last executing test programs: 2m15.043695982s ago: executing program 3 (id=1330): r0 = socket$rxrpc(0x21, 0x2, 0xa) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r6, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800e0001006970366772657461700000001800028014000700fc00000000000000000000000000000008000a00", @ANYRES32=r9], 0x54}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r3, @ANYBLOB], 0x3c}}, 0x0) bind$rxrpc(r0, &(0x7f0000000040)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e20, @rand_addr=0x64010100}}, 0x24) recvmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=""/90, 0x5a}, {&(0x7f0000000100)=""/216, 0xd8}], 0x2, &(0x7f0000000200)=""/93, 0x5d}}], 0x1, 0x140, &(0x7f00000002c0)={0x77359400}) close(r0) 2m14.612799504s ago: executing program 3 (id=1336): bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x2, 0x4, 0x4, 0x8}, 0x50) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f00000046c0)={'filter\x00', 0x7, 0x4, 0x3c8, 0x0, 0x0, 0x110, 0x2e0, 0x110, 0x2e0, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x2e}, @mac=@remote, @loopback, @local, 0x1, 0x1}}}, {{@arp={@multicast2, @private=0xa010100, 0xff, 0xffffff00, 0xc, 0x4, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, {[0xff, 0xff, 0xff, 0xff, 0x0, 0xbe9240b8a223bba0]}}, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x24}, {[0xff, 0x0, 0xff, 0xff, 0xff]}}, 0x2, 0x6, 0x23b0, 0x9dd7, 0x80, 0x9, 'veth1_vlan\x00', 'ip_vti0\x00', {0xff}, {0xff}, 0x0, 0x12}, 0xc0, 0xe8}, @unspec=@AUDIT={0x28}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE0={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x2, 0x6, &(0x7f0000000180)=@framed={{0x18, 0x2}, [@map_fd={0x18, 0x0, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x5f5e0ff}, @call]}, &(0x7f0000000000)='GPL\x00', 0xc, 0x26, &(0x7f00000001c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x48}, 0x21) 2m14.462556545s ago: executing program 3 (id=1339): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="d000000010000104ffffffffffffffff0000ffff", @ANYRES32=0x0, @ANYBLOB="08d10000000000009c00128009000100766c616e000000008c0002800c0002000e0000000c0000000600050088a80000640003800c0001007b4b0000000000000c000100020000f4140000000c000100bf000000000400000c00010002000300ff0100000c0001"], 0xd0}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="bc1b0000400007012bbd700000000000017c00000400c2800c0001800600060065580000971b0280540211"], 0x1bbc}, 0x1, 0x0, 0x0, 0x4048011}, 0xc804) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f00000004c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x58, 0x58, 0x8, [@func={0x8, 0x0, 0x0, 0xc, 0x4}, @var={0xc, 0x0, 0x0, 0xe, 0x5, 0x1}, @restrict={0x7}, @restrict={0x5, 0x0, 0x0, 0xb, 0x5}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x4, 0x1000}}, @typedef={0xd, 0x0, 0x0, 0x8, 0x4}]}, {0x0, [0x5f, 0x5f, 0x0, 0x5f, 0xd307b9490332dc4b, 0x3e]}}, &(0x7f0000000800)=""/244, 0x78, 0xf4, 0x1, 0x9b7}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x2, 0x4, 0x80000000, 0x504, 0x0, 0xffffffffffffffff, 0xffffffff}, 0x50) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="6c00000000010104000000000000000002000000240001801400018008000100ac1e000108000200e00000010c0002800500010000000000240002800c00028005000100000000001400018008000100000000d055000200e000000208000740000000000800034000000000"], 0x6c}}, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_IPV6_DSTOPTS(r2, 0x29, 0x3b, &(0x7f0000000000)=ANY=[], 0x8) shutdown(r2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_CMD_DISABLE_BEARER(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000006c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000001000000000400000241000000030013"], 0x2c}}, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x34, r4, 0x20, 0x70bd2d, 0x25dfdbff, {{}, {}, {0x18, 0x17, {0x2, 0x2, @udp='udp:syz1\x00'}}}, ["", ""]}, 0x34}}, 0x40000) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x28, r5, 0x200, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x80, 0x60}}}}, [@NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x6}]}, 0x28}}, 0x80) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e27, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={r6, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000710441000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) 2m14.251508561s ago: executing program 3 (id=1344): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r2) sendmsg$IEEE802154_LLSEC_LIST_KEY(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={0x14, r3, 0x325, 0x70bd27, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x10014}, 0x4008008) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write(r5, &(0x7f0000000080)="29000300010003", 0x7) r6 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f0000000100)={0x0, 0xfffffcebfff, 0x1000, 0x0, 0x1}, 0x20) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newtaction={0x6c, 0x30, 0x1, 0x0, 0x0, {}, [{0x58, 0x1, [@m_mpls={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x0, 0x0, 0x20000000}, 0x2}}, @TCA_MPLS_LABEL={0x8}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000200), r2) sendmsg$NLBL_CALIPSO_C_LIST(r2, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008095}, 0x20000041) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000100)) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000080)=ANY=[@ANYBLOB="20000180000000000000ce9b000000dfff000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f1, &(0x7f00000002c0)={'ip6tnl0\x00', &(0x7f0000000000)=@ethtool_cmd={0x0, 0x0, 0x0, 0x200, 0x2, 0x0, 0x0, 0x0, 0xdb, 0x4, 0x0, 0xfffff7fc, 0x7, 0x0, 0x0, 0x47, [0xfffffffc, 0x80]}}) 2m13.95850038s ago: executing program 3 (id=1351): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0xb, 0x9, 0x0, 0x1, 0x20000000}, {0x66, 0x0, 0x0, 0x256c6c64}}, [@printk={@lld, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0x5, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {}, {0x15}}], {{0x7, 0x1, 0x3, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000000)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @empty, 0x4}, 0x1c) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000000)=[{0x6, 0x40, 0x8}]}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) socketpair$unix(0x1, 0x1, 0x0, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000240)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @broadcast, @void, {@ipv6={0x86dd, @udp={0xa, 0x6, "ff0100", 0xc, 0x11, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}, @mcast2, {[], {0x4e23, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x1, 0x1, 0x75, 0x0, @void}}}}}}}}, 0x0) r3 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC_PROXY(r3, 0x29, 0xd2, &(0x7f0000000600)={{0xa, 0x0, 0x8, @local}, {0xa, 0x0, 0x0, @empty}, 0x1}, 0x5c) setsockopt$MRT6_ADD_MFC_PROXY(r3, 0x29, 0xd2, &(0x7f0000000000)={{0xa, 0x4e24, 0x100, @local, 0x4}, {0xa, 0x4e23, 0x7, @empty, 0xd473}, 0x0, {[0x4, 0x7, 0x3, 0x8001, 0xe10, 0xe, 0x3]}}, 0x5c) setsockopt$MRT6_ADD_MFC_PROXY(r3, 0x29, 0xd3, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @local}, {0xa, 0x0, 0x0, @empty}, 0x1, {[0x0, 0x0, 0x0, 0x0, 0x0, 0xe3]}}, 0x5c) recvmsg$unix(r3, &(0x7f0000000280)={&(0x7f0000000040)=@abs, 0x6e, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/61, 0x3d}, {&(0x7f0000000100)=""/46, 0x2e}, {&(0x7f0000000140)=""/41, 0x29}], 0x3, &(0x7f00000001c0)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xc0}, 0x20) 2m13.571718941s ago: executing program 3 (id=1354): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_LAST_MEMBER_CNT={0x8, 0x14}, @IFLA_BR_NF_CALL_IP6TABLES={0x5, 0x25, 0x1}]}}}]}, 0x44}}, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_DELRULE={0x20, 0x8, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x48}}, 0x0) r3 = socket$phonet(0x23, 0x2, 0x1) ioctl$SIOCPNDELRESOURCE(r3, 0x89ef, &(0x7f00000000c0)=0x800) r4 = socket$isdn(0x22, 0x3, 0x2) ioctl$IMCLEAR_L2(r4, 0x80044946, &(0x7f0000000100)=0x2) 2m13.222219605s ago: executing program 32 (id=1354): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_LAST_MEMBER_CNT={0x8, 0x14}, @IFLA_BR_NF_CALL_IP6TABLES={0x5, 0x25, 0x1}]}}}]}, 0x44}}, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_DELRULE={0x20, 0x8, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x48}}, 0x0) r3 = socket$phonet(0x23, 0x2, 0x1) ioctl$SIOCPNDELRESOURCE(r3, 0x89ef, &(0x7f00000000c0)=0x800) r4 = socket$isdn(0x22, 0x3, 0x2) ioctl$IMCLEAR_L2(r4, 0x80044946, &(0x7f0000000100)=0x2) 1.764076544s ago: executing program 4 (id=2569): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000016c0)=@newqdisc={0x48, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x3}, {0xffff, 0xffff}, {0xfff3, 0xd}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x18, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x8000, 0x4, 0x7, 0x15, 0x17, 0xb}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) shutdown(r0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2, 0x0, 0xa}, 0x10) sendmsg$NFT_BATCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) sendmsg$NFT_MSG_GETFLOWTABLE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, 0x17, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x4040}, 0x8000) readv(r0, &(0x7f0000000500)=[{&(0x7f0000000740)=""/127, 0x7f}], 0x1) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x20, 0x10, 0x1}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 1.637561054s ago: executing program 0 (id=2572): r0 = socket$key(0xf, 0x3, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$key(r0, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x1, 0x0, 0x9, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @loopback}}, @sadb_x_sa2={0x2, 0x13, 0x3}]}, 0x50}}, 0x0) 1.543370222s ago: executing program 1 (id=2575): r0 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x4, @mcast2, 0x7}, 0x1c) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x4001, 0x3, 0x4d0, 0x310, 0x700001b, 0x148, 0x0, 0x148, 0x438, 0x206, 0x240, 0x438, 0x240, 0x7fffffe, 0x0, {[{{@uncond, 0x1ea, 0x2c8, 0x310, 0x0, {0x390, 0x8f00}, [@inet=@rpfilter={{0x28}, {0x3}}, @common=@unspec=@bpf1={{0x230}, @fd}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x0, 0x5}}}, {{@ip={@initdev={0xac, 0x1e, 0x3, 0x0}, @private=0xa010101, 0xff, 0xffffffff, 'veth1_to_hsr\x00', 'gretap0\x00', {}, {}, 0x62, 0x1, 0x44}, 0x0, 0xc0, 0x128, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x8}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x1, 0x39, 0x8, 0xc, 'syz0\x00', 'syz1\x00', {0x8}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x530) 1.477365119s ago: executing program 0 (id=2576): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18007700004000000000000009000001c1800040110000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) (async) r1 = socket$kcm(0x10, 0x3, 0x10) (async) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r2, 0x10c, 0x9, &(0x7f0000000040), 0x4) connect$llc(r2, &(0x7f0000000000)={0x1a, 0x0, 0x1, 0x1, 0x0, 0x0, @remote}, 0x10) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000980)=r0, 0x4) (async) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000003c0)="1400000017000b63d25a80648c2594f934a3c92b", 0x14}], 0x1}, 0x0) 1.460215954s ago: executing program 4 (id=2577): r0 = accept(0xffffffffffffffff, &(0x7f0000000000)=@nfc, &(0x7f0000000080)=0x80) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000140)={'syztnl2\x00', &(0x7f00000000c0)={'syztnl0\x00', 0x0, 0x4, 0x0, 0x8, 0x9, 0x6, @rand_addr=' \x01\x00', @local, 0x8, 0x20, 0x0, 0xfff}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000002c0)={'gretap0\x00', &(0x7f0000000180)={'tunl0\x00', r1, 0x20, 0x40, 0x8, 0x8, {{0x3d, 0x4, 0x0, 0xf, 0xf4, 0x68, 0x0, 0x5, 0x29, 0x0, @remote, @remote, {[@timestamp_prespec={0x44, 0x3c, 0x9f, 0x3, 0x5, [{@local, 0x2}, {@multicast1, 0x75c0}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x7}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x7fffffff}, {@loopback, 0x9}, {@local, 0xffffffc0}, {@loopback, 0x10001}]}, @ra={0x94, 0x4, 0x1}, @timestamp_addr={0x44, 0x2c, 0xea, 0x1, 0x3, [{@multicast2, 0x506}, {@private=0xa010102, 0x7}, {@private=0xa010101, 0x3}, {@empty, 0x100}, {@multicast2}]}, @ra={0x94, 0x4}, @cipso={0x86, 0x53, 0x3, [{0x1, 0xa, "fc4382bea03a0beb"}, {0x2, 0x5, "cc8bf7"}, {0x0, 0xa, "758e8824a3fd50ad"}, {0x2, 0x11, "7dbc6b89bbde4af7711f171b8df64a"}, {0x6, 0xe, "b3aad11935d03c32bb0ad339"}, {0x0, 0x4, 'T0'}, {0x2, 0xe, "ce922bd7ef56da9a57b8d0b7"}, {0x7, 0x3, "12"}]}, @rr={0x7, 0xb, 0x9b, [@private=0xa010102, @remote]}, @noop, @rr={0x7, 0xb, 0x95, [@multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @ra={0x94, 0x4}]}}}}}) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000300), r0) r4 = accept4$packet(r0, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000380)=0x14, 0x0) ioctl$AUTOFS_IOC_PROTOVER(r4, 0x80049363, &(0x7f00000003c0)) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r0) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x2c, r5, 0x800, 0x70bd2a, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x9}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x4c5}, @NL80211_ATTR_OPMODE_NOTIF={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8011}, 0x20000004) recvmsg(r4, &(0x7f0000001b80)={&(0x7f0000000540)=@ax25={{0x3, @rose}, [@default, @bcast, @remote, @bcast, @rose, @bcast, @default, @bcast]}, 0x80, &(0x7f0000001a80)=[{&(0x7f00000005c0)}, {&(0x7f0000000600)=""/103, 0x67}, {&(0x7f0000000680)=""/76, 0x4c}, {&(0x7f0000000700)=""/19, 0x13}, {&(0x7f0000000740)=""/4096, 0x1000}, {&(0x7f0000001740)=""/125, 0x7d}, {&(0x7f00000017c0)=""/207, 0xcf}, {&(0x7f00000018c0)=""/210, 0xd2}, {&(0x7f00000019c0)=""/83, 0x53}, {&(0x7f0000001a40)=""/45, 0x2d}], 0xa, &(0x7f0000001b40)=""/31, 0x1f}, 0x2000) sendmsg$IPVS_CMD_FLUSH(r0, &(0x7f0000001c80)={&(0x7f0000001bc0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001c40)={&(0x7f0000001c00)={0x38, r3, 0x8, 0x70bd2b, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xcbef}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x5}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x840) sendmsg$IPVS_CMD_GET_INFO(r0, &(0x7f0000001e80)={&(0x7f0000001cc0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001e40)={&(0x7f0000001d00)={0x114, r3, 0x0, 0x70bd2c, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfffffffd}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_SERVICE={0x70, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x10}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@local}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x64}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0xdc17}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private2}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x10}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0xe207}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_SERVICE={0x4c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x10, 0x10}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private0={0xfc, 0x0, '\x00', 0x1}}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}]}]}, 0x114}, 0x1, 0x0, 0x0, 0x80}, 0x40000c0) ioctl$SIOCGIFMTU(r0, 0x8921, &(0x7f0000001ec0)={'syzkaller1\x00'}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001f80)={0x1, 0x58, &(0x7f0000001f00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) setsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f0000001fc0)={@remote, r6}, 0x14) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000002040), r0) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r0, &(0x7f0000002100)={&(0x7f0000002000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000020c0)={&(0x7f0000002080)={0x14, r7, 0x400, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x60810}, 0x20044844) ioctl$VFAT_IOCTL_READDIR_SHORT(r0, 0x82307202, &(0x7f0000002140)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f00000023c0), r0) sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f00000027c0)={&(0x7f0000002380)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000002780)={&(0x7f0000002400)={0x368, r8, 0x2, 0x70bd29, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0x30, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x401}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffffc}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}]}, @TIPC_NLA_BEARER={0x13c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x1, @dev={0xfe, 0x80, '\x00', 0x44}, 0xfff}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x8, @private0={0xfc, 0x0, '\x00', 0x1}, 0x1}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x6, @dev={0xfe, 0x80, '\x00', 0x3f}, 0xfffffe01}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x3, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x1000}}}}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @loopback}}, {0x14, 0x2, @in={0x2, 0x4e23, @rand_addr=0x64010100}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x6, @mcast1, 0xfffff001}}, {0x14, 0x2, @in={0x2, 0x4e21, @private=0xa010102}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @private=0xa010102}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x3, @mcast1, 0x7}}}}]}, @TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xfffff800}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xfffffff8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x40}]}, @TIPC_NLA_NET={0x30, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x2}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}]}, @TIPC_NLA_LINK={0x1c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x200}]}]}, @TIPC_NLA_NET={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x100000000}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2424cde}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x365}]}, @TIPC_NLA_BEARER={0xb8, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xc, 0x1, @l2={'eth', 0x3a, 'nr0\x00'}}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9d1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x200}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'ib', 0x3a, 'dvmrp0\x00'}}]}, @TIPC_NLA_BEARER={0x4c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @broadcast}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}, 0xfffffffc}}}}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffffc}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xcd}]}]}, 0x368}}, 0x24000840) close(r0) r9 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$EXT4_IOC_MOVE_EXT(r9, 0xc028660f, &(0x7f0000002800)={0x0, r4, 0x0, 0xffff, 0x7fffffffffffffff, 0x1}) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000002840)={'wg2\x00'}) syz_init_net_socket$ax25(0x3, 0x2, 0xf0) r10 = syz_genetlink_get_family_id$gtp(&(0x7f00000028c0), r0) r11 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000002900)='ns/time_for_children\x00') sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f00000029c0)={&(0x7f0000002880)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000002980)={&(0x7f0000002940)={0x2c, r10, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @remote}, @GTPA_NET_NS_FD={0x8, 0x7, r11}, @GTPA_NET_NS_FD={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20048810}, 0x4000) openat$tun(0xffffffffffffff9c, &(0x7f0000002a00), 0x40001, 0x0) r12 = syz_genetlink_get_family_id$mptcp(&(0x7f0000002a80), r4) sendmsg$MPTCP_PM_CMD_ANNOUNCE(r0, &(0x7f0000002c40)={&(0x7f0000002a40), 0xc, &(0x7f0000002c00)={&(0x7f0000002ac0)={0x118, r12, 0xc3c, 0x70bd2c, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x30, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}]}, @MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x4}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x60, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xb}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x10}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x28}}}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x1c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x11}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}]}]}, 0x118}, 0x1, 0x0, 0x0, 0x800}, 0x4015) 1.403846397s ago: executing program 1 (id=2578): r0 = socket$netlink(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nfc(0x0, 0xffffffffffffffff) sendmsg$NFC_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4005}, 0x8000) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x32}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="3800000010000507000000000004000000000000", @ANYRES32=r2, @ANYBLOB="0000000a010000001800120008000100736974000c0002000800030036"], 0x38}}, 0x0) socket(0x10, 0x803, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x80800) setsockopt$sock_int(r4, 0x1, 0x20, &(0x7f0000000940)=0x1000008, 0x4) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmmsg$unix(r4, &(0x7f0000001780)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000580)=""/223, 0xdf}], 0x1}}], 0x1, 0x42, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0xffffffffffffffc2, &(0x7f0000000140)={&(0x7f0000000680)=ANY=[@ANYBLOB="380000001000030400000000000000000000000068d63fad2aa0ea4aaa1127091cd1a49aa538d85e82f53a41a3921a216531649e6692815f0c9d35269012376075ef4f17690747cbd5aa24f87f36bb1a33ce1e37507bcdbe31b9dfe130b3e2733e75b94414e41b3342a526367ff19f4fda15091d8fc2dba45ec974bd35018eadb093946034efacc636ade925e51280c1125d7e641fdded4468802c8bd9", @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100626f6e64000000000c0002800800040000000000", @ANYBLOB="2c8857e675ae0cd6db4ba7e454a68c4b3da6cd1c76b9231088b3032b6c2a5254c44919b7fa00edd46cc4f0b6fe3114954c51fdafed32b9b8bd46b7650a4e53beb59294afcf2781e583cb788afd15ede32271bfe52325893d1c0a725f28e84b6fdb93715cb1e1f915097ab38b077d3b7ca51ec00762a3ee0fbd1dd4cffd7c493fa37f2a2035f99a9c79d8bf7e85f083a0891b40e0fd94e8a38a2226e7d5b50bbeeafff75d81d56c40659a8eaa13dc7043ba5568fa9e8046bfb5f0"], 0x3c}, 0x1, 0x2000000000000000}, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB="2c000000140020002dbd7000000000000a000000", @ANYRES32=r6, @ANYBLOB="000000000000000000ffffacc20001"], 0x2c}, 0x1, 0x0, 0x0, 0x41}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="0000000010000108000200"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000080029007267060008001b0000000000"], 0x30}}, 0x0) r10 = socket$inet6(0xa, 0x2, 0x0) r11 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r11) getsockname$packet(r11, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r11, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000a00)=@newlink={0x50, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r12, 0x50483}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @private0}, @IFLA_GRE_OKEY={0x8, 0x5, 0x6}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) sendmmsg$inet(r10, &(0x7f0000000880)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r12, @empty, @multicast1}}}], 0x20}}], 0x400000000000041, 0x4880) 1.363204681s ago: executing program 5 (id=2579): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) pipe(&(0x7f0000000000)={0xffffffffffffffff}) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x40) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c00018006000100da"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) (async) r3 = socket$kcm(0x21, 0x2, 0x2) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r0) sendmsg$inet(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@ip_ttl={{0x14, 0x110, 0xd}}, @ip_ttl={{0x14}}], 0x30}, 0x0) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)={0x84, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x3}, @CTA_TUPLE_REPLY={0x44, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x21}}, {0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}}}]}, @CTA_TIMEOUT={0x8}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x100e}, @CTA_SEQ_ADJ_REPLY={0x14, 0x4, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x40000}, @CTA_SEQADJ_OFFSET_BEFORE={0x8}]}]}, 0x84}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = syz_genetlink_get_family_id$gtp(&(0x7f0000000100), r0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-des3_ede-asm\x00'}, 0x58) r7 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r7, 0x0, &(0x7f00000000c0)=0x0) (async) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r9) sendmsg$NFC_CMD_DEV_UP(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r10, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r8}]}, 0x1c}}, 0x0) (async) read$nci(r7, &(0x7f0000000200)=""/100, 0x64) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r11 = accept4(r6, 0x0, 0x0, 0x800) sendmmsg$alg(r11, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r11, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r5, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_FAMILY={0x5, 0xd, 0x11}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20008800) 1.340626653s ago: executing program 4 (id=2580): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=@newsa={0x128, 0x10, 0x7, 0x0, 0x0, {{@in6=@mcast2, @in=@multicast2, 0x4e20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x0, 0x0, 0x2, 0x0, 0x10000000}, {0x0, 0x200000, 0x7}, {0x40000, 0xfffffffd, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in6=@remote}, @lifetime_val={0x24, 0x9, {0xb4, 0x8000000000000001, 0xb4, 0x5}}]}, 0x128}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000000)={'syztnl2\x00', &(0x7f0000000200)={'ip6_vti0\x00', 0x0, 0x4, 0x9, 0xb, 0x1, 0x8, @local, @private1, 0x7800, 0x700, 0xfffffff8, 0xc599}}) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@newsa={0x104, 