last executing test programs: 6m54.352932059s ago: executing program 2 (id=2106): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f00000010c0)=0x5, 0x4) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x2, 0x3, 0x0, 0x3, 0x12, 0x0, 0x70bd2c, 0x25dfdbfc, [@sadb_key={0x3, 0x9, 0x80, 0x0, "1cdc0dca1d9f68846960e56de42944af"}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback, 0x2}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x7, 0xc}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback, 0x7}}, @sadb_x_nat_t_type={0x1, 0x14, 0x6}]}, 0x90}, 0x1, 0x7}, 0x0) (async) sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x2, 0x3, 0x0, 0x3, 0x12, 0x0, 0x70bd2c, 0x25dfdbfc, [@sadb_key={0x3, 0x9, 0x80, 0x0, "1cdc0dca1d9f68846960e56de42944af"}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback, 0x2}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x7, 0xc}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback, 0x7}}, @sadb_x_nat_t_type={0x1, 0x14, 0x6}]}, 0x90}, 0x1, 0x7}, 0x0) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f00000002c0)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x1, 0x5}, 0x1c) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r2, 0x0) r3 = syz_init_net_socket$x25(0x3, 0x5, 0x3) ioctl$SIOCX25SFACILITIES(r3, 0x89e3, 0x0) (async) ioctl$SIOCX25SFACILITIES(r3, 0x89e3, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller0\x00', 0x2000}) (async) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller0\x00', 0x2000}) r5 = socket(0x1e, 0x1, 0x0) socket$kcm(0x29, 0x2, 0x0) (async) r6 = socket$kcm(0x29, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) (async) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) r8 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r8, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) ioctl$sock_kcm_SIOCKCMATTACH(r6, 0x89e0, &(0x7f0000000040)={r8, r7}) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, &(0x7f0000000180)={r6}) connect$tipc(r5, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), r5) (async) syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), r5) getsockopt$sock_buf(r5, 0x1, 0x1c, &(0x7f00000000c0)=""/126, &(0x7f0000000040)=0x7e) (async) getsockopt$sock_buf(r5, 0x1, 0x1c, &(0x7f00000000c0)=""/126, &(0x7f0000000040)=0x7e) socket(0x10, 0x803, 0x6) (async) r9 = socket(0x10, 0x803, 0x6) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r9) (async) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r9) r10 = socket$netlink(0x10, 0x3, 0x0) r11 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r11) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r11) getsockname$packet(r11, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r12, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r12, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) 6m54.102026885s ago: executing program 2 (id=2111): r0 = socket(0x40000000015, 0x5, 0x0) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000100)={0x3, [0x0, 0x0, 0x0]}, &(0x7f0000000180)=0x10) r3 = socket$l2tp6(0xa, 0x2, 0x73) close(0x3) socket(0x2000000000000021, 0x2, 0x10000000000002) recvmmsg$unix(r3, &(0x7f0000001200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x10022, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={r2, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f00000002c0)={r4, 0x3}, &(0x7f00000003c0)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000000)={r4, 0x6, 0x30}, 0xc) bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x57) getsockname$packet(r0, 0x0, &(0x7f0000000380)) 6m53.361148079s ago: executing program 1 (id=2119): setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0xfffff4f7, 0x0, 0x0, 0x6, 0x8, 0x2}, 0x20) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_smc(0x2b, 0x1, 0x0) r2 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@gettfilter={0x24, 0x2e, 0x0, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xf, 0x8}, {0xc}, {0xb, 0xffde}}}, 0x24}}, 0x40051) sendmsg$nl_route_sched(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r3, {0x4, 0xffe0}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8847}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x81}, 0x24000000) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f00000046c0)={'filter\x00', 0x7, 0x4, 0x3c8, 0x0, 0x0, 0x110, 0x2e0, 0x2e0, 0x1f8, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x2e}, @mac=@remote, @loopback, @local, 0x1, 0x1}}}, {{@arp={@multicast2, @private=0xa010100, 0xff, 0xffffff00, 0xc, 0x4, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, {[0xff, 0xff, 0xff, 0xff, 0x0, 0xbe9240b8a223bba0]}}, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x24}, {[0xff, 0x0, 0xff, 0xff, 0xff]}}, 0x2, 0x6, 0x23b0, 0x9dd7, 0x80, 0x9, 'veth1_vlan\x00', 'ip_vti0\x00', {0xff}, {0xff}, 0x0, 0x12}, 0xc0, 0xe8}, @unspec=@AUDIT={0x28}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE0={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) ioctl(r0, 0x8b32, &(0x7f0000000040)) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x92}, [@ldst={0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd96, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 6m53.233444683s ago: executing program 1 (id=2122): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$packet(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1, 0x0, 0x6, @random="b6c1c02b5fbb"}, 0x14) getsockname(r0, 0x0, &(0x7f0000000040)) (async) getsockname(r0, 0x0, &(0x7f0000000040)) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) recvmmsg(r1, &(0x7f0000005580)=[{{0x0, 0x0, 0x0}, 0xffffffff}, {{0x0, 0x0, 0x0}, 0x2}], 0x2, 0x10122, 0x0) 6m53.195581998s ago: executing program 1 (id=2125): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000000000009500"/32], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000000000009500"/32], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) (async) 6m53.107363298s ago: executing program 2 (id=2127): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x18) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@newtaction={0x48, 0x30, 0x9e54f29ff072a93b, 0x0, 0x0, {}, [{0x34, 0x1, [@m_csum={0x30, 0x1, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x2}}}}]}]}, 0x48}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="bc1b0000400007012bbd700000000000017c00000400c2800c00018006000600843b0000971b02"], 0x1bbc}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 6m53.05835069s ago: executing program 1 (id=2129): socket$inet6(0xa, 0x2, 0x0) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000000)={0x0, 0x81}, 0x8) (async) mmap(&(0x7f00007f0000/0x2000)=nil, 0x2000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r2 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000040)={'veth0_to_bond\x00', &(0x7f0000000540)=@ethtool_gstrings={0x1b, 0x9}}) (async) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) (async) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) (async) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000002c0), 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$sock_int(r4, 0x1, 0x22, &(0x7f0000000140)=0x81, 0x4) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000005ec0), r4) (async) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, &(0x7f00000000c0)=@ccm_128={{0x303}, "ab99e2d38f81a9c5", "e66ea410cb64aa50ecc01202154a14c6", "e80e2a4d", "6f1134b907e3ee45"}, 0x28) (async) close(0x3) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'wlan0\x00', 0x2}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x8980, 0x0) (async) ioctl$TUNSETLINK(r0, 0x400454cd, 0x306) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x8, &(0x7f0000000440)=ANY=[@ANYBLOB="180800000000000000000000000000008510000003000000180000000000000054d0daab000000009500000000000000bfa00000000000009500000000000000b9764606902200bf97c167083b34266ea44f871e78bb53cc736969df69497d92b00ac756118113348ec4c3cb05a27d6dbed08b31449c375b243fa008214dd00bd5f1716d94c8d135e61c0a28567d26961c4918c01c7c8a78423f9fb492836b6a1490695825d84f4cfa9290f6e7327cc9624dffacabf9c41b59de7f2a06a0751a0261b3c18d602db1f21775692607842a54d42baa965e10066a3afba11924b7d645"], &(0x7f0000000240)='syzkaller\x00', 0x1}, 0x94) (async) r6 = socket(0x2a, 0x2, 0x0) getsockname$packet(r6, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000a80)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0x7, 0x1}}}, 0x24}}, 0x0) (async) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x80) sendmsg$nl_route_sched(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newtfilter={0x34, 0x2c, 0x601, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0xfff3}, {}, {0xc, 0xd}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x48800}, 0x24000840) r8 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r8, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) close(r5) socket(0x2, 0x5, 0x0) (async) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) 6m52.937538003s ago: executing program 2 (id=2131): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="14dfffff0f00000000000000000a140000001100010000000000000000000500000a0000000000004053f2f1a3da3b410f56f5d4dfa27a68163d149ea74cb926fa70f4135df155d08425eb820febf4f5"], 0x28}, 0x1, 0x0, 0x0, 0x840}, 0x0) 6m52.869315518s ago: executing program 2 (id=2132): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'sit0\x00'}) getsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f0000000100)={@empty, @multicast2, 0x0}, &(0x7f0000000140)=0xc) sendmsg$nl_route(r0, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x28, 0x68, 0x1, 0x0, 0x0, {0xa, 0x0, 0x3, 0x0, 0x5}, [@NHA_ID={0x8, 0x1, 0x6}, @NHA_OIF={0x8, 0x5, r1}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 6m52.786605516s ago: executing program 1 (id=2133): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) setsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f0000000080)={0x4}, 0x2) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) sendmsg$NL80211_CMD_VENDOR(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)={0xfc, r2, 0x701, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x7c}, @void, @val={0xc}}}, [@NL80211_ATTR_VENDOR_DATA={0xd1, 0xc5, "7e8702479c094c1d7ce2cecbd0a44d007d8dce4b9259af30707cfbd2a671bc0f248b112084e72878195290217789843e083cfb707d5a50988f4d1742d2bdf45ba70d8baa0ea45ada6783cb456593d0949aa353632e56b9b759bc0dfc6d0e6894b70f6a12e0282843be4ded136fb42106795edd1150a425ad74394d6583a7ed0bbd90fc0b2600ae855c007a540c3ff5a11a5994cbb6da902153a6532d6d01a98ee8db587b0a4cb551725bafa42cf185136abfc72c98095471eec5a1cae8ad5df1ce8d3974a4862f842da75f3453"}]}, 0xfc}, 0x1, 0x0, 0x0, 0x85}, 0x0) r4 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000280), r3) sendmsg$SEG6_CMD_SET_TUNSRC(r3, &(0x7f0000000440)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, r4, 0x10, 0x70bd2c, 0x25dfdbfd, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008000}, 0x8004) r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000480)=0xa, 0x4) ioctl$FS_IOC_GETFSSYSFSPATH(r5, 0x80811501, &(0x7f00000001c0)={0x80}) ioctl$SIOCX25SCAUSEDIAG(r5, 0x89ec, &(0x7f0000000340)) syz_emit_ethernet(0x66, &(0x7f0000000140)={@link_local, @local, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @dev, @dev={0xac, 0x14, 0x14, 0xff}}}}}}, 0x0) 6m52.537167339s ago: executing program 2 (id=2136): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3f}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x8}, @IFLA_BR_MULTI_BOOLOPT={0xc, 0x2e, {0x3, 0x3}}, @IFLA_BR_MCAST_SNOOPING={0x5}]}}}]}, 0x50}}, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f00000002c0)=@newqdisc={0x118, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x9}}, [@qdisc_kind_options=@q_netem={{0xa}, {0xe8, 0x2, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, [@TCA_NETEM_RATE64={0xc}, @TCA_NETEM_DELAY_DIST={0xa, 0x2, "58d5c080bbdd"}, @TCA_NETEM_LOSS={0x48, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x8}, @NETEM_LOSS_GE={0x14, 0x2, {0x0, 0x0, 0xe}}, @NETEM_LOSS_GI={0x18}]}, @TCA_NETEM_LOSS={0x60, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18}, @NETEM_LOSS_GE={0x14}, @NETEM_LOSS_GI={0x18}, @NETEM_LOSS_GI={0x18}]}, @TCA_NETEM_REORDER={0xc}]}}}]}, 0x118}}, 0x0) ioctl$sock_bt_bnep_BNEPCONNADD(r1, 0x400442c8, &(0x7f0000000040)={r0, 0x8}) 6m52.203844749s ago: executing program 32 (id=2136): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3f}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x8}, @IFLA_BR_MULTI_BOOLOPT={0xc, 0x2e, {0x3, 0x3}}, @IFLA_BR_MCAST_SNOOPING={0x5}]}}}]}, 0x50}}, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f00000002c0)=@newqdisc={0x118, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x9}}, [@qdisc_kind_options=@q_netem={{0xa}, {0xe8, 0x2, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, [@TCA_NETEM_RATE64={0xc}, @TCA_NETEM_DELAY_DIST={0xa, 0x2, "58d5c080bbdd"}, @TCA_NETEM_LOSS={0x48, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x8}, @NETEM_LOSS_GE={0x14, 0x2, {0x0, 0x0, 0xe}}, @NETEM_LOSS_GI={0x18}]}, @TCA_NETEM_LOSS={0x60, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18}, @NETEM_LOSS_GE={0x14}, @NETEM_LOSS_GI={0x18}, @NETEM_LOSS_GI={0x18}]}, @TCA_NETEM_REORDER={0xc}]}}}]}, 0x118}}, 0x0) ioctl$sock_bt_bnep_BNEPCONNADD(r1, 0x400442c8, &(0x7f0000000040)={r0, 0x8}) 6m52.198221099s ago: executing program 1 (id=2139): r0 = socket(0x1d, 0x2, 0x6) recvfrom$rxrpc(r0, 0x0, 0x0, 0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000500)=ANY=[@ANYBLOB="b4080000000100fd7311420000000000851000000300000000000000000000109500c200000000009500001200000002a15d2b5fe329a14286a4c13104c1dc00281fb061ca6e17015167f030fa877316c6c127023867f34d808a6c5c622d5b80f333249d25157e1af4ac413760d0f7f56253b19aff106ca672cb0ee355c838f24ef63dec231f17c7d12202473bf2c39145bc76aa62aeea3b93199ce15a6ea4c2d5c381d8a976cafe55b1c8ee8873f8c583ade336d1ca52937a7967f31d4796ac146d86b2d6"], &(0x7f0000000080)='GPL\x00', 0x8, 0xc9, &(0x7f0000000300)=""/201}, 0x94) r1 = socket$xdp(0x2c, 0x3, 0x0) bind$xdp(r1, &(0x7f0000000200)={0x2c, 0xa, 0x0, 0x13, r0}, 0x10) r2 = socket$unix(0x1, 0x1, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r7) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@deltclass={0x34, 0x29, 0x100, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xf, 0xffe0}, {0x5, 0x1}, {0xffff, 0x6}}, [@TCA_RATE={0x6, 0x5, {0xe, 0xd}}, @TCA_RATE={0x6, 0x5, {0x3, 0xd}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000010}, 0x400) r8 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r8, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r8, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r9, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf4a31accb", 0x26}], 0x1}, 0x4) r10 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r11 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r11, 0x1, 0x3c, &(0x7f0000000100)={0x4001}, 0x8) sendmmsg$inet6(r11, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) connect$inet6(r11, &(0x7f0000000140)={0xa, 0x4e22, 0xb, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) sendto$inet6(r11, 0x0, 0x0, 0x24000084, 0x0, 0x0) ioctl$BTRFS_IOC_GET_FEATURES(r10, 0x80189439, &(0x7f0000000100)) r12 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000002c0)="2e00000011008b88040f80ee59acbc04130800480f0000005e2900421803001825800000000000000280000c0012", 0x2e}, {&(0x7f0000000040)="6d8f0d59540308711bc1e187b0e570659c351568c5db979866a2eab2f510e9a97970f855541095a384c2c3afd574bd22ada8e27b9a5e46da19c9f30aa0070d4e79880d06e09c1fa474a903bfcbb82a3b5ebfb338a91901361707350e5d501d1563d2ec5d0adcd8603252c3700baae1d8f626d7e4", 0x74}, {&(0x7f0000000140)="429b41f3cd79cee847b4fbb8ed3d0631ec3b0e312bee7f44646ff5122f96325fc210d3dad89caf4c39439cd1824f61aef88f3d5ae5d2822777afa1be1248e409855f40af190c9ae4b34213c38a16a8628759f75817d575eae017b26aa99ce4b347c4283e49374aff3d0195ed9cfefdbcc9d7c59d21ebd7143c8274268f62e2689b3e684735db394066e10d081088260e99df0064157778f4174c40bbd7445bcd18", 0xa1}], 0x3}, 0x0) 6m52.094593782s ago: executing program 33 (id=2139): r0 = socket(0x1d, 0x2, 0x6) recvfrom$rxrpc(r0, 0x0, 0x0, 0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000500)=ANY=[@ANYBLOB="b4080000000100fd7311420000000000851000000300000000000000000000109500c200000000009500001200000002a15d2b5fe329a14286a4c13104c1dc00281fb061ca6e17015167f030fa877316c6c127023867f34d808a6c5c622d5b80f333249d25157e1af4ac413760d0f7f56253b19aff106ca672cb0ee355c838f24ef63dec231f17c7d12202473bf2c39145bc76aa62aeea3b93199ce15a6ea4c2d5c381d8a976cafe55b1c8ee8873f8c583ade336d1ca52937a7967f31d4796ac146d86b2d6"], &(0x7f0000000080)='GPL\x00', 0x8, 0xc9, &(0x7f0000000300)=""/201}, 0x94) r1 = socket$xdp(0x2c, 0x3, 0x0) bind$xdp(r1, &(0x7f0000000200)={0x2c, 0xa, 0x0, 0x13, r0}, 0x10) r2 = socket$unix(0x1, 0x1, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r7) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@deltclass={0x34, 0x29, 0x100, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xf, 0xffe0}, {0x5, 0x1}, {0xffff, 0x6}}, [@TCA_RATE={0x6, 0x5, {0xe, 0xd}}, @TCA_RATE={0x6, 0x5, {0x3, 0xd}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000010}, 0x400) r8 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r8, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r8, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r9, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf4a31accb", 0x26}], 0x1}, 0x4) r10 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r11 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r11, 0x1, 0x3c, &(0x7f0000000100)={0x4001}, 0x8) sendmmsg$inet6(r11, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) connect$inet6(r11, &(0x7f0000000140)={0xa, 0x4e22, 0xb, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) sendto$inet6(r11, 0x0, 0x0, 0x24000084, 0x0, 0x0) ioctl$BTRFS_IOC_GET_FEATURES(r10, 0x80189439, &(0x7f0000000100)) r12 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000002c0)="2e00000011008b88040f80ee59acbc04130800480f0000005e2900421803001825800000000000000280000c0012", 0x2e}, {&(0x7f0000000040)="6d8f0d59540308711bc1e187b0e570659c351568c5db979866a2eab2f510e9a97970f855541095a384c2c3afd574bd22ada8e27b9a5e46da19c9f30aa0070d4e79880d06e09c1fa474a903bfcbb82a3b5ebfb338a91901361707350e5d501d1563d2ec5d0adcd8603252c3700baae1d8f626d7e4", 0x74}, {&(0x7f0000000140)="429b41f3cd79cee847b4fbb8ed3d0631ec3b0e312bee7f44646ff5122f96325fc210d3dad89caf4c39439cd1824f61aef88f3d5ae5d2822777afa1be1248e409855f40af190c9ae4b34213c38a16a8628759f75817d575eae017b26aa99ce4b347c4283e49374aff3d0195ed9cfefdbcc9d7c59d21ebd7143c8274268f62e2689b3e684735db394066e10d081088260e99df0064157778f4174c40bbd7445bcd18", 0xa1}], 0x3}, 0x0) 4m7.113217313s ago: executing program 5 (id=4020): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000dc0)={r1, 0x18000000000002a0, 0xf, 0x0, &(0x7f0000000480)="b9ff03076844268cb89e14f088471b", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000000), 0xffffffffffffffff) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@dev={0xfe, 0x80, '\x00', 0x1a}, 0x10011, 0x2, 0x2, 0x7, 0xc}, 0x20) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) ioctl(r2, 0x8b32, &(0x7f0000000040)) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000800), r0) sendmsg$IEEE802154_SCAN_REQ(r0, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000ac0)={0x1c, r3, 0xd5c15c672e322a81, 0x0, 0x0, {}, [@IEEE802154_ATTR_SCAN_TYPE={0x5}]}, 0x1c}}, 0x0) 4m6.948960224s ago: executing program 5 (id=4025): ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000100)) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) close(0xffffffffffffffff) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x1, @dev={0xfe, 0x80, '\x00', 0x1c}, 0x3f}, 0x1c) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f00000000c0)) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001cc0), 0x0, 0x24054005) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, &(0x7f0000000100)=0x13, 0x4) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f00000000c0)={0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x15, 0x3, 'lblcr\x00', 0x27, 0x3, 0x4}, 0x2c) r2 = socket$kcm(0xa, 0x2, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r4) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x14, r5, 0x1, 0x70bd28, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'wrr\x00', 0x23, 0x81, 0x5}, {@private=0xa010100, 0x4e23, 0x10000, 0x1cb, 0x12d61, 0x12d58}}, 0x44) sendmsg$sock(r2, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 4m6.02574994s ago: executing program 5 (id=4037): mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001380), r0) sendmsg$NL802154_CMD_NEW_SEC_DEV(r0, &(0x7f0000001500)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000014c0)={&(0x7f0000000440)={0x9c, r1, 0x1, 0x70bd29, 0x4, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_DEVICE={0x1c, 0x2e, 0x0, 0x1, [@NL802154_DEV_ATTR_SHORT_ADDR={0x6, 0x3, 0xaaa0}, @NL802154_DEV_ATTR_SECLEVEL_EXEMPT={0x5}, @NL802154_DEV_ATTR_SHORT_ADDR={0x6, 0x3, 0xaaa2}]}, @NL802154_ATTR_SEC_DEVICE={0x4c, 0x2e, 0x0, 0x1, [@NL802154_DEV_ATTR_EXTENDED_ADDR={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ATTR_FRAME_COUNTER={0x6, 0x1, 0xc0d}, @NL802154_DEV_ATTR_SHORT_ADDR={0x6}, @NL802154_DEV_ATTR_SHORT_ADDR={0x6, 0x3, 0xaaa1}, @NL802154_DEV_ATTR_PAN_ID={0x6}, @NL802154_DEV_ATTR_FRAME_COUNTER={0x6, 0x1, 0xe000}, @NL802154_DEV_ATTR_PAN_ID={0x6, 0x2, 0x3}, @NL802154_DEV_ATTR_EXTENDED_ADDR={0xc, 0x4, {0xaaaaaaaaaaaa0102}}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x9c}, 0x1, 0x0, 0x0, 0x40059}, 0xc000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x14, r4, 0x181}, 0x14}}, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000600)=ANY=[@ANYBLOB="74000000677f4fd632825ebee20b0165a34159ecd34dba9cbfb44211d2ec3dd136212df8f22e9602574e8928f9bc5da98ce8471ce0ea9c9db28e4010f6c22214d446e744bc07d41802938fa22bc5f0bdd854f94000c1997ad90084858f648adb6dd5db0fb6bfb54eca8b", @ANYRES16=r4, @ANYBLOB="01002cbd7000fbdbdf25020000000c00050011010000000000000c0008000807ffffffffffff0c00030040000000000000000c00030003000000000000000c0005002c000000000000000c00060003000000000000000c000800ff0f0000000000000c0002000180000000000000"], 0x74}, 0x1, 0x0, 0x0, 0x80}, 0x8800) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELRULE={0x20, 0x8, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELRULE={0x2c, 0x8, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xa0}}, 0x0) r5 = socket$key(0xf, 0x3, 0x2) r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r7) ioctl$IOCTL_GET_NCIDEV_IDX(r6, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r9], 0x1c}}, 0x0) write$nci(r6, &(0x7f0000000700)=ANY=[@ANYBLOB="710505cd030606018be8a1976e193c27010466dc77f0b1b54773ee6a19222755d2deac4f088f76bf3c93682f07d04b7bdccfa9d3d690cc68a8388ff2dfc30c6b960d"], 0x42) sendmsg$key(r5, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000080)={0x2, 0x4, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @private2}}, @sadb_sa={0x20000000000002b6}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast2}}]}, 0x60}, 0x1, 0x7}, 0x0) r10 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(r10, &(0x7f0000000ec0)=[{{&(0x7f0000000580)={0xa, 0x4e24, 0x401, @dev={0xfe, 0x80, '\x00', 0x24}, 0x8}, 0x1c, 0x0, 0x0, &(0x7f00000005c0)=[@rthdrdstopts={{0x11, 0x29, 0x37, {0x1}}}], 0x18}}], 0x1, 0x0) socket$netlink(0x10, 0x3, 0x6) r11 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x0, 0x13, r11, 0x0) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r13 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) sendto$netrom(r13, 0x0, 0x0, 0x0, 0x0, 0x0) write$cgroup_subtree(r12, &(0x7f0000000200)=ANY=[], 0x32600) sendto$l2tp6(r10, &(0x7f0000000200)="e4cd1c8946c4140a71623817a7831b0d40769ded394188915aa515d323e1e72642412f355bc7fe23cf721d570fdd441d42ab66740cf7a693e4b9cdfd806798ff92ecc618f19832c085b979501fc00146ddf85910b57be2569f13b3559cc9f0bb66b5cf3362ebff5b5d4b6db32fe1f8f1d60fb61a67564a4d8e5932013fcb0ce890434cd28ae4344b4dc1b23d92ed91a2913bece5a080d5d7f6cee2e99923da4b3316504385e986fc969007652e1a7f46dc3ca6a1986529ce121d267937f91d781a7412efce3b73adc191647521d6a780b9db32ca317d7519253f78f16eed0d00ccddff4378115f39133f9bd4bbfdc9055e4f3704d604259f06", 0xf9, 0x200088d5, &(0x7f0000000140)={0xa, 0x0, 0x4f, @mcast2, 0x9, 0x4}, 0x20) write$cgroup_subtree(r12, &(0x7f0000000000)={[{0x2d, 'net_prio'}, {0x2b, 'blkio'}, {0x2b, 'perf_event'}]}, 0x1d) 4m4.884548042s ago: executing program 5 (id=4039): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x6, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x12}}, 0x8}, 0x1c) (async, rerun: 32) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x6}, 0x1c) (async, rerun: 32) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x8031, 0xffffffffffffffff, 0x0) (async) setsockopt$sock_int(r0, 0x1, 0x9, &(0x7f0000000140)=0x3, 0x4) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000858000/0x2000)=nil, 0x2000, 0x2000004, 0x12, r1, 0xc08ba000) (async, rerun: 64) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)={0x2, 0x4, 0x8, 0x1, 0x80, r1, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5}, 0x50) (rerun: 64) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000400)={r1, 0x58, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) (async, rerun: 32) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000500)={'batadv_slave_0\x00', 0x0}) (rerun: 32) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0xe, 0xb3, 0x3, 0x2c, 0x24000, r1, 0x8, '\x00', r3, r1, 0x0, 0x1}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000020000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000fbffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000580)={r5, 0x0, 0x0}, 0x10) r6 = socket$inet6(0xa, 0x3, 0x87) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@local, @in=@multicast1, 0xfffd, 0x8, 0x4e20, 0x0, 0x2, 0x0, 0x20}, {0x0, 0x4, 0x1, 0x9, 0x0, 0x9}, {0x1fe, 0xffffffffe, 0x4053e5, 0x20}, 0x6, 0x1, 0x1, 0x1, 0x1, 0x1}, {{@in=@empty, 0x1, 0x32}, 0x2, @in6=@private0, 0x3503, 0x1, 0x0, 0x0, 0x6, 0xfffffffd}}, 0xe8) (async) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}, 0x9df}, 0x1c) (async) getsockopt$inet6_tcp_int(r6, 0x6, 0x18, &(0x7f0000000740), &(0x7f0000000780)=0x4) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r5, 0xf504, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000100)={'ip6tnl0\x00', &(0x7f0000000000)={'ip6tnl0\x00', 0x0, 0x4, 0x8, 0x3a, 0x9, 0x78, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x40, 0x31, 0xb2e, 0x81}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x18, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000003700000000000000a6a000000000000095"], &(0x7f0000000280)='GPL\x00', 