last executing test programs: 5m58.628412951s ago: executing program 3 (id=13427): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0xc0, 0x30, 0x800, 0x70bd2a, 0x25dfdbfd, {0x14}, [@generic="53a4d1d5b73f9551b0c3140a732bcf13a650c4b28decf5e04d0ad32a7adce4beb39089325ab974388cb9d1b0e771bfc0b0fd1b8997f8bd16efbc940166eadfbd36690582add94d813396cd5db6bb5ce2c56bbee62bbd50a775b9905fc3f2023119204ddea6f403ea0ab2f29e88e7ba2059de9a9c0cd9cc9ae46d0c85762329bd1f8461742e3a80969ea12182ccbf238ab3adb7cc4e9f04730cde9d99fe3f42d8f6dc3de5ee6c9cea90e4"]}, 0xc0}, 0x1, 0x0, 0x0, 0x440c0}, 0x4000) r2 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000040)={0x1d, r3, 0x8000000000000003}, 0x18) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f0000000340)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x154, 0x154, 0x4, [@func={0xf, 0x0, 0x0, 0xc, 0x3}, @struct={0xc, 0xa, 0x0, 0x4, 0x1, 0x8, [{0xf, 0x2, 0x200}, {0x1, 0x0, 0xf}, {0xd, 0x3, 0x10000}, {0x3, 0x2, 0x40}, {0xf, 0x3, 0xc1}, {0x5, 0x4, 0x70000000}, {0xd, 0x5, 0x400}, {0xd, 0x1, 0x1ff}, {0xf, 0x2, 0x1}, {0xb, 0x2, 0x5}]}, @enum={0xf, 0x6, 0x0, 0x6, 0x4, [{0xb, 0x1}, {0x4, 0x1}, {0xc, 0x6}, {0x0, 0xdf}, {0x3, 0x6}, {0xd, 0x3}]}, @restrict={0x5, 0x0, 0x0, 0xb, 0x5}, @enum={0x9, 0x2, 0x0, 0x6, 0x4, [{0x1, 0x1c0000}, {0x1, 0xffff}]}, @struct={0x10, 0x7, 0x0, 0x4, 0x0, 0x8, [{0x10, 0x0, 0x6}, {0x3, 0x5, 0x71}, {0x4, 0x3, 0xecd3}, {0x3, 0x0, 0xfffffff8}, {0x2, 0x0, 0x7ff}, {0x1, 0x5, 0xc88}, {0x4, 0x0, 0x5}]}]}, {0x0, [0x2e, 0x2e]}}, &(0x7f00000004c0)=""/94, 0x170, 0x5e, 0x0, 0xfffffffb, 0x10000}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000006c0)={0xffffffffffffffff, 0x20, &(0x7f0000000680)={&(0x7f0000000600)=""/56, 0x38, 0x0, &(0x7f0000000640)=""/43, 0x2b}}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x12, 0x11, &(0x7f0000000700)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xffff}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@cb_func={0x18, 0x3, 0x4, 0x0, 0xfffffffffffffffc}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000007c0)='GPL\x00', 0x6, 0x84, &(0x7f0000000800)=""/132, 0x41100, 0x77, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x3, 0xd, 0x0, 0x9}, 0x10, 0xffffffffffffffff, r0, 0x7, &(0x7f0000000900)=[0x1, r0, 0x1, 0x1, 0xffffffffffffffff], &(0x7f0000001180)=[{0x3, 0x2, 0x6, 0x6}, {0x3, 0x5, 0xe, 0xb}, {0x1, 0x4, 0xc, 0xa}, {0x4, 0x2, 0xb, 0x1}, {0x4, 0x1, 0x9, 0x1}, {0x2, 0x5, 0xa, 0x3}, {0x1, 0x3, 0xf, 0xc}], 0x10, 0x3}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001340)={{0x1, 0xffffffffffffffff}, &(0x7f00000012c0), &(0x7f0000001300)=r0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000001400)={0xff8d48f4d626582d, 0x5, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1}, [@cb_func={0x18, 0x1, 0x4, 0x0, 0xffffffffffffffff}]}, &(0x7f00000000c0)='GPL\x00', 0x600000, 0xa7, &(0x7f0000000280)=""/167, 0x40f00, 0x20, '\x00', r3, @fallback=0x37, r4, 0x8, &(0x7f0000000580)={0x9, 0x2}, 0x8, 0x10, &(0x7f00000005c0)={0x0, 0xa, 0x8, 0x6}, 0x10, r5, r6, 0x1, &(0x7f0000001380)=[r1, r7], &(0x7f00000013c0)=[{0x1, 0x5, 0xa, 0x4}], 0x10, 0xd}, 0x94) 5m58.47720839s ago: executing program 3 (id=13428): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000010000305000000000000000080000000", @ANYRES32=0x0, @ANYRES16=r0], 0x48}}, 0x0) 5m58.454104157s ago: executing program 3 (id=13430): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a64000000060a090400000000000000000200000038000480340001800a0001006c696d6974000000240002800c000140000000000000000908000540000000000c00024000000005000000000900010073797a30000000000900020073797a32"], 0x8c}, 0x1, 0x0, 0x0, 0x4085}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)="89000000120081ae08060cdc030ec0007f03e3f70000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120c000200040001400400446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) socketpair(0x6, 0x6, 0x7, &(0x7f0000000080)={0xffffffffffffffff}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)={0x30, 0x40, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0xc, 0x2, 0x0, 0x1, [@nested={0x4, 0x10}, @nested={0x4, 0x29}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) ioctl$sock_qrtr_SIOCGIFADDR(r2, 0x8915, &(0x7f00000000c0)={'macvlan1\x00'}) 5m58.289418081s ago: executing program 3 (id=13433): socket$nl_netfilter(0x10, 0x3, 0xc) 5m58.133877496s ago: executing program 3 (id=13438): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="620ac4ff00030000001041000000000113e13871e2e3f39eeaad348801e23ce7173ff7310fab4a09ea3300"], &(0x7f0000000480)='GPL\x00', 0x7}, 0x90) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040), 0x4) 5m58.065179768s ago: executing program 3 (id=13440): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000340)={@cgroup, r0, 0x24}, 0x14) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1400000026000100000000000000000006"], 0x14}], 0x1}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000300)=""/8, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x50) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x2b, 