: executing program 1 (id=5248): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010000100000000000000000004000000", @ANYRES32=0x0, @ANYBLOB="000000000001000014001680100001800c000400feffffff0400000008001b"], 0x3c}}, 0x0) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x304}, "bd88818314ff7d84", "877dab43c700", '\x00', "0100"}, 0x28) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), r2) recvfrom$inet6(r2, 0x0, 0x0, 0x40010163, 0x0, 0x0) close(r1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x7, 0x5, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x80}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) 9.422211452s ago: executing program 1 (id=5251): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.time\x00', 0x26e1, 0x0) close(r0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0), 0x4) connect$unix(r0, &(0x7f0000000280)=@file={0x0, './file1\x00'}, 0x6e) r2 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPCONNADD(r2, 0x400442c8, &(0x7f0000001540)={0xffffffffffffffff, 0xffff}) 3.686630996s ago: executing program 5 (id=5307): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'seqiv(aegis128l-generic)\x00'}, 0x58) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_mreq(r1, 0x29, 0x15, &(0x7f0000000080)={@mcast2}, 0x14) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000140)={0x0, @empty}, &(0x7f0000000180)=0xc) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000002c0)={'ip_vti0\x00', &(0x7f00000001c0)={'syztnl0\x00', 0x0, 0x20, 0x700, 0x9, 0x10000, {{0x2e, 0x4, 0x1, 0x9, 0xb8, 0x67, 0x0, 0x5, 0x2f, 0x0, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@timestamp_addr={0x44, 0x2c, 0xd9, 0x1, 0x4, [{@rand_addr=0x64010100, 0x6079}, {@multicast1, 0x3ff}, {@empty, 0xb}, {@rand_addr=0x64010100, 0x8}, {@local, 0xa}]}, @generic={0x83, 0xe, "bce6fbb9652e31e58c579535"}, @cipso={0x86, 0xc, 0x10d1b1ccff7119a5, [{0x1, 0x6, "6b1cc7d3"}]}, @noop, @timestamp_addr={0x44, 0x44, 0xc0, 0x1, 0x7, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3}, {@multicast2, 0x8}, {@broadcast, 0x7}, {@loopback, 0x80000001}, {@multicast1, 0x2d12}, {@private=0xa010101, 0x8}, {@rand_addr=0x64010102, 0xd3}, {@multicast1, 0x80000001}]}, @lsrr={0x83, 0x17, 0x12, [@initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x39}, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2]}]}}}}}) sendmsg$ETHTOOL_MSG_FEATURES_GET(r2, &(0x7f0000000400)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x84, r3, 0x2, 0x70bd27, 0x25dfdbfd, {}, [@HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x20004084}, 0x4000000) (async) bind$rxrpc(r1, &(0x7f0000000440)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e24, @broadcast}}, 0x24) (async) r6 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000480), 0x4) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r6, 0x40089413, &(0x7f00000004c0)=0x81) (async) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), r2) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000580)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r2, &(0x7f0000000680)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x64, r7, 0x200, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x35}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x1}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x70}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6a}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0xc}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x16}]}, 0x64}, 0x1, 0x0, 0x0, 0x840}, 0x20000000) getsockopt(r1, 0x4, 0x4, &(0x7f00000006c0)=""/116, &(0x7f0000000740)=0x74) r9 = accept4$phonet_pipe(0xffffffffffffffff, &(0x7f0000000780), &(0x7f00000007c0)=0x10, 0x800) sendto$phonet(r9, &(0x7f0000000800)="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", 0x1000, 0x1, &(0x7f0000001800)={0x23, 0xe7, 0x7, 0x9}, 0x10) (async, rerun: 64) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000001840)={0x0, 0x7f, 0x4, [0xc751, 0x3, 0x0, 0x9]}, 0x10) (async, rerun: 64) sendmsg$NL80211_CMD_DEL_STATION(r2, &(0x7f0000001a40)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x240000}, 0xc, &(0x7f0000001a00)={&(0x7f00000018c0)={0x130, r7, 0x400, 0x70bd28, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_STA_TX_POWER_SETTING={0x5}, @NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0x3cc}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x3}, @NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0x9c, 0xbe, "9cc79906f106d74618e083ddf37e6ad0a07428088afff481eeaf406ee41f3b42f32edb8dfa35313bd43b81a1614bf6f5722f18cc5bd3117139cea7900351f64a68d365e10615b7f447322125806e6a4550cd8b150be1adf4d7766ef807e80951599616cac1dc94886f8d36b28ea854612924d9b3d352fd9eb7389dde52e932e12c7002bd042223ad25c9b88cade3c0076add2d89a18036cb"}, @NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0x7c6}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x3}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x7c4}, @NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0x5}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x12, 0xbd, [0xb8, 0x1, 0x8001, 0x5, 0x1, 0x0, 0x2]}, @NL80211_ATTR_STA_WME={0x34, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x8}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x5}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x6}, @NL80211_STA_WME_MAX_SP={0x5}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0xa}]}]}, 0x130}, 0x1, 0x0, 0x0, 0x20000850}, 0x4000001) (async) r10 = accept4$inet(0xffffffffffffffff, &(0x7f0000001a80)={0x2, 0x0, @loopback}, &(0x7f0000001ac0)=0x10, 0x81800) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r10, 0x84, 0x18, &(0x7f0000001b00)={0x0, 0x3}, &(0x7f0000001b40)=0x8) r11 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001b80)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x56af8da7, '\x00', r4, 0xffffffffffffffff, 0x0, 0x1, 0x4}, 0x50) (async, rerun: 64) r12 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000001c00)='blkio.bfq.time_recursive\x00', 0x0, 0x0) (rerun: 64) bpf$MAP_CREATE(0x0, &(0x7f0000001c40)=@base={0xc, 0x41, 0x400, 0xfffffffd, 0x100, r11, 0x3, '\x00', 0x0, r12, 0x5, 0x4}, 0x50) (async) setsockopt$ARPT_SO_SET_REPLACE(r10, 0x0, 0x60, &(0x7f0000001d00)={'filter\x00', 0x7, 0x4, 0x438, 0x0, 0x130, 0x0, 0x350, 0x350, 0x350, 0x4, &(0x7f0000001cc0), {[{{@uncond, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x736b, 0x5, 0x6c09, 0x1, 0x0, "f0f5f8a33c9b49dbd4d09d7c8f250a5cc5d59458e851b343e6eee9558d5a360289d1d31bf21faf3b77c62032e52a9932c878e98d26bae136a15c009923c9f44d"}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @empty, @private=0xa010100, 0x1}}}, {{@arp={@multicast1, @multicast1, 0x0, 0x0, 0x1, 0x10, {@empty, {[0xff, 0x0, 0xff, 0x0, 0x0, 0xff]}}, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, {[0xff, 0x0, 0xff, 0x0, 0x0, 0xff]}}, 0x100, 0xd, 0x9, 0x1ff, 0x67f, 0xc05, 'geneve1\x00', 'geneve0\x00', {0xff}, {0xff}, 0x0, 0x5a0}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @rand_addr=0x64010101, @multicast1, 0xf, 0xffffffff}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x488) socket(0x2a, 0x80007, 0x4) (async) syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) (async) getpeername$inet6(r12, &(0x7f00000021c0)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000002200)=0x1c) setsockopt$inet6_IPV6_PKTINFO(r1, 0x29, 0x32, &(0x7f0000002240)={@private2={0xfc, 0x2, '\x00', 0x1}, r5}, 0x14) 3.512651285s ago: executing program 5 (id=5311): r0 = socket$packet(0x11, 0x3, 0x300) (async) r1 = socket(0x15, 0x5, 0x0) getsockopt(r1, 0x200000000114, 0x271f, 0x0, &(0x7f0000000040)) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) (async) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000006000)=@newqdisc={0x4c, 0x24, 0xe0b, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0xd, 0xe}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x1c, 0x2, [@TCA_CAKE_SPLIT_GSO={0x8}, @TCA_CAKE_NAT={0x8, 0xb, 0x1}, @TCA_CAKE_FLOW_MODE={0x8}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x24020080}, 0x4044080) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @remote}, 0x14) (async, rerun: 64) r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) (rerun: 64) connect$llc(r5, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10) (async) recvmmsg(r5, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0}, 0x828}], 0x1, 0x2000, 0x0) sendmmsg(r5, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) sendto$inet6(r0, &(0x7f0000000800)="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", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0) (async) r6 = socket(0x10, 0x3, 0x0) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) (async, rerun: 64) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) (rerun: 64) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, 0x0, 0x0) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r8, 0x11c, 0x4, &(0x7f0000000fc0)=""/99, &(0x7f0000000000)=0x63) (async) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000280)={0x4, 0x2000b}, 0x10) (async, rerun: 64) r9 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) r10 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), r6) sendmsg$IPVS_CMD_DEL_DEST(r9, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x84, r10, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xfffffffb}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x3ff}]}, @IPVS_CMD_ATTR_DAEMON={0x38, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x45d}]}, 0x84}, 0x1, 0x0, 0x0, 0x4800}, 0x0) (async) sendmsg$nl_generic(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x14, 0x42, 0xa01, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) (async, rerun: 32) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32) sendmsg$IPSET_CMD_CREATE(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x54, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x54}}, 0x0) (async) syz_emit_ethernet(0x3f, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa00080049040bfefb3144832f06478b9fa500310000000000009078ac1414bbac1414358907efffffffff8606000000000000008fab0458c42acece13e3c322ad"], 0x0) 3.236871549s ago: executing program 2 (id=5314): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha256\x00'}, 0x58) (async) bind$alg(r2, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha256\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x7, &(0x7f00000000c0)="fdffffff", 0x4) (async) setsockopt$ALG_SET_KEY(r2, 0x117, 0x7, &(0x7f00000000c0)="fdffffff", 0x4) r3 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_SECURITY_KEY(r3, 0x110, 0x1, &(0x7f0000000040)='\x00', 0x1) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r1, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r1, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r1, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000600)=@newqdisc={0x78, 0x24, 0xf0b, 0x70bd2e, 0x0, {0x0, 0x0, 0x12, r4, {}, {0xffff, 0xffff}, {0x2, 0xd}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x18, 0x2, {{0x7, 0x2, 0x543, 0x0, 0x4000000}, 0x80, 0x0, 0x4, 0x10001, 0x7ff, 0x14, 0x18, 0x8, 0x5, 0xedf, {0xc16e, 0x9, 0xb, 0x8, 0x6, 0x8}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x8044000}, 0x0) 3.07422517s ago: executing program 5 (id=5315): bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0e00000004000000040000000300000000000000", @ANYRES32, @ANYBLOB="0000000000000000f4ff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0e00000004000000040000000300000000000000", @ANYRES32, @ANYBLOB="0000000000000000f4ff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x2, '\x00', 0x0, r1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x8}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x0, 0x700}}, [@snprintf={{}, {0x3, 0x0, 0x3, 0xa, 0x9, 0xfe04}, {0x6, 0x0, 0x6, 0x9}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff0, 0x50}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0x5, 0x0}, {0x18, 0x2, 0x2, 0x0, r2}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}}, {0x95, 0x0, 0x6000}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x8}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x0, 0x700}}, [@snprintf={{}, {0x3, 0x0, 0x3, 0xa, 0x9, 0xfe04}, {0x6, 0x0, 0x6, 0x9}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff0, 0x50}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0x5, 0x0}, {0x18, 0x2, 0x2, 0x0, r2}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}}, {0x95, 0x0, 0x6000}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 3.044272239s ago: executing program 6 (id=5316): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x50, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x9}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x50}}, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) 2.986235519s ago: executing program 2 (id=5318): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000019800)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) epoll_create1(0x80000) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWSET={0x44, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_POLICY={0x8}]}], {0x14}}, 0x6c}}, 0x0) 2.900292081s ago: executing program 5 (id=5319): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_opts(r1, 0x29, 0x36, &(0x7f0000000040)=@fragment, 0x8) getsockopt$inet6_opts(r1, 0x29, 0x3b, 0xfffffffffffffffe, &(0x7f0000000100)) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x400, 0x0) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000100)={'syzkaller0\x00', @random="b524732b4e4a"}) writev(r0, &(0x7f0000000180)=[{&(0x7f00000001c0)="89e7ee2c78dad9b4b473fec988a8", 0xe}, {&(0x7f0000000380)="2acfb759abd3", 0x6}], 0x2) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f00000006c0)=@updsa={0x154, 0x1a, 0x1, 0x10000000, 0x0, {{@in6=@private1, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {@in=@broadcast, 0x0, 0x6c}, @in6=@private2, {0x2, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, {}, {0x0, 0x0, 0x40000000}, 0x70bd2d, 0x0, 0x2}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @encap={0x1c, 0x4, {0x3, 0x4e20, 0x4e22, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}]}, 0x154}}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1c, 0xe, &(0x7f00000022c0)=ANY=[@ANYRESDEC=r4], &(0x7f0000000340)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r5, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000080)="5aee41dea43e63a3f7fb7f110000", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r6 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_add_memb(r6, 0x107, 0x1, &(0x7f0000000140)={r7, 0x1, 0x6, @remote}, 0x10) setsockopt$packet_add_memb(r6, 0x107, 0x1, &(0x7f0000000180)={r7, 0x11, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1a}}, 0x10) close(0x3) ioctl$TUNSETDEBUG(r0, 0x400454c9, &(0x7f0000000140)=0x5) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0xd8}, 0x1, 0x0, 0x0, 0x20004004}, 0x4000) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r3, 0x80286722, &(0x7f0000000080)={&(0x7f0000000000)=""/121, 0x79, 0x6, 0x9}) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="2cdc36720000001800010025bd7000fddbdf2502008008fc01000400030000080006003f02000008000100ac1414bb"], 0x2c}, 0x1, 0x0, 0x0, 0x4040080}, 0x0) 2.881281563s ago: executing program 2 (id=5320): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x6) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) unshare(0x22020400) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x12, 0x4, 0x8, 0x8}, 0x48) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0xe, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000200)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r3, r4, 0x26}, 0x10) getsockopt$inet6_mreq(r2, 0x29, 0x15, &(0x7f0000000240)={@private1, 0x0}, &(0x7f0000000280)=0x14) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000380)={'syztnl0\x00', &(0x7f0000000300)={'syztnl0\x00', r5, 0x700, 0x20, 0xf, 0x4, {{0x11, 0x4, 0x1, 0x8, 0x44, 0x68, 0x0, 0x84, 0x2, 0x0, @multicast2, @remote, {[@timestamp_addr={0x44, 0x1c, 0x9f, 0x1, 0x5, [{@broadcast, 0xe}, {@dev={0xac, 0x14, 0x14, 0x19}, 0x3}, {@multicast1, 0x54}]}, @lsrr={0x83, 0x13, 0x43, [@local, @loopback, @remote, @rand_addr=0x64010101]}]}}}}}) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0500000004000000fc7f20009609000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000fcffffff00"/28], 0x48) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x3, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="09000000040000000800000040"], 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001600)={r9, &(0x7f0000000580), 0x0}, 0x20) sendmsg$nl_route_sched(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r8, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r10, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x24, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {0xf}, {0xfff1, 0xffff}}}, 0x24}}, 0x4000800) r12 = socket(0x10, 0x3, 0x0) setsockopt$MRT6_ADD_MIF(r2, 0x29, 0xca, &(0x7f0000000400)={0x0, 0x0, 0xff, r6, 0x7725}, 0xc) sendmsg$nl_route_sched(r12, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@gettaction={0x14, 0x5a, 0x1}, 0x14}}, 0x0) r13 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000004780), 0x2, 0x0) close(r13) r14 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x2, 0x4, 0x5, 0x1, 0x100}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000016c0)={0x6, 0xf, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018210000", @ANYRES32=r14, @ANYBLOB="0000000000000000b702000014000000b70300000000000085000000cf000000bf0900000000000055090100000000409500000000000000bf91000000000000b7020000000000008500000000000000b70000000000000095"], &(0x7f0000000040)='GPL\x00'}, 0x90) sendmsg$nl_route(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000000)={&(0x7f000000ae80)=@ipv4_delroute={0x24, 0x1a, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x4, 0x0, 0x2, 0x0, 0x8}, [@RTA_IP_PROTO={0x5, 0x1b, 0x11}]}, 0x24}}, 0x0) 2.851275251s ago: executing program 6 (id=5321): r0 = accept$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @local}, &(0x7f0000000040)=0x10) recvmmsg(r0, &(0x7f0000001e00)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/4, 0x4}], 0x1, &(0x7f0000000100)=""/111, 0x6f}, 0xfffffd16}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000180)=""/246, 0xf6}, {&(0x7f0000000280)=""/77, 0x4d}, {&(0x7f0000000300)=""/167, 0xa7}, {&(0x7f00000003c0)=""/121, 0x79}, {&(0x7f0000000440)=""/59, 0x3b}], 0x5, &(0x7f0000000500)=""/121, 0x79}, 0x9}, {{0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000580)=""/162, 0xa2}, {&(0x7f0000000640)=""/50, 0x32}, {&(0x7f0000000680)=""/148, 0x94}, {&(0x7f0000000740)=""/162, 0xa2}, {&(0x7f0000000800)=""/247, 0xf7}, {&(0x7f0000000900)=""/137, 0x89}, {&(0x7f00000009c0)=""/114, 0x72}, {&(0x7f0000000a40)=""/110, 0x6e}], 0x8, &(0x7f0000000b40)=""/4096, 0x1000}, 0x2}, {{&(0x7f0000001b40)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, 0x80, &(0x7f0000001cc0)=[{&(0x7f0000001bc0)=""/247, 0xf7}], 0x1, &(0x7f0000001d00)=""/255, 0xff}, 0x3}], 0x4, 0x10001, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000001f00)=[@in={0x2, 0x4e22, @broadcast}, @in={0x2, 0x4e24, @multicast2}], 0x20) ioctl$FIOCLEX(r0, 0x5451) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000001f40)=0x0) sendmsg$sock(r0, &(0x7f0000002340)={&(0x7f0000001f80)=@nfc={0x27, r2, 0xffffffffffffffff, 0x3}, 0x80, &(0x7f0000002280)=[{&(0x7f0000002000)="3dbdcd3871ebf9bd684a9434c3ba9c836d86447e324fb0935cc83d7fd8cff127c9f6a15f40924cc27e21e3a2ddd1537e2f7b854f905839b05594c4983e201599de68db071a", 0x45}, {&(0x7f0000002080)="af9961dd095bd840d843a9de62eb9784f39cb9780eef660f7c5e11e537c60ff79e4fcb9ac5119556487c554260b56cb3f0e2c00dd7d07e52d4852b4ea749d8b056ed33efbd5c4183ff24ca155af21cef3569e4930d34a0c94eff03d705ed0f6f413aaa260df9b128bbd74a4db75f7c82cd44ba054e4d7aefb09b6d67fd449c7f001fe4ca11d66f2652278b3756dcee9bf7dd", 0x92}, {&(0x7f0000002140)="fb8c6bf4deeebc155e948453e4e6ed097133e563ff6881a19e6a40d18687bdc8874eee151bcc198a912940fdbe6498fa667964ab9ac01e45a6ed1de011bcce9adb94fb19811dc39f5b84c6862e19cf5974cbe33c63f3a9e8a1fe8d32090f4d5a9b99aa5a3267daa33348835d45b04956ea24dbfa0eb3799a8dc3d556", 0x7c}, {&(0x7f00000021c0)="fbd55720c678fccb1ab4b70e8b3cd8eed5e8adb920bb2f2a342008e1349d8a49e480c2c504b67f2c21e6492a101688c6257cfa49a273081335217b046906ad13c0d460801fb893fe96e607ba3df85b79cb25ed92c00b195168b895dd15ba80bb62e1e1ffa255eaa30bebe5bdfa37e66e4981a3728403b410f2863bccf58aff8b3c3eccddc95fb6ca0843a53fc4b91ffd1b5f5731", 0x94}], 0x4, &(0x7f00000022c0)=[@mark={{0x14, 0x1, 0x24, 0x3}}, @txtime={{0x18, 0x1, 0x3d, 0x3}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}], 0x48}, 0x40840) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000002380)=0x3, 0x4) sendmsg$kcm(r1, &(0x7f0000002ac0)={&(0x7f00000023c0)=@isdn={0x22, 0x4, 0x4, 0x2, 0x2}, 0x80, &(0x7f00000027c0)=[{&(0x7f0000002440)="be85f031c7a9740445706286882819df515c0749d7653fdd6acc80bfe35a428ca52f6198c7472464934a2c1feabd914f9859c4a70bf72e1aca4713d6c8bcb0bdc61077afc11b6fbd81e386021840671b37fef2408a060f855a969ebfd5aec7e63a15d9b17d", 0x65}, {&(0x7f00000024c0)="24b32a9dcbe4b66f991539c3c896f5ea2d6afa57f7716969313569f1d2f1501778b0342ce15446ccf8372a7cf8974a59779ed69fba44be3ec8d477f7af515c5acb3792ba2879bde87ec2cc029374", 0x4e}, {&(0x7f0000002540)="33daa8a84d2c31bb29a63194c4a5c8cc842ba25a76c585d73339b149cabc0be13b2d0aa8", 0x24}, {&(0x7f0000002580)="29267afe6454720002fcbe39cdf1af26af8285a36e97f712d613d7bd", 0x1c}, {&(0x7f00000025c0)}, {&(0x7f0000002600)="92ba2935612c6dcc7d96db2c688198a4e8f099494a126f8641e80e45f1a02e3f712315f0efd107abca3e237b54a9060adbfc58e68ccb51b12a3edbb9586ce3947246c5ce968a9e90ce42f098152588a94cdba36a0411bb0e158f11669a03b4e25824a864aa43ceddf4e46f1f05b20b160fe765f615af12f909b36c5fe08cc6badbb1bf93b1a9a13cf5372fe5465217ea552520fc26712059e4d1b72b39c68ebd3be1fb24b830a2a2afec2881693a381176eaffc287", 0xb5}, {&(0x7f00000026c0)="a199673c3a9249ffe18495920af7c4df70d3042118521e4eeab24ae62d5e5da999e52315d9a666d7d58e9becd6a8f09e3564f11629bdbf9cab7db37546f83ccef24839592eeef38d4be559399f3ab815d791dc284860dd12457e5a03f17616d57ccd4d675373fe72a365f544ae047235731bd6dcf4286b90365e97d2566d8f2094f1dd73bcb0dc82ed3b9d8fce03ab31f2aac2660da10abfceeb9392a6deb451850da100fed4aa79db1484176f49811e959db82a45eb5fbc2c2f89e84215104f9dd73eb2acabe16dafd72e895aa9fa", 0xcf}], 0x7, &(0x7f0000002840)=[{0x100, 0x113, 0x1, "ad7cf1b512bef3e0a20c628f9a174090b9a754a75cfc121e4671c481fec5e70baa13c74161849bef68a44f12c2f3652211ac31006c6c7d1dabd3a782c2a91b8b7d3861bf3667446e8b4a87883fbca39bfea50e91d67b3a69e1d1dd9053cd26e6454e47c63ef0a9b054f19136945acf0fcf1130ce891bc2f641adb0bf8fdf596af7c46e92be7fde095a048a8343da43ffccbefa4178d64313ec2aa73724ec2fb250903f9f401bfb12f91e4fe58e9bb209d259694e5a61e28d996c3262265cd394a2a41683ef1dd7c3eced579d79f820f4be14ab31e7613a0a819778926a745dcf2adecfc207a3e3aacb732ad0df42"}, {0xa8, 