0x40000, 0x0, 0x0, 0x0, 0x8, '\x00', r7, 0x0, r1}, 0x94) (async, rerun: 64) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) (rerun: 64) setsockopt$sock_timeval(r8, 0x1, 0x15, &(0x7f0000000040)={0x0, 0xea60}, 0x10) setsockopt$inet6_tcp_int(r8, 0x6, 0x1e, &(0x7f0000000000)=0x400000001, 0x4) setsockopt$inet6_tcp_int(r8, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) (async) connect$inet6(r8, &(0x7f0000000240)={0xa, 0x4e23, 0xa4e4, @remote, 0x3}, 0x1c) (async) sendmmsg(r8, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000100)="1b", 0x1}], 0x1}}], 0x1, 0xc094) (async) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000700)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000006c0)={&(0x7f00000005c0)=@mpls_delroute={0xcc, 0x19, 0x1, 0x70bd2c, 0x25dfdbfd, {0x1c, 0x0, 0x80, 0x6, 0x0, 0x4, 0x0, 0x0, 0x2100}, [@RTA_OIF={0x8, 0x4, r2}, @RTA_VIA={0x14, 0x12, {0x25, "e7d1f92075a954da018e819aa88d"}}, @RTA_NEWDST={0x84, 0x13, [{0x5}, {0x5, 0x0, 0x1}, {0x2}, {0xbb}, {0x6}, {0x4}, {0x9}, {0x4, 0x0, 0x1}, {0x4b, 0x0, 0x1}, {0xd7}, {0x8, 0x0, 0x1}, {0x9}, {0x6, 0x0, 0x1}, {0x9, 0x0, 0x1}, {0x3}, {0x5, 0x0, 0x1}, {0x189d}, {0x5, 0x0, 0x1}, {0xd3, 0x0, 0x1}, {0x7}, {0x9}, {0x17, 0x0, 0x1}, {0x10bc8}, {0x1ff}, {0x5}, {0x0, 0x0, 0x1}, {0x3, 0x0, 0x1}, {0x9, 0x0, 0x1}, {0x41d1, 0x0, 0x1}, {0x40}, {}, {0x40, 0x0, 0x1}]}, @RTA_TTL_PROPAGATE={0x5, 0x1a, 0x4}, @RTA_TTL_PROPAGATE={0x5, 0x1a, 0x3}]}, 0xcc}, 0x1, 0x0, 0x0, 0x40000}, 0x1) 4m4.67279836s ago: executing program 5 (id=4046): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000580)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002400128009000100626f6e64000000001400028005000e0040"], 0x44}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) r3 = openat$cgroup_procs(r1, &(0x7f00000002c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f00000000c0), 0x40) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f0000000000)="fc0000001d000724ab09254ec100070007ab08001b000000f0ffff002100057e0000000000000e000039000000039815fad151ba0101099cecb94b46fe0000000a00020025", 0xffffff0c) pipe(&(0x7f0000000500)={0xffffffffffffffff}) splice(r5, 0x0, r4, 0x0, 0xffffffffffff8000, 0x0) pread64(r3, &(0x7f0000001840)=""/4096, 0x1003, 0x1) socket$nl_crypto(0x10, 0x3, 0x15) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000000)=@req3={0x7, 0x4, 0x4, 0xfffffff2, 0xfffffff8, 0x8}, 0x1c) 4m4.463958934s ago: executing program 5 (id=4051): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f00000001c0), 0x12) r2 = openat$cgroup_freezer_state(r0, &(0x7f0000000080), 0x2, 0x0) sendfile(r0, r1, &(0x7f0000000100)=0x80000000, 0x1) write$cgroup_freezer_state(r2, &(0x7f0000000140)='FROZEN\x00', 0x7) 3m48.956778913s ago: executing program 34 (id=4051): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f00000001c0), 0x12) r2 = openat$cgroup_freezer_state(r0, &(0x7f0000000080), 0x2, 0x0) sendfile(r0, r1, &(0x7f0000000100)=0x80000000, 0x1) write$cgroup_freezer_state(r2, &(0x7f0000000140)='FROZEN\x00', 0x7) 3.474453144s ago: executing program 3 (id=7493): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r0) sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f00000007c0)={0x34, r1, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @local}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast1}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0xa}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x34}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000c00)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_HASH_SREG={0x8}, @NFTA_HASH_LEN={0x8}, @NFTA_HASH_DREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x84}}, 0x0) 3.366594336s ago: executing program 3 (id=7495): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet6(0xa, 0x3, 0xff) sendto(r2, 0x0, 0xa00, 0x810, &(0x7f00000008c0)=@nl=@unspec={0x0, 0x700, 0x0, 0x80fe}, 0x80) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_SET(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x20, r5, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}]}, 0x20}}, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="300000001c00c92429bd70000000020007000000", @ANYRES32=r6, @ANYBLOB="80008f0b0a000200aaaaaaaaaaaa000008000f"], 0x30}, 0x1, 0x0, 0x0, 0xc0041}, 0x0) sendmsg$netlink(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="20000000110001000000000000000000100000e60b"], 0x20}], 0x1}, 0x0) 3.049344036s ago: executing program 3 (id=7502): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f0000000240)={r2, 0x20, "d656c9a61490b7e8773ca55437fa234c0170c8cbe5ebdd2be9"}, &(0x7f0000000180)=0xfc86) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_P2P_DEVICE(r3, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x20, r4, 0x800, 0x70bd25, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x2779, 0x5e}}}}, ["", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x4000811) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000280)="2e9b3d0007e03dd65193dfb6c575963f86ddf06712e9232f328db0049d90491ceaebfd26d4eef23248000000f858dbb8a19052", 0x33}, {&(0x7f0000000680)="2a637c1b8b3894ec89aaef510a473f", 0xf}], 0x2) 1.493583538s ago: executing program 7 (id=7514): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c00028005000100040000000600180000100000060019"], 0x4c}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000080)={0x44, r4, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x7, 0x2a}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'pim6reg0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=@bridge_getvlan={0x18, 0x72, 0x333, 0x6, 0x4}, 0x18}}, 0x20000010) recvmsg$unix(r7, &(0x7f0000001880)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000000206010300000000000000000000000014000780080012400000000005001500060000000500010006000000050005000a00000005000400000000000900020073797a300000000011000300686173683a6e65742c6e6574"], 0x60}}, 0x0) sendmsg$NL80211_CMD_SET_WIPHY(r7, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={&(0x7f0000000300)={0x84, r4, 0x400, 0x70bd27, 0x25dfdbfd, {}, [@NL80211_ATTR_WIPHY_ANTENNA_RX={0x8, 0x6a, 0x8000}, @NL80211_ATTR_WIPHY_TX_POWER_LEVEL={0x8, 0x62, 0xba46}, @NL80211_ATTR_WIPHY_TXQ_PARAMS={0x3c, 0x25, 0x0, 0x1, [@NL80211_TXQ_ATTR_TXOP={0x6, 0x2, 0x7}, @NL80211_TXQ_ATTR_AIFS={0x5, 0x5, 0x5}, @NL80211_TXQ_ATTR_QUEUE={0x5, 0x1, 0x6}, @NL80211_TXQ_ATTR_TXOP={0x6, 0x2, 0x9}, @NL80211_TXQ_ATTR_CWMAX={0x6, 0x4, 0x3}, @NL80211_TXQ_ATTR_TXOP={0x6, 0x2, 0x7fff}, @NL80211_TXQ_ATTR_CWMAX={0x6, 0x4, 0x6349}]}, @NL80211_ATTR_TXQ_LIMIT={0x8, 0x10a, 0xffffff45}, @NL80211_ATTR_WIPHY_RTS_THRESHOLD={0x8, 0x40, 0x6}, @NL80211_ATTR_WIPHY_TXQ_PARAMS={0x14, 0x25, 0x0, 0x1, [@NL80211_TXQ_ATTR_CWMIN={0x6, 0x3, 0x5}, @NL80211_TXQ_ATTR_CWMIN={0x6, 0x3, 0x243b}]}]}, 0x84}}, 0x400c1) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002dbd7000ffdbdf25460000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008007c00020000000c008f0000000000000000000c009000fdffffffffffffff"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x48000) 1.393401839s ago: executing program 6 (id=7515): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1e, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000611924000000000095000000000000000401a1aa2be96bb7a940267fb0e31a4fed479be0fd210d7c71e6c736494cd84d69020c373cd41a5d74601b62fc0c54b654dc32376badea6bf174"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000040)=ANY=[@ANYRES32, @ANYRES32=r0, @ANYBLOB='$\x00\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="9995a65b5f6da8fe616be6e9d36739efbac720226a357cd19459e5e1c3353161602ad6", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$sock_buf(r1, 0x1, 0x1f, 0x0, &(0x7f0000001040)=0xa00) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1e, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000611924000000000095000000000000000401a1aa2be96bb7a940267fb0e31a4fed479be0fd210d7c71e6c736494cd84d69020c373cd41a5d74601b62fc0c54b654dc32376badea6bf174"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) (async) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000040)=ANY=[@ANYRES32, @ANYRES32=r0, @ANYBLOB='$\x00\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="9995a65b5f6da8fe616be6e9d36739efbac720226a357cd19459e5e1c3353161602ad6", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x20) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) (async) getsockopt$sock_buf(r1, 0x1, 0x1f, 0x0, &(0x7f0000001040)=0xa00) (async) 1.392996043s ago: executing program 3 (id=7516): bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x4, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x2}}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) (async) socket$nl_crypto(0x10, 0x3, 0x15) (async) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000200)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha384\x00'}, 0x58) (async, rerun: 64) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="8f", 0x1) (rerun: 64) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES32=r1, @ANYBLOB="410000000000000001000603000014000300060afc04090300f006e8ffff00000001080007003a3a0909140002"], 0x44}, 0x1, 0x1000000}, 0x4000004) 1.218354765s ago: executing program 6 (id=7518): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00'], 0x34}}, 0x0) (async) r0 = socket$netlink(0x10, 0x3, 0x0) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000540), r1) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000007c0)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000000000010000002c0004800500030080ff00000500030005080000050003000600faff05000300000000000500030000f3000008000100ffffffff0800020002"], 0x50}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c0002800500010004002000080020"], 0x4c}}, 0x0) 1.037963872s ago: executing program 0 (id=7520): ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000000)={'erspan0\x00', @remote}) sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x2, 0xc, 0xe, 0x6, 0xb, 0x0, 0x70bd26, 0x25dfdbfb, [@sadb_lifetime={0x4, 0x7, 0xa, 0x3, 0x5f, 0x30d}, @sadb_x_filter={0x5, 0x1a, @in6=@remote, @in6=@private1, 0x21, 0x4, 0x14}]}, 0x58}}, 0x4001) r0 = accept4(0xffffffffffffffff, &(0x7f0000000140)=@hci, &(0x7f00000001c0)=0x80, 0x80800) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000240)={'veth1_vlan\x00', 0x4}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000280)={'wlan1\x00'}) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), r0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x80, r2, 0x320, 0x70bd2c, 0x25dfdbfc, {}, [@HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x4000}, 0x8000) r3 = accept$inet6(0xffffffffffffffff, &(0x7f0000000440)={0xa, 0x0, 0x0, @remote}, &(0x7f0000000480)=0x1c) ioctl$EXT4_IOC_GETFSUUID(r0, 0x8008662c, &(0x7f00000004c0)) ioctl$EXT4_IOC_SETFSUUID(r3, 0x4008662c, &(0x7f0000000500)={0x0, 0x0, "e7da1e6d418237a66823845a235de915"}) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000580)={{{@in=@loopback, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@local}}, &(0x7f0000000680)=0xe8) sendmsg$nl_xfrm(r0, &(0x7f0000000840)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000800)={&(0x7f00000006c0)=@flushsa={0x10c, 0x1c, 0x400, 0x70bd28, 0x25dfdbfc, {0x2b}, [@sa={0xe4, 0x6, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in6=@mcast2, 0x4e20, 0xe1c4, 0x4e20, 0x9, 0xa, 0x1e0, 0x80, 0x4, r1, r4}, {@in=@broadcast, 0x4d6, 0x3c}, @in=@multicast1, {0x1000, 0x4, 0x2, 0xc2, 0x8000, 0x8000000000000001, 0x0, 0xffffffff}, {0x32959f71, 0x2, 0x3}, {0x4}, 0x70bd27, 0x3505, 0x2, 0x3, 0x40, 0xa0}}, @coaddr={0x14, 0xe, @in6=@dev={0xfe, 0x80, '\x00', 0x26}}]}, 0x10c}, 0x1, 0x0, 0x0, 0x4000}, 0x8000) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x28, 0x140a, 0x400, 0x70bd2b, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x75cf3611c5dbc7d2}, 0x81) setsockopt$MRT6_PIM(r3, 0x29, 0xcf, &(0x7f0000000980)=0x3, 0x4) r5 = socket$nl_audit(0x10, 0x3, 0x9) r6 = socket$inet6_sctp(0xa, 0x4, 0x84) sendmmsg$inet6(r3, &(0x7f0000002200)=[{{&(0x7f00000009c0)={0xa, 0x4e23, 0x8a0, @loopback, 0x2215}, 0x1c, &(0x7f0000002100)=[{&(0x7f0000000a00)="3ad703d7847ccc88983d6601d7cc2e5f1663a50bb1f57570575c28e033578f9e0e5e1ea108550ead7ed33adec73490f058a5f052eab6ad831003b093e9e4992bf8", 0x41}, {&(0x7f0000000a80)="c01d2857f3c5810fcde06253514a06b2dc0c22902e7bf60250926655fbd56e78d86010f57ba81bea8985738655705ea78d22a1f8a33b9b09f36fa131d08a449da537eb947907671c5b644f1ac6e388486b4497f244cac19a06a442822ad537f1d53649849f34c20c7c117986067674d5da5bd9a6f2820abeb3a751667678996f83d57334e275e2852d8b17ac0754246bf02221632c87a9d53ec83fa424a6fea936aada439aecdf68422c7abb83567fdefb34ca2d47265803d0", 0xb9}, {&(0x7f0000000b40)="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", 0xfc}, {&(0x7f0000000c40)="b8f491f996a5e2697315f79cd3e735e3cb291741ee408762ba053e971b456aa705b1ae9e9a3259715ff4e5c92b899b69a5c7f81cc1c19f02189cc62b2ce89ee0e3a95ecab204cb8a2d71f792325d36eb5277ebf912d8682347c9c19272dc9cca96fe5e4111fcabb89c08a06410cd6a3259c0102b44c2580451a0fbdb377296ed393033fbc37cd8479f3c7687bc7acdb73c9100043d611613a7c7ff6cf49f53991694cf3fa37210700286069c5434a77cc407fdb962f2eac135f3d2bbfdac3c09a09622f57990c63661d0684d37e61a6b4f18c01eec50f546482d7f1b52f5ae30a025e2f59a861147b4427867593c", 0xee}, {&(0x7f0000000d40)="f2e67f20384e16ef93ab2e734dde5652f31a188c734e57957a553f88623adaf42f6967d4f27f885bf620b64f7a399c5944c287c4c3b3bb442fe7c4c5a65d16ae5ad6198fbd53bd9de79dbb07f3c83f8e4bc6a2536c9be29c057b2e6d59625a6339283dc6e6cef8d253c9fa626e62329fbc4021b349901a58a78b8442cc7ca6771c623d1a4c3629", 0x87}, {&(0x7f0000000e00)="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", 0x1000}, {&(0x7f0000001e00)="cec8bd75bdc55d8068ca8a405f6d8a0103c4b395fca6143a39215874a4425ce4d863f6c720af4148bd025c9f0f5f9d86110d1f6819bafa71a9bcac4863d9bcbc100d941e286282922f79e3447e3f038ea4aa1fd2ec4eaa52793a159bd3322838173d56f4fb1976265961f9922b545ee90e9fbea9635a99209e5c103f98dc119935d22f7c8e13fc2c0696b31744778acf9a27b9ee5d4a8a2eff4c6879d2cb9c2b895023559eaf43f865c601d168d2b755d061aaec1613bae3b8d1712407f5af420d089c09b761d1fe726fb122dd7513e9dc02fe893c52394a79e9fe6ea520f922b4d7ee6b0a81bf4fbc210c418615", 0xee}, {&(0x7f0000001f00)="401a3b831c53829b2c74e322d276936bd4d46e390101348b06eaba7daadecae692c7fc9f8bd52316240c47dc94f5439432c3d8ace20dc487bcd75aae5d88702b5e78aea0d66c0f719219a802ed411fbcbf58cc2279b52592ffcb4af9e836c2da7e2467b8accc4cdaebfc344b3046adf5fcdb86f64601dde57d0275399f3290590fefa90c074669ec3a9574e566338dff2708817dc8d1c2d839c95bebe72972fca70709c9095403e1cc36048b55203d6546a4add57d1697a1bad702730d99c28207afa97cdb2ae8c40e1af99175a9a421d56e1668424c12b37956a3d588e9db8a912cadfb209db9f1292cb77a2a", 0xed}, {&(0x7f0000002000)="b4400bc7958f14836a6a848ca9467225a5d87b83dbf1b5190409c753a1497dbb5155eece0086e2dc94355b44ce19e16e14cd151f72e39a675f8d25cd6c47249aaa6849ae16292ee8ae9cbe65987956a395eecc5d20d3fe62e2bc2a5a71a983184eef38a7852cac660c532def7765673d0feb33afd073711670932204c8d7048a97f3e12d162d3516642b5ca1d6314a72a891", 0x92}, {&(0x7f00000020c0)="803bfe3df1a7b896830bf3", 0xb}], 0xa, &(0x7f00000021c0)=[@rthdrdstopts={{0x28, 0x29, 0x37, {0x87, 0x1, '\x00', [@jumbo={0xc2, 0x4, 0x1000}, @enc_lim={0x4, 0x1, 0x9}]}}}], 0x28}}], 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000002280)=@security={'security\x00', 0xe, 0x4, 0x428, 0xffffffff, 0x120, 0x0, 0x120, 0xffffffff, 0xffffffff, 0x358, 0x358, 0x358, 0xffffffff, 0x4, &(0x7f0000002240), {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @remote}, @mcast2, [0xff000000, 0xff000000, 0xffffffff, 0xff], [0x0, 0xff000000, 0xff, 0xffffff00], 'veth0_virt_wifi\x00', 'pim6reg0\x00', {0xff}, {0xff}, 0x73, 0xb, 0x2}, 0x0, 0xf0, 0x120, 0x0, {}, [@common=@dst={{0x48}, {0x9d28, 0x4, 0x1, [0xfc, 0xabbb, 0xbb11, 0x8001, 0x8, 0x2, 0x7, 0xdcf, 0x0, 0x1, 0x1, 0x8, 0x2, 0x0, 0x8], 0x3}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff, 0x5, 0x4}, {0x3, 0x5, 0x2}, 0xe10c, 0xf04c}}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff, 0x3}, {0x2, 0x4, 0x2}, {0x1, 0x5, 0x1}, 0x6, 0x8001}}}, {{@uncond, 0x0, 0xf8, 0x158, 0x0, {}, [@common=@icmp6={{0x28}, {0x0, "7ca6"}}, @common=@hl={{0x28}, {0x3}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@mcast2, [0xffffff00, 0x0, 0x0, 0xff000000], 0x4e24, 0x4e23, 0x4e23, 0x4e21, 0x4, 0xca, 0x1ff, 0x5f, 0x4d}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x488) ioctl$sock_TIOCINQ(r5, 0x541b, &(0x7f0000002740)) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$net_dm(&(0x7f00000027c0), 0xffffffffffffffff) sendmsg$NET_DM_CMD_STOP(r7, &(0x7f0000002880)={&(0x7f0000002780)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000002840)={&(0x7f0000002800)={0x14, r8, 0x100, 0x70bd28, 0x25dfdbfe, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x0) setsockopt$PNPIPE_ENCAP(r0, 0x113, 0x1, &(0x7f00000028c0)=0x1, 0x4) getsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000002900)={0x0, 0x7ff}, &(0x7f0000002940)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r6, 0x84, 0x11, &(0x7f0000002980)={r9, 0xfffffff8}, 0x8) getsockopt$IP_VS_SO_GET_INFO(r5, 0x0, 0x481, &(0x7f00000029c0), &(0x7f0000002a00)=0xc) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r3, 0xc038943b, &(0x7f0000002a80)={0x4, 0x20, '\x00', 0x0, &(0x7f0000002a40)=[0x0, 0x0, 0x0, 0x0]}) setsockopt$inet_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f0000002ac0)=@gcm_256={{0x304}, "4b89275440338403", "096e5485e26fc0d9d2382dc69ca5362a0b394a080e36bf705b971a505c6351fc", "a10ef640", "885388cbf9a104da"}, 0x38) sendmsg$TIPC_NL_BEARER_DISABLE(r0, &(0x7f0000002cc0)={&(0x7f0000002b00)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000002c80)={&(0x7f0000002b80)={0xe4, 0x0, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xdb15}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}]}, @TIPC_NLA_LINK={0xac, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000001}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}]}]}]}, 0xe4}, 0x1, 0x0, 0x0, 0x2000}, 0x20000084) 985.70061ms ago: executing program 7 (id=7521): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000040)='cpu.pressure\x00', 0x2, 0x0) sendmsg$unix(r3, &(0x7f00000001c0)={&(0x7f0000000040)=@abs={0x1, 0x2f, 0x2e}, 0x6e, 0x0}, 0x0) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000000)=ANY=[@ANYBLOB="40010000100001000000000000000000ac1e0101000000000000000000000000fe8000000000000000000000000000aa0000000020000000000000002e000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x140}}, 0x4004001) ioctl$AUTOFS_IOC_EXPIRE(r0, 0x810c9365, &(0x7f00000001c0)={{0x6, 0x2}, 0x100, './file0\x00'}) 729.421409ms ago: executing program 4 (id=7522): socket$nl_generic(0x10, 0x3, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) socket(0x10, 0x3, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) r0 = socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x2, 0x1, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r0, &(0x7f0000000280)=[{{&(0x7f0000000700)=@tipc=@nameseq={0x1e, 0x1, 0x0, {0x41, 0x1}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000100)='O', 0x1}], 0x1, 0x0, 0x0, 0x2f00}}], 0x1, 0x4085) 726.955157ms ago: executing program 7 (id=7523): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4010}, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x4800}, 0x10) (async) r1 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x40000, @dev={0xfe, 0x80, '\x00', 0x26}}}}, 0x108) (async) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) (async) close(r1) r2 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000500)={0x0, {{0xa, 0x4, 0x0, @mcast1={0xff, 0x7}, 0x8a4}}, {{0xa, 0x4e20, 0xfe, @remote}}}, 0x108) (async) r3 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r3, 0x8922, &(0x7f0000000440)={'syz_tun\x00', 0x101}) 725.5542ms ago: executing program 6 (id=7524): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f0", @ANYRES32, @ANYBLOB="0000000000000000280012000c"], 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000008c0)=ANY=[], 0x6c}}, 0x20000841) r0 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, 0x0, 0x600, 0x70bd2a, 0x25dfdbfc, {}, [@FOU_ATTR_LOCAL_V4={0x8, 0x6, @private=0xa010102}]}, 0x1c}}, 0x8000) 707.18177ms ago: executing program 0 (id=7525): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000000)=@framed={{0x62, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0x17}}, &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) 588.72153ms ago: executing program 6 (id=7526): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x2, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000004000000ffff1700c4000000000028009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0x93, &(0x7f0000000100)=""/147, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x17, 0x10, 0x0, 0x0, 0x61e5cc96}, 0x22) pipe(&(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000380)=[{&(0x7f0000013580)="0dd2e7c8926dc6acd0ae6c178054e95986faff9544de5fc4c30adf404da41181a77466ac5075905ea5f50134fdd517a957fe2ee59b61f9fe8d7aabe595ea23de2723e437af0423a56686a4c2d957be1a0ab922fbbd3cb1d8c6ab0d58440a327c8eb05d445b4ac5f20abe449e4084f8b996268d0564f67980d3ed3479e0edfe5cec7b4f89bface391c9c4c58ad123b91c33173c72326d1df18804a9ea20f9ece48f784d8ca2318e3d2b316666b5dfb7295c4915989d5bcb120e8fedaa97b93a137c256ce4", 0x20013644}, {&(0x7f0000013680)="c578381bf5113dad8319d9ea5294285ae9a90384ce23866477bef9de4399237d8b3522c9c194e71edaf3332a2f169682f9d8fa271683d4d441b710409e506333e0c3b64e52e8720734b6787f4a84f5bebb046649c6c697d978affd349031b2cd874c7a8961a586a9f2d62f945e7a5bf2f5f7a31684c0503704881d2578a2a98ac3ef4e4a4b0dcdb70db735d5c1652eed3848b2dd4131bb0eb7cfadfaf5", 0x9d}], 0x2, 0x0) tee(r0, r1, 0x2, 0x100000000000003) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000600), 0xffffffffffffffff) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'netdevsim0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x9, '\x00', 0xfffffffa, 0x6, 0xf8, 0x9}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'erspan0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="480000001000050400"/20, @ANYRES32=r7, @ANYBLOB="ebffffffffffffff280012800b00010065727370616e0000180002800400120005001600010000000800150000000076"], 0x48}}, 0x0) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r9, 0x8933, &(0x7f0000000080)={'vxcan0\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001800010000000000000200001d01080008000a00", @ANYRES32=r8, @ANYBLOB='\b\x00\t\x00', @ANYRES32=r10], 0x24}}, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(r1, &(0x7f00000009c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000640)={0x26c, r2, 0x100, 0x70bd2d, 0x25dfdbfb, {}, [{{0x8}, {0x250, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r7}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r10}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x412}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x400}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0x2, 0x4, 0xfe}, {0x9, 0x1, 0xb, 0x684}, {0x7, 0xa5, 0x1, 0x3}, {0x9, 0x5, 0xe, 0x1}]}}}]}}]}, 0x26c}, 0x1, 0x0, 0x0, 0x4000000}, 0x10000892) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000200)={0x0, @empty, @broadcast}, &(0x7f0000000240)=0xc) r12 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@bloom_filter={0x1e, 0x8, 0x5, 0x1, 0x0, 0x1, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3, 0x0, 0x293}, 0x50) r13 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000380)=@generic={&(0x7f0000000340)='./file0\x00'}, 0x18) r14 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)={0x1b, 0x0, 0x0, 0x6, 0x0, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2, 0x3}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000040)=@raw=[@call={0x85, 0x0, 0x0, 0xaa}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}, @generic={0xe, 0xc, 0x8, 0x1, 0xff}], &(0x7f0000000080)='GPL\x00', 0x2, 0x2, &(0x7f00000001c0)=""/2, 0x40f00, 0x10, '\x00', r11, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000280)={0x3, 0x4, 0x0, 0x7ff}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000000440)=[0x1, r12, r13, r14], &(0x7f0000000480)=[{0x5, 0x4, 0x3, 0x1}, {0x2, 0x1, 0x7, 0xb}, {0x1, 0x3, 0x2, 0x6}, {0x5, 0x3, 0x4, 0xf5be0f619e728748}, {0x4, 0x3, 0xc, 0x9}, {0x1, 0x4, 0x1, 0x4}], 0x10, 0x1}, 0x94) 533.105466ms ago: executing program 4 (id=7527): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000008000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000afa100000000000007010000f8ffffffbffbf7d5c100000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000004000000e27f000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 532.152197ms ago: executing program 7 (id=7528): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001680)={{r0, 0xffffffffffffffff}, &(0x7f0000000200), &(0x7f0000000040)='%ps \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r1, 0xffffffffffffffff}, 0x4) getsockname$inet6(r2, &(0x7f00000001c0), &(0x7f0000000240)=0x1c) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000080)=0x8) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r4, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r5, {0x2, 0x0, @dev}, 0x2}}, 0x2e) socket$pppl2tp(0x18, 0x1, 0x1) ioctl$PPPIOCGMRU(r4, 0x80047453, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000ac0)=@filter={'filter\x00', 0xe, 0x4, 0x358, 0xffffffff, 0x1e8, 0x1e8, 0xd0, 0xffffffff, 0xffffffff, 0x320, 0x320, 0x320, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x3, 0x3, 0x4}, {0x0, 0x4, 0x3}}}}, {{@ipv6={@mcast2, @private0={0xfc, 0x0, '\x00', 0x1}, [0x0, 0xff, 0xffffff00, 0xffffffff], [0xff, 0xffffff00, 0xffffffff, 0xff], 'wlan0\x00', 'bridge_slave_0\x00', {}, {0xff}, 0x0, 0x4, 0x6, 0x1}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x0, 0x8000}}}, {{@ipv6={@private1={0xfc, 0x1, '\x00', 0x1}, @mcast2, [0xffffffff, 0xffffff00, 0xffffff, 0x3cfa071f66be0dd3], [0xff000000, 0xff000000, 0xffffff00, 0xff], 'veth1_to_hsr\x00', 'vlan0\x00', {0xff}, {}, 0x3b, 0x78, 0x2, 0x1}, 0x0, 0xa8, 0xe8}, @common=@unspec=@ERROR={0x22, 'ERROR\x00', 0x0, "9847fdc1479cca6e850542bb97e4096e345c9f1a70b1d8501618472b17cd"}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8) r6 = socket$nl_route(0x10, 0x3, 0x0) unshare(0x20000400) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={r8, 0xfffffffffffffe5d}, 0xb) r9 = socket$nl_rdma(0x10, 0x3, 0x14) ioctl$ifreq_SIOCGIFINDEX_team(r9, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@ipv4_newaddr={0x34, 0x14, 0x1, 0x70bd29, 0x25dfdbfd, {0x2, 0x18, 0xc0, 0x2, r10}, [@IFA_LOCAL={0x8, 0x2, @broadcast}, @IFA_CACHEINFO={0x14, 0x6, {0xffbb, 0x0, 0x0, 