0x1a, 0x7, 0x0, 0x0, {{@in6=@local, @in=@multicast2, 0xffff, 0x0, 0x4e21, 0xffff, 0x0, 0x0, 0x0, 0x2, r2, 0xee00}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0x2b}, @in6=@private0, {0x0, 0xb400, 0x2, 0x100000000000000, 0x800000, 0x0, 0x400}, {0x0, 0x200000, 0x87, 0xfffffffffffffffd}, {0x40000, 0x0, 0xae8}, 0xffffffff, 0x3506, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in6=@remote}]}, 0x104}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000062010c000100010095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x69, '\x00', 0x0, 0xf}, 0x90) 1.185169642s ago: executing program 5 (id=2583): syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0) (async) r0 = socket$kcm(0x10, 0x2, 0x10) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) (async) setsockopt(0xffffffffffffffff, 0x103, 0x1, &(0x7f0000000100)="01000000020006fc", 0x8) (async) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r1) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x38}, [@ldst={0x6, 0x3}], {0x95, 0x0, 0xc00}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x3c) (async) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x58) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=@newlink={0x48, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x50483}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @gre={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x8, 0x6, @remote}, @IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x2}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x4bb7}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000140)={0x0}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f00000002c0)={r3, @in6={{0xa, 0x4e22, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x5}}, 0x1, 0x3}, 0x90) (async) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) 1.104205294s ago: executing program 4 (id=2584): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@bridge_newneigh={0x28, 0x1c, 0x401, 0x70bd28, 0x25dbdbff, {0x7, 0x0, 0x0, r2, 0x40, 0xe4, 0x9}, [@NDA_LLADDR={0xa, 0x2, @multicast}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x24040040) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0x4}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @fwd={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_FWD_NFPROTO={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_FWD_SREG_DEV={0x8, 0x1, 0x1, 0x0, 0x17}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xc0}}, 0x0) 1.066860253s ago: executing program 2 (id=2585): r0 = accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0x10) ioctl$SIOCPNADDRESOURCE(r0, 0x89e0, &(0x7f0000000080)=0x21dc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000100), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000200)={'syztnl0\x00', &(0x7f0000000180)={'syztnl0\x00', 0x0, 0x4, 0x3, 0xfd, 0x47ec, 0x30, @mcast2, @private2, 0x80, 0x7, 0x10000, 0x3}}) sendmsg$TEAM_CMD_PORT_LIST_GET(r1, &(0x7f0000000440)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000240)={0x190, r2, 0x200, 0x70bd26, 0x25dfdbff, {}, [{{0x8, 0x1, r3}, {0x174, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xa2b}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r4}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x101}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x14f6}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xf3e}}}]}}]}, 0x190}, 0x1, 0x0, 0x0, 0x20000000}, 0x20) r5 = syz_genetlink_get_family_id$batadv(&(0x7f00000004c0), r1) sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x64, r5, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r4}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r4}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x2}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x6}]}, 0x64}, 0x1, 0x0, 0x0, 0x8000}, 0x48005) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000640), r1) sendmsg$TIPC_NL_NAME_TABLE_GET(r1, &(0x7f0000000880)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x212d0028}, 0xc, &(0x7f0000000840)={&(0x7f0000000680)={0x1b8, r6, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0x78, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffff3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x542}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_WIN={0x8}]}]}, @TIPC_NLA_NODE={0x12c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x82, 0x3, "5e24fb7115ababcfd7072dce8b0d9c3bd64e0adb1c838a2247f3af5fb1d4bffc0e1b5fcdbcf0073ed71056d26f4136e9c94f7980f890817351b7aab7bc3b10ceaf710dff9d748796e53eb0a33f0af1682930eb12c5e0f73bd1e03542f3f081efa8c81c687902811eb97d23e02d3a0dd4e649c53fd6521997a505142c7203"}, @TIPC_NLA_NODE_KEY={0x43, 0x4, {'gcm(aes)\x00', 0x1b, "74b4593698efb6d2dff3cd283432ca3a5274bb891f1dcc6280e90f"}}, @TIPC_NLA_NODE_ID={0x60, 0x3, "66a10b62f99dee973013224db75931209be6c10d2996dd79c5746ed16f40e88916b2b8dcd6243e25ac9203e2084a63a6c1750fe1b3227ed82a0c998c345fa7e0b1ec7104b6b85dcaf59699a7c64e3757e36b459b1ea276daaa8aa125"}]}]}, 0x1b8}, 0x1, 0x0, 0x0, 0x400c4}, 0x20000080) sendto$ax25(r1, &(0x7f00000008c0)="9a32b44e6a4b688ae1655956f5816ed6921adaf7bb6eb50a1f16848b1df255dfae8f69132ac4294caaa24d48b83d76c36f773cc12f86880ad0832321d904f66df00a465f4497070c250e67727ffbb2a8dcba6d6f68a4368bdd8e453f29b3e8cd92402eabe3b4da7bb6ee53bfcc489798c6163eac1a8ee92ab463f583f2bedf9eb15e9a5c36ac9b4498601123a6ee97ea1c77c4c3ec65b50816f35092908299a2a20fe67db51b265c736a677f22a4b99c5595cea1d5a6d4d473f90058e617530a09bfa4a515ae73879f8d7846e1f29693d51a27ce3a8a30c997cf77f5d38708cd20b6875f9242c9ee528f6d5217ce939ab948f7eca18961291c80e2e044fafbd6357cf6cb9d392461415f97204afe77d76843d9da69e34f47109d5faba81c8d1a8c13d3efa512dcfef265ea0b324571b304a9007fbed6930053d870d85654784d127a535845b9a8d0fd80e3d5f69801058850d702504bd6df1d7ce0d6b4b5e47bf8553a65ffe91887428745027b3982973ea040cc206a4abfba669292cabdb1c1c8b128048c11caba0aeaa6e97374ad8866cdc7135fb7cb55c1bc413e5eb3c37e33e2b69a1505fd5b0e2b20c39553fb196a59fb55722acf80920b591d51029887c48ac899dc281a8f5e9316cdba67006340f58f3eac72151592018615357823a9b522d280ff5a26168aa5f80ed34d4c7d3cf126c8471c597ba72e6592903c7b269d9c514250474bd739fe34055e1d24086fc1b056737eeb11d346164f7e14f30e710f0a2711c1c7ba8cacbb012183c618bcb24e391a8e71dba32cf188abee377de5bded4d5de6da705f2afb22fd556397ec487641ea3df48716ba2b90575cf09b373d9f424eb9d6b74576d2d558238c7795d24df6d4b4f4379ec61362f5d0193027a8b36b9149b7f56207af4ad0408121390573578a151c9a3e2d0b7fed6ae19e93ad2d0cab66c4f063292ec039105c9f38a0511e3f4c91daea546a49777e208e5a9905df094da6866ee6cb2666e99a5f9e0336e227c552cff25416098b9a06b1c2db51c6eb48b6ad76a3252c04cc623f217ae6bfe6b5633d09db3789906cefee8d226fdbe46e78cde60fae88374ad9d1bb6c3d26e8241cbfd03a561a1cb2272ec81367c605e6058a9e4c8df74214a7c82998de44b2428b5f8904a18f882a51e6ce4411e17ce37dc46a117e08573f88f0c6dda98ed7be10f7f0410a401df92c9813e314147b0f9f36e6aedb768ecf3359de101708259d01e755a4227bf1e63e188a68c2f309b0b3e79d89d246a866841dd92828714124490acdd3e0069f498d949b8c5db81133e51a1a22020118ee6f6aef6bb07e588145e26d44ffe2751e8c54f57306510857d4d3622f56e582f9155e2e9a66254a540c60ed007995e417ab6310c607c3f4f1805cb9983d8a7d39236d7e89efb17db69d786ab7e284e0c74a9621d714fcc4e3117268299fcddc8b865a488878e206b4ee0bd8402d008ad0d29d5b8305194e03b37b52e70711821c156824575214391afb978c2462c26f65be5debfc19dd9fd9581604821275dcd4a78dd8f40c59fdd55f24f2d0a40f45d365268c171ff9d622954af52547685d42029c5ac43a87926620727cfcfe598b81dea469e93829caed588d9411a544feb7fefbcbd9a2dc817b8b57138e117d34dfe469dac67585571c94a934c9f5dd5c03e07add11ce48f606bafcd546b25a5e0989a7a78eadff372e388b583f1a5805019621274369da05fd8e729a76914bb59c293d07e105f76e014a6f689d4b49d66638e468831e92d8118cbf8ac5182af55fd7b61aab959a1842a701a198771c943c67833773f6534955bdfbc6d273164cfc1ae0f34d68822fac3a5df2a46693ea252f70a192662ddfa0d2a6cf69f092ab88cdd743751d3d5cf0c8713bb250668ed2a5dfd7d2bbff93031662f13c0ba2e2ccc334b048d0f1c775a24534a158db5a1ea42192ca3e081ef3e266844c40631b8570caafc28b3f6e97f1bebf0af4406e334a083d472dea6b554ce29236a02d6e509ecd3fdcba1ec0ff3ff569929768bcbdcfaa4684554c44681485eb3e0912d7889bf35df1254957953ca1aab0bc402a916368b8bf97d39d38168e2f7bba0c3e441a208ae937728ab9e42bfc6cbc3ab239b903652f53461bb80c184248a3eb9363fad471c63c2fc5be2ca6e18dc7311964c9c721cb29ed1b5e241445a17bed3b20915df63dc4ffab1d291f2a1cb7f610625b497a5a72b2d63c0d285e6c3a4aaa95883f37a8555b1f5ffd8c3f0df36ecbcff54c6132279bf3fa6832291d36302ed968c7b7ecce80e2a4757e8c910ae72e68260bbd282ad7a5b6817b8561a1e3ab2cbc00a598e48c0bd16e344e8c5dc28031ed942202d7c5596a2f7ee221cc63a62d9035045625cdc3c46b5164a4ab7c0215dd76c24c35b7f3202332c50da1dd3c22e45cc1657e2c6fdab209aa32a76654d924f6b89779b8af7708b99ea90a47c20936cc51f0e861c0f5c6aa9fd4bfb9c43d3fe5fa2cc6b9ed1510f8ba0deaf11996a394cadbb4ab63b06140e13725ffee73ddd7e63f0e323580ba01ed94e8253aa30c7156ceca611c54e97d5360f981efd142b8a05f17cafc3990c396bc686d92399f622a8051e1b321ab75c5aab610b0e37af0c3553b2d6cab1f87525837e8cda38510f7f6cc3fde9bfb09caa039cb6d955c9f3aae4018d6a0a03b5000a857e449491a5925aa5a84df13741fecf48b08db9d5d920cc5c32dde783d9d3f1e094b4d08300a403f33b521dc6b3033875b364b0d6808c055b8d1d9275d8d6f478d48c54a8ebe933dfd2d966557d31ee8fbfce0447726ff6e9c1f51413655eb95c3ebc5a3d4b944d6e850a136c7c392e9787a0c1173147fdb54b60cd758e13f022d09620b7ec2b54b87b82c0b798a5276a7aee841e9181f28f91377364c7fea4afd888a673bc90b8965c8722165b1a9d512b79d0bc530eda2689933e218f90e6c38c50af2cda2d7d2a183e1658c2f52f61aa74c3d05917ec76c99bf39eebd69954974abb7ecb6008501eb985200151a89514d976ba7dc21e4e79e03af41aa468e74ecfef252ddffadeb36ffc0ca5808f6b8b93f92c474cbd78197920871e05a379f21901bd406e767e4232b6bb74b91adead8409a6a6232db332e1d5305886764b6349f13c454d640385d4658b3ee985776f66fd107b6e96ae2b3af12ebb975019428b8e0e90f0b8c7a6e8d868fc3b2ad15f4d85ac5d690092f527f1f18e88ff690a60a4216ca3a4d9f18215d3bfd8cbc0443e7d9cdcaf86d3fa7dc5fd1862b2fb2c99345034f964c98d3c580e17f27519fd6ac811fd243c439ddd02cc00ebcf0971bed6a5db6184f625d60dd81ecb8c8307604efecf96991bfb793da1f9a194310b14ae007e146292a1dfb001a25e36984bc52839d2cc433bb81a6993f95fd3fc4f45a08c176a782003b878003a2a4c77d452eb793b2f4c9aa24c7c25687c07688f159a2bc44c5ad8ba24207ce1b966ae8839b81df2a4114d38f42b3be0f83797b8e5d5192602e72bace2a271ea5c232d14b913e4e7294ef16d8fd82a9b396f03bbf3f892a2d6044efc2c62332d8ad01096fc51672f5d4ceba59e6cb24cee1bcf863fd09650516c4be512eeb4f4c70eb2cdcb3734ad620f31e793f7febab451a04ca8d76986008f59ad50d3332ef6f272c930d0a6b03bd336be915fcd6cc14ea3d6479803a64a82b14da1397ef52f8356aa42d617fdd916c056f35b9bfc1efe5d2938183b2a245f049ecc20d647211c0f2f8f234f827093f3ca25347800570e0f10e238d4ca9b52afb2da30b4be86a0ff662001f38ae180f1c331ea079120edd8c8738fb5a6b84964c8c8a54f2a87eda1ed42e5e343a0b32464bdc30c537b1dfde933a8737dfaf42006ce143c8d899d4c712f9042eb3441610bd7e6cd26433371ed03ee41b4d207f251698c8dab1aa4ea97b5103fdf605e1db81ca38048c0f4d229a8b9a1d5a5db9f2e5c49e16b57ccc9439fe676b97e14af2dca43373b7b02620cbef77c72117585065d1f36d8403bb10739c952c81cbeaa94ae8f8eda7f00450e574f719768f37a1f970a4bf89792adf16bf3f57cb6dd87e94f92c807f4988db75e6432bb92a308527cc71b64b7df328ba6c4e4eaa0f8497254b939490a2c38a853ef5838f73a113022334c6a8570fb79e8f435f906dee08cc59631a07d9022be4cd5dd551fd7b6d7c11a08c32da3f53917724f5c3fc434de066a9ee0ceb8e8c68b536407a64364f414cf656a9a0359c3116d8b3fc136ac4a60621d8c5175dc8211bbb7bd5364552973e810e772bb17d4d88d2961016cba4ecd9ee509b283240021d0e48c3a490841d8998549af6f7d0be1b6ac45e6f3148359882ae992ff85bf28b90c89a099b181c04c3d936e98272b10a3dea5c102e304ee77aa703743f7a4ffdc7c28dc5bbac6f6e1ad09aa8fa7415fbe7edee45499088c59473a145728edc1f24446e8f2c29ac7f4978f06b76648ee8311a4bac49aac5a6b81dfb6582bdb63005af56a0aa5aa4597e8304b8ce57988fa9f841c3df8b28fff901db929474301fcaa708bb82c91c6349b6123c44a658454c3a66be03eaa236d0627b18add3d5142ac73ab3453010eecb1cffcdde877e9dad5d49baa0d8a389ccfcc7899243c0be638269270e9868b2520943d50ec0c940546993e452787037b7931d54b839b548e33d1aa663572e40cb96ce7646076f61514954f6eadc604e4fd0057ad58b0b46534974a16f9d2a79615a476ef60b55f7b9430db019589688d6270d6d0852b095268a0bdc3644c817c22c51521dbacc53fbbdc76fa03d77a872a6e0e8cb94ffb018414aa7382f5526dc49f06ed9ab8c438bbc25b88109cee0f30129168b425406b05231a3fcae7bb8143c20b775f65a4b5d867b4049f4429d4626740908b3cb90a920887965d8fbcdbe827a0672ab346f769515e13916c348e3c9009b18b98d9b71056597442bb714ec1cdf6f4167402362d4d6bf4b6b7ba4835bbec35863c574203dd1ebcea3fbd8507454d74130d3031ef4f0582fdaf1cccc5ae24500f38d2615a5670e52cf8a11c4ea6d5da849b0da3ea63a5ef444bdd82fd7825d02afbca5a1ccad8a462c2857a5f8703a1706a2e3f9505cde6616a44b522672a537172610728e795203b19618974d53beeb55db832c37a1d681221db6675d54849220d8da9bbf6258f3bec610fc0d9dd7b889b0697577b07bf06dc7d8d57579e8c9cb371d0c25c6c1d19e0d91b929ebab883c4d91f10d635fd44b95f66017b15f32c5f3210eea4c37edb9625c6ee1ce6e7e1eafb27d9766d20aed9d904160c7ed954ecb58b4e424410ae6950cc1d4347600a6a2bfb6bdb1ae4209d16f31e881622df79845d3b8758019efc4f92887148c1bf0f26f6c6101b077f7a2f5d92b07e84b714f9eab27af72214c3e3b83df9626ec5939d9617c646bf9f5055a7340021b307d5edaa1785a808e053388f52fa560e4804c6a03eb874e63e9b5f4546d82037ed7c5056663776b76cec9f65595fc816600587b7a0573cccb73e94eabb4a20bf8a09ebec147de052db063e94d36d39b8c01812a23efb54c34530d15e001877362c3cf03b3e91820181be728331de46ff41fc2f06019d6df196827e4b8c797f3fe39d2731cfce99aa49c625822b16ace1afe19efdfd659ed746561d4034ec99a037dcec7f3c73f9f015f1479da31cea19821925615da9da64ad8c6890deaeabfb854ad5312e760ae5cbec2e6ac52a0f7588743f5cb4ff9be755b8c0b1f9c901c40e6809b90f5", 0x1000, 0x4000, &(0x7f00000018c0)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, [@bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @null, @null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}, 0x48) recvfrom(r1, &(0x7f0000001940)=""/175, 0xaf, 0x12023, &(0x7f0000001a00)=@in={0x2, 0x4e21, @private=0xa010101}, 0x80) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000001ac0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r1, &(0x7f0000001b80)={&(0x7f0000001a80), 0xc, &(0x7f0000001b40)={&(0x7f0000001b00)={0x30, 0x0, 0x2, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x36, 0x25}}}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x4004041}, 0x1e5721db3a2b5ba5) sendmsg$FOU_CMD_GET(r1, &(0x7f0000001c80)={&(0x7f0000001bc0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001c40)={&(0x7f0000001c00)={0x18, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}]}, 0x18}}, 0x20000000) ioctl$BTRFS_IOC_DEFRAG(r1, 0x50009402, 0x0) setsockopt$MRT_ASSERT(0xffffffffffffffff, 0x0, 0xcf, &(0x7f0000001cc0)=0x1, 0x4) r8 = socket$inet6(0xa, 0x4, 0xea) getsockopt$IP6T_SO_GET_INFO(r8, 0x29, 0x40, &(0x7f0000001d00)={'nat\x00', 0x0, [0xd3, 0x98, 0x40, 0x4, 0x7]}, &(0x7f0000001d80)=0x54) recvfrom(r8, &(0x7f0000001dc0)=""/229, 0xe5, 0x2141, 0x0, 0x0) r9 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000003000)=@bpf_ext={0x1c, 0xf, &(0x7f0000001ec0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x80000001}, [@btf_id={0x18, 0xb, 0x3, 0x0, 0x2}, @initr0={0x18, 0x0, 0x0, 0x0, 0xd7, 0x0, 0x0, 0x0, 0x80000001}, @printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}}]}, &(0x7f0000001f40)='GPL\x00', 0x9, 0x1000, &(0x7f0000001f80)=""/4096, 0x41100, 0x10, '\x00', r4, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000002f80)={0x5, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x1a1fb, 0xffffffffffffffff, 0x0, &(0x7f0000002fc0)=[0xffffffffffffffff]}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000003380)={r9, 0xe0, &(0x7f0000003280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f00000030c0)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8, &(0x7f0000003100)=[0x0, 0x0], &(0x7f0000003140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x2d, &(0x7f0000003180)=[{}], 0x8, 0x10, &(0x7f00000031c0), &(0x7f0000003200), 0x8, 0xf3, 0x8, 0x8, &(0x7f0000003240)}}, 0x10) r10 = accept(r1, &(0x7f00000033c0)=@vsock={0x28, 0x0, 0x0, @local}, &(0x7f0000003440)=0x80) setsockopt$packet_fanout_data(r10, 0x107, 0x16, &(0x7f00000034c0)={0x6, &(0x7f0000003480)=[{0x2, 0x9, 0x88, 0xe2a2}, {0x800, 0xa, 0x7, 0xffffffff}, {0x4000, 0x0, 0x9, 0x5}, {0x48e4, 0x7, 0x1, 0x541}, {0x6, 0xfd, 0x1, 0xa29}, {0x5, 0x2, 0x2, 0x4}]}, 0x10) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r11, &(0x7f0000003680)={&(0x7f0000003500)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000003640)={&(0x7f0000003540)={0xf8, 0x0, 0x1, 0x201, 0x0, 0x0, {0x3, 0x0, 0x7}, [@CTA_LABELS_MASK={0xc, 0x17, [0x6, 0x7]}, @CTA_PROTOINFO={0x24, 0x4, 0x0, 0x1, @CTA_PROTOINFO_DCCP={0x20, 0x2, 0x0, 0x1, [@CTA_PROTOINFO_DCCP_ROLE={0x5, 0x2, 0xff}, @CTA_PROTOINFO_DCCP_ROLE={0x5, 0x2, 0x1}, @CTA_PROTOINFO_DCCP_HANDSHAKE_SEQ={0xc, 0x3, 0x1, 0x0, 0x2}]}}, @CTA_LABELS={0x24, 0x16, 0x1, 0x0, [0x2, 0x7ff, 0x0, 0x7, 0x9, 0x4, 0x10001, 0x8]}, @CTA_PROTOINFO={0x44, 0x4, 0x0, 0x1, @CTA_PROTOINFO_DCCP={0x40, 0x2, 0x0, 0x1, [@CTA_PROTOINFO_DCCP_ROLE={0x5, 0x2, 0xff}, @CTA_PROTOINFO_DCCP_STATE={0x5, 0x1, 0x1}, @CTA_PROTOINFO_DCCP_HANDSHAKE_SEQ={0xc, 0x3, 0x1, 0x0, 0xff39}, @CTA_PROTOINFO_DCCP_ROLE={0x5, 0x2, 0xf}, @CTA_PROTOINFO_DCCP_ROLE={0x5, 0x2, 0x9}, @CTA_PROTOINFO_DCCP_ROLE={0x5, 0x2, 0xd4}, @CTA_PROTOINFO_DCCP_ROLE={0x5, 0x2, 0xf1}]}}, @CTA_FILTER={0x4c, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x48}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x80}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x50}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0xa0}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x9}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x22}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x1}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x201}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x40}]}]}, 0xf8}, 0x1, 0x0, 0x0, 0x20000885}, 0x20000091) sendmsg$NFT_BATCH(r11, &(0x7f0000003b00)={&(0x7f00000036c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000003ac0)={&(0x7f0000003700)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_DELFLOWTABLE={0x3c, 0x18, 0xa, 0xc06, 0x0, 0x0, {0x3, 0x0, 0x8}, [@NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}]}, @NFT_MSG_NEWTABLE={0x1c, 0x0, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWFLOWTABLE={0x2c, 0x16, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x9}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}]}, @NFT_MSG_DELFLOWTABLE={0x1a4, 0x18, 0xa, 0x102, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HOOK={0x138, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0xa4, 0x3, 0x0, 0x1, [{0x14, 0x1, 'geneve1\x00'}, {0x14, 0x1, 'ip6gre0\x00'}, {0x14, 0x1, 'nicvf0\x00'}, {0x14, 0x1, 'wlan0\x00'}, {0x14, 0x1, 'veth1_to_bridge\x00'}, {0x14, 0x1, 'veth0_to_bridge\x00'}, {0x14, 0x1, 'bond_slave_0\x00'}, {0x14, 0x1, 'veth1_to_bridge\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'ip6gretap0\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x68, 0x3, 0x0, 0x1, [{0x14}, {0x14, 0x1, 'ip_vti0\x00'}, {0x14, 0x1, 'syz_tun\x00'}, {0x14, 0x1, 'bridge0\x00'}, {0x14, 0x1, 'wlan0\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0xe4f8}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x5, 0x0, 0x0, {0x5, 0x0, 0x1}, [@NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x2}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x1}, @NFTA_RULE_POSITION_ID={0x8}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}, @NFTA_RULE_COMPAT={0x14, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x2f}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x892f}]}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELRULE={0xec, 0x8, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x1}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_USERDATA={0xa4, 0x7, 0x1, 0x0, "246d3f9e8771fd3878c6c5044ebc2004b7f122ed7d6d21de71159260d19635accc52562e57466fd6589c2bd958400086feff24315fcc37119fd916c486108b5d607bbe0adf44165b9994596f08d51dc16c82180475a004f1ec07b68ea65df0f270ef497dfba1a5a2c6d2952514e1e8cecce073dd13384908cd6d70b8a4494153b24834deb2b73926639b0c8aea6ce182c95a8e0a1f9e1c22b89d3c48cc65c58d"}, @NFTA_RULE_COMPAT={0x1c, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x62}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0xf6}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x3a0}, 0x1, 0x0, 0x0, 0x4048008}, 0x20000080) setsockopt$MRT_PIM(r10, 0x0, 0xcf, &(0x7f0000003b40)=0x4, 0x4) ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) 1.042321206s ago: executing program 5 (id=2586): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'\x00', 0x52d35ce30131f272}) ioctl$TUNSETOWNER(r1, 0x400454cc, 0x0) ioctl$TUNSETLINK(r1, 0x400454cd, 0x3) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000300)=@framed={{}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x63}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f0000000100)={@val={0x0, 0x88f7}, @void, @eth={@broadcast, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x66, 0x0, 0xfc, 0x2f, 0x0, @private=0x1fe1, @multicast1}, {0x8000, 0x8100, 0x8}}}}}}, 0x2e) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x4, 0xe, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x28) 971.584101ms ago: executing program 4 (id=2587): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="b54264697a11f6ff42acf41b02eebeaea1505f7aba70b73b255d14986677cb401828a623dfa160e6cb7ec8105d24b2fe71268a3f46076a", 0x37) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) (async) r1 = accept(r0, 0x0, 0x0) (async) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000480)="b19ccccf84f531d9ec214627c11430c1", 0x10) r3 = accept(r2, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0x14, 0x0, 0x300, 0x70bd29, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x8010) (async) recvmsg(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001a00)=[{&(0x7f00000001c0)=""/15, 0xf}, {&(0x7f0000000300)=""/92, 0x5c}], 0x2}, 0x30845aa81b581fea) (async) sendmmsg$alg(r1, &(0x7f0000000740)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000300), r1) (async) r4 = socket$netlink(0x10, 0x3, 0x8000000004) sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x54, 0x2, 0x3, 0x201, 0x0, 0x0, {0x5, 0x0, 0x9}, [@NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1b}, @NFQA_CFG_PARAMS={0x9, 0x2, {0xe, 0x2}}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x81}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x1}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x101, 0x1}}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x20}]}, 0x54}, 0x1, 0x0, 0x0, 0x41000}, 0x4040015) writev(r4, &(0x7f0000000040)=[{&(0x7f0000000200)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000004fcff", 0x7d}], 0x1) (async) sendmsg$IPCTNL_MSG_EXP_DELETE(r4, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f00000004c0)={0x220, 0x2, 0x2, 0x101, 0x0, 0x0, {0x2, 0x0, 0x7}, [@CTA_EXPECT_NAT={0x4}, @CTA_EXPECT_NAT={0x88, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x54, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @loopback}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_ZONE={0x6}]}, @CTA_EXPECT_NAT_TUPLE={0x28, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}]}, @CTA_EXPECT_MASTER={0xb8, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2}, {0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6}]}, @CTA_EXPECT_HELP_NAME={0xa, 0x6, 'H.245\x00'}, @CTA_EXPECT_MASK={0xa4, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0xa}}, {0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}]}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x3}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x4}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x2}]}, 0x220}, 0x1, 0x0, 0x0, 0x4080}, 0x40000) (async) sendmsg$NFT_BATCH(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000780)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0xfb8, 0x6, 0xa, 0x301, 0x0, 0x0, {0x0, 0x0, 0x7}, [@NFTA_RULE_USERDATA={0x79, 0x7, 0x1, 0x0, "21937adbcdae99e1d79e8f9dd37f94ae6c567c2826f02ed6a499a66b02aab061c6cbc89eb3c5a62c0618f6ac508c51a16618225fb028de0374c39d2dc983dfe7909cff3b5b0cc70c3675c3dbdd907e8c69f6b8fc05b08d681cdf3929e3e11e35524129387a9c3563f77db993b734da4efd1d6eb859"}, @NFTA_RULE_EXPRESSIONS={0xf28, 0x4, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_NAT_REG_ADDR_MIN={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_NAT_FLAGS={0x8, 0x7, 0x1, 0x0, 0x20}, @NFTA_NAT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_NAT_REG_ADDR_MAX={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_NAT_REG_PROTO_MIN={0x8, 0x5, 0x1, 0x0, 0x13}]}}}, {0x1c, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x3}]}}}, {0x10, 0x1, 0x0, 0x1, @hash={{0x9}, @void}}, {0xc, 0x1, 0x0, 0x1, @fib={{0x8}, @void}}, {0x1c4, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x1b4, 0x2, 0x0, 0x1, [@NFTA_TARGET_NAME={0x10, 0x1, 'TCPOPTSTRIP\x00'}, @NFTA_TARGET_NAME={0xb, 0x1, 'TCPMSS\x00'}, @NFTA_TARGET_NAME={0xa, 0x1, 'TRACE\x00'}, @NFTA_TARGET_INFO={0xed, 0x3, "418a123854d815d8ea965ff2688853b519e7cbee91613f66a3c5c69580773e88f6d706e2a5aa22de82d9d7d6250e391f8149c43108f8a4ce0b166be82a0b6ce42357cd8ae9c6281a60f4b8c37132d7ca4bee1e6bc08206ef9ad9c148963bb85901b94c6ce8ea32f6da8836546d1e5606bf2d4eba97607393c1212e3931ccc5d85f298eb8ed42cb177225129388a0b3e0631c45ebdb96ff91866d01a1b752d7116007e854c5928691fc43b6188917d1429711dcd707cbbaaa2bbd0283438cf64a6da12f4ce27386a5455fc8c38ea60b48d51eda3efbccb7c2d9691c7ac2664908c7b0c22098024742fe"}, @NFTA_TARGET_REV={0x8}, @NFTA_TARGET_INFO={0x8d, 0x3, "dcb79f59470535cf444fb375ffce4a8e84a06f31ef4a558365e92b1df23217c2c15a9b685a12dc9d28314145e5ed237cc2b3da48d8fe2e0159d1818d836d555743dfbd09e34c7933a5f49d94e0746c24cd38a250b9a102118800a2718bd89ed29dac193f393cb3541a49030b2d112e539c1645d59930a049e940687ee16230045f7b5e4c2caa59d3b9"}]}}}, {0x14, 0x1, 0x0, 