0x107, 0x9, "5bb3b5bd6908bdba54ac5a247cf5adc96a930d58d127b53f784c0dbff8035709052bb6af6a3d8245a175b66a376e62ac22fb531da5a62a924e78f1bb25d1a4a0a273bb5ff927ea7ad223a53ab4d8cb5da9728e8333823ccc351f7556f7664d8ac1a235ddae60b8c90c1efef2638ea67430708f19714ff2df17e8f1f6b3667113ea8d020721941d578ca5e0d168f058fc888a"}, {0xd8, 0x1, 0x0, "a1f75c795274358ec0705d296894279beb1cba52027cc6c0d9065b402f7504323224cfb8bafa634110f9020e275c9693bb107b8cf97e47809573cf5abaee14cb452024c9009c1cd3fc126bd5e927fe35c88e7e800a1cf75fb90cd39c1443dede80d7d23704602f771477e6496a54cb6b340f423835a3f806978cbe00dd4dcf3f5bbb6b7452dc4364ba5c1e2d9d92cd990355deb0a591c3ef55f18f23944b07ef99a89781b87f4d2f8f6da75ec78e936384504c83e06a3727b14423cd62bf2f25d67bd6"}], 0x280}, 0x4) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000002b00), &(0x7f0000002b40)=0x4) recvmsg$can_j1939(0xffffffffffffffff, &(0x7f0000003cc0)={&(0x7f0000002b80)=@ethernet={0x0, @dev}, 0x80, &(0x7f0000003c00)=[{&(0x7f0000002c00)=""/4096, 0x1000}], 0x1, &(0x7f0000003c40)=""/89, 0x59}, 0x40010042) r3 = socket$qrtr(0x2a, 0x2, 0x0) bind$qrtr(r3, &(0x7f0000003d00)={0x2a, 0x4, 0xfffffffe}, 0xc) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$FS_IOC_SETFSLABEL(r4, 0x41009432, &(0x7f0000003d40)="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") r5 = bpf$ITER_CREATE(0x21, &(0x7f0000003e40), 0x8) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000003ec0), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ADD(r5, &(0x7f0000004000)={&(0x7f0000003e80)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000003fc0)={&(0x7f0000003f00)={0xa4, r6, 0x4, 0x70bd2d, 0x25dfdbfc, {}, [@TIPC_NLA_MEDIA={0x90, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1949}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xe}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6d75}]}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x81}, 0x800) ioctl$sock_SIOCADDRT(r3, 0x890b, &(0x7f0000004080)={0x0, @can={0x1d, 0x0}, @phonet={0x23, 0xf2, 0x6, 0x3}, @llc={0x1a, 0x322, 0xe4, 0x5, 0x7, 0xe0, @local}, 0x3, 0x0, 0x0, 0x0, 0x3, &(0x7f0000004040)='pim6reg\x00', 0x4, 0x1, 0x8}) getsockname$netrom(r5, &(0x7f0000004100)={{0x3, @rose}, [@remote, @default, @netrom, @bcast, @rose, @rose, @null, @rose]}, &(0x7f0000004180)=0x48) getsockopt$inet6_udp_int(r5, 0x11, 0x66, &(0x7f00000041c0), &(0x7f0000004200)=0x4) ioctl$PPPIOCGIDLE(r5, 0x8010743f, &(0x7f0000004240)) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000004280)=0x2, 0x4) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000004300), r5) sendmsg$MPTCP_PM_CMD_ANNOUNCE(r5, &(0x7f0000004440)={&(0x7f00000042c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000004400)={&(0x7f0000004340)={0xac, r8, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x38, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x4}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private0}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x48, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xff}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}]}, 0xac}, 0x1, 0x0, 0x0, 0x24000000}, 0x10) r9 = accept(r5, &(0x7f0000004480)=@x25, &(0x7f0000004500)=0x80) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000004580), 0xffffffffffffffff) getsockopt$inet_mreqn(r5, 0x0, 0x24, &(0x7f00000045c0)={@multicast1, @local, 0x0}, &(0x7f0000004600)=0xc) getsockopt$inet_mreqn(r5, 0x0, 0x20, &(0x7f0000004640)={@private, @broadcast, 0x0}, &(0x7f0000004680)=0xc) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r9, &(0x7f0000004840)={&(0x7f0000004540)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000004800)={&(0x7f00000046c0)={0x12c, r10, 0x300, 0x70bd2c, 0x25dfdbfb, {}, [@HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}]}, @HEADER={0xa8, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}]}]}, 0x12c}}, 0x14) 2.766274856s ago: executing program 6 (id=5323): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000001680)=ANY=[@ANYRES16=0x0], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x5}, 0xfffffffffffffdd4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000009c0)={r0, 0xe0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x8, &(0x7f0000000740)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000780)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x87, &(0x7f00000007c0), 0x0, 0x10, &(0x7f0000000800), &(0x7f0000000840), 0x8, 0x1, 0x8, 0x8, &(0x7f0000000880)}}, 0x10) (async, rerun: 32) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x108, 0xe, 0x0, &(0x7f0000000340)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0xf48f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async, rerun: 32) r1 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000140), &(0x7f0000000200)=0xe, 0x0) (async) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@delpolicy={0x50, 0x27, 0x1, 0x0, 0x0, {{@in=@private=0xa010100, @in6=@remote}}}, 0x50}}, 0x0) (async) r3 = socket(0x400000000010, 0x3, 0x0) (async) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xf}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x6, 0x3, 0xc06a2f6, 0x1, 0x7}, 0x6, 0x0, 0xa, 0x4, 0x6, 0x8, 0x18, 0x9, 0xb, 0x4, {0x0, 0x2, 0x9, 0x800, 0x8704, 0x27000000}}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newtfilter={0x48, 0x2c, 0xd2b, 0x800, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0x9, 0x6}, {}, {0x7, 0xb}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_INDEV={0x14, 0x2, 'wg0\x00'}]}}]}, 0x48}}, 0x24044094) (async) bind(r1, &(0x7f0000000240)=@ll={0x11, 0x1, r5, 0x1, 0x1a}, 0x80) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0x6, &(0x7f0000000380)=ANY=[@ANYBLOB="18430000070000132dc0537f8f8b1e0018ac0200e1ffff170600000000000000000000be000000"], &(0x7f00000003c0)='syzkaller\x00', 0x6, 0xca, &(0x7f0000000400)=""/202, 0x41100, 0x20, '\x00', r5, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0xa, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000580)=[r6, 0x1], &(0x7f00000005c0)=[{0x2, 0x2, 0x7, 0x9}, {0x0, 0x1, 0x10}, {0x0, 0x2, 0x7, 0x2}, {0x5, 0x2, 0x7, 0xc}, {0x1, 0x2, 0xf, 0x2}, {0x3, 0x5, 0x3, 0x7}], 0x10, 0x1}, 0x94) 2.522271319s ago: executing program 2 (id=5325): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3400000013000500010000000000000007000000", @ANYRES32=r2, @ANYBLOB="505204070000000014001a80100004800c000280"], 0x34}, 0x1, 0x0, 0x0, 0x24000000}, 0x60040140) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c00000000010104000000000000000002001000240002801400018008000100e000000108000200e00000010c00028005000100000000001c0010800800014000000000d97405010000000008000240000000000800", @ANYRES64=r3], 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) 2.516153794s ago: executing program 6 (id=5326): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_DOWNDELAY={0x8, 0xc, 0xff}]}}}]}, 0x3c}}, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff}) ioctl$FIDEDUPERANGE(r1, 0xc0189436, &(0x7f0000001840)={0x0, 0x0, 0x0, 0x0, 0x2}) write$cgroup_type(r1, &(0x7f0000000040), 0x9) 2.238305419s ago: executing program 7 (id=5329): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)={0x8c, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x8c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="81ffffff000000001c0012800b0001006772657461700000", @ANYRES32, @ANYBLOB='\b\x00\r\x00\x00\x00\x00\x00\b\x00'], 0x4c}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x46, &(0x7f0000000080)={@broadcast, @empty, @val={@void, {0x8100, 0x0, 0x0, 0x3}}, {@ipv6={0x86dd, @udp={0x0, 0x6, "8bb78c", 0xc, 0x2f, 0x0, @private0, @mcast2, {[], {0x0, 0x883e, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x7, 0x0, @void}}}}}}}}, 0x0) 2.219087472s ago: executing program 7 (id=5330): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r1) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'netdevsim0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001c80)={&(0x7f0000000080)=@ipv4_newaddr={0x28, 0x14, 0x1, 0x0, 0x0, {0x2, 0x1f, 0x4, 0x0, r3}, [@IFA_LOCAL={0x8, 0x2, @dev}, @IFA_BROADCAST={0x8, 0xb, @loopback}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x10) (async) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000080)=@generic={&(0x7f0000000040)='\x00', 0x0, 0x8}, 0x18) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f00000000c0)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0], 0x0, 0xe4, &(0x7f0000000340)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000380), &(0x7f0000000400), 0x8, 0xca, 0x8, 0x8, &(0x7f0000000440)}}, 0x10) r7 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r7, &(0x7f0000000000)={&(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c, 0x0, 0x0, &(0x7f00000003c0)=[@dstopts_2292={{0x18, 0x29, 0x4, {0x2}}}, @dstopts_2292={{0x18, 0x29, 0x3b}}, @rthdr_2292={{0x28, 0x29, 0x5, {0x0, 0x2, 0x2, 0x1, 0x0, [@remote]}}}], 0x58}, 0x0) r8 = gettid() (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0}, &(0x7f0000000140)=0xc) sendmsg$nl_generic(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001b80)=ANY=[@ANYBLOB="4000000043000701fefffffffcdbdf25037c0000040045802800018008001c8004000980080026b572759aee4565f7884a3ed9a513d4a000", @ANYRES32=r10, @ANYBLOB="14009c00fe800000000000000000000000000029"], 0x40}}, 0xc000) (async) r11 = getgid() sendmsg$netlink(r1, &(0x7f0000001b40)={&(0x7f0000000600)=@kern={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000640)=[{&(0x7f0000000740)={0x11d0, 0x1d, 0x100, 0x70bd2c, 0x25dfdbfd, "", [@typed={0x14, 0x15, 0x0, 0x0, @ipv6=@private2}, @generic="870c759c97044e714c7d7133e11b03560e359210f486d692dd655e0b16a82c1d44de242fa96c5e8ed8d580615e45265929f624a67d2748ecb05e225ff4319058ffd6242a203531610e2481140399e01b6bb5f2eac89ab180dc09c6b7f6cb2c0e5ed88a897885", @generic="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", @nested={0x141, 0x8c, 0x0, 0x1, [@typed={0x8, 0x24, 0x0, 0x0, @pid=r8}, @nested={0x4, 0x7c}, @typed={0x3f, 0xad, 0x0, 0x0, @binary="d8eeaa1f7896fc83c8f637aa552a43f1ef7872560d742cc92ec70f6453950cfdd3db9564dcdf2dae1f9d9850556fdfd817ea09b1c66087afd4846d"}, @nested={0x4, 0x11b}, @generic="e182efa597ec55f7c977ca68a2828a839a819627", @generic="ca993ddc27308e530b3e1cddb0939e2eb8d56d502f75005bca4efcc699881645340525a24cb221625ab4ea39d6d9bb1fa50fb5409f368f6a9a6a33e47f99edee38e839a44f26d81fa84c94135c6a1dbae013818cfb66c2e3aaa9278961afe5dab9f366e262e256de1005c5fc6cb06f53e3fed391c12a32e0c43f0cc5b68e569c1a97cda6864a3188bbb272deec331614dcb43c79e14f8869f7674bb1888dc1b2883a30f0ad01fb6cb67f61a7efc6aa822e5468159cafd950515ce86b04c79475e7", @typed={0xc, 0xc8, 0x0, 0x0, @u64=0x3}, @typed={0x4, 0xcc}, @typed={0x8, 0xd4, 0x0, 0x0, @u32=0x8}]}]}, 0x11d0}, {&(0x7f0000001940)={0x18c, 0x28, 0x200, 0x70bd29, 0x25dfdbff, "", [@typed={0xc, 0xba, 0x0, 0x0, @u64=0x8}, @generic="476b38bd8e3c0bec3c55eff2ad7818f6b8efd85d2cd231a3079d147778fbb7ce9455186f742549e001ea3c2ae265f7ddc9b40d51a414781def9c5d5aa7e13784f5da98c06799b29842adc7", @typed={0x8, 0x17, 0x0, 0x0, @fd=r2}, @typed={0x8, 0x7a, 0x0, 0x0, @ipv4=@remote}, @nested={0x14, 0x11f, 0x0, 0x1, [@typed={0x8, 0x111, 0x0, 0x0, @u32=0x3}, @typed={0x8, 0x6e, 0x0, 0x0, @fd=r5}]}, @nested={0xf3, 0x18, 0x0, 0x1, [@generic="60de18fde77684f921b063218ed445c5e6c0ab42ef015fec04f3382008fc8b35e6ee3bb6e8e5ed4afc6a51733e926bb89633445f12f6a4133b45021d711002d7c4cdd339a5917d94d27ed72b3195dc7b55d54f81b107bb2b2a9860fa1ba35729e4d62de24bc1e084010d7bb51dc88df2c494d5fa0894fec47fe9058df978a795704a82c9fb1bd106b6f9027f524f2a7c798635f0e21dde126db9357135faa765a0f0d2cd4d8a40cbd25b03ab8680bc7320d6accdb7bee4fa790078a9e8999dea551296b0e52df4ee681596cfb506d29d1c5fd9a3e796e17678f735ba1e72ee9289f633af52be2777f3e4a6f23352ad"]}, @typed={0xa, 0xb5, 0x0, 0x0, @str='veth1\x00'}]}, 0x18c}], 0x2, &(0x7f0000001b00)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r10, r11}}}], 0x20, 0x4004084}, 0x44008010) r12 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000005c0)=0xffffffffffffffff, 0x4) (async) r13 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r13, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) (async) ioctl$TUNSETTXFILTER(r13, 0x400454d1, &(0x7f0000000140)=ANY=[@ANYBLOB="d2e6725d5a247c3375665f1451949cc0010b176ef3809d61ad2274871c22ce161543c7f570b8da73c2f78b97b8f3c5eba999144be36a42aac7cf35"]) (async) r14 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="320000734f000000020100000700000085c6028412c1", @ANYRES32=r5, @ANYBLOB='\t\x00'/20, @ANYRES32=r6, @ANYRES32=r12, @ANYBLOB="03000000000000000100"/28], 0x50) (async) r15 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x73, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r15, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x7], 0x0, 0x0, 0x1}}, 0x3c) (async) socket$nl_route(0x10, 0x3, 0x0) (async) r16 = socket$netlink(0x10, 0x3, 0x0) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r14, 0x40049366, &(0x7f0000000000)=0x4) (async) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r4, 0x8983, &(0x7f0000000680)={0x3, 'veth1\x00', {0x4}, 0x8001}) writev(r16, &(0x7f00000003c0)=[{&(0x7f0000000240)="3900000013000318680907070000000f0000ff3f04000000170a001700000000040037000f00030001332564aaee7b1d58b9a64411f6bbf44d", 0x39}], 0x1) 2.132939161s ago: executing program 7 (id=5331): syz_emit_ethernet(0x1d8, &(0x7f0000000940)={@multicast, @remote, @void, {@ipv6={0x86dd, @dccp_packet={0xe, 0x6, "d9d64c", 0x1a2, 0x21, 0xff, @mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', {[@srh={0x2b, 0xe, 0x4, 0x7, 0x4f, 0x0, 0x800, [@local, @ipv4={'\x00', '\xff\xff', @multicast2}, @mcast2, @private0, @private2, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01']}, @fragment={0x21, 0x0, 0x1, 0x1, 0x0, 0x8, 0x66}, @dstopts={0x3a, 0x1, '\x00', [@jumbo={0xc2, 0x4, 0xffff8001}, @pad1, @pad1]}, @hopopts={0x89, 0x15, '\x00', [@pad1, @enc_lim={0x4, 0x1, 0x5}, @jumbo={0xc2, 0x4, 0x8001}, @pad1, @jumbo={0xc2, 0x4, 0x4eb0}, @generic={0x17, 0x90, "82da0b02e22b43beb8eb22c1c1fdcaebfda4544716d8bc7c58db8b06f34ba7d5c9575dfbab2efcbd25ec199a42dca4648183d9447f66e23300fa08d5c40a943ebb43f4c76768f966c2790370542f6e3f365007792bc77cc5ecfee75c735ee7217243b13ce3d64a2f897c09a0175da6d53082243a6f5588709ad09674f1862e60ac5b9e21a8f53cc0c75ce811d52ee9c6"}, @ra={0x5, 0x2, 0x54}]}], {{0x4e23, 0x4e21, 0x4, 0x1, 0xd, 0x0, 0x0, 0xa, 0x6, "7c22ce", 0x8, '1sC'}, "88ed07e9df01f0da8d89c4a153d32a7a932c5d782c5e183d50f92839315de187d6c58701fb1adca216852e93f233a0d7d5f162e345c4ce42372fe5fd958acab4aee1"}}}}}}, 0x0) 2.03007085s ago: executing program 7 (id=5332): openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r1) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r3) r4 = socket$unix(0x1, 0x5, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newqdisc={0x68, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x3c, 0x2, [@TCA_TBF_PBURST={0x8, 0x7, 0xb86}, @TCA_TBF_PARMS={0x28, 0x1, {{0xa, 0x2, 0xffff, 0x7, 0xcc, 0x3}, {0x0, 0x1, 0x7, 0x8, 0x7f, 0x9}, 0x1, 0xffffdfff, 0x1bb6}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x80000, {0x0, 0x0, 0x0, r6, {}, {0x2, 0xb}, {0xa, 0x8}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x2, 0x10001, 0x0, 0x1, 0x1, 0x3, 0x10001, 0xb9a9, 0x40}}}}]}, 0x58}}, 0x44840) ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 427.733213ms ago: executing program 2 (id=5333): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000c40), r0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x34, r1, 0x1, 0x0, 0x0, {0x6, 0x0, 0x900}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast1=0xe0000002}, @NLBL_UNLABEL_A_SECCTX={0x4, 0x7, 'unconfined\x00'}]}, 0x34}, 0x2, 0x34005}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x42}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) 427.248056ms ago: executing program 6 (id=5334): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000003540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000003740)={0x0, 0x0, &(0x7f0000003700)={&(0x7f0000000040)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002abd5dab217a9d95dd70f64053dbd2e9fb7004fddbdf253b00000008000300b98a80504ce7ab2e17500f00f117684da9cab0eb3fcc9b69e29ed41469f8be300239aa206b9fde9a1cfa4af4ba89d192d939ef36e89a86da099cfbc99122", @ANYRES32=r2, @ANYBLOB="2a003300001c0600080211000000080211000000505050505050f2ff0006ae0800060101010101010100000004008700"], 0x4c}, 0x1, 0x0, 0x0, 0x20044840}, 0x8800) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newlink={0x64, 0x10, 0x401, 0x800000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32b, 0xa}, [@IFLA_LINKMODE={0x5, 0x11, 0x1}, @IFLA_BROADCAST={0xa, 0x2, @local}, @IFLA_GROUP={0x8, 0x1b, 0xb5}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_TARGET_NETNSID={0x8, 0x2e, 0x3}, @IFLA_CARRIER={0x5, 0x21, 0x3}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x1}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0x5cda}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x40008001) 346.541007ms ago: executing program 5 (id=5335): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x46, &(0x7f0000000700)={@broadcast, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x67, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast}, @time_exceeded={0x21, 0x0, 0x0, 0x12, 0x0, 0x2802, {0x7, 0x2, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0xff00, @multicast2, @rand_addr=0xe0000000, {[@ra={0x94, 0x4}, @end]}}}}}}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x8000000}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}], {0x14}}, 0x64}, 0x1, 0x0, 0x0, 0x814}, 0x0) sendmsg$NL802154_CMD_SET_SEC_PARAMS(0xffffffffffffffff, 0x0, 0x40000) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x5, 0x1cf1cd988231dbb, 0x1, 0x8, 0xc, 0xffff}, 0x20) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) ioctl(r2, 0x8b32, &(0x7f0000000040)) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000340)='blkio.bfq.io_service_bytes_recursive\x00', 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) recvfrom$inet6(r4, &(0x7f0000000600)=""/212, 0xd4, 0x12162, &(0x7f00000003c0)={0xa, 0x4e23, 0x5, @mcast1, 0xd}, 0x1c) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r6 = socket$unix(0x1, 0x5, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x80, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x4}}}, @IFLA_AF_SPEC={0x4c, 0x1a, 0x0, 0x1, [@AF_INET6={0x48, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x40}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x6}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0xff}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x1}, @IFLA_INET6_TOKEN={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @empty}}, @IFLA_INET6_ADDR_GEN_MODE={0x5}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x10}]}]}]}, 0x80}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001800010000000000000a70000000060a0b160000000000000000020000084400048018000180080001006f7366000c000280080001400000000428000180080001006e6174001c0002800800014000000000080003400000001408030040000000020900010073797a30000000000900020073797a3200000000140012001100010000000000000000000000000a"], 0x98}, 0x1, 0x0, 0x0, 0x850}, 0x4040080) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="38010001", @ANYRES16=r5, @ANYRESDEC=r5, @ANYRES32=r8, @ANYRESHEX=r1, @ANYRES64=r9, @ANYBLOB="e5450ded5fb6332ad62980f830c197aaab1ba5eb74bb687f6dfb2f9f07a6c7dce5d8042ee810cc0b8501dea3aab8b241ec355094abebcb4fad15f5f2b124bf8cc5b365d59fb6483160777b34c0ec163be98b59481396ed65640683215428c0eaca7c9862a03248993d812597"], 0x120}, 0x1, 0x0, 0x0, 0x4090}, 0x0) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="34000000150a03000000000000000000020000000900020073797a310000000008000340000000010900010073797a30"], 0x34}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xffff}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa30e, 0x1, 0xfffffffa}}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@newtfilter={0x3c, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r10, {0xfff3, 0xffe0}, {}, {0x5, 0x8}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0x0, 0xffff}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8848}, 0x4000010) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000840)={'erspan0\x00', &(0x7f0000000a00)={'sit0\x00', 0x0, 0x40, 0x80, 0x9, 0x5, {{0xc, 0x4, 0x0, 0x3c, 0x30, 0x67, 0x0, 0x0, 0x29, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x10}, {[@timestamp={0x44, 0xc, 0xc3, 0x0, 0x0, [0x4, 0x9]}, @generic={0x83, 0xf, "c6237b3396f8c62dd02cc70b47"}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000000b00)={'syztnl2\x00', &(0x7f0000000a80)={'syztnl2\x00', 0x0, 0x2f, 0x9, 0xff, 0x3, 0x29, @dev={0xfe, 0x80, '\x00', 0x22}, @mcast1, 0x80, 0x7800, 0x7, 0x7}}) sendmsg$ETHTOOL_MSG_STRSET_GET(r3, &(0x7f0000000d00)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000b40)={0x164, 0x0, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@ETHTOOL_A_STRSET_HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}]}, @ETHTOOL_A_STRSET_STRINGSETS={0x9c, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}, {0x7, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}]}, @ETHTOOL_A_STRSET_HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}]}, @ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x164}, 0x1, 0x0, 0x0, 0x4000840}, 0x4004000) 273.548763ms ago: executing program 6 (id=5336): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000080000003d0301000000000095000000000000006926000000000000bf67000000000000570600000fff07006706000002000000070600000ee60000bf150000000000003d650000000000006507000002000000070700004c0000001f750000000000006154000000000000070400000400f9ffad43010000000000950000000000000005000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0xffffffffffffff28}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)={0x1b, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{0x1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000300)=r0}, 0x20) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x0, 0xfff3}}}, 0x2b}, 0x1, 0x0, 0x0, 0x4000091}, 0x0) r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000600), 0x4) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000680)={0x9, 0x0}, 0x8) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@bloom_filter={0x1e, 0x0, 0xca, 0x3, 0x0, 0x1}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x1d, 0xf, &(0x7f0000000000)=@ringbuf={{0x18, 0x2}, {{0x18, 0x1, 0x1, 0x0, r8}, {0x7, 0x0, 0x2}, {}, {0x85, 0x0, 0x0, 0x9f}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x6c}}}, &(0x7f0000000200)='GPL\x00'}, 0x90) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x9, 0x1000}, 0x50) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x6, 0x4, 0x1, 0x0, r9}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r10}, &(0x7f0000000840), &(0x7f0000000880)=r9}, 0x20) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x1, 0xfffb, 