0x10001}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x4) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xb, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0feffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000801000085000000a500000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_generic(r9, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x3c, 0x1b, 0x202, 0x70bd2a, 0x25dfdbfd, {0x20}, [@generic="2d899b6c712e5d339ef2af6000e97f2da5399b7829371057e6805cad15d91721c55835bde4d1"]}, 0x3c}, 0x1, 0x0, 0x0, 0x8080}, 0x40040) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r11, 0x2f08, 0x10, 0x10, &(0x7f00000006c0)="feffffff00000005", &(0x7f0000000700)=""/8, 0x447, 0x6000000, 0x0, 0x0, 0x0, 0x0}, 0x4c) 531.118061ms ago: executing program 0 (id=7529): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@ipv6_newnexthop={0x30, 0x68, 0x1, 0x80, 0x0, {}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x8}, @NHA_ENCAP={0x8, 0x8, 0x0, 0x1, @MPLS_IPTUNNEL_DST={0x4}}, @NHA_OIF={0x8, 0x5, r1}]}, 0x30}}, 0x0) socket(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'sit0\x00'}) (async) sendmsg$nl_route(r0, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@ipv6_newnexthop={0x30, 0x68, 0x1, 0x80, 0x0, {}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x8}, @NHA_ENCAP={0x8, 0x8, 0x0, 0x1, @MPLS_IPTUNNEL_DST={0x4}}, @NHA_OIF={0x8, 0x5, r1}]}, 0x30}}, 0x0) (async) 530.551309ms ago: executing program 3 (id=7530): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="900000002000010000000000000000000a8010000000000118000100050015000200000014000100ff020000000000007d8d77fd000000010500130001000000140002"], 0x90}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_NETMASK={0x5, 0x14, 0x5}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x58}}, 0x0) 437.630837ms ago: executing program 7 (id=7531): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001b40), r1) sendmsg$IEEE802154_SET_MACPARAMS(r1, &(0x7f0000001dc0)={&(0x7f0000001cc0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001d80)={&(0x7f0000001d00)={0x20, r2, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x81}, 0x8000) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x7) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0x8}, {0xfff1, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@delchain={0x34, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0x9}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@delchain={0x24, 0x11, 0x1, 0x1f, 0x0, {0x0, 0x0, 0x0, r5, {}, {0x0, 0x6}}}, 0x24}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) 409.65824ms ago: executing program 6 (id=7532): socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) (async) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r2, 0x11c, 0x3, 0x0, &(0x7f0000000040)=0xffffffffffffff5f) (async) getsockopt$inet6_mptcp_buf(r2, 0x11c, 0x3, 0x0, &(0x7f0000000040)=0xffffffffffffff5f) socket(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) socket(0x28, 0x0, 0x28) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x18, 0x12, &(0x7f00000003c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @generic={0x2, 0xe, 0x0, 0xc, 0xc}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x18d}}}, &(0x7f0000000480)='syzkaller\x00', 0x5, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, 0x0, r4, 0x8, &(0x7f00000004c0)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000000500)={0x2, 0x4, 0x7ff, 0x100}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000540)=[r4, r3, r4, r4], &(0x7f0000000580)=[{0x3, 0x5, 0x8, 0xb}, {0x2, 0x3, 0x9, 0xa}, {0x5, 0x5, 0xb, 0x3}], 0x10, 0x3}, 0x94) socket$inet6_sctp(0xa, 0x5, 0x84) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x19}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r5, &(0x7f0000000000), &(0x7f00000006c0)=""/73, 0x4}, 0x20) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) (async) bind$bt_hci(r6, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r6, &(0x7f0000000340)="18000000010005", 0x7) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000100)=ANY=[@ANYRESOCT=r0, @ANYRES16=r1, @ANYRESDEC=r0, @ANYRES64=r1, @ANYRESHEX=r0, @ANYBLOB="b55389239f008c4c5a7e65353f52", @ANYBLOB="a55dc2965aee0a39e49632966ad6c815d4272c500feef2cc4f59e5e71d1a85e379921379c14bf96bc1373568e0d2e03633c6694ac4f214412396b3cdba24f5fe8765b5e1857c5562137851eb6ba50b692ef16e140952c6c3bc9a9afa330b3cfc6e123bb3a634fd9a29c498bb66afed55f5e35e61dbf46633569f3eabbfe658275cd2edb04cc8a71b10344df34ad23de4f505939fa827b3b9810bfc0ea9e24ec009c2b2ff85301a739f9ec3546931ba974a92bb940956a7d1", @ANYRESDEC=r6, @ANYRES16=r0, @ANYRES64=0x0, @ANYBLOB="edc30c84ed23e1c62f0b13b17010081226afc523b79a0a39b6744e38d000439f6042a6c21e62d391c3a3aa979273d3f38a82cc14167fab4818541966b2e83c384b834c86551b2fd5f37029e212221186e41669ea657ebcf4864e50434d48274db886b732a0d22644c53a12231c7329098b10b339f0db5b7b0bb7a4a0f638722f39ece87c8e6732ba8f0407cbf2b93ad93a564d0b992a7463f459582121466b43d17a592acd193209a9850bc744ead8a753bd08100906130e2f207e8fb02bc919c92f3754ca2d9dad", @ANYRESDEC=r2, @ANYRES64=r0, @ANYRES32=r0], 0x7c}, 0x1, 0x0, 0x0, 0x20004040}, 0x20008020) (async) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000100)=ANY=[@ANYRESOCT=r0, @ANYRES16=r1, @ANYRESDEC=r0, @ANYRES64=r1, @ANYRESHEX=r0, @ANYBLOB="b55389239f008c4c5a7e65353f52", @ANYBLOB="a55dc2965aee0a39e49632966ad6c815d4272c500feef2cc4f59e5e71d1a85e379921379c14bf96bc1373568e0d2e03633c6694ac4f214412396b3cdba24f5fe8765b5e1857c5562137851eb6ba50b692ef16e140952c6c3bc9a9afa330b3cfc6e123bb3a634fd9a29c498bb66afed55f5e35e61dbf46633569f3eabbfe658275cd2edb04cc8a71b10344df34ad23de4f505939fa827b3b9810bfc0ea9e24ec009c2b2ff85301a739f9ec3546931ba974a92bb940956a7d1", @ANYRESDEC=r6, @ANYRES16=r0, @ANYRES64=0x0, @ANYBLOB="edc30c84ed23e1c62f0b13b17010081226afc523b79a0a39b6744e38d000439f6042a6c21e62d391c3a3aa979273d3f38a82cc14167fab4818541966b2e83c384b834c86551b2fd5f37029e212221186e41669ea657ebcf4864e50434d48274db886b732a0d22644c53a12231c7329098b10b339f0db5b7b0bb7a4a0f638722f39ece87c8e6732ba8f0407cbf2b93ad93a564d0b992a7463f459582121466b43d17a592acd193209a9850bc744ead8a753bd08100906130e2f207e8fb02bc919c92f3754ca2d9dad", @ANYRESDEC=r2, @ANYRES64=r0, @ANYRES32=r0], 0x7c}, 0x1, 0x0, 0x0, 0x20004040}, 0x20008020) 408.495932ms ago: executing program 0 (id=7533): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.stat\x00', 0x275a, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) (async) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)={0x64, r2, 0x405, 0x70bd27, 0x25dfdbfe, {}, [{{0x8, 0x1, r3}, {0x48, 0x2, 0x0, 0x1, [{0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r0, 0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_DEFER_SETUP(r4, 0x112, 0x10, &(0x7f0000000040), 0x4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r6 = socket$packet(0x11, 0x3, 0x300) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) (async) r8 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r8, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r8, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x38, 0x10, 0x439, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, 0x69801}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000d0}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001f"], 0x3}}, 0x0) (async) r10 = epoll_create1(0x0) ioctl$FS_IOC_SETFLAGS(r10, 0x40088a01, &(0x7f0000000000)) (async) sendto$packet(r6, &(0x7f00000003c0)="7538736d00ff37838b57f777409f47f488a8bb", 0x13, 0x24044885, &(0x7f0000000000)={0x11, 0x88a8, r9, 0x1, 0x4, 0x6, @broadcast}, 0x14) (async) r11 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r11, 0x107, 0xe, &(0x7f0000000000)=0xd938, 0x4) (async) r12 = socket$netlink(0x10, 0x3, 0x4) sendmsg$NFULNL_MSG_CONFIG(r12, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, 0x1, 0x4, 0x201, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000c84}, 0x4040000) write(r12, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) (async) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x5c, 0x2, 0x6, 0x201, 0x0, 0x0, {0xc}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x60000}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x5c}}, 0x4020) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r13, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000000)=ANY=[@ANYRES32=r13, @ANYRESDEC=r13, @ANYBLOB="ad48c80ade3fef2298161cb9c9bb7f8d00fa909e0b4491b07c685036fe06c206633cd10049c2040745379f33d9409789018c1573079b06a90f079aab2fe08625f3bb05605bd901e2a11a14db51d61e1199aa8587343fe990fd862d7c1aa767435f9e2646a9b35430a42eda0f0ff19e54b5aadc6b6908531abf61009d30"], 0x9c}, 0x1, 0x0, 0x0, 0x20008801}, 0x20040000) 373.434938ms ago: executing program 3 (id=7534): getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000580)={0x0, @in6={{0xa, 0x4e23, 0x1000, @mcast2, 0x1}}, [0x5, 0x4a, 0xfffffffffffffffc, 0x9, 0x7, 0x6, 0x7fff, 0x200000000000, 0x7, 0x0, 0x2, 0xffffffffffffffff, 0x7be, 0xe, 0x100000000]}, &(0x7f0000000440)=0x100) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x4c, &(0x7f0000000000)={0x0, 0x0}, 0x10) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, &(0x7f00000006c0)={0x0, @in6={{0xa, 0x4e23, 0xc4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xa23}}, 0x9, 0xc4, 0x8, 0xff, 0x2}, &(0x7f0000000780)=0x98) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000480)={r0, 0x1}, &(0x7f0000000680)=0x8) r2 = socket$inet6(0xa, 0x3, 0x2f) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000140)={{{@in6=@private0={0xfc, 0x0, '\x00', 0x4}, @in=@empty, 0x0, 0xfffe, 0x4, 0x0, 0x2, 0x80}, {0xfffffffffffffff7, 0x4, 0x9139, 0x2, 0xffffffffffffffff, 0x100000000f42, 0x8}, {0xfffffffffffffffe, 0x0, 0xa7, 0xc}, 0x0, 0x0, 0x1, 0x0, 0x4}, {{@in6=@ipv4={'\x00', '\xff\xff', @broadcast}, 0x0, 0x6c}, 0x0, @in=@remote, 0x34ff, 0x0, 0x3, 0x4, 0xfffffffb, 0x0, 0x21}}, 0xe8) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000004c0)={0x8c, r4, 0x1, 0xffffffff, 0x0, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x121}, @NBD_ATTR_SOCKETS={0x58, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r5}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r5}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r5}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r5}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r6}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r5}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r5}}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, 0x0) sendmsg$NBD_CMD_CONNECT(r7, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000002c0)={0x2c, r8, 0x1, 0xffffffff, 0x0, {}, [@NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}]}, 0x2c}}, 0x20000000) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0xfffffffffffffd53) r9 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r9, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x20) connect$l2tp6(r9, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x3}, 0x20) r10 = socket$qrtr(0x2a, 0x2, 0x0) r11 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r11, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write(r11, &(0x7f0000000080)="29000300010003", 0x7) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000007c0)=ANY=[@ANYBLOB="2c0000001e003900000002000001000000000008000d00"/50], 0x2c}, 0x1, 0x0, 0x0, 0x2}, 0x0) sendmsg$sock(r9, &(0x7f0000000380)={&(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x0, r10, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x3}}, 0x80, &(0x7f0000000100)=[{&(0x7f00000000c0)="4583", 0x2}, {&(0x7f0000000240)="d2fca74c665017be3974a0765687bfd9afcecf46ac945ed85d3a17cc765b87211380ee27845a1c9830c43fbe204611b385ea191040e88f5f19b748e925536b85ae92d7bf85056cccb084b890f12f619a27eaa771830fc41fbcf0bbae4f48e49dfed776376bffc0e2d96cf0b13b4064711090e31d2495408acd611a", 0x7b}, {&(0x7f00000002c0)="f7877eab44420270c8749c4d74e0512ef807f79fdf67fe20a67236ae51833d0b825f12a7023b870082c21989830753d2bd118961e9ee551ea658932fb6802ae0c6f4b67a78a22ba545ec0883f6ffdc1e3a4e9f4010cf9e228262adf6c0bc0bb2d6726155e7f8f041573f5a620bd9c1be4a1654827f7fc4c00998e3f5200556dc8ce7cb6c5bee9b46a69f31f431", 0x8d}], 0x3}, 0x24004091) 372.491039ms ago: executing program 4 (id=7535): r0 = socket$inet6(0xa, 0x5, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000080)={r1, 0x0, 0x0}, 0x20) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'hsr0\x00', 0x0}) sendto$packet(r2, 0x0, 0x0, 0x1, &(0x7f0000000200)={0x11, 0x8100, r3, 0x1, 0x5, 0x6, @multicast}, 0x14) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f00000006c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x43}}, 0x10) sendmmsg$inet(r4, &(0x7f0000000840)=[{{&(0x7f0000000c00)={0x2, 0x4e22, @multicast2}, 0x10, 0x0}}], 0x1, 0x2000c044) sendto$inet(r4, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r5, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}}}, 0x108) setsockopt$inet6_group_source_req(r5, 0x29, 0x2f, &(0x7f0000000500)={0x0, {{0xa, 0x4e20, 0x0, @mcast1={0xff, 0x7}, 0x7}}, {{0xa, 0x2002, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xffffffff}}}, 0x108) setsockopt$inet6_group_source_req(r5, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x4e21, 0xfffffffd, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0xfffffffc, @local}}}, 0x108) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}, @in={0x2, 0x0, @private=0xc0586300}, @in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @in6={0xa, 0x4e23, 0x10, @mcast1}], 0x64) r6 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/time_for_children\x00') r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106(gcm(aes))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f00000009c0)="ad56b6c5820fae9d6dcd3292ea54c7be8bbdadbb1632ea5704cae881ef915d374c90c200", 0x24) r8 = accept4(r7, 0x0, 0x0, 0x800) sendmmsg$alg(r8, &(0x7f0000005f80)=[{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000280)="ab219ff417490221c2d955b8fcc2ed4d", 0x10}], 0x1, 0x0, 0x0, 0x800}], 0x1, 0x80) recvmsg$qrtr(r8, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000700)=""/192, 0xc0}], 0x1, 0x0, 0x0, 0x10000}, 0x38, 0x2) ioctl$EXT4_IOC_SETFSUUID(r6, 0x4008662c, 0x0) 220.804527ms ago: executing program 6 (id=7536): r0 = accept4(0xffffffffffffffff, &(0x7f0000000000)=@x25, &(0x7f0000000080)=0x80, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x4e20, 0xc00000, @initdev={0xfe, 0x88, '\x00', 0x3, 0x0}, 0x1}}, 0x1, 0x3}, &(0x7f0000000180)=0x90) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f00000001c0)={r1, 0x8c, "ef7fd6e1d38a9b8c40773fa388e47e04f54cb77a0bd3355c8af23e59330e595b3ad0435a3c06f58d336e1c8680540a3229c825cf77b1dfaff59cbc0cbc118cf8d10cb0eb85fcc9dd562fcc88849d31dc7fdbacddc555b12e5e6606ec372ea71f62ebb380f4431c7280ec34ec6171484e20d2484f2f7d8b00faf60038c8be1beaf34181ba44ee57a41c0399b5"}, &(0x7f0000000280)=0x94) r3 = bpf$ITER_CREATE(0x21, &(0x7f00000002c0), 0x8) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000380)={'syztnl2\x00', &(0x7f0000000300)={'ip_vti0\x00', 0x0, 0x700, 0x7800, 0x10001, 0x3, {{0xd, 0x4, 0x2, 0x5, 0x34, 0x64, 0x0, 0x9, 0x0, 0x0, @loopback, @loopback, {[@timestamp_addr={0x44, 0x1c, 0x31, 0x1, 0x2, [{@rand_addr=0x64010102}, {@multicast1, 0xffff660e}, {@broadcast, 0x90c4}]}, @noop, @end, @end, @end]}}}}}) setsockopt$packet_drop_memb(r3, 0x107, 0x2, &(0x7f00000003c0)={r4, 0x1, 0x6, @multicast}, 0x10) getsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000400)={r1, 0xfffffff7}, &(0x7f0000000440)=0x8) setsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000480)=@assoc_value={r5, 0xe}, 0x8) setsockopt$SO_J1939_FILTER(r3, 0x6b, 0x1, &(0x7f00000004c0)=[{0x0, 0x1, {0x1, 0xff, 0x3}, {0x0, 0x1, 0x3}, 0xfe, 0xfe}, {0x2, 0x2, {0x1, 0xff, 0x3}, {0x2, 0x0, 0x3}, 0xfe, 0x1}, {0x1, 0x1, {0x2, 0x1, 0x2}, {0x2, 0x0, 0x3}, 0x1, 0x2}, {0x1, 0x0, {0x1, 0xff}, {0x1, 0xff, 0x2}, 0xfd}, {0x1, 0x0, {0x2, 0x0, 0x4}, {0x2, 0x0, 0x4}, 0x1, 0xfe}, {0x2, 0x3, {0x1, 0xf0, 0x2}, {0x2, 0x1, 0x3}, 0x2, 0x1}, {0x2, 0x2, {0x2, 0xff, 0x4}, {0x0, 0x0, 0x7}, 0xfe, 0x2}], 0xe0) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f00000005c0)={r5, @in6={{0xa, 0x4e23, 0x3, @mcast2, 0x3}}, [0x80000000, 0x8, 0x7, 0x8000000000000001, 0x5, 0xfff, 0xd526, 0x6, 0x4, 0x6, 0x6, 0x1, 0xffffffffffffe189, 0x6, 0x67c2]}, &(0x7f00000006c0)=0x100) r6 = socket(0x21, 0x8462e4ba77fb2182, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000700), r3) getsockname(r0, &(0x7f0000000740)=@sco={0x1f, @fixed}, &(0x7f00000007c0)=0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a00)={r3, 0x0, 0x8f, 0x4, &(0x7f0000000800)="632d15488a7e90b28789cb5d59d579cb3203283861d5ba91546070390aac99389426b517e379122412ff51c041b98763eb53da1b00fc0643b7588c36d3ea7e66f2fa46704e8a5caf7108c8d1aba9ff3045a7a8344bb5127bf72aca640550cc7b00f69086f0cb9ca1bfa5938af9177297c75b4470448612d436f48227ecf080d95b5acf7ea5d8b81891ca3facc77109", &(0x7f00000008c0)=""/4, 0x1, 0x0, 0x26, 0xa6, &(0x7f0000000900)="13267784266b2ebae331acdd93a398d170a869e52ea86906e66fe8626e1fbeb153185dd8da44", &(0x7f0000000940)="cd5b6e0f8b979ac3ed3a9e46d8fba2cace662839e1d492868ac839bd6ee4438e2715f34599148cb5f1b13bc35de99cc642b31b1aa3c63d47066d737e7837bac97cc1617e5159a68f063f49420e1301402163ac265da969d1a610034ef07e2594d97359961d67c27be4d5f91c61266a2572592e350a5c546996e6cf121547c5d4e68ba12284b3ed385055ee9f09764a1d8e8551782ca30ba24d2b4ae2898d266d217a7e3d014a", 0x2, 0x0, 0x2}, 0x50) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000a80), &(0x7f0000000ac0)=0x4) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r3, 0x84, 0x79, &(0x7f0000000b00)={r2, 0x961b, 0x5}, 0x8) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r3, 0x84, 0xc, &(0x7f0000000b40)=0xf, 0x4) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_ULP(r7, 0x6, 0x1f, &(0x7f0000000b80), 0x3) ioctl$BTRFS_IOC_TREE_SEARCH(r6, 0xd0009411, &(0x7f0000000bc0)={{0x0, 0xfffffffffffffffc, 0x7, 0x10, 0x400, 0x401, 0x7, 0x8, 0x2, 0x9, 0x3, 0x10000, 0x4, 0x7d0, 0xe}}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r7, 0xc0709411, &(0x7f0000001bc0)={{r8, 0x10001, 0x8, 0x10000000, 0x2, 0xffffffffffffffff, 0x9, 0xe, 0x4, 0x2, 0x4, 0x3b, 0x599f, 0x80, 0x2}, 0x10, [0x0, 0x0]}) sendmsg$nl_route_sched_retired(r3, &(0x7f0000001ec0)={&(0x7f0000001c40)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001e80)={&(0x7f0000001c80)=@newchain={0x1c8, 0x64, 0x1, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0xf, 0x9}, {0xffe0, 0xd}, {0xfff1, 0xa}}, [@f_rsvp={{0x9}, {0xc, 0x2, [@TCA_RSVP_DST={0x8, 0x2, @local}]}}, @f_tcindex={{0xc}, {0x168, 0x2, [@TCA_TCINDEX_FALL_THROUGH={0x8}, @TCA_TCINDEX_ACT={0x154, 0x7, [@m_nat={0x150, 0xb, 0x0, 0x0, {{0x8}, {0x54, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0xac, 0x6, 0xffffffffdffffffb, 0x8, 0xffffff3e}, @multicast1, @empty, 0xff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x3, 0x1ff, 0x1, 0x94c3, 0x400}, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2}}]}, {0xd5, 0x6, "f293ed1db530adc5c4123e608c9484d2e703f4f141d2506bc2ff1a6da191d18fb2a8d093bb43255fbbd17457d17320130f923053b09da70ea18c8d046a0d7878967b13774dd5543c3612be8946d4882fb5ed5f6f25d413e139444cbe24cc0e71c4ad47a3cb75fe30b4d84e1fc43a1138da56dbf3b7fa3d36422ae860a9d2505578357446183631ad793d8be5b926e071d5f323737f0af7b6256d1c59dde36a28030ca0f6dcd09d02fd46f2be55eb8774916498582b5284edfeaca0bc6fbe358a488579b79dcb60ed9510331ce314818782"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2}}}}]}, @TCA_TCINDEX_CLASSID={0x8, 0x5, {0x9, 0x6}}]}}, @f_rsvp={{0x9}, {0xc, 0x2, [@TCA_RSVP_DST={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x1d}}]}}]}, 0x1c8}, 0x1, 0x0, 0x0, 0x20000081}, 0x20000000) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r0, 0x84, 0x1c, &(0x7f0000001f00), &(0x7f0000001f40)=0x4) accept$inet6(r0, &(0x7f0000001f80)={0xa, 0x0, 0x0, @local}, &(0x7f0000001fc0)=0x1c) socketpair(0x28, 0x5, 0x9, &(0x7f0000002000)={0xffffffffffffffff, 0xffffffffffffffff}) write$nbd(r9, &(0x7f0000002040)={0x67446698, 0x0, 0x1, 0x4, 0x4, "5619bfb3c6de1027a1c2e208a1d113ddc9e60cff7dc6e7f2f3d6e054ca9ab082efbb8bd0183fc9bdc5e1477bf2a5211bcf3a116969b1b21356788d55cdb142fcdb9e4857c6f711fef9d686c0b624b312db49e9459a5471576006f1972b83aedd2d952fa690dc2c1af467f2b3ed8a3db17b94811977ed3f3887a7f2efee6437c865db58191f1e1e47bc32c4d3d91618d4161bcc6df3e5a19a2de1466bebea7d6b32c11343f4a6be5bee3f0190b3926baed8c29dcb0669d46ac82cb9372289faf5392bc62604b3d99f01584e8e14d0f525544f2e47"}, 0xe4) getsockname$packet(r10, &(0x7f0000002140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000002180)=0x14) pipe(&(0x7f00000021c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000002200)={r3, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000002600)=@bpf_ext={0x1c, 0x36, &(0x7f0000002240)=@framed={{0x18, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x800}, [@cb_func={0x18, 0x9, 0x4, 0x0, 0x1}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @ldst={0x2, 0x2, 0x1, 0x5, 0x1, 0x120a4dd1ad50466e}, @cb_func={0x18, 0x9, 0x4, 0x0, 0x4}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r11}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r12}}, @func={0x85, 0x0, 0x1, 0x0, 0x8}, @exit, @printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xb}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x800}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, &(0x7f0000002400)='syzkaller\x00', 0x25, 0x79, &(0x7f0000002440)=""/121, 0x41000, 0x69, '\x00', r4, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000002500)={0x3, 0x1}, 0x8, 0x10, &(0x7f0000002540)={0x5, 0x6, 0x4, 0x9}, 0x10, 0x211a0, r3, 0x4, &(0x7f0000002580)=[r3], &(0x7f00000025c0)=[{0x0, 0x1, 0x6, 0x8}, {0x0, 0x4, 0x1, 0x3ac4364b244c52e1}, {0x2, 0x1, 0x5, 0x2}, {0x5, 0x3, 0xb, 0x7}], 0x10, 0x3}, 0x94) 206.058533ms ago: executing program 7 (id=7537): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newtaction={0x78, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x64, 0x1, [@m_tunnel_key={0x60, 0x401, 0x0, 0x0, {{0xf}, {0x30, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0xd, @multicast1}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @empty}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x22000000}, 0x0) r0 = socket$inet6_sctp(0xa, 0x0, 0x84) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c00000046000701fcffffff0200000001"], 0x1c}, 0x1, 0x0, 0x0, 0x488c4}, 0xc000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newtaction={0x78, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x64, 0x1, [@m_tunnel_key={0x60, 0x401, 0x0, 0x0, {{0xf}, {0x30, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0xd, @multicast1}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @empty}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x22000000}, 0x0) (async) socket$inet6_sctp(0xa, 0x0, 0x84) (async) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000000), &(0x7f0000000040)=0x4) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c00000046000701fcffffff0200000001"], 0x1c}, 0x1, 0x0, 0x0, 0x488c4}, 0xc000) (async) 205.325751ms ago: executing program 0 (id=7538): r0 = socket$inet6(0xa, 0x2, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$TUNSETLINK(r1, 0x400454cd, 0x306) close(r2) (async) socket(0x2, 0x5, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1f}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x169}]}, @NFT_MSG_NEWSETELEM={0x2c, 0xe, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0xb8}}, 0x0) r4 = socket$unix(0x1, 0x2, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a300000000050000000060a010400000000000000000100000808000b400000000028000480240001800b0001007470726f7879000014000280080003400000000a08000140000000420900010073797a30"], 0xc4}}, 0x4008800) (async) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) (async, rerun: 32) sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newtfilter={0xac, 0x2c, 0xd27, 0x70bd2d, 0x25dfdc00, {0x0, 0x0, 0x0, r9, {0x0, 0x3}, {}, {0xfff3, 0xffe0}}, [@filter_kind_options=@f_u32={{0x8}, {0x80, 0x2, [@TCA_U32_SEL={0x74, 0x5, {0x5, 0x6, 0x6, 0x5, 0x400, 0x2, 0x1, 0xc, [{0x8, 0x9df8, 0x5, 0xfffffffe}, {0xfff, 0xabac, 0x5d9, 0x6}, {0x7365, 0x200, 0x2, 0x3}, {0xaa2, 0x80000000, 0xc06f, 0x8001}, {0x9, 0x8001, 0x80, 0x7ff}, {0x10c00, 0x23e, 0x10000, 0x2}]}}, @TCA_U32_CLASSID={0x8, 0x1, {0x1, 0xfff3}}]}}]}, 0xac}, 0x1, 0x0, 0x0, 0x50}, 0x0) (async, rerun: 32) r10 = socket(0x400000000010, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r12 = socket(0x2, 0x3, 0x9) bind$inet(r12, 0x0, 0x0) (async) sendmmsg$inet(r12, &(0x7f0000004780)=[{{&(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10, 0x0}}, {{&(0x7f00000031c0)={0x2, 0x0, @broadcast}, 0x10, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000fcff00"], 0x18}}], 0x2, 0x0) (async) sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x25dddbfd, {0x0, 0x0, 0x0, r11, {0x0, 0xffff}, {0xffff, 0xffff}, {0x1, 0xd}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'team_slave_0\x00'}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmmsg$inet(r0, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r13, @dev={0xac, 0x14, 0x14, 0x41}, @empty}}}], 0x20}}], 0x1, 0x8000004) 181.371821ms ago: executing program 4 (id=7539): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x3, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="18020011387ffab3d10e0f181100003586e59059f347b9ebbca2dfbe10230042f3919b9cf52a4ae4c31de3bf607dd5cbc2f49af871884f17be62c93e22f5766f54", @ANYRESDEC=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000880000009500000000000000"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) r2 = socket$rxrpc(0x21, 0x2, 0x143f352d8f095e4b) setsockopt$RXRPC_SECURITY_KEYRING(r2, 0x110, 0x2, &(0x7f0000000100)=')*\\^%+,!