0x1, @connlimit={{0xe}, @void}}, {0x10, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x4}}}, {0xccc, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0xcb8, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0xd4, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0xce, 0x1, "c332561012fbf2fbb31d3aa4395f764b05bbe9eaeffc6de73afedfc25a42ea5ac304164ed4a263cd811c2a20fb9cf7760e3f98f514da53c435b4d9e8f567d27edfa8bbf819d17c6b86be142a173f00727e75944245c49baa55995d14198f650532e40f57ac172ca0eed4b8f6d4418867d1b81d263137c6b8d039b3ff9765648efc6088a5e30ce712c7212ffb704698c52f7918804a7098738d38c51c2828de4f7c853fec020d375c594d1f8c9244b43a6560167a5b2137913a2500cf582008a1e57b8869aef3d7c3d413"}]}, @NFTA_IMMEDIATE_DATA={0xbe0, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0xbd, 0x1, "3a072a6db47ece766e8bdcb261101ceac67614d859db9649ab010a013093f461364eb9a41b7bcaa473927af6bb4e10c0e36b0378b41c1a9e9443b3ae644cea9a324769d174406466ad31e2662e7cac112ba71807c3b72283d1a24705cf2dc0fab4f75522cf0b8418e2e352a53f2a7b81dbf47b888cea49fc4f2744712e4cf45d8895f49d8f56c1291bd8794a2f3f6e02c61feee28fa882babeb1e8a66ab49d0bdff02e95e001cbf21bc7629d70dfff9b53417a3682bbc74828"}, @NFTA_DATA_VALUE={0xb19, 0x1, "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"}]}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0xfe0}, 0x1, 0x0, 0x0, 0x1}, 0x1) 862.04098ms ago: executing program 4 (id=2588): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) (async) listen(r0, 0x0) (async, rerun: 64) r1 = accept(r0, 0x0, 0x0) (rerun: 64) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000280)={'bond0\x00', &(0x7f0000000200)=@ethtool_cmd={0x23, 0x8, 0x8, 0xfff, 0x0, 0x4a, 0x0, 0x8, 0x4, 0x80, 0x378, 0x2, 0x1, 0x40, 0x40, 0x3, [0x6, 0x1ff]}}) (async) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, r2, 0x4, 0x70bd2d, 0x25dfdbfb, {}, [@GTPA_PEER_ADDR6={0x14, 0xb, @remote}, @GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_FLOW={0x6, 0x6, 0x3}]}, 0x38}}, 0x20000010) (async) r3 = socket$key(0xf, 0x3, 0x2) socket(0x23, 0x0, 0x53f0800) (async) sendmsg$key(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000002c0)=ANY=[@ANYBLOB="021206090200000025bd7000ffdbdf2579cd7c9859d1d811c6eac24ae043a9b4065d9a15d2e60678a5c4df2f172c10ec31c3f7998a3370e903fefa195678b80c46cea68763c56036457951aded4de57a0fd80dc7ff46f38f2bbd832047ce006e23d98fa6935a9466a70e39bda5b2523d4bb0b8f13e0d8461ae7f27f74b17fad43fc2882ce265923db17371a155f472a714fb9886fe9156ede34b71e1fdd59e3998da5e8a7e64fa94a1bb5483845e388e2a2ab285f3f615849425661014d783de83552ea7dacfe95300"], 0x10}}, 0x40010) 826.24178ms ago: executing program 1 (id=2589): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xad}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x27}, 0x74) sendmmsg$unix(r1, &(0x7f0000000b00)=[{{&(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}, {{&(0x7f0000000e80)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000740)=[{&(0x7f0000001dc0)="bb", 0x1}, {0x0}], 0x2}}, {{&(0x7f0000000580)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f00000006c0)=[{&(0x7f0000000600)='z', 0xfdef}], 0x1}}], 0x3, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'generic-gcm-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmsg$alg(r3, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) sendmsg$nl_route_sched_retired(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000002200)=@delchain={0x43c, 0x65, 0x400, 0x70bd2d, 0x447, {0x0, 0x0, 0x0, 0x0, {0xfff1, 0xffff}, {0x10, 0xc}, {0xe, 0x1}}, [@f_rsvp6={{0xa}, {0x40c, 0x2, [@TCA_RSVP_POLICE={0x408, 0x5, [@TCA_POLICE_RATE={0x404, 0x2, [0x8, 0xcebe, 0x5, 0x0, 0x8001, 0x5, 0x5, 0x6, 0x4, 0xfffffff9, 0x9, 0xffffffa9, 0xf, 0x10000, 0xfffffff7, 0x1, 0x5, 0x9, 0x7f, 0x3, 0x3, 0x5, 0xfffffff7, 0x40000000, 0x9, 0xbd9, 0xd93, 0x3, 0x10000, 0x1, 0x200, 0x401, 0x4, 0x6, 0xef6, 0x9, 0x0, 0x2, 0x15, 0x5, 0x4, 0xffff, 0xb33, 0x3, 0x1, 0xd944, 0x8, 0x6, 0x1000, 0xffffbf05, 0x6, 0x7, 0x7ff, 0xe000000, 0xaba, 0x2, 0xfc000000, 0xfffff001, 0xd, 0xee, 0x6f, 0x87, 0x847, 0x0, 0xfffffff9, 0x0, 0x9, 0x3, 0x3, 0xc, 0x7ff, 0x0, 0x7f, 0x4, 0x2, 0x0, 0x69, 0x6, 0x1, 0x8, 0x9, 0x8000, 0x2, 0x8, 0xf31a, 0x0, 0x7, 0x800, 0x6, 0xc, 0x88, 0x26a7, 0x400, 0x1, 0x0, 0xb905, 0x0, 0x40, 0xe1, 0x80000001, 0x8, 0xe4, 0x3, 0x9f33, 0x9, 0x2, 0xb, 0x3, 0x7, 0x9, 0x4, 0x7, 0x10, 0x3, 0x8, 0x7, 0x559c, 0x8, 0x9, 0x200, 0x7, 0xc99, 0x7, 0x200, 0x3, 0x29, 0xc7d, 0x9, 0xff, 0x5, 0x81, 0xffffffff, 0x8, 0x10001, 0x1, 0x0, 0x2, 0x8, 0x8, 0x6, 0x9, 0xfffff36f, 0x81, 0x0, 0x9, 0x6, 0x1000, 0x2497410, 0x5, 0x0, 0x4, 0x4ec, 0x5, 0x8, 0xb3e, 0x9, 0x9, 0x9, 0xd2e, 0x4, 0xfffff001, 0x6, 0x2, 0xff, 0x7, 0x7, 0x7, 0x9, 0x5, 0x5, 0x2, 0x2, 0xb01, 0x3ff, 0x7f, 0xa8c, 0x1, 0x40, 0x7, 0x0, 0x3, 0x1, 0x3, 0x6, 0x1, 0x81, 0x1, 0x6, 0x7, 0x2, 0x6, 0x6, 0x4, 0x0, 0xffffffed, 0x5, 0x5, 0x80, 0x0, 0x4, 0x8, 0x4, 0xffffffff, 0x200, 0x3ff, 0x1, 0xfffffff7, 0x3, 0x61, 0x1ff, 0x9, 0x101, 0x5, 0x5, 0xad, 0xee, 0x6, 0x1, 0x4, 0x4, 0x8000, 0x3, 0x0, 0xd6cdc0a, 0x6, 0x1, 0x2, 0xffffffff, 0x5, 0x7, 0x3, 0x6, 0x9, 0xd896, 0x9, 0x1, 0x2, 0xea4, 0xffff, 0x5, 0xffffff18, 0xffff0dab, 0x5637, 0x3, 0x3, 0x2a, 0xc0000000, 0x7, 0x3ff, 0x8c34, 0x5, 0x5, 0x7, 0x6, 0x5, 0x6]}]}]}}]}, 0x43c}}, 0x0) recvmmsg(r3, &(0x7f0000002180)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000500)=""/254, 0xfe}, {&(0x7f00000000c0)=""/50, 0x32}], 0x2}, 0x3f}], 0x1, 0x60, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x14}, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000740)=@newlink={0x4c, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x6}, @IFLA_BR_VLAN_STATS_ENABLED={0x5, 0x29, 0x1}]}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) 768.193952ms ago: executing program 2 (id=2590): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x59}]}]}]}, 0x2c}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000080)=@framed={{0x72, 0xa, 0x0, 0xffc4, 0x1, 0x71, 0x10, 0x23}}, &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4d}, 0x94) 711.844982ms ago: executing program 5 (id=2591): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, 0x0, 0xc000) unshare(0x20000400) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@rand_addr=' \x01\x00', 0x2, 0x2b}, 0xa, @in6=@private1, 0x0, 0x4}]}]}, 0xfc}}, 0x0) r3 = socket(0x2, 0x3, 0xff) bind$inet(r3, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r3, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r4, 0xa02000000000000, 0x60, &(0x7f0000000440)={'filter\x00', 0xb001, 0x4, 0x3f0, 0x0, 0x110, 0x110, 0x308, 0x308, 0x308, 0x7fffffe, 0x0, {[{{@arp={@local, @empty, 0x0, 0x0, 0x0, 0x0, {@empty, {[0x0, 0x0, 0xff]}}, {@mac=@local}, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 'pimreg\x00', 'veth0_to_bridge\x00', {}, {}, 0x0, 0x180}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @loopback, @broadcast, 0x6, 0xfffffffe}}}, {{@arp={@multicast2, @empty, 0x0, 0x0, 0x0, 0xfd, {}, {@empty, {[0x0, 0x0, 0x0, 0x0, 0x0, 0xff]}}, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_team\x00', 'ip6tnl0\x00', {}, {}, 0x0, 0xc}, 0xc0, 0x220}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x3b}, @multicast1, @dev={0xac, 0x14, 0x14, 0x12}, 0x1}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x9}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) 707.657244ms ago: executing program 2 (id=2592): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1200f600000000002c0000000000040015539ab7", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) r1 = socket(0x2000000000000021, 0x2, 0x10000000000002) sendmmsg(r1, &(0x7f0000000080)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x248, 0xe000}, 0x5}], 0x1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x16, 0x1c, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000088000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000008000000850000008200000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7020000000000008500000008000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f00000007c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x5c, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0}, @IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}]}, 0x5c}}, 0x0) 608.01291ms ago: executing program 5 (id=2593): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000240)={'ip_vti0\x00', &(0x7f00000002c0)={'sit0\x00', 0x0, 0x80, 0x7, 0x9, 0xfd54, {{0x1c, 0x4, 0x2, 0x1, 0x70, 0x65, 0x0, 0x4, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0xf}, @empty, {[@timestamp_prespec={0x44, 0xc, 0x9a, 0x3, 0x7, [{@loopback, 0x3ff}]}, @noop, @rr={0x7, 0xb, 0x42, [@initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010100]}, @end, @generic={0xc6, 0xe, "09a962a8a5a9390392cdbff9"}, @cipso={0x86, 0x33, 0x1, [{0x1, 0xa, "2134dac2d9993ed1"}, {0x0, 0xd, "82568c1b70ed1276b6d6df"}, {0x6, 0x6, "73322bea"}, {0x6, 0xb, "5fce7d81591791348c"}, {0x7, 0x5, "b74bc3"}]}]}}}}}) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@getlink={0x108, 0x12, 0x200, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, 0x24020, 0x44980}, [@IFLA_WEIGHT={0x8, 0xf, 0xe}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x5}, @IFLA_EXT_MASK={0x8, 0x1d, 0x8000}, @IFLA_PHYS_SWITCH_ID={0x1f, 0x24, "ed04a7900e69f0e23bb785dbbc734af14f16eee0ec97356efa4f42"}, @IFLA_MAP={0x24, 0xe, {0x1ff, 0x7931, 0xa, 0x5, 0x8, 0x1}}, @IFLA_PROP_LIST={0x7c, 0x34, 0x0, 0x1, [{0x14, 0x35, 'virt_wifi0\x00'}, {0x14, 0x35, 'batadv_slave_1\x00'}, {0x14, 0x35, 'syzkaller1\x00'}, {0x14, 0x35, 'geneve0\x00'}, {0x14, 0x35, 'batadv_slave_0\x00'}, {0x14, 0x35, 'syzkaller0\x00'}]}, @IFLA_EVENT={0x8, 0x2c, 0x6}, @IFLA_LINK_NETNSID={0x8, 0x25, 0x4}]}, 0x108}, 0x1, 0x0, 0x0, 0x44001}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000021000100"], 0x28}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000c40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a300000000050000000090a010400000000000000000700000008000a40000000000900020000000031000000000900010073797a30000000000800054000000021"], 0x98}}, 0x0) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x10c, 0x13, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFTA_OBJ_USERDATA={0x91, 0x8, "7b1ad54eeffe04070ab79491b046a8b0d6b9dbc444f81b621891bfec4753b390af57186028a2bd4d89164f1956c8a006b972895bdc4d1492ccb723835b32f2616532a3fa965f21321fc3711759296fbc76c0427e5a1a449239a45f3f95c56ea460f9c656e85f9dc49e76d1b2cd355d9df9ef1e5d7090d2cce95e262e92e2ac40149db816f920dd76daa72203d8"}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x2}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x9}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x3}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}]}, 0x10c}, 0x1, 0x0, 0x0, 0x20000000}, 0x40800) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000004c0)={0x14, 0x2, 0x6, 0x5}, 0x14}}, 0x820) 593.639193ms ago: executing program 2 (id=2594): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x4001, 0x3, 0x438, 0x0, 0x700001b, 0x148, 0x0, 0x148, 0x3a0, 0x206, 0x240, 0x3a0, 0x240, 0x7fffffe, 0x0, {[{{@uncond, 0x1ea, 0x2c8, 0x2f0, 0x0, {0x390, 0x8f00}, [@inet=@rpfilter={{0x28}, {0x3}}, @common=@unspec=@bpf1={{0x230}, @pinned={0x1, 0x0, 0x0, './file0\x00', {0x1000}}}]}, @common=@unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x2}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x5, 0xff, {0x9184}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x498) r1 = socket$kcm(0x10, 0x2, 0x0) syz_emit_ethernet(0x8e, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaa1acd1f78800d86dd608a37f200587300fe80000b0000000000000000000000bbfe8000000000000000000000000000aa00000000", @ANYRES8], 0x0) (async) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8481f0000005e140604000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0x13, &(0x7f00000009c0)=ANY=[@ANYBLOB="1800000001000000000000000000000018010000786c6c250000000000202020630af8ff00000000bda100000000000026010000f8ffffffb702000008000000b703000000000000850000000800000018010000202070250000000000202020dd00f5ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x18, 0x1a, &(0x7f0000000140)=ANY=[@ANYBLOB="180000000500000000000000aa8c000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000040000000001801000020756c3d00000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000006000000850000000600000018110000", @ANYRES32=r3, @ANYBLOB="00000000000000008500000075000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000180)=r2}, 0x20) (async) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000000200)={r1, 0x8, 0x4, 0x2}) (async) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f0000000a80)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xf6, 0xf6, 0x3, [@decl_tag={0xd, 0x0, 0x0, 0x11, 0x3, 0x2}, @struct={0xb, 0x2, 0x0, 0x4, 0x0, 0xec, [{0x4, 0x5, 0x2}, {0xb, 0x1, 0x4}]}, @ptr={0x6, 0x0, 0x0, 0x2, 0x1}, @restrict={0x7, 0x0, 0x0, 0xb, 0x1}, @int={0x3, 0x0, 0x0, 0x1, 0x0, 0x33, 0x0, 0x34, 0x1}, @const={0xc}, @enum={0xc, 0xa, 0x0, 0x6, 0x4, [{0xb, 0xfffff657}, {0x7, 0xfffffffe}, {0x7, 0x7}, {0x9, 0x7}, {0x8}, {0xd}, {0xc, 0x6440}, {0x3, 0x5}, {0x4, 0x1}, {0xd, 0x8001}]}, @datasec={0xd, 0x2, 0x0, 0xf, 0x2, [{0x2, 0x3, 0xc}, {0x1, 0x7fffffff, 0x7}], "acd9"}, @type_tag={0xb, 0x0, 0x0, 0x12, 0x2}]}, {0x0, [0x30]}}, &(0x7f00000002c0), 0x113, 0x0, 0x1, 0x5}, 0x28) (async) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000c00)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x4}, 0x50) (async) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000c80)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0xfffffffc, '\x00', 0x0, r1, 0x2, 0x5, 0x1}, 0x50) (async) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r9, 0x40305828, &(0x7f0000000180)={0x0, 0x2, 0x8, 0x7100000}) (async) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r9, 0x0) (async) getsockopt$netrom_NETROM_T4(r9, 0x103, 0x6, &(0x7f0000000e40)=0x10001, &(0x7f0000000e80)=0x4) (async) r10 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) (async) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r11) (async) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r12, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r12, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) sendmsg$NFT_BATCH(r11, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)) (async) connect$bt_l2cap(r10, &(0x7f0000000000)={0x1f, 0x8ef, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="4c000000150097f87059ae08060c040002ff0f0200000000000001870182fa73a69d35a2cc", 0x25}], 0x1}, 0x0) r13 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPCONNADD(r13, 0x400442c8, &(0x7f0000000100)=ANY=[@ANYRES32=r10]) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x11, 0x23, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x66b21ef2}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@jmp={0x5, 0x1, 0x2, 0xa, 0x6, 0xfffffffffffffffe, 0xffffffffffffffff}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x388b}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7fffffff}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @exit], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000240)='syzkaller\x00', 0x8, 0xe, &(0x7f0000000280)=""/14, 0xc2f00, 0x38, '\x00', 0x0, 0x0, r6, 0x8, &(0x7f0000000980)={0x3, 0x1}, 0x8, 0x10, &(0x7f0000000bc0)={0x1, 0xb, 0x8000800, 0x7}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000d00)=[r7, r8, r9], &(0x7f0000000d40)=[{0x5, 0x4, 0x4, 0x6}, {0x3, 0x5}, {0x0, 0x2, 0x1}, {0x1, 0x2, 0xb, 0xc}], 0x10, 0x1}, 0x94) 586.202598ms ago: executing program 0 (id=2595): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000005500e502000000000000000007000000", @ANYRES32=r1, @ANYBLOB="20000100", @ANYRES32=r1], 0x38}}, 0x0) 483.860847ms ago: executing program 5 (id=2596): r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xffffffc1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x1010, r2, 0x5b40c000) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x100000c, 0x22051, r2, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000080)={'vlan1\x00', @multicast}) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x3, 0xb, 0x6, 0x8}, 0xe) shutdown(r1, 0x0) socket$packet(0x11, 0x3, 0x300) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000002880), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000780)={0x28, r4, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@NL802154_ATTR_SEC_ENABLED={0x5, 0x29, 0x5e}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x28}, 0x1, 0x0, 0x0, 0x20008000}, 0x40080) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000180)={r5, 0x9, 0xffff, 0x8001, 0xa, 0x3}, &(0x7f0000000680)=0x14) accept4$inet(r0, 0x0, &(0x7f00000002c0), 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="3000000040000701feffffff00000000017c0000040042801400018006000600800a000008001400", @ANYRES32=0x0, @ANYBLOB="040002"], 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000c00)=@raw={'raw\x00', 0x4001, 0x3, 0x3b8, 0x0, 0x0, 0x148, 0x200, 0x148, 0x320, 0x240, 0x240, 0x320, 0x240, 0x7fffffe, 0x0, {[{{@uncond, 0x0, 0x1e0, 0x200, 0x0, {}, [@common=@inet=@sctp={{0x148}, {[0x4e22, 0x4e23], [0x4e21, 0x4e23], [0x40000009, 0x5, 0x223d, 0x6, 0x0, 0x3770, 0xdfb, 0x4, 0x5, 0x4, 0x3, 0x9, 0x418f, 0x1, 0x7, 0x2, 0xfff, 0xffffffff, 0x6, 0x800, 0x0, 0xfffffffd, 0x0, 0xa5, 0x3, 0x5, 0x2, 0x18000, 0xffffff46, 0x10001, 0x27, 0x800, 0x0, 0xd, 0xfffffff9, 0xfff, 0x6, 0x3, 0x5, 0x44, 0x10, 0x5, 0x8, 0x200, 0xca6, 0x7, 0xc, 0x7, 0x10001, 0x3, 0x101, 0x1, 0x5, 0x105f, 0x5, 0x5, 0x4, 0x9, 0x9, 0x4, 0x0, 0x3, 0x68], 0x1, [{0xc, 0x8, 0x2}, {0xe2, 0x7, 0x7}, {0x5, 0x3, 0x53}, {0x81, 0x7, 0x10}], 0x2, 0x4, 0x2}}, @inet=@rpfilter={{0x28}}]}, @unspec=@TRACE={0x20}}, {{@ip={@empty, @loopback, 0xffffff00, 0xff, 'pimreg1\x00', 'bond_slave_0\x00', {}, {0xff}, 0x1d, 0x7, 0x24}, 0x0, 0xc0, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x8}}, @inet=@rpfilter={{0x28, 'rpfilter\x00', 0x2}, {0x6}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x1, [0x5, 0x2, 0x5, 0x6, 0x4, 0x6], 0x1, 0x4}, {0x1, [0x2, 0x0, 0x3, 0x7, 0x7, 0x1], 0x1, 0x1}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x418) 470.243261ms ago: executing program 0 (id=2597): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x9}, 0x20) setsockopt$inet6_int(r3, 0x29, 0x1000000000021, &(0x7f0000000000)=0x1ff, 0x4) sendmmsg(r3, &(0x7f0000001500)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @remote, 0x0, 0x3}, 0x80, 0x0}, 0x5b4}, {{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @ipv4={'\x00', '\xff\xff', @loopback}, 0x7, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="080100000000000029000000", @ANYRES64=r3], 0x108}}], 0x2, 0xc040) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0xfffffffffffffefb, 0x2, {0x0, 0x3}}}, @TCA_RATE={0x6, 0x5, {0x0, 0xd}}]}, 0x40}}, 0x20000010) 457.619893ms ago: executing program 1 (id=2598): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)={0x14, 0x818, 0x229, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)={0x14, 0x818, 0x229, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) (async) 401.106027ms ago: executing program 2 (id=2599): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x38, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x4d}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x2}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x337}]}]}, 0x38}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x54, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x0}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_DELFLOWTABLE={0x34, 0x18, 0xa, 0x101, 0xb00, 0x0, {0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x8, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x4}]}]}], {0x14, 0x10}}, 0xbc}}, 0x0) 340.708546ms ago: executing program 1 (id=2600): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x10, 0x803, 0x0) sendto(r1, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x8804, 0x0, 0x0) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x74, 0x74, 0x4, [@float={0x9, 0x0, 0x0, 0x10, 0x8}, @const={0x9, 0x0, 0x0, 0xa, 0x3}, @fwd={0xf}, @func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{0xf, 0x2}, {0x6, 0x1}]}, @decl_tag={0xd, 0x0, 0x0, 0x11, 0x4, 0xffffffffffffffff}, @enum64={0x7, 0x1, 0x0, 0x13, 0x1, 0xc, [{0xa, 0x7, 0xfffffff8}]}, @func={0x6, 0x0, 0x0, 0xc, 0x1}]}, {0x0, [0x5f, 0x2e]}}, &(0x7f0000000140)=""/165, 0x90, 0xa5, 0x1, 0x7}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000440)={r2, 0x20, &(0x7f0000000400)={&(0x7f0000000240)=""/160, 0xa0, 0x0, &(0x7f0000000300)=""/253, 0xfd}}, 0x10) (async) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000440)={r2, 0x20, &(0x7f0000000400)={&(0x7f0000000240)=""/160, 0xa0, 0x0, &(0x7f0000000300)=""/253, 0xfd}}, 0x10) recvmmsg(r1, &(0x7f0000007d80)=[{{0x0, 0x0, &(0x7f0000000ec0)=[{&(0x7f00000000c0)=""/59, 0x3b}, {&(0x7f0000000540)=""/110, 0x6e}, {&(0x7f0000000880)=""/135, 0x87}, {&(0x7f0000002300)=""/4096, 0x1000}, {&(0x7f0000000a00)=""/255, 0xff}, {&(0x7f0000000b00)=""/223, 0xdf}, {&(0x7f0000000c00)=""/247, 0xf7}, {&(0x7f0000000d00)=""/217, 0xd9}, {&(0x7f0000000100)=""/36, 0x24}, {&(0x7f0000000e00)=""/130, 0x82}], 0xa}, 0xfff}, {{0x0, 0x0, 0x0}, 0x4}], 0x2, 0x10002, 0x0) (async) recvmmsg(r1, &(0x7f0000007d80)=[{{0x0, 0x0, &(0x7f0000000ec0)=[{&(0x7f00000000c0)=""/59, 0x3b}, {&(0x7f0000000540)=""/110, 0x6e}, {&(0x7f0000000880)=""/135, 0x87}, {&(0x7f0000002300)=""/4096, 0x1000}, {&(0x7f0000000a00)=""/255, 0xff}, {&(0x7f0000000b00)=""/223, 0xdf}, {&(0x7f0000000c00)=""/247, 0xf7}, {&(0x7f0000000d00)=""/217, 0xd9}, {&(0x7f0000000100)=""/36, 0x24}, {&(0x7f0000000e00)=""/130, 0x82}], 0xa}, 0xfff}, {{0x0, 0x0, 0x0}, 0x4}], 0x2, 0x10002, 0x0) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000cc0), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000d00)={0x30, r3, 0x43ea4d35e0958cf7, 0x0, 0x0, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_DOMAIN={0x12, 0x1, 'veth0_macvtap\x00'}]}, 0x30}}, 0x0) 284.352261ms ago: executing program 0 (id=2601): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00000000c0)={0x3, 0x1000}, 0x4) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x3, 0x1000}, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000003180)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf84, 0x3}, 0x1c) 141.185372ms ago: executing program 0 (id=2602): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000080)=0x20000, 0x4) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) socketpair$unix(0x1, 0x5, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x4) writev(r3, &(0x7f0000000300)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560aff820fffff5bab003a0000002058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100030c100000000000224e0000", 0x58}], 0x1) openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x810}, 0x20000050) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x6, 0x5, &(0x7f0000000500)=ANY=[@ANYBLOB="18020000fcff"], 0x0, 0x7, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bind$inet6(r4, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f00000001c0)={0x1adbc, 0x1004, 0x0, 0x7, 0x1}) listen(r4, 0x2) r5 = socket$alg(0x26, 0x5, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000000206010300000000000000000000000014000780080012400000000005001500060000000500010006000000050005000a00000005000400000000000900020073797a300000000011000300686173683a6e65742c6e6574"], 0x60}}, 0x0) bind$alg(r5, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000600)="b268f74d3121170b032a50de04026498ec2d276db6cf835e22e750356b29091da6109916036e877725b702c2c560ffa7fddb9b095ec1b78768a2a30217cade0d239f3ef8a548d5c66f981cb9d58d02189662d04b9e0258af204760e788efe5da085b0559529aab3f6a85a36c3557546900"/125, 0x7d) r6 = accept4(r5, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x804}], 0x1, 0x40800) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000540)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd60f900f500180601fe8000000000000000000000000000aafe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="600200bd6cde9290a28be464c1adba03009078"], 0x0) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10) mmap$xdp(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x300000c, 0x11, r0, 0x100000000) 69.355353ms ago: executing program 1 (id=2603): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10) ioctl$sock_netdev_private(r3, 0x8914, &(0x7f0000000000)) setsockopt$ax25_SO_BINDTODEVICE(r2, 0x101, 0x19, &(0x7f0000000240)=@bpq0, 0x10) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x0, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x1, 'syz1\x00', @default, 0x1, 0x0, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r0, 0x8914, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000e80)=ANY=[@ANYBLOB="b40500000000000061107a0000000000070000000000000095000044c51cb05200000000008ef3a960a080406dee7b83fe63afe8b0ba84dfbf4d2758f39602b5a8b6d6a0da46e5e4878057e43acf9d2457b5bd451ddc28a4d7f38da84e44ea72c7c7fc08cacd88abf1d63c85d98dd4f95eb30ae722f6ec83f9332c88d6de56dec585d98f09c03c3ecb29732284bd8539ed4b844eed8340d9f6db0cb60200000087ad14d45ce0b33785fb4cc1e014734133907b009ec7c9bda01c25edec69771acead61e0e7"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 0s ago: executing program 2 (id=2604): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000340)={0x1d, r1, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) close(r0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000009c0)=ANY=[@ANYBLOB="b8010000160011040000000000000000ffffffff000000000000000000000000ffffffff0000000000000000000000000000000000000000000000003b000000", @ANYRES32, @ANYRES32=0xee01, @ANYBLOB="fe8000000000000000000000000000aa0000000033000000ac14141a000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200"/158, @ANYRES32=r3, @ANYBLOB="00000000ac0007"], 0x1b8}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000011c0)={0x1c, 0xd, 0x6, 0x201, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8}]}, 0x1c}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)={0x114, 0x2f, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x103, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0xfac08}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x16}}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be", @typed={0x4, 0xe9}]}]}, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r9, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x18}}, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000010008105e9c51c000000000000000000", @ANYRES32=r10, @ANYRES32=r5, @ANYRES64=r8], 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r11 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r11, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bind$can_j1939(r11, &(0x7f00000000c0)={0x1d, r12}, 0x18) connect$can_j1939(r11, &(0x7f0000000140)={0x1d, r12}, 0x18) sendmmsg$inet(r11, &(0x7f0000003b80)=[{{0x0, 0x0, &(0x7f0000002940)=[{&(0x7f0000002640)="ef0ba606342672dabc", 0x9}], 0x1}}], 0x1, 0x20000010) recvmmsg(r11, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/179, 0xb3}, {&(0x7f00000002c0)=""/182, 0xb6}, {&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000001380)=""/198, 0xc6}, {&(0x7f0000001480)=""/169, 0xa9}, {&(0x7f0000001540)=""/4096, 0x1000}], 0x6, &(0x7f0000002540)=""/216, 0xd8}}], 0x1, 0x0, 0x0) sendto$packet(r6, 0x0, 0x0, 0x8040, &(0x7f0000000180)={0x11, 0x1a, r10, 0x1, 0xa2}, 0x14) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r4) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x30, r13, 0x1, 0x70bd2a, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_TX_RATES={0x14, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x10, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_HT={0x5, 0x2, [{0x0, 0x1}]}]}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x400c040}, 0x0) kernel console output (not intermixed with test programs): l: no stack [ 107.440628][ T6912] netlink: 64 bytes leftover after parsing attributes in process `syz.4.276'. [ 107.847957][ T6931] syzkaller1: entered promiscuous mode [ 107.871053][ T6932] netlink: 'syz.0.284': attribute type 5 has an invalid length. [ 107.879245][ T6931] syzkaller1: entered allmulticast mode [ 107.899534][ T6932] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.284'. [ 108.226688][ T6953] netlink: 24 bytes leftover after parsing attributes in process `syz.0.290'. [ 108.334740][ T6960] netlink: 20 bytes leftover after parsing attributes in process `syz.0.293'. [ 108.379378][ T6960] netlink: 'syz.0.293': attribute type 3 has an invalid length. [ 108.611924][ T6978] netdevsim netdevsim0: Firmware load for './file0/../file0' refused, path contains '..' component [ 108.752088][ T6983] netlink: 20 bytes leftover after parsing attributes in process `syz.0.303'. [ 108.763458][ T6984] netlink: 'syz.0.303': attribute type 10 has an invalid length. [ 108.779570][ T6984] veth0_virt_wifi: entered allmulticast mode [ 108.806761][ T6984] team0: Port device veth0_virt_wifi added [ 108.868818][ T6991] xt_cgroup: invalid path, errno=-2 [ 108.877939][ T6991] netlink: 104 bytes leftover after parsing attributes in process `syz.3.304'. [ 109.149398][ T30] audit: type=1107 audit(1764088227.340:2): pid=7001 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='3{ qD*h #Xa#]2WI? ' 99.