0x5, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000340), &(0x7f0000000940), 0xfffe, r11}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000000c0)={r11, &(0x7f0000000080), &(0x7f0000001300)=""/4096}, 0x20) r12 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000700)=@o_path={&(0x7f00000006c0)='./file0\x00', 0x0, 0x4000}, 0x18) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000007c0)=@bpf_lsm={0x1d, 0x1d, &(0x7f0000000500)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x400}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @exit, @alu={0x7, 0x0, 0xe, 0x0, 0x0, 0x30, 0xffffffffffffffff}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x4}, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffff9}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @jmp={0x5, 0x1, 0x8, 0x0, 0xb, 0x20, 0xfffffffffffffff0}, @call={0x85, 0x0, 0x0, 0x6e}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000380)='GPL\x00', 0x9, 0x72, &(0x7f00000003c0)=""/114, 0x41000, 0x20, '\x00', r4, 0x1b, r6, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000640)={0x5, 0xc, 0x9, 0x6}, 0x10, r7, 0x0, 0x3, &(0x7f0000000740)=[0xffffffffffffffff, r8, r9, 0xffffffffffffffff, r11, r12], &(0x7f0000000780)=[{0x3, 0x3, 0x9, 0x1}, {0x2, 0x5, 0xe, 0x5}, {0x1, 0x5, 0x6, 0xa}], 0x10, 0x9}, 0x94) r13 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x6, 0x12, &(0x7f0000000080)=@framed={{0x18, 0x5}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r13}, @generic={0x66}, @initr0, @exit, @printk={@x={0x18, 0x0}, {0x3, 0x3, 0x3, 0xa, 0x0}, {0x5, 0x1, 0xb, 0x1, 0x5}, {0x7, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffe00}, {}, {}, {0x85, 0x0, 0x0, 0x19}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000003e40)=""/222}, 0x90) 273.165876ms ago: executing program 7 (id=5337): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x84, 0x10, 0x401, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, 0x503}, [@IFLA_LINKINFO={0x5c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x4c, 0x2, 0x0, 0x1, [@IFLA_VLAN_INGRESS_QOS={0x40, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x3, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfffffffa}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x10000, 0x8}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x8}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x200, 0x3}}]}, @IFLA_VLAN_ID={0x6, 0x1, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x84}, 0x1, 0x0, 0x0, 0x20004800}, 0x4000000) (async) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x84, 0x10, 0x401, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, 0x503}, [@IFLA_LINKINFO={0x5c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x4c, 0x2, 0x0, 0x1, [@IFLA_VLAN_INGRESS_QOS={0x40, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x3, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfffffffa}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x10000, 0x8}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x8}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x200, 0x3}}]}, @IFLA_VLAN_ID={0x6, 0x1, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x84}, 0x1, 0x0, 0x0, 0x20004800}, 0x4000000) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'bridge0\x00'}) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x4001}, 0x1) (async) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x4001}, 0x1) 256.34561ms ago: executing program 2 (id=5338): r0 = socket$nl_generic(0x11, 0x3, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@link_local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1e}, @broadcast}, {0x17, 0x7c, 0x0, @loopback}}}}}, 0x0) (async) sendmsg(r0, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x36}], 0x2, 0x0, 0x0, 0x11000000}, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'geneve1\x00', 0x0}) (async) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes128\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r4, 0x117, 0x7, &(0x7f00000000c0)="f9ffffff", 0x4) (async) sendto$packet(r2, &(0x7f00000002c0)="05031600d3fc140000004788031c09103b28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) (async) r5 = socket(0x400000000010, 0x2, 0x0) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), r0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r5, &(0x7f0000000440)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)={0xd0, r6, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@ETHTOOL_A_LINKMODES_OURS={0x44, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x40, 0x3, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xb5}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '\x9a+\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7fff}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}]}, @ETHTOOL_A_LINKMODES_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_LINKMODES_LANES={0x8, 0x9, 0x1}, @ETHTOOL_A_LINKMODES_LANES={0x8}, @ETHTOOL_A_LINKMODES_LANES={0x8, 0x9, 0x4}, @ETHTOOL_A_LINKMODES_OURS={0x4c, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0x22, 0x5, "74b7e557fa537963e3114af13baa299525e7192c20bf2211bc68b3b373ba"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x585eaeda}]}]}]}]}, 0xd0}, 0x1, 0x0, 0x0, 0x814}, 0x4000000) (async) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r9 = syz_init_net_socket$ax25(0x3, 0x2, 0xf0) ioctl$sock_ax25_SIOCADDRT(r9, 0x890b, &(0x7f00000000c0)={@default, @default, 0x7, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @null]}) (async) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4000) (async) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000005f80)=@newtfilter={0x90, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r8, {0x0, 0x1}, {}, {0x8}}, [@filter_kind_options=@f_flow={{0x9}, {0x58, 0x2, [@TCA_FLOW_ACT={0x54, 0x9, 0x0, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x1ff, 0x0, 0x20000001, 0x4, 0x2}, 0x1, r8}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x9, 0x8}}]}, 0x90}}, 0x0) (async) r10 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000100), 0x0, 0x0, &(0x7f0000000140)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="400000001000030400"/20, @ANYBLOB="e8df64da2126acda5824cf151200dc4c207041581ac01c91c9884c75", @ANYRES8=r10, @ANYRES32=r10, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x40}}, 0x0) close(r10) 158.306362ms ago: executing program 7 (id=5339): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100000009eb000073797a30000000002c000000030a01020000000000000000010000000900030073797a31000000000900010073797a300000000078000000060a010400000000000000000100000008000b40000000000900010073797a30000000005000048020000180070001007274000014000280080001400000001508000240000000042c0001800900010068617368000000001c00028008000440fffff3e0080002400000000b0800074000000001140000001100010000000000000000000000000a"], 0xec}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x6, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000008a00000095"], &(0x7f0000000380)='GPL\x00'}, 0x90) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r2, {0x0, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0xfffffffd, 0x400, 0xffffffffffffffff, 0x6, 0x7}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x10}, 0x0) r3 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r5, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=@newqdisc={0x38, 0x24, 0xd0f, 0x70bd2c, 0x24dfdbfb, {0x60, 0x0, 0x0, r5, {}, {0x8, 0xa}, {0x1, 0xe}}, [@qdisc_kind_options=@q_pfifo={{0xa}, {0x8, 0x2, 0x100}}]}, 0x38}, 0x1, 0x0, 0x0, 0x55}, 0xc800) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000b40)={@rand_addr, @private, 0x0}, &(0x7f0000000b80)=0xc) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000bc0)={'team0\x00', 0x0}) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xf, "0000000000000000000100000e000058"}}}]}, 0x48}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000c80)={'syztnl2\x00', &(0x7f0000000c00)={'syztnl1\x00', 0x0, 0x8000, 0x1, 0x9, 0xff, {{0xb, 0x4, 0x3, 0x3d, 0x2c, 0x66, 0x0, 0x0, 0x2f, 0x0, @local, @initdev={0xac, 0x1e, 0x5, 0x0}, {[@generic={0x82, 0x3, '\v'}, @rr={0x7, 0x13, 0xa6, [@multicast1, @multicast1, @private=0xa010102, @multicast2]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000d00)={'sit0\x00', &(0x7f0000000cc0)={'syztnl1\x00', 0x0, 0x20, 0x7800, 0x1, 0x8b7, {{0x8, 0x4, 0x1, 0x2a, 0x20, 0x64, 0x0, 0x3, 0x29, 0x0, @multicast1, @dev={0xac, 0x14, 0x14, 0xa}, {[@generic={0x89, 0x9, "439638b3791df9"}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000e00)={'gre0\x00', &(0x7f0000000d40)={'gre0\x00', 0x0, 0x80, 0x7800, 0xed, 0x5, {{0x27, 0x4, 0x0, 0x17, 0x9c, 0x68, 0x0, 0xc, 0x29, 0x0, @loopback, @multicast2, {[@timestamp_addr={0x44, 0x54, 0x66, 0x1, 0xe, [{@loopback, 0xc}, {@empty, 0x400}, {@multicast2, 0x4}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1}, {@private=0xa010100, 0x6}, {@multicast1, 0x7}, {@remote, 0x4}, {@broadcast, 0x1}, {@broadcast, 0x1}, {@broadcast, 0xffff577e}]}, @end, @generic={0x83, 0xf, "54ade3be0ae87776a8bc295f26"}, @generic={0x87, 0xf, "484aa421d9c842fb893d5892bd"}, @ra={0x94, 0x4}, @lsrr={0x83, 0xb, 0x2b, [@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2]}, @generic={0x7, 0x4, "a1a4"}, @noop]}}}}}) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000e40)={'vxcan0\x00', 0x0}) sendmsg$TEAM_CMD_PORT_LIST_GET(r1, &(0x7f0000001a00)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000019c0)={&(0x7f0000000e80)={0xb18, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [{{0x8}, {0x48, 0x2, 0x0, 0x1, [{0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}]}}, {{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x1e8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1f8}}}, {0x6c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x3c, 0x4, [{0x3, 0xfc, 0xe, 0x4}, {0x100, 0x3, 0x5, 0x2b}, {0x5, 0x0, 0xb2, 0xb31}, {0x200, 0x2, 0x6, 0x8}, {0x6, 0x30, 0x9, 0x6}, {0x0, 0x8, 0xf, 0x4}, {0x3, 0x5, 0x0, 0xfffffff5}]}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x7e, 0x5, 0x0, 0x8}, {0x8, 0x0, 0xb, 0xa54be0ef}]}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}, {{0x8}, {0x200, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}, {0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0x800, 0xb, 0x5, 0x2}, {0xe, 0x1, 0x7, 0xa}, {0x8, 0xff, 0x4, 0xff}, {0x4, 0x7, 0x8, 0x1}]}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}]}}, {{0x8}, {0x288, 0x2, 0x0, 0x1, [{0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x7ff, 0x0, 0x3e, 0x7c791b96}, {0x6, 0x1, 0x4, 0x9}, {0x2b, 0x5b, 0x49, 0x6}, {0x1, 0xf9, 0xff, 0xe}, {0x2, 0x10, 0x3, 0x656e69ae}, {0x6, 0x6, 0x1, 0x2}]}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xa5d}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0xdc97, 0x6, 0x5, 0x8000}]}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x81}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x144, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xe}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8, 0x1, r2}, {0xf8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8}}, {0x8, 0x6, r6}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}]}}, {{0x8, 0x1, r7}, {0x90, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r10}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8}, {0xf8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r11}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r12}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r13}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r14}}}]}}]}, 0xb18}, 0x1, 0x0, 0x0, 0x400c040}, 0x20000004) r15 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r15, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r16 = socket(0x1e, 0x1, 0x0) setsockopt$packet_tx_ring(r16, 0x10f, 0x8a, &(0x7f0000000440), 0x10) getsockname$packet(r15, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r17, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800e00010069703665727370616e000000100002800400120006001800177b000008000a00", @ANYRES32=r17], 0x4c}, 0x1, 0x0, 0x0, 0x40001}, 0x4000) 0s ago: executing program 5 (id=5340): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1c}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x9}]}, @NFT_MSG_NEWSETELEM={0x2c, 0x1e, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xc0}}, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) syz_init_net_socket$netrom(0x6, 0x5, 0x0) (async) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r4, 0x8914, &(0x7f0000000000)) ioctl$sock_netrom_SIOCADDRT(r3, 0x890b, &(0x7f0000000280)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bpq0, 0xfffd, 'syz0\x00', @default, 0xfffffdb8, 0x2, [@default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast]}) ioctl$sock_netrom_SIOCADDRT(r3, 0x890b, &(0x7f00000001c0)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x2, 'syz1\x00', @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x5, 0x1, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) ioctl$sock_netrom_SIOCADDRT(r1, 0x890b, &(0x7f0000000280)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bpq0, 0x10000, 'syz0\x00', @default, 0xfffffdb6, 0x2, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) ioctl$sock_netrom_SIOCADDRT(r1, 0x890b, &(0x7f0000000000)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x10001, 'syz1\x00', @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x1, 0x0, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default]}) (async) ioctl$sock_netrom_SIOCADDRT(r1, 0x890b, &(0x7f0000000000)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x10001, 'syz1\x00', @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x1, 0x0, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default]}) r5 = socket$netlink(0x10, 0x3, 0x12) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r5) (async) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r5) kernel console output (not intermixed with test programs): ous mode [ 368.355432][T17907] bond3: (slave wireguard0): Enslaving as an active interface with an up link [ 368.385955][T17920] tipc: Enabled bearer , priority 0 [ 368.395754][T17920] syzkaller0: entered promiscuous mode [ 368.398304][T17917] netlink: 'syz.5.3317': attribute type 11 has an invalid length. [ 368.412367][T17920] syzkaller0: entered allmulticast mode [ 368.440802][T17921] tipc: Resetting bearer [ 368.465057][T17920] dvmrp1: entered allmulticast mode [ 368.482684][T17919] tipc: Resetting bearer [ 368.576439][T17919] tipc: Disabling bearer [ 369.117634][T17960] syzkaller1: entered promiscuous mode [ 369.129619][T17960] syzkaller1: entered allmulticast mode [ 369.422738][T17975] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3338'. [ 369.642261][T17989] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3340'. [ 369.832531][T18004] netlink: 'syz.2.3345': attribute type 12 has an invalid length. [ 369.861063][T17994] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3343'. [ 369.907995][T17994] macsec1: entered promiscuous mode [ 369.913419][T17994] bridge0: entered promiscuous mode [ 369.945521][T17994] macsec1: entered allmulticast mode [ 369.951460][T17994] bridge0: entered allmulticast mode [ 369.960121][T18007] netlink: 'syz.1.3346': attribute type 11 has an invalid length. [ 369.969936][T18007] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3346'. [ 369.983686][T17994] bridge0: port 4(macsec1) entered blocking state [ 370.011034][T17994] bridge0: port 4(macsec1) entered disabled state [ 370.036970][T17994] bridge0: left allmulticast mode [ 370.042112][T17994] bridge0: left promiscuous mode [ 370.073122][T18011] netem: change failed [ 370.075042][T18017] netlink: 'syz.6.3348': attribute type 1 has an invalid length. [ 370.086054][T18017] netlink: 224 bytes leftover after parsing attributes in process `syz.6.3348'. [ 370.133916][T18018] pim6reg: entered allmulticast mode [ 370.140239][T18017] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 370.150064][T18018] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 370.152441][T18015] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3346'. [ 370.268328][T18021] pim6reg: left allmulticast mode [ 370.288520][T18030] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3350'. [ 370.927970][T18057] sock: sock_set_timeout: `syz.7.3357' (pid 18057) tries to set negative timeout [ 371.025510][T18061] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3359'. [ 371.068374][T18060] syzkaller1: entered promiscuous mode [ 371.075004][T18060] syzkaller1: entered allmulticast mode [ 371.440143][T18076] netlink: 'syz.5.3364': attribute type 4 has an invalid length. [ 371.462516][T18078] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3365'. [ 371.529964][T18083] netlink: 'syz.5.3364': attribute type 4 has an invalid length. [ 371.579756][T18082] netlink: 44 bytes leftover after parsing attributes in process `syz.6.3365'. [ 372.122406][T18108] netlink: 596 bytes leftover after parsing attributes in process `syz.7.3369'. [ 372.431040][T18118] netlink: 48 bytes leftover after parsing attributes in process `syz.5.3372'. [ 372.766439][T18141] nbd: couldn't find a device at index 0 [ 373.281056][T18167] netlink: 'syz.2.3384': attribute type 10 has an invalid length. [ 373.293731][T18167] bridge0: port 2(bridge_slave_1) entered disabled state [ 373.308754][T18167] bridge_slave_1: left allmulticast mode [ 373.314568][T18167] bridge_slave_1: left promiscuous mode [ 373.345152][T18167] bridge0: port 2(bridge_slave_1) entered disabled state [ 373.436602][T18169] IPVS: set_ctl: invalid protocol: 136 224.0.0.2:20001 [ 373.482328][T18167] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 373.555234][T18169] IPVS: set_ctl: invalid protocol: 136 224.0.0.2:20001 [ 373.727453][T18187] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 373.878287][T18194] xt_addrtype: ipv6 does not support BROADCAST matching [ 373.880110][T18187] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 374.150399][T18206] ªªªªªªZ7nz>RAÌ speed is unknown, defaulting to 1000 [ 374.220522][T18210] netlink: 'syz.2.3400': attribute type 1 has an invalid length. [ 374.242097][T18210] netlink: 'syz.2.3400': attribute type 3 has an invalid length. [ 374.250195][T18210] NCSI netlink: No device for ifindex 813332851 [ 374.273640][T18210] netlink: 'syz.2.3400': attribute type 1 has an invalid length. [ 374.283077][T18210] netlink: 'syz.2.3400': attribute type 3 has an invalid length. [ 374.291213][T18210] NCSI netlink: No device for ifindex 813332851 [ 374.422525][ T30] audit: type=1107 audit(1761249952.754:6): pid=18217 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='ýOm<UQŠ , priority 0 [ 375.959207][T18293] syzkaller0: entered promiscuous mode [ 375.968405][T18293] syzkaller0: entered allmulticast mode [ 376.082152][T18293] tipc: Resetting bearer [ 376.120587][T18300] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 376.144024][T18284] tipc: Resetting bearer [ 376.154292][T18301] netlink: 48 bytes leftover after parsing attributes in process `syz.7.3427'. [ 376.189681][T18284] tipc: Disabling bearer [ 376.203415][T18306] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3429'. [ 376.237696][T18303] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 376.317063][T18306] vxcan4: entered allmulticast mode [ 376.354627][T18309] bond5: (slave gretap2): making interface the new active one [ 376.364925][T18309] bond5: (slave gretap2): Enslaving as an active interface with an up link [ 376.645608][T18331] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 376.670386][T18335] netlink: 68 bytes leftover after parsing attributes in process `syz.5.3436'. [ 376.795584][T18317] bridge0: port 2(bridge_slave_1) entered disabled state [ 376.802970][T18317] bridge0: port 1(bridge_slave_0) entered disabled state [ 377.166652][T18317] bond1: left promiscuous mode [ 377.175966][T18317] ip6gre1: left allmulticast mode [ 377.183719][T18317] vlan2: left promiscuous mode [ 377.189956][T18317] bridge0: left promiscuous mode [ 377.233913][T18320] bridge0: port 3(batadv1) entered blocking state [ 377.242632][T18320] bridge0: port 3(batadv1) entered disabled state [ 377.251067][T18320] batadv1: entered allmulticast mode [ 377.259072][T18320] batadv1: entered promiscuous mode [ 377.305122][ T50] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 377.343753][ T50] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 377.425082][ T50] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 377.448151][T18339] can: request_module (can-proto-4) failed. [ 377.460191][ T50] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 377.621142][T18353] netlink: 52 bytes leftover after parsing attributes in process `syz.5.3441'. [ 377.631122][T18352] delete_channel: no stack [ 377.732062][T18357] validate_nla: 1 callbacks suppressed [ 377.732096][T18357] netlink: 'syz.2.3442': attribute type 2 has an invalid length. [ 377.746708][ T3561] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 377.756009][ T3561] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 377.799402][T18357] tipc: Enabling of bearer rejected, failed to enable media [ 377.820366][T18363] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3445'. [ 378.068030][T18368] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3446'. [ 378.310220][T18396] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3452'. [ 378.376370][T18401] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_rx_wq": -EINTR [ 378.640368][T18412] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 378.709395][T18417] netlink: 84 bytes leftover after parsing attributes in process `syz.5.3458'. [ 378.912625][T18428] netlink: 'syz.7.3462': attribute type 1 has an invalid length. [ 378.959854][T18427] netlink: 'syz.6.3461': attribute type 2 has an invalid length. [ 384.038720][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 405.217552][T18435] __nla_validate_parse: 3 callbacks suppressed [ 405.217588][T18435] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3464'. [ 405.293084][T18437] bond6: option arp_all_targets: invalid value (18446744073709551613) [ 405.357836][T18437] bond6 (unregistering): Released all slaves [ 405.846030][T18461] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3471'. [ 405.887895][T18461] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3471'. [ 405.902665][T18473] ieee802154 phy1 wpan1: encryption failed: -22 [ 405.904198][T18472] netlink: 84 bytes leftover after parsing attributes in process `syz.7.3476'. [ 405.932276][T18461] netlink: 'syz.5.3471': attribute type 14 has an invalid length. [ 405.967347][T18461] netlink: 'syz.5.3471': attribute type 13 has an invalid length. [ 406.209333][T18487] netlink: 'syz.6.3481': attribute type 1 has an invalid length. [ 