0x80801, 0x1) ioctl$SIOCGETNODEID(r3, 0x89e1, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}]}}}]}, 0x3c}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000000000000079cc41a4b85c57f6cc08d8268c4c0ec95293ab3172e05e3114d6e08614eb12383c1f81f80e7c002499de012c042e0429ac298a3a9acea390dcf5a3d779a08a148d1ef0966b95df181e54f595deb0fa577d4e304027ee50f9d608b4b7d6ed0c2f6d2d2dde12ecb52d572d6d376fe0e5c73ca4b4f70f54b6a63a2ea20a776567e3c16628a1cf1dcf17506b251cfb71bc7633609b959780b70eca3a02397603", @ANYRES64=r2], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) r4 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x80000) ioctl$BTRFS_IOC_SET_FEATURES(r4, 0x40309439, &(0x7f0000000000)={0x2, 0x2, 0xa}) 4m44.696946333s ago: executing program 32 (id=13440): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000340)={@cgroup, r0, 0x24}, 0x14) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1400000026000100000000000000000006"], 0x14}], 0x1}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000300)=""/8, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x50) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x2b, 0x80801, 0x1) ioctl$SIOCGETNODEID(r3, 0x89e1, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}]}}}]}, 0x3c}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000000000000079cc41a4b85c57f6cc08d8268c4c0ec95293ab3172e05e3114d6e08614eb12383c1f81f80e7c002499de012c042e0429ac298a3a9acea390dcf5a3d779a08a148d1ef0966b95df181e54f595deb0fa577d4e304027ee50f9d608b4b7d6ed0c2f6d2d2dde12ecb52d572d6d376fe0e5c73ca4b4f70f54b6a63a2ea20a776567e3c16628a1cf1dcf17506b251cfb71bc7633609b959780b70eca3a02397603", @ANYRES64=r2], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) r4 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x80000) ioctl$BTRFS_IOC_SET_FEATURES(r4, 0x40309439, &(0x7f0000000000)={0x2, 0x2, 0xa}) 2m26.813135125s ago: executing program 0 (id=14626): socket$inet6(0xa, 0x800000000000002, 0x0) gettid() r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@RTM_DELMDB={0x38, 0x55, 0x1, 0x0, 0x1, {0x7, r2}, [@MDBA_SET_ENTRY={0x20, 0x1, {r2, 0x0, 0x0, 0x0, {@ip4=@empty, 0x800}}}]}, 0x38}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000080)={0x2, 0x3, 0x0, 0x3, 0xa, 0x0, 0x0, 0x0, [@sadb_key={0x1, 0x9}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0xb, 0x1}]}, 0x50}, 0x1, 0x7}, 0x0) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x34}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000080)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r3, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x8}, 0x94) r4 = socket(0x10, 0x803, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4400000010000304f9fff2ffbedbdf2500007400", @ANYRES32=r5, @ANYBLOB="089805000750050008001300", @ANYRES16=r4], 0x44}, 0x1, 0x0, 0x0, 0x20004000}, 0x4008010) r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$nci(r6, &(0x7f0000000100)=@NCI_OP_CORE_RESET_RSP={0x0, 0x0, 0x2, 0x0, 0x3, {0x1, 0x1, 0x4}}, 0x6) 2m26.552720836s ago: executing program 0 (id=14630): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r4, {0x8, 0x7}, {}, {0xa, 0x5}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_CT_STATE={0x6, 0x5b, 0x3d}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000000040)=0x7, 0x4) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)=ANY=[@ANYBLOB="200000002e00010026bdf000fcdbdf250400000004000d8008000c"], 0x20}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) 2m26.149213696s ago: executing program 0 (id=14638): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x14, r1, 0x5, 0xfffffffc, 0xfffffffe, {{}, {@void, @void}}}, 0x14}}, 0x4c080) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) (async) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x14, r1, 0x5, 0xfffffffc, 0xfffffffe, {{}, {@void, @void}}}, 0x14}}, 0x4c080) (async) 2m25.919186972s ago: executing program 0 (id=14643): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000280)={0xffffffff}, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x14, 0x42, 0xa01, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001980), r0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r5, 0x1, 0x6, &(0x7f00000000c0)=0x8, 0x4) r6 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt(r6, 0x65, 0x0, 0x0, 0x0) connect$inet(r5, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) setsockopt$sock_linger(r5, 0x1, 0x3d, &(0x7f0000000080), 0x8) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) sendmmsg$sock(r5, &(0x7f0000000a80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=[@txtime={{0x18}}], 0x18}}], 0x1, 0x0) sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x2c, r2, 0x4, 0x80000000, 0x25df5bfe, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r4}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x3}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000090}, 0x20008840) 2m25.781652033s ago: executing program 0 (id=14645): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000002340)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34664c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbcebddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cfd7c3a1d37a6ab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ed8dba2f23b01a9aeb980aff9fa3a64709270c701db801f44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af4c0eb97fca585ec6bf58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef3b7cda42013d53046da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea2a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f76062adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b441233151122b41a8d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225a53072423b907c6682f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd1f539bd43007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711d7219ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a26c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29754f928c59306ce105ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42192cf393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc05fea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efdb36b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800000000000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351ba332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d9890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca0200000000000000adcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b0783883ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a139d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fcc49a729f11ab377f7132c543d29646a9378eea0761b7ed9d2172e33ed87c6513c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8d2286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8445029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a828bf209d070490893616810a121ff4feedd1d176b313b9fc7bf31ddff431a4a50760ce18a76c4b7aa73cec3eec984c76d16f798c436410f3f4a41715e736a132c3cb9421be0b3c2bd40b75896c007fa2d47e3d8392d905d582b8eff689b0f493770c91e8c2e8bd0b08ffa4fd0289b04b0ea024768d196ef721314d68d29988b01871c6ea39f95a0b77744caadd24867acab274e8e4bf3fb44df31e15ffdce52f9f60ffe"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000012c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34664c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbcebddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cfd7c3a1d37a6ab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ed8dba2f23b01a9aeb980aff9fa3a64709270c701db801f44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af4c0eb97fca585ec6bf58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef3b7cda42013d53046da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea2a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f76062adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b441233151122b41a8d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225a53072423b907c6682f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd1f539bd43007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711d7219ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a26c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29754f928c59306ce105ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42192cf393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc05fea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efdb36b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800000000000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351ba332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d9890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b0783883ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a139d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fcc49a729f11ab377f7132c543d29646a9378eea0761b7ed9d2172e33ed87c6513c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8d2286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8445029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a828bf209d0"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000140)={@fallback=r1, r1, 0x2f}, 0x20) (async) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000340)={@cgroup=r0, r1, 0x2f, 0x10, 0x4, @void, @value=r0}, 0x20) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000640)={0xffffffffffffffff, 0xe0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000380)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0xa, &(0x7f00000003c0)=[0x0, 0x0, 0x0], &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x77, &(0x7f0000000440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000000480), &(0x7f00000004c0), 0x8, 0xc9, 0x8, 0x8, &(0x7f0000000500)}}, 0x10) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000680), 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x18, 0xe, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xe0}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}}, @func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}, @ldst={0x0, 0x3, 0x1, 0x7, 0x7, 0x100, 0xfffffffffffffffc}, @exit, @cb_func={0x18, 