\nJgfasgj7ga' [ 109.179043][ T7004] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 109.388814][ T7019] netlink: 12 bytes leftover after parsing attributes in process `syz.2.313'. [ 109.392283][ T7017] netlink: 'syz.0.314': attribute type 4 has an invalid length. [ 109.748100][ T7027] IPVS: set_ctl: invalid protocol: 0 224.0.0.2:20001 [ 110.390514][ T7042] netlink: 124 bytes leftover after parsing attributes in process `syz.4.321'. [ 111.856763][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 112.445458][ T7063] netlink: 12 bytes leftover after parsing attributes in process `syz.2.328'. [ 113.002046][ T7103] netlink: 12 bytes leftover after parsing attributes in process `syz.1.337'. [ 113.213750][ T7113] macsec1: entered promiscuous mode [ 113.225716][ T7113] macsec1: entered allmulticast mode [ 113.233168][ T7113] bond1: (slave macsec1): Error -34 calling dev_set_mtu [ 113.243745][ T7120] xt_hashlimit: size too large, truncated to 1048576 [ 113.251930][ T7114] syzkaller0: entered promiscuous mode [ 113.258775][ T7114] syzkaller0: entered allmulticast mode [ 113.272886][ T7103] netlink: 36 bytes leftover after parsing attributes in process `syz.1.337'. [ 113.282475][ T7122] netlink: 28 bytes leftover after parsing attributes in process `syz.3.341'. [ 113.294040][ T7122] netlink: 28 bytes leftover after parsing attributes in process `syz.3.341'. [ 113.390039][ T7126] netlink: 'syz.1.345': attribute type 10 has an invalid length. [ 113.471869][ T7131] netlink: 'syz.1.345': attribute type 1 has an invalid length. [ 113.483955][ T7133] netlink: 'syz.0.346': attribute type 1 has an invalid length. [ 113.553543][ T7131] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 113.557583][ T7126] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 113.639118][ T7135] syzkaller0: entered promiscuous mode [ 113.691485][ T7135] syzkaller0: entered allmulticast mode [ 113.793233][ T7151] netlink: 48 bytes leftover after parsing attributes in process `syz.4.349'. [ 114.443615][ T7181] SET target dimension over the limit! [ 114.474138][ T7181] netlink: 56 bytes leftover after parsing attributes in process `syz.1.357'. [ 114.595307][ T7188] syzkaller0: entered promiscuous mode [ 114.613023][ T7188] syzkaller0: entered allmulticast mode [ 114.631001][ T7181] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 114.689054][ T7189] netlink: 16 bytes leftover after parsing attributes in process `syz.0.359'. [ 114.717662][ T7188] netlink: 16 bytes leftover after parsing attributes in process `syz.0.359'. [ 114.877031][ T7205] netlink: 12 bytes leftover after parsing attributes in process `syz.3.362'. [ 114.896388][ T7205] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 114.950034][ T7205] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 115.345995][ T7226] sock: sock_timestamping_bind_phc: sock not bind to device [ 115.486877][ T7237] openvswitch: netlink: Key type 136 is out of range max 32 [ 115.554565][ T7225] netlink: 'syz.4.367': attribute type 6 has an invalid length. [ 115.602981][ T7235] netlink: 'syz.4.367': attribute type 6 has an invalid length. [ 115.647033][ T7249] netlink: 'syz.0.371': attribute type 2 has an invalid length. [ 116.716407][ T7305] tipc: Enabled bearer , priority 0 [ 116.751981][ T7305] syzkaller0: entered promiscuous mode [ 116.757496][ T7305] syzkaller0: entered allmulticast mode [ 116.809296][ T7314] x_tables: duplicate underflow at hook 2 [ 116.818650][ T7305] tipc: Resetting bearer [ 117.002210][ T7304] tipc: Resetting bearer [ 117.084831][ T7304] tipc: Disabling bearer [ 117.179953][ T7334] netlink: 'syz.1.394': attribute type 1 has an invalid length. [ 117.354310][ T7341] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.363264][ T7341] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.460717][ T7344] netlink: 'syz.4.397': attribute type 4 has an invalid length. [ 117.493762][ T7345] bridge0: port 2(bridge_slave_1) entered blocking state [ 117.501068][ T7345] bridge0: port 2(bridge_slave_1) entered forwarding state [ 117.508658][ T7345] bridge0: port 1(bridge_slave_0) entered blocking state [ 117.515884][ T7345] bridge0: port 1(bridge_slave_0) entered forwarding state [ 117.534994][ T7345] __nla_validate_parse: 5 callbacks suppressed [ 117.535013][ T7345] netlink: 52 bytes leftover after parsing attributes in process `syz.2.395'. [ 117.573095][ T7355] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.401'. [ 117.582151][ T7345] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.589825][ T7345] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.010241][ T7367] lo speed is unknown, defaulting to 1000 [ 118.018710][ T7378] netlink: 596 bytes leftover after parsing attributes in process `syz.4.407'. [ 118.289171][ T7389] vlan2: entered promiscuous mode [ 118.307432][ T7389] bond0: entered promiscuous mode [ 118.317779][ T7389] bond_slave_0: entered promiscuous mode [ 118.349313][ T7389] bond_slave_1: entered promiscuous mode [ 118.506449][ T7401] netlink: 4 bytes leftover after parsing attributes in process `syz.4.414'. [ 118.519168][ T7402] netlink: 28 bytes leftover after parsing attributes in process `syz.2.413'. [ 118.520716][ T7404] IPVS: set_ctl: invalid protocol: 44 172.20.20.11:20002 [ 118.570247][ T7397] IPv6: sit1: Disabled Multicast RS [ 118.584397][ T7397] sit1: entered allmulticast mode [ 118.652926][ T7410] IPVS: set_ctl: invalid protocol: 47 172.20.20.187:20001 [ 118.824972][ T7419] netlink: 16 bytes leftover after parsing attributes in process `syz.3.416'. [ 119.535984][ T7449] bond4: option resend_igmp: invalid value (32767) [ 119.558673][ T7449] bond4: option resend_igmp: allowed values 0 - 255 [ 119.620755][ T7449] bond4 (unregistering): Released all slaves [ 119.663342][ T7467] 8021q: adding VLAN 0 to HW filter on device ipvlan3 [ 119.683555][ T7467] bond0: (slave ipvlan3): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 119.858948][ T7475] netlink: 12 bytes leftover after parsing attributes in process `syz.3.432'. [ 119.912773][ T7475] netlink: 8 bytes leftover after parsing attributes in process `syz.3.432'. [ 119.978844][ T7480] netlink: 12 bytes leftover after parsing attributes in process `syz.3.434'. [ 120.036871][ T7480] macvlan2: entered promiscuous mode [ 120.054758][ T7480] macvlan2: entered allmulticast mode [ 120.066586][ T7480] bond1: entered promiscuous mode [ 120.086749][ T7480] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 120.115318][ T7480] bond1: left promiscuous mode [ 120.223116][ T7489] syzkaller1: entered promiscuous mode [ 120.228969][ T7489] syzkaller1: entered allmulticast mode [ 120.838600][ T7520] netlink: 92 bytes leftover after parsing attributes in process `syz.4.443'. [ 120.947362][ T7529] syzkaller0: entered promiscuous mode [ 120.953048][ T7529] syzkaller0: entered allmulticast mode [ 122.322277][ T7563] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 122.787044][ T7589] __nla_validate_parse: 3 callbacks suppressed [ 122.787073][ T7589] netlink: 88 bytes leftover after parsing attributes in process `syz.4.461'. [ 122.845075][ T7591] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.462'. [ 122.862886][ T7593] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.460'. [ 122.924060][ T7587] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 122.925958][ T43] IPVS: starting estimator thread 0... [ 122.977888][ T7602] netlink: 4 bytes leftover after parsing attributes in process `syz.2.464'. [ 123.052230][ T7601] IPVS: using max 30 ests per chain, 72000 per kthread [ 123.072155][ T7606] netlink: 28 bytes leftover after parsing attributes in process `syz.4.465'. [ 123.258357][ T7608] netlink: 8 bytes leftover after parsing attributes in process `syz.1.467'. [ 123.327132][ T7615] netlink: 28 bytes leftover after parsing attributes in process `syz.2.468'. [ 123.348828][ T7618] netlink: 4 bytes leftover after parsing attributes in process `syz.4.465'. [ 123.379559][ T7618] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 123.396111][ T7615] netlink: 'syz.2.468': attribute type 7 has an invalid length. [ 123.413003][ T7615] netlink: 'syz.2.468': attribute type 8 has an invalid length. [ 123.444780][ T7615] netlink: 4 bytes leftover after parsing attributes in process `syz.2.468'. [ 123.583773][ T7618] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 123.641879][ T7615] gretap0: entered promiscuous mode [ 123.648134][ T7615] batadv_slave_1: entered promiscuous mode [ 123.654986][ T7615] batadv_slave_1: left promiscuous mode [ 123.662252][ T7615] gretap0: left promiscuous mode [ 123.993564][ T7648] netlink: 212324 bytes leftover after parsing attributes in process `syz.0.476'. [ 124.477309][ T7701] IPVS: Unknown mcast interface: dvmrp0 [ 124.652791][ T7707] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 124.801172][ T7715] batman_adv: batadv0: adding TT local entry ba:e1:05:00:07:00 to non-existent VLAN 1280 [ 124.843694][ T7715] netlink: 'syz.2.484': attribute type 11 has an invalid length. [ 125.064977][ T7729] bridge_slave_1: left allmulticast mode [ 125.070817][ T7729] bridge_slave_1: left promiscuous mode [ 125.093232][ T7729] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.184313][ T7729] bridge_slave_0: left allmulticast mode [ 125.194016][ T7729] bridge_slave_0: left promiscuous mode [ 125.228256][ T7729] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.238227][ T7746] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 125.693836][ T7769] netlink: 'syz.0.499': attribute type 1 has an invalid length. [ 126.062500][ T7787] vlan2: entered allmulticast mode [ 126.067671][ T7787] hsr0: entered allmulticast mode [ 126.084959][ T7787] hsr_slave_0: entered allmulticast mode [ 126.090653][ T7787] hsr_slave_1: entered allmulticast mode [ 126.218083][ T7798] vlan3: entered promiscuous mode [ 126.229231][ T7798] vlan3: entered allmulticast mode [ 127.169631][ T7844] netem: incorrect gi model size [ 127.200113][ T7844] netem: change failed [ 127.238449][ T7850] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 127.273084][ T7850] syzkaller1: linktype set to 823 [ 127.470761][ T7860] netlink: 'syz.4.527': attribute type 1 has an invalid length. [ 127.566387][ T7860] bond4: entered promiscuous mode [ 127.571616][ T7860] bond4: entered allmulticast mode [ 127.577294][ T7860] 8021q: adding VLAN 0 to HW filter on device bond4 [ 127.592607][ T7870] macvlan0: entered promiscuous mode [ 127.598051][ T7870] macvlan0: entered allmulticast mode [ 127.609893][ T7870] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 128.107757][ T7895] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 128.276955][ T7909] __nla_validate_parse: 10 callbacks suppressed [ 128.276973][ T7909] netlink: 260 bytes leftover after parsing attributes in process `syz.3.538'. [ 128.346958][ T7909] pim6reg1: entered promiscuous mode [ 128.363716][ T7909] pim6reg1: entered allmulticast mode [ 128.411052][ T7919] netlink: 'syz.2.542': attribute type 1 has an invalid length. [ 128.559334][ T7919] bond2: (slave bridge1): making interface the new active one [ 128.580730][ T7919] bond2: (slave bridge1): Enslaving as an active interface with an up link [ 128.949812][ T7943] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 129.006879][ T7904] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 129.038881][ T7904] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 129.079608][ T7904] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 129.099989][ T7947] 8021q: VLANs not supported on ip6tnl0 [ 129.111775][ T7904] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 129.140971][ T7949] netlink: 'syz.3.550': attribute type 1 has an invalid length. [ 129.150728][ T7904] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 129.158546][ T7904] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 129.188023][ T7904] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 129.196578][ T7904] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 129.234871][ T7904] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 129.252463][ T7904] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 129.352591][ T7955] bond2: (slave gretap1): making interface the new active one [ 129.378424][ T7955] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 129.470941][ T7962] xt_cluster: node mask cannot exceed total number of nodes [ 129.546446][ T7964] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.560311][ T7966] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR [ 129.817046][ T7964] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.086909][ T7964] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.240943][ T7964] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.457981][ T8027] openvswitch: netlink: Unknown key attributes 2 [ 130.565306][ T7704] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.583468][ T8036] netlink: 8 bytes leftover after parsing attributes in process `syz.0.571'. [ 130.601490][ T8033] C: renamed from lo (while UP) [ 130.638279][ T8036] netlink: 24 bytes leftover after parsing attributes in process `syz.0.571'. [ 130.686041][ T7704] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.703527][ T8027] "syz.3.568" (8027) uses obsolete ecb(arc4) skcipher [ 130.779314][ T7704] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.790371][ T7704] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.832239][ T8041] netlink: 28 bytes leftover after parsing attributes in process `syz.4.573'. [ 130.897717][ T8041] bridge0: port 3(syz_tun) entered blocking state [ 130.905232][ T8041] bridge0: port 3(syz_tun) entered disabled state [ 130.926374][ T8041] syz_tun: entered allmulticast mode [ 130.939392][ T8041] syz_tun: entered promiscuous mode [ 130.945875][ T8041] bridge0: port 3(syz_tun) entered blocking state [ 130.952739][ T8041] bridge0: port 3(syz_tun) entered forwarding state [ 131.028642][ T8050] netlink: 20 bytes leftover after parsing attributes in process `syz.3.576'. [ 131.303416][ T8068] xt_socket: unknown flags 0xe4 [ 131.383511][ T8078] netlink: 24 bytes leftover after parsing attributes in process `syz.4.580'. [ 131.418084][ T8075] netlink: 8 bytes leftover after parsing attributes in process `syz.1.582'. [ 131.450360][ T8081] RDS: rds_bind could not find a transport for ::ffff:10.1.1.2, load rds_tcp or rds_rdma? [ 131.492541][ T8078] bond5 (unregistering): Released all slaves [ 131.499945][ T8083] ip6t_rpfilter: unknown options [ 131.516650][ T8088] netlink: 4 bytes leftover after parsing attributes in process `syz.1.586'. [ 131.524008][ T8089] netlink: 4 bytes leftover after parsing attributes in process `syz.2.585'. [ 131.558385][ T8073] syzkaller0: entered allmulticast mode [ 131.569120][ T8073] netlink: 'syz.0.581': attribute type 1 has an invalid length. [ 131.828966][ T8099] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 132.047170][ T8109] openvswitch: netlink: IP tunnel dst address not specified [ 132.521053][ T8131] netlink: 'syz.3.597': attribute type 4 has an invalid length. [ 132.539151][ T8132] netlink: 12 bytes leftover after parsing attributes in process `syz.1.598'. [ 132.835543][ T8141] syzkaller1: entered promiscuous mode [ 132.852311][ T8141] syzkaller1: entered allmulticast mode [ 132.986062][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.139658][ T8152] can: request_module (can-proto-0) failed. [ 133.544281][ T8177] __nla_validate_parse: 1 callbacks suppressed [ 133.544307][ T8177] netlink: 104 bytes leftover after parsing attributes in process `syz.0.617'. [ 133.668184][ T8186] netlink: 8 bytes leftover after parsing attributes in process `syz.4.616'. [ 133.679860][ T8183] 8021q: VLANs not supported on syzkaller1 [ 133.696955][ T8183] syzkaller1: entered promiscuous mode [ 133.716315][ T8183] syzkaller1: entered allmulticast mode [ 134.015449][ T8204] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.624'. [ 134.074851][ T8205] veth0_macvtap: left promiscuous mode [ 134.204751][ T8210] netlink: 'syz.1.627': attribute type 3 has an invalid length. [ 134.231465][ T8210] netlink: 766 bytes leftover after parsing attributes in process `syz.1.627'. [ 134.264046][ T8210] netlink: 'syz.1.627': attribute type 2 has an invalid length. [ 134.397076][ T5939] IPVS: starting estimator thread 0... [ 134.469198][ T8220] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 134.491630][ T8219] IPVS: using max 25 ests per chain, 60000 per kthread [ 134.692869][ T8225] bond3: Unable to set down delay as MII monitoring is disabled [ 134.703957][ T8225] bond3 (unregistering): Released all slaves [ 134.881601][ T8240] netlink: 'syz.0.635': attribute type 7 has an invalid length. [ 134.889732][ T8242] netlink: 'syz.2.636': attribute type 7 has an invalid length. [ 134.915418][ T8240] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.635'. [ 134.934541][ T8242] netlink: 'syz.2.636': attribute type 8 has an invalid length. [ 135.197991][ T8259] netlink: 'syz.3.641': attribute type 29 has an invalid length. [ 135.281867][ T8267] nftables ruleset with unbound set [ 135.299891][ T8262] netlink: 40 bytes leftover after parsing attributes in process `syz.1.642'. [ 135.353381][ T8273] openvswitch: netlink: Port -1 exceeds max allowable 65535 [ 135.551776][ T8286] xt_hashlimit: size too large, truncated to 1048576 [ 135.672847][ T8291] netlink: 44 bytes leftover after parsing attributes in process `syz.4.650'. [ 135.715667][ T8291] netlink: 35 bytes leftover after parsing attributes in process `syz.4.650'. [ 135.758128][ T8291] netlink: 'syz.4.650': attribute type 5 has an invalid length. [ 135.782251][ T8291] netlink: 'syz.4.650': attribute type 6 has an invalid length. [ 135.801559][ T8291] netlink: 35 bytes leftover after parsing attributes in process `syz.4.650'. [ 136.028938][ T8305] netlink: 28 bytes leftover after parsing attributes in process `syz.0.654'. [ 136.071089][ T8304] erspan0: entered promiscuous mode [ 136.124879][ T8304] gretap0: entered promiscuous mode [ 136.248521][ T8310] veth0_to_bond: mtu less than device minimum [ 136.276987][ T8314] syzkaller0: entered promiscuous mode [ 136.295984][ T8314] syzkaller0: entered allmulticast mode [ 136.391942][ T8323] xt_l2tp: wrong L2TP version: 0 [ 136.444795][ T8327] netlink: 'syz.2.664': attribute type 30 has an invalid length. [ 136.490034][ T8329] netlink: 'syz.4.662': attribute type 13 has an invalid length. [ 136.524619][ T7679] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 136.534080][ T7679] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 136.586494][ T7679] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 136.608928][ T7679] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 136.719107][ T8344] nbd: must specify an index to disconnect [ 136.777342][ T8349] bridge0: port 1(bridge_slave_0) entered disabled state [ 137.512664][ T8386] bond3: Unable to set peer notification delay as MII monitoring is disabled [ 137.533374][ T8386] bond3 (unregistering): Released all slaves [ 137.935723][ T8417] IPVS: set_ctl: invalid protocol: 51 224.0.0.2:20001 [ 138.072408][ T8421] xt_l2tp: v2 tid > 0xffff: 1114244 [ 138.516719][ T8441] bond2: entered promiscuous mode [ 138.562867][ T8441] bond2: entered allmulticast mode [ 138.610496][ T8446] __nla_validate_parse: 13 callbacks suppressed [ 138.610513][ T8446] netlink: 32 bytes leftover after parsing attributes in process `syz.1.697'. [ 138.610539][ T8441] 8021q: adding VLAN 0 to HW filter on device bond2 [ 138.637503][ T8451] netlink: 28 bytes leftover after parsing attributes in process `syz.4.699'. [ 138.679059][ T8448] 8021q: adding VLAN 0 to HW filter on device bond5 [ 138.744421][ T8455] veth7: entered promiscuous mode [ 138.750053][ T8448] netlink: 28 bytes leftover after parsing attributes in process `syz.4.699'. [ 138.777142][ T8455] bond5: (slave veth7): Enslaving as an active interface with a down link [ 138.791763][ T8459] netlink: 40 bytes leftover after parsing attributes in process `syz.1.701'. [ 138.891081][ T8466] netlink: 8 bytes leftover after parsing attributes in process `syz.1.703'. [ 139.225393][ T8469] lo speed is unknown, defaulting to 1000 [ 139.242772][ T8482] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 139.257607][ T8482] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 139.271786][ T8482] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 139.281440][ T8487] validate_nla: 12 callbacks suppressed [ 139.281454][ T8487] netlink: 'syz.3.710': attribute type 1 has an invalid length. [ 139.282216][ T8482] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 139.305781][ T8482] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 139.318783][ T8482] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 139.343033][ T8484] netlink: 4 bytes leftover after parsing attributes in process `syz.1.709'. [ 139.348140][ T8482] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 139.362126][ T8482] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 139.387811][ T8482] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 139.444661][ T8487] bond3: entered promiscuous mode [ 139.450063][ T8487] 8021q: adding VLAN 0 to HW filter on device bond3 [ 139.468067][ T8488] netlink: 28 bytes leftover after parsing attributes in process `syz.3.710'. [ 139.485560][ T8488] netlink: 4 bytes leftover after parsing attributes in process `syz.3.710'. [ 139.530000][ T8488] netlink: 8 bytes leftover after parsing attributes in process `syz.3.710'. [ 139.559272][ T8484] chnl_net:caif_netlink_parms(): no params data found [ 140.194575][ T8525] netlink: 16 bytes leftover after parsing attributes in process `syz.3.719'. [ 140.754788][ T8514] lo speed is unknown, defaulting to 1000 [ 141.420621][ T875] lo speed is unknown, defaulting to 1000 [ 141.490616][ T8574] tipc: Started in network mode [ 141.503844][ T8574] tipc: Node identity e2bc3a102e4d, cluster identity 4711 [ 141.511174][ T8574] tipc: Enabled bearer , priority 0 [ 141.546322][ T8574] syzkaller0: entered promiscuous mode [ 141.565121][ T8574] syzkaller0: entered allmulticast mode [ 141.582189][ T8584] xt_HMARK: proto mask must be zero with L3 mode [ 141.604470][ T8584] IPv6: NLM_F_REPLACE set, but no existing node found! [ 141.637495][ T8582] veth0_macvtap: left promiscuous mode [ 141.669924][ T8587] netlink: 'syz.0.735': attribute type 3 has an invalid length. [ 141.687823][ T8571] tipc: Resetting bearer [ 141.708644][ T8571] tipc: Disabling bearer [ 141.907044][ T8592] geneve2: entered promiscuous mode [ 141.908357][ T8597] netlink: 'syz.2.736': attribute type 18 has an invalid length. [ 141.930776][ T8592] geneve2: entered allmulticast mode [ 141.983540][ T8566] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 19999 - 0 [ 142.014531][ T8566] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 19999 - 0 [ 142.118125][ T8566] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 19999 - 0 [ 142.151555][ T8566] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 19999 - 0 [ 142.284377][ T8612] syzkaller0: entered promiscuous mode [ 142.290237][ T8612] syzkaller0: entered allmulticast mode [ 142.306907][ T8619] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 142.322129][ T8619] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 142.355080][ T8622] net_ratelimit: 56 callbacks suppressed [ 142.355099][ T8622] openvswitch: netlink: Message has 536 unknown bytes. [ 142.368568][ T8622] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 142.664573][ T8638] openvswitch: netlink: EtherType 50a is less than min 600 [ 142.683007][ T8639] openvswitch: netlink: EtherType 50a is less than min 600 [ 143.916489][ T8643] netlink: 'syz.0.751': attribute type 4 has an invalid length. [ 143.924457][ T8643] __nla_validate_parse: 7 callbacks suppressed [ 143.924473][ T8643] netlink: 32 bytes leftover after parsing attributes in process `syz.0.751'. [ 144.163169][ T8666] 8021q: adding VLAN 0 to HW filter on device bond0 [ 144.232700][ T8666] bond0: (slave rose0): Enslaving as an active interface with an up link [ 144.274946][ T8669] netlink: 36 bytes leftover after parsing attributes in process `syz.0.755'. [ 144.306624][ T8678] netlink: 8 bytes leftover after parsing attributes in process `syz.3.759'. [ 144.314710][ T8666] netlink: 'syz.0.755': attribute type 21 has an invalid length. [ 144.323353][ T8666] netlink: 'syz.0.755': attribute type 6 has an invalid length. [ 144.331003][ T8666] netlink: 132 bytes leftover after parsing attributes in process `syz.0.755'. [ 144.383041][ T8678] vlan1: entered allmulticast mode [ 144.404218][ T8678] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode [ 144.432195][ T8666] netlink: 8 bytes leftover after parsing attributes in process `syz.0.755'. [ 144.462692][ T8681] veth1_macvtap: left promiscuous mode [ 144.706458][ T8700] netlink: 'syz.0.763': attribute type 3 has an invalid length. [ 144.712961][ T8702] netlink: 36 bytes leftover after parsing attributes in process `syz.3.762'. [ 145.034323][ T8712] syzkaller0: entered promiscuous mode [ 145.039850][ T8712] syzkaller0: entered allmulticast mode [ 145.130068][ T8713] netlink: 84 bytes leftover after parsing attributes in process `syz.2.768'. [ 145.153864][ T8724] netlink: 8 bytes leftover after parsing attributes in process `syz.4.770'. [ 145.155757][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 145.407585][ T8733] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.774'. [ 145.471058][ T8736] netlink: 4 bytes leftover after parsing attributes in process `syz.0.773'. [ 146.229698][ T8791] sctp: [Deprecated]: syz.1.783 (pid 8791) Use of struct sctp_assoc_value in delayed_ack socket option. [ 146.229698][ T8791] Use struct sctp_sack_info instead [ 147.970280][ T8874] bond3: Unable to set peer notification delay as MII monitoring is disabled [ 148.025818][ T8874] bond3 (unregistering): Released all slaves [ 149.314009][ T8940] tipc: Enabled bearer , priority 10 [ 149.429518][ T8947] raw_sendmsg: syz.4.822 forgot to set AF_INET. Fix it! [ 149.729659][ T8964] __nla_validate_parse: 6 callbacks suppressed [ 149.729676][ T8964] netlink: 4 bytes leftover after parsing attributes in process `syz.3.826'. [ 149.823254][ T5980] IPVS: starting estimator thread 0... [ 149.950554][ T8973] IPVS: using max 32 ests per chain, 76800 per kthread [ 150.097783][ T8979] netlink: 596 bytes leftover after parsing attributes in process `syz.1.832'. [ 150.151868][ T8978] 8021q: VLANs not supported on ip_vti0 [ 150.174837][ T8987] netlink: 332 bytes leftover after parsing attributes in process `syz.4.833'. [ 150.512366][ T9004] netlink: 52 bytes leftover after parsing attributes in process `syz.3.839'. [ 150.563261][ T9004] netlink: 4 bytes leftover after parsing attributes in process `syz.3.839'. [ 150.638949][ T9004] netlink: 'syz.3.839': attribute type 4 has an invalid length. [ 150.805380][ T9025] netlink: 'syz.3.844': attribute type 11 has an invalid length. [ 150.874975][ T9027] netlink: 96 bytes leftover after parsing attributes in process `syz.2.845'. [ 151.154814][ T9045] netlink: 96 bytes leftover after parsing attributes in process `syz.1.851'. [ 151.452103][ T9057] netlink: 'syz.2.855': attribute type 2 has an invalid length. [ 151.622994][ T9066] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 151.630355][ T9066] IPv6: NLM_F_CREATE should be set when creating new route [ 151.637703][ T9066] IPv6: NLM_F_CREATE should be set when creating new route [ 151.698212][ T9066] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 151.770885][ T9079] netlink: 12 bytes leftover after parsing attributes in process `syz.1.861'. [ 151.852674][ T9079] xt_recent: hitcount (4294901760) is larger than allowed maximum (65535) [ 152.136351][ T9101] netlink: 8 bytes leftover after parsing attributes in process `syz.1.866'. [ 152.175515][ T9101] netlink: 24 bytes leftover after parsing attributes in process `syz.1.866'. [ 152.249056][ T9105] syzkaller1: entered promiscuous mode [ 152.261549][ T9105] syzkaller1: entered allmulticast mode [ 152.508994][ T8755] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.570719][ T9120] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 152.774283][ T9139] netlink: 'syz.3.879': attribute type 1 has an invalid length. [ 152.875496][ T9139] netlink: 'syz.3.879': attribute type 9 has an invalid length. [ 152.897003][ T9138] bond4: (slave bridge2): making interface the new active one [ 152.910285][ T9138] bond4: (slave bridge2): Enslaving as an active interface with an up link [ 153.006073][ T9151] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 153.088492][ T9154] sctp: [Deprecated]: syz.0.882 (pid 9154) Use of struct sctp_assoc_value in delayed_ack socket option. [ 153.088492][ T9154] Use struct sctp_sack_info instead [ 153.134058][ T9146] netlink: 'syz.2.881': attribute type 1 has an invalid length. [ 153.152291][ T9146] nbd: error processing sock list [ 153.168613][ T9146] block nbd0: shutting down sockets [ 153.852230][ T9167] 8021q: VLANs not supported on ip_vti0 [ 154.234242][ T9187] tipc: Started in network mode [ 154.239195][ T9187] tipc: Node identity e2f89979c6ee, cluster identity 4711 [ 154.292709][ T9187] tipc: Enabled bearer , priority 0 [ 154.324356][ T9192] syzkaller0: entered promiscuous mode [ 154.334170][ T9192] syzkaller0: entered allmulticast mode [ 154.337049][ T9197] netlink: 'syz.4.897': attribute type 1 has an invalid length. [ 154.340265][ T30] audit: type=1107 audit(1764088272.530:3): pid=9196 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='ً5%UA٠0ltݕ/ 6򊨊' [ 154.404032][ T9205] netlink: 'syz.0.896': attribute type 1 has an invalid length. [ 154.420055][ T9197] 8021q: adding VLAN 0 to HW filter on device bond6 [ 154.464585][ T9203] bond6: (slave veth9): Enslaving as an active interface with a down link [ 154.473544][ T9192] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 154.542705][ T9197] veth11: entered promiscuous mode [ 154.550437][ T9197] bond6: (slave veth11): Enslaving as an active interface with a down link [ 154.565280][ T9192] tipc: Resetting bearer [ 154.582017][ T9203] vlan0: entered allmulticast mode [ 154.589934][ T9203] bond6: entered allmulticast mode [ 154.596680][ T9203] bond6: (slave vlan0): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 154.716929][ T9186] tipc: Resetting bearer [ 154.746935][ T9186] tipc: Disabling bearer [ 155.670284][ T9275] SET target dimension over the limit! [ 156.039329][ T9299] Unsupported ieee802154 address type: 0 [ 156.046708][ T9298] __nla_validate_parse: 6 callbacks suppressed [ 156.046725][ T9298] netlink: 28 bytes leftover after parsing attributes in process `syz.3.922'. [ 156.243163][ T9314] netlink: 64138 bytes leftover after parsing attributes in process `syz.3.926'. [ 156.267748][ T9317] netlink: 220 bytes leftover after parsing attributes in process `syz.1.927'. [ 156.316281][ T9316] netlink: ct family unspecified [ 156.330570][ T9316] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 156.462071][ T9327] netlink: 'syz.0.930': attribute type 11 has an invalid length. [ 156.490391][ T9327] netlink: 224 bytes leftover after parsing attributes in process `syz.0.930'. [ 156.559493][ T9330] netlink: 4 bytes leftover after parsing attributes in process `syz.1.932'. [ 156.674160][ T9334] netlink: 'syz.3.934': attribute type 39 has an invalid length. [ 156.779202][ T9338] syzkaller0: entered promiscuous mode [ 156.789036][ T9338] syzkaller0: entered allmulticast mode [ 157.013253][ T9346] team0: Device geneve3 is up. Set it down before adding it as a team port [ 157.277554][ T9361] bridge: RTM_NEWNEIGH with unconfigured vlan 3 on bridge0 [ 157.416427][ T9361] bond5 (unregistering): Released all slaves [ 157.508499][ T9376] netlink: 8 bytes leftover after parsing attributes in process `syz.0.947'. [ 157.529118][ T9370] lo speed is unknown, defaulting to 1000 [ 157.830039][ T9396] 8021q: VLANs not supported on ip6tnl0 [ 157.976324][ T9404] netlink: 8 bytes leftover after parsing attributes in process `syz.3.955'. [ 158.185554][ T9411] IPVS: set_ctl: invalid protocol: 60 224.0.0.1:20000 [ 158.209551][ T9413] netlink: 24 bytes leftover after parsing attributes in process `syz.1.961'. [ 158.240262][ T9409] veth3: entered allmulticast mode [ 158.379519][ T9413] netlink: 4 bytes leftover after parsing attributes in process `syz.1.961'. [ 158.403898][ T9418] sock: sock_timestamping_bind_phc: sock not bind to device [ 158.677466][ T9439] netlink: 'syz.0.966': attribute type 3 has an invalid length. [ 158.985402][ T9450] netlink: 12 bytes leftover after parsing attributes in process `syz.0.970'. [ 159.102067][ T9449] bridge2: port 1(veth3) entered blocking state [ 159.108715][ T9449] bridge2: port 1(veth3) entered disabled state [ 159.117104][ T9449] veth3: entered allmulticast mode [ 159.124796][ T9449] veth3: entered promiscuous mode [ 159.177685][ T9462] ip6gre1: entered allmulticast mode [ 159.225370][ T9462] tap0: tun_chr_ioctl cmd 1074025678 [ 159.239587][ T9462] tap0: group set to 0 [ 159.249970][ T9462] netlink: 'syz.2.975': attribute type 5 has an invalid length. [ 159.693224][ T9500] pim6reg: entered allmulticast mode [ 159.781773][ T9508] pim6reg: left allmulticast mode [ 160.036773][ T9526] xt_socket: unknown flags 0xe4 [ 160.540451][ T9549] netlink: 'syz.2.997': attribute type 21 has an invalid length. [ 160.632194][ T9552] netlink: 'syz.4.998': attribute type 1 has an invalid length. [ 160.914009][ T9552] 8021q: adding VLAN 0 to HW filter on device bond7 [ 160.951910][ T9563] bridge_slave_1: left allmulticast mode [ 160.967924][ T9563] bridge_slave_1: left promiscuous mode [ 161.008543][ T9563] bridge0: port 2(bridge_slave_1) entered disabled state [ 161.035605][ T9563] bridge_slave_0: left allmulticast mode [ 161.056375][ T9563] bridge_slave_0: left promiscuous mode [ 161.074723][ T9572] openvswitch: netlink: Message has 8 unknown bytes. [ 161.081704][ T9563] bridge0: port 1(bridge_slave_0) entered disabled state [ 161.097114][ T9572] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 161.140248][ T9574] __nla_validate_parse: 10 callbacks suppressed [ 161.140267][ T9574] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1003'. [ 161.352126][ T9575] bond8: option lp_interval: invalid value (0) [ 161.358411][ T9575] bond8: option lp_interval: allowed values 1 - 2147483647 [ 161.396988][ T9575] bond8 (unregistering): Released all slaves [ 161.521392][ T9596] netlink: 'syz.3.1007': attribute type 1 has an invalid length. [ 162.247866][ T9638] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1020'. [ 162.353758][ T9654] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1020'. [ 162.580973][ T9666] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 162.756163][ T8759] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.767201][ T8759] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.803651][ T9660] syzkaller0: entered promiscuous mode [ 162.809274][ T9660] syzkaller0: entered allmulticast mode [ 162.856917][ T9670] netlink: 64985 bytes leftover after parsing attributes in process `syz.2.1026'. [ 162.869437][ T9671] netlink: 64985 bytes leftover after parsing attributes in process `syz.2.1026'. [ 162.906343][ T8759] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.978825][ T8759] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.042918][ T9672] lo speed is unknown, defaulting to 1000 [ 163.442580][ T9704] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1033'. [ 164.395109][ T9700] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1032'. [ 165.055369][ T9740] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 165.117579][ T9743] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1043'. [ 165.201681][ T9751] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1044'. [ 165.218198][ T9751] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1044'. [ 165.455344][ T9760] netlink: 'syz.4.1048': attribute type 17 has an invalid length. [ 165.470141][ T9760] gretap0: entered promiscuous mode [ 165.479578][ T9760] gretap0: left promiscuous mode [ 165.792042][ T9779] syzkaller1: entered promiscuous mode [ 165.824761][ T9779] syzkaller1: entered allmulticast mode [ 166.045821][ T9798] tipc: Enabled bearer , priority 0 [ 166.069380][ T9794] syzkaller0: entered promiscuous mode [ 166.075900][ T9794] syzkaller0: entered allmulticast mode [ 166.113526][ T9802] netlink: 'syz.4.1059': attribute type 24 has an invalid length. [ 166.115933][ T9794] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not security [ 166.206446][ T9794] bond0: mtu less than device minimum [ 166.232734][ T9792] tipc: Resetting bearer [ 166.269439][ T9792] tipc: Disabling bearer [ 166.297546][ T9813] __nla_validate_parse: 6 callbacks suppressed [ 166.297564][ T9813] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1059'. [ 166.441673][ T9825] Unsupported ieee802154 address type: 0 [ 166.517031][ T8568] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 166.790980][ T9853] netlink: 'syz.3.1069': attribute type 5 has an invalid length. [ 166.800392][ T9854] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1069'. [ 166.809639][ T9854] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1069'. [ 166.819214][ T9854] netlink: 31 bytes leftover after parsing attributes in process `syz.3.1069'. [ 166.828544][ T9854] netlink: 'syz.3.1069': attribute type 3 has an invalid length. [ 166.837169][ T9854] netlink: 'syz.3.1069': attribute type 2 has an invalid length. [ 166.846250][ T9854] netlink: 31 bytes leftover after parsing attributes in process `syz.3.1069'. [ 167.496061][ T9873] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 167.681610][ T9886] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 167.787273][ T9890] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 168.003970][ T9903] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1082'. [ 168.222225][ T9912] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1086'. [ 168.248051][ T9916] ipt_REJECT: TCP_RESET invalid for non-tcp [ 168.277333][ T9916] netlink: 'syz.2.1087': attribute type 12 has an invalid length. [ 168.285403][ T9916] netlink: 190972 bytes leftover after parsing attributes in process `syz.2.1087'. [ 168.594298][ T9934] netlink: 'syz.1.1094': attribute type 8 has an invalid length. [ 168.860940][ T9949] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 168.882030][ T9954] : renamed from veth1_vlan (while UP) [ 169.008884][ T9960] tipc: Enabled bearer , priority 0 [ 169.022260][ T9960] syzkaller0: entered promiscuous mode [ 169.028433][ T9960] syzkaller0: entered allmulticast mode [ 169.192202][ T9966] tipc: Resetting bearer [ 169.214714][ T9958] tipc: Resetting bearer [ 169.259024][ T9958] tipc: Disabling bearer [ 169.430197][ T9985] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1109'. [ 169.467885][ T9985] openvswitch: netlink: Missing key (keys=40, expected=80) [ 169.971025][T10017] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1118'. [ 170.234268][T10025] bridge1: port 1(veth0_to_bond) entered blocking state [ 170.257759][T10025] bridge1: port 1(veth0_to_bond) entered disabled state [ 170.271709][T10025] veth0_to_bond: entered allmulticast mode [ 170.279366][T10025] veth0_to_bond: entered promiscuous mode [ 170.389574][T10042] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 170.417599][T10042] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 194.416311][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 221.525284][T10058] can: request_module (can-proto-0) failed. [ 221.673501][T10069] netlink: 'syz.1.1133': attribute type 16 has an invalid length. [ 221.703002][T10069] __nla_validate_parse: 3 callbacks suppressed [ 221.703021][T10069] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1133'. [ 221.906036][T10093] netlink: 'syz.1.1140': attribute type 3 has an invalid length. [ 221.912009][T10088] netlink: 'syz.3.1138': attribute type 1 has an invalid length. [ 221.934698][T10088] nbd: error processing sock list [ 221.950483][T10088] block nbd0: shutting down sockets [ 222.228610][T10114] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1147'. [ 222.800165][T10146] openvswitch: netlink: Missing key (keys=40, expected=100) [ 222.866654][T10146] 8021q: adding VLAN 0 to HW filter on device bond5 [ 222.897665][T10145] vlan2: entered promiscuous mode [ 222.918054][T10145] vlan2: entered allmulticast mode [ 222.925511][T10145] hsr_slave_1: entered allmulticast mode [ 223.047387][T10163] netlink: 'syz.1.1160': attribute type 1 has an invalid length. [ 223.057278][T10163] !: renamed from bond_slave_0 (while UP) [ 223.149283][T10160] syzkaller0: entered promiscuous mode [ 223.155886][T10165] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1162'. [ 223.172351][T10160] syzkaller0: entered allmulticast mode [ 223.269619][T10174] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 223.417334][T10181] openvswitch: netlink: Port -1 exceeds max allowable 65535 [ 223.537384][T10186] netlink: 'syz.0.1170': attribute type 5 has an invalid length. [ 223.548425][T10194] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 223.571474][T10186] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.1170'. [ 223.589980][T10186] netlink: 'syz.0.1170': attribute type 5 has an invalid length. [ 223.602834][T10186] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.1170'. [ 223.617098][T10186] netlink: 'syz.0.1170': attribute type 5 has an invalid length. [ 223.626227][T10186] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.1170'. [ 223.636524][T10186] netlink: 'syz.0.1170': attribute type 5 has an invalid length. [ 223.644850][T10186] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.1170'. [ 223.655305][T10186] netlink: 'syz.0.1170': attribute type 5 has an invalid length. [ 223.665621][T10196] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1172'. [ 223.676945][T10186] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.1170'. [ 223.704282][T10186] netlink: 'syz.0.1170': attribute type 5 has an invalid length. [ 223.722301][T10196] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1172'. [ 224.115922][T10222] x_tables: duplicate entry at hook 3 [ 224.283799][T10229] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 224.330333][T10230] ipt_rpfilter: unknown options [ 224.378713][T10241] bond0: (slave caif0): Error: Device type is different from other slaves [ 225.254228][ T5939] IPVS: starting estimator thread 0... [ 225.294173][T10293] bond6: (slave gre0): Device is not bonding slave [ 225.336992][T10293] bond6: option active_slave: invalid value (gre0) [ 225.361432][T10297] IPVS: using max 26 ests per chain, 62400 per kthread [ 225.430048][T10293] bond6 (unregistering): Released all slaves [ 225.630777][ T5882] IPVS: starting estimator thread 0... [ 225.716174][T10328] lo speed is unknown, defaulting to 1000 [ 225.741765][T10323] IPVS: using max 34 ests per chain, 81600 per kthread [ 226.328119][T10358] tipc: Enabled bearer , priority 0 [ 226.339147][T10363] xt_ecn: cannot match TCP bits for non-tcp packets [ 226.379080][T10358] tipc: Disabling bearer [ 226.727263][T10380] __nla_validate_parse: 69 callbacks suppressed [ 226.727283][T10380] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1221'. [ 226.766011][T10385] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1222'. [ 226.895379][T10389] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1224'. [ 226.956081][T10397] trusted_key: syz.2.1227 sent an empty control message without MSG_MORE. [ 227.064174][T10389] 8021q: adding VLAN 0 to HW filter on device bond8 [ 227.127876][T10409] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1229'. [ 227.142875][T10409] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1229'. [ 227.217538][T10414] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1232'. [ 227.337859][T10420] syzkaller0: entered promiscuous mode [ 227.351096][T10420] syzkaller0: entered allmulticast mode [ 227.378538][T10426] validate_nla: 61 callbacks suppressed [ 227.378557][T10426] netlink: 'syz.0.1235': attribute type 10 has an invalid length. [ 227.425250][T10426] netlink: 228 bytes leftover after parsing attributes in process `syz.0.1235'. [ 227.573351][T10438] xt_TPROXY: Can be used only with -p tcp or -p udp [ 228.516782][T10485] netlink: 'syz.0.1248': attribute type 27 has an invalid length. [ 228.544498][T10485] netlink: 'syz.0.1248': attribute type 4 has an invalid length. [ 228.565141][T10485] netlink: 144 bytes leftover after parsing attributes in process `syz.0.1248'. [ 228.798736][T10499] xt_hashlimit: max too large, truncated to 1048576 [ 228.799918][T10495] netem: change failed [ 229.107313][T10520] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1256'. [ 229.406236][T10503] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 229.426313][T10503] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 229.709383][T10509] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.732272][T10533] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1259'. [ 229.742260][ T8760] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.772437][ T8760] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.811424][ T8760] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.993987][T10553] netlink: 'syz.3.1263': attribute type 1 has an invalid length. [ 230.019943][T10560] IPv6: Can't replace route, no match found [ 230.051242][T10560] netlink: 'syz.4.1265': attribute type 8 has an invalid length. [ 230.112156][T10565] sctp: [Deprecated]: syz.4.1265 (pid 10565) Use of int in max_burst socket option deprecated. [ 230.112156][T10565] Use struct sctp_assoc_value instead [ 230.236198][T10567] can: request_module (can-proto-0) failed. [ 230.345875][T10574] netlink: 'syz.4.1268': attribute type 1 has an invalid length. [ 231.294635][T10641] netlink: 'syz.4.1281': attribute type 11 has an invalid length. [ 231.577773][T10509] bond0: (slave netdevsim0): Releasing backup interface [ 231.601583][T10668] openvswitch: netlink: Key type 64 is out of range max 32 [ 231.864742][T10664] syzkaller0: entered promiscuous mode [ 231.870325][T10664] syzkaller0: entered allmulticast mode [ 231.977523][T10684] netlink: 'syz.3.1289': attribute type 39 has an invalid length. [ 232.205923][T10696] Bluetooth: MGMT ver 1.23 [ 233.549901][T10711] __nla_validate_parse: 4 callbacks suppressed [ 233.549920][T10711] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1295'. [ 233.630065][T10717] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 233.659398][T10718] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.1296'. [ 233.988562][T10724] bond6: option mode: invalid value (133) [ 234.016072][T10724] bond6 (unregistering): Released all slaves [ 234.065354][T10741] syzkaller1: entered promiscuous mode [ 234.076148][T10741] syzkaller1: entered allmulticast mode [ 234.158989][T10754] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1305'. [ 234.406921][T10759] tipc: Enabled bearer , priority 0 [ 234.415666][T10759] syzkaller0: entered promiscuous mode [ 234.427307][T10759] syzkaller0: entered allmulticast mode [ 234.442629][T10759] sch_tbf: burst 4 is lower than device syzkaller0 mtu (1514) ! [ 234.497284][T10775] netlink: 'syz.0.1312': attribute type 1 has an invalid length. [ 234.505508][T10775] netlink: 'syz.0.1312': attribute