/^\x00', 0xffe6) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0xfffffffffffffda3, &(0x7f0000000180)={&(0x7f0000000200)=@delnexthop={0x20, 0x69, 0xb, 0x0, 0x0, {}, [{0x8, 0x1, 0x1}]}, 0x20}}, 0x4000000) 62.848085ms ago: executing program 4 (id=7540): r0 = socket$packet(0x11, 0x2, 0x300) (async) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=@bridge_setlink={0x38, 0x13, 0x1, 0x70bd2f, 0x25cfdbfd, {0x7, 0x0, 0x68, r2, 0x6015a, 0x28}, [@IFLA_LINKINFO={0x18, 0x1a, 0x0, 0x1, @vlan={{0x9}, {0x8, 0x4, 0x0, 0x1, [@IFLA_VLAN_EGRESS_QOS={0x4}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20}, 0x50) (async) socketpair(0xf, 0x2, 0x6, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$packet_int(r4, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x22) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000180)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x2}, 0x1c) r5 = socket$packet(0x11, 0x2, 0x300) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000500)={@map, 0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) (async) getsockopt$bt_BT_DEFER_SETUP(r6, 0x12, 0x2, 0x0, &(0x7f0000000200)) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) sendto$packet(r5, &(0x7f0000000200)="a0d5bbd09bf7", 0x6, 0x8084, &(0x7f0000000080)={0x11, 0x8100, r7, 0x1, 0x7, 0x6, @local}, 0x14) 34.137592ms ago: executing program 4 (id=7541): r0 = socket(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0xc8, &(0x7f0000000000)=0x1, 0x4) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r1, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) r3 = accept4(r1, 0x0, 0x0, 0x8c10f2cb92f880dd) sendto(r3, &(0x7f0000000180)='+', 0x1, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f0000005cc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000004400)=""/211, 0xd3}}, {{0x0, 0x0, &(0x7f0000004600), 0x2}}, {{0x0, 0x0, &(0x7f0000005c40)=[{0x0, 0x7}], 0x1}}], 0x3, 0x0, &(0x7f0000005ec0)={0x0, 0x3938700}) writev(r2, &(0x7f0000000440)=[{&(0x7f0000000240)='I', 0x1}], 0x1) setsockopt$inet6_int(r0, 0x29, 0xd1, &(0x7f0000000040)=0x20f, 0x4) r4 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x6f, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e22, @local}}}, &(0x7f0000000180)=0x9c) r6 = socket$packet(0x11, 0x3, 0x300) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r8, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r8, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="38000000100039c10ea86edf96a8f625008c2300", @ANYRES32=r9, @ANYBLOB="0198060000000000180012800b00010069703667726500000800028004001200"], 0x38}, 0x1, 0x0, 0x0, 0x40000d0}, 0x0) sendto$packet(r6, &(0x7f0000000400)="7538736d00ff37838b57f777409f7df4a05c55d700230c89360a8ba1b83da54696815fe2f20234ad5e05d5b1aa45314d87b3569973e027b6f4bb1473c0b9a849ed0d78e0fffb0b8611a79fad6d458543db1d43977520a7ba5ce9b4d14cdd18fd", 0x60, 0x24044885, &(0x7f0000000000)={0x11, 0x88a8, r9, 0x1, 0xfe, 0x6, @broadcast}, 0x14) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="180200000000000000000000000000008500000027000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000080)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r10, 0x0, 0xe, 0x0, &(0x7f0000000000)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r11, 0x0) r12 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"/317], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0xb, 0x8}, 0x10}, 0x94) r13 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="1200000004000000040000001200000000000000", @ANYRES32, @ANYBLOB="000000004df94370fd36f73112aa9d00000fd1ef", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000880)=ANY=[@ANYRES32=r13, @ANYRES32=0x0, @ANYRESHEX=r5, @ANYRESHEX=r4, @ANYBLOB="f41cc1146ff8000000004ca54d00000000000000070a4d8453d5be1135385541fff7040029cef8e944c00d1049e8c3b2c6f4435dd0a77500", @ANYRES64=r12], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000680)={r13, &(0x7f0000000500)="2224fe677165678b0d7089f204877ea7cfa4c16f38f7ff28559e4886a7bee6a9c2b38e00a1bf0e294f6e7bac79bc9d7fbb5ba5eaee0b99b6de40d5c9ab1cd88e7f267bbf9f6d93a1c0b7ba36fff41d2927b32d668efe0f9815af44f9d73a2977a5386fe2f1a3d432ed527c7eb95dd922a2eb14d4f9ce6c13e93fc8bf328ddba14e60a858ed758bc6518078bac68d2541f7b3233c1ef843b632420b4adeb22d0e3f6327ee6b934549a230ce894fb3548ee07bff3814682ebcdf0f", &(0x7f0000000a40)=@tcp6=r11}, 0x20) recvmmsg(r11, &(0x7f0000000280)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000b80)=""/4119, 0xf72}], 0x1}}], 0x1, 0x140, 0x0) 0s ago: executing program 0 (id=7542): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0x8, 0x70bd20, 0x25dfdbff, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24004864}, 0x4c000) kernel console output (not intermixed with test programs): _CT: No such helper "pptp" [ 458.462679][T24271] netlink: 'syz.3.5362': attribute type 2 has an invalid length. [ 458.624741][T24291] nftables ruleset with unbound chain [ 459.151677][T24326] netlink: 'syz.6.5375': attribute type 1 has an invalid length. [ 459.244448][T24326] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 459.256240][T24326] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 459.348836][T24340] bond1: (slave gretap2): making interface the new active one [ 459.358416][T24340] bond1: (slave gretap2): Enslaving as an active interface with an up link [ 459.389158][T24326] macvlan2: entered promiscuous mode [ 459.394636][T24326] macvlan2: entered allmulticast mode [ 459.734428][T24371] openvswitch: netlink: IP tunnel dst address not specified [ 459.825572][T24379] __nla_validate_parse: 14 callbacks suppressed [ 459.825588][T24379] netlink: 68 bytes leftover after parsing attributes in process `syz.7.5387'. [ 459.857959][T24379] netlink: 68 bytes leftover after parsing attributes in process `syz.7.5387'. [ 459.886426][T24379] netlink: 68 bytes leftover after parsing attributes in process `syz.7.5387'. [ 459.902354][T24379] netlink: 68 bytes leftover after parsing attributes in process `syz.7.5387'. [ 459.912217][T24379] netlink: 68 bytes leftover after parsing attributes in process `syz.7.5387'. [ 459.956814][T24379] netlink: 68 bytes leftover after parsing attributes in process `syz.7.5387'. [ 459.968658][T24379] netlink: 68 bytes leftover after parsing attributes in process `syz.7.5387'. [ 460.005927][T24386] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5392'. [ 460.022968][T24379] netlink: 68 bytes leftover after parsing attributes in process `syz.7.5387'. [ 460.060061][T24379] netlink: 68 bytes leftover after parsing attributes in process `syz.7.5387'. [ 460.336748][T24401] netem: unknown loss type 0 [ 460.354859][T24401] netem: change failed [ 460.936676][T24443] x_tables: duplicate underflow at hook 2 [ 461.128066][T24452] tipc: Enabled bearer , priority 0 [ 461.148418][T24452] syzkaller0: entered promiscuous mode [ 461.160059][T24452] syzkaller0: entered allmulticast mode [ 461.212635][T24452] tipc: Resetting bearer [ 461.219239][T24452] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 461.227735][T24452] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 461.294129][T24451] tipc: Resetting bearer [ 461.330544][T24451] tipc: Disabling bearer [ 461.447513][T24486] netlink: 'syz.7.5425': attribute type 9 has an invalid length. [ 461.541598][T24484] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 461.679093][T24501] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 461.764735][T24508] netlink: 'syz.7.5429': attribute type 1 has an invalid length. [ 461.819738][T24508] bond2: (slave gretap3): making interface the new active one [ 461.831806][T24508] bond2: (slave gretap3): Enslaving as an active interface with an up link [ 461.917171][T24514] syzkaller0: entered promiscuous mode [ 461.922655][T24514] syzkaller0: entered allmulticast mode [ 461.932713][T24512] veth1_macvtap: left promiscuous mode [ 461.938603][T24512] macsec0: entered promiscuous mode [ 461.943816][T24512] macsec0: entered allmulticast mode [ 461.953713][T24512] veth1_macvtap: entered promiscuous mode [ 461.959612][T24512] veth1_macvtap: entered allmulticast mode [ 461.965718][T24512] macsec0: left promiscuous mode [ 461.970779][T24512] macsec0: left allmulticast mode [ 461.975920][T24512] veth1_macvtap: left allmulticast mode [ 462.345492][T24536] SET target dimension over the limit! [ 462.382206][T24531] bond3: entered promiscuous mode [ 463.462542][T24588] netlink: 'syz.7.5453': attribute type 1 has an invalid length. [ 463.501590][T24587] bond5: (slave vxcan3): The slave device specified does not support setting the MAC address [ 463.513452][T24587] bond5: (slave vxcan3): Error -95 calling set_mac_address [ 463.563984][T24590] macvlan0: entered promiscuous mode [ 463.591666][T24590] macvlan0: entered allmulticast mode [ 463.599678][T24590] bond5: (slave macvlan0): Error -98 calling set_mac_address [ 463.802383][T24611] netlink: 'syz.7.5458': attribute type 39 has an invalid length. [ 463.914894][T24615] bond6: (slave vxcan1): The slave device specified does not support setting the MAC address [ 463.928537][T24615] bond6: (slave vxcan1): Error -95 calling set_mac_address [ 463.972549][T24613] macvlan0: entered promiscuous mode [ 463.983601][T24613] macvlan0: entered allmulticast mode [ 463.991919][T24613] bond6: (slave macvlan0): Error -98 calling set_mac_address [ 464.339879][T24650] SET target dimension over the limit! [ 464.341456][T24649] delete_channel: no stack [ 464.372308][T24649] netlink: 'syz.4.5471': attribute type 20 has an invalid length. [ 464.412649][T24649] netlink: 'syz.4.5471': attribute type 20 has an invalid length. [ 464.778245][T24693] netlink: 'syz.7.5481': attribute type 4 has an invalid length. [ 465.104322][T24720] __nla_validate_parse: 126 callbacks suppressed [ 465.104340][T24720] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5489'. [ 465.107689][T24723] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5490'. [ 465.140417][T24720] lo: entered allmulticast mode [ 465.153387][T24718] lo: left allmulticast mode [ 465.293743][T24734] netlink: 'syz.0.5494': attribute type 2 has an invalid length. [ 465.359624][T24741] netlink: 'syz.6.5499': attribute type 29 has an invalid length. [ 465.381138][T24741] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5499'. [ 465.627825][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 465.665008][T24759] netlink: 'syz.3.5507': attribute type 13 has an invalid length. [ 466.040607][T24781] netlink: 44 bytes leftover after parsing attributes in process `syz.4.5512'. [ 466.072617][T24781] netlink: 43 bytes leftover after parsing attributes in process `syz.4.5512'. [ 466.084083][T24781] netlink: 'syz.4.5512': attribute type 5 has an invalid length. [ 466.116638][T24781] netlink: 43 bytes leftover after parsing attributes in process `syz.4.5512'. [ 466.128437][T24789] netlink: 20 bytes leftover after parsing attributes in process `syz.6.5516'. [ 466.322854][T24807] netlink: 'syz.6.5521': attribute type 1 has an invalid length. [ 466.338008][T24807] netlink: 224 bytes leftover after parsing attributes in process `syz.6.5521'. [ 466.368464][T24807] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5521'. [ 466.866017][T24813] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5523'. [ 467.305082][T24892] netlink: 'syz.7.5536': attribute type 18 has an invalid length. [ 467.337655][T24888] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 467.438677][T24898] dvmrp0: entered allmulticast mode [ 467.459733][T24898] dvmrp0: left allmulticast mode [ 467.519548][T24901] tipc: Enabling of bearer rejected, failed to enable media [ 467.530752][T24906] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 467.929146][T24938] sctp: [Deprecated]: syz.7.5552 (pid 24938) Use of int in maxseg socket option. [ 467.929146][T24938] Use struct sctp_assoc_value instead [ 467.953216][T24938] xt_NFQUEUE: number of total queues is 0 [ 468.028046][ T5834] Bluetooth: hci4: command 0x0405 tx timeout [ 468.151638][T24944] team0: No ports can be present during mode change [ 468.833750][T24998] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 469.330644][T25016] nftables ruleset with unbound set [ 469.489391][T25027] validate_nla: 8 callbacks suppressed [ 469.489407][T25027] netlink: 'syz.6.5579': attribute type 1 has an invalid length. [ 469.878768][T25061] xfrm1: entered allmulticast mode [ 470.116297][ T5831] Bluetooth: hci4: command 0x0405 tx timeout [ 470.199626][T25096] __nla_validate_parse: 22 callbacks suppressed [ 470.199644][T25096] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5596'. [ 470.261150][T25101] bridge2: the hash_elasticity option has been deprecated and is always 16 [ 471.083220][T25124] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5604'. [ 471.218411][T25138] netlink: 'syz.3.5609': attribute type 1 has an invalid length. [ 471.555354][T25161] pim6reg1: entered promiscuous mode [ 471.574199][T25161] pim6reg1: entered allmulticast mode [ 471.921092][T25179] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5619'. [ 471.930559][T25179] netlink: 'syz.3.5619': attribute type 22 has an invalid length. [ 471.939472][T25179] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5619'. [ 472.007314][T25179] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5619'. [ 472.035479][T25179] netlink: 'syz.3.5619': attribute type 22 has an invalid length. [ 472.043476][T25179] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5619'. [ 472.238492][T25192] netlink: 48 bytes leftover after parsing attributes in process `syz.0.5624'. [ 472.288685][T25193] netlink: 48 bytes leftover after parsing attributes in process `syz.0.5624'. [ 472.488282][T25209] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 472.773374][T25222] netlink: 44 bytes leftover after parsing attributes in process `syz.0.5631'. [ 472.800775][T25216] syzkaller0: entered promiscuous mode [ 472.807334][T25216] syzkaller0: entered allmulticast mode [ 472.879452][T25223] delete_channel: no stack [ 473.166773][T25242] netlink: 'syz.4.5634': attribute type 62 has an invalid length. [ 473.296263][T25248] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5637'. [ 473.457161][T25267] xt_CT: You must specify a L4 protocol and not use inversions on it [ 473.583862][T25275] chnl_net:caif_netlink_parms(): no params data found [ 473.593315][T25279] netlink: 'syz.3.5645': attribute type 1 has an invalid length. [ 473.754787][T25288] openvswitch: netlink: Actions may not be safe on all matching packets [ 473.951754][T25299] syzkaller1: entered promiscuous mode [ 473.974318][T25299] syzkaller1: entered allmulticast mode [ 474.206038][T25316] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 474.226689][T25316] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 474.242154][T25323] IPVS: set_ctl: invalid protocol: 11612 172.20.20.11:21 [ 474.456667][T25339] netlink: 'syz.6.5665': attribute type 4 has an invalid length. [ 474.473246][T25339] netlink: 'syz.6.5665': attribute type 4 has an invalid length. [ 474.600062][T25354] bridge5: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 474.782567][T25359] mac80211_hwsim hwsim34 ÿ: renamed from wlan1 [ 474.876445][T25368] netlink: 'syz.7.5671': attribute type 1 has an invalid length. [ 475.092236][T25383] 8021q: VLANs not supported on sit0 [ 475.373232][T25395] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 4032 [ 475.387613][T25394] __nla_validate_parse: 7 callbacks suppressed [ 475.387632][T25394] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5680'. [ 475.498768][T25411] netlink: 'syz.3.5683': attribute type 4 has an invalid length. [ 475.542167][T25402] syzkaller0: entered promiscuous mode [ 475.559920][T25402] syzkaller0: entered allmulticast mode [ 475.633970][T25413] netlink: 'syz.0.5684': attribute type 2 has an invalid length. [ 475.670510][T25413] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5684'. [ 476.069811][T25441] netlink: 64 bytes leftover after parsing attributes in process `syz.0.5693'. [ 476.222359][T25449] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5695'. [ 476.249182][T25449] netlink: 2 bytes leftover after parsing attributes in process `syz.3.5695'. [ 476.439403][T25463] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 476.450358][T25464] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 476.820790][T25484] netlink: 13632 bytes leftover after parsing attributes in process `syz.7.5705'. [ 476.940629][T25490] siw: device registration error -23 [ 477.093918][T25500] netlink: 1196 bytes leftover after parsing attributes in process `syz.3.5711'. [ 477.201787][T25506] netlink: 'syz.7.5713': attribute type 1 has an invalid length. [ 477.232705][T25507] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 477.248337][T25506] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 477.419017][T25520] tipc: Enabling of bearer rejected, failed to enable media [ 477.564567][T25533] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5720'. [ 477.613280][T25543] netlink: 'syz.7.5724': attribute type 1 has an invalid length. [ 477.625120][T25539] netlink: 64 bytes leftover after parsing attributes in process `syz.4.5722'. [ 477.670714][T19083] IPVS: starting estimator thread 0... [ 477.679764][T25542] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 477.729236][T25543] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5724'. [ 477.769549][T25546] bond4: (slave bridge3): making interface the new active one [ 477.782900][T25546] bond4: (slave bridge3): Enslaving as an active interface with an up link [ 477.796093][T25548] IPVS: using max 27 ests per chain, 64800 per kthread [ 477.881402][T25543] vlan2: entered allmulticast mode [ 477.893391][T25543] bond4: entered allmulticast mode [ 477.905763][T25543] bridge3: entered allmulticast mode [ 478.193794][T25566] vlan0: entered promiscuous mode [ 478.200008][T25566] vlan0: entered allmulticast mode [ 478.205691][T25566] hsr_slave_1: entered allmulticast mode [ 478.283738][T25574] netlink: 'syz.3.5734': attribute type 1 has an invalid length. [ 478.296506][T25574] netlink: 'syz.3.5734': attribute type 3 has an invalid length. [ 478.332052][T25574] NCSI netlink: No device for ifindex 813332851 [ 478.524570][T25596] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 478.773624][T25615] xt_CT: You must specify a L4 protocol and not use inversions on it [ 479.460812][T25671] ip6gre3: entered allmulticast mode [ 479.521993][T25674] xfrm2: entered promiscuous mode [ 479.548702][T25674] xfrm2: entered allmulticast mode [ 479.557706][T25674] netlink: 'syz.7.5764': attribute type 2 has an invalid length. [ 479.573316][T25674] : entered promiscuous mode [ 479.986876][T25710] netlink: 'syz.0.5773': attribute type 1 has an invalid length. [ 480.021786][T25710] bond6: (slave gretap2): making interface the new active one [ 480.033442][T25710] bond6: (slave gretap2): Enslaving as an active interface with an up link [ 480.044097][T25710] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 480.196947][T25714] block nbd2: Unsupported socket: should be TCP or UNIX. [ 480.550796][T25727] netlink: 'syz.4.5779': attribute type 1 has an invalid length. [ 480.600308][T25727] bond8: (slave gretap2): making interface the new active one [ 480.608963][T25727] bond8: (slave gretap2): Enslaving as an active interface with an up link [ 480.657320][T25731] __nla_validate_parse: 11 callbacks suppressed [ 480.657332][T25731] netlink: 140 bytes leftover after parsing attributes in process `syz.7.5780'. [ 481.631579][T25754] netlink: 'syz.6.5786': attribute type 1 has an invalid length. [ 481.655819][T25754] 8021q: adding VLAN 0 to HW filter on device bond2 [ 481.680157][T25754] bond2: (slave veth3): Enslaving as an active interface with a down link [ 481.707636][T25754] veth5: entered promiscuous mode [ 481.720616][T25758] syzkaller0: entered promiscuous mode [ 481.726719][T25758] syzkaller0: entered allmulticast mode [ 482.030293][T25769] bridge0: port 1(batadv1) entered blocking state [ 482.045520][T25769] bridge0: port 1(batadv1) entered disabled state [ 482.056074][T25769] batadv1: entered allmulticast mode [ 482.077075][T25769] batadv1: entered promiscuous mode [ 482.149927][T25778] netlink: 84 bytes leftover after parsing attributes in process `syz.7.5792'. [ 482.445342][T25798] xt_bpf: check failed: parse error [ 482.482302][T25803] netlink: 'syz.7.5800': attribute type 1 has an invalid length. [ 482.497040][T25805] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5799'. [ 482.500458][T25804] netlink: 'syz.4.5798': attribute type 1 has an invalid length. [ 482.522955][T25804] netlink: 'syz.4.5798': attribute type 2 has an invalid length. [ 482.543931][T17505] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 482.553267][T17505] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 482.585046][T25810] x_tables: duplicate underflow at hook 2 [ 482.623589][T25807] bond5: (slave bridge4): making interface the new active one [ 482.634786][T25807] bond5: (slave bridge4): Enslaving as an active interface with an up link [ 482.687432][T25804] pim6reg1: entered promiscuous mode [ 482.692757][T25804] pim6reg1: entered allmulticast mode [ 482.828679][T25823] netlink: 16186 bytes leftover after parsing attributes in process `syz.7.5801'. [ 483.179227][T25851] netlink: 'syz.7.5810': attribute type 1 has an invalid length. [ 483.241548][T25851] bond6: entered promiscuous mode [ 483.249520][T25851] 8021q: adding VLAN 0 to HW filter on device bond6 [ 483.300148][T25860] netlink: 'syz.0.5813': attribute type 4 has an invalid length. [ 483.319186][T25861] netlink: 'syz.0.5813': attribute type 4 has an invalid length. [ 483.364089][T25869] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5815'. [ 483.464128][T25877] netlink: 'syz.6.5817': attribute type 4 has an invalid length. [ 483.496815][T25877] veth0: entered promiscuous mode [ 483.531407][T25877] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 483.558005][T25876] veth0: left promiscuous mode [ 483.719367][T25827] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 483.719652][T25884] bond2: peer notification delay (1164) is not a multiple of miimon (100), value rounded to 1100 ms [ 483.727763][T25894] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5822'. [ 483.748153][T25827] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 483.761530][T25884] bond2: entered promiscuous mode [ 483.768004][T25884] bond2: entered allmulticast mode [ 483.801773][T25884] 8021q: adding VLAN 0 to HW filter on device bond2 [ 483.915072][T25909] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5825'. [ 483.974270][T25911] netlink: 132 bytes leftover after parsing attributes in process `syz.4.5827'. [ 484.045679][T25920] tipc: Enabled bearer , priority 0 [ 484.053275][T25920] syzkaller0: entered promiscuous mode [ 484.061476][T25920] syzkaller0: entered allmulticast mode [ 484.111314][T25931] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5831'. [ 484.150545][T25912] tipc: Resetting bearer [ 484.201845][T25912] tipc: Disabling bearer [ 484.245985][T25934] tipc: Enabled bearer , priority 0 [ 484.304755][T25934] syzkaller0: entered promiscuous mode [ 484.311480][T25934] syzkaller0: entered allmulticast mode [ 484.320849][T25941] netlink: 108 bytes leftover after parsing attributes in process `syz.6.5835'. [ 484.340158][T25934] tipc: Resetting bearer [ 484.381162][T25933] tipc: Resetting bearer [ 484.387807][T25940] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 484.445974][T25933] tipc: Disabling bearer [ 485.048591][T25983] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 485.373052][T26002] pim6reg1: entered promiscuous mode [ 485.378805][T26002] pim6reg1: entered allmulticast mode [ 485.501670][T26016] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000 [ 485.827338][T26030] __nla_validate_parse: 7 callbacks suppressed [ 485.827357][T26030] netlink: 56 bytes leftover after parsing attributes in process `syz.3.5867'. [ 485.843849][T26031] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5866'. [ 485.854302][T26031] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5866'. [ 485.863474][T26031] validate_nla: 4 callbacks suppressed [ 485.863491][T26031] netlink: 'syz.7.5866': attribute type 3 has an invalid length. [ 485.914941][T26030] bond6 (unregistering): Released all slaves [ 486.114786][T26053] tipc: Enabled bearer , priority 0 [ 486.136318][T26053] syzkaller0: entered promiscuous mode [ 486.141819][T26053] syzkaller0: entered allmulticast mode [ 486.215846][T26060] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5878'. [ 486.257943][T26053] tipc: Resetting bearer [ 486.324671][T26049] tipc: Resetting bearer [ 486.447451][T26049] tipc: Disabling bearer [ 486.490905][T26075] bond6: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 486.506455][T26081] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5880'. [ 486.530519][T26081] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5880'. [ 486.556209][T26075] bond6 (unregistering): Released all slaves [ 486.696737][T26095] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5884'. [ 486.778325][T26107] netlink: 220 bytes leftover after parsing attributes in process `syz.3.5888'. [ 486.824279][T26110] x_tables: duplicate underflow at hook 1 [ 486.965754][T26108] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 487.190563][T26129] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5893'. [ 487.252148][T26124] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5891'. [ 487.420326][T26142] tipc: Enabled bearer , priority 0 [ 487.436533][T26142] syzkaller0: entered promiscuous mode [ 487.447362][T26142] syzkaller0: entered allmulticast mode [ 487.502065][T26142] tipc: Resetting bearer [ 487.530104][T26136] tipc: Resetting bearer [ 487.571755][T26136] tipc: Disabling bearer [ 487.574909][T26153] netlink: 'syz.6.5900': attribute type 10 has an invalid length. [ 488.016905][T26182] ip6gre0: Master is either lo or non-ether device [ 488.029167][T26185] ip6gre0: Master is either lo or non-ether device [ 488.368774][T26201] netlink: 'syz.7.5912': attribute type 3 has an invalid length. [ 488.644264][T26213] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 488.778323][T26220] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 488.969701][ T5834] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 488.980261][ T5834] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 488.992160][ T5834] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 489.015688][ T5834] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 489.036204][ T5834] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 489.045104][T26244] netlink: 'syz.6.5921': attribute type 1 has an invalid length. [ 489.062410][ T5831] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 489.069989][ T5831] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 489.078332][ T5831] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 489.079223][T10789] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 489.105495][ T5831] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 489.117312][ T5831] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 489.151361][T10789] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 489.246762][T10789] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 489.257257][T10789] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 489.285822][T26234] hsr0 speed is unknown, defaulting to 1000 [ 489.299628][T26234] lo speed is unknown, defaulting to 1000 [ 489.419089][T10789] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 489.439088][T10789] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 