0x9, 0x4, 0x0, 0x7}, @call={0x85, 0x0, 0x0, 0x94}]}, &(0x7f0000000140)='GPL\x00', 0xfffffffa, 0xf9, &(0x7f0000000280)=""/249, 0x40f00, 0x4, '\x00', r3, 0x0, r4, 0x8, 0x0, 0x0, 0x10, &(0x7f00000006c0)={0x2, 0x4, 0x7, 0xb}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000700)=[r2, r2, r2, r2], &(0x7f00000007c0)=[{0x5, 0x5, 0x10, 0xb}], 0x10, 0x7}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="18080000000000000000000000000000181a0000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000851000000300000018000000000000000000000000000000950000000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x94) 2m25.717059261s ago: executing program 0 (id=14648): r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$TIPC_CONN_TIMEOUT(r1, 0x10f, 0x82, 0x0, 0x1a) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x26, 0x9, 0x80001, 0x80, {0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x400c801}, 0x4000000) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000040)=@bpf_lsm={0x6, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x14}]}, &(0x7f0000000100)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, 0x21}, 0x94) 2m10.590081988s ago: executing program 33 (id=14648): r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$TIPC_CONN_TIMEOUT(r1, 0x10f, 0x82, 0x0, 0x1a) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x26, 0x9, 0x80001, 0x80, {0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x400c801}, 0x4000000) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000040)=@bpf_lsm={0x6, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x14}]}, &(0x7f0000000100)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, 0x21}, 0x94) 1m48.913535576s ago: executing program 1 (id=14982): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.events\x00', 0x26e1, 0x0) close(r0) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x66, &(0x7f0000000080)=0x6fb3, 0x4) sendmmsg$inet6(r1, &(0x7f0000001340)=[{{&(0x7f0000000140)={0xa, 0x4e21, 0x8, @dev={0xfe, 0x80, '\x00', 0x29}}, 0x1c, 0x0}}], 0x1, 0xc040) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x103, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x5, 0x7, 0xb3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newqdisc={0x6c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r5, {0x10}, {}, {0xe, 0x1}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x3c, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x0, 0x1ff, 0x72, 0x8, 0x2, 0x1, 0xfffffffa, 0x6f2, 0x9, 0xb00, 0x17, 0xb, 0x1d, 0x8, 0x7, 0x1}}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4040098}, 0x0) setsockopt$inet6_udp_int(r1, 0x11, 0x65, &(0x7f0000000040)=0x3, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x41, 0x0, 0xfffffffffffffe54) 1m47.573970104s ago: executing program 1 (id=14990): r0 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x670, 0x5, 0x368, 0x0, 0x180, 0xffffffff, 0x228, 0x228, 0x2d0, 0x2d0, 0xffffffff, 0x2d0, 0x2d0, 0x5, 0x0, {[{{@uncond, 0x0, 0xa0, 0xd8, 0x48, {}, [@common=@addrtype={{0x30}, {0x1, 0x1c, 0x1}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x1, @rand_addr=0x64010100, @remote, @gre_key=0x7fff, @port=0x4e24}}}}, {{@ip={@remote, @empty, 0xff000000, 0xff, 'nicvf0\x00', 'pim6reg0\x00', {}, {0xff}, 0x6c}, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x6, @rand_addr=0x64010100, @multicast1, @icmp_id=0x67, @port=0x4e23}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x2, @multicast2, @loopback, @icmp_id=0x67, @port=0x4e24}}}}, {{@ip={@empty, @empty, 0xffffff00, 0x0, 'veth0_to_team\x00', 'ip6gretap0\x00', {}, {0xff}, 0x62, 0x3, 0x8}, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x1, @multicast1, @empty, @icmp_id=0x65, @port=0x4e24}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c8) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000500)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000440], 0x0, &(0x7f0000000400), &(0x7f0000000440)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffc}, {0x0, '\x00', 0x0, 0xffffffffffffffff}]}, 0x108) 1m47.51131682s ago: executing program 1 (id=14991): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x4, 0x5}, 0x50) (async) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x4, 0x5}, 0x50) ioctl$XFS_IOC_READLINK_BY_HANDLE(0xffffffffffffffff, 0xc038586c, &(0x7f0000000180)={r0, &(0x7f0000000080)='@\x00', 0x1, &(0x7f00000000c0)={@align=0x8, {0xce3, 0x5, 0x4, 0x7}}, 0x400, &(0x7f0000000100)={@_ha_fsid}, &(0x7f0000000140)=0x1}) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f00000001c0)) r2 = accept(r1, 0x0, &(0x7f0000000200)) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r2, 0x84, 0x20, &(0x7f0000000240), &(0x7f0000000280)=0x4) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000300), r2) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000400)={&(0x7f00000002c0), 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x54, r3, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0xb}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x8}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x9}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x8}, @L2TP_ATTR_MTU={0x6, 