type 1 has an invalid length. [ 234.523153][T10759] netlink: 'syz.2.1307': attribute type 11 has an invalid length. [ 234.531199][T10773] netlink: 'syz.0.1312': attribute type 1 has an invalid length. [ 234.559386][T10773] netlink: 'syz.0.1312': attribute type 1 has an invalid length. [ 234.570928][T10758] tipc: Resetting bearer [ 234.663513][T10758] tipc: Disabling bearer [ 234.894487][T10795] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1317'. [ 234.919660][T10801] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1316'. [ 234.950969][T10799] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1316'. [ 235.105009][T10810] netlink: 'syz.0.1319': attribute type 28 has an invalid length. [ 235.136495][T10810] netlink: 'syz.0.1319': attribute type 3 has an invalid length. [ 235.155333][T10810] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1319'. [ 235.262308][T10810] syz.0.1319 (10810) used obsolete PPPIOCDETACH ioctl [ 235.340933][T10819] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1322'. [ 235.515323][T10827] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1327'. [ 235.552488][T10831] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1328'. [ 235.646552][T10837] bridge0: port 3(syz_tun) entered disabled state [ 235.687052][T10837] syz_tun (unregistering): left allmulticast mode [ 235.698649][T10837] syz_tun (unregistering): left promiscuous mode [ 235.707681][T10843] netlink: 'syz.3.1330': attribute type 1 has an invalid length. [ 235.726864][T10837] bridge0: port 3(syz_tun) entered disabled state [ 235.808700][T10847] team0: Device geneve3 is up. Set it down before adding it as a team port [ 235.856850][T10850] x_tables: duplicate underflow at hook 1 [ 235.905232][T10846] bond6: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 235.915731][ T8565] bond6: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 235.933676][T10848] 8021q: adding VLAN 0 to HW filter on device bond6 [ 235.944980][T10850] netlink: 'syz.0.1332': attribute type 7 has an invalid length. [ 235.964740][T10850] netlink: 'syz.0.1332': attribute type 8 has an invalid length. [ 235.998555][T10850] bond0: entered promiscuous mode [ 236.003846][T10850] bond_slave_0: entered promiscuous mode [ 236.009921][T10850] bond_slave_1: entered promiscuous mode [ 236.020435][T10850] bond0: left promiscuous mode [ 236.025502][T10850] bond_slave_0: left promiscuous mode [ 236.036817][T10850] bond_slave_1: left promiscuous mode [ 236.043637][ T8762] bond6: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 236.228349][T10865] netlink: 'syz.1.1338': attribute type 14 has an invalid length. [ 236.271875][T10867] openvswitch: netlink: nsh attribute has 996 unknown bytes. [ 236.304951][T10867] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 236.931798][T10912] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 237.248756][T10922] tipc: New replicast peer: 255.255.255.255 [ 237.260844][T10922] tipc: Enabled bearer , priority 10 [ 237.630363][T10930] 8021q: adding VLAN 0 to HW filter on device bond3 [ 237.699526][T10932] bond0: (slave geneve1): Enslaving as an active interface with an up link [ 237.820732][T10930] gretap1: entered promiscuous mode [ 237.919083][T10930] bond3: (slave gretap1): making interface the new active one [ 237.928301][T10930] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 237.995677][T10952] team0: Device veth1_macvtap failed to register rx_handler [ 238.421656][T10972] x_tables: duplicate underflow at hook 2 [ 238.549693][ T52] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 238.559936][ T52] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 238.572425][ T52] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 238.583337][ T52] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 238.591203][ T52] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 238.613811][ T5838] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 238.622379][ T5838] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 238.629978][ T5838] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 238.657399][ T5838] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 238.675725][ T5838] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 238.722825][T10985] Cannot find add_set index 4 as target [ 238.748412][T10987] __nla_validate_parse: 10 callbacks suppressed [ 238.748432][T10987] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1372'. [ 238.768381][ T13] bond6 (unregistering): (slave ip6gretap1): Removing an active aggregator [ 238.812291][ T13] bond6 (unregistering): (slave ip6gretap1): Releasing backup interface [ 239.027374][ T13] bond2 (unregistering): (slave gretap1): Releasing active interface [ 239.239625][ T13] bond4 (unregistering): (slave bridge2): Releasing active interface [ 239.383752][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 239.394395][ T13] bond_slave_0: left promiscuous mode [ 239.402607][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 239.412684][ T13] bond_slave_1: left promiscuous mode [ 239.418970][ T13] bond0 (unregistering): Released all slaves [ 239.439314][ T13] bond1 (unregistering): Released all slaves [ 239.462306][ T13] bond2 (unregistering): Released all slaves [ 239.590984][ T13] bond3 (unregistering): Released all slaves [ 239.610204][ T13] bond4 (unregistering): Released all slaves [ 239.731092][ T13] bond5 (unregistering): Released all slaves [ 239.839842][ T13] bond6 (unregistering): Released all slaves [ 240.006731][T10973] lo speed is unknown, defaulting to 1000 [ 240.041845][ T13] tipc: Left network mode [ 240.088941][T11017] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1377'. [ 240.119110][T11014] netlink: 220 bytes leftover after parsing attributes in process `syz.4.1378'. [ 240.164978][T11017] chnl_net:caif_netlink_parms(): no params data found [ 240.571244][ T13] hsr_slave_0: left promiscuous mode [ 240.587955][ T13] hsr_slave_1: left promiscuous mode [ 240.705878][ T13] pim6reg (unregistering): left allmulticast mode [ 240.734611][ T5838] Bluetooth: hci3: command tx timeout [ 241.318263][ T13] team0 (unregistering): Port device team_slave_1 removed [ 241.360704][ T13] team0 (unregistering): Port device team_slave_0 removed [ 241.667396][T11035] netlink: 6 bytes leftover after parsing attributes in process `syz.0.1381'. [ 241.679234][T11035] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 241.733882][T11056] syzkaller0: entered promiscuous mode [ 241.739466][T11056] syzkaller0: entered allmulticast mode [ 241.761158][T11072] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1387'. [ 242.044966][T11083] validate_nla: 5 callbacks suppressed [ 242.044984][T11083] netlink: 'syz.2.1388': attribute type 1 has an invalid length. [ 242.148288][T11092] netlink: 'syz.1.1389': attribute type 13 has an invalid length. [ 242.164114][T11086] netlink: 'syz.1.1389': attribute type 13 has an invalid length. [ 242.181462][T11092] netlink: 'syz.1.1389': attribute type 17 has an invalid length. [ 242.182342][T11098] pim6reg: entered allmulticast mode [ 242.272220][T11086] netlink: 'syz.1.1389': attribute type 17 has an invalid length. [ 242.317896][T11102] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1391'. [ 242.467910][T11092] 8021q: adding VLAN 0 to HW filter on device bond0 [ 242.479216][T11092] 8021q: adding VLAN 0 to HW filter on device team0 [ 242.505842][T11092] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 242.540367][T11112] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1392'. [ 242.554891][T11086] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 242.600927][T11116] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1392'. [ 242.648927][ T13] IPVS: stop unused estimator thread 0... [ 242.669129][T10973] chnl_net:caif_netlink_parms(): no params data found [ 242.827062][ T5838] Bluetooth: hci3: command tx timeout [ 243.145940][T11145] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1401'. [ 243.194504][T10973] bridge0: port 1(bridge_slave_0) entered blocking state [ 243.202665][T11145] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1401'. [ 243.212986][T10973] bridge0: port 1(bridge_slave_0) entered disabled state [ 243.222441][T10973] bridge_slave_0: entered allmulticast mode [ 243.231899][T10973] bridge_slave_0: entered promiscuous mode [ 243.233729][T11146] netlink: 'syz.0.1401': attribute type 16 has an invalid length. [ 243.280120][T10973] bridge0: port 2(bridge_slave_1) entered blocking state [ 243.291728][T10973] bridge0: port 2(bridge_slave_1) entered disabled state [ 243.298989][T10973] bridge_slave_1: entered allmulticast mode [ 243.307371][T10973] bridge_slave_1: entered promiscuous mode [ 243.307499][T11146] netlink: 'syz.0.1401': attribute type 3 has an invalid length. [ 243.494826][T10973] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 243.523959][T11163] syzkaller0: entered promiscuous mode [ 243.529474][T11163] syzkaller0: entered allmulticast mode [ 243.547326][T11169] sctp: [Deprecated]: syz.4.1405 (pid 11169) Use of struct sctp_assoc_value in delayed_ack socket option. [ 243.547326][T11169] Use struct sctp_sack_info instead [ 243.582082][T10973] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 243.603951][T11171] syzkaller0: entered promiscuous mode [ 243.609471][T11171] syzkaller0: entered allmulticast mode [ 243.876431][T11185] __nla_validate_parse: 2 callbacks suppressed [ 243.876453][T11185] netlink: 88 bytes leftover after parsing attributes in process `syz.0.1408'. [ 243.929206][T10973] team0: Port device team_slave_0 added [ 243.993422][T10973] team0: Port device team_slave_1 added [ 244.211847][T10973] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 244.221637][T10973] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 244.256325][T11202] netlink: 'syz.2.1413': attribute type 1 has an invalid length. [ 244.311365][T10973] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 244.364623][T10973] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 244.377974][T10973] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 244.452003][T10973] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 244.568134][T11223] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1418'. [ 244.573733][T11228] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1420'. [ 244.712847][T11228] bond4: option xmit_hash_policy: invalid value (64) [ 244.722457][T11228] bond4 (unregistering): Released all slaves [ 244.767573][T10973] hsr_slave_0: entered promiscuous mode [ 244.777582][T10973] hsr_slave_1: entered promiscuous mode [ 244.784406][T10973] debugfs: 'hsr0' already exists in 'hsr' [ 244.790273][T10973] Cannot create hsr debugfs directory [ 244.891733][ T5838] Bluetooth: hci3: command tx timeout [ 244.950554][T11232] lo: entered promiscuous mode [ 244.956568][T11232] netlink: 'syz.4.1421': attribute type 2 has an invalid length. [ 244.967628][T11232] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 245.143419][T11256] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1428'. [ 245.289021][T10973] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 245.318877][T10973] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 245.329939][T10973] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 245.348591][T10973] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 245.374979][T11268] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 245.509468][T10973] 8021q: adding VLAN 0 to HW filter on device bond0 [ 245.575708][T10973] 8021q: adding VLAN 0 to HW filter on device team0 [ 245.596463][ T79] bridge0: port 1(bridge_slave_0) entered blocking state [ 245.603798][ T79] bridge0: port 1(bridge_slave_0) entered forwarding state [ 245.645998][ T79] bridge0: port 2(bridge_slave_1) entered blocking state [ 245.653497][ T79] bridge0: port 2(bridge_slave_1) entered forwarding state [ 245.937623][T11290] netlink: 'syz.4.1435': attribute type 10 has an invalid length. [ 245.981512][T11290] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1435'. [ 246.105990][T11290] team0: Port device geneve0 added [ 246.168863][T11310] syzkaller0: entered promiscuous mode [ 246.194679][T11310] syzkaller0: entered allmulticast mode [ 246.268611][T10973] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 246.278127][T11315] netlink: 256 bytes leftover after parsing attributes in process `syz.4.1440'. [ 246.430655][T11319] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1441'. [ 246.501840][T11329] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 246.510943][T11322] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 246.841431][T11348] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1445'. [ 246.981480][ T5838] Bluetooth: hci3: command tx timeout [ 247.050591][T11361] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1449'. [ 247.127820][T11361] bridge_slave_1: left allmulticast mode [ 247.161549][T11361] bridge_slave_1: left promiscuous mode [ 247.185366][T11361] bridge0: port 2(bridge_slave_1) entered disabled state [ 247.196379][T11361] bridge_slave_0: left allmulticast mode [ 247.202370][T11361] bridge_slave_0: left promiscuous mode [ 247.208307][T11361] bridge0: port 1(bridge_slave_0) entered disabled state [ 247.255433][T11367] block nbd0: server does not support multiple connections per device. [ 247.272904][T11367] block nbd0: shutting down sockets [ 247.313156][T11376] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 247.370024][T10973] veth0_vlan: entered promiscuous mode [ 247.433944][T10973] veth1_vlan: entered promiscuous mode [ 247.471892][T11379] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1454'. [ 247.533654][T11383] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 247.576101][T10973] veth0_macvtap: entered promiscuous mode [ 247.593274][T10973] veth1_macvtap: entered promiscuous mode [ 247.628652][T10973] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 247.667271][T10973] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 247.695991][ T79] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.719806][ T79] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.751834][ T79] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.796162][ T79] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.949589][ T8760] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 247.976683][ T8760] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 248.077613][ T8760] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 248.128539][ T8760] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 248.238845][T11415] syzkaller1: entered promiscuous mode [ 248.284896][T11415] syzkaller1: entered allmulticast mode [ 248.318317][T11413] lo: Caught tx_queue_len zero misconfig [ 248.497779][T11429] tipc: Enabling of bearer rejected, failed to enable media [ 248.742811][T11438] xt_ecn: cannot match TCP bits for non-tcp packets [ 248.995034][T11448] __nla_validate_parse: 1 callbacks suppressed [ 248.995052][T11448] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1475'. [ 249.071580][ T30] audit: type=1804 audit(1764088367.260:4): pid=11448 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1475" name="/newroot/301/cgroup.controllers" dev="tmpfs" ino=1550 res=1 errno=0 [ 249.171369][ T30] audit: type=1800 audit(1764088367.260:5): pid=11448 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1475" name="cgroup.controllers" dev="tmpfs" ino=1550 res=0 errno=0 [ 249.328938][T11464] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1480'. [ 249.353695][T11468] netlink: 'syz.5.1482': attribute type 1 has an invalid length. [ 249.368246][T11468] netlink: 228 bytes leftover after parsing attributes in process `syz.5.1482'. [ 249.482139][T11470] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1483'. [ 249.509380][T11470] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1483'. [ 249.736890][T11498] netlink: 'syz.1.1490': attribute type 10 has an invalid length. [ 249.784567][T11498] bond0: (slave geneve1): Enslaving as an active interface with an up link [ 249.807090][ T79] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.828048][ T79] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.867543][ T79] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.909285][ T79] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.120925][T11526] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1496'. [ 250.617822][T11547] IPv6: sit1: Disabled Multicast RS [ 250.628131][T11555] netlink: 'syz.4.1503': attribute type 1 has an invalid length. [ 250.637521][T11547] sit1: entered allmulticast mode [ 250.649856][T11555] netlink: 212 bytes leftover after parsing attributes in process `syz.4.1503'. [ 250.666970][T11555] netlink: 5 bytes leftover after parsing attributes in process `syz.4.1503'. [ 250.679141][T11556] tipc: Started in network mode [ 250.686900][T11556] tipc: Node identity aaaaaaaaaa3, cluster identity 4711 [ 250.700870][T11556] tipc: Enabled bearer , priority 2 [ 250.728484][T11554] block nbd0: Unsupported socket: should be TCP or UNIX. [ 251.125339][T11578] xt_CT: No such helper "syz1" [ 251.220623][T11590] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1512'. [ 251.243947][T11590] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1512'. [ 251.428340][T11607] openvswitch: netlink: nsh attribute has 996 unknown bytes. [ 251.456140][T11607] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 251.465009][T11606] netlink: 'syz.4.1519': attribute type 1 has an invalid length. [ 251.465032][T11606] netlink: 'syz.4.1519': attribute type 4 has an invalid length. [ 251.821734][ T5882] tipc: Node number set to 10136234 [ 299.025551][T11690] xt_SECMARK: invalid mode: 9 [ 299.037249][T11693] 8021q: VLANs not supported on sit0 [ 299.210160][T11702] __nla_validate_parse: 2 callbacks suppressed [ 299.210177][T11702] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1534'. [ 299.214035][T11701] netlink: 'syz.4.1532': attribute type 1 has an invalid length. [ 299.256428][T11701] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1532'. [ 299.270100][T11704] syzkaller0: entered promiscuous mode [ 299.286023][T11704] syzkaller0: entered allmulticast mode [ 299.312296][T11710] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 299.335457][T11709] netlink: 'syz.2.1535': attribute type 5 has an invalid length. [ 299.594457][T11727] tipc: Bearer : already 2 bearers with priority 10 [ 299.603489][T11727] tipc: Bearer : trying with adjusted priority [ 299.620837][T11727] tipc: Enabling of bearer rejected, failed to enable media [ 299.662317][T11734] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1540'. [ 299.682002][T11727] tipc: Bearer : already 2 bearers with priority 10 [ 299.691136][T11727] tipc: Bearer : trying with adjusted priority [ 299.700458][T11727] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 299.709470][T11727] tipc: Enabled bearer , priority 9 [ 299.777995][T11734] bond10: Unable to set down delay as MII monitoring is disabled [ 299.808959][T11734] bond10 (unregistering): Released all slaves [ 299.831510][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 299.884054][T11748] syzkaller0: entered promiscuous mode [ 299.909983][T11748] syzkaller0: entered allmulticast mode [ 300.111430][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 300.418117][T11773] netlink: 164 bytes leftover after parsing attributes in process `syz.5.1552'. [ 300.444183][T11773] openvswitch: netlink: Flow key attr not present in new flow. [ 300.641469][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 300.663382][T11797] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1557'. [ 300.788675][T11805] netlink: 'syz.5.1560': attribute type 1 has an invalid length. [ 300.805767][T11805] netlink: 224 bytes leftover after parsing attributes in process `syz.5.1560'. [ 300.830121][T11810] netlink: 'syz.5.1560': attribute type 1 has an invalid length. [ 300.857057][T11810] netlink: 224 bytes leftover after parsing attributes in process `syz.5.1560'. [ 300.873809][T11806] bond10: option resend_igmp: invalid value (32767) [ 300.892577][T11806] bond10: option resend_igmp: allowed values 0 - 255 [ 300.933845][T11806] bond10 (unregistering): Released all slaves [ 301.266555][T11830] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1568'. [ 301.278020][T11830] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1568'. [ 301.294211][T11835] Unsupported ieee802154 address type: 0 [ 301.329160][T11830] bond10: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 301.334549][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807d860000: rx timeout, send abort [ 301.349733][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88807d860000: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 301.362410][T11830] bond10 (unregistering): Released all slaves [ 301.691311][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 301.705171][T11855] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1577'. [ 301.884287][T11867] openvswitch: netlink: Flow key attr not present in new flow. [ 301.956872][T11871] netlink: 'syz.1.1582': attribute type 1 has an invalid length. [ 302.138656][T11882] netlink: 'syz.4.1586': attribute type 25 has an invalid length. [ 302.170966][T11882] netlink: 'syz.4.1586': attribute type 7 has an invalid length. [ 302.314461][T11893] netlink: 'syz.5.1590': attribute type 1 has an invalid length. [ 302.322937][T11893] netlink: 'syz.5.1590': attribute type 3 has an invalid length. [ 302.514023][T11901] xt_hashlimit: size too large, truncated to 1048576 [ 302.556982][T11906] SET target dimension over the limit! [ 302.640143][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807d861800: rx timeout, send abort [ 302.648828][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88807d861800: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 302.731316][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 302.790396][T11917] 8021q: VLANs not supported on ipvlan1 [ 303.019986][T11927] vxcan0: entered allmulticast mode [ 303.207207][T11943] netlink: 'syz.1.1605': attribute type 2 has an invalid length. [ 303.295686][T11943] 9: entered promiscuous mode [ 303.395943][T11952] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 303.479798][ T30] audit: type=1800 audit(1764088421.670:6): pid=11959 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1608" name="memory.events" dev="tmpfs" ino=1723 res=0 errno=0 [ 303.506376][T11952] syzkaller0: entered promiscuous mode [ 303.512556][T11952] syzkaller0: entered allmulticast mode [ 303.520275][ T30] audit: type=1804 audit(1764088421.680:7): pid=11959 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.1608" name="/newroot/336/memory.events" dev="tmpfs" ino=1723 res=1 errno=0 [ 303.781416][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 304.815476][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 305.002961][T11966] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 305.027098][T11971] vlan2: entered allmulticast mode [ 305.041184][T11971] veth1: entered allmulticast mode [ 305.057239][T11968] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 305.103899][T11975] __nla_validate_parse: 9 callbacks suppressed [ 305.103919][T11975] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1614'. [ 305.335829][T11986] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1617'. [ 305.443920][T11993] vcan0: tx drop: invalid da for name 0x0000000000000002 [ 305.473753][T11993] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1618'. [ 305.500684][T11993] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1618'. [ 305.604054][T12001] netlink: 168 bytes leftover after parsing attributes in process `syz.1.1622'. [ 305.622460][T12001] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 305.833912][T12013] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1625'. [ 305.851406][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 305.889788][T12013] validate_nla: 2 callbacks suppressed [ 305.889806][T12013] netlink: 'syz.1.1625': attribute type 21 has an invalid length. [ 305.917482][T12013] netlink: 'syz.1.1625': attribute type 22 has an invalid length. [ 305.926920][T12013] netlink: 'syz.1.1625': attribute type 23 has an invalid length. [ 305.935673][T12013] netlink: 'syz.1.1625': attribute type 25 has an invalid length. [ 305.949256][T12017] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1625'. [ 305.958459][T12013] netlink: 'syz.1.1625': attribute type 26 has an invalid length. [ 305.967141][T12013] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1625'. [ 306.106820][T12022] bridge5: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 306.369344][T12019] netlink: 7983 bytes leftover after parsing attributes in process `syz.4.1627'. [ 306.791662][T12057] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1635'. [ 306.891439][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 307.052587][T12065] netlink: 'syz.5.1637': attribute type 3 has an invalid length. [ 307.192976][T12071] netlink: 'syz.4.1639': attribute type 1 has an invalid length. [ 307.596804][T12091] bond3: option xmit_hash_policy: invalid value (64) [ 307.597293][T12090] xt_l2tp: invalid flags combination: 8 [ 307.612751][T12091] bond3 (unregistering): Released all slaves [ 307.636057][T12094] team0: Caught tx_queue_len zero misconfig [ 307.931462][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 308.158273][T12127] x_tables: duplicate underflow at hook 1 [ 308.298217][T12137] netlink: 