489.600350][T10789] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 489.624656][T10789] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 489.934109][T26292] tap0: tun_chr_ioctl cmd 1074025677 [ 489.945844][T26292] tap0: linktype set to 65534 [ 490.392899][T10789] bond8 (unregistering): (slave gretap2): Releasing active interface [ 490.442696][T10789] bond4 (unregistering): (slave gre2): Releasing backup interface [ 490.451032][T10789] gre2 (unregistering): left promiscuous mode [ 490.960282][T10789] bond0 (unregistering): left promiscuous mode [ 490.966664][T10789] bond_slave_0: left promiscuous mode [ 490.972225][T10789] bond_slave_1: left promiscuous mode [ 490.979519][T10789] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 490.989026][T10789] bond_slave_0: left allmulticast mode [ 490.997203][T10789] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 491.006779][T10789] bond_slave_1: left allmulticast mode [ 491.013542][T10789] bond0 (unregistering): Released all slaves [ 491.027574][T10789] bond1 (unregistering): Released all slaves [ 491.040548][T10789] bond2 (unregistering): Released all slaves [ 491.147176][T10789] bond3 (unregistering): Released all slaves [ 491.155822][ T5834] Bluetooth: hci1: command tx timeout [ 491.255966][T10789] bond4 (unregistering): Released all slaves [ 491.268966][T10789] bond5 (unregistering): Released all slaves [ 491.281791][T10789] bond6 (unregistering): Released all slaves [ 491.294624][T10789] bond7 (unregistering): Released all slaves [ 491.311675][T10789] bond8 (unregistering): Released all slaves [ 491.342905][T26310] syzkaller1: entered allmulticast mode [ 491.439506][T26234] chnl_net:caif_netlink_parms(): no params data found [ 491.534815][T10789] : left promiscuous mode [ 491.655779][T10789] tipc: Left network mode [ 492.017949][T26234] bridge0: port 1(bridge_slave_0) entered blocking state [ 492.035280][T26234] bridge0: port 1(bridge_slave_0) entered disabled state [ 492.044712][T26234] bridge_slave_0: entered allmulticast mode [ 492.068947][T26234] bridge_slave_0: entered promiscuous mode [ 492.073072][T26384] __nla_validate_parse: 10 callbacks suppressed [ 492.073089][T26384] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5957'. [ 492.093377][T26234] bridge0: port 2(bridge_slave_1) entered blocking state [ 492.101486][T26234] bridge0: port 2(bridge_slave_1) entered disabled state [ 492.109162][T26234] bridge_slave_1: entered allmulticast mode [ 492.120959][T26234] bridge_slave_1: entered promiscuous mode [ 492.168938][T26381] netdevsim netdevsim6 netdevsim0: entered promiscuous mode [ 492.260685][T26234] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 492.301991][T26234] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 492.404720][T26405] bond0: Error: Cannot enslave bond to itself. [ 492.431304][T26410] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5966'. [ 492.431324][T10789] batadv0: left promiscuous mode [ 492.449402][T10789] hsr_slave_0: left promiscuous mode [ 492.456303][T10789] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 492.463817][T10789] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 492.471925][T10789] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 492.479758][T10789] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 492.524516][T10789] veth1_macvtap: left promiscuous mode [ 492.532023][T10789] veth0_macvtap: left promiscuous mode [ 493.225413][ T5834] Bluetooth: hci1: command tx timeout [ 493.242396][T26234] team0: Port device team_slave_0 added [ 493.284903][T26234] team0: Port device team_slave_1 added [ 493.388735][T26422] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 493.395111][T26426] netlink: 'syz.0.5969': attribute type 1 has an invalid length. [ 493.424972][T26234] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 493.434594][T26234] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 493.436260][T26422] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 493.486254][T26429] netlink: 24 bytes leftover after parsing attributes in process `syz.7.5968'. [ 493.505102][T26234] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 493.523080][T26234] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 493.555458][T26234] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 493.615299][T26234] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 493.720787][T26423] bond7: option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 493.731668][T26442] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5972'. [ 493.742804][T26442] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5972'. [ 493.753193][T26442] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5972'. [ 493.757102][T26423] bond7 (unregistering): Released all slaves [ 494.023668][T26234] hsr_slave_0: entered promiscuous mode [ 494.032547][T26234] hsr_slave_1: entered promiscuous mode [ 494.042950][T26234] debugfs: 'hsr0' already exists in 'hsr' [ 494.049037][T26234] Cannot create hsr debugfs directory [ 494.155095][T26458] tipc: Enabling of bearer rejected, failed to enable media [ 494.172488][T10789] IPVS: stop unused estimator thread 0... [ 494.345565][T26473] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5979'. [ 494.545051][T26482] netlink: 92 bytes leftover after parsing attributes in process `syz.7.5982'. [ 494.582354][T26487] netlink: 'syz.0.5983': attribute type 1 has an invalid length. [ 494.615833][T26487] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 494.944484][T26507] netlink: 20 bytes leftover after parsing attributes in process `syz.7.5988'. [ 495.003322][T26234] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 495.050762][T26234] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 495.129635][T26234] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 495.164095][T26234] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 495.222665][T26539] vlan0: entered promiscuous mode [ 495.230153][T26539] vlan0: entered allmulticast mode [ 495.235594][T26539] veth0_vlan: entered allmulticast mode [ 495.260139][T26534] veth7: entered allmulticast mode [ 495.305351][ T5834] Bluetooth: hci1: command tx timeout [ 495.320585][T26527] netlink: 'syz.3.5993': attribute type 10 has an invalid length. [ 495.367950][T26527] team0: Port device dummy0 added [ 495.449297][T26234] 8021q: adding VLAN 0 to HW filter on device bond0 [ 495.498519][T26234] 8021q: adding VLAN 0 to HW filter on device team0 [ 495.531885][T17511] bridge0: port 1(bridge_slave_0) entered blocking state [ 495.539108][T17511] bridge0: port 1(bridge_slave_0) entered forwarding state [ 495.556704][T10789] bridge0: port 2(bridge_slave_1) entered blocking state [ 495.563896][T10789] bridge0: port 2(bridge_slave_1) entered forwarding state [ 495.673716][T26566] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6002'. [ 495.819250][T26234] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 496.052902][T26234] veth0_vlan: entered promiscuous mode [ 496.116248][T26234] veth1_vlan: entered promiscuous mode [ 496.241848][T26234] veth0_macvtap: entered promiscuous mode [ 496.271058][T26234] veth1_macvtap: entered promiscuous mode [ 496.412382][T26234] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 496.431498][T26605] 8021q: VLANs not supported on sit0 [ 496.451649][T26234] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 496.471909][T17511] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 496.497808][T17511] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 496.530470][T17511] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 496.557459][T17511] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 496.585331][T26615] netlink: 'syz.0.6012': attribute type 24 has an invalid length. [ 496.645733][T26616] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 496.735465][T26616] erspan0: left allmulticast mode [ 496.742540][T26616] wg1: left allmulticast mode [ 496.779536][T26616] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 496.870886][T17506] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 496.881277][T17506] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 496.929802][T10789] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 496.945726][T10789] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 497.028666][T26641] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 497.113998][T26647] __nla_validate_parse: 4 callbacks suppressed [ 497.114016][T26647] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6020'. [ 497.422600][ T5831] Bluetooth: hci1: command tx timeout [ 497.671705][T26673] batman_adv: batadv0: Adding interface: dummy0 [ 497.691274][T26673] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 497.726438][T26673] batman_adv: batadv0: Interface activated: dummy0 [ 497.767035][T26673] batadv0: mtu less than device minimum [ 497.793086][T26673] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 497.805162][T26673] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 497.817069][T26673] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 497.829006][T26673] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 498.076189][ T5840] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 498.087895][ T5840] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 498.099292][ T5840] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 498.125606][ T5840] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 498.133294][ T5840] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 498.143385][T26689] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6032'. [ 498.178093][T26695] netlink: 144 bytes leftover after parsing attributes in process `syz.7.6035'. [ 498.309439][T26685] hsr0 speed is unknown, defaulting to 1000 [ 498.318031][T26685] lo speed is unknown, defaulting to 1000 [ 498.324892][T26702] netlink: 104 bytes leftover after parsing attributes in process `syz.4.6036'. [ 498.776275][T26738] netlink: 88 bytes leftover after parsing attributes in process `syz.0.6044'. [ 498.796943][T26685] chnl_net:caif_netlink_parms(): no params data found [ 498.896481][T26748] netlink: 'syz.0.6046': attribute type 1 has an invalid length. [ 498.924435][T26748] 8021q: adding VLAN 0 to HW filter on device bond7 [ 498.932006][T26685] bridge0: port 1(bridge_slave_0) entered blocking state [ 498.939832][T26685] bridge0: port 1(bridge_slave_0) entered disabled state [ 498.947336][T26685] bridge_slave_0: entered allmulticast mode [ 498.954512][T26685] bridge_slave_0: entered promiscuous mode [ 498.971753][T26748] 8021q: adding VLAN 0 to HW filter on device bond7 [ 498.979017][T26748] bond7: (slave sit1): The slave device specified does not support setting the MAC address [ 498.992746][T26748] bond7: (slave sit1): Error -95 calling set_mac_address [ 499.012251][T26685] bridge0: port 2(bridge_slave_1) entered blocking state [ 499.019875][T26685] bridge0: port 2(bridge_slave_1) entered disabled state [ 499.027830][T26685] bridge_slave_1: entered allmulticast mode [ 499.036345][T26685] bridge_slave_1: entered promiscuous mode [ 499.082794][T26685] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 499.096982][T26685] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 499.164486][T26685] team0: Port device team_slave_0 added [ 499.177250][T26685] team0: Port device team_slave_1 added [ 499.236077][T26685] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 499.243339][T26685] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 499.271521][T26685] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 499.286652][T26685] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 499.293873][T26685] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 499.322554][T26685] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 499.382746][T26685] hsr_slave_0: entered promiscuous mode [ 499.389957][T26685] hsr_slave_1: entered promiscuous mode [ 499.397615][T26685] debugfs: 'hsr0' already exists in 'hsr' [ 499.403458][T26685] Cannot create hsr debugfs directory [ 499.471819][ T5831] Bluetooth: hci1: command 0x0405 tx timeout [ 499.646152][T26774] tipc: Started in network mode [ 499.655633][T26774] tipc: Node identity 0af17a1123da, cluster identity 4711 [ 499.674204][T26774] tipc: Enabled bearer , priority 0 [ 499.711446][T26774] syzkaller0: entered promiscuous mode [ 499.738012][T26774] syzkaller0: entered allmulticast mode [ 499.860560][T26774] tipc: Resetting bearer [ 499.901841][T26771] tipc: Resetting bearer [ 499.928255][T26771] tipc: Disabling bearer [ 500.030996][T26685] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 500.042470][T26685] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 500.053615][T26685] netdevsim netdevsim3 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 500.086348][T26796] netlink: 56 bytes leftover after parsing attributes in process `syz.0.6059'. [ 500.129613][T26685] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 500.153081][T26685] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 500.177292][T26685] netdevsim netdevsim3 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 500.187745][ T5834] Bluetooth: hci6: command tx timeout [ 500.279233][T26685] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 500.312063][T26685] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 500.337043][T26685] netdevsim netdevsim3 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 500.421525][T26815] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6065'. [ 500.473869][T26685] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 500.490359][T26685] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 500.501181][T26685] netdevsim netdevsim3 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 500.707717][T26685] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 500.724229][T26685] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 500.739039][T26829] veth0_to_team: entered promiscuous mode [ 500.757365][T26685] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 500.772026][T26831] sch_fq: defrate 0 ignored. [ 500.780789][T26685] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 500.893436][T26841] syzkaller0: entered promiscuous mode [ 500.930571][T26841] syzkaller0: entered allmulticast mode [ 500.948064][T26839] tipc: Enabled bearer , priority 0 [ 500.988147][T26839] tipc: Resetting bearer [ 501.008170][T26839] tipc: Disabling bearer [ 501.134202][T26685] 8021q: adding VLAN 0 to HW filter on device bond0 [ 501.178049][T26685] 8021q: adding VLAN 0 to HW filter on device team0 [ 501.186460][T26849] netlink: 108 bytes leftover after parsing attributes in process `syz.4.6076'. [ 501.198038][T26849] netlink: 108 bytes leftover after parsing attributes in process `syz.4.6076'. [ 501.208586][T26849] netlink: 84 bytes leftover after parsing attributes in process `syz.4.6076'. [ 501.242350][T17505] bridge0: port 1(bridge_slave_0) entered blocking state [ 501.249653][T17505] bridge0: port 1(bridge_slave_0) entered forwarding state [ 501.311092][T17505] bridge0: port 2(bridge_slave_1) entered blocking state [ 501.318394][T17505] bridge0: port 2(bridge_slave_1) entered forwarding state [ 501.455990][T26857] netlink: 'syz.4.6080': attribute type 3 has an invalid length. [ 501.933149][T26685] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 502.017152][T26878] xt_hashlimit: max too large, truncated to 1048576 [ 502.112657][T26685] veth0_vlan: entered promiscuous mode [ 502.159726][T26685] veth1_vlan: entered promiscuous mode [ 502.184460][T26878] netlink: 'syz.6.6085': attribute type 10 has an invalid length. [ 502.216494][T26878] bridge_slave_1: left allmulticast mode [ 502.232621][T26878] bridge_slave_1: left promiscuous mode [ 502.256373][T26878] bridge0: port 2(bridge_slave_1) entered disabled state [ 502.269356][ T5834] Bluetooth: hci6: command tx timeout [ 502.327222][T26878] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 502.370305][T26884] x_tables: duplicate underflow at hook 4 [ 502.422189][T26685] veth0_macvtap: entered promiscuous mode [ 502.504931][T26887] lec:lec_atm_send: lec0: Unknown message type -985564149 [ 502.526893][T26685] veth1_macvtap: entered promiscuous mode [ 502.541746][T26873] lec:lec_atm_close: lec0: Shut down! [ 502.578878][T26685] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 502.617149][T26685] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 502.665528][T17506] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 502.727173][T17506] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 502.750978][T17506] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 502.807665][T17506] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 502.969649][T17506] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 502.997022][T17506] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 503.094429][T26919] erspan0: entered promiscuous mode [ 503.111498][T10789] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 503.120167][T10789] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 503.397052][T26941] netlink: 'syz.4.6103': attribute type 1 has an invalid length. [ 503.439919][T26943] net_ratelimit: 16 callbacks suppressed [ 503.439936][T26943] openvswitch: netlink: Unknown nsh attribute 0 [ 503.470344][T26943] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 503.491841][T26941] bond1 (unregistering): Released all slaves [ 503.560314][T26946] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6106'. [ 503.609292][T26949] netlink: 'syz.6.6107': attribute type 1 has an invalid length. [ 503.620966][T26938] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6024'. [ 503.696084][T26952] netlink: 44 bytes leftover after parsing attributes in process `syz.6.6107'. [ 503.713776][ T5831] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 503.724191][ T5831] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 503.733277][ T5831] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 503.744875][ T5831] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 503.754457][ T5831] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 503.784125][T26949] 8021q: adding VLAN 0 to HW filter on device bond3 [ 503.870860][T26958] netlink: zone id is out of range [ 503.876382][T26958] netlink: zone id is out of range [ 503.881537][T26958] netlink: zone id is out of range [ 503.887110][T26958] netlink: zone id is out of range [ 503.892242][T26958] netlink: zone id is out of range [ 503.897633][T26958] netlink: zone id is out of range [ 503.902837][T26958] netlink: zone id is out of range [ 503.908232][T26958] netlink: zone id is out of range [ 504.043431][T26958] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6108'. [ 504.112558][T26953] hsr0 speed is unknown, defaulting to 1000 [ 504.120462][T26953] lo speed is unknown, defaulting to 1000 [ 504.136532][T26965] netlink: 240 bytes leftover after parsing attributes in process `syz.6.6110'. [ 504.345826][ T5831] Bluetooth: hci6: command tx timeout [ 504.403868][T26971] netlink: 'syz.4.6112': attribute type 3 has an invalid length. [ 504.435996][T26971] netlink: 340 bytes leftover after parsing attributes in process `syz.4.6112'. [ 504.601158][T26994] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6116'. [ 504.620095][T26953] chnl_net:caif_netlink_parms(): no params data found [ 504.679726][T26996] netlink: 16 bytes leftover after parsing attributes in process `syz.6.6117'. [ 504.703793][T26996] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6117'. [ 504.732986][T27004] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6119'. [ 504.860952][T26953] bridge0: port 1(bridge_slave_0) entered blocking state [ 504.877317][T26953] bridge0: port 1(bridge_slave_0) entered disabled state [ 504.884741][T26953] bridge_slave_0: entered allmulticast mode [ 504.912670][T26953] bridge_slave_0: entered promiscuous mode [ 504.936530][T26953] bridge0: port 2(bridge_slave_1) entered blocking state [ 504.943858][T26953] bridge0: port 2(bridge_slave_1) entered disabled state [ 504.951558][T26953] bridge_slave_1: entered allmulticast mode [ 504.959967][T26953] bridge_slave_1: entered promiscuous mode [ 505.190230][T27027] x_tables: duplicate underflow at hook 1 [ 505.202417][T26953] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 505.232249][T26953] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 505.336538][T27033] netlink: 'syz.7.6126': attribute type 1 has an invalid length. [ 505.474589][T26953] team0: Port device team_slave_0 added [ 505.488809][T27037] netdevsim netdevsim4: Direct firmware load for /.€ failed with error -2 [ 505.490816][T26953] team0: Port device team_slave_1 added [ 505.497958][T27037] netdevsim netdevsim4: Falling back to sysfs fallback for: /.€ [ 505.553954][T26953] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 505.562651][T26953] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 505.591886][T26953] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 505.605110][T26953] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 505.613287][T26953] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 505.640049][T26953] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 505.730403][T26953] hsr_slave_0: entered promiscuous mode [ 505.738412][T26953] hsr_slave_1: entered promiscuous mode [ 505.744962][T26953] debugfs: 'hsr0' already exists in 'hsr' [ 505.753743][T26953] Cannot create hsr debugfs directory [ 505.786546][ T5831] Bluetooth: hci0: command tx timeout [ 505.883682][T27064] xt_cluster: node mask cannot exceed total number of nodes [ 505.900870][T27066] sctp: [Deprecated]: syz.7.6138 (pid 27066) Use of int in max_burst socket option deprecated. [ 505.900870][T27066] Use struct sctp_assoc_value instead [ 505.982898][T27061] hsr0 speed is unknown, defaulting to 1000 [ 506.012294][T26953] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 506.033642][T27061] lo speed is unknown, defaulting to 1000 [ 506.091655][T26953] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 506.153500][T26953] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 506.214286][T26953] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 506.276380][T23921] IPVS: starting estimator thread 0... [ 506.386724][T27077] IPVS: using max 33 ests per chain, 79200 per kthread [ 506.425438][ T5831] Bluetooth: hci6: command tx timeout [ 506.453659][T26953] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 506.466613][T26953] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 506.480132][T26953] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 506.501738][T26953] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 506.558399][T27085] netlink: 'syz.3.6144': attribute type 3 has an invalid length. [ 506.579844][T27088] netlink: 'syz.3.6144': attribute type 3 has an invalid length. [ 506.744054][T26953] 8021q: adding VLAN 0 to HW filter on device bond0 [ 506.796146][T26953] 8021q: adding VLAN 0 to HW filter on device team0 [ 506.826720][T10789] bridge0: port 1(bridge_slave_0) entered blocking state [ 506.833907][T10789] bridge0: port 1(bridge_slave_0) entered forwarding state [ 506.879934][T10789] bridge0: port 2(bridge_slave_1) entered blocking state [ 506.887157][T10789] bridge0: port 2(bridge_slave_1) entered forwarding state [ 507.374915][T26953] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 507.453512][T26953] veth0_vlan: entered promiscuous mode [ 507.474208][T26953] veth1_vlan: entered promiscuous mode [ 507.578757][T26953] veth0_macvtap: entered promiscuous mode [ 507.605489][T26953] veth1_macvtap: entered promiscuous mode [ 507.664410][T26953] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 507.722895][T26953] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 507.766927][T17505] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 507.789310][T17505] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 507.814392][T27176] netlink: 'syz.7.6164': attribute type 11 has an invalid length. [ 507.831488][T17505] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 507.846679][T27176] netlink: 'syz.7.6164': attribute type 11 has an invalid length. [ 507.856906][T17505] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 507.876050][ T5831] Bluetooth: hci0: command tx timeout [ 507.944964][T27181] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 508.021017][ T64] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 508.041913][ T64] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 508.095859][T17516] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 508.104970][T17516] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 508.294986][T27201] x_tables: duplicate underflow at hook 2 [ 508.337609][T27203] syzkaller1: entered promiscuous mode [ 508.347954][T27203] syzkaller1: entered allmulticast mode [ 508.643766][T27220] bond0: entered promiscuous mode [ 508.649195][T27220] bond_slave_0: entered promiscuous mode [ 508.656011][T27220] bond_slave_1: entered promiscuous mode [ 508.661900][T27220] bridge_slave_1: entered promiscuous mode [ 508.671031][T27220] batadv0: entered promiscuous mode [ 508.677364][T27220] debugfs: 'hsr1' already exists in 'hsr' [ 508.683110][T27220] Cannot create hsr debugfs directory [ 508.693961][T27220] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 508.705195][T27220] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 508.716250][T27220] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 508.727002][T27220] bond0: left promiscuous mode [ 508.731806][T27220] bond_slave_0: left promiscuous mode [ 508.750733][T27220] bond_slave_1: left promiscuous mode [ 508.757038][T27220] bridge_slave_1: left promiscuous mode [ 508.765359][T27220] batadv0: left promiscuous mode [ 508.800027][T27225] bond0: entered promiscuous mode [ 508.805486][T27225] bond_slave_0: entered promiscuous mode [ 508.811288][T27225] bond_slave_1: entered promiscuous mode [ 508.817306][T27225] bridge_slave_1: entered promiscuous mode [ 508.824248][T27225] batadv0: entered promiscuous mode [ 508.830894][T27225] debugfs: 'hsr1' already exists in 'hsr' [ 508.837230][T27225] Cannot create hsr debugfs directory [ 508.842800][T27225] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 508.852826][T27225] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 508.865937][T27225] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 508.873562][T27225] bond0: left promiscuous mode [ 508.878570][T27225] bond_slave_0: left promiscuous mode [ 508.884170][T27225] bond_slave_1: left promiscuous mode [ 508.890283][T27225] bridge_slave_1: left promiscuous mode [ 