0x1c, 0xc000}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x81}]}, 0x54}, 0x1, 0x0, 0x0, 0x4010}, 0x2c830e0bbbab435e) socket$inet_udp(0x2, 0x2, 0x0) (async) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_udp_SIOCOUTQ(r4, 0x5411, &(0x7f0000000440)) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), r2) sendmsg$NL80211_CMD_NEW_INTERFACE(r5, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x54, r6, 0x400, 0x70bd2a, 0x25dfdbff, {{}, {@void, @void, @val={0xc, 0x99, {0x4, 0x15}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'batadv_slave_1\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000014}, 0x4800) syz_genetlink_get_family_id$smc(&(0x7f0000000640), r2) (async) r7 = syz_genetlink_get_family_id$smc(&(0x7f0000000640), r2) sendmsg$SMC_PNETID_DEL(r5, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x34, r7, 0x20, 0x70bd29, 0x25dfdbff, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_to_bond\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0xc004) sendmsg$NL80211_CMD_REGISTER_FRAME(r5, &(0x7f0000000980)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000940)={&(0x7f0000000780)={0x1a4, r6, 0x20, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x0, 0x1}}}}, [@NL80211_ATTR_FRAME_MATCH={0xc4, 0x5b, "da2d29725c850dc992d7b19177b15ef1341a17968d15b61dd1fbf0d894b650f4b6db1578a2886896874d7196b43643134c8f80f4f03fb0ee6b43cfdce7c629dc412c136f4fd5f73c076b4117380dd63e416ac4815b6dc25baefd1a58d1140e81345aebeddb8a16da7d6a11e6f8f85e24f524b1e6d6a31b3c3b76ec8d0315a246dd169173cac0ba5289063610595428c0fbf41554df2f9aca46237da269d38cd954bd021b238a36db04d6d1c63a429bbe047d3c4ab010124235ed564125d06aab"}, @NL80211_ATTR_FRAME_MATCH={0xc0, 0x5b, "2bb585d0bee4870bc9567bc7e2281fb142c44a32a63c66cfe6f6d1597517e2fa0bf82c323939b5610be30432c5749901dee080f551e16ea0b62113d1d04dd5fec3c2138c50c8f0a10ab5ab90f33e4aa08219cdd7b42a9a07796f8036dae37f73cb81dc4a379f242bba073511cff505a308f6278862c5ef81086bfcea6ae9e09a17c6e6de13495d7efa38ddbedfbfa9be19271d386927a34bd06764c031084fd8d3062e88f0c65b9df57ddfdf6ab3612cdf9da59a0f47deb4d98a6c15"}]}, 0x1a4}, 0x1, 0x0, 0x0, 0x41}, 0x20040000) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000a00), 0xffffffffffffffff) (async) r9 = syz_genetlink_get_family_id$nfc(&(0x7f0000000a00), 0xffffffffffffffff) sendmsg$NFC_CMD_DEP_LINK_DOWN(r8, &(0x7f0000000ac0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x1c, r9, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000b00)={0x1, 'pimreg0\x00', 0x4}, 0x18) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0x6d, &(0x7f0000000b40)={0x0, 0x64, "51c3b2a4250b89730c9b2611ad56bd43b79bee7ee34ef84e5ed222d032c97d268eac814c423fbd89c953b83fd56506303b45b688abfececae0d9023c04817b56bf1d06f6a4011f60857cab92ac59f5570c3cc9c366eb1731c37e22c7261aec096570c5b3"}, &(0x7f0000000bc0)=0x6c) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000c00)={r10, 0x20}, 0x8) syz_80211_inject_frame(&(0x7f0000000c40)=@broadcast, &(0x7f0000000c80)=@ctrl_frame=@pspoll={{}, @random, @initial, @device_b}, 0x10) sendmsg$L2TP_CMD_SESSION_CREATE(r5, &(0x7f0000000dc0)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d00)={0x48, r3, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x9}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x12e}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x48000) (async) sendmsg$L2TP_CMD_SESSION_CREATE(r5, &(0x7f0000000dc0)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d00)={0x48, r3, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x9}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x12e}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x48000) syz_80211_inject_frame(&(0x7f0000000e00)=@broadcast, &(0x7f0000000e40)=@ctrl_frame=@rts={{}, {0x9}}, 0x10) syz_80211_inject_frame(&(0x7f0000000e80)=@broadcast, &(0x7f0000000ec0)=@mgmt_frame=@reassoc_resp={{{0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1}, {0x4}, @broadcast, @device_a, @from_mac=@broadcast, {0x5, 0x9}}, 0x2, 0x68, @default, @void, @val={0x2d, 0x1a, {0xc, 0x0, 0x1, 0x0, {0x9, 0x0, 0x0, 0x3}, 0x1, 0x1, 0x9}}, [{0xdd, 0x7b, "d118316f1322a5a13a4b96502ffc536c263f4d70bca1f7cb754138f92b40827f464f965870da017b72dcced9e826765df41cfd4b59ae49950a31848784e6ef088129c7b1d60a48ca64e5199d80c4afce2307550e1a14b7675311a0a8867285dfaa8b5d2f6030111b0c08e696ade564278969e48808576502078560"}, {0xdd, 0x6e, "dc4cd709559e1a716cb6e6c4b515210e9f365e733f169f11f98bc32afc0dc69fc9525f2faec8e53f2e9488aadf6ecba1a8a0ae2288d70e945c62455aacc3e4098500df864b2e280ee23dacaf4216b957423612826b4bcacb577bffa776e3955915ff9eb8bec20db8e06924ca9d3e"}, {0xdd, 0xf9, "34cc0df69e7e5db129c51aa3267244ef7b3aba4a544d941d25fb0ef1fa84da1d982641dee483352c05c6ff06c861b2afb2e76fd241d69769ef82a69eed160626234f4ca5fa98bfb19d71434ae91eaaf195c2fb275ea481f639138f664901d087f376485dadd23b45020ae5be7501c1765465355570256766702971ccbe0c9221426d70aa7aeeb9e78e50d5882ddb815d8c9ff8065cc818d5bfe60ae2570f0d8aed69a3f211b8a76a1cb9fc195a9225e114c4df4839259e9b77cf0398d62bf7b3d05d175ca6fe3656420c2e404fc79e46abe7faf233a867da1e8bb301b6dac425b7dd9800192d01adbcfaab3885fabdf10c319ff3b0ab985bdc"}, {0xdd, 