'syz.2.1662': attribute type 4 has an invalid length. [ 308.373232][T12136] netlink: 'syz.1.1661': attribute type 1 has an invalid length. [ 308.393590][T12136] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 308.971424][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 310.011333][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 310.400484][T12239] __nla_validate_parse: 16 callbacks suppressed [ 310.400504][T12239] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1687'. [ 310.458392][T12243] vlan1: entered promiscuous mode [ 310.475562][T12243] geneve1: entered promiscuous mode [ 310.485971][T12243] vlan1: entered allmulticast mode [ 310.491140][T12243] geneve1: entered allmulticast mode [ 310.629343][ T9] IPVS: starting estimator thread 0... [ 310.721354][T12258] IPVS: using max 32 ests per chain, 76800 per kthread [ 310.725596][T12260] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1692'. [ 310.807840][T12264] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1694'. [ 310.863575][T12264] netlink: 'syz.0.1694': attribute type 16 has an invalid length. [ 310.954533][T12264] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 311.051440][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 311.122973][T12287] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1697'. [ 311.154561][ T8760] tipc: Subscription rejected, illegal request [ 311.627645][T12279] nbd: device at index 5 is going down [ 311.951602][T12313] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1706'. [ 312.097150][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 312.428986][T12350] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1717'. [ 312.465560][T12350] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1717'. [ 312.494808][T12350] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1717'. [ 312.516827][T12350] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1717'. [ 312.547603][T12350] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1717'. [ 313.131417][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 313.560502][T12418] geneve2: entered promiscuous mode [ 313.655394][T12418] geneve2: entered allmulticast mode [ 314.171325][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 314.301096][T12468] team0: Device ip6gre1 is of different type [ 314.593155][T12483] 8021q: VLANs not supported on syzkaller1 [ 314.719763][T12492] validate_nla: 1 callbacks suppressed [ 314.719782][T12492] netlink: 'syz.4.1750': attribute type 1 has an invalid length. [ 315.212547][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 315.775551][T12538] lo speed is unknown, defaulting to 1000 [ 315.925726][T12560] netlink: zone id is out of range [ 315.930981][T12560] netlink: zone id is out of range [ 315.953732][T12560] netlink: zone id is out of range [ 315.962672][T12560] netlink: zone id is out of range [ 315.976645][T12560] netlink: zone id is out of range [ 316.015841][T12560] netlink: zone id is out of range [ 316.021001][T12560] netlink: zone id is out of range [ 316.036436][T12560] netlink: zone id is out of range [ 316.056722][T12560] netlink: zone id is out of range [ 316.228066][T12570] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.248156][T12574] xt_cgroup: invalid path, errno=-2 [ 316.260769][T12570] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 316.386756][T12580] bond1: option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 316.426432][T12580] bond1 (unregistering): Released all slaves [ 316.548347][T12570] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.568259][T12570] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 316.607791][T12572] syz.5.1767 (12572) used greatest stack depth: 17976 bytes left [ 316.615788][T12577] syz.5.1767 (12577) used greatest stack depth: 17832 bytes left [ 316.801912][T12570] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.848130][T12570] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 317.014583][T12615] __nla_validate_parse: 36 callbacks suppressed [ 317.014604][T12615] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1776'. [ 317.137591][T12570] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.175930][T12570] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 317.246643][T12622] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1777'. [ 317.256438][T12622] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1777'. [ 317.484569][T12640] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 317.496118][T12641] netlink: 'syz.1.1782': attribute type 1 has an invalid length. [ 317.550359][ T79] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.567169][ T79] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 256 - 0 [ 317.632610][T12641] 8021q: adding VLAN 0 to HW filter on device bond3 [ 317.722538][T12647] bond3: (slave veth5): Enslaving as an active interface with a down link [ 317.826598][T12654] veth7: entered promiscuous mode [ 317.843785][T12654] bond3: (slave veth7): Enslaving as an active interface with a down link [ 317.917892][T12641] vlan6: entered allmulticast mode [ 317.923543][T12662] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1785'. [ 317.949309][T12641] bond3: entered allmulticast mode [ 317.956523][T12641] bond3: (slave vlan6): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 318.071492][ T79] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.088082][ T79] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 256 - 0 [ 318.201548][ T13] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.209774][ T13] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 256 - 0 [ 318.280654][ T13] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.300526][ T13] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 256 - 0 [ 318.694519][T12706] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1796'. [ 318.852522][T12713] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1799'. [ 318.928547][T12720] Cannot find del_set index 4 as target [ 318.933479][T12713] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1799'. [ 318.934486][T12717] gre0: entered promiscuous mode [ 318.951938][T12717] gre0: entered allmulticast mode [ 318.976019][ T8568] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 318.994311][ T8568] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 319.029229][ T8568] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 319.065794][T12713] netlink: 384 bytes leftover after parsing attributes in process `syz.0.1799'. [ 319.080531][T12723] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 319.565219][T12756] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1809'. [ 319.805166][T12756] bridge0: port 2(bridge_slave_1) entered disabled state [ 319.858587][T12756] bridge_slave_1: left allmulticast mode [ 319.880644][T12756] bridge_slave_1: left promiscuous mode [ 319.907328][T12756] bridge0: port 2(bridge_slave_1) entered disabled state [ 320.075153][T12781] netlink: 25 bytes leftover after parsing attributes in process `syz.0.1815'. [ 320.299735][T12799] netlink: 'syz.5.1819': attribute type 83 has an invalid length. [ 320.411480][ C1] net_ratelimit: 27 callbacks suppressed [ 320.411498][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 320.568432][T12815] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 320.594979][T12815] IPVS: Unknown mcast interface: nicvf0 [ 321.143877][T12838] ipt_REJECT: TCP_RESET invalid for non-tcp [ 321.356867][T12858] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 321.364275][T12858] IPv6: NLM_F_CREATE should be set when creating new route [ 321.365926][T12855] 8021q: adding VLAN 0 to HW filter on device bond3 [ 321.451393][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 322.042262][T12903] __nla_validate_parse: 11 callbacks suppressed [ 322.042283][T12903] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1852'. [ 322.098046][T12901] netlink: zone id is out of range [ 322.104075][T12901] netlink: zone id is out of range [ 322.115572][T12901] netlink: zone id is out of range [ 322.134659][T12901] netlink: zone id is out of range [ 322.139819][T12901] netlink: zone id is out of range [ 322.178572][T12901] netlink: zone id is out of range [ 322.185458][T12901] netlink: zone id is out of range [ 322.197525][T12901] netlink: zone id is out of range [ 322.478980][T12912] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 322.648657][T12940] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1864'. [ 322.660374][T12940] bridge_slave_1: left allmulticast mode [ 322.666751][T12940] bridge_slave_1: left promiscuous mode [ 322.673082][T12940] bridge0: port 2(bridge_slave_1) entered disabled state [ 322.693440][T12940] bridge_slave_0: left allmulticast mode [ 322.709473][T12940] bridge_slave_0: left promiscuous mode [ 322.729645][T12940] bridge0: port 1(bridge_slave_0) entered disabled state [ 322.844934][T12952] IPVS: set_ctl: invalid protocol: 12 224.0.0.1:20001 [ 322.937188][T12957] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1869'. [ 323.100517][T12964] lo speed is unknown, defaulting to 1000 [ 323.113312][T12963] lo speed is unknown, defaulting to 1000 [ 323.325076][T12978] netlink: 'syz.4.1874': attribute type 2 has an invalid length. [ 323.575736][T12987] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1877'. [ 323.596778][T12987] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1877'. [ 323.607520][T12987] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1877'. [ 323.607638][T12984] bridge0: port 1(bridge_slave_0) entered blocking state [ 323.623699][T12984] bridge0: port 1(bridge_slave_0) entered forwarding state [ 323.786700][T12998] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1880'. [ 323.795994][T12997] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1880'. [ 323.811851][T12998] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1880'. [ 323.835933][T13000] netlink: 'syz.2.1883': attribute type 1 has an invalid length. [ 323.866787][T12997] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1880'. [ 323.899188][T13004] syz_tun: entered allmulticast mode [ 324.092284][T13003] syz_tun: left allmulticast mode [ 324.287869][T13035] netlink: 'syz.1.1888': attribute type 5 has an invalid length. [ 324.309664][T13035] netlink: 'syz.1.1888': attribute type 1 has an invalid length. [ 324.593553][T13055] lo: left promiscuous mode [ 324.626030][T13055] gre0: left promiscuous mode [ 324.630768][T13055] gre0: left allmulticast mode [ 325.024235][T13055] bridge0: port 1(bridge_slave_0) entered disabled state [ 325.597959][T13093] netlink: 'syz.4.1909': attribute type 33 has an invalid length. [ 325.611377][ C1] net_ratelimit: 7 callbacks suppressed [ 325.611396][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 325.724653][T13101] xt_CONNSECMARK: invalid mode: 0 [ 325.877890][T13112] IPVS: ip_vs_edit_dest(): server weight less than zero [ 326.571820][ T5838] Bluetooth: hci3: command tx timeout [ 326.636820][T13125] ip6gre1: entered allmulticast mode [ 326.651410][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 326.699295][T13144] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 326.721385][T13144] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.767729][T13144] netdevsim netdevsim2 eth3 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 326.798477][T13150] netlink: 'syz.1.1924': attribute type 27 has an invalid length. [ 326.952995][T13144] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 326.991554][T13144] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.019658][T13144] netdevsim netdevsim2 eth2 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 327.069442][T13170] __nla_validate_parse: 6 callbacks suppressed [ 327.069460][T13170] netlink: 104 bytes leftover after parsing attributes in process `syz.5.1929'. [ 327.164625][T13144] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 327.201387][T13144] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.229001][T13144] netdevsim netdevsim2 eth1 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 327.288339][T13144] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 327.314350][T13183] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1934'. [ 327.334468][T13144] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.357354][T13144] netdevsim netdevsim2 eth0 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 327.559304][ T8568] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 327.562658][T13195] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 327.577427][ T8568] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 19999 - 0 [ 327.588086][T13194] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 327.602806][T13196] netlink: 'syz.5.1936': attribute type 1 has an invalid length. [ 327.610962][T13193] netlink: 'syz.5.1936': attribute type 1 has an invalid length. [ 327.621924][ T8568] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 327.691308][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 327.715815][ T79] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 327.739043][ T79] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 19999 - 0 [ 327.773269][ T79] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 327.834378][ T79] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 327.845836][ T79] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 19999 - 0 [ 327.854924][ T79] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 327.936535][ T8760] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 327.959690][ T8760] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 19999 - 0 [ 328.005098][ T8760] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 328.105593][T13217] netlink: 'syz.4.1940': attribute type 13 has an invalid length. [ 328.134266][T13217] gretap0: refused to change device tx_queue_len [ 328.164397][T13217] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 328.203458][T13222] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1942'. [ 328.343915][T13229] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1944'. [ 328.713989][T13243] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1951'. [ 328.731362][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 328.735447][T13250] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 329.115904][T13268] xt_time: unknown flags 0xf4 [ 329.147881][T13268] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1957'. [ 329.160126][T13268] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1957'. [ 329.172228][T13268] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1957'. [ 329.184127][T13268] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1957'. [ 329.196443][T13268] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1957'. [ 329.206534][T13270] syzkaller0: entered promiscuous mode [ 329.212310][T13270] syzkaller0: entered allmulticast mode [ 329.228711][T13270] sch_tbf: burst 4 is lower than device syzkaller0 mtu (1514) ! [ 329.695639][T13289] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 329.702054][T13290] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 329.771414][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 330.019258][T13309] IPVS: set_ctl: invalid protocol: 58 172.20.20.170:20003 [ 330.672958][T13344] nbd0: detected capacity change from 0 to 127 [ 330.684202][T13348] tipc: Enabled bearer , priority 0 [ 330.707769][T13348] syzkaller0: entered promiscuous mode [ 330.727235][T13348] syzkaller0: entered allmulticast mode [ 330.760930][T13348] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 330.811298][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 330.851925][T13348] tipc: Resetting bearer [ 330.871807][T13347] tipc: Resetting bearer [ 330.963898][ T5838] block nbd0: Receive control failed (result -104) [ 330.964226][T13347] tipc: Disabling bearer [ 331.020760][T13367] IPVS: set_ctl: invalid protocol: 103 127.0.0.1:20002 [ 331.655243][T13403] syzkaller0: entered promiscuous mode [ 331.665864][T13403] syzkaller0: entered allmulticast mode [ 331.851434][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 332.076252][T13432] netlink: 'syz.5.1997': attribute type 1 has an invalid length. [ 332.220876][T13442] netlink: 'syz.0.2001': attribute type 32 has an invalid length. [ 332.231890][T13442] __nla_validate_parse: 5 callbacks suppressed [ 332.231906][T13442] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2001'. [ 332.276023][T13442] bond4: Setting coupled_control to off (0) [ 332.536775][ T8567] nci: nci_extract_activation_params_nfc_dep: unsupported activation_rf_tech_and_mode 0x6 [ 332.698724][T13468] netlink: 188 bytes leftover after parsing attributes in process `syz.1.2007'. [ 332.797092][T13471] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2008'. [ 332.827623][T13471] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2008'. [ 332.891452][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 332.899420][T13471] netlink: 'syz.5.2008': attribute type 14 has an invalid length. [ 332.915708][T13471] netlink: 'syz.5.2008': attribute type 13 has an invalid length. [ 332.964199][T13479] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2010'. [ 332.998985][T13479] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2010'. [ 333.051682][T13480] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2010'. [ 333.077499][T13480] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2010'. [ 333.272703][T13492] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2014'. [ 333.932022][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 334.017412][ T56] block nbd0: Connection timed out, retrying (0/1 alive) [ 334.026572][ T56] block nbd0: Connection timed out, retrying (0/1 alive) [ 334.035172][ T56] block nbd0: Connection timed out, retrying (0/1 alive) [ 334.042570][ T56] block nbd0: Connection timed out, retrying (0/1 alive) [ 334.050132][ T25] block nbd0: Dead connection, failed to find a fallback [ 334.059090][ T25] block nbd0: shutting down sockets [ 334.066024][ T25] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 334.076635][ T25] Buffer I/O error on dev nbd0, logical block 2, async page read [ 334.085355][ T25] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 334.096872][ T25] Buffer I/O error on dev nbd0, logical block 1, async page read [ 334.108736][ T25] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 334.118256][ T25] Buffer I/O error on dev nbd0, logical block 0, async page read [ 334.127052][ T25] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 334.136241][ T25] Buffer I/O error on dev nbd0, logical block 3, async page read [ 334.145748][T11696] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 334.164594][T11696] Buffer I/O error on dev nbd0, logical block 0, async page read [ 334.173450][T11696] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 334.183001][T11696] Buffer I/O error on dev nbd0, logical block 1, async page read [ 334.190924][T11696] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 334.200922][T11696] Buffer I/O error on dev nbd0, logical block 2, async page read [ 334.209213][T11696] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 334.219030][T11696] Buffer I/O error on dev nbd0, logical block 3, async page read [ 334.227301][T11696] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 334.236793][T11696] Buffer I/O error on dev nbd0, logical block 0, async page read [ 334.245106][T11696] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 334.254508][T11696] Buffer I/O error on dev nbd0, logical block 1, async page read [ 334.265587][T11696] ldm_validate_partition_table(): Disk read failed. [ 334.275003][T11696] Dev nbd0: unable to read RDB block 0 [ 334.289195][T11696] nbd0: unable to read partition table [ 334.328113][T11696] ldm_validate_partition_table(): Disk read failed. [ 334.352084][T11696] Dev nbd0: unable to read RDB block 0 [ 334.363882][T11696] nbd0: unable to read partition table [ 334.465747][T13535] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2028'. [ 334.498678][T13536] netlink: 'syz.1.2029': attribute type 4 has an invalid length. [ 334.843124][T13559] tipc: Enabling of bearer rejected, media not registered [ 334.862513][T13559] RDS: rds_bind could not find a transport for fc00::, load rds_tcp or rds_rdma? [ 334.971742][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 335.109322][T13573] syzkaller0: entered promiscuous mode [ 335.115084][T13573] syzkaller0: entered allmulticast mode [ 335.200810][T13573] netem: change failed [ 335.525785][T13595] vlan1: entered allmulticast mode [ 335.567336][T13595] veth0_vlan: entered allmulticast mode [ 335.618602][T13595] tipc: Enabling of bearer rejected, failed to enable media [ 336.013104][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 336.117152][T13633] openvswitch: netlink: EtherType 50a is less than min 600 [ 336.178311][T13637] TCP: TCP_TX_DELAY enabled [ 336.203832][T13625] can: request_module (can-proto-0) failed. [ 336.216155][T13643] netlink: 'syz.2.2057': attribute type 10 has an invalid length. [ 336.373078][T13649] netlink: 'syz.4.2063': attribute type 1 has an invalid length. [ 336.476975][T13649] 8021q: adding VLAN 0 to HW filter on device bond11 [ 337.052211][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 337.284591][T13706] __nla_validate_parse: 13 callbacks suppressed [ 337.284609][T13706] netlink: 59 bytes leftover after parsing attributes in process `syz.5.2079'. [ 337.396864][T13712] x_tables: duplicate underflow at hook 3 [ 337.653910][T13721] netlink: 164 bytes leftover after parsing attributes in process `syz.2.2083'. [ 337.704224][T13725] tipc: Enabled bearer , priority 2 [ 337.720933][T13725] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2083'. [ 337.755510][T13728] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2086'. [ 337.862477][T13734] netlink: 332 bytes leftover after parsing attributes in process `syz.2.2089'. [ 338.005296][T13746] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2092'. [ 338.017930][T13746] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2092'. [ 338.091432][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 338.177982][T13759] netlink: 'syz.1.2094': attribute type 3 has an invalid length. [ 338.195443][T13761] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2095'. [ 338.204772][T13762] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2095'. [ 338.221627][T13761] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2095'. [ 338.519892][T13771] bond2: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 338.540145][T13771] bond2 (unregistering): Released all slaves [ 338.701736][ T9] tipc: Node number set to 605460857 [ 338.823780][T13795] netlink: 'syz.1.2104': attribute type 10 has an invalid length. [ 338.964242][T13799] bond2: down delay (33554432) is not a multiple of miimon (640), value rounded to 33553920 ms [ 339.020488][T13799] bridge: RTM_NEWNEIGH with invalid ether address [ 339.037049][T13814] delete_channel: no stack [ 339.131311][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 339.284665][T13829] netlink: 'syz.1.2114': attribute type 10 has an invalid length. [ 339.310805][T13830] netlink: 'syz.0.2112': attribute type 1 has an invalid length. [ 339.319534][T13827] netlink: 'syz.0.2112': attribute type 1 has an invalid length. [ 339.388368][T13809] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 339.398263][T13809] bond_slave_0: left promiscuous mode [ 339.408306][T13809] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 339.423690][T13809] bond_slave_1: left promiscuous mode [ 339.433054][T13809] bond0 (unregistering): Released all slaves [ 339.463004][T13829] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 339.840098][T13839] tipc: Resetting bearer [ 339.938138][T13839] tipc: Disabling bearer [ 340.171318][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 340.199440][T13861] IPv6: NLM_F_CREATE should be specified when creating new route [ 340.524045][T13882] sctp: [Deprecated]: syz.0.2130 (pid 13882) Use of int in max_burst socket option. [ 340.524045][T13882] Use struct sctp_assoc_value instead [ 340.624849][T13886] tipc: Enabling of bearer rejected, failed to enable media [ 341.030669][T13908] netlink: 'syz.0.2137': attribute type 19 has an invalid length. [ 341.211356][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 341.237551][T13916] netlink: 'syz.1.2138': attribute type 4 has an invalid length. [ 341.424754][T13927] netlink: 'syz.2.2141': attribute type 1 has an invalid length. [ 341.443027][T13922] netlink: 'syz.2.2141': attribute type 1 has an invalid length. [ 341.445003][T13927] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 341.450820][T13922] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 341.717020][T13939] pimreg: entered allmulticast mode [ 342.121779][T13958] netlink: 'syz.0.2148': attribute type 1 has an invalid length. [ 342.207231][T13958] bond5: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 342.251442][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 342.343924][T13958] veth9: entered promiscuous mode [ 342.359847][T13958] bond5: (slave veth9): Enslaving as a backup interface with a down link [ 343.291453][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 343.375786][T14006] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 343.715679][T14024] validate_nla: 3 callbacks suppressed [ 343.715698][T14024] netlink: 'syz.1.2169': attribute type 12 has an invalid length. [ 