508.897250][T27225] batadv0: left promiscuous mode [ 508.976763][T27229] bond2: entered promiscuous mode [ 508.981845][T27229] bond2: entered allmulticast mode [ 509.014411][T27229] 8021q: adding VLAN 0 to HW filter on device bond2 [ 509.077763][T27239] Bluetooth: MGMT ver 1.23 [ 509.136449][T27246] __nla_validate_parse: 18 callbacks suppressed [ 509.136467][T27246] netlink: 16 bytes leftover after parsing attributes in process `syz.6.6186'. [ 509.328701][T27254] netlink: 40 bytes leftover after parsing attributes in process `syz.6.6192'. [ 509.351368][T27257] netlink: 'syz.0.6189': attribute type 1 has an invalid length. [ 509.378462][T27254] netlink: 40 bytes leftover after parsing attributes in process `syz.6.6192'. [ 509.414736][T27263] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6193'. [ 509.444209][T27267] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6194'. [ 509.477216][T27263] bridge0: port 2(bridge_slave_1) entered disabled state [ 509.486071][T27263] bridge0: port 1(bridge_slave_0) entered disabled state [ 509.646311][T27275] vlan3: entered promiscuous mode [ 509.651833][T27275] vlan3: entered allmulticast mode [ 509.672584][T27275] hsr_slave_1: entered allmulticast mode [ 509.741272][T27277] nft_compat: unsupported protocol 0 [ 509.954256][ T5831] Bluetooth: hci0: command tx timeout [ 510.336980][T27305] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6206'. [ 510.355637][T27305] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6206'. [ 510.406987][T27318] syzkaller1: entered promiscuous mode [ 510.434370][T27318] syzkaller1: entered allmulticast mode [ 510.482295][T27318] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 324 [ 510.497325][T27319] netlink: 16 bytes leftover after parsing attributes in process `syz.6.6207'. [ 510.543476][T27325] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6212'. [ 510.570720][T27327] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6213'. [ 511.140762][T27376] sctp: [Deprecated]: syz.6.6225 (pid 27376) Use of int in max_burst socket option. [ 511.140762][T27376] Use struct sctp_assoc_value instead [ 511.357484][T23923] IPVS: starting estimator thread 0... [ 511.455521][T27390] IPVS: using max 32 ests per chain, 76800 per kthread [ 511.584483][T27405] tipc: Started in network mode [ 511.590034][T27405] tipc: Node identity , cluster identity 4711 [ 511.596370][T27405] tipc: Failed to obtain node identity [ 511.602098][T27405] tipc: Enabling of bearer rejected, failed to enable media [ 511.608137][T27408] net_ratelimit: 70 callbacks suppressed [ 511.608155][T27408] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 511.669853][T27405] syzkaller0: entered promiscuous mode [ 511.683425][T27405] syzkaller0: entered allmulticast mode [ 511.791753][T27419] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond0, syncid = 3, id = 0 [ 512.025724][ T5831] Bluetooth: hci0: command tx timeout [ 514.189966][T27449] delete_channel: no stack [ 514.191154][T27455] __nla_validate_parse: 10 callbacks suppressed [ 514.191169][T27455] netlink: 20 bytes leftover after parsing attributes in process `syz.7.6245'. [ 514.250142][T27455] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6245'. [ 514.314456][T27466] netlink: 68 bytes leftover after parsing attributes in process `syz.4.6243'. [ 514.381845][T27467] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6246'. [ 514.429084][T27467] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6246'. [ 514.446506][T27472] netlink: 'syz.0.6244': attribute type 83 has an invalid length. [ 514.458511][T27455] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6245'. [ 514.531889][T27474] netlink: 'syz.4.6249': attribute type 1 has an invalid length. [ 514.544082][T27455] hsr0 speed is unknown, defaulting to 1000 [ 514.580681][T27474] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 514.782730][T27476] team0 (unregistering): Port device team_slave_0 removed [ 514.800082][T27476] team0 (unregistering): Port device team_slave_1 removed [ 514.834884][T27455] lo speed is unknown, defaulting to 1000 [ 515.012188][T27490] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6252'. [ 515.062994][T27490] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 515.232022][T27499] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6255'. [ 515.357214][T27506] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6256'. [ 515.373355][T27509] netlink: 88 bytes leftover after parsing attributes in process `syz.6.6257'. [ 515.540250][T27523] netlink: 'syz.3.6260': attribute type 3 has an invalid length. [ 515.771818][T27542] netlink: 'syz.3.6266': attribute type 8 has an invalid length. [ 515.854364][T27546] gretap0: entered promiscuous mode [ 515.861349][T27546] 0ªî{X¹¦: renamed from gretap0 [ 515.870464][T27546] 0ªî{X¹¦: left promiscuous mode [ 515.876618][T27546] 0ªî{X¹¦: entered allmulticast mode [ 515.886521][T27546] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 516.233043][T27569] netlink: 'syz.3.6275': attribute type 21 has an invalid length. [ 516.243810][T27569] netlink: 'syz.3.6275': attribute type 20 has an invalid length. [ 516.263973][ T64] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 516.264017][T27569] netlink: 'syz.3.6275': attribute type 20 has an invalid length. [ 516.278955][ T64] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 516.291715][ T64] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 516.301209][ T64] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 517.062217][T27629] netlink: 'syz.6.6294': attribute type 8 has an invalid length. [ 517.179018][T27634] delete_channel: no stack [ 517.373381][T27648] sctp: [Deprecated]: syz.3.6299 (pid 27648) Use of struct sctp_assoc_value in delayed_ack socket option. [ 517.373381][T27648] Use struct sctp_sack_info instead [ 517.586867][T27656] netlink: 'syz.4.6302': attribute type 1 has an invalid length. [ 517.691712][T27656] macvlan2: entered promiscuous mode [ 517.699374][T27656] macvlan2: entered allmulticast mode [ 517.708756][T27656] bond1: entered promiscuous mode [ 517.714912][T27656] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 517.727351][T27656] bond1: left promiscuous mode [ 517.778301][T27660] hsr0 speed is unknown, defaulting to 1000 [ 517.787742][T27660] lo speed is unknown, defaulting to 1000 [ 517.938735][T27678] netlink: zone id is out of range [ 517.998897][T27678] bridge: RTM_NEWNEIGH with invalid ether address [ 518.854699][T27728] gretap0: entered promiscuous mode [ 518.884934][T27728] 0ªî{X¹¦: renamed from gretap0 [ 518.917595][T27728] 0ªî{X¹¦: left promiscuous mode [ 518.932021][T27728] 0ªî{X¹¦: entered allmulticast mode [ 518.957435][T27728] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 519.298964][T27758] tipc: Enabling of bearer rejected, failed to enable media [ 519.321354][T27754] netlink: 'syz.0.6333': attribute type 1 has an invalid length. [ 519.533311][T27773] netlink: 'syz.3.6336': attribute type 3 has an invalid length. [ 519.553286][T27773] __nla_validate_parse: 36 callbacks suppressed [ 519.553306][T27773] netlink: 666 bytes leftover after parsing attributes in process `syz.3.6336'. [ 519.637611][T27777] tipc: Started in network mode [ 519.642691][T27777] tipc: Node identity de745aa4bee5, cluster identity 4711 [ 519.668324][T27777] tipc: Enabled bearer , priority 0 [ 519.715847][T27778] syzkaller0: entered promiscuous mode [ 519.726532][T27787] netlink: 5 bytes leftover after parsing attributes in process `syz.7.6343'. [ 519.736706][T27778] syzkaller0: entered allmulticast mode [ 519.744910][T27787] 1ªî{X¹¦: renamed from 30ªî{X¹¦ (while UP) [ 519.768011][T27787] A link change request failed with some changes committed already. Interface 31ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 519.808989][T27790] bond0: (slave macvlan2): Error -22 calling dev_set_mtu [ 519.870559][T27778] tipc: Resetting bearer [ 519.904726][T27798] xt_CT: You must specify a L4 protocol and not use inversions on it [ 519.919524][T27778] tipc: Disabling bearer [ 519.924364][T27798] xt_CT: You must specify a L4 protocol and not use inversions on it [ 519.943558][T27798] xt_CT: You must specify a L4 protocol and not use inversions on it [ 519.954756][T27797] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6345'. [ 519.971926][T27797] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 519.988727][T27798] xt_CT: You must specify a L4 protocol and not use inversions on it [ 520.007838][T27798] xt_CT: You must specify a L4 protocol and not use inversions on it [ 520.043273][T27798] xt_CT: You must specify a L4 protocol and not use inversions on it [ 520.065970][T27798] xt_CT: You must specify a L4 protocol and not use inversions on it [ 520.082931][T27798] xt_CT: You must specify a L4 protocol and not use inversions on it [ 520.100279][T27798] xt_CT: You must specify a L4 protocol and not use inversions on it [ 520.118644][T27798] xt_CT: You must specify a L4 protocol and not use inversions on it [ 520.154411][T27809] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6348'. [ 520.476553][T27820] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6353'. [ 520.636107][T27832] netlink: 'syz.6.6357': attribute type 4 has an invalid length. [ 520.678383][T27836] netlink: 'syz.6.6357': attribute type 15 has an invalid length. [ 520.695566][T27832] netlink: 'syz.6.6357': attribute type 15 has an invalid length. [ 520.860733][T27848] tipc: Enabled bearer , priority 0 [ 520.868544][T27848] syzkaller0: entered promiscuous mode [ 520.874060][T27848] syzkaller0: entered allmulticast mode [ 520.921854][T27848] netlink: 2 bytes leftover after parsing attributes in process `syz.7.6363'. [ 520.944280][T27848] tipc: Resetting bearer [ 520.960945][T27846] tipc: Resetting bearer [ 521.047073][T27846] tipc: Disabling bearer [ 521.066510][T27853] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6364'. [ 521.088804][T27853] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6364'. [ 521.408659][T27883] tipc: Started in network mode [ 521.413764][T27883] tipc: Node identity 9e13278b77de, cluster identity 4711 [ 521.421323][T27883] tipc: Enabled bearer , priority 0 [ 521.451304][T27883] syzkaller0: entered promiscuous mode [ 521.457536][T27883] syzkaller0: entered allmulticast mode [ 521.492143][T27882] tipc: Resetting bearer [ 521.504543][T27893] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6375'. [ 521.539595][T27882] tipc: Disabling bearer [ 521.609060][T27898] netlink: 16 bytes leftover after parsing attributes in process `syz.7.6377'. [ 521.723622][T27905] sit1: entered promiscuous mode [ 521.730119][T27905] sit1: entered allmulticast mode [ 521.847057][T27915] SET target dimension over the limit! [ 521.924586][T27915] SET target dimension over the limit! [ 522.890432][T27988] team0: Device vti0 is of different type [ 523.561400][T28038] xt_cgroup: xt_cgroup: no path or classid specified [ 523.677225][T28046] syzkaller0: entered promiscuous mode [ 523.682734][T28046] syzkaller0: entered allmulticast mode [ 523.767385][T28056] netlink: 'syz.0.6418': attribute type 11 has an invalid length. [ 523.770670][T28052] netdevsim netdevsim7 netdevsim0: entered promiscuous mode [ 524.079931][T28077] pim6reg527: entered allmulticast mode [ 524.191362][T28080] netlink: 'syz.0.6425': attribute type 1 has an invalid length. [ 524.252162][T28086] syz_tun: entered allmulticast mode [ 524.304890][T28086] syz_tun: left allmulticast mode [ 524.502055][T28107] netlink: 'syz.0.6431': attribute type 10 has an invalid length. [ 524.571582][T28107] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 524.756614][T28121] __nla_validate_parse: 17 callbacks suppressed [ 524.756632][T28121] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6436'. [ 524.772415][T28125] IPVS: Unknown mcast interface: bridge_slave_1 [ 525.000357][T28134] hsr0 speed is unknown, defaulting to 1000 [ 525.015991][T28131] hsr0 speed is unknown, defaulting to 1000 [ 525.015992][T28134] lo speed is unknown, defaulting to 1000 [ 525.049752][T28131] lo speed is unknown, defaulting to 1000 [ 525.581773][T28169] netlink: 'syz.4.6448': attribute type 1 has an invalid length. [ 525.628758][T28170] netlink: 'syz.6.6446': attribute type 10 has an invalid length. [ 525.717642][T28177] netlink: 'syz.3.6449': attribute type 21 has an invalid length. [ 525.735361][T28177] netlink: 'syz.3.6449': attribute type 22 has an invalid length. [ 525.743213][T28177] netlink: 'syz.3.6449': attribute type 23 has an invalid length. [ 525.762272][T28177] netlink: 'syz.3.6449': attribute type 25 has an invalid length. [ 525.776602][T28180] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 525.804091][T28177] netlink: 'syz.3.6449': attribute type 26 has an invalid length. [ 525.820636][T28183] netlink: 'syz.6.6453': attribute type 2 has an invalid length. [ 525.829709][T28177] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6449'. [ 525.839036][T28183] netlink: 119 bytes leftover after parsing attributes in process `syz.6.6453'. [ 526.094858][T28202] netlink: 20 bytes leftover after parsing attributes in process `syz.6.6455'. [ 526.104433][T28202] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 526.155084][T28203] syzkaller0: entered promiscuous mode [ 526.166921][T28203] syzkaller0: entered allmulticast mode [ 526.211488][T28201] sch_tbf: burst 4 is lower than device syzkaller0 mtu (1514) ! [ 526.353220][T28216] netlink: 44 bytes leftover after parsing attributes in process `syz.0.6459'. [ 526.362574][T28216] netlink: 44 bytes leftover after parsing attributes in process `syz.0.6459'. [ 526.485864][T28221] bond3: option mode: invalid value (133) [ 526.494281][T28221] bond3 (unregistering): Released all slaves [ 526.654678][T28238] tunl0: entered promiscuous mode [ 526.660162][T28238] tunl0: entered allmulticast mode [ 526.904891][T28256] vlan2: entered promiscuous mode [ 526.910908][T28256] bond0: entered promiscuous mode [ 526.917150][T28256] bond_slave_0: entered promiscuous mode [ 526.923084][T28256] bond_slave_1: entered promiscuous mode [ 526.929509][T28256] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 527.161954][T28261] netlink: 'syz.7.6475': attribute type 11 has an invalid length. [ 527.169915][T28261] netlink: 199828 bytes leftover after parsing attributes in process `syz.7.6475'. [ 527.564818][T28269] ip6t_REJECT: ECHOREPLY is not supported [ 527.705905][T28271] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6476'. [ 528.768257][T28261] lo: MTU too low for tipc bearer [ 528.773312][T28261] tipc: Enabling of bearer rejected, failed to enable media [ 528.793030][T28267] bridge4: entered promiscuous mode [ 528.800486][T28267] bridge4: entered allmulticast mode [ 528.946882][T28281] ICMPv6: NA: 00:00:00:00:00:00 advertised our address fe80::aa on syz_tun! [ 528.989936][T28280] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6479'. [ 529.021993][T28280] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6479'. [ 529.098535][T28280] 0ªî{X¹¦: entered promiscuous mode [ 529.125007][T28280] 0ªî{X¹¦: left promiscuous mode [ 529.269286][T28311] block nbd2: Unsupported socket: should be TCP or UNIX. [ 529.981088][T28372] __nla_validate_parse: 3 callbacks suppressed [ 529.981106][T28372] netlink: 36 bytes leftover after parsing attributes in process `syz.3.6502'. [ 530.222106][T28389] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6507'. [ 530.279329][T28394] netlink: 68 bytes leftover after parsing attributes in process `syz.0.6508'. [ 530.407508][T28400] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6510'. [ 530.426193][T28398] Cannot find add_set index 0 as target [ 530.436506][T28398] Cannot find add_set index 0 as target [ 530.453472][T28398] Cannot find add_set index 0 as target [ 530.475693][T28398] Cannot find add_set index 0 as target [ 530.951707][T28428] netlink: 56 bytes leftover after parsing attributes in process `syz.0.6519'. [ 530.967621][T28430] tipc: Enabled bearer , priority 0 [ 530.977077][T28430] syzkaller0: entered promiscuous mode [ 530.982572][T28430] syzkaller0: entered allmulticast mode [ 531.008495][T28432] netlink: 20 bytes leftover after parsing attributes in process `syz.6.6520'. [ 531.019450][T28430] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6518'. [ 531.042883][T28430] netlink: 'syz.3.6518': attribute type 4 has an invalid length. [ 531.044743][T28432] netlink: 64 bytes leftover after parsing attributes in process `syz.6.6520'. [ 531.050955][T28430] netlink: 17 bytes leftover after parsing attributes in process `syz.3.6518'. [ 531.167098][T28439] tipc: Resetting bearer [ 531.181447][T28429] tipc: Resetting bearer [ 531.233063][T28429] tipc: Disabling bearer [ 531.257558][T28441] veth1_to_hsr: mtu less than device minimum [ 531.359564][T28443] IPVS: set_ctl: invalid protocol: 58 255.255.255.255:20000 [ 531.418666][T28460] netlink: 'syz.3.6529': attribute type 1 has an invalid length. [ 531.443128][T28460] netlink: 224 bytes leftover after parsing attributes in process `syz.3.6529'. [ 531.478538][T28460] netlink: zone id is out of range [ 531.531288][T28465] xt_CT: You must specify a L4 protocol and not use inversions on it [ 534.142138][T28552] netlink: 'syz.6.6556': attribute type 1 has an invalid length. [ 534.341508][T28552] 8021q: adding VLAN 0 to HW filter on device bond6 [ 534.370093][T28552] bond5: (slave bond6): making interface the new active one [ 534.388988][T28552] bond5: (slave bond6): Enslaving as an active interface with an up link [ 534.576927][T28584] netlink: 'syz.6.6564': attribute type 1 has an invalid length. [ 534.585393][T28584] Bluetooth: MGMT ver 1.23 [ 534.603302][T28586] tipc: Enabling of bearer rejected, failed to enable media [ 534.656848][T28591] team0 (unregistering): Port device team_slave_0 removed [ 534.666097][T28591] team0 (unregistering): Port device team_slave_1 removed [ 534.875071][T28599] bridge5: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 535.000577][T28566] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 535.339735][T28633] netlink: 'syz.6.6578': attribute type 29 has an invalid length. [ 535.349563][T28633] __nla_validate_parse: 8 callbacks suppressed [ 535.349674][T28633] netlink: 596 bytes leftover after parsing attributes in process `syz.6.6578'. [ 535.644744][T28643] netlink: 28 bytes leftover after parsing attributes in process `syz.6.6582'. [ 535.890623][T28669] netlink: 84 bytes leftover after parsing attributes in process `syz.6.6590'. [ 535.987706][T28670] netlink: 260 bytes leftover after parsing attributes in process `syz.4.6591'. [ 536.039449][T28682] netlink: 'syz.6.6595': attribute type 1 has an invalid length. [ 536.045665][T28681] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6596'. [ 536.049832][T28682] netlink: 224 bytes leftover after parsing attributes in process `syz.6.6595'. [ 536.105977][T28684] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6596'. [ 536.420673][T28712] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6603'. [ 536.454128][T28712] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6603'. [ 536.498765][T28712] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6603'. [ 536.608629][T24823] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 536.646514][T24823] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 536.659331][T24823] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 536.696842][T24823] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 536.767512][T28727] netlink: 'syz.4.6606': attribute type 4 has an invalid length. [ 536.781867][T28727] SET target dimension over the limit! [ 536.809122][T28731] netlink: 'syz.0.6607': attribute type 2 has an invalid length. [ 537.153942][T28753] netlink: 'syz.3.6616': attribute type 1 has an invalid length. [ 537.218904][T28753] 8021q: adding VLAN 0 to HW filter on device bond3 [ 537.301696][T28761] 8021q: adding VLAN 0 to HW filter on device bond3 [ 537.324629][T28761] bond3: (slave vxcan5): The slave device specified does not support setting the MAC address [ 537.356584][T28761] bond3: (slave vxcan5): Error -95 calling set_mac_address [ 537.581534][T28785] bridge0: port 2(bridge_slave_1) entered disabled state [ 537.589069][T28785] bridge0: port 1(bridge_slave_0) entered disabled state [ 537.720886][T28790] syzkaller0: entered promiscuous mode [ 537.727071][T28790] syzkaller0: entered allmulticast mode [ 537.756287][T28792] netlink: 'syz.0.6629': attribute type 33 has an invalid length. [ 539.526901][T28792] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 539.530558][T28802] vlan0: left promiscuous mode [ 539.545663][T28802] netdevsim netdevsim6 netdevsim0: left promiscuous mode [ 539.553279][T28802] macvlan2: left promiscuous mode [ 539.564227][T28802] vlan3: left promiscuous mode [ 539.586133][T28802] bridge4: left promiscuous mode [ 539.702220][T28820] netlink: 'syz.3.6635': attribute type 10 has an invalid length. [ 539.745870][T28820] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 539.940729][T28839] netlink: 'syz.0.6639': attribute type 3 has an invalid length. [ 539.964115][T28839] tipc: Cannot configure node identity twice [ 540.001719][T28833] syzkaller1: entered promiscuous mode [ 540.007981][T28833] syzkaller1: entered allmulticast mode [ 540.030768][T28846] Cannot find add_set index 1 as target [ 540.100745][T28848] netlink: 'syz.6.6646': attribute type 5 has an invalid length. [ 540.187265][T28856] v: renamed from vlan0 [ 540.299337][T28859] netlink: 'syz.4.6649': attribute type 12 has an invalid length. [ 540.308972][T28859] netlink: 'syz.4.6649': attribute type 11 has an invalid length. [ 540.319297][T28864] netlink: 'syz.7.6651': attribute type 3 has an invalid length. [ 540.447634][T28868] __nla_validate_parse: 26 callbacks suppressed [ 540.447652][T28868] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6653'. [ 540.568896][T28875] vxlan0: entered promiscuous mode [ 540.574121][T28875] vxlan0: entered allmulticast mode [ 540.662061][T28885] netlink: 224 bytes leftover after parsing attributes in process `syz.7.6659'. [ 562.940731][T28910] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6668'. [ 563.210785][T28933] validate_nla: 1 callbacks suppressed [ 563.210804][T28933] netlink: 'syz.4.6676': attribute type 1 has an invalid length. [ 563.219323][T28935] netlink: 44 bytes leftover after parsing attributes in process `syz.6.6677'. [ 563.241836][T28931] IPVS: set_ctl: invalid protocol: 136 100.1.1.1:20004 [ 563.337361][T28940] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6678'. [ 563.355495][T28933] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 563.373600][T28933] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 563.443546][T28945] macvlan2: entered promiscuous mode [ 563.468017][T28945] macvlan2: entered allmulticast mode [ 563.486568][T28945] bond2: entered promiscuous mode [ 563.492314][T28945] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 563.526488][T28945] bond2: left promiscuous mode [ 563.561557][T28958] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6682'. [ 563.572185][T28959] netlink: 'syz.6.6683': attribute type 4 has an invalid length. [ 563.624750][T28961] netlink: 'syz.6.6683': attribute type 4 has an invalid length. [ 563.945659][T28982] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6682'. [ 563.986267][T28977] syzkaller0: create flow: hash 1559624832 index 2 [ 563.993030][T28983] sctp: [Deprecated]: syz.4.6687 (pid 28983) Use of struct sctp_assoc_value in delayed_ack socket option. [ 563.993030][T28983] Use struct sctp_sack_info instead [ 564.334921][T24825] syzkaller0: tun_net_xmit 76 [ 564.340507][T24825] syzkaller0: tun_net_xmit 48 [ 564.359273][ T5969] syzkaller0: tun_net_xmit 76 [ 564.377390][T28976] syzkaller0: delete flow: hash 1559624832 index 2 [ 564.395943][T28989] lo speed is unknown, defaulting to 1000 [ 564.415471][ T5969] syzkaller0: tun_net_xmit 76 [ 564.455660][ T5969] syzkaller0: tun_net_xmit 76 [ 566.217782][T28993] veth5: entered allmulticast mode [ 566.228068][T29015] kthread_run failed with err -4 [ 566.387927][T29023] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6697'. [ 566.452742][T29025] bond4: ARP target 1.0.0.0 is already present [ 566.478653][T29025] bond4: option arp_ip_target: invalid value (1) [ 566.496775][T29025] bond4 (unregistering): Released all slaves [ 566.597604][T29038] netlink: 27 bytes leftover after parsing attributes in process `syz.4.6702'. [ 566.615778][T29038] netlink: 52 bytes leftover after parsing attributes in process `syz.4.6702'. [ 566.625852][T29038] sctp: [Deprecated]: syz.4.6702 (pid 29038) Use of int in max_burst socket option deprecated. [ 566.625852][T29038] Use struct sctp_assoc_value instead [ 567.134575][T29071] netlink: 104 bytes leftover after parsing attributes in process `syz.7.6712'. [ 567.269010][T29078] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 567.457229][T29096] netlink: 404 bytes leftover after parsing attributes in process `syz.7.6722'. [ 567.703409][T29100] hsr_slave_0 (unregistering): left promiscuous mode [ 567.972452][T29137] sctp: [Deprecated]: syz.0.6735 (pid 29137) Use of struct sctp_assoc_value in delayed_ack socket option. [ 567.972452][T29137] Use struct sctp_sack_info instead [ 568.127686][T29139] __nla_validate_parse: 6 callbacks suppressed [ 568.127704][T29139] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6736'. [ 568.290983][T29156] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6738'. [ 568.599680][T29179] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6745'. [ 568.612101][T29179] team0 (uninitialized): Failed to send options change via netlink (err -105) [ 568.648247][T29179] team0: entered promiscuous mode [ 568.654413][T29179] team0: entered allmulticast mode [ 568.661922][T24825] nci: nci_rf_intf_activated_ntf_packet: unsupported rf_interface 0x41 [ 568.680084][T29188] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 568.719502][T29186] netlink: 'syz.4.6748': attribute type 1 has an invalid length. [ 568.731461][T29186] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6748'. [ 568.788059][T29186] ip6t_srh: unknown srh match flags 4000 [ 569.029696][T29204] netlink: 'syz.3.6751': attribute type 3 has an invalid length. [ 569.315029][T29224] netlink: 'syz.4.6758': attribute type 10 has an invalid length. [ 569.324213][T29224] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 569.335437][T29224] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 569.347850][T29217] netlink: 