0x29, "e5cefbb25a7a7b808d18906ad9ce0c1c0efc42a3f40afff67f716d9670ae765156ee2f6ddad9eaff0a"}, {0xdd, 0xa2, "fa4540957fbf945ef28226c96b7e756b81c369bff9d8301422b920d28b5375dc5a8b84a86407f4121613f625008c61ff4f94050936e442d8701653e1d06398b9870745ed267a9192580ca7b771cf78dc7f4ea136ee71542d9c93b3a612111c33dcb1626af8fe8f12689203c81b54ef355a6b1eaf705452de51a89d44600a11ade0f16a92673eff160b173054c91c0072ce02d39a9a1e42f4041b1aed634ddc06ef88"}, {0xdd, 0x26, "48b1d65d5bbb47bcd70f51634bf2c5ee352bc5cf14cc83fa8b0d69e1a4ecf09de3b610fdc032"}]}, 0x319) (async) syz_80211_inject_frame(&(0x7f0000000e80)=@broadcast, &(0x7f0000000ec0)=@mgmt_frame=@reassoc_resp={{{0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1}, {0x4}, @broadcast, @device_a, @from_mac=@broadcast, {0x5, 0x9}}, 0x2, 0x68, @default, @void, @val={0x2d, 0x1a, {0xc, 0x0, 0x1, 0x0, {0x9, 0x0, 0x0, 0x3}, 0x1, 0x1, 0x9}}, [{0xdd, 0x7b, "d118316f1322a5a13a4b96502ffc536c263f4d70bca1f7cb754138f92b40827f464f965870da017b72dcced9e826765df41cfd4b59ae49950a31848784e6ef088129c7b1d60a48ca64e5199d80c4afce2307550e1a14b7675311a0a8867285dfaa8b5d2f6030111b0c08e696ade564278969e48808576502078560"}, {0xdd, 0x6e, "dc4cd709559e1a716cb6e6c4b515210e9f365e733f169f11f98bc32afc0dc69fc9525f2faec8e53f2e9488aadf6ecba1a8a0ae2288d70e945c62455aacc3e4098500df864b2e280ee23dacaf4216b957423612826b4bcacb577bffa776e3955915ff9eb8bec20db8e06924ca9d3e"}, {0xdd, 0xf9, "34cc0df69e7e5db129c51aa3267244ef7b3aba4a544d941d25fb0ef1fa84da1d982641dee483352c05c6ff06c861b2afb2e76fd241d69769ef82a69eed160626234f4ca5fa98bfb19d71434ae91eaaf195c2fb275ea481f639138f664901d087f376485dadd23b45020ae5be7501c1765465355570256766702971ccbe0c9221426d70aa7aeeb9e78e50d5882ddb815d8c9ff8065cc818d5bfe60ae2570f0d8aed69a3f211b8a76a1cb9fc195a9225e114c4df4839259e9b77cf0398d62bf7b3d05d175ca6fe3656420c2e404fc79e46abe7faf233a867da1e8bb301b6dac425b7dd9800192d01adbcfaab3885fabdf10c319ff3b0ab985bdc"}, {0xdd, 0x29, "e5cefbb25a7a7b808d18906ad9ce0c1c0efc42a3f40afff67f716d9670ae765156ee2f6ddad9eaff0a"}, {0xdd, 0xa2, "fa4540957fbf945ef28226c96b7e756b81c369bff9d8301422b920d28b5375dc5a8b84a86407f4121613f625008c61ff4f94050936e442d8701653e1d06398b9870745ed267a9192580ca7b771cf78dc7f4ea136ee71542d9c93b3a612111c33dcb1626af8fe8f12689203c81b54ef355a6b1eaf705452de51a89d44600a11ade0f16a92673eff160b173054c91c0072ce02d39a9a1e42f4041b1aed634ddc06ef88"}, {0xdd, 0x26, "48b1d65d5bbb47bcd70f51634bf2c5ee352bc5cf14cc83fa8b0d69e1a4ecf09de3b610fdc032"}]}, 0x319) sendmsg$SMC_PNETID_FLUSH(r5, &(0x7f00000012c0)={&(0x7f0000001200)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001280)={&(0x7f0000001240)={0x14, r7, 0x1, 0x70bd2c, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4c000}, 0x20000000) (async) sendmsg$SMC_PNETID_FLUSH(r5, &(0x7f00000012c0)={&(0x7f0000001200)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001280)={&(0x7f0000001240)={0x14, r7, 0x1, 0x70bd2c, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4c000}, 0x20000000) sendmsg$NBD_CMD_RECONFIGURE(r8, &(0x7f00000013c0)={&(0x7f0000001300)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001380)={&(0x7f0000001340)={0x38, 0x0, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x2}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x5}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x4a97}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x4048850) (async) sendmsg$NBD_CMD_RECONFIGURE(r8, &(0x7f00000013c0)={&(0x7f0000001300)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001380)={&(0x7f0000001340)={0x38, 0x0, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x2}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x5}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x4a97}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x4048850) sendmsg$nl_route(r2, &(0x7f00000014c0)={&(0x7f0000001400)={0x10, 0x0, 0x0, 0x51000}, 0xc, &(0x7f0000001480)={&(0x7f0000001440)=@ipv4_delrule={0x40, 0x21, 0x400, 0x70bd29, 0x25dfdbfd, {0x2, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x8, 0x9}, [@FRA_TUN_ID={0xc, 0xc, 0x1, 0x0, 0x2}, @FRA_GENERIC_POLICY=@FRA_SUPPRESS_PREFIXLEN={0x8}, @FRA_FLOW={0x8, 0xb, 0x5}, @FRA_FLOW={0x8, 0xb, 0x10001}]}, 0x40}, 0x1, 0x0, 0x0, 0x804}, 0x4000001) (async) sendmsg$nl_route(r2, &(0x7f00000014c0)={&(0x7f0000001400)={0x10, 0x0, 0x0, 0x51000}, 0xc, &(0x7f0000001480)={&(0x7f0000001440)=@ipv4_delrule={0x40, 0x21, 0x400, 0x70bd29, 0x25dfdbfd, {0x2, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x8, 0x9}, [@FRA_TUN_ID={0xc, 0xc, 0x1, 0x0, 0x2}, @FRA_GENERIC_POLICY=@FRA_SUPPRESS_PREFIXLEN={0x8}, @FRA_FLOW={0x8, 0xb, 0x5}, @FRA_FLOW={0x8, 0xb, 0x10001}]}, 0x40}, 0x1, 0x0, 0x0, 0x804}, 0x4000001) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f00000015c0)={&(0x7f0000001500)={0x10, 0x0, 0x0, 0x9469b304c6dac1e5}, 0xc, &(0x7f0000001580)={&(0x7f0000001540)={0x2c, r3, 