344.331460][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 345.124991][T14024] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 345.129201][T14037] __nla_validate_parse: 12 callbacks suppressed [ 345.129225][T14037] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2172'. [ 345.219971][T14041] netlink: 'syz.4.2173': attribute type 6 has an invalid length. [ 345.304782][T14043] tipc: Enabled bearer , priority 0 [ 345.330684][T14043] syzkaller0: entered promiscuous mode [ 345.337069][T14043] syzkaller0: entered allmulticast mode [ 345.371419][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 345.374873][T14046] : entered promiscuous mode [ 345.416945][T14051] tipc: Resetting bearer [ 345.535384][T14042] tipc: Resetting bearer [ 345.583532][T14057] netlink: 596 bytes leftover after parsing attributes in process `syz.0.2177'. [ 345.612795][T14042] tipc: Disabling bearer [ 345.779130][T14070] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2184'. [ 345.795955][T14070] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2184'. [ 346.007544][T14087] netlink: 4112 bytes leftover after parsing attributes in process `syz.0.2188'. [ 346.162297][T14099] netlink: 'syz.2.2192': attribute type 1 has an invalid length. [ 346.273456][T14105] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2192'. [ 346.282391][T14099] 8021q: adding VLAN 0 to HW filter on device bond0 [ 346.328120][T14105] bond0: (slave veth7): Enslaving as an active interface with a down link [ 346.357648][T14099] vlan0: entered allmulticast mode [ 346.366629][T14099] veth1: entered allmulticast mode [ 346.376978][T14099] veth1: entered promiscuous mode [ 346.384034][T14099] veth1: left promiscuous mode [ 346.391543][T14099] bond0: (slave vlan0): making interface the new active one [ 346.405213][T14099] veth1: entered promiscuous mode [ 346.411355][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 346.411530][T14099] vlan0: entered promiscuous mode [ 346.424499][T14099] bond0: (slave vlan0): Enslaving as an active interface with an up link [ 346.444109][T14121] IPv6: sit2: Disabled Multicast RS [ 346.450643][T14121] sit2: entered allmulticast mode [ 346.464761][T14115] netlink: 'syz.1.2198': attribute type 10 has an invalid length. [ 346.480251][T14115] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2198'. [ 346.517258][T14115] team0: Port device geneve0 added [ 346.524178][T14128] batadv_slave_0: entered promiscuous mode [ 346.641083][T14134] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2200'. [ 347.308301][T14137] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2203'. [ 347.352612][T14127] batadv_slave_0: left promiscuous mode [ 347.451339][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 347.639703][T14166] x_tables: unsorted underflow at hook 1 [ 347.826376][T14143] sctp: [Deprecated]: syz.0.2202 (pid 14143) Use of struct sctp_assoc_value in delayed_ack socket option. [ 347.826376][T14143] Use struct sctp_sack_info instead [ 347.844360][T14141] sctp: [Deprecated]: syz.0.2202 (pid 14141) Use of struct sctp_assoc_value in delayed_ack socket option. [ 347.844360][T14141] Use struct sctp_sack_info instead [ 348.048077][T14187] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.136147][T14187] netdevsim netdevsim5 v: renamed from netdevsim0 [ 348.165962][T14189] xt_hashlimit: overflow, rate too high: 0 [ 348.230687][T14201] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 348.267452][T14201] syzkaller0: entered promiscuous mode [ 348.284247][T14201] syzkaller0: entered allmulticast mode [ 348.491469][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 348.746864][T14232] netlink: 'syz.2.2230': attribute type 83 has an invalid length. [ 348.798227][T14237] netlink: 'syz.2.2230': attribute type 83 has an invalid length. [ 348.829192][T14243] x_tables: unsorted entry at hook 3 [ 348.837849][T14246] netlink: 112 bytes leftover after parsing attributes in process `syz.1.2234'. [ 349.003662][T14256] xt_HMARK: spi-set and port-set can't be combined [ 349.227991][T14264] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 349.299158][T14268] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 349.531424][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 349.755110][T14288] sock: sock_timestamping_bind_phc: sock not bind to device [ 349.798566][T14293] netlink: 'syz.5.2245': attribute type 11 has an invalid length. [ 349.813610][T14291] : entered promiscuous mode [ 349.827521][T14288] syzkaller1: entered promiscuous mode [ 349.841387][T14288] syzkaller1: entered allmulticast mode [ 349.972143][T14301] IPVS: length: 140 != 8 [ 350.053403][T14307] veth11: entered promiscuous mode [ 350.232990][T14321] xt_nfacct: accounting object `\$9ZM#mU|^c\F9YⳈ' does not exist [ 350.258816][T14323] bond1: option mode: unable to set because the bond device is up [ 350.304898][T14323] bond_slave_0: entered promiscuous mode [ 350.310912][T14323] bond_slave_1: entered promiscuous mode [ 350.319091][T14323] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 350.330961][T14323] bond1: (slave macvlan4): Enslaving as a backup interface with an up link [ 350.353778][T14328] mac80211_hwsim hwsim10 : renamed from wlan1 (while UP) [ 350.571516][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 350.757622][T14351] syzkaller0: entered promiscuous mode [ 350.765115][T14351] syzkaller0: entered allmulticast mode [ 350.771132][T14353] __nla_validate_parse: 6 callbacks suppressed [ 350.771151][T14353] netlink: 92 bytes leftover after parsing attributes in process `syz.0.2263'. [ 350.789544][T14355] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 351.615140][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 352.220751][T14359] sch_fq: defrate 0 ignored. [ 352.333025][T14364] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2267'. [ 352.352103][T14364] netlink: 'syz.4.2267': attribute type 5 has an invalid length. [ 352.362085][T14364] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2267'. [ 352.580477][T14381] netlink: 'syz.4.2271': attribute type 3 has an invalid length. [ 352.604458][T14381] nbd: must specify a size in bytes for the device [ 352.632706][T14384] netlink: 'syz.0.2273': attribute type 14 has an invalid length. [ 352.650984][T14386] netlink: 80 bytes leftover after parsing attributes in process `syz.1.2274'. [ 352.660905][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 352.676511][T14386] netlink: 148 bytes leftover after parsing attributes in process `syz.1.2274'. [ 352.688910][T14386] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2274'. [ 352.698494][T14386] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2274'. [ 353.031089][T14416] batadv1: entered allmulticast mode [ 353.044398][T14417] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2282'. [ 353.218816][T14425] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2284'. [ 353.469653][T14442] lo speed is unknown, defaulting to 1000 [ 353.475842][T14446] openvswitch: netlink: Flow actions attr not present in new flow. [ 353.476116][T14446] openvswitch: netlink: Flow actions attr not present in new flow. [ 353.525081][T14453] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2292'. [ 353.558311][T14453] chnl_net:caif_netlink_parms(): no params data found [ 353.691575][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 353.729027][T14466] netlink: 'syz.1.2296': attribute type 3 has an invalid length. [ 353.751065][T14467] netlink: zone id is out of range [ 353.763216][T14467] netlink: zone id is out of range [ 353.769749][T14467] netlink: set zone limit has 8 unknown bytes [ 354.028765][T14486] dvmrp0: entered allmulticast mode [ 354.479822][T14519] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 354.529937][T14523] vlan1: entered allmulticast mode [ 354.543285][T14523] gretap0: entered allmulticast mode [ 354.584695][T14523] bridge_slave_0: entered promiscuous mode [ 354.731512][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 355.004214][T14548] xt_l2tp: v2 doesn't support IP mode [ 355.365613][T14570] netlink: 'syz.2.2326': attribute type 1 has an invalid length. [ 355.500937][T14579] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 355.540232][T14581] block nbd1: Unsupported socket: should be TCP or UNIX. [ 355.545520][T14578] x_tables: duplicate underflow at hook 1 [ 356.231016][T14619] __nla_validate_parse: 15 callbacks suppressed [ 356.231035][T14619] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2339'. [ 356.348509][T14619] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2339'. [ 356.380470][T14619] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2339'. [ 356.390828][T14619] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2339'. [ 356.419805][T14619] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2339'. [ 356.441959][T14619] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2339'. [ 356.464271][T14625] netlink: 7 bytes leftover after parsing attributes in process `syz.2.2343'. [ 356.492155][T14619] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2339'. [ 356.532791][T14619] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2339'. [ 356.559117][T14619] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2339'. [ 356.811437][ C1] net_ratelimit: 1 callbacks suppressed [ 356.811458][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 357.512866][ T8777] vlan0: left promiscuous mode [ 357.851661][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 357.977326][T14707] 8021q: adding VLAN 0 to HW filter on device team0 [ 358.012666][T14707] team0: Cannot enslave team device to itself [ 358.122891][T14712] tipc: Enabled bearer , priority 0 [ 358.265042][T14712] syzkaller0: entered promiscuous mode [ 358.288169][T14712] syzkaller0: entered allmulticast mode [ 358.325918][T14730] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 358.423796][T14712] tipc: Resetting bearer [ 358.523428][T14709] tipc: Resetting bearer [ 358.550702][T14709] tipc: Disabling bearer [ 358.574522][T14746] bond_slave_0: left promiscuous mode [ 358.580232][T14746] bond_slave_1: left promiscuous mode [ 358.788825][T14746] bond1: (slave macvlan4): Removing an active aggregator [ 358.798509][T14746] bond1: (slave macvlan4): Releasing backup interface [ 358.816249][T14746] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 358.837393][T14746] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 358.850338][T14746] bond0 (unregistering): Released all slaves [ 358.891558][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 359.020065][T14764] tipc: Enabled bearer , priority 0 [ 359.039238][T14764] syzkaller0: entered promiscuous mode [ 359.061951][T14764] syzkaller0: entered allmulticast mode [ 359.234039][T14764] tipc: Resetting bearer [ 359.255857][T14763] tipc: Resetting bearer [ 359.319210][T14763] tipc: Disabling bearer [ 359.345787][T14788] netlink: 'syz.2.2383': attribute type 29 has an invalid length. [ 359.360591][T14788] netlink: 'syz.2.2383': attribute type 29 has an invalid length. [ 359.389283][T14788] netlink: 'syz.2.2383': attribute type 29 has an invalid length. [ 359.422009][T14788] netlink: 'syz.2.2383': attribute type 29 has an invalid length. [ 359.622052][T14813] bond0: option arp_interval: mode dependency failed, not supported in mode balance-alb(6) [ 359.846298][T14834] netlink: 'syz.5.2398': attribute type 10 has an invalid length. [ 359.931495][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 359.962330][T14842] syzkaller0: entered promiscuous mode [ 359.968268][T14842] syzkaller0: entered allmulticast mode [ 359.995992][T14842] tipc: Enabled bearer , priority 0 [ 360.009794][T14842] tipc: Resetting bearer [ 360.028728][T14841] tipc: Resetting bearer [ 360.056981][T14841] tipc: Disabling bearer [ 360.213758][T14854] xt_ecn: cannot match TCP bits for non-tcp packets [ 360.765743][T14885] syzkaller0: entered promiscuous mode [ 360.775153][T14885] syzkaller0: entered allmulticast mode [ 360.971555][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 361.199513][T14900] tipc: Enabled bearer , priority 0 [ 361.207929][T14900] syzkaller0: entered promiscuous mode [ 361.220147][T14900] syzkaller0: entered allmulticast mode [ 361.281135][T14900] tipc: Resetting bearer [ 361.293297][T14899] tipc: Resetting bearer [ 361.324522][T14919] __nla_validate_parse: 44 callbacks suppressed [ 361.324540][T14919] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2426'. [ 361.345659][T14899] tipc: Disabling bearer [ 361.397912][T14921] netlink: 408 bytes leftover after parsing attributes in process `syz.2.2428'. [ 361.536775][T14931] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 361.603847][T14938] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2434'. [ 361.783396][T14945] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2436'. [ 361.838665][T14955] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2436'. [ 361.873116][T14956] syzkaller0: entered promiscuous mode [ 361.900413][T14956] syzkaller0: entered allmulticast mode [ 362.011513][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 362.182754][T14973] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2442'. [ 362.231995][T14973] netlink: 56 bytes leftover after parsing attributes in process `syz.5.2442'. [ 362.259204][T14973] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2442'. [ 362.309236][T14968] lo speed is unknown, defaulting to 1000 [ 362.586848][T14994] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 362.603814][T14994] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 362.614230][T14994] netlink: 108 bytes leftover after parsing attributes in process `syz.0.2448'. [ 362.743163][T15007] Cannot find set identified by id 1 to match [ 362.774419][T15007] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2451'. [ 362.775485][T15010] netlink: 'syz.5.2453': attribute type 11 has an invalid length. [ 362.816298][T15011] Cannot find set identified by id 1 to match [ 362.845244][T15016] bridge4: entered promiscuous mode [ 362.850503][T15016] bridge4: entered allmulticast mode [ 363.051595][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 363.578671][T15058] syzkaller0: entered promiscuous mode [ 363.611558][T15058] syzkaller0: entered allmulticast mode [ 363.627854][T15059] openvswitch: netlink: Unknown key attributes 2 [ 363.679646][T15070] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 363.832308][T15083] netlink: 'syz.0.2475': attribute type 12 has an invalid length. [ 363.840424][T15083] netlink: 'syz.0.2475': attribute type 29 has an invalid length. [ 363.848847][T15083] netlink: 'syz.0.2475': attribute type 2 has an invalid length. [ 363.857839][T15085] netlink: 'syz.0.2475': attribute type 12 has an invalid length. [ 363.866636][T15085] netlink: 'syz.0.2475': attribute type 29 has an invalid length. [ 363.875351][T15085] netlink: 'syz.0.2475': attribute type 2 has an invalid length. [ 364.091527][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 364.919753][T15128] lo: entered allmulticast mode [ 364.946230][T15128] lo: left allmulticast mode [ 365.132470][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 365.567271][T15177] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 365.589806][T15183] netlink: 'syz.2.2498': attribute type 2 has an invalid length. [ 365.606317][T15183] netlink: 'syz.2.2498': attribute type 8 has an invalid length. [ 366.171435][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 366.270124][T15230] nbd: must specify a size in bytes for the device [ 366.480879][T15245] xt_TPROXY: Can be used only with -p tcp or -p udp [ 366.522391][T15248] IPVS: set_ctl: invalid protocol: 60 255.255.255.255:20001 [ 366.525167][T15245] __nla_validate_parse: 20 callbacks suppressed [ 366.525185][T15245] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2519'. [ 366.530430][T15248] IPVS: set_ctl: invalid protocol: 12 172.20.20.59:20002 [ 366.576549][T15245] netlink: 'syz.1.2519': attribute type 5 has an invalid length. [ 366.884037][T15278] openvswitch: netlink: Flow key attr not present in new flow. [ 366.900095][T15280] openvswitch: netlink: Port -1 exceeds max allowable 65535 [ 366.943634][T15277] vet0_virt_wifi: renamed from lo (while UP) [ 367.035562][T15289] Bluetooth: MGMT ver 1.23 [ 367.095117][T15295] netlink: 'syz.0.2530': attribute type 12 has an invalid length. [ 367.221518][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 367.590087][T15316] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2537'. [ 367.885778][T15339] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2543'. [ 367.915761][T15341] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2543'. [ 368.078868][T15347] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2547'. [ 368.251397][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 368.523867][T15377] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2557'. [ 368.626958][T15391] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2561'. [ 368.943655][T15413] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2569'. [ 369.291401][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 369.346923][T15440] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2579'. [ 369.357212][T15439] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2579'. [ 369.412641][T15446] netlink: 'syz.2.2581': attribute type 8 has an invalid length. [ 369.904223][T15473] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 369.917931][T15473] netlink: 'syz.1.2589': attribute type 1 has an invalid length. [ 370.030465][T15483] bond5: (slave bridge5): making interface the new active one [ 370.084130][T15483] bond5: (slave bridge5): Enslaving as an active interface with an up link [ 370.178808][T15496] netlink: 'syz.2.2594': attribute type 10 has an invalid length. [ 370.331553][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 370.680868][T15519] [ 370.683236][T15519] ====================================================== [ 370.690254][T15519] WARNING: possible circular locking dependency detected [ 370.697374][T15519] syzkaller #0 Not tainted [ 370.701796][T15519] ------------------------------------------------------ [ 370.708815][T15519] syz.1.2603/15519 is trying to acquire lock: [ 370.714976][T15519] ffffffff8f426ab8 (nr_node_list_lock){+...}-{3:3}, at: nr_rt_device_down+0xa9/0x720 [ 370.724582][T15519] [ 370.724582][T15519] but task is already holding lock: [ 370.731958][T15519] ffffffff8f426a58 (nr_neigh_list_lock){+...}-{3:3}, at: nr_rt_device_down+0x28/0x720 [ 370.741562][T15519] [ 370.741562][T15519] which lock already depends on the new lock. [ 370.741562][T15519] [ 370.752081][T15519] [ 370.752081][T15519] the existing dependency chain (in reverse order) is: [ 370.761131][T15519] [ 370.761131][T15519] -> #2 (nr_neigh_list_lock){+...}-{3:3}: [ 370.769065][T15519] lock_acquire+0x120/0x360 [ 370.774198][T15519] _raw_spin_lock_bh+0x36/0x50 [ 370.779545][T15519] nr_rt_ioctl+0x390/0xd50 [ 370.784593][T15519] sock_do_ioctl+0xdc/0x300 [ 370.789754][T15519] sock_ioctl+0x576/0x790 [ 370.794648][T15519] __se_sys_ioctl+0xfc/0x170 [ 370.798147][T15522] netlink: 'syz.2.2604': attribute type 1 has an invalid length. [ 370.799782][T15519] do_syscall_64+0xfa/0xfa0 [ 370.809886][T15522] netlink: 'syz.2.2604': attribute type 1 has an invalid length. [ 370.812607][T15519] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 370.812651][T15519] [ 370.812651][T15519] -> #1 (&nr_node->node_lock){+...}-{3:3}: [ 370.812687][T15519] lock_acquire+0x120/0x360 [ 370.812706][T15519] _raw_spin_lock_bh+0x36/0x50 [ 370.812729][T15519] nr_rt_ioctl+0x193/0xd50 [ 370.812756][T15519] sock_do_ioctl+0xdc/0x300 [ 370.812783][T15519] sock_ioctl+0x576/0x790 [ 370.812805][T15519] __se_sys_ioctl+0xfc/0x170 [ 370.812831][T15519] do_syscall_64+0xfa/0xfa0 [ 370.870278][T15519] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 370.876816][T15519] [ 370.876816][T15519] -> #0 (nr_node_list_lock){+...}-{3:3}: [ 370.884665][T15519] validate_chain+0xb9b/0x2140 [ 370.890224][T15519] __lock_acquire+0xab9/0xd20 [ 370.895420][T15519] lock_acquire+0x120/0x360 [ 370.900488][T15519] _raw_spin_lock_bh+0x36/0x50 [ 370.905776][T15519] nr_rt_device_down+0xa9/0x720 [ 370.911144][T15519] nr_device_event+0x137/0x150 [ 370.916479][T15519] notifier_call_chain+0x1b6/0x3e0 [ 370.922117][T15519] __dev_notify_flags+0x18d/0x2e0 [ 370.927784][T15519] netif_change_flags+0xe8/0x1a0 [ 370.933265][T15519] dev_change_flags+0x130/0x260 [ 370.938658][T15519] dev_ioctl+0x7b4/0x1150 [ 370.943557][T15519] sock_do_ioctl+0x22c/0x300 [ 370.948832][T15519] sock_ioctl+0x576/0x790 [ 370.953710][T15519] __se_sys_ioctl+0xfc/0x170 [ 370.958845][T15519] do_syscall_64+0xfa/0xfa0 [ 370.963993][T15519] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 370.970516][T15519] [ 370.970516][T15519] other info that might help us debug this: [ 370.970516][T15519] [ 370.980928][T15519] Chain exists of: [ 370.980928][T15519] nr_node_list_lock --> &nr_node->node_lock --> nr_neigh_list_lock [ 370.980928][T15519] [ 370.995172][T15519] Possible unsafe locking scenario: [ 370.995172][T15519] [ 371.003322][T15519] CPU0 CPU1 [ 371.008768][T15519] ---- ---- [ 371.014117][T15519] lock(nr_neigh_list_lock); [ 371.018800][T15519] lock(&nr_node->node_lock); [ 371.026069][T15519] lock(nr_neigh_list_lock); [ 371.033264][T15519] lock(nr_node_list_lock); [ 371.037865][T15519] [ 371.037865][T15519] *** DEADLOCK *** [ 371.037865][T15519] [ 371.045994][T15519] 2 locks held by syz.1.2603/15519: [ 371.051270][T15519] #0: ffffffff8f2cbd88 (rtnl_mutex){+.+.}-{4:4}, at: dev_ioctl+0x7a4/0x1150 [ 371.060095][T15519] #1: ffffffff8f426a58 (nr_neigh_list_lock){+...}-{3:3}, at: nr_rt_device_down+0x28/0x720 [ 371.070100][T15519] [ 371.070100][T15519] stack backtrace: [ 371.076092][T15519] CPU: 1 UID: 0 PID: 15519 Comm: syz.1.2603 Not tainted syzkaller #0 PREEMPT(full) [ 371.076123][T15519] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 371.076143][T15519] Call Trace: [ 371.076151][T15519] [ 371.076159][T15519] dump_stack_lvl+0x189/0x250 [ 371.076193][T15519] ? __pfx_dump_stack_lvl+0x10/0x10 [ 371.076219][T15519] ? __pfx__printk+0x10/0x10 [ 371.076240][T15519] ? print_lock_name+0xde/0x100 [ 371.076261][T15519] print_circular_bug+0x2ee/0x310 [ 371.076284][T15519] check_noncircular+0x134/0x160 [ 371.076317][T15519] validate_chain+0xb9b/0x2140 [ 371.076341][T15519] ? rt6_disable_ip+0x6b3/0x720 [ 371.076372][T15519] ? __lock_acquire+0xab9/0xd20 [ 371.076392][T15519] __lock_acquire+0xab9/0xd20 [ 371.076414][T15519] ? nr_rt_device_down+0xa9/0x720 [ 371.076437][T15519] lock_acquire+0x120/0x360 [ 371.076455][T15519] ? nr_rt_device_down+0xa9/0x720 [ 371.076484][T15519] ? nr_rt_device_down+0xa9/0x720 [ 371.076507][T15519] _raw_spin_lock_bh+0x36/0x50 [ 371.076533][T15519] ? nr_rt_device_down+0xa9/0x720 [ 371.076554][T15519] nr_rt_device_down+0xa9/0x720 [ 371.076578][T15519] ? do_raw_spin_unlock+0x122/0x240 [ 371.076608][T15519] nr_device_event+0x137/0x150 [ 371.076631][T15519] notifier_call_chain+0x1b6/0x3e0 [ 371.076658][T15519] __dev_notify_flags+0x18d/0x2e0 [ 371.076697][T15519] ? __pfx___dev_notify_flags+0x10/0x10 [ 371.076716][T15519] ? __dev_change_flags+0x4cc/0x6d0 [ 371.076739][T15519] ? __pfx___dev_change_flags+0x10/0x10 [ 371.076759][T15519] ? full_name_hash+0x92/0xe0 [ 371.076784][T15519] netif_change_flags+0xe8/0x1a0 [ 371.076807][T15519] dev_change_flags+0x130/0x260 [ 371.076829][T15519] dev_ioctl+0x7b4/0x1150 [ 371.076879][T15519] sock_do_ioctl+0x22c/0x300 [ 371.076906][T15519] ? __pfx_sock_do_ioctl+0x10/0x10 [ 371.076940][T15519] sock_ioctl+0x576/0x790 [ 371.076966][T15519] ? __pfx_sock_ioctl+0x10/0x10 [ 371.076991][T15519] ? __fget_files+0x3a0/0x420 [ 371.077010][T15519] ? __fget_files+0x2a/0x420 [ 371.077030][T15519] ? bpf_lsm_file_ioctl+0x9/0x20 [ 371.077053][T15519] ? __pfx_sock_ioctl+0x10/0x10 [ 371.077077][T15519] __se_sys_ioctl+0xfc/0x170 [ 371.077103][T15519] do_syscall_64+0xfa/0xfa0 [ 371.077131][T15519] ? lockdep_hardirqs_on+0x9c/0x150 [ 371.077159][T15519] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 371.077179][T15519] ? clear_bhb_loop+0x60/0xb0 [ 371.077201][T15519] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 371.077221][T15519] RIP: 0033:0x7fee4138f749 [ 371.077248][T15519] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 371.077267][T15519] RSP: 002b:00007fee42218038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 371.077289][T15519] RAX: ffffffffffffffda RBX: 00007fee415e5fa0 RCX: 00007fee4138f749 [ 371.077311][T15519] RDX: 0000200000000000 RSI: 0000000000008914 RDI: 0000000000000004 [ 371.077325][T15519] RBP: 00007fee41413f91 R08: 0000000000000000 R09: 0000000000000000 [ 371.077338][T15519] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 371.077350][T15519] R13: 00007fee415e6038 R14: 00007fee415e5fa0 R15: 00007fff9aa24c18 [ 371.077375][T15519] [ 371.388872][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 372.411525][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 373.461569][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 374.501423][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 375.541752][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 376.571412][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 377.611638][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 378.651383][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 379.691684][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available