68 bytes leftover after parsing attributes in process `syz.0.6755'. [ 569.456957][T29232] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6760'. [ 569.509812][T29236] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6762'. [ 569.534005][T29236] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6762'. [ 569.570665][T29236] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6762'. [ 569.597064][T29240] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 569.621067][T29236] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6762'. [ 569.905294][T29256] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 569.937870][T29266] netlink: 'syz.6.6769': attribute type 2 has an invalid length. [ 569.975209][T29266] netlink: 'syz.6.6769': attribute type 8 has an invalid length. [ 570.000401][T29267] netlink: 'syz.3.6771': attribute type 11 has an invalid length. [ 570.346137][T29288] netlink: 'syz.4.6777': attribute type 2 has an invalid length. [ 570.722823][T29305] netlink: 'syz.0.6783': attribute type 64 has an invalid length. [ 570.789608][T29306] bridge: RTM_NEWNEIGH with invalid state 0x8 [ 570.871071][T29311] netlink: 'syz.3.6781': attribute type 10 has an invalid length. [ 570.903223][T29313] sctp: [Deprecated]: syz.6.6784 (pid 29313) Use of int in maxseg socket option. [ 570.903223][T29313] Use struct sctp_assoc_value instead [ 570.924621][T29311] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 571.077412][T29328] netlink: 'syz.7.6788': attribute type 3 has an invalid length. [ 571.533688][T29339] bond1: entered allmulticast mode [ 571.570406][T29339] 8021q: adding VLAN 0 to HW filter on device bond1 [ 571.625932][ T5831] Bluetooth: hci0: command tx timeout [ 571.738469][T29363] bridge6: entered promiscuous mode [ 571.748561][T29363] bridge6: entered allmulticast mode [ 571.861003][T29369] nbd: illegal input index 2958377 [ 572.049066][T29381] lo: entered promiscuous mode [ 572.061047][T29381] tunl0: entered promiscuous mode [ 572.078394][T29381] gre0: entered promiscuous mode [ 572.085540][T29381] 1ªî{X¹¦: entered promiscuous mode [ 572.097537][T29381] 1ªî{X¹¦: left allmulticast mode [ 572.122976][T29381] erspan0: entered promiscuous mode [ 572.130906][T29381] ip_vti0: entered promiscuous mode [ 572.142055][T29383] tipc: Enabling of bearer rejected, failed to enable media [ 572.888486][T29437] tipc: Enabling of bearer rejected, failed to enable media [ 573.130238][T29435] bond7: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-xor(2) [ 573.171343][T29435] bond7 (unregistering): Released all slaves [ 573.273070][T29452] __nla_validate_parse: 19 callbacks suppressed [ 573.273089][T29452] netlink: 1 bytes leftover after parsing attributes in process `syz.3.6825'. [ 573.473432][T29464] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6832'. [ 573.658860][T29470] lo speed is unknown, defaulting to 1000 [ 573.692625][T29477] netlink: 'syz.0.6836': attribute type 2 has an invalid length. [ 573.738003][T29477] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6836'. [ 573.818567][T29477] bond2: option xmit_hash_policy: invalid value (64) [ 573.828129][T29477] bond2 (unregistering): Released all slaves [ 573.917454][T29484] netlink: 'syz.6.6838': attribute type 4 has an invalid length. [ 574.014667][T29490] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6840'. [ 574.201730][T29502] netlink: 'syz.0.6845': attribute type 1 has an invalid length. [ 574.252047][T29504] netlink: 56 bytes leftover after parsing attributes in process `syz.7.6846'. [ 574.264726][T29499] netlink: 44 bytes leftover after parsing attributes in process `syz.6.6844'. [ 574.273958][T29501] xt_hashlimit: invalid interval [ 574.309101][T29504] bond9 (unregistering): Released all slaves [ 574.355295][T29510] netlink: 'syz.6.6847': attribute type 1 has an invalid length. [ 574.385307][T29507] bond9: option arp_all_targets: invalid value (18446744073709551613) [ 574.403000][T29507] bond9 (unregistering): Released all slaves [ 574.493874][T29519] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 574.497983][T29515] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6848'. [ 574.513210][T29515] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6848'. [ 574.538445][T29519] netlink: 4440 bytes leftover after parsing attributes in process `syz.6.6850'. [ 574.557214][T29519] netlink: 182 bytes leftover after parsing attributes in process `syz.6.6850'. [ 574.971533][T29547] syzkaller0: entered promiscuous mode [ 574.985214][T29547] syzkaller0: entered allmulticast mode [ 575.018357][T29553] netlink: 'syz.0.6862': attribute type 23 has an invalid length. [ 575.171048][T29558] netlink: 'syz.4.6861': attribute type 83 has an invalid length. [ 575.179493][T29558] netlink: 'syz.4.6861': attribute type 83 has an invalid length. [ 575.187740][T29558] netlink: 'syz.4.6861': attribute type 83 has an invalid length. [ 575.196362][T29558] netlink: 'syz.4.6861': attribute type 83 has an invalid length. [ 575.204785][T29558] netlink: 'syz.4.6861': attribute type 83 has an invalid length. [ 575.216203][T29558] netlink: 'syz.4.6861': attribute type 83 has an invalid length. [ 576.020772][T29596] dummy0: entered promiscuous mode [ 576.034733][T29596] bridge0: port 2(dummy0) entered blocking state [ 576.041794][T29596] bridge0: port 2(dummy0) entered disabled state [ 576.048768][T29596] dummy0: entered allmulticast mode [ 576.492883][T29627] tipc: Enabled bearer , priority 0 [ 576.569256][T29630] tipc: Disabling bearer [ 576.970068][T29662] bridge5: entered promiscuous mode [ 576.993331][T29662] bridge5: entered allmulticast mode [ 577.052855][T29663] bridge6: entered promiscuous mode [ 577.063651][T29663] bridge6: entered allmulticast mode [ 577.388507][ T5831] Bluetooth: hci6: command tx timeout [ 577.471145][T29701] sctp: [Deprecated]: syz.4.6911 (pid 29701) Use of int in max_burst socket option. [ 577.471145][T29701] Use struct sctp_assoc_value instead [ 577.758306][T29722] syzkaller1: entered promiscuous mode [ 577.782282][T29722] syzkaller1: entered allmulticast mode [ 578.314228][T29757] bond4: option packets_per_slave: mode dependency failed, not supported in mode active-backup(1) [ 578.340941][T29757] bond4 (unregistering): Released all slaves [ 578.509163][T29767] __nla_validate_parse: 9 callbacks suppressed [ 578.509182][T29767] netlink: 104 bytes leftover after parsing attributes in process `syz.3.6926'. [ 578.546290][T29769] netlink: 24 bytes leftover after parsing attributes in process `syz.6.6927'. [ 578.667140][T29773] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6928'. [ 579.091997][T29788] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6935'. [ 579.111965][T29794] validate_nla: 38 callbacks suppressed [ 579.111983][T29794] netlink: 'syz.7.6934': attribute type 10 has an invalid length. [ 579.153489][T29793] netlink: 104 bytes leftover after parsing attributes in process `syz.0.6937'. [ 579.246672][T29798] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6935'. [ 579.250122][T29806] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6940'. [ 579.269695][T29807] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6937'. [ 579.279186][T29807] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6937'. [ 579.304620][T29800] netlink: 28 bytes leftover after parsing attributes in process `syz.7.6939'. [ 579.543004][T29824] block nbd4: Unsupported socket: should be TCP or UNIX. [ 579.691856][T29832] bond3: option all_slaves_active: invalid value (64) [ 579.701151][T29832] bond3 (unregistering): Released all slaves [ 579.881872][T29847] netlink: 'syz.7.6955': attribute type 1 has an invalid length. [ 579.957423][T29853] netlink: 'syz.7.6956': attribute type 1 has an invalid length. [ 580.040165][T29857] SET target dimension over the limit! [ 580.046033][T29856] netlink: 'syz.0.6957': attribute type 10 has an invalid length. [ 580.058628][T29856] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 580.068453][T29856] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 580.088785][T29856] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 580.705298][T29890] bridge7: entered promiscuous mode [ 580.710920][T29890] bridge7: entered allmulticast mode [ 580.774746][T29892] 8021q: adding VLAN 0 to HW filter on device bond7 [ 580.854958][T29906] xt_ct_set_helper: 46 callbacks suppressed [ 580.854977][T29906] xt_CT: You must specify a L4 protocol and not use inversions on it [ 581.194102][T29927] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 581.479900][T29949] openvswitch: netlink: Actions may not be safe on all matching packets [ 581.754789][T29969] openvswitch: netlink: Port -1 exceeds max allowable 65535 [ 581.769752][T29969] netlink: 'syz.0.6994': attribute type 2 has an invalid length. [ 581.778344][T29969] netlink: 'syz.0.6994': attribute type 8 has an invalid length. [ 581.809079][T29966] syzkaller0: entered promiscuous mode [ 581.825506][T29966] syzkaller0: entered allmulticast mode [ 582.021154][T29982] syzkaller0: entered promiscuous mode [ 582.038774][T29982] syzkaller0: entered allmulticast mode [ 582.517733][T30015] lo speed is unknown, defaulting to 1000 [ 582.819038][T30043] netlink: 'syz.4.7010': attribute type 1 has an invalid length. [ 583.340408][T30059] syzkaller0: entered promiscuous mode [ 583.346572][T30059] syzkaller0: entered allmulticast mode [ 583.565877][T30077] netlink: 'syz.4.7018': attribute type 1 has an invalid length. [ 583.641090][T30074] lo speed is unknown, defaulting to 1000 [ 583.744291][T30084] gretap1: entered promiscuous mode [ 583.754097][T30089] __nla_validate_parse: 51 callbacks suppressed [ 583.754114][T30089] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7022'. [ 583.770015][T30086] tipc: Started in network mode [ 583.774904][T30086] tipc: Node identity aaadc706e4b8, cluster identity 4711 [ 583.788282][T30086] tipc: Enabled bearer , priority 0 [ 583.840953][T30098] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7025'. [ 583.862164][T30098] netlink: 'syz.3.7025': attribute type 4 has an invalid length. [ 583.871386][T30099] netlink: 'syz.3.7025': attribute type 4 has an invalid length. [ 583.941022][T30081] tipc: Resetting bearer [ 583.984444][T30109] tipc: Enabled bearer , priority 0 [ 584.013447][T30080] tipc: Disabling bearer [ 584.116629][T30109] policy can only be matched on NF_INET_PRE_ROUTING [ 584.116652][T30109] unable to load match [ 584.162569][T30123] netlink: 'syz.4.7029': attribute type 3 has an invalid length. [ 584.204690][T30107] tipc: Disabling bearer [ 584.226592][T30126] netlink: 'syz.4.7029': attribute type 1 has an invalid length. [ 584.237101][T30126] netlink: 'syz.4.7029': attribute type 2 has an invalid length. [ 584.251490][T30125] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 584.391385][T30141] netlink: 'syz.7.7034': attribute type 13 has an invalid length. [ 584.403501][T30140] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 584.433082][T30141] macvtap0: entered allmulticast mode [ 584.444062][T30141] macvtap0: refused to change device tx_queue_len [ 584.743729][T30162] delete_channel: no stack [ 584.749381][T30163] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7042'. [ 584.757245][T30158] bridge7: entered allmulticast mode [ 584.845259][T30167] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7044'. [ 584.854273][T30168] netlink: 11 bytes leftover after parsing attributes in process `syz.0.7045'. [ 584.876066][T30168] netlink: 11 bytes leftover after parsing attributes in process `syz.0.7045'. [ 585.234896][T30184] syzkaller0: entered promiscuous mode [ 585.249231][T30184] syzkaller0: entered allmulticast mode [ 585.309847][T30187] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7050'. [ 585.342235][T30181] lo speed is unknown, defaulting to 1000 [ 585.611644][T30183] netlink: 'syz.4.7049': attribute type 16 has an invalid length. [ 585.619996][T30183] netlink: 'syz.4.7049': attribute type 17 has an invalid length. [ 585.680093][T30183] bridge0: port 2(bridge_slave_1) entered blocking state [ 585.687355][T30183] bridge0: port 2(bridge_slave_1) entered listening state [ 585.694787][T30183] bridge0: port 1(bridge_slave_0) entered blocking state [ 585.702007][T30183] bridge0: port 1(bridge_slave_0) entered listening state [ 585.721478][T30183] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 585.769587][T30181] ip6erspan0: entered promiscuous mode [ 586.049976][T30224] netlink: 'syz.3.7061': attribute type 1 has an invalid length. [ 586.075610][T30227] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7063'. [ 586.091536][T30229] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7064'. [ 586.141747][T30227] veth9: entered allmulticast mode [ 586.207893][T30234] tipc: Enabled bearer , priority 0 [ 586.216810][T30235] syzkaller0: entered promiscuous mode [ 586.222571][T30235] syzkaller0: entered allmulticast mode [ 586.230609][T30233] tipc: Enabling of bearer rejected, already enabled [ 586.240523][T30239] netlink: 'syz.6.7068': attribute type 1 has an invalid length. [ 586.273756][T30239] bond8 (unregistering): Released all slaves [ 586.304140][T30234] tipc: Resetting bearer [ 586.329788][T30234] tipc: Disabling bearer [ 586.370590][T30244] ip6tnl1: entered promiscuous mode [ 586.376992][T30244] ip6tnl1: entered allmulticast mode [ 586.559035][T30260] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7073'. [ 586.572887][T30260] netlink: 'syz.0.7073': attribute type 20 has an invalid length. [ 586.598688][T24825] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 586.604334][T30260] netlink: 'syz.0.7073': attribute type 20 has an invalid length. [ 586.619436][T24825] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 586.628873][T24825] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 586.639372][T24825] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 587.540225][T30330] syzkaller0: entered promiscuous mode [ 587.585193][T30330] syzkaller0: entered allmulticast mode [ 587.707171][ C1] bridge0: port 2(bridge_slave_1) entered learning state [ 587.785867][ C1] bridge0: port 1(bridge_slave_0) entered learning state [ 589.679478][T30361] lo speed is unknown, defaulting to 1000 [ 589.786955][ C1] bridge0: port 2(bridge_slave_1) entered forwarding state [ 589.794199][ C1] bridge0: topology change detected, propagating [ 589.865543][ C1] bridge0: port 1(bridge_slave_0) entered forwarding state [ 589.872827][ C1] bridge0: topology change detected, propagating [ 589.880561][T30376] bond4: entered promiscuous mode [ 589.976796][T30376] bond_slave_0: entered promiscuous mode [ 589.982857][T30376] bond_slave_1: entered promiscuous mode [ 589.991887][T30376] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 590.001073][T30376] bond4: (slave macvlan2): making interface the new active one [ 590.010344][T30376] macvlan2: entered promiscuous mode [ 590.016032][T30376] bond0: entered promiscuous mode [ 590.023547][T30376] bond4: (slave macvlan2): Enslaving as an active interface with an up link [ 590.047557][T30376] bridge0: port 3(syz_tun) entered blocking state [ 590.054496][T30376] bridge0: port 3(syz_tun) entered disabled state [ 590.062385][T30376] syz_tun: entered allmulticast mode [ 590.097397][T30393] validate_nla: 2 callbacks suppressed [ 590.097443][T30393] netlink: 'syz.3.7113': attribute type 1 has an invalid length. [ 590.116121][T30383] netlink: 'syz.4.7108': attribute type 10 has an invalid length. [ 590.117069][T30376] syz_tun: entered promiscuous mode [ 590.134435][T30393] __nla_validate_parse: 13 callbacks suppressed [ 590.134453][T30393] netlink: 144 bytes leftover after parsing attributes in process `syz.3.7113'. [ 590.154508][T30376] bridge0: port 3(syz_tun) entered blocking state [ 590.154951][T30397] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7116'. [ 590.161078][T30376] bridge0: port 3(syz_tun) entered listening state [ 590.201897][T30393] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7113'. [ 590.236941][T30393] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7113'. [ 590.248832][T30383] bridge0: port 3(syz_tun) entered disabled state [ 590.255513][T30383] bridge0: port 2(bridge_slave_1) entered disabled state [ 590.262753][T30383] bridge0: port 1(bridge_slave_0) entered disabled state [ 590.284316][T30383] bridge0: port 3(syz_tun) entered blocking state [ 590.291007][T30383] bridge0: port 3(syz_tun) entered listening state [ 590.297763][T30383] bridge0: port 2(bridge_slave_1) entered blocking state [ 590.304869][T30383] bridge0: port 2(bridge_slave_1) entered listening state [ 590.312415][T30383] bridge0: port 1(bridge_slave_0) entered blocking state [ 590.319565][T30383] bridge0: port 1(bridge_slave_0) entered listening state [ 590.333194][T30408] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7116'. [ 590.352728][T30383] bridge0: entered promiscuous mode [ 590.371571][T30383] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 590.633015][T30421] netlink: 16 bytes leftover after parsing attributes in process `syz.7.7120'. [ 590.648678][T30418] netlink: 20 bytes leftover after parsing attributes in process `syz.6.7119'. [ 590.964922][T30399] infiniband syz1: set active [ 590.984939][T30399] infiniband syz1: added syz_tun [ 591.016563][T30399] syz1: rxe_create_cq: returned err = -12 [ 591.022380][T30399] infiniband syz1: Couldn't create ib_mad CQ [ 591.025657][T30447] Bluetooth: hci1: too big key_count value 32778 [ 591.049200][T30399] infiniband syz1: Couldn't open port 1 [ 591.095943][T30399] RDS/IB: syz1: added [ 591.100378][T30399] smc: adding ib device syz1 with port count 1 [ 591.106767][T30399] smc: ib device syz1 port 1 has no pnetid [ 591.676005][T30462] netlink: 24 bytes leftover after parsing attributes in process `syz.7.7133'. [ 591.744628][T30462] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7133'. [ 592.008890][T30473] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7137'. [ 592.328382][T30493] bond4: (slave vxcan5): The slave device specified does not support setting the MAC address [ 592.341056][T30493] bond4: (slave vxcan5): Error -95 calling set_mac_address [ 592.348513][ C1] bridge0: port 1(bridge_slave_0) entered learning state [ 592.348784][ C1] bridge0: port 2(bridge_slave_1) entered learning state [ 592.348976][ C1] bridge0: port 3(syz_tun) entered learning state [ 592.383980][T30496] x_tables: ip6_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT/POSTROUTING [ 592.458044][T30489] macvlan2: entered promiscuous mode [ 592.495580][T30489] macvlan2: entered allmulticast mode [ 592.526954][T30489] bond4: (slave macvlan2): Error -98 calling set_mac_address [ 592.742090][T30517] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 593.214083][T30544] ip6t_rpfilter: unknown options [ 593.721045][T30573] lo speed is unknown, defaulting to 1000 [ 594.024409][T30597] netlink: 'syz.6.7175': attribute type 33 has an invalid length. [ 594.133851][T30600] openvswitch: netlink: Missing key (keys=40, expected=100) [ 594.150680][T30600] delete_channel: no stack [ 594.218386][T30605] netlink: 'syz.3.7178': attribute type 3 has an invalid length. [ 594.288486][T30611] IPVS: length: 202 != 6168 [ 594.425217][ C1] bridge0: port 3(syz_tun) entered forwarding state [ 594.431844][ C1] bridge0: topology change detected, propagating [ 594.438595][ C1] bridge0: port 2(bridge_slave_1) entered forwarding state [ 594.445846][ C1] bridge0: topology change detected, propagating [ 594.452365][ C1] bridge0: port 1(bridge_slave_0) entered forwarding state [ 594.459659][ C1] bridge0: topology change detected, propagating [ 594.770974][T30631] ipt_REJECT: TCP_RESET invalid for non-tcp [ 595.154961][T30645] syzkaller1: entered promiscuous mode [ 595.162408][T30645] syzkaller1: entered allmulticast mode [ 595.184477][T30645] __nla_validate_parse: 11 callbacks suppressed [ 595.184495][T30645] netlink: 24 bytes leftover after parsing attributes in process `syz.6.7189'. [ 595.490756][T30668] ªªªªªª: renamed from lo (while UP) [ 595.752878][T30674] netlink: 'syz.3.7195': attribute type 10 has an invalid length. [ 595.790080][T30674] bond0: (slave geneve1): Enslaving as an active interface with an up link [ 595.982049][T30680] syzkaller0: entered promiscuous mode [ 595.988226][T30680] syzkaller0: entered allmulticast mode [ 596.331580][T30688] tipc: Enabled bearer , priority 0 [ 596.546106][T30688] tipc: Resetting bearer [ 596.584199][T30685] tipc: Disabling bearer [ 596.592934][T30708] netlink: 104 bytes leftover after parsing attributes in process `syz.3.7205'. [ 596.620010][T30708] netlink: 'syz.3.7205': attribute type 23 has an invalid length. [ 596.662922][T30710] syzkaller0: entered promiscuous mode [ 596.685417][T30710] syzkaller0: entered allmulticast mode [ 596.786276][T30715] blkio.reset_stats is deprecated [ 596.792785][T30718] netlink: 'syz.4.7210': attribute type 15 has an invalid length. [ 596.839394][T30718] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7210'. [ 596.964195][T30727] netlink: 24 bytes leftover after parsing attributes in process `syz.7.7213'. [ 597.054954][T30733] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7214'. [ 597.310975][T30749] netlink: 84 bytes leftover after parsing attributes in process `syz.0.7220'. [ 597.350352][T30755] netlink: 56 bytes leftover after parsing attributes in process `syz.7.7222'. [ 597.362734][T30755] sctp: [Deprecated]: syz.7.7222 (pid 30755) Use of int in max_burst socket option deprecated. [ 597.362734][T30755] Use struct sctp_assoc_value instead [ 597.378954][T30753] netlink: 220 bytes leftover after parsing attributes in process `syz.4.7223'. [ 597.389623][T30758] sctp: [Deprecated]: syz.7.7222 (pid 30758) Use of int in max_burst socket option deprecated. [ 597.389623][T30758] Use struct sctp_assoc_value instead [ 597.654038][T30773] xt_HMARK: spi-set and port-set can't be combined [ 597.674371][T30773] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7230'. [ 597.733908][T30778] netlink: 'syz.7.7232': attribute type 1 has an invalid length. [ 597.953991][T30795] set match dimension is over the limit! [ 598.021397][T30800] bridge0: port 1(bridge_slave_0) entered disabled state [ 598.057629][T30800] bridge0: port 2(bridge_slave_1) entered disabled state [ 598.308980][T30809] netlink: 'syz.0.7243': attribute type 1 has an invalid length. [ 598.560708][T30830] netlink: 24 bytes leftover after parsing attributes in process `syz.6.7248'. [ 598.780130][ T5834] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 598.793976][ T5834] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 598.802855][ T5834] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 598.811404][ T5834] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 598.812175][T30840] xt_bpf: check failed: parse error [ 598.823673][ T5834] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 598.890508][T30836] lo speed is unknown, defaulting to 1000 [ 599.375385][T30866] pim6reg: entered allmulticast mode [ 599.389201][T30867] pim6reg: left allmulticast mode [ 599.389705][T30861] Cannot find add_set index 2 as target [ 599.619907][T30836] chnl_net:caif_netlink_parms(): no params data found [ 599.839474][T30894] tipc: Enabled bearer , priority 0 [ 599.846408][T30836] bridge0: port 1(bridge_slave_0) entered blocking state [ 599.853682][T30836] bridge0: port 1(bridge_slave_0) entered disabled state [ 599.864754][T30836] bridge_slave_0: entered allmulticast mode [ 599.873514][T30836] bridge_slave_0: entered promiscuous mode [ 599.883542][T30891] syzkaller0: entered promiscuous mode [ 599.889551][T30891] syzkaller0: entered allmulticast mode [ 599.897175][T30894] syzkaller0: entered promiscuous mode [ 599.902771][T30894] syzkaller0: entered allmulticast mode [ 599.916217][T30836] bridge0: port 2(bridge_slave_1) entered blocking state [ 599.923406][T30836] bridge0: port 2(bridge_slave_1) entered disabled state [ 599.931595][T30836] bridge_slave_1: entered allmulticast mode [ 599.941622][T30836] bridge_slave_1: entered promiscuous mode [ 600.020905][T30836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 600.034122][T30894] tipc: Resetting bearer [ 600.048884][T30836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 600.092916][T30893] tipc: Resetting bearer [ 600.114503][T30893] tipc: Disabling bearer [ 600.136270][T30836] team0: Port device team_slave_0 added [ 600.144195][T30836] team0: Port device team_slave_1 added [ 600.224030][T30836] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 600.231861][T30836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 600.259343][T30836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 600.295574][T30836] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 600.303701][T30836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 600.333350][T30836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 600.430798][T30836] hsr_slave_0: entered promiscuous mode [ 600.442438][T30836] hsr_slave_1: entered promiscuous mode [ 600.449148][T30836] debugfs: 'hsr0' already exists in 'hsr' [ 600.455436][T30836] Cannot create hsr debugfs directory [ 600.556954][T30836] netdevsim netdevsim7 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 600.620777][T30836] netdevsim netdevsim7 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 600.734757][T30836] netdevsim netdevsim7 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 600.860587][T30933] __nla_validate_parse: 1 callbacks suppressed [ 600.860606][T30933] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7278'. [ 600.916944][ T5831] Bluetooth: hci2: command tx timeout [ 601.044173][T30836] netdevsim netdevsim7 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 601.070171][T30930] tipc: Enabled bearer , priority 0 [ 601.144262][T30937] syzkaller0: entered promiscuous mode [ 601.152208][T30937] syzkaller0: entered allmulticast mode [ 601.208658][T30949] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7281'. [ 601.284098][T30930] tipc: Resetting bearer [ 601.303977][T30945] lo speed is unknown, defaulting to 1000 [ 601.355821][T30917] tipc: Resetting bearer [ 601.408822][T30917] tipc: Disabling bearer [ 601.782101][T30836] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 601.837371][T30973] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7287'. [ 601.895777][T30976] netlink: 'syz.0.7288': attribute type 12 has an invalid length. [ 601.904894][T30978] netlink: 44 bytes leftover after parsing attributes in process `syz.6.7287'. [ 