406.719178][T18517] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3489'. [ 406.820226][T18526] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3492'. [ 406.931327][T18533] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3493'. [ 407.329971][T18546] bond6: Unable to set down delay as MII monitoring is disabled [ 407.354497][T18546] bond6 (unregistering): Released all slaves [ 407.459760][T18561] netlink: 'syz.7.3498': attribute type 1 has an invalid length. [ 407.501782][T18561] netlink: 232 bytes leftover after parsing attributes in process `syz.7.3498'. [ 407.509087][T18562] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3498'. [ 407.524817][T18561] NCSI netlink: No device for ifindex 0 [ 407.768044][T18573] netlink: 620 bytes leftover after parsing attributes in process `syz.5.3502'. [ 407.978053][T18594] netlink: 'syz.1.3507': attribute type 1 has an invalid length. [ 408.148829][T18606] IPVS: Unknown mcast interface: netpci0 [ 408.537368][T18625] netlink: 'syz.6.3520': attribute type 8 has an invalid length. [ 408.649421][T18631] xt_SECMARK: invalid mode: 9 [ 408.864466][T18648] IPVS: sync thread started: state = BACKUP, mcast_ifn = tunl0, syncid = 4, id = 0 [ 408.894311][T18645] mac80211_hwsim hwsim33 wlan1: entered allmulticast mode [ 409.773783][T18693] netlink: 'syz.1.3539': attribute type 1 has an invalid length. [ 410.000297][ T30] audit: type=1107 audit(1761249988.334:7): pid=18711 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 410.162245][T18727] netlink: zone id is out of range [ 410.277150][T18727] netlink: zone id is out of range [ 410.297610][T18731] __nla_validate_parse: 7 callbacks suppressed [ 410.297634][T18731] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3553'. [ 410.370482][T18731] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3553'. [ 410.382748][T18731] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3553'. [ 410.478073][T18743] netlink: 'syz.2.3558': attribute type 33 has an invalid length. [ 410.704371][T18758] tipc: Enabling of bearer rejected, media not registered [ 410.720770][T18760] netlink: 'syz.5.3562': attribute type 21 has an invalid length. [ 410.801275][T18760] bond6: option lacp_rate: mode dependency failed, not supported in mode broadcast(3) [ 410.839784][T18760] bond6 (unregistering): Released all slaves [ 410.910023][T18766] tipc: Enabled bearer , priority 0 [ 410.946564][T18775] netlink: 'syz.6.3567': attribute type 1 has an invalid length. [ 410.999937][T18775] 8021q: adding VLAN 0 to HW filter on device bond3 [ 411.040725][T18765] tipc: Disabling bearer [ 411.070983][T18782] tipc: Enabled bearer , priority 0 [ 411.087155][T18782] syzkaller0: entered promiscuous mode [ 411.092792][T18782] syzkaller0: entered allmulticast mode [ 411.185432][T18782] tipc: Resetting bearer [ 411.200182][T18781] tipc: Resetting bearer [ 411.267129][T18781] tipc: Disabling bearer [ 411.402205][T18794] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3574'. [ 411.456331][T18794] netlink: zone id is out of range [ 411.461525][T18794] netlink: zone id is out of range [ 411.469212][T18802] xt_policy: too many policy elements [ 411.529503][T18794] netlink: zone id is out of range [ 411.560417][T18794] netlink: zone id is out of range [ 411.717853][T18822] netlink: 9 bytes leftover after parsing attributes in process `syz.7.3582'. [ 411.758881][T18828] netlink: 104 bytes leftover after parsing attributes in process `syz.2.3583'. [ 411.816384][T18832] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3585'. [ 411.924561][T18838] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3587'. [ 412.148210][T18857] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3593'. [ 412.595311][T18877] openvswitch: netlink: Missing key (keys=40, expected=80) [ 412.767869][T18880] netlink: 348 bytes leftover after parsing attributes in process `syz.5.3600'. [ 413.129768][T18899] bridge_slave_0: invalid flags given to default FDB implementation [ 413.537167][T18913] ªªªªªªZ7nz>RAÌ speed is unknown, defaulting to 1000 [ 413.678790][T18926] sock: sock_timestamping_bind_phc: sock not bind to device [ 413.697223][T18925] sock: sock_timestamping_bind_phc: sock not bind to device [ 413.920109][T18940] netlink: 'syz.2.3618': attribute type 29 has an invalid length. [ 414.008468][T18940] syzkaller1: entered promiscuous mode [ 414.032476][T18940] syzkaller1: entered allmulticast mode [ 414.430320][T18960] bond2: entered promiscuous mode [ 414.437427][T18960] bond2: entered allmulticast mode [ 414.444145][T18960] 8021q: adding VLAN 0 to HW filter on device bond2 [ 414.607538][T18963] netlink: 'syz.5.3626': attribute type 13 has an invalid length. [ 414.761455][T18977] bond4: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 414.888588][T18983] xt_hashlimit: Unknown mode mask C4, kernel too old? [ 415.095606][T18998] netlink: 'syz.6.3638': attribute type 21 has an invalid length. [ 415.508506][T19023] IPVS: set_ctl: invalid protocol: 22 100.1.1.1:20002 [ 415.528901][T19023] raw_sendmsg: syz.6.3644 forgot to set AF_INET. Fix it! [ 415.650422][T19036] netlink: 'syz.2.3645': attribute type 1 has an invalid length. [ 415.659565][T19037] __nla_validate_parse: 12 callbacks suppressed [ 415.659586][T19037] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3646'. [ 415.706799][T19036] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3645'. [ 415.732534][T19025] syzkaller0: entered promiscuous mode [ 415.742072][T19028] netlink: 256 bytes leftover after parsing attributes in process `syz.5.3643'. [ 415.792557][T19025] syzkaller0: entered allmulticast mode [ 415.797810][T19042] xt_hashlimit: overflow, try lower: 18446744073709551613/4 [ 415.822641][T19044] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3650'. [ 418.047896][T19068] tipc: Enabled bearer , priority 0 [ 418.110427][T19068] tipc: Disabling bearer [ 418.207156][T19087] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 418.316640][T19100] netlink: 'syz.7.3660': attribute type 11 has an invalid length. [ 418.335395][T19100] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3660'. [ 418.583934][T19111] netlink: 'syz.2.3665': attribute type 11 has an invalid length. [ 418.608975][T19111] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3665'. [ 418.754605][T19119] tipc: Enabled bearer , priority 0 [ 418.769433][T19119] syzkaller0: entered promiscuous mode [ 418.775040][T19119] syzkaller0: entered allmulticast mode [ 418.781315][T19122] netlink: 'syz.1.3669': attribute type 1 has an invalid length. [ 418.800969][T19122] netlink: 'syz.1.3669': attribute type 2 has an invalid length. [ 418.801730][T19120] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3666'. [ 418.827815][T19120] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3666'. [ 418.848185][T19119] tipc: Resetting bearer [ 418.861918][T19119] netlink: 32 bytes leftover after parsing attributes in process `syz.6.3668'. [ 418.908399][T19120] netlink: 156 bytes leftover after parsing attributes in process `syz.7.3666'. [ 418.923692][T19118] tipc: Resetting bearer [ 418.951878][T19118] tipc: Disabling bearer [ 419.019383][T17774] IPVS: starting estimator thread 0... [ 419.029873][T19127] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 419.136093][T19131] IPVS: using max 24 ests per chain, 57600 per kthread [ 419.616897][T19160] netlink: 'syz.1.3683': attribute type 33 has an invalid length. [ 420.589244][T19214] ªªªªªªZ7nz>RAÌ speed is unknown, defaulting to 1000 [ 420.784297][T19221] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 420.952082][T19231] __nla_validate_parse: 11 callbacks suppressed [ 420.952103][T19231] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3705'. [ 420.970566][T19231] batadv0: left allmulticast mode [ 420.978429][T19231] batadv0: left promiscuous mode [ 420.984016][T19231] bridge0: port 3(batadv0) entered disabled state [ 421.031699][T19231] bridge_slave_1: left allmulticast mode [ 421.040339][T19231] bridge_slave_1: left promiscuous mode [ 421.075545][T19231] bridge0: port 2(bridge_slave_1) entered disabled state [ 421.103247][T19231] bridge_slave_0: left allmulticast mode [ 421.114050][T19231] bridge_slave_0: left promiscuous mode [ 421.120093][T19231] bridge0: port 1(bridge_slave_0) entered disabled state [ 421.120384][T19237] IPVS: length: 239 != 24 [ 421.152759][T19231] bond0: (slave bridge0): Releasing backup interface [ 421.192847][T19239] netlink: 5 bytes leftover after parsing attributes in process `syz.5.3707'. [ 421.249279][T19239] 0ªî{X¹¦: renamed from gretap0 [ 421.264248][T19239] 0ªî{X¹¦: entered allmulticast mode [ 421.273676][T19239] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 421.750793][T19266] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3714'. [ 421.899343][T19266] bond6 (unregistering): Released all slaves [ 421.964163][T19276] netlink: 'syz.7.3718': attribute type 7 has an invalid length. [ 421.995713][T19272] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3716'. [ 422.090018][T19277] netlink: 112 bytes leftover after parsing attributes in process `syz.7.3718'. [ 422.253760][T19288] netlink: 'syz.2.3722': attribute type 4 has an invalid length. [ 422.441479][T19306] netlink: 284 bytes leftover after parsing attributes in process `syz.5.3728'. [ 422.458440][T19306] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3728'. [ 422.637580][T19310] netlink: 36 bytes leftover after parsing attributes in process `syz.6.3730'. [ 423.276124][T19337] netlink: 'syz.1.3738': attribute type 12 has an invalid length. [ 423.757038][T19350] netlink: 'syz.1.3741': attribute type 23 has an invalid length. [ 426.218771][T19356] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3746'. [ 426.244836][T19356] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3746'. [ 426.253876][T19356] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3746'. [ 426.273987][T19360] netlink: 96 bytes leftover after parsing attributes in process `syz.1.3745'. [ 426.319054][T19360] 8021q: VLANs not supported on sit0 [ 426.473920][T19376] tipc: Enabled bearer , priority 0 [ 426.500140][T19376] mac80211_hwsim hwsim25 syzkaller0: entered promiscuous mode [ 426.530373][T19376] mac80211_hwsim hwsim25 syzkaller0: entered allmulticast mode [ 426.599135][T19388] netlink: 'syz.2.3753': attribute type 11 has an invalid length. [ 426.642553][T19390] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3754'. [ 426.661212][T19391] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3753'. [ 426.690964][T19376] tipc: Resetting bearer [ 426.701989][T19390] netlink: 'syz.1.3754': attribute type 1 has an invalid length. [ 426.717257][T19390] netlink: 'syz.1.3754': attribute type 2 has an invalid length. [ 426.995731][T19407] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3758'. [ 427.017318][T19407] vxcan2: entered allmulticast mode [ 427.114031][T19416] tipc: Resetting bearer [ 427.617646][T19440] netlink: 'syz.1.3766': attribute type 83 has an invalid length. [ 427.651293][T19446] netlink: 84 bytes leftover after parsing attributes in process `syz.5.3768'. [ 427.673613][T19437] syzkaller1: entered promiscuous mode [ 427.680323][T19437] syzkaller1: entered allmulticast mode [ 427.864125][T19455] netlink: 'syz.6.3770': attribute type 29 has an invalid length. [ 427.894361][T19458] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3773'. [ 427.909419][T19455] netlink: 'syz.6.3770': attribute type 29 has an invalid length. [ 428.157012][T19473] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3777'. [ 428.414443][T19487] x_tables: duplicate underflow at hook 1 [ 428.999796][ T8932] IPVS: starting estimator thread 0... [ 429.011565][T19509] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 429.134782][T19520] IPVS: using max 25 ests per chain, 60000 per kthread [ 429.287337][T19538] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 429.584591][T19555] xt_l2tp: v2 doesn't support IP mode [ 429.833254][T19570] netlink: 'syz.7.3803': attribute type 10 has an invalid length. [ 430.144290][T19588] netlink: 'syz.7.3808': attribute type 1 has an invalid length. [ 430.160019][T19590] netlink: 'syz.6.3809': attribute type 23 has an invalid length. [ 430.235765][T19596] bond4: (slave gretap1): making interface the new active one [ 430.244026][T19596] bond4: (slave gretap1): Enslaving as an active interface with an up link [ 430.266707][T19593] netlink: 'syz.2.3811': attribute type 21 has an invalid length. [ 430.275128][T19593] netlink: 'syz.2.3811': attribute type 22 has an invalid length. [ 430.283005][T19593] netlink: 'syz.2.3811': attribute type 23 has an invalid length. [ 430.309800][T19593] netlink: 'syz.2.3811': attribute type 25 has an invalid length. [ 430.340483][T19593] netlink: 'syz.2.3811': attribute type 26 has an invalid length. [ 430.357857][T19602] netlink: 'syz.1.3810': attribute type 9 has an invalid length. [ 430.957406][T19630] bond4: Removing last ns target with arp_interval on [ 431.098633][T19646] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 431.172278][T19651] syzkaller0: entered promiscuous mode [ 431.194945][T19651] syzkaller0: entered allmulticast mode [ 431.438755][T19666] __nla_validate_parse: 15 callbacks suppressed [ 431.438778][T19666] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3836'. [ 431.748672][T19683] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3834'. [ 431.758219][T19689] C: renamed from lo [ 431.778545][T19689] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 431.912664][T19675] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3835'. [ 432.019642][T19703] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3842'. [ 432.035103][T19703] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3842'. [ 432.077421][T19703] netlink: 31 bytes leftover after parsing attributes in process `syz.1.3842'. [ 432.092538][T19703] netlink: 'syz.1.3842': attribute type 2 has an invalid length. [ 432.117817][T19703] netlink: 31 bytes leftover after parsing attributes in process `syz.1.3842'. [ 432.155548][T19709] IPv6: sit1: Disabled Multicast RS [ 432.170341][T19709] sit1: entered allmulticast mode [ 432.192560][T19711] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3845'. [ 432.340182][T19713] syzkaller0: entered allmulticast mode [ 432.361489][T19718] netlink: 92 bytes leftover after parsing attributes in process `syz.2.3848'. [ 432.600447][T19724] team0: Device ip6gre2 is of different type [ 432.808961][T19738] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3854'. [ 432.818357][T19735] tipc: Enabled bearer , priority 0 [ 432.836034][T19735] syzkaller0: entered promiscuous mode [ 432.841676][T19735] syzkaller0: entered allmulticast mode [ 432.869942][T19735] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 432.960373][T19735] tipc: Resetting bearer [ 433.008630][T19733] tipc: Resetting bearer [ 433.044565][T19733] tipc: Disabling bearer [ 433.313429][T19760] tipc: Enabled bearer , priority 0 [ 433.345803][T19760] syzkaller0: entered promiscuous mode [ 433.354415][T19760] syzkaller0: entered allmulticast mode [ 433.382412][T19760] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 433.495444][T19760] tipc: Resetting bearer [ 433.530836][T19758] tipc: Resetting bearer [ 433.621764][T19758] tipc: Disabling bearer [ 433.955378][T19781] hsr_slave_0 (unregistering): left promiscuous mode [ 434.542700][ T24] IPVS: starting estimator thread 0... [ 434.644796][T19834] IPVS: using max 26 ests per chain, 62400 per kthread [ 434.767372][ T1154] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 434.783817][ T1154] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 434.819118][ T1154] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 434.841225][ T1154] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 435.472647][T19884] ip6t_srh: unknown srh invflags 4000 [ 435.673297][T19892] bond6: option arp_all_targets: invalid value (18446744073709551613) [ 435.703056][T19892] bond6 (unregistering): Released all slaves [ 435.800589][T19897] bond6: entered promiscuous mode [ 435.806324][T19897] bond6: entered allmulticast mode [ 435.812925][T19897] 8021q: adding VLAN 0 to HW filter on device bond6 [ 445.468700][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 465.951983][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 465.965017][ T1154] bridge_slave_1: left allmulticast mode [ 465.970719][ T1154] bridge_slave_1: left promiscuous mode [ 465.977523][ T1154] bridge0: port 2(bridge_slave_1) entered disabled state [ 465.986557][ T1154] bridge_slave_0: left allmulticast mode [ 465.992219][ T1154] bridge_slave_0: left promiscuous mode [ 466.000136][ T1154] bridge0: port 1(bridge_slave_0) entered disabled state [ 466.082620][ T1154] bond3 (unregistering): (slave ip6gretap1): Removing an active aggregator [ 466.094466][ T1154] bond3 (unregistering): (slave ip6gretap1): Releasing backup interface [ 466.568247][ T1154] bond1 (unregistering): (slave bridge3): Releasing active interface [ 467.055362][ T1154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 467.064272][ T1154] bond_slave_0: left promiscuous mode [ 467.071798][ T1154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 467.081712][ T1154] bond_slave_1: left promiscuous mode [ 467.088047][ T1154] bond0 (unregistering): Released all slaves [ 467.104093][ T1154] bond1 (unregistering): Released all slaves [ 467.218316][ T1154] bond2 (unregistering): Released all slaves [ 467.325327][ T1154] bond3 (unregistering): Released all slaves [ 467.433859][ T1154] bond4 (unregistering): Released all slaves [ 467.447950][ T1154] bond5 (unregistering): Released all slaves [ 467.465598][ T1154] bond6 (unregistering): Released all slaves [ 467.575629][ T1154] bond7 (unregistering): Released all slaves [ 467.679992][ T1154] bond8 (unregistering): Released all slaves [ 467.799668][ T1154] 9: left promiscuous mode [ 467.856438][ T1154] tipc: Left network mode [ 468.056709][ T1154] hsr_slave_0: left promiscuous mode [ 468.062734][ T1154] hsr_slave_1: left promiscuous mode [ 468.075577][ T1154] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 468.083533][ T1154] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 468.121912][ T1154] pimreg (unregistering): left allmulticast mode [ 468.523851][ T1154] team0 (unregistering): Port device team_slave_1 removed [ 468.566718][ T1154] team0 (unregistering): Port device team_slave_0 removed [ 494.423379][T19935] __nla_validate_parse: 9 callbacks suppressed [ 494.423400][T19935] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3913'. [ 494.543049][T19943] validate_nla: 2 callbacks suppressed [ 494.543071][T19943] netlink: 'syz.5.3915': attribute type 29 has an invalid length. [ 494.729941][T19954] sctp: [Deprecated]: syz.2.3917 (pid 19954) Use of struct sctp_assoc_value in delayed_ack socket option. [ 494.729941][T19954] Use struct sctp_sack_info instead [ 494.854153][T19963] team0: No ports can be present during mode change [ 494.879712][T19955] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3918'. [ 494.895716][T19955] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3918'. [ 495.046522][T19972] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3924'. [ 495.075653][T19975] netem: change failed [ 495.131265][T19977] netlink: 'syz.7.3927': attribute type 1 has an invalid length. [ 495.201266][T19983] ipt_ECN: cannot use operation on non-tcp rule [ 495.215078][T19989] 8021q: adding VLAN 0 to HW filter on device bond5 [ 495.313712][T19987] bond3: entered promiscuous mode [ 495.322054][T19987] bond3: entered allmulticast mode [ 495.329319][T19987] 8021q: adding VLAN 0 to HW filter on device bond3 [ 495.362750][T19977] veth7: entered promiscuous mode [ 495.377155][T19999] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 496.348789][T20029] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3941'. [ 496.438785][T20033] ip6t_srh: unknown srh invflags 4000 [ 496.457657][T20039] netlink: 43 bytes leftover after parsing attributes in process `syz.5.3944'. [ 496.702411][T20055] netlink: 'syz.6.3946': attribute type 1 has an invalid length. [ 496.756963][T20054] netlink: 'syz.1.3948': attribute type 50 has an invalid length. [ 496.821092][T20063] ipt_ECN: cannot use operation on non-tcp rule [ 496.866680][T20055] 8021q: adding VLAN 0 to HW filter on device bond6 [ 496.871648][T20068] netlink: 'syz.7.3949': attribute type 5 has an invalid length. [ 496.898214][T20054] netlink: 'syz.1.3948': attribute type 50 has an invalid length. [ 496.926209][T20072] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3952'. [ 496.935810][T20072] netlink: zone id is out of range [ 496.941230][T20073] ipt_ECN: cannot use operation on non-tcp rule [ 496.949003][T20072] netlink: zone id is out of range [ 496.967702][T20050] vlan4: entered promiscuous mode [ 496.988848][T20050] bond6: entered promiscuous mode [ 497.004521][T20050] vlan4: entered allmulticast mode [ 497.023296][T20050] bond6: entered allmulticast mode [ 497.038191][T20054] netlink: 'syz.1.3948': attribute type 50 has an invalid length. [ 497.057884][T20054] netlink: 'syz.1.3948': attribute type 50 has an invalid length. [ 497.079082][T20054] netlink: 'syz.1.3948': attribute type 50 has an invalid length. [ 497.150378][T20054] netlink: 'syz.1.3948': attribute type 50 has an invalid length. [ 497.188077][T20084] netlink: 65047 bytes leftover after parsing attributes in process `syz.5.3955'. [ 497.554047][T20107] netlink: 84 bytes leftover after parsing attributes in process `syz.2.3962'. [ 497.575806][T20107] netlink: 256 bytes leftover after parsing attributes in process `syz.2.3962'. [ 498.847077][T20176] smc: net device vcan0 applied user defined pnetid SYZ1 [ 499.563992][T20221] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 499.808555][T20238] netlink: zone id is out of range [ 499.823393][T20238] validate_nla: 34 callbacks suppressed [ 499.823416][T20238] netlink: 'syz.6.3989': attribute type 2 has an invalid length. [ 499.909603][T20248] __nla_validate_parse: 2 callbacks suppressed [ 499.909625][T20248] netlink: 168 bytes leftover after parsing attributes in process `syz.7.3994'. [ 500.017143][T20255] faux_driver regulatory: loading /lib/firmware/regulatory.db.p7s failed with error -4 [ 500.039867][T20255] faux_driver regulatory: Direct firmware load for regulatory.db.p7s failed with error -4 [ 500.066355][T20255] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db.p7s [ 500.474147][T20289] netlink: 'syz.6.4006': attribute type 29 has an invalid length. [ 500.550929][T20295] sctp_setsockopt_delayed_ack: 23 callbacks suppressed [ 500.550951][T20295] sctp: [Deprecated]: syz.2.4008 (pid 20295) Use of struct sctp_assoc_value in delayed_ack socket option. [ 500.550951][T20295] Use struct