0x400, 0x70bd26, 0x25dfdbfd, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24040095}, 0x4800) 1m47.293200709s ago: executing program 1 (id=14998): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) (async) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000000c0)={'macsec0\x00', 0x400}) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x129000, 0x0) close(r4) (async) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x100, 0xe}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000c00)=@newtfilter={0x44, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r7, {0xc, 0x8}, {}, {0x8, 0xffff}}, [@filter_kind_options=@f_u32={{0x8}, {0x18, 0x2, [@TCA_U32_SEL={0x14, 0x5, {0x6, 0x6, 0x0, 0xfffd, 0x14, 0x9, 0x4, 0x8}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000600), 0x56) (async) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r9, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000440)="27030200590214000600002fb96dbcf706e1050344ee21144add66a44a6b1324890200a012eb", 0x26}], 0x1}, 0x20000000) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000006c0)={'bridge_slave_0\x00', 0x600}) 1m46.969908292s ago: executing program 1 (id=15004): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x24, 0x25, 0x109, 0x870bd22, 0xfffffff9, {0x2}, [@nested={0x8, 0x69, 0x0, 0x1, [@nested={0x4, 0x122}]}, @typed={0x8, 0x3, 0x0, 0x0, @binary='G\x00\x00\x00'}]}, 0x24}, 0x1, 0x0, 0x0, 0x1000c957}, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) (async) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000140)='veth1_to_bridge\x00', 0x10) getsockopt$sock_buf(r2, 0x1, 0x19, 0x0, &(0x7f0000000280)) getsockopt$IPT_SO_GET_ENTRIES(r2, 0x0, 0x41, &(0x7f0000000540)={'filter\x00', 0xde, "d77954a399835b22f3d1f9096353992f3b719ca5bf9e0cf555a0628777b2f8a7da97a961a0e83871fe05aabc216db072185fb6cd87fbae2a48a0f6d2997d75ef91fa3caa2bc2f857c5df93cf61e22548503e46875c7d78d8afe64e0bf627ad8ab03c4da8f1a2777fbe6b9c76e4ce9495d79eb8023ddce0658d48781b3c869d76d44b241cab7abcf9f2263f9fc6a56320bbf70f01269c17215cf5d252a33dba194ee23c5aa402c3dcf2a66b794873d716abf9e7d90d87e10283263b3954181348312e18d9df5092191863c436549705407e117f010c78e9909d7a9a5421c9"}, &(0x7f0000000680)=0x102) sendmsg$inet(r1, &(0x7f0000000480)={&(0x7f0000000000)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f00000001c0)="91cfdfefdb", 0x1a000}], 0x1}, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0xa, 0x1, 0x7fff, 0x1, 0x4, 0x9, 0xa4, 0xffb, 0x7, 0xb69, 0xc1, 0x4, 0x1, 0x3, 0x5, 0x101, 0x1000, 0x9, 0x3, 0x3, 0x1, 0xfffffffa, 0x0, 0x6, 0x9, 0x4, 0x7, 0x5, 0x100000, 0x762, 0x3, 0xd, 0xe, 0x2b12, 0x100, 0x6, 0x1c00, 0xb, 0x7, 0xbed4, 0x8, 0x8000100, 0x3, 0x0, 0x11000, 0x8, 0x5, 0x79b, 0x2, 0x1, 0x7f, 0x4, 0xa, 0x7, 0xf, 0x101, 0xd7, 0x1fa0860a, 0x7, 0xaa, 0x81, 0x2, 0x180000, 0x4007, 0x8b, 0x5, 0x2af, 0xf7, 0x5, 0x2, 0x6, 0x9, 0x4, 0x7, 0x4009, 0x0, 0x4, 0x100002, 0x8, 0x752, 0x0, 0x3, 0x0, 0x10001, 0x2, 0xffffffff, 0x6, 0x6, 0x9, 0x80000000, 0xfdffffff, 0x2, 0x2, 0x84, 0x100, 0x5, 0x252, 0x81, 0xb, 0x5, 0x20006, 0x5, 0x2, 0xb, 0x2, 0xd9a, 0xd, 0x2a2, 0xfffffffd, 0x3, 0x2, 0x5, 0x8, 0x0, 0x4, 0x2, 0x40, 0x8, 0x4, 0x4, 0x401, 0x66cd, 0x8, 0x8, 0x1, 0x1fc, 0xc5c, 0xffffffff]}}) (async) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) (async) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r0) ioctl$sock_netdev_private(r0, 0x89f5, &(0x7f00000001c0)="c7a3cd8da260955e24ca70e3") sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r3, 0x10, 0x70bd2d, 0x25dfdbfc, {}, [@ETHTOOL_A_COALESCE_RX_USECS_LOW={0x8, 0xe, 0x9}, @ETHTOOL_A_COALESCE_RATE_SAMPLE_INTERVAL={0x8, 0x17, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x1) 1m46.68115486s ago: executing program 1 (id=15005): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$XFS_IOC_FD_TO_HANDLE(r0, 0xc038586a, &(0x7f00000001c0)={r0, &(0x7f0000000080)=')-(}[[{\\\x00', 0x288043, &(0x7f00000000c0)={@align=0x5, {0x7f, 0xf37, 0x8, 0x1f}}, 0x8, &(0x7f0000000100)={@_ha_fsid}, &(0x7f0000000140)=0x3}) getsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, &(0x7f0000000200)=0x1, &(0x7f0000000240)=0x2) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r3, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000002580)={0x2040, r4, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x2014, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x1004, 0x4, "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"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x7ffd}, @ETHTOOL_A_BITSET_MASK={0x1004, 0x5, "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"}]}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}]}, 0x2040}}, 0x0) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1400000026000100000000000000000006"], 0x14}], 0x1}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000c00)={0x24, 0x40, 0x107, 0x70bd2b, 0x25dfdbfe, {0x3, 0x7c}, [@nested={0x4, 0x1c2}, @nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0x10}]}, @typed={0x4, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4c090}, 