601.920289][T30836] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 602.009514][T30836] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 602.057584][T30982] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7290'. [ 602.065368][T30836] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 602.409038][T31006] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7295'. [ 602.461082][T31006] ipip0: entered promiscuous mode [ 602.466780][T31006] ipip0: entered allmulticast mode [ 602.570624][T30836] 8021q: adding VLAN 0 to HW filter on device bond0 [ 602.573699][T31015] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7298'. [ 602.615530][T31016] xt_CT: You must specify a L4 protocol and not use inversions on it [ 602.652267][T30836] 8021q: adding VLAN 0 to HW filter on device team0 [ 602.678862][T24825] bridge0: port 1(bridge_slave_0) entered blocking state [ 602.686205][T24825] bridge0: port 1(bridge_slave_0) entered forwarding state [ 602.719826][T17496] bridge0: port 2(bridge_slave_1) entered blocking state [ 602.727057][T17496] bridge0: port 2(bridge_slave_1) entered forwarding state [ 602.987827][ T5831] Bluetooth: hci2: command tx timeout [ 603.106665][T31038] netlink: 'syz.4.7306': attribute type 2 has an invalid length. [ 603.118777][T30836] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 603.137246][T31038] netlink: 'syz.4.7306': attribute type 1 has an invalid length. [ 603.224020][T31044] netlink: 24 bytes leftover after parsing attributes in process `syz.6.7309'. [ 603.315820][T31050] syzkaller0: entered promiscuous mode [ 603.322744][T31050] syzkaller0: entered allmulticast mode [ 603.330974][T31047] tipc: Enabled bearer , priority 0 [ 603.440313][T31059] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7312'. [ 603.544494][T31047] tipc: Resetting bearer [ 603.572399][T31047] tipc: Disabling bearer [ 603.592369][T31066] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7313'. [ 603.686004][T30836] veth0_vlan: entered promiscuous mode [ 603.704051][T30836] veth1_vlan: entered promiscuous mode [ 603.762394][T30836] veth0_macvtap: entered promiscuous mode [ 603.779011][T30836] veth1_macvtap: entered promiscuous mode [ 603.831825][T30836] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 603.861679][T30836] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 603.907799][T24824] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 603.951672][T24824] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 603.966220][T24824] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 603.987471][T24824] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 604.086217][T17496] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 604.094736][T17496] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 604.918924][T24824] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 604.937955][T24824] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 605.065501][ T5831] Bluetooth: hci2: command tx timeout [ 605.093583][T31117] tipc: Enabled bearer , priority 0 [ 605.101218][T31117] syzkaller0: entered promiscuous mode [ 605.107505][T31117] syzkaller0: entered allmulticast mode [ 605.187593][T31117] tipc: Resetting bearer [ 605.230452][T31116] tipc: Resetting bearer [ 605.270755][T31116] tipc: Disabling bearer [ 605.658649][T31161] lo speed is unknown, defaulting to 1000 [ 605.771035][T31171] lo speed is unknown, defaulting to 1000 [ 605.994667][T31185] IPVS: length: 24 != 16106127384 [ 606.391810][T31196] xt_TPROXY: Can be used only with -p tcp or -p udp [ 606.863967][T31209] __nla_validate_parse: 9 callbacks suppressed [ 606.863987][T31209] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7354'. [ 606.887309][T31208] netlink: 'syz.6.7353': attribute type 1 has an invalid length. [ 607.005025][T31208] bond8: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 607.061561][T31216] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 607.145766][ T5831] Bluetooth: hci2: command tx timeout [ 607.339647][T31229] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7358'. [ 607.386036][T31229] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7358'. [ 607.572154][T31242] sock: sock_set_timeout: `syz.4.7364' (pid 31242) tries to set negative timeout [ 607.748033][T31252] tipc: Enabling of bearer rejected, failed to enable media [ 607.796638][T31252] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7368'. [ 607.915722][T31266] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7372'. [ 608.258664][T31289] netlink: 'syz.6.7378': attribute type 3 has an invalid length. [ 608.288509][T31289] netlink: 766 bytes leftover after parsing attributes in process `syz.6.7378'. [ 608.542499][T31310] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7384'. [ 608.826979][T31323] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 608.913004][T31318] netlink: 76 bytes leftover after parsing attributes in process `syz.4.7384'. [ 608.977154][T31323] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7386'. [ 609.157245][T31341] batman_adv: batadv0: Local translation table size (116) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:2a [ 609.348102][T31348] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7395'. [ 609.397792][T31348] Cannot find add_set index 0 as target [ 609.563629][T31372] veth0: entered promiscuous mode [ 609.569765][T31372] veth0: left promiscuous mode [ 609.681760][T31379] netlink: 'syz.4.7406': attribute type 8 has an invalid length. [ 609.743236][T31379] bridge0: port 2(bridge_slave_1) entered disabled state [ 610.064845][T31402] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 610.082350][T31404] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 610.421813][T31415] bond5: option xmit_hash_policy: invalid value (64) [ 610.661222][T31415] bond5 (unregistering): Released all slaves [ 610.729488][T31434] IPVS: length: 35 != 8 [ 610.892003][T31439] netlink: 'syz.7.7425': attribute type 1 has an invalid length. [ 610.924065][T31439] vlan2: entered promiscuous mode [ 610.931176][T31439] vlan2: entered allmulticast mode [ 610.942605][T31439] veth1_vlan: entered allmulticast mode [ 610.951753][T31437] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 611.748618][T31496] netlink: 'syz.3.7440': attribute type 10 has an invalid length. [ 611.758356][T31496] bridge0: port 2(bridge_slave_1) entered blocking state [ 611.765548][T31496] bridge0: port 2(bridge_slave_1) entered forwarding state [ 611.772938][T31496] bridge0: port 1(bridge_slave_0) entered blocking state [ 611.780102][T31496] bridge0: port 1(bridge_slave_0) entered forwarding state [ 611.791971][T31496] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 611.816306][T31496] rdma_rxe: rxe_newlink: failed to add syz_tun [ 611.844941][T31485] bond5: entered promiscuous mode [ 611.879251][T31492] bond_slave_0: entered promiscuous mode [ 611.885451][T31492] bond_slave_1: entered promiscuous mode [ 611.891263][T31492] geneve1: entered promiscuous mode [ 611.896990][T31492] bridge0: entered promiscuous mode [ 611.941745][T31492] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 611.949810][T31503] openvswitch: netlink: Missing key (keys=40, expected=80) [ 611.962247][T31492] bond5: (slave macvlan0): making interface the new active one [ 611.974783][T31492] macvlan0: entered promiscuous mode [ 611.980355][T31492] bond0: entered promiscuous mode [ 611.988294][T31492] bond5: (slave macvlan0): Enslaving as an active interface with an up link [ 611.998284][T31495] bridge0: port 3(syz_tun) entered blocking state [ 612.006141][T31508] __nla_validate_parse: 11 callbacks suppressed [ 612.006158][T31508] netlink: 12 bytes leftover after parsing attributes in process `syz.7.7443'. [ 612.022102][T31495] bridge0: port 3(syz_tun) entered disabled state [ 612.029133][T31495] syz_tun: entered allmulticast mode [ 612.068056][T31495] syz_tun: entered promiscuous mode [ 612.073949][T31495] bridge0: port 3(syz_tun) entered blocking state [ 612.080559][T31495] bridge0: port 3(syz_tun) entered forwarding state [ 614.262379][T31518] bridge_slave_0: left allmulticast mode [ 614.272278][T31518] bridge_slave_0: left promiscuous mode [ 614.281928][T31518] bridge0: port 1(bridge_slave_0) entered disabled state [ 614.294323][T31518] bridge_slave_1: left allmulticast mode [ 614.305217][T31518] bridge_slave_1: left promiscuous mode [ 614.311042][T31518] bridge0: port 2(bridge_slave_1) entered disabled state [ 614.355897][T31518] bond0: (slave bond_slave_0): Releasing backup interface [ 614.374288][T31518] bond_slave_0: left promiscuous mode [ 614.394515][T31518] bond0: (slave bond_slave_1): Releasing backup interface [ 614.401152][T31557] IPVS: set_ctl: invalid protocol: 117 172.20.20.170:20001 [ 614.403389][T31558] netlink: 'syz.6.7455': attribute type 1 has an invalid length. [ 614.411383][T31518] bond_slave_1: left promiscuous mode [ 614.436261][T31518] team0: Port device team_slave_0 removed [ 614.449007][T31518] team0: Port device team_slave_1 removed [ 614.456659][T31518] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 614.464052][T31518] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 614.479567][T31518] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 614.488146][T31518] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 614.503987][T31518] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 614.526146][T31561] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7455'. [ 614.556684][T31553] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7452'. [ 614.590290][T31558] 8021q: adding VLAN 0 to HW filter on device bond9 [ 614.893820][T31583] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 614.908401][T31583] xt_TCPMSS: Only works on TCP SYN packets [ 615.070983][T31592] netlink: 14 bytes leftover after parsing attributes in process `syz.0.7462'. [ 615.184813][T31600] netlink: 404 bytes leftover after parsing attributes in process `syz.6.7468'. [ 615.239846][T31602] tipc: Enabled bearer , priority 0 [ 615.251662][T31602] syzkaller0: entered promiscuous mode [ 615.261822][T31602] syzkaller0: entered allmulticast mode [ 615.314366][T31602] tipc: Resetting bearer [ 615.333648][T31601] tipc: Resetting bearer [ 615.358499][T31601] tipc: Disabling bearer [ 615.641383][T31630] netlink: 80 bytes leftover after parsing attributes in process `syz.4.7476'. [ 615.662849][T31634] syzkaller0: entered promiscuous mode [ 615.677240][T31630] netlink: 80 bytes leftover after parsing attributes in process `syz.4.7476'. [ 615.685140][T31634] syzkaller0: entered allmulticast mode [ 615.701812][T31630] netlink: 80 bytes leftover after parsing attributes in process `syz.4.7476'. [ 615.792856][T31638] netlink: 12 bytes leftover after parsing attributes in process `syz.7.7478'. [ 615.873623][T31640] openvswitch: netlink: Missing valid actions attribute. [ 615.881072][T31640] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 615.924941][T31638] geneve2: entered promiscuous mode [ 616.185663][ T5834] Bluetooth: hci1: command 0x0405 tx timeout [ 616.268970][T31664] IPv6: sit1: Disabled Multicast RS [ 616.283374][T31664] sit1: entered allmulticast mode [ 616.539057][T31679] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 616.554604][T31679] netlink: 12 bytes leftover after parsing attributes in process `syz.7.7491'. [ 616.604359][T31681] bridge0: port 3(ipvlan3) entered blocking state [ 616.611140][T31681] bridge0: port 3(ipvlan3) entered disabled state [ 616.621374][T31681] ipvlan3: entered allmulticast mode [ 616.626787][T31681] bridge0: entered allmulticast mode [ 616.636029][T31681] ipvlan3: left allmulticast mode [ 616.641600][T31681] bridge0: left allmulticast mode [ 616.821654][T31692] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 616.873968][T31696] Cannot find add_set index 0 as target [ 616.903506][T31692] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:1) [ 616.935778][T31692] bridge_slave_0: invalid flags given to default FDB implementation [ 617.061103][T31707] netlink: 224 bytes leftover after parsing attributes in process `syz.6.7501'. [ 617.111885][T31707] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7501'. [ 617.304433][T31720] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 617.380640][T31724] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7506'. [ 617.400462][T31724] netlink: 24 bytes leftover after parsing attributes in process `syz.6.7506'. [ 617.446788][T31728] netlink: 'syz.4.7508': attribute type 33 has an invalid length. [ 617.518412][T31728] bond5: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 617.530547][T31728] bond5 (unregistering): Released all slaves [ 617.557777][T31735] tunl0: left promiscuous mode [ 617.562584][T31735] tunl0: left allmulticast mode [ 618.220554][T31735] net veth1_virt_wifi virt_wifi0: left promiscuous mode [ 618.229157][T31735] net veth1_virt_wifi virt_wifi0: left allmulticast mode [ 618.370715][T31735] bond1: left allmulticast mode [ 618.456565][T31734] netlink: 24 bytes leftover after parsing attributes in process `syz.7.7510'. [ 618.481922][T31739] pim6reg1: entered promiscuous mode [ 618.517444][T31739] pim6reg1: entered allmulticast mode [ 618.605438][T24824] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 618.625623][T24824] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 618.636373][T24824] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 618.645298][T24824] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 618.727276][T24824] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 618.744694][T24824] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 618.766836][T24824] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 618.814890][T24824] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 618.920678][T31768] netlink: 'syz.6.7518': attribute type 32 has an invalid length. [ 618.951287][T31768] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7518'. [ 619.131361][T31772] netlink: 10 bytes leftover after parsing attributes in process `syz.4.7519'. [ 619.151687][T31768] bond10: option coupled_control: invalid value (52) [ 619.180711][T31768] bond10 (unregistering): Released all slaves [ 619.190366][T31774] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7519'. [ 619.449575][T31787] netlink: 20 bytes leftover after parsing attributes in process `syz.6.7524'. [ 619.653488][T31800] netlink: 60 bytes leftover after parsing attributes in process `syz.3.7530'. [ 619.794809][T31811] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 619.806697][T31806] team0: Mode changed to "activebackup" [ 620.031264][T31833] batman_adv: batadv0: Local translation table size (116) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:2a [ 620.247213][T31813] [ 620.249551][T31813] ====================================================== [ 620.256565][T31813] WARNING: possible circular locking dependency detected [ 620.263585][T31813] syzkaller #0 Not tainted [ 620.267982][T31813] ------------------------------------------------------ [ 620.274984][T31813] syz.3.7534/31813 is trying to acquire lock: [ 620.281036][T31813] ffffffff8e025208 (pcpu_alloc_mutex){+.+.}-{4:4}, at: pcpu_alloc_noprof+0x286/0x1720 [ 620.290623][T31813] [ 620.290623][T31813] but task is already holding lock: [ 620.298079][T31813] ffff888028157668 (&q->q_usage_counter(io)#69){++++}-{0:0}, at: nbd_start_device+0x17f/0xb10 [ 620.308348][T31813] [ 620.308348][T31813] which lock already depends on the new lock. [ 620.308348][T31813] [ 620.318739][T31813] [ 620.318739][T31813] the existing dependency chain (in reverse order) is: [ 620.327743][T31813] [ 620.327743][T31813] -> #2 (&q->q_usage_counter(io)#69){++++}-{0:0}: [ 620.336396][T31813] lock_acquire+0x120/0x360 [ 620.341425][T31813] blk_alloc_queue+0x538/0x620 [ 620.346701][T31813] __blk_mq_alloc_disk+0x15c/0x340 [ 620.352319][T31813] nbd_dev_add+0x46c/0xae0 [ 620.357245][T31813] nbd_genl_connect+0x919/0x18f0 [ 620.362685][T31813] genl_family_rcv_msg_doit+0x215/0x300 [ 620.368740][T31813] genl_rcv_msg+0x60e/0x790 [ 620.373751][T31813] netlink_rcv_skb+0x208/0x470 [ 620.379029][T31813] genl_rcv+0x28/0x40 [ 620.383520][T31813] netlink_unicast+0x82f/0x9e0 [ 620.388789][T31813] netlink_sendmsg+0x805/0xb30 [ 620.394054][T31813] __sock_sendmsg+0x21c/0x270 [ 620.399235][T31813] ____sys_sendmsg+0x505/0x830 [ 620.404540][T31813] ___sys_sendmsg+0x21f/0x2a0 [ 620.409722][T31813] __x64_sys_sendmsg+0x19b/0x260 [ 620.415166][T31813] do_syscall_64+0xfa/0xfa0 [ 620.420176][T31813] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 620.426575][T31813] [ 620.426575][T31813] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 620.433773][T31813] lock_acquire+0x120/0x360 [ 620.438782][T31813] fs_reclaim_acquire+0x72/0x100 [ 620.444241][T31813] prepare_alloc_pages+0x153/0x610 [ 620.449863][T31813] __alloc_frozen_pages_noprof+0x123/0x370 [ 620.456172][T31813] __alloc_pages_noprof+0xa/0x30 [ 620.461695][T31813] pcpu_populate_chunk+0x182/0xb30 [ 620.467318][T31813] pcpu_alloc_noprof+0xcbf/0x1720 [ 620.472863][T31813] xt_percpu_counter_alloc+0x161/0x220 [ 620.478835][T31813] translate_table+0x1323/0x2040 [ 620.484294][T31813] ip6t_register_table+0x106/0x7d0 [ 620.489912][T31813] ip6table_raw_table_init+0x54/0x80 [ 620.495706][T31813] xt_find_table_lock+0x30c/0x3e0 [ 620.501259][T31813] xt_request_find_table_lock+0x26/0x100 [ 620.507400][T31813] do_ip6t_get_ctl+0x730/0x1180 [ 620.512758][T31813] nf_getsockopt+0x26e/0x290 [ 620.517855][T31813] ipv6_getsockopt+0x1ed/0x290 [ 620.523124][T31813] do_sock_getsockopt+0x372/0x450 [ 620.528652][T31813] __x64_sys_getsockopt+0x1a5/0x250 [ 620.534360][T31813] do_syscall_64+0xfa/0xfa0 [ 620.539430][T31813] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 620.545827][T31813] [ 620.545827][T31813] -> #0 (pcpu_alloc_mutex){+.+.}-{4:4}: [ 620.553632][T31813] validate_chain+0xb9b/0x2140 [ 620.558908][T31813] __lock_acquire+0xab9/0xd20 [ 620.564085][T31813] lock_acquire+0x120/0x360 [ 620.569095][T31813] __mutex_lock+0x187/0x1350 [ 620.574193][T31813] pcpu_alloc_noprof+0x286/0x1720 [ 620.579728][T31813] sbitmap_init_node+0x1e1/0x640 [ 620.585173][T31813] sbitmap_queue_init_node+0x3e/0x4d0 [ 620.591056][T31813] blk_mq_init_tags+0x15c/0x2d0 [ 620.596419][T31813] blk_mq_alloc_map_and_rqs+0xbb/0x9c0 [ 620.602394][T31813] blk_mq_update_nr_hw_queues+0xa26/0x1ab0 [ 620.608702][T31813] nbd_start_device+0x17f/0xb10 [ 620.614059][T31813] nbd_genl_connect+0x135b/0x18f0 [ 620.619607][T31813] genl_family_rcv_msg_doit+0x215/0x300 [ 620.625677][T31813] genl_rcv_msg+0x60e/0x790 [ 620.630697][T31813] netlink_rcv_skb+0x208/0x470 [ 620.635973][T31813] genl_rcv+0x28/0x40 [ 620.640460][T31813] netlink_unicast+0x82f/0x9e0 [ 620.645729][T31813] netlink_sendmsg+0x805/0xb30 [ 620.651035][T31813] __sock_sendmsg+0x21c/0x270 [ 620.656225][T31813] ____sys_sendmsg+0x505/0x830 [ 620.661496][T31813] ___sys_sendmsg+0x21f/0x2a0 [ 620.666675][T31813] __x64_sys_sendmsg+0x19b/0x260 [ 620.672119][T31813] do_syscall_64+0xfa/0xfa0 [ 620.677132][T31813] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 620.683536][T31813] [ 620.683536][T31813] other info that might help us debug this: [ 620.683536][T31813] [ 620.693745][T31813] Chain exists of: [ 620.693745][T31813] pcpu_alloc_mutex --> fs_reclaim --> &q->q_usage_counter(io)#69 [ 620.693745][T31813] [ 620.707388][T31813] Possible unsafe locking scenario: [ 620.707388][T31813] [ 620.714844][T31813] CPU0 CPU1 [ 620.720208][T31813] ---- ---- [ 620.725561][T31813] lock(&q->q_usage_counter(io)#69); [ 620.730946][T31813] lock(fs_reclaim); [ 620.737431][T31813] lock(&q->q_usage_counter(io)#69); [ 620.745323][T31813] lock(pcpu_alloc_mutex); [ 620.749813][T31813] [ 620.749813][T31813] *** DEADLOCK *** [ 620.749813][T31813] [ 620.757936][T31813] 6 locks held by syz.3.7534/31813: [ 620.763110][T31813] #0: ffffffff8f330d50 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 620.771283][T31813] #1: ffffffff8f330b68 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 620.780237][T31813] #2: ffff88802e9f49c8 (&set->update_nr_hwq_lock){++++}-{4:4}, at: blk_mq_update_nr_hw_queues+0xa7/0x1ab0 [ 620.791621][T31813] #3: ffff88802e9f48d8 (&set->tag_list_lock){+.+.}-{4:4}, at: blk_mq_update_nr_hw_queues+0xba/0x1ab0 [ 620.802746][T31813] #4: ffff888028157668 (&q->q_usage_counter(io)#69){++++}-{0:0}, at: nbd_start_device+0x17f/0xb10 [ 620.813442][T31813] #5: ffff8880281576a0 (&q->q_usage_counter(queue)#52){+.+.}-{0:0}, at: nbd_start_device+0x17f/0xb10 [ 620.824394][T31813] [ 620.824394][T31813] stack backtrace: [ 620.830271][T31813] CPU: 0 UID: 0 PID: 31813 Comm: syz.3.7534 Not tainted syzkaller #0 PREEMPT(full) [ 620.830290][T31813] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 620.830300][T31813] Call Trace: [ 620.830306][T31813] [ 620.830314][T31813] dump_stack_lvl+0x189/0x250 [ 620.830338][T31813] ? __pfx_dump_stack_lvl+0x10/0x10 [ 620.830357][T31813] ? __pfx__printk+0x10/0x10 [ 620.830372][T31813] ? print_lock_name+0xde/0x100 [ 620.830387][T31813] print_circular_bug+0x2ee/0x310 [ 620.830407][T31813] check_noncircular+0x134/0x160 [ 620.830427][T31813] validate_chain+0xb9b/0x2140 [ 620.830451][T31813] __lock_acquire+0xab9/0xd20 [ 620.830467][T31813] ? pcpu_alloc_noprof+0x286/0x1720 [ 620.830488][T31813] lock_acquire+0x120/0x360 [ 620.830500][T31813] ? pcpu_alloc_noprof+0x286/0x1720 [ 620.830525][T31813] __mutex_lock+0x187/0x1350 [ 620.830544][T31813] ? pcpu_alloc_noprof+0x286/0x1720 [ 620.830567][T31813] ? kasan_save_track+0x4f/0x80 [ 620.830586][T31813] ? kasan_save_track+0x3e/0x80 [ 620.830604][T31813] ? __kasan_kmalloc+0x93/0xb0 [ 620.830623][T31813] ? blk_mq_init_tags+0x83/0x2d0 [ 620.830640][T31813] ? blk_mq_alloc_map_and_rqs+0xbb/0x9c0 [ 620.830661][T31813] ? blk_mq_update_nr_hw_queues+0xa26/0x1ab0 [ 620.830676][T31813] ? pcpu_alloc_noprof+0x286/0x1720 [ 620.830695][T31813] ? nbd_genl_connect+0x135b/0x18f0 [ 620.830709][T31813] ? genl_family_rcv_msg_doit+0x215/0x300 [ 620.830726][T31813] ? genl_rcv_msg+0x60e/0x790 [ 620.830742][T31813] ? __pfx___mutex_lock+0x10/0x10 [ 620.830759][T31813] ? ____sys_sendmsg+0x505/0x830 [ 620.830774][T31813] ? do_syscall_64+0xfa/0xfa0 [ 620.830791][T31813] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 620.830812][T31813] pcpu_alloc_noprof+0x286/0x1720 [ 620.830837][T31813] sbitmap_init_node+0x1e1/0x640 [ 620.830857][T31813] sbitmap_queue_init_node+0x3e/0x4d0 [ 620.830874][T31813] blk_mq_init_tags+0x15c/0x2d0 [ 620.830893][T31813] blk_mq_alloc_map_and_rqs+0xbb/0x9c0 [ 620.830916][T31813] ? blk_mq_update_nr_hw_queues+0x928/0x1ab0 [ 620.830930][T31813] ? kfree+0x19a/0x6d0 [ 620.830946][T31813] ? blk_mq_update_nr_hw_queues+0x8d0/0x1ab0 [ 620.830963][T31813] blk_mq_update_nr_hw_queues+0xa26/0x1ab0 [ 620.830986][T31813] ? __pfx_blk_mq_update_nr_hw_queues+0x10/0x10 [ 620.831007][T31813] ? sysfs_add_file_mode_ns+0x259/0x300 [ 620.831026][T31813] nbd_start_device+0x17f/0xb10 [ 620.831043][T31813] ? device_create_file+0xf4/0x1c0 [ 620.831059][T31813] nbd_genl_connect+0x135b/0x18f0 [ 620.831076][T31813] ? __pfx_nbd_genl_connect+0x10/0x10 [ 620.831092][T31813] ? rcu_is_watching+0x15/0xb0 [ 620.831109][T31813] ? __nla_parse+0x40/0x60 [ 620.831125][T31813] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 620.831145][T31813] genl_family_rcv_msg_doit+0x215/0x300 [ 620.831165][T31813] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 620.831187][T31813] ? stack_trace_save+0x9c/0xe0 [ 620.831207][T31813] genl_rcv_msg+0x60e/0x790 [ 620.831230][T31813] ? __pfx_genl_rcv_msg+0x10/0x10 [ 620.831246][T31813] ? __pfx_nbd_genl_connect+0x10/0x10 [ 620.831263][T31813] netlink_rcv_skb+0x208/0x470 [ 620.831283][T31813] ? __lock_acquire+0xab9/0xd20 [ 620.831296][T31813] ? __pfx_genl_rcv_msg+0x10/0x10 [ 620.831313][T31813] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 620.831339][T31813] ? down_read+0x1ad/0x2e0 [ 620.831359][T31813] genl_rcv+0x28/0x40 [ 620.831374][T31813] netlink_unicast+0x82f/0x9e0 [ 620.831395][T31813] ? __pfx_netlink_unicast+0x10/0x10 [ 620.831414][T31813] ? netlink_sendmsg+0x642/0xb30 [ 620.831426][T31813] ? skb_put+0x11b/0x210 [ 620.831440][T31813] netlink_sendmsg+0x805/0xb30 [ 620.831455][T31813] ? __pfx_netlink_sendmsg+0x10/0x10 [ 620.831477][T31813] ? aa_sock_msg_perm+0xf1/0x1d0 [ 620.831498][T31813] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 620.831512][T31813] ? __pfx_netlink_sendmsg+0x10/0x10 [ 620.831533][T31813] __sock_sendmsg+0x21c/0x270 [ 620.831552][T31813] ____sys_sendmsg+0x505/0x830 [ 620.831568][T31813] ? __pfx_____sys_sendmsg+0x10/0x10 [ 620.831585][T31813] ? import_iovec+0x74/0xa0 [ 620.831603][T31813] ___sys_sendmsg+0x21f/0x2a0 [ 620.831618][T31813] ? __pfx____sys_sendmsg+0x10/0x10 [ 620.831645][T31813] ? __fget_files+0x2a/0x420 [ 620.831658][T31813] ? __fget_files+0x3a0/0x420 [ 620.831675][T31813] __x64_sys_sendmsg+0x19b/0x260 [ 620.831690][T31813] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 620.831711][T31813] ? do_syscall_64+0xbe/0xfa0 [ 620.831729][T31813] do_syscall_64+0xfa/0xfa0 [ 620.831746][T31813] ? lockdep_hardirqs_on+0x9c/0x150 [ 620.831764][T31813] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 620.831778][T31813] ? clear_bhb_loop+0x60/0xb0 [ 620.831794][T31813] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 620.831808][T31813] RIP: 0033:0x7f9895f8efc9 [ 620.831823][T31813] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 620.831836][T31813] RSP: 002b:00007f9896d93038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 620.831852][T31813] RAX: ffffffffffffffda RBX: 00007f98961e5fa0 RCX: 00007f9895f8efc9 [ 620.831864][T31813] RDX: 0000000020000000 RSI: 0000200000001ac0 RDI: 0000000000000006 [ 620.831874][T31813] RBP: 00007f9896011f91 R08: 0000000000000000 R09: 0000000000000000 [ 620.831883][T31813] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 620.831892][T31813] R13: 00007f98961e6038 R14: 00007f98961e5fa0 R15: 00007ffe84f78ab8 [ 620.831909][T31813] [ 621.377791][ T5831] block nbd3: Receive control failed (result -32) [ 621.377808][ T5834] block nbd3: Receive control failed (result -32) [ 621.377826][ T5840] block nbd3: Receive control failed (result -32) [ 621.384469][ T5834] block nbd3: Receive control failed (result -32) [ 621.400121][ T5834] block nbd3: Receive control failed (result -32) [ 621.404683][ T5840] block nbd3: Receive control failed (result -32) [ 621.411569][ T5831] block nbd3: Receive control failed (result -32) [ 621.445432][T31813] nbd3: detected capacity change from 0 to 63 [ 624.347728][ T1301] aoe: packet could not be sent on bond0. consider increasing tx_queue_len