sctp_sack_info instead [ 500.709512][T20301] veth3: entered promiscuous mode [ 500.714677][T20301] veth3: entered allmulticast mode [ 500.791166][T20301] veth5: entered promiscuous mode [ 500.819495][T20301] veth5: entered allmulticast mode [ 500.934263][T20319] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4016'. [ 501.063051][T20327] netlink: 'syz.2.4019': attribute type 9 has an invalid length. [ 501.342141][T20341] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4022'. [ 501.900831][T20368] netlink: 'syz.2.4029': attribute type 1 has an invalid length. [ 502.003146][T20374] xt_NFQUEUE: number of total queues is 0 [ 502.110156][T20377] netlink: 68 bytes leftover after parsing attributes in process `syz.1.4033'. [ 502.325140][T20391] tc_dump_action: action bad kind [ 502.360149][T20391] netlink: zone id is out of range [ 502.375680][T20391] netlink: get zone limit has 4 unknown bytes [ 502.707537][T20411] netlink: 'syz.7.4041': attribute type 1 has an invalid length. [ 502.722613][T20411] netlink: 224 bytes leftover after parsing attributes in process `syz.7.4041'. [ 502.928234][T20400] bridge0: port 1(bridge_slave_0) entered disabled state [ 503.090363][T20400] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 503.125251][T20400] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 503.303362][T20406] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 503.344837][ T12] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 503.377711][ T12] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 503.436643][ T12] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 503.466960][ T12] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 503.517327][T20425] netlink: 'syz.5.4045': attribute type 7 has an invalid length. [ 503.856887][T20443] netlink: 48 bytes leftover after parsing attributes in process `syz.7.4051'. [ 503.872253][T20441] tipc: Enabling of bearer rejected, already enabled [ 503.951796][T20448] netlink: 165 bytes leftover after parsing attributes in process `syz.2.4053'. [ 503.966660][T20448] netlink: 'syz.2.4053': attribute type 1 has an invalid length. [ 504.023855][T20448] bond4: entered promiscuous mode [ 504.031127][T20451] xt_hashlimit: invalid rate [ 504.048537][T20448] 8021q: adding VLAN 0 to HW filter on device bond4 [ 504.120592][T20452] bond4: (slave bridge2): making interface the new active one [ 504.128427][T20452] bridge2: entered promiscuous mode [ 504.135606][T20452] bond4: (slave bridge2): Enslaving as an active interface with an up link [ 504.878658][T20492] netlink: 64 bytes leftover after parsing attributes in process `syz.7.4066'. [ 505.011097][T20498] mac80211_hwsim hwsim27 ÿ: renamed from wlan1 [ 506.013175][T20541] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4079'. [ 506.094563][T20547] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4079'. [ 506.131006][T20547] openvswitch: netlink: Flow key attr not present in new flow. [ 506.146139][T20549] netlink: 'syz.6.4081': attribute type 1 has an invalid length. [ 506.174650][T20549] netlink: 228 bytes leftover after parsing attributes in process `syz.6.4081'. [ 506.198323][T20548] netlink: 'syz.7.4080': attribute type 30 has an invalid length. [ 506.426490][T20567] netlink: 'syz.2.4088': attribute type 16 has an invalid length. [ 506.444783][T20567] netlink: 'syz.2.4088': attribute type 3 has an invalid length. [ 506.454308][T20567] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4088'. [ 506.510956][T20570] openvswitch: netlink: Missing valid actions attribute. [ 506.537496][T20572] netlink: 144 bytes leftover after parsing attributes in process `syz.7.4091'. [ 506.537857][T20570] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 506.692950][T20579] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 506.857104][T20593] netlink: 2 bytes leftover after parsing attributes in process `syz.6.4096'. [ 506.917369][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 507.016236][T20601] netlink: 48 bytes leftover after parsing attributes in process `syz.7.4101'. [ 507.045801][T20607] syzkaller0: entered promiscuous mode [ 507.052038][T20607] syzkaller0: entered allmulticast mode [ 507.273883][T20621] netem: change failed [ 507.954486][T20661] netlink: 76 bytes leftover after parsing attributes in process `syz.1.4118'. [ 508.143743][T20670] syzkaller0: entered promiscuous mode [ 508.149964][T20670] syzkaller0: entered allmulticast mode [ 508.170647][T20665] syzkaller0: entered promiscuous mode [ 508.179648][T20665] syzkaller0: entered allmulticast mode [ 508.338199][T20680] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4123'. [ 508.674124][T20700] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4128'. [ 509.127140][T20720] x_tables: unsorted underflow at hook 3 [ 509.293866][ T30] audit: type=1107 audit(1761250087.624:8): pid=20724 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='Ù‹5ž÷Œ•%èÍUýAÊÃËÙ ë0ä™l>Æ¿Ý•/Öÿ Ž6òŠ¨Šç›' [ 509.488221][T20738] netlink: 'syz.1.4142': attribute type 32 has an invalid length. [ 509.549451][T20741] netlink: 'syz.7.4144': attribute type 4 has an invalid length. [ 509.589049][T20741] `: renamed from bond0 [ 509.809980][T20756] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 510.015104][T20765] netlink: 'syz.6.4149': attribute type 16 has an invalid length. [ 510.038122][T20765] netlink: 'syz.6.4149': attribute type 3 has an invalid length. [ 510.060329][ T60] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 510.079983][ T60] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 510.101092][ T60] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 510.120145][ T60] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 510.360006][T20778] bond5: option miimon: invalid value (18446744073709551585) [ 510.368370][T20778] bond5: option miimon: allowed values 0 - 2147483647 [ 510.473013][T20778] bond5 (unregistering): Released all slaves [ 510.656854][T20796] xt_cgroup: invalid path, errno=-2 [ 510.855812][T20807] netlink: 'syz.2.4163': attribute type 21 has an invalid length. [ 510.866911][T20807] netlink: 'syz.2.4163': attribute type 6 has an invalid length. [ 511.094180][T20825] 8021q: adding VLAN 0 to HW filter on device bond7 [ 511.149631][T20825] bond7: (slave veth7): Enslaving as an active interface with a down link [ 511.163653][T20829] __nla_validate_parse: 13 callbacks suppressed [ 511.163674][T20829] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4168'. [ 511.184204][T20829] validate_nla: 1 callbacks suppressed [ 511.184222][T20829] netlink: 'syz.1.4168': attribute type 5 has an invalid length. [ 511.201023][T20829] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4168'. [ 511.211198][T20825] veth9: entered promiscuous mode [ 511.219929][T20825] bond7: (slave veth9): Enslaving as an active interface with a down link [ 511.238204][T20829] geneve2: entered promiscuous mode [ 511.243621][T20829] geneve2: entered allmulticast mode [ 511.251274][ T993] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 511.351165][ T993] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 511.364129][ T993] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 511.378792][ T993] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 511.392344][T20841] netlink: 'syz.2.4171': attribute type 10 has an invalid length. [ 511.465623][T20845] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4172'. [ 511.733639][T20857] pim6reg: entered allmulticast mode [ 511.778130][T20862] netlink: 60 bytes leftover after parsing attributes in process `syz.5.4178'. [ 511.823347][T20862] netlink: 60 bytes leftover after parsing attributes in process `syz.5.4178'. [ 511.839714][T20862] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4178'. [ 511.939906][T20867] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4180'. [ 511.987414][T20867] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 512.046116][T20867] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 512.068265][T20867] gretap1: entered promiscuous mode [ 512.075212][T20867] gretap1: entered allmulticast mode [ 512.231902][T20885] netlink: 36 bytes leftover after parsing attributes in process `syz.7.4185'. [ 512.269767][T20886] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4187'. [ 512.342688][T20886] sch_tbf: burst 0 is lower than device lo mtu (11337746) ! [ 512.459813][T20894] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4190'. [ 512.554180][T20903] ip6erspan0: entered promiscuous mode [ 512.714016][T20908] IPVS: set_ctl: invalid protocol: 115 224.0.0.1:20000 [ 513.566074][T20964] siw: device registration error -23 [ 513.727974][T20976] netlink: 'syz.5.4217': attribute type 33 has an invalid length. [ 514.153782][T21012] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 514.608655][T21037] netlink: 'syz.2.4232': attribute type 11 has an invalid length. [ 514.617270][T21037] netlink: 'syz.2.4232': attribute type 11 has an invalid length. [ 514.736095][T21040] veth1_macvtap: left promiscuous mode [ 514.801981][T21042] siw: device registration error -23 [ 515.338410][T21069] óÿÿÿ: renamed from wg2 (while UP) [ 516.179784][T21104] __nla_validate_parse: 15 callbacks suppressed [ 516.179809][T21104] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4248'. [ 516.199088][T21104] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4248'. [ 516.372280][T21104] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4248'. [ 516.388933][T21099] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4248'. [ 516.451581][T21099] chnl_net:caif_netlink_parms(): no params data found [ 516.470125][T21104] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4248'. [ 516.492601][T21114] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4253'. [ 516.542809][T21117] netlink: 'syz.6.4252': attribute type 1 has an invalid length. [ 516.648497][T21123] netlink: 'syz.5.4256': attribute type 1 has an invalid length. [ 516.659508][T21117] 8021q: adding VLAN 0 to HW filter on device bond7 [ 516.707576][T21120] 8021q: adding VLAN 0 to HW filter on device bond7 [ 516.733292][T21120] bond7: (slave vxcan5): The slave device specified does not support setting the MAC address [ 516.764031][T21120] bond7: (slave vxcan5): Error -95 calling set_mac_address [ 516.910827][T21131] veth9: entered promiscuous mode [ 516.933349][T21131] bond7: (slave veth9): Enslaving as an active interface with a down link [ 516.944123][T21133] tipc: New replicast peer: 255.255.255.255 [ 516.951204][T21133] tipc: Enabled bearer , priority 10 [ 516.957722][T21136] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4258'. [ 516.974340][T21135] sit3: entered allmulticast mode [ 517.199098][T21155] netlink: 300 bytes leftover after parsing attributes in process `syz.1.4263'. [ 517.236018][T21155] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4263'. [ 517.244876][T21157] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4263'. [ 517.522815][T21171] 8021q: adding VLAN 0 to HW filter on device bond8 [ 517.628383][T21171] 8021q: adding VLAN 0 to HW filter on device bond8 [ 517.661344][T21171] bond8: (slave vxcan5): The slave device specified does not support setting the MAC address [ 517.664414][T21181] delete_channel: no stack [ 517.679526][T21171] bond8: (slave vxcan5): Error -95 calling set_mac_address [ 517.954743][ T5951] tipc: Node number set to 3258267443 [ 518.070388][T21193] veth1_to_bond: entered allmulticast mode [ 518.192903][T21193] bond0: (slave bond_slave_1): Releasing backup interface [ 518.311959][T21193] veth1_to_bond (unregistering): left allmulticast mode [ 518.519663][T21221] netlink: 'syz.1.4281': attribute type 1 has an invalid length. [ 518.693858][T21221] 8021q: adding VLAN 0 to HW filter on device bond5 [ 518.811982][T21232] veth5: entered promiscuous mode [ 518.828421][T21232] bond5: (slave veth5): Enslaving as an active interface with a down link [ 518.872465][T21246] gretap2: entered promiscuous mode [ 518.884731][T21246] gretap2: entered allmulticast mode [ 518.928160][T21250] netlink: 'syz.6.4286': attribute type 23 has an invalid length. [ 518.951810][T21246] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 519.070604][T21257] tipc: Enabled bearer , priority 0 [ 519.081045][T21257] syzkaller0: entered promiscuous mode [ 519.086685][T21257] syzkaller0: entered allmulticast mode [ 519.131224][T21257] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 519.197937][T21257] tipc: Resetting bearer [ 519.211898][T21256] tipc: Resetting bearer [ 519.280060][T21256] tipc: Disabling bearer [ 519.385254][T21273] team0: Device vti0 is of different type [ 519.452220][T21277] netlink: 'syz.6.4294': attribute type 5 has an invalid length. [ 519.735369][T21298] netlink: 'syz.6.4299': attribute type 6 has an invalid length. [ 519.750945][T21299] syzkaller1: entered promiscuous mode [ 519.757795][T21299] syzkaller1: entered allmulticast mode [ 520.490963][T21332] tipc: Enabling of bearer rejected, already enabled [ 520.572848][T21340] netlink: 'syz.7.4312': attribute type 1 has an invalid length. [ 520.681971][T21340] bond0: entered promiscuous mode [ 520.688713][T21340] 8021q: adding VLAN 0 to HW filter on device bond0 [ 520.755887][T21347] bond0: (slave bridge0): making interface the new active one [ 520.763536][T21347] bridge0: entered promiscuous mode [ 520.771209][T21347] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 521.002426][T21364] veth1_to_bond: entered allmulticast mode [ 521.011292][T21362] netlink: 'syz.6.4318': attribute type 1 has an invalid length. [ 521.075856][T21364] `: (slave bond_slave_1): Releasing backup interface [ 521.113273][T21371] netlink: 'syz.5.4321': attribute type 4 has an invalid length. [ 521.205187][T21376] xt_l2tp: invalid flags combination: 8 [ 521.217958][T21364] veth1_to_bond (unregistering): left allmulticast mode [ 521.251827][T21371] __nla_validate_parse: 17 callbacks suppressed [ 521.251847][T21371] netlink: 252 bytes leftover after parsing attributes in process `syz.5.4321'. [ 521.272935][T21371] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4321'. [ 521.440969][T21392] netlink: 96 bytes leftover after parsing attributes in process `syz.7.4329'. [ 521.644331][T21402] netlink: 32 bytes leftover after parsing attributes in process `syz.6.4330'. [ 521.780724][T21415] syz.5.4333: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 521.799632][T21415] CPU: 1 UID: 0 PID: 21415 Comm: syz.5.4333 Not tainted syzkaller #0 PREEMPT(full) [ 521.799665][T21415] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 521.799684][T21415] Call Trace: [ 521.799694][T21415] [ 521.799704][T21415] dump_stack_lvl+0x189/0x250 [ 521.799747][T21415] ? __pfx_dump_stack_lvl+0x10/0x10 [ 521.799778][T21415] ? __pfx__printk+0x10/0x10 [ 521.799802][T21415] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 521.799833][T21415] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 521.799867][T21415] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 521.799910][T21415] warn_alloc+0x214/0x310 [ 521.799943][T21415] ? stack_depot_save_flags+0x40/0x860 [ 521.799982][T21415] ? __pfx_warn_alloc+0x10/0x10 [ 521.800018][T21415] ? kasan_save_track+0x3e/0x80 [ 521.800048][T21415] ? __kasan_kmalloc+0x93/0xb0 [ 521.800082][T21415] ? xsk_setsockopt+0x4dc/0x8d0 [ 521.800103][T21415] ? do_sock_setsockopt+0x17c/0x1b0 [ 521.800140][T21415] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 521.800172][T21415] ? do_syscall_64+0xfa/0xfa0 [ 521.800198][T21415] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 521.800232][T21415] __vmalloc_node_range_noprof+0x125/0x12d0 [ 521.800300][T21415] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 521.800338][T21415] ? __kasan_kmalloc+0x93/0xb0 [ 521.800377][T21415] vmalloc_user_noprof+0xad/0xf0 [ 521.800409][T21415] ? xskq_create+0xbf/0x170 [ 521.800435][T21415] xskq_create+0xbf/0x170 [ 521.800464][T21415] xsk_init_queue+0xb0/0x110 [ 521.800492][T21415] xsk_setsockopt+0x4dc/0x8d0 [ 521.800519][T21415] ? __pfx_xsk_setsockopt+0x10/0x10 [ 521.800546][T21415] ? __pfx_aa_sk_perm+0x10/0x10 [ 521.800584][T21415] ? aa_sock_opt_perm+0xff/0x1b0 [ 521.800621][T21415] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 521.800643][T21415] ? __pfx_xsk_setsockopt+0x10/0x10 [ 521.800668][T21415] do_sock_setsockopt+0x17c/0x1b0 [ 521.800707][T21415] __x64_sys_setsockopt+0x13f/0x1b0 [ 521.800749][T21415] do_syscall_64+0xfa/0xfa0 [ 521.800774][T21415] ? lockdep_hardirqs_on+0x9c/0x150 [ 521.800807][T21415] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 521.800828][T21415] ? clear_bhb_loop+0x60/0xb0 [ 521.800856][T21415] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 521.800892][T21415] RIP: 0033:0x7f62e7f8efc9 [ 521.800913][T21415] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 521.800933][T21415] RSP: 002b:00007f62e61d5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 521.800957][T21415] RAX: ffffffffffffffda RBX: 00007f62e81e6180 RCX: 00007f62e7f8efc9 [ 521.800973][T21415] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000007 [ 521.800986][T21415] RBP: 00007f62e8011f91 R08: 0000000000000004 R09: 0000000000000000 [ 521.800999][T21415] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 521.801013][T21415] R13: 00007f62e81e6218 R14: 00007f62e81e6180 R15: 00007ffd7dee9508 [ 521.801052][T21415] [ 521.802251][T21415] Mem-Info: [ 521.843740][T21417] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4337'. [ 521.847345][T21415] active_anon:4694 inactive_anon:0 isolated_anon:0 [ 521.847345][T21415] active_file:3275 inactive_file:40027 isolated_file:0 [ 521.847345][T21415] unevictable:768 dirty:95 writeback:0 [ 521.847345][T21415] slab_reclaimable:12269 slab_unreclaimable:112823 [ 521.847345][T21415] mapped:29150 shmem:1370 pagetables:1050 [ 521.847345][T21415] sec_pagetables:0 bounce:0 [ 521.847345][T21415] kernel_misc_reclaimable:0 [ 521.847345][T21415] free:1308504 free_pcp:16444 free_cma:0 [ 522.167209][T21415] Node 0 active_anon:18676kB inactive_anon:0kB active_file:13100kB inactive_file:159900kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:124700kB dirty:380kB writeback:0kB shmem:4044kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14848kB pagetables:4276kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 522.222061][T21415] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:124kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 522.255583][T21415] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 522.334819][T21415] lowmem_reserve[]: 0 2505 2505 2505 2505 [ 522.351002][T21415] Node 0 DMA32 free:1324424kB boost:0kB min:34308kB low:42884kB high:51460kB reserved_highatomic:0KB free_highatomic:0KB active_anon:18516kB inactive_anon:0kB active_file:13100kB inactive_file:159900kB unevictable:1536kB writepending:380kB zspages:0kB present:3129332kB managed:2565208kB mlocked:0kB bounce:0kB free_pcp:45868kB local_pcp:21176kB free_cma:0kB [ 522.369476][T21428] netlink: 16 bytes leftover after parsing attributes in process `syz.7.4340'. [ 522.419368][T21428] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4340'. [ 522.455802][T21415] lowmem_reserve[]: 0 0 0 0 0 [ 522.460639][T21415] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 522.521325][T21415] lowmem_reserve[]: 0 0 0 0 0 [ 522.526860][T21415] Node 1 Normal free:3897344kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:16960kB local_pcp:8320kB free_cma:0kB [ 522.565123][T21415] lowmem_reserve[]: 0 0 0 0 0 [ 522.571734][T21415] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 522.588818][T21415] Node 0 DMA32: 1092*4kB (UM) 719*8kB (UME) 724*16kB (UME) 505*32kB (UME) 220*64kB (UME) 54*128kB (UME) 22*256kB (UME) 11*512kB (UM) 3*1024kB (UM) 7*2048kB (UME) 302*4096kB (UM) = 1324520kB [ 522.608468][T21441] netlink: 16186 bytes leftover after parsing attributes in process `syz.6.4344'. [ 522.621485][T21415] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 522.634526][T21415] Node 1 Normal: 192*4kB (UE) 56*8kB (UME) 52*16kB (UME) 90*32kB (UME) 29*64kB (UME) 7*128kB (UME) 4*256kB (UME) 3*512kB (ME) 4*1024kB (UME) 0*2048kB 948*4096kB (M) = 3897344kB [ 522.653944][T21415] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 522.653972][T21415] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 522.653993][T21415] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 522.654013][T21415] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 522.654032][T21415] 44670 total pagecache pages [ 522.654055][T21415] 0 pages in swap cache [ 522.654064][T21415] Free swap = 124996kB [ 522.654075][T21415] Total swap = 124996kB [ 522.654086][T21415] 2097051 pages RAM [ 522.654096][T21415] 0 pages HighMem/MovableOnly [ 522.654112][T21415] 424107 pages reserved [ 522.654122][T21415] 0 pages cma reserved [ 522.857287][T21451] openvswitch: netlink: push_nsh: missing base or metadata attributes [ 522.865618][T21451] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 522.936726][T21456] tipc: Cannot configure node identity twice [ 523.041968][T21463] netlink: 'syz.5.4349': attribute type 11 has an invalid length. [ 523.284439][T21471] netlink: 'syz.6.4353': attribute type 21 has an invalid length. [ 523.303907][T21479] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4356'. [ 523.304097][T21471] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4353'. [ 523.384353][T21481] netlink: 'syz.2.4357': attribute type 2 has an invalid length. [ 523.986960][T21523] syzkaller0: entered promiscuous mode [ 524.003807][T21523] syzkaller0: entered allmulticast mode [ 524.093896][T21522] tipc: Enabling of bearer rejected, failed to enable media [ 524.133564][T21527] tipc: Enabling of bearer rejected, already enabled [ 524.158871][T21531] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 524.175555][T21532] xt_recent: Unsupported userspace flags (000000b1) [ 524.382006][T21536] netlink: 'syz.6.4377': attribute type 4 has an invalid length. [ 524.397332][T21542] netlink: 'syz.5.4378': attribute type 13 has an invalid length. [ 524.608451][T21560] netlink: 'syz.6.4381': attribute type 39 has an invalid length. [ 524.778943][T21542] 8021q: adding VLAN 0 to HW filter on device bond0 [ 524.803888][T21542] 8021q: adding VLAN 0 to HW filter on device team0 [ 524.819813][T21542] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 525.006318][ T12] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 525.046674][T17770] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 525.404534][T21601] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 525.442855][T21601] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 525.834574][T21625] vlan3: entered promiscuous mode [ 525.865613][T17756] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 525.900255][T21626] tipc: Enabled bearer , priority 0 [ 525.921387][T21626] syzkaller0: entered promiscuous mode [ 525.935032][T21626] syzkaller0: entered allmulticast mode [ 525.956181][T21624] tipc: Resetting bearer [ 526.021615][T21624] tipc: Disabling bearer [ 526.073520][T21640] netlink: 'syz.1.4408': attribute type 1 has an invalid length. [ 526.274251][ T8081] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 526.283802][ T8081] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 526.400460][T21653] netlink: 'syz.6.4412': attribute type 10 has an invalid length. [ 526.429716][T21653] batman_adv: batadv0: Adding interface: netdevsim0 [ 526.456449][T21653] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 526.487205][T21653] batman_adv: batadv0: Interface activated: netdevsim0 [ 526.572525][T21665] __nla_validate_parse: 9 callbacks suppressed [ 526.572546][T21665] netlink: 60 bytes leftover after parsing attributes in process `syz.7.4415'. [ 526.742694][T21663] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4414'. [ 526.755661][T21678] netlink: 'syz.5.4418': attribute type 28 has an invalid length. [ 526.796976][T21678] netlink: 'syz.5.4418': attribute type 3 has an invalid length. [ 526.826035][T21678] netlink: 132 bytes leftover after parsing attributes in process `syz.5.4418'. [ 526.987086][T17756] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 527.061812][T21694] netlink: 96 bytes leftover after parsing attributes in process `syz.7.4424'. [ 527.106241][T21694] vlan2: entered allmulticast mode [ 527.111449][T21694] gretap0: entered allmulticast mode [ 527.185266][T21703] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4427'. [ 527.460832][T21720] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4433'. [ 527.776598][T21743] pim6reg1: entered promiscuous mode [ 527.789780][T21743] pim6reg1: entered allmulticast mode [ 527.934462][T21747] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4441'. [ 528.337461][T21773] bridge0: port 3(veth0_to_bridge) entered blocking state [ 528.383828][T21773] bridge0: port 3(veth0_to_bridge) entered disabled state [ 528.406685][T21773] veth0_to_bridge: entered allmulticast mode [ 528.433609][T21773] veth0_to_bridge: entered promiscuous mode [ 528.549447][T21787] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4450'. [ 528.967853][T21807] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4457'. [ 529.279190][T21813] validate_nla: 2 callbacks suppressed [ 529.279210][T21813] netlink: 'syz.5.4462': attribute type 1 has an invalid length. [ 529.786351][T21846] netlink: 'syz.7.4470': attribute type 9 has an invalid length. [ 529.881844][T21855] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4472'. [ 530.047738][T21841] bridge0: port 2(bridge_slave_1) entered disabled state [ 530.055622][T21841] bridge0: port 1(bridge_slave_0) entered disabled state [ 530.212880][T21841] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 530.344823][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 530.376187][ T3561] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 530.398158][ T3561] netdevsim netdevsim1 netdevsim0: unset [1, 1] type 2 family 0 port 256 - 0 [ 530.417299][ T3561] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 530.449648][ T3561] netdevsim netdevsim1 netdevsim1: unset [1, 1] type 2 family 0 port 256 - 0 [ 530.462421][ T3561] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 530.471636][ T3561] netdevsim netdevsim1 netdevsim2: unset [1, 1] type 2 family 0 port 256 - 0 [ 530.494692][ T3561] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 530.527722][ T3561] netdevsim netdevsim1 netdevsim3: unset [1, 1] type 2 family 0 port 256 - 0 [ 530.656555][T21869] netlink: 'syz.6.4475': attribute type 1 has an invalid length. [ 530.925509][T21882] tipc: Enabled bearer , priority 0 [ 530.939843][T21880] syzkaller0: entered promiscuous mode [ 530.952148][T21880] syzkaller0: entered allmulticast mode [ 530.964506][T21882] syzkaller0: entered promiscuous mode [ 530.970379][T21882] syzkaller0: entered allmulticast mode [ 531.038458][T21882] tipc: Resetting bearer [ 531.057034][T21879] tipc: Resetting bearer [ 531.131303][T21879] tipc: Disabling bearer [ 531.660033][T21911] __nla_validate_parse: 5 callbacks suppressed [ 531.660053][T21911] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4488'. [ 531.695042][T21911] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4488'. [ 531.829421][T21920] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4491'. [ 531.857171][T21922] : entered promiscuous mode [ 531.903336][T21920] pimreg: entered allmulticast mode [ 531.984286][T21928] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4494'. [ 531.996284][T21926] netlink: 'syz.5.4493': attribute type 6 has an invalid length. [ 532.008448][T21930] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4495'. [ 532.017139][T21926] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4493'. [ 532.137051][T21935] syzkaller1: entered promiscuous mode [ 532.142595][T21935] syzkaller1: entered allmulticast mode [ 532.157713][T21937] syz.7.4497 uses old SIOCAX25GETINFO [ 532.422475][T21955] netlink: 'syz.1.4501': attribute type 21 has an invalid length. [ 532.498842][T21955] bond6: option lacp_rate: mode dependency failed, not supported in mode broadcast(3) [ 532.520792][T21955] bond6 (unregistering): Released all slaves [ 532.661476][T21969] netlink: 'syz.5.4503': attribute type 4 has an invalid length. [ 532.711842][T21973] netlink: 'syz.5.4503': attribute type 4 has an invalid length. [ 532.797124][T21981] netlink: 'syz.1.4509': attribute type 25 has an invalid length. [ 532.832541][T21981] netlink: 'syz.1.4509': attribute type 1 has an invalid length. [ 533.213889][T22004] netlink: 'syz.5.4514': attribute type 24 has an invalid length. [ 534.053835][T22068] netlink: 24 bytes leftover after parsing attributes in process `syz.7.4534'. [ 534.079491][T22070] nr0: left allmulticast mode [ 534.189755][T22073] sch_tbf: burst 88 is lower than device veth9 mtu (1514) ! [ 534.270976][T22079] IPv6: NLM_F_CREATE should be specified when creating new route [ 534.294264][T22079] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 534.302004][T22079] IPv6: NLM_F_CREATE should be set when creating new route [ 534.309444][T22079] IPv6: NLM_F_CREATE should be set when creating new route [ 534.316758][T22079] IPv6: NLM_F_CREATE should be set when creating new route [ 534.511232][T22097] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4542'. [ 534.809792][T22114] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4549'. [ 534.955954][T22125] validate_nla: 1 callbacks suppressed [ 534.955976][T22125] netlink: 'syz.7.4551': attribute type 1 has an invalid length. [ 534.969917][T22125] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4551'. [ 535.247945][T22138] syzkaller0: entered promiscuous mode [ 535.253646][T22138] syzkaller0: entered allmulticast mode [ 535.262267][T22137] tipc: Enabled bearer , priority 0 [ 535.506273][T22136] tipc: Resetting bearer [ 535.671592][T22166] netlink: 'syz.2.4559': attribute type 1 has an invalid length. [ 535.741224][T22168] nbd: couldn't find a device at index 0 [ 536.356376][T17767] tipc: Node number set to 317557102 [ 537.477917][T22136] tipc: Disabling bearer [ 537.638055][T22186] netlink: 'syz.1.4563': attribute type 1 has an invalid length. [ 537.667821][T22186] netlink: 'syz.1.4563': attribute type 2 has an invalid length. [ 537.815586][T22198] IPVS: ip_vs_add_dest(): server weight less than zero [ 537.878639][T22204] __nla_validate_parse: 3 callbacks suppressed [ 537.878660][T22204] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4570'. [ 537.925924][T22204] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4570'. [ 537.958780][T22204] netlink: 40 bytes leftover after parsing attributes in process `syz.6.4570'. [ 538.041160][T22213] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4572'. [ 538.241249][T22226] bridge: RTM_NEWNEIGH with invalid state 0x8 [ 538.275587][T22232] netlink: 88 bytes leftover after parsing attributes in process `syz.7.4577'. [ 538.355833][T22241] ªªªªªªZ7nz>RAÌ speed is unknown, defaulting to 1000 [ 538.570438][T22253] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4585'. [ 538.592608][T22254] SET target dimension over the limit! [ 538.632061][T22253] 8021q: adding VLAN 0 to HW filter on device bond6 [ 538.699698][T22262] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4587'. [ 538.709119][T22259] syzkaller0: entered promiscuous mode [ 538.709146][T22259] syzkaller0: entered allmulticast mode [ 538.721064][T22262] netlink: 'syz.5.4587': attribute type 3 has an invalid length. [ 538.733492][T22262] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4587'. [ 538.745371][T22262] netlink: 'syz.5.4587': attribute type 3 has an invalid length. [ 538.777398][T22259] tipc: Enabled bearer , priority 0 [ 538.866870][T22249] tipc: Resetting bearer [ 538.905020][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 539.433084][T22284] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 539.851542][ T9] tipc: Node number set to 3984250671 [ 540.756324][T22249] tipc: Disabling bearer [ 540.785248][T22289] bridge0: mtu less than device minimum [ 541.044354][T22295] bond8: entered promiscuous mode [ 541.074720][T22295] bond8: entered allmulticast mode [ 541.085206][T22295] 8021q: adding VLAN 0 to HW filter on device bond8 [ 541.157166][T22308] bond9: down delay (33554432) is not a multiple of miimon (640), value rounded to 33553920 ms [ 541.181353][T22314] netlink: 'syz.2.4602': attribute type 11 has an invalid length. [ 541.189473][T22314] netlink: 224 bytes leftover after parsing attributes in process `syz.2.4602'. [ 541.408711][T22325] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4606'. [ 541.853840][T22357] syzkaller0: entered promiscuous mode [ 541.866660][T22357] syzkaller0: entered allmulticast mode [ 542.380225][T22381] netlink: 'syz.7.4625': attribute type 4 has an invalid length. [ 542.507316][T22386] netlink: 'syz.2.4624': attribute type 2 has an invalid length. [ 542.593573][T22389] smc: removing net device vcan0 with user defined pnetid SYZ1 [ 544.877473][T22427] `: (slave bond_slave_0): Releasing backup interface [ 544.947295][T22427] team0: Port device team_slave_0 removed [ 544.964469][T22427] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 545.233479][T22454] netlink: 'syz.5.4643': attribute type 1 has an invalid length. [ 545.282806][T22459] netlink: 'syz.1.4645': attribute type 1 has an invalid length. [ 545.291201][T22459] __nla_validate_parse: 3 callbacks suppressed [ 545.291221][T22459] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4645'. [ 545.331959][T22454] bond9: entered promiscuous mode [ 545.340354][T22454] 8021q: adding VLAN 0 to HW filter on device bond9 [ 545.381408][T22461] bond9: (slave bridge6): making interface the new active one [ 545.395445][T22461] bridge6: entered promiscuous mode [ 545.401990][T22461] bond9: (slave bridge6): Enslaving as an active interface with an up link [ 545.494397][T22455] syzkaller0: entered promiscuous mode [ 545.502722][T22455] syzkaller0: entered allmulticast mode [ 545.547260][T22471] 8021q: adding VLAN 0 to HW filter on device bond0 [ 545.557973][T22471] 8021q: adding VLAN 0 to HW filter on device team0 [ 545.573414][T22471] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 545.608379][T22470] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4645'. [ 545.614759][T22471] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 545.633387][T22471] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 545.645033][T22471] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 545.660331][T22471] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 545.683116][ T1142] bridge0: port 1(bridge_slave_0) entered blocking state [ 545.690360][ T1142] bridge0: port 1(bridge_slave_0) entered forwarding state [ 545.728808][T22459] syzkaller0: refused to change device tx_queue_len [ 545.738127][T22475] netlink: 65039 bytes leftover after parsing attributes in process `syz.6.4647'. [ 545.860186][T22480] nbd: device at index 2 is going down [ 546.108319][T19928] udevd[19928]: inotify_add_watch(7, /dev/nbd2, 10) failed: No such file or directory [ 547.813748][T22501] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4652'. [ 547.919074][T22506] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4654'. [ 547.938868][T22506] dvmrp1: entered allmulticast mode [ 547.995860][T22516] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4656'. [ 548.281570][T22536] netlink: 'syz.6.4660': attribute type 11 has an invalid length. [ 548.369031][T22540] netlink: 'syz.6.4660': attribute type 1 has an invalid length. [ 548.435808][T22536] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0 [ 548.437170][T22536] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4660'. [ 548.511941][T22546] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4662'. [ 548.983524][T22576] netlink: 'syz.6.4672': attribute type 4 has an invalid length. [ 549.001496][T22576] netlink: 'syz.6.4672': attribute type 4 has an invalid length. [ 549.187493][T22584] netlink: 56 bytes leftover after parsing attributes in process `syz.6.4675'. [ 549.214952][T22584] netlink: 56 bytes leftover after parsing attributes in process `syz.6.4675'. [ 550.127632][T22643] netlink: 'syz.6.4693': attribute type 3 has an invalid length. [ 550.366370][T22659] syz.2.4696 (22659) used obsolete PPPIOCDETACH ioctl [ 550.433758][T22665] __nla_validate_parse: 3 callbacks suppressed [ 550.433779][T22665] netlink: 156 bytes leftover after parsing attributes in process `syz.7.4697'. [ 550.978630][T22683] netlink: 92 bytes leftover after parsing attributes in process `syz.1.4699'. [ 551.466108][T22713] syzkaller1: entered promiscuous mode [ 551.475365][T22713] syzkaller1: entered allmulticast mode [ 551.792815][T22732] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4714'. [ 551.808366][T22736] netlink: 'syz.5.4716': attribute type 1 has an invalid length. [ 551.894258][T22738] netlink: 'syz.7.4718': attribute type 21 has an invalid length. [ 551.909070][T22738] netlink: 132 bytes leftover after parsing attributes in process `syz.7.4718'. [ 552.388399][T22770] openvswitch: netlink: nsh attribute has 1 unknown bytes. [ 552.434873][T22770] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 552.488466][T22762] syzkaller1: entered promiscuous mode [ 552.506018][T22762] syzkaller1: entered allmulticast mode [ 552.529785][T22774] netlink: 'syz.6.4726': attribute type 7 has an invalid length. [ 552.602130][T22776] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4728'. [ 552.814378][T22792] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4733'. [ 552.839970][T22793] netlink: 96 bytes leftover after parsing attributes in process `syz.6.4729'. [ 552.892154][T22792] bridge1: entered promiscuous mode [ 552.923208][T22792] bridge1: entered allmulticast mode [ 553.138365][T22802] netlink: 'syz.7.4735': attribute type 1 has an invalid length. [ 553.167698][T22803] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4737'. [ 553.254344][T22802] 8021q: adding VLAN 0 to HW filter on device bond8 [ 553.316671][ T5904] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 553.379567][T22811] bond8: (slave geneve3): making interface the new active one [ 553.439809][T22811] bond8: (slave geneve3): Enslaving as an active interface with an up link [ 553.509948][ T3561] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 20000 - 0 [ 553.521981][T22811] syz.7.4735 (22811) used greatest stack depth: 16888 bytes left [ 553.533429][ T3561] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0 [ 553.560262][ T3561] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0 [ 553.602078][ T3561] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0 [ 553.628125][T22814] tap0: tun_chr_ioctl cmd 1074025672 [ 553.633495][T22814] tap0: ignored: set checksum disabled [ 553.743458][T22820] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4740'. [ 553.785735][T22820] netlink: zone id is out of range [ 553.791022][T22820] netlink: zone id is out of range [ 553.846558][ T5838] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 553.859410][ T5838] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 553.868980][ T5838] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 553.877564][ T5838] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 553.888874][ T5838] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 553.891730][T22828] netlink: 104 bytes leftover after parsing attributes in process `syz.2.4741'. [ 553.923364][ T5843] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 553.932097][ T5843] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 553.940144][ T5843] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 553.950305][ T5843] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 553.961191][ T5843] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 554.105473][ T9] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 554.565734][T22848] nbd1: detected capacity change from 0 to 127 [ 554.594525][ T5843] block nbd1: Receive control failed (result -104) [ 554.628149][T22852] vlan3: entered promiscuous mode [ 554.680605][T22852] pimreg: left allmulticast mode [ 554.687038][T22852] dvmrp1: left allmulticast mode [ 554.813517][T22826] chnl_net:caif_netlink_parms(): no params data found [ 555.083999][T22826] bridge0: port 1(bridge_slave_0) entered blocking state [ 555.110493][T22826] bridge0: port 1(bridge_slave_0) entered disabled state [ 555.121256][T22826] bridge_slave_0: entered allmulticast mode [ 555.129478][T22826] bridge_slave_0: entered promiscuous mode [ 555.138875][T22826] bridge0: port 2(bridge_slave_1) entered blocking state [ 555.147584][T22826] bridge0: port 2(bridge_slave_1) entered disabled state [ 555.156366][T22826] bridge_slave_1: entered allmulticast mode [ 555.186470][T22826] bridge_slave_1: entered promiscuous mode [ 555.290727][T22826] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 555.316805][T22826] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 555.393493][T22890] x_tables: duplicate underflow at hook 2 [ 555.415804][T22899] syzkaller1: entered promiscuous mode [ 555.424987][T22899] syzkaller1: entered allmulticast mode [ 555.437383][T22826] team0: Port device team_slave_0 added [ 555.452328][T22826] team0: Port device team_slave_1 added [ 555.544836][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 555.605889][T22826] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 555.623243][T22826] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 555.682780][T22826] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 555.712751][T22898] syzkaller1: entered promiscuous mode [ 555.718686][T22898] syzkaller1: entered allmulticast mode [ 555.737209][T22826] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 555.749301][T22826] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 555.779521][T22826] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 555.844235][T22914] netlink: 'syz.1.4763': attribute type 83 has an invalid length. [ 555.856843][T22914] netlink: 'syz.1.4763': attribute type 1 has an invalid length. [ 555.872380][T22914] netlink: 'syz.1.4763': attribute type 2 has an invalid length. [ 555.905780][T22918] netlink: 'syz.1.4763': attribute type 1 has an invalid length. [ 555.914307][T22918] netlink: 'syz.1.4763': attribute type 2 has an invalid length. [ 556.012676][T22826] hsr_slave_0: entered promiscuous mode [ 556.025281][ T5843] Bluetooth: hci2: command tx timeout [ 556.040695][T22826] hsr_slave_1: entered promiscuous mode [ 556.056991][T22826] debugfs: 'hsr0' already exists in 'hsr' [ 556.058842][T22924] __nla_validate_parse: 6 callbacks suppressed [ 556.058866][T22924] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4766'. [ 556.070281][T22826] Cannot create hsr debugfs directory [ 556.108413][T22926] netlink: 260 bytes leftover after parsing attributes in process `syz.1.4767'. [ 556.121731][T22926] netlink: 'syz.1.4767': attribute type 10 has an invalid length. [ 556.140015][T22924] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4766'. [ 556.150181][T22926] bridge_slave_1: left allmulticast mode [ 556.158831][T22924] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4766'. [ 556.168061][T22926] bridge_slave_1: left promiscuous mode [ 556.168338][T22926] bridge0: port 2(bridge_slave_1) entered disabled state [ 556.191811][T22926] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 556.380881][T22936] netlink: 'syz.2.4771': attribute type 83 has an invalid length. [ 556.383128][T22935] netlink: 808 bytes leftover after parsing attributes in process `syz.7.4770'. [ 556.403305][T22935] netlink: 24 bytes leftover after parsing attributes in process `syz.7.4770'. [ 556.552508][T22941] set match dimension is over the limit! [ 556.579948][T22946] ip6t_REJECT: ECHOREPLY is not supported [ 556.682702][T22826] netdevsim netdevsim6 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 556.705921][T22826] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 556.772376][T22954] netlink: 112 bytes leftover after parsing attributes in process `syz.5.4776'. [ 556.782965][T22956] netlink: 112 bytes leftover after parsing attributes in process `syz.5.4776'. [ 556.858457][T22826] netdevsim netdevsim6 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 556.870531][T22826] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 556.922644][T22963] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4780'. [ 557.020743][T22826] netdevsim netdevsim6 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 557.039418][T22826] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 557.109076][T22826] batman_adv: batadv0: Interface deactivated: netdevsim0 [ 557.176770][T22973] netlink: 'syz.5.4782': attribute type 15 has an invalid length. [ 557.209661][T22826] batman_adv: batadv0: Removing interface: netdevsim0 [ 557.238517][T22826] netdevsim netdevsim6 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 557.265742][T22826] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 557.617331][T22826] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 557.669651][T22826] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 557.711573][T22826] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 557.752440][T22826] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 558.009961][T22826] 8021q: adding VLAN 0 to HW filter on device bond0 [ 558.045700][T22826] 8021q: adding VLAN 0 to HW filter on device team0 [ 558.071919][ T8081] bridge0: port 1(bridge_slave_0) entered blocking state [ 558.079178][ T8081] bridge0: port 1(bridge_slave_0) entered forwarding state [ 558.109316][ T5843] Bluetooth: hci2: command tx timeout [ 558.128040][T23017] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4793'. [ 558.183783][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 558.191069][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 558.774111][T22826] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 558.919307][T23057] bond9 (unregistering): Released all slaves [ 559.271187][T23077] openvswitch: netlink: IP tunnel attribute has 1026 unknown bytes. [ 559.297780][T23077] openvswitch: netlink: IP tunnel dst address not specified [ 559.304548][T23073] 8021q: adding VLAN 0 to HW filter on device bond6 [ 559.348524][T23073] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 559.388958][T23073] bond6: (slave macvlan3): Enslaving as an active interface with an up link [ 559.625319][T23094] batadv1: left allmulticast mode [ 559.631624][T23094] batadv1: left promiscuous mode [ 559.641929][T23094] bridge0: port 3(batadv1) entered disabled state [ 559.675036][T23094] bridge_slave_0: left allmulticast mode [ 559.694451][T23094] bridge_slave_0: left promiscuous mode [ 559.723493][T23094] bridge0: port 1(bridge_slave_0) entered disabled state [ 559.877605][T22826] veth0_vlan: entered promiscuous mode [ 559.932956][T22826] veth1_vlan: entered promiscuous mode [ 560.054336][T22826] veth0_macvtap: entered promiscuous mode [ 560.071685][T23109] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 560.090028][T23109] IPVS: set_ctl: invalid protocol: 183 0.0.0.0:0 [ 560.101066][T22826] veth1_macvtap: entered promiscuous mode [ 560.150778][T22826] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 560.185717][ T5843] Bluetooth: hci2: command tx timeout [ 560.199823][T22826] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 560.251098][T15546] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 560.272996][T15546] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 560.430027][T15546] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 560.450173][T15546] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 560.485825][T15546] netdevsim netdevsim7 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 560.507053][T15546] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 20000 - 0 [ 560.531041][T15546] netdevsim netdevsim7 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 560.551287][T15546] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 20000 - 0 [ 560.610269][T15546] netdevsim netdevsim7 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 560.621166][T15546] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 20000 - 0 [ 560.631848][T15546] netdevsim netdevsim7 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 560.643015][T15546] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 20000 - 0 [ 560.820301][ T1142] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 560.848052][ T1142] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 560.887823][ T1142] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 560.897314][ T1142] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 560.993863][T23160] netlink: 'syz.1.4829': attribute type 5 has an invalid length. [ 561.391302][T23182] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 561.413736][T23182] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 561.737729][T23197] netlink: 'syz.7.4842': attribute type 3 has an invalid length. [ 561.748410][T23197] __nla_validate_parse: 12 callbacks suppressed [ 561.748433][T23197] netlink: 666 bytes leftover after parsing attributes in process `syz.7.4842'. [ 562.225150][T23224] bridge0: the hash_elasticity option has been deprecated and is always 16 [ 562.265190][ T5843] Bluetooth: hci2: command 0x0419 tx timeout [ 562.369676][T23232] netlink: 'syz.6.4849': attribute type 4 has an invalid length. [ 562.377635][T23232] netlink: 17 bytes leftover after parsing attributes in process `syz.6.4849'. [ 562.851240][T23255] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4856'. [ 563.519956][T23285] syzkaller0: entered promiscuous mode [ 563.532115][T23285] syzkaller0: entered allmulticast mode [ 563.602966][T23292] IPVS: set_ctl: invalid protocol: 117 172.20.20.170:20000 [ 563.626258][T23292] netlink: 'syz.7.4863': attribute type 10 has an invalid length. [ 563.704102][T23292] ÿ: mtu less than device minimum [ 563.730447][T23292] `: (slave ÿ): Error -22 calling dev_set_mtu [ 563.750561][T23290] xt_l2tp: missing protocol rule (udp|l2tpip) [ 564.346752][ T5843] Bluetooth: hci2: command 0x0419 tx timeout [ 564.457720][T23338] netlink: 256 bytes leftover after parsing attributes in process `syz.1.4875'. [ 564.580854][T23340] 8021q: adding VLAN 0 to HW filter on device bond1 [ 564.599285][T23342] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 564.625724][T17767] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 564.634960][T23340] netlink: 168 bytes leftover after parsing attributes in process `syz.6.4877'. [ 564.646863][T23342] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4876'. [ 564.658401][T23352] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4881'. [ 564.670064][T17767] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 564.701845][T23340] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 564.702915][T23352] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4881'. [ 564.753129][T23346] IPv6: sit2: Disabled Multicast RS [ 564.768373][T23346] sit2: entered allmulticast mode [ 564.901939][T23355] syzkaller1: entered promiscuous mode [ 564.916887][T23355] syzkaller1: entered allmulticast mode [ 565.312986][T23386] bond2: entered allmulticast mode [ 565.319617][T23386] 8021q: adding VLAN 0 to HW filter on device bond2 [ 565.327694][T23386] bridge0: port 3(bond2) entered blocking state [ 565.334291][T23386] bridge0: port 3(bond2) entered disabled state [ 565.355957][T23386] bond2: entered promiscuous mode [ 565.361852][T23386] bridge0: port 3(bond2) entered blocking state [ 565.368726][T23386] bridge0: port 3(bond2) entered forwarding state [ 565.450771][T15546] bridge0: port 3(bond2) entered disabled state [ 565.488132][T23402] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4894'. [ 565.567864][T23399] netlink: 16186 bytes leftover after parsing attributes in process `syz.7.4892'. [ 565.701674][T23415] nbd: illegal input index 2958377 [ 565.906589][T23422] bond3 (unregistering): Released all slaves [ 566.184285][T23447] netlink: 'syz.5.4907': attribute type 3 has an invalid length. [ 566.428738][ T5843] Bluetooth: hci2: command 0x0419 tx timeout [ 566.559427][T23469] siw: device registration error -23 [ 566.805197][T23484] netlink: 'syz.1.4920': attribute type 1 has an invalid length. [ 566.818195][T23483] team0: Cannot enslave team device to itself [ 566.860216][T23484] 8021q: adding VLAN 0 to HW filter on device bond7 [ 566.991228][T23484] bond7: (slave wlan0): Enslaving as an active interface with a down link [ 567.269916][T23508] __nla_validate_parse: 4 callbacks suppressed [ 567.269936][T23508] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4927'. [ 567.492254][T23513] netlink: 'syz.5.4928': attribute type 4 has an invalid length. [ 567.501195][T23513] netlink: 17 bytes leftover after parsing attributes in process `syz.5.4928'. [ 567.600192][T23522] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4930'. [ 567.739701][T23527] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4931'. [ 567.996160][T23542] netlink: 'syz.5.4938': attribute type 15 has an invalid length. [ 568.036283][T23548] netlink: 'syz.7.4939': attribute type 12 has an invalid length. [ 568.050974][T23548] netlink: 132 bytes leftover after parsing attributes in process `syz.7.4939'. [ 568.258871][T23558] netlink: 'syz.1.4942': attribute type 11 has an invalid length. [ 568.273264][T23558] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4942'. [ 568.291842][T23562] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4944'. [ 568.354533][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 568.371143][T23564] netlink: 32 bytes leftover after parsing attributes in process `syz.5.4945'. [ 568.402761][T23566] netlink: 'syz.1.4946': attribute type 2 has an invalid length. [ 568.435508][T23570] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4947'. [ 568.505197][ T5838] Bluetooth: hci2: command 0x0419 tx timeout [ 568.632238][T23581] sctp: [Deprecated]: syz.7.4951 (pid 23581) Use of int in max_burst socket option. [ 568.632238][T23581] Use struct sctp_assoc_value instead [ 568.649767][T23581] netlink: 256 bytes leftover after parsing attributes in process `syz.7.4951'. [ 569.325289][T23618] veth0: entered promiscuous mode [ 569.498185][T23623] veth0 (unregistering): left promiscuous mode [ 569.653349][T23634] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -12 [ 569.673916][T23634] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -12 [ 569.699486][T23634] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 569.711795][T23645] dummy0: left allmulticast mode [ 569.717432][T23645] dummy0: left promiscuous mode [ 569.722870][T23645] bridge0: port 3(dummy0) entered disabled state [ 569.747373][T23645] bridge_slave_1: left allmulticast mode [ 569.761797][T23645] bridge_slave_1: left promiscuous mode [ 569.786569][T23645] bridge0: port 2(bridge_slave_1) entered disabled state [ 569.810494][T23645] bridge_slave_0: left allmulticast mode [ 569.823990][T23645] bridge_slave_0: left promiscuous mode [ 569.830811][T23645] bridge0: port 1(bridge_slave_0) entered disabled state [ 570.161916][T23667] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 570.170597][T23667] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 570.180584][T23667] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 570.193722][T23667] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 570.502448][T23680] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 570.724964][T23692] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 570.738640][T23696] PF_CAN: dropped non conform CAN XL skbuff: dev type 280, len 40 [ 570.914394][T23696] bridge0: port 2(bridge_slave_1) entered disabled state [ 570.922331][T23696] bridge0: port 1(bridge_slave_0) entered disabled state [ 571.340691][T23716] gretap2: entered promiscuous mode [ 571.354785][T23716] gretap2: entered allmulticast mode [ 571.370535][ T1142] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 571.399276][ T1142] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 571.506572][ T1142] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 571.516105][ T1142] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 572.289387][ T5904] IPVS: starting estimator thread 0... [ 572.376224][T23751] tipc: Started in network mode [ 572.385036][T23754] IPVS: using max 26 ests per chain, 62400 per kthread [ 572.412587][T23751] tipc: Node identity be394a1388bf, cluster identity 4711 [ 572.451426][T23751] tipc: Enabled bearer , priority 0 [ 572.461592][T23757] syzkaller0: entered promiscuous mode [ 572.484077][ T5843] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 572.498515][ T5843] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 572.516860][ T5843] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 572.529133][ T5843] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 572.547502][ T5843] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 572.548375][T23757] syzkaller0: entered allmulticast mode [ 572.631843][T23751] tipc: Resetting bearer [ 572.721202][T23747] tipc: Resetting bearer [ 572.805951][T23747] tipc: Disabling bearer [ 573.213063][T23758] chnl_net:caif_netlink_parms(): no params data found [ 573.275159][T23794] IPVS: wrr: FWM 3 0x00000003 - no destination available [ 573.284392][T23794] __nla_validate_parse: 13 callbacks suppressed [ 573.284411][T23794] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5007'. [ 573.301163][T23794] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5007'. [ 573.335605][T23797] vlan2: entered promiscuous mode [ 573.342335][T23797] vlan2: entered allmulticast mode [ 573.347957][T23797] hsr_slave_1: entered allmulticast mode [ 573.425225][T23799] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5009'. [ 573.511941][T23810] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5012'. [ 573.523355][T23810] netlink: 'syz.2.5012': attribute type 30 has an invalid length. [ 573.642584][T23812] veth7: entered allmulticast mode [ 573.650982][T23758] bridge0: port 1(bridge_slave_0) entered blocking state [ 573.662389][T23816] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5014'. [ 573.672905][T23816] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5014'. [ 573.675300][T23758] bridge0: port 1(bridge_slave_0) entered disabled state [ 573.682143][T23816] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5014'. [ 573.698452][T23758] bridge_slave_0: entered allmulticast mode [ 573.707094][T23758] bridge_slave_0: entered promiscuous mode [ 573.716777][T23758] bridge0: port 2(bridge_slave_1) entered blocking state [ 573.726278][T23758] bridge0: port 2(bridge_slave_1) entered disabled state [ 573.733621][T23758] bridge_slave_1: entered allmulticast mode [ 573.743663][T23758] bridge_slave_1: entered promiscuous mode [ 573.809073][T23821] xt_hashlimit: overflow, try lower: 3/0 [ 573.921310][T23758] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 573.933572][T23826] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5016'. [ 573.962476][T23758] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 574.023916][T23758] team0: Port device team_slave_0 added [ 574.037273][T23758] team0: Port device team_slave_1 added [ 574.101582][T23834] bond_slave_0: entered promiscuous mode [ 574.110832][T23758] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 574.125701][T23758] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 574.163603][T23758] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 574.178371][T23758] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 574.186720][T23758] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 574.213964][T23758] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 574.329432][T23758] hsr_slave_0: entered promiscuous mode [ 574.338911][T23758] hsr_slave_1: entered promiscuous mode [ 574.348299][T23758] debugfs: 'hsr0' already exists in 'hsr' [ 574.354157][T23758] Cannot create hsr debugfs directory [ 574.373230][T23842] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5021'. [ 574.441987][T23842] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5021'. [ 574.585782][ T5838] Bluetooth: hci1: command tx timeout [ 574.702960][ T12] nci: nci_rf_discover_ntf_packet: unsupported rf_tech_and_mode 0x16 [ 574.862597][T23830] bond_slave_0: left promiscuous mode [ 575.469813][T23871] netlink: 'syz.1.5028': attribute type 9 has an invalid length. [ 575.547362][T23758] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 575.582251][T23758] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 575.629126][T23758] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 575.650282][T23758] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 575.903972][T23905] Cannot find add_set index 0 as target [ 575.932306][T23758] 8021q: adding VLAN 0 to HW filter on device bond0 [ 575.973965][T23908] mac80211_hwsim hwsim25 syzkaller0: Caught tx_queue_len zero misconfig [ 576.045219][T23908] ksmbd: Unknown IPC event: 3, ignore. [ 576.057936][T23758] 8021q: adding VLAN 0 to HW filter on device team0 [ 576.120904][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 576.128180][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 576.218767][T15546] bridge0: port 2(bridge_slave_1) entered blocking state [ 576.226040][T15546] bridge0: port 2(bridge_slave_1) entered forwarding state [ 576.284478][T23925] bridge5: the hash_elasticity option has been deprecated and is always 16 [ 576.371415][T23931] xt_nat: multiple ranges no longer supported [ 576.666288][ T5838] Bluetooth: hci1: command 0x041b tx timeout [ 576.712029][T23944] bond6: entered promiscuous mode [ 576.786837][T23949] bond_slave_0: entered promiscuous mode [ 576.792932][T23949] bridge_slave_1: entered promiscuous mode [ 576.830977][T23949] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 576.831985][T23954] netlink: 'syz.2.5046': attribute type 10 has an invalid length. [ 576.846760][T23949] bond6: (slave macvlan0): making interface the new active one [ 576.871216][T23949] macvlan0: entered promiscuous mode [ 576.885750][T23949] bond0: entered promiscuous mode [ 576.899479][T23949] bond6: (slave macvlan0): Enslaving as an active interface with an up link [ 576.921102][T23954] bridge0: port 1(bridge_slave_0) entered disabled state [ 576.970591][T23954] bridge0: port 1(bridge_slave_0) entered blocking state [ 576.977900][T23954] bridge0: port 1(bridge_slave_0) entered forwarding state [ 577.009199][T23954] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 577.254361][T23758] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 577.839206][T23983] 0: reclassify loop, rule prio 0, protocol 800 [ 578.238292][T23758] veth0_vlan: entered promiscuous mode [ 578.255737][T24014] tipc: Enabled bearer , priority 0 [ 578.277916][T23758] veth1_vlan: entered promiscuous mode [ 578.303982][T24014] tipc: Enabled bearer , priority 10 [ 578.318184][T24020] netlink: 'syz.1.5067': attribute type 3 has an invalid length. [ 578.331214][T24014] syzkaller0: entered promiscuous mode [ 578.338319][T24014] syzkaller0: entered allmulticast mode [ 578.382155][T24013] tipc: Resetting bearer [ 578.471130][T24013] tipc: Disabling bearer [ 578.542375][T23758] veth0_macvtap: entered promiscuous mode [ 578.582977][T23758] veth1_macvtap: entered promiscuous mode [ 578.648776][T23758] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 578.661280][T24036] tipc: Can't bind to reserved service type 0 [ 578.700643][T24040] RDS: rds_bind could not find a transport for 400:0:1200:0:1030:0:ffff:ffff, load rds_tcp or rds_rdma? [ 578.717392][T23758] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 578.744841][ T5838] Bluetooth: hci1: command 0x041b tx timeout [ 578.749529][ T993] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 578.779906][ T993] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 578.796464][ T993] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 578.866501][ T993] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 578.930444][T24046] : entered promiscuous mode [ 578.945828][T24045] syzkaller1: entered promiscuous mode [ 578.955580][T24045] syzkaller1: entered allmulticast mode [ 579.136253][T24052] __nla_validate_parse: 16 callbacks suppressed [ 579.136275][T24052] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5077'. [ 579.180840][ T993] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 579.209157][ T993] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 579.272075][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 579.321919][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 579.415617][T17770] tipc: Node number set to 914770451 [ 579.620788][T24070] bond0: Device is already in use. [ 579.843980][T24079] Bluetooth: hci0: Opcode 0x0c20 failed: -22 [ 580.197362][T24090] Cannot find del_set index 3 as target [ 580.285429][ T5838] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 580.296752][ T5838] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 580.313775][T24095] syzkaller0: entered promiscuous mode [ 580.315671][ T5838] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 580.328946][ T5838] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 580.336584][T24095] syzkaller0: entered allmulticast mode [ 580.342991][ T5838] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 580.614389][T24113] netlink: 'syz.7.5095': attribute type 21 has an invalid length. [ 580.834859][ T5843] Bluetooth: hci1: command 0x041b tx timeout [ 581.084063][T24141] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 581.317359][T24152] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5106'. [ 581.342459][T24096] chnl_net:caif_netlink_parms(): no params data found [ 581.346208][T24152] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5106'. [ 581.392381][T24152] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5106'. [ 581.423688][T24159] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5106'. [ 581.443432][T24159] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5106'. [ 581.481093][T24165] netlink: 'syz.2.5110': attribute type 1 has an invalid length. [ 581.643844][T24096] bridge0: port 1(bridge_slave_0) entered blocking state [ 581.654941][T24096] bridge0: port 1(bridge_slave_0) entered disabled state [ 581.669737][T24096] bridge_slave_0: entered allmulticast mode [ 581.678317][T24177] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5113'. [ 581.693427][T24096] bridge_slave_0: entered promiscuous mode [ 581.695061][T24180] netlink: 'syz.1.5115': attribute type 1 has an invalid length. [ 581.706897][T24096] bridge0: port 2(bridge_slave_1) entered blocking state [ 581.714363][T24096] bridge0: port 2(bridge_slave_1) entered disabled state [ 581.723147][T24096] bridge_slave_1: entered allmulticast mode [ 581.726682][T24180] netlink: 228 bytes leftover after parsing attributes in process `syz.1.5115'. [ 581.732535][T24096] bridge_slave_1: entered promiscuous mode [ 581.823598][T24177] syzkaller0: entered promiscuous mode [ 581.833165][T24177] syzkaller0: entered allmulticast mode [ 581.850179][T24190] xt_l2tp: v2 sid > 0xffff: 1114112 [ 581.857917][T24096] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 581.877779][T24192] netlink: 'syz.1.5117': attribute type 1 has an invalid length. [ 581.884167][T24096] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 581.909977][T24195] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5118'. [ 581.941384][T24192] 8021q: adding VLAN 0 to HW filter on device bond8 [ 581.976939][T24096] team0: Port device team_slave_0 added [ 581.979372][T24195] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5118'. [ 581.987074][T24096] team0: Port device team_slave_1 added [ 582.051952][T24096] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 582.065956][T24096] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 582.096595][T24096] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 582.129878][T24096] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 582.150150][T24096] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 582.180807][T24096] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 582.226612][T24205] pim6reg1: entered promiscuous mode [ 582.231984][T24205] pim6reg1: entered allmulticast mode [ 582.426616][ T5843] Bluetooth: hci0: command tx timeout [ 582.438696][T24217] xt_policy: output policy not valid in PREROUTING and INPUT [ 582.459388][T24096] hsr_slave_0: entered promiscuous mode [ 582.467292][T24096] hsr_slave_1: entered promiscuous mode [ 582.476349][T24096] debugfs: 'hsr0' already exists in 'hsr' [ 582.482260][T24096] Cannot create hsr debugfs directory [ 582.658796][T24223] tipc: Started in network mode [ 582.663720][T24223] tipc: Node identity ba6e10f6ab4c, cluster identity 4711 [ 582.682126][T24223] tipc: Enabled bearer , priority 0 [ 582.793670][T24230] syzkaller0: entered promiscuous mode [ 582.802121][T24230] syzkaller0: entered allmulticast mode [ 582.886291][T24223] tipc: Resetting bearer [ 582.916436][ T5843] Bluetooth: hci1: command 0x041b tx timeout [ 582.956210][T24222] tipc: Resetting bearer [ 582.995707][T24222] tipc: Disabling bearer [ 583.550287][T24272] xt_TCPMSS: Only works on TCP SYN packets [ 584.090741][T24300] netlink: 'syz.6.5151': attribute type 21 has an invalid length. [ 584.143403][T24296] netlink: 'syz.6.5151': attribute type 21 has an invalid length. [ 584.157968][T24296] __nla_validate_parse: 2 callbacks suppressed [ 584.157992][T24296] netlink: 128 bytes leftover after parsing attributes in process `syz.6.5151'. [ 584.206367][T24289] netlink: 5 bytes leftover after parsing attributes in process `syz.2.5147'. [ 584.223061][T24300] netlink: 'syz.6.5151': attribute type 4 has an invalid length. [ 584.231114][T24300] netlink: 'syz.6.5151': attribute type 5 has an invalid length. [ 584.239365][T24300] netlink: 3 bytes leftover after parsing attributes in process `syz.6.5151'. [ 584.256290][T24300] netlink: 40 bytes leftover after parsing attributes in process `syz.6.5151'. [ 584.510087][ T5838] Bluetooth: hci0: command tx timeout [ 584.985275][ T5838] Bluetooth: hci1: command 0x041b tx timeout [ 585.897628][T24296] netlink: 'syz.6.5151': attribute type 4 has an invalid length. [ 585.905861][T24296] netlink: 'syz.6.5151': attribute type 5 has an invalid length. [ 585.913769][T24296] netlink: 3 bytes leftover after parsing attributes in process `syz.6.5151'. [ 585.932968][T24289] 0ªî{X¹¦: renamed from gretap0 (while UP) [ 585.967087][T24289] 0ªî{X¹¦: entered allmulticast mode [ 585.989477][T24289] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 586.014555][T24096] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 586.036966][T24308] netlink: 'syz.1.5154': attribute type 1 has an invalid length. [ 586.118025][T24096] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 586.159596][T24308] tipc: Trying to set illegal importance in message [ 586.185593][T24311] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5155'. [ 586.191545][T24312] 8021q: adding VLAN 0 to HW filter on device bond10 [ 586.207468][T24312] bond9: (slave bond10): making interface the new active one [ 586.215962][T24312] bond9: (slave bond10): Enslaving as an active interface with an up link [ 586.245393][T24096] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 586.290697][T24096] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 586.379040][T24331] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5159'. [ 586.568865][T24096] 8021q: adding VLAN 0 to HW filter on device bond0 [ 586.586632][ T5838] Bluetooth: hci0: command 0x040f tx timeout [ 586.630326][T24096] 8021q: adding VLAN 0 to HW filter on device team0 [ 586.652446][ T993] bridge0: port 1(bridge_slave_0) entered blocking state [ 586.659732][ T993] bridge0: port 1(bridge_slave_0) entered forwarding state [ 586.700633][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 586.707907][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 586.903752][T24361] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5167'. [ 586.904896][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 586.984447][T24368] netlink: 248 bytes leftover after parsing attributes in process `syz.2.5167'. [ 587.067243][ T5843] Bluetooth: hci1: command 0x041b tx timeout [ 587.378206][T24096] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 587.449154][T24387] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5173'. [ 587.599434][T24397] netlink: 'syz.7.5175': attribute type 3 has an invalid length. [ 587.609812][T24397] netlink: 'syz.7.5175': attribute type 2 has an invalid length. [ 587.888551][ T993] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 587.922220][ T993] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 587.939063][T24412] netlink: 'syz.6.5181': attribute type 9 has an invalid length. [ 587.962357][ T3561] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 587.968681][T24412] netlink: 'syz.6.5181': attribute type 7 has an invalid length. [ 587.994191][ T3561] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 588.016007][T24412] netlink: 'syz.6.5181': attribute type 8 has an invalid length. [ 588.045150][T24413] netlink: 'syz.6.5181': attribute type 4 has an invalid length. [ 588.059520][T24416] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 588.083221][T24096] veth0_vlan: entered promiscuous mode [ 588.133200][T24096] veth1_vlan: entered promiscuous mode [ 588.239575][T24424] v: renamed from vlan0 [ 588.247036][T24425] netlink: 'syz.6.5185': attribute type 1 has an invalid length. [ 588.306526][T24096] veth0_macvtap: entered promiscuous mode [ 588.337530][T24096] veth1_macvtap: entered promiscuous mode [ 588.448176][T24428] bond1: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 588.498321][T24428] bond1 (unregistering): Released all slaves [ 588.590106][T24096] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 588.630525][T24096] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 588.649537][T24446] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 588.664950][ T5843] Bluetooth: hci0: command 0x040f tx timeout [ 588.683754][T15546] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 588.719752][T15546] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 588.756047][T15546] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 588.786228][T15546] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 588.870687][T24453] xt_hashlimit: size too large, truncated to 1048576 [ 589.107657][T24461] syzkaller0: entered promiscuous mode [ 589.118874][T24461] syzkaller0: entered allmulticast mode [ 589.132322][T24456] tipc: Enabled bearer , priority 0 [ 589.144836][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 589.174847][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 589.571674][T24467] tipc: Resetting bearer [ 589.594341][ T3561] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 589.603248][T24455] tipc: Resetting bearer [ 589.610075][ T3561] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 589.652272][T24455] tipc: Disabling bearer [ 589.669476][T24480] __nla_validate_parse: 10 callbacks suppressed [ 589.669497][T24480] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5199'. [ 589.693212][T24481] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5199'. [ 589.707288][T24476] tipc: Enabled bearer , priority 0 [ 589.923124][T24487] netlink: 18 bytes leftover after parsing attributes in process `syz.5.5082'. [ 589.939446][T24476] tipc: Disabling bearer [ 590.051844][T24496] netlink: 28 bytes leftover after parsing attributes in process `syz.7.5201'. [ 590.147838][T24496] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5201'. [ 590.208059][T24503] IPv6: NLM_F_CREATE should be specified when creating new route [ 590.241831][T24503] tipc: Enabling of bearer rejected, failed to enable media [ 590.295401][T24503] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 590.354459][T24502] netdevsim netdevsim5 netdevsim0: left promiscuous mode [ 590.387073][T24512] bond0: (slave macvlan5): Error -22 calling dev_set_mtu [ 590.434053][T24509] nft_compat: unsupported protocol 0 [ 590.434147][T24511] bond0: (slave macvlan5): Error -22 calling dev_set_mtu [ 590.760676][ T5843] Bluetooth: hci0: command 0x040f tx timeout [ 590.874531][T24539] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 591.163111][T24545] team0 (unregistering): Port device team_slave_0 removed [ 591.173206][T24545] team0 (unregistering): Port device team_slave_1 removed [ 591.396394][T24563] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5221'. [ 591.405598][T24563] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5221'. [ 591.590075][T24574] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5223'. [ 591.605819][T24574] netlink: 20 bytes leftover after parsing attributes in process `syz.7.5223'. [ 591.663377][T24574] geneve2: entered promiscuous mode [ 591.709652][T24574] geneve2: entered allmulticast mode [ 591.773674][T24584] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5228'. [ 592.267428][T24608] netlink: zone id is out of range [ 592.496160][T24615] validate_nla: 4 callbacks suppressed [ 592.496183][T24615] netlink: 'syz.7.5236': attribute type 4 has an invalid length. [ 592.599998][T24620] bridge_slave_1: entered allmulticast mode [ 592.819393][ T5932] IPVS: starting estimator thread 0... [ 592.896801][T24629] netlink: 'syz.7.5242': attribute type 13 has an invalid length. [ 592.942035][T24629] gretap0: refused to change device tx_queue_len [ 592.964864][T24636] IPVS: using max 25 ests per chain, 60000 per kthread [ 592.972476][T24629] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 592.997487][T24638] bond_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 593.153146][T24650] netlink: 'syz.5.5247': attribute type 1 has an invalid length. [ 593.221555][T24652] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 593.277418][T24658] veth3: entered promiscuous mode [ 593.551603][T24672] netlink: 'syz.5.5254': attribute type 21 has an invalid length. [ 593.640344][T24672] netlink: 'syz.5.5254': attribute type 1 has an invalid length. [ 593.803533][T24683] openvswitch: netlink: push_nsh: missing base or metadata attributes [ 593.835776][T24683] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 595.829427][T24705] vlan0: entered allmulticast mode [ 596.014319][T24710] bridge0: mtu less than device minimum [ 596.078302][T24715] netdevsim netdevsim2: Direct firmware load for lookup_extent_enter failed with error -2 [ 596.095391][T24715] netdevsim netdevsim2: Falling back to sysfs fallback for: lookup_extent_enter [ 596.197834][T24726] IPVS: set_ctl: invalid protocol: 8 127.0.0.1:20001 [ 596.446959][T24741] __nla_validate_parse: 12 callbacks suppressed [ 596.446983][T24741] netlink: 104 bytes leftover after parsing attributes in process `syz.5.5273'. [ 596.698095][T24756] netlink: 'syz.6.5278': attribute type 2 has an invalid length. [ 596.708320][T24756] netlink: 188 bytes leftover after parsing attributes in process `syz.6.5278'. [ 597.005322][T24770] netlink: 40 bytes leftover after parsing attributes in process `syz.7.5280'. [ 597.656705][T24782] sctp: [Deprecated]: syz.5.5284 (pid 24782) Use of struct sctp_assoc_value in delayed_ack socket option. [ 597.656705][T24782] Use struct sctp_sack_info instead [ 597.694681][T24782] sctp: [Deprecated]: syz.5.5284 (pid 24782) Use of struct sctp_assoc_value in delayed_ack socket option. [ 597.694681][T24782] Use struct sctp_sack_info instead [ 597.917782][T24794] syzkaller1: entered promiscuous mode [ 597.946121][T24794] syzkaller1: entered allmulticast mode [ 598.360738][T24818] netlink: 'syz.2.5291': attribute type 1 has an invalid length. [ 598.394876][T24818] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 598.521951][T24832] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5295'. [ 598.589485][T24839] netlink: 'syz.6.5297': attribute type 10 has an invalid length. [ 598.600357][T24839] team0: Device ipvlan1 failed to register rx_handler [ 598.764998][T24850] netlink: 'syz.6.5299': attribute type 15 has an invalid length. [ 598.772888][T24850] netlink: 48 bytes leftover after parsing attributes in process `syz.6.5299'. [ 598.807855][T24850] netlink: 'syz.6.5299': attribute type 15 has an invalid length. [ 598.821879][T24850] netlink: 48 bytes leftover after parsing attributes in process `syz.6.5299'. [ 598.832373][T24850] netlink: 'syz.6.5299': attribute type 15 has an invalid length. [ 598.840448][T24850] netlink: 48 bytes leftover after parsing attributes in process `syz.6.5299'. [ 598.854495][T24855] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5302'. [ 598.881784][T24855] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5302'. [ 598.891538][T24855] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5302'. [ 598.901586][T24850] netlink: 'syz.6.5299': attribute type 15 has an invalid length. [ 598.913707][T24850] netlink: 'syz.6.5299': attribute type 15 has an invalid length. [ 598.922367][T24850] netlink: 'syz.6.5299': attribute type 15 has an invalid length. [ 598.945158][T24850] netlink: 'syz.6.5299': attribute type 15 has an invalid length. [ 598.965248][T24850] netlink: 'syz.6.5299': attribute type 15 has an invalid length. [ 599.243930][T24876] bridge0: port 3(batadv1) entered blocking state [ 599.266540][T24876] bridge0: port 3(batadv1) entered disabled state [ 599.280354][T24876] batadv1: entered allmulticast mode [ 599.311028][T24876] batadv1: entered promiscuous mode [ 599.737353][ T1142] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 599.748065][ T1142] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 600.124243][T24930] batadv_slave_1: entered promiscuous mode [ 602.257854][T24944] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 602.258417][T24945] __nla_validate_parse: 38 callbacks suppressed [ 602.258436][T24945] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5325'. [ 602.292512][T24918] batadv_slave_1: left promiscuous mode [ 602.303863][T24968] tipc: Enabling of bearer rejected, failed to enable media [ 602.403274][T24984] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5333'. [ 602.458911][T24986] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5335'. [ 602.505956][T24989] vlan2: entered promiscuous mode [ 602.511205][T24989] bridge0: entered promiscuous mode [ 602.524367][T24990] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5336'. [ 602.545580][T24990] bond2: left allmulticast mode [ 602.550585][T24990] bond2: left promiscuous mode [ 602.557267][T24990] bridge0: port 3(bond2) entered disabled state [ 602.577207][T24990] bridge_slave_1: left allmulticast mode [ 602.583321][T24990] bridge_slave_1: left promiscuous mode [ 602.615962][T24990] bridge0: port 2(bridge_slave_1) entered disabled state [ 602.626980][T25001] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5339'. [ 602.651054][T24990] bridge_slave_0: left promiscuous mode [ 602.660015][T24990] bridge0: port 1(bridge_slave_0) entered disabled state [ 602.733555][T25001] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 602.758106][T25004] [ 602.760493][T25004] ====================================================== [ 602.767522][T25004] WARNING: possible circular locking dependency detected [ 602.774655][T25004] syzkaller #0 Not tainted [ 602.779067][T25004] ------------------------------------------------------ [ 602.786084][T25004] syz.5.5340/25004 is trying to acquire lock: [ 602.792165][T25004] ffffffff8f4271d8 (nr_neigh_list_lock){+...}-{3:3}, at: nr_remove_neigh+0x25/0xe0 [ 602.801479][T25004] [ 602.801479][T25004] but task is already holding lock: [ 602.808856][T25004] ffff88805955ab70 (&nr_node->node_lock){+...}-{3:3}, at: nr_add_node+0xcce/0x2570 [ 602.818168][T25004] [ 602.818168][T25004] which lock already depends on the new lock. [ 602.818168][T25004] [ 602.828620][T25004] [ 602.828620][T25004] the existing dependency chain (in reverse order) is: [ 602.837629][T25004] [ 602.837629][T25004] -> #2 (&nr_node->node_lock){+...}-{3:3}: [ 602.845626][T25004] lock_acquire+0x120/0x360 [ 602.850700][T25004] _raw_spin_lock_bh+0x36/0x50 [ 602.855983][T25004] nr_rt_device_down+0x12a/0x720 [ 602.861535][T25004] nr_device_event+0x137/0x150 [ 602.866817][T25004] notifier_call_chain+0x1b6/0x3e0 [ 602.872485][T25004] __dev_notify_flags+0x18d/0x2e0 [ 602.878043][T25004] netif_change_flags+0xe8/0x1a0 [ 602.883511][T25004] dev_change_flags+0x130/0x260 [ 602.888901][T25004] dev_ioctl+0x7b4/0x1150 [ 602.893768][T25004] sock_do_ioctl+0x22c/0x300 [ 602.898879][T25004] sock_ioctl+0x576/0x790 [ 602.903725][T25004] __se_sys_ioctl+0xfc/0x170 [ 602.908836][T25004] do_syscall_64+0xfa/0xfa0 [ 602.913862][T25004] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 602.920277][T25004] [ 602.920277][T25004] -> #1 (nr_node_list_lock){+...}-{3:3}: [ 602.928093][T25004] lock_acquire+0x120/0x360 [ 602.933136][T25004] _raw_spin_lock_bh+0x36/0x50 [ 602.938419][T25004] nr_rt_device_down+0xa9/0x720 [ 602.943809][T25004] nr_device_event+0x137/0x150 [ 602.949095][T25004] notifier_call_chain+0x1b6/0x3e0 [ 602.954750][T25004] __dev_notify_flags+0x18d/0x2e0 [ 602.960309][T25004] netif_change_flags+0xe8/0x1a0 [ 602.965790][T25004] dev_change_flags+0x130/0x260 [ 602.971168][T25004] dev_ioctl+0x7b4/0x1150 [ 602.976020][T25004] sock_do_ioctl+0x22c/0x300 [ 602.981133][T25004] sock_ioctl+0x576/0x790 [ 602.985981][T25004] __se_sys_ioctl+0xfc/0x170 [ 602.991096][T25004] do_syscall_64+0xfa/0xfa0 [ 602.996124][T25004] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 603.002541][T25004] [ 603.002541][T25004] -> #0 (nr_neigh_list_lock){+...}-{3:3}: [ 603.010445][T25004] validate_chain+0xb9b/0x2140 [ 603.015737][T25004] __lock_acquire+0xab9/0xd20 [ 603.020939][T25004] lock_acquire+0x120/0x360 [ 603.025972][T25004] _raw_spin_lock_bh+0x36/0x50 [ 603.031279][T25004] nr_remove_neigh+0x25/0xe0 [ 603.036408][T25004] nr_add_node+0x1d9f/0x2570 [ 603.041574][T25004] nr_rt_ioctl+0xc12/0xd50 [ 603.046514][T25004] sock_do_ioctl+0xdc/0x300 [ 603.051554][T25004] sock_ioctl+0x576/0x790 [ 603.056430][T25004] __se_sys_ioctl+0xfc/0x170 [ 603.061554][T25004] do_syscall_64+0xfa/0xfa0 [ 603.066580][T25004] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 603.072997][T25004] [ 603.072997][T25004] other info that might help us debug this: [ 603.072997][T25004] [ 603.083219][T25004] Chain exists of: [ 603.083219][T25004] nr_neigh_list_lock --> nr_node_list_lock --> &nr_node->node_lock [ 603.083219][T25004] [ 603.097041][T25004] Possible unsafe locking scenario: [ 603.097041][T25004] [ 603.104495][T25004] CPU0 CPU1 [ 603.109884][T25004] ---- ---- [ 603.115260][T25004] lock(&nr_node->node_lock); [ 603.120041][T25004] lock(nr_node_list_lock); [ 603.127160][T25004] lock(&nr_node->node_lock); [ 603.134446][T25004] lock(nr_neigh_list_lock); [ 603.139123][T25004] [ 603.139123][T25004] *** DEADLOCK *** [ 603.139123][T25004] [ 603.147258][T25004] 1 lock held by syz.5.5340/25004: [ 603.152384][T25004] #0: ffff88805955ab70 (&nr_node->node_lock){+...}-{3:3}, at: nr_add_node+0xcce/0x2570 [ 603.162299][T25004] [ 603.162299][T25004] stack backtrace: [ 603.168194][T25004] CPU: 0 UID: 0 PID: 25004 Comm: syz.5.5340 Not tainted syzkaller #0 PREEMPT(full) [ 603.168213][T25004] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 603.168223][T25004] Call Trace: [ 603.168232][T25004] [ 603.168240][T25004] dump_stack_lvl+0x189/0x250 [ 603.168266][T25004] ? __pfx_dump_stack_lvl+0x10/0x10 [ 603.168287][T25004] ? __pfx__printk+0x10/0x10 [ 603.168301][T25004] ? stack_trace_save+0x9c/0xe0 [ 603.168326][T25004] print_circular_bug+0x2ee/0x310 [ 603.168347][T25004] check_noncircular+0x134/0x160 [ 603.168369][T25004] validate_chain+0xb9b/0x2140 [ 603.168396][T25004] __lock_acquire+0xab9/0xd20 [ 603.168413][T25004] ? nr_remove_neigh+0x25/0xe0 [ 603.168430][T25004] lock_acquire+0x120/0x360 [ 603.168443][T25004] ? nr_remove_neigh+0x25/0xe0 [ 603.168488][T25004] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 603.168509][T25004] ? nr_remove_neigh+0x25/0xe0 [ 603.168525][T25004] _raw_spin_lock_bh+0x36/0x50 [ 603.168541][T25004] ? nr_remove_neigh+0x25/0xe0 [ 603.168558][T25004] nr_remove_neigh+0x25/0xe0 [ 603.168575][T25004] nr_add_node+0x1d9f/0x2570 [ 603.168593][T25004] ? dev_get_by_name+0x21/0x200 [ 603.168609][T25004] ? dev_get_by_name+0x21/0x200 [ 603.168624][T25004] ? dev_get_by_name+0x21/0x200 [ 603.168639][T25004] ? nr_call_to_digi+0x136/0x1b0 [ 603.168655][T25004] nr_rt_ioctl+0xc12/0xd50 [ 603.168676][T25004] ? __pfx_nr_rt_ioctl+0x10/0x10 [ 603.168691][T25004] ? lockdep_hardirqs_on+0x9c/0x150 [ 603.168713][T25004] ? apparmor_capable+0x137/0x1b0 [ 603.168731][T25004] ? capable+0x89/0xe0 [ 603.168747][T25004] ? nr_ioctl+0x1b1/0x3b0 [ 603.168769][T25004] sock_do_ioctl+0xdc/0x300 [ 603.168789][T25004] ? __pfx_sock_do_ioctl+0x10/0x10 [ 603.168813][T25004] sock_ioctl+0x576/0x790 [ 603.168830][T25004] ? __pfx_sock_ioctl+0x10/0x10 [ 603.168848][T25004] ? __fget_files+0x3a0/0x420 [ 603.168861][T25004] ? __fget_files+0x2a/0x420 [ 603.168875][T25004] ? bpf_lsm_file_ioctl+0x9/0x20 [ 603.168891][T25004] ? __pfx_sock_ioctl+0x10/0x10 [ 603.168907][T25004] __se_sys_ioctl+0xfc/0x170 [ 603.168927][T25004] do_syscall_64+0xfa/0xfa0 [ 603.168945][T25004] ? lockdep_hardirqs_on+0x9c/0x150 [ 603.168962][T25004] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 603.168976][T25004] ? clear_bhb_loop+0x60/0xb0 [ 603.168993][T25004] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 603.169008][T25004] RIP: 0033:0x7f60d258efc9 [ 603.169023][T25004] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 603.169036][T25004] RSP: 002b:00007f60d3505038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 603.169052][T25004] RAX: ffffffffffffffda RBX: 00007f60d27e5fa0 RCX: 00007f60d258efc9 [ 603.169063][T25004] RDX: 0000200000000000 RSI: 000000000000890b RDI: 0000000000000005 [ 603.169073][T25004] RBP: 00007f60d2611f91 R08: 0000000000000000 R09: 0000000000000000 [ 603.169082][T25004] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 603.169091][T25004] R13: 00007f60d27e6038 R14: 00007f60d27e5fa0 R15: 00007ffefcbddf38 [ 603.169110][T25004] [ 603.473917][T25001] validate_nla: 26 callbacks suppressed [ 603.473935][T25001] netlink: 'syz.7.5339': attribute type 1 has an invalid length. [ 609.104660][ T1154] unregister_netdevice: waiting for ªªªªªªZ7nz>RAÌ to become free. Usage count = 3 [ 609.114149][ T1154] ref_tracker: netdev@ffff888024768618 has 1/1 users at [ 609.114149][ T1154] ib_device_set_netdev+0x31f/0x6d0 [ 609.114149][ T1154] siw_newlink+0x40c/0xd70 [ 609.114149][ T1154] nldev_newlink+0x4a5/0x5a0 [ 609.114149][ T1154] rdma_nl_rcv+0x6ae/0x980 [ 609.114149][ T1154] netlink_unicast+0x82f/0x9e0 [ 609.114149][ T1154] netlink_sendmsg+0x805/0xb30 [ 609.114149][ T1154] __sock_sendmsg+0x21c/0x270 [ 609.114149][ T1154] ____sys_sendmsg+0x505/0x830 [ 609.114149][ T1154] ___sys_sendmsg+0x21f/0x2a0 [ 609.114149][ T1154] __x64_sys_sendmsg+0x19b/0x260 [ 609.114149][ T1154] do_syscall_64+0xfa/0xfa0 [ 609.114149][ T1154] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 609.114149][ T1154]