0xc000) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001d40)=@base={0x12, 0x6, 0x4, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r6}, &(0x7f0000000040), &(0x7f0000000140)=r5}, 0x20) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) sendmsg$NL80211_CMD_GET_WIPHY(r5, &(0x7f0000000480)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x28, r7, 0x400, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x13}, @void, @val={0xc, 0x99, {0xa089, 0x3b}}}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x40040}, 0x24000884) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="660a00000000000061115000005e0cee0300"/32], &(0x7f0000000000)='GPL\x00'}, 0x90) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a64000000060a010400000000000000000200000038000480340001800b0001006e756d67656e00002400028008000140000000000800024000000003080003400000000108000440ffffffff0900010073797a30000000000900020073797a32"], 0x8c}}, 0x0) 1m40.470187885s ago: executing program 4 (id=15065): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_FRAME(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)={0x1c, r1, 0x1, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x4810) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r5) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0x2, 0xe, 0x9, 0x3, 0x5, 0x0, 0xd, 0x25dfdbff, [@sadb_address={0x3, 0x5, 0x3c, 0xa0, 0x0, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}}]}, 0x28}}, 0x4000001) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c00018006000100bd0300000800034000000001"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) ioctl$BTRFS_IOC_QUOTA_RESCAN(r0, 0x4040942c, &(0x7f0000000040)={0x0, 0x6, [0x2400000000, 0x9, 0xffffffff, 0x8, 0x4, 0x8]}) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="400000001000370400"/20, @ANYRES32=0x0, @ANYBLOB="8b040400000000002000128008000100736974001400028008000200c00002000600080003"], 0x40}}, 0x0) 1m40.241055053s ago: executing program 4 (id=15069): r0 = socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001780)={&(0x7f0000001640)=ANY=[@ANYBLOB="9feb010020000000010000001800000019000000010000000000000001"], 0x0, 0x3a, 0x0, 0x1, 0x6}, 0x28) r1 = socket$rxrpc(0x21, 0x2, 0xa) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) tee(r1, r2, 0x1, 0x6) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="7800000010000304000000000000000000007400", @ANYRES32=0x0, @ANYBLOB="00000000600000005800128008000100677470004c00028008000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES64=r0], 0x78}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x24, 0x4, 0x8, 0x201, 0x0, 0x0, {}, [@CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_L4PROTO={0x5}]}, 0x24}}, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@cred={{0x1c}}], 0x20}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000014c0)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000702000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff6d6405000000000065040400010000000404000001000000b7050000400000006a0a80fe000000008500000053000000b7000000000000009500001000000000a80501363034fdb117168bd07ba00af739d1a1ee35fe163a255c33282044b32495ef8ab9adc67ccc945f105d802f5132143c0a9fc7a84452569957c1002ed7d4d8e17f791f4798c8eb483e9973320d046c3126c6afcfd84de03352c69b3edff5be26f8ffa5f8f2879021c2ea53ea79acd7fb38dd1abb75aa393cea26d465637d11f705000000473e7b7c4ae7dd5e4dee88518ddf12dddd4bfc6a4dd3b6beba51074229b0d4b504516c4c3e5d1aa044d8d00728141cd67bcd68f253288e655c6b34e02e90637ef2912ba7de26ff2357ef17f95a25780c3a057844f226ef4e912f01a201e694e3806e8c70e8b69524cd19f7525d8d66bb766f7f3f918c86a70252236800001897133af94a5a4cfc794d8b9d7c33632152c48eaf302f0b2e0c252b00000000000000006f1bbefbe08de65e3762e194ba4cae8b13535d7d11ee917bca4885bbf597a14ab2458efce78510d86272d88e0c8088f404f011289ebc5623faa1182632161e073af1d69a2e36bed435000025ecd201d2ffb0a7fa4f5d11060cdcf071defd0a8be3b69ce3e4f361aca75827426dde87fdf4617222674280f55e98107450c19b9d86329bd5b4697336112b0b8754ce3574046bf6114d1a88597850b77378fa8edfff8faf8b8ec039bab385cac0535373bb8fab90539b1a65ddff841eb671f3faf37ebdfccea0c002ad2b42047c9ec43193ccf617dbf8a12b4f189edbf9fb7c42b1f435ccd4d96822e6b70100912c92e3943e9c4f45d8bcd528fa8a3ea847f10e9b2506f3bb506f1d7fbde8010000000000a073d0de5538ab42e170b3baae34c35987b0dda497ac3f5e97e6e6aeea15c6d5ed24310100000003bb6030f84b63aaf8690db0221b1705c501f802ff59b4e683efa4b6e77e042072bd2ac37d413008ec9eb8166f6e28b49a77ed91befc65315896f88a8fb1dd679fb4c515f8b7a5b7aca6a251a89d47b728502f7e621cc0e3ba04000000c149ee6601728c750d304197c22da8650579475afd96187d881e93b42a5fdfd686d8900c44c67133dad58037fda65885a15a429edfe3027a5ebf95254744f10fd607bc3300b94932b8d944e0b083bbd86b19cb074577a25ff581d92af08a06f857310a2f14326b0b290205e91a682e00c8762cbc6b904c980eef6e6a1def886c95676dce6a8194479700a02b92bdc8d05eae1f24fdd7b80d1bb404c22f681594de2ebb9687219de8d73ac83823feb402a2415a9850d5f0183ec67be96dc0e4c2d7acf1dfe79d6771903b76e21190c22d641030e1ddacf006c3116e1803af20a5f2b5f7ba58aca5bcabbbab24414a3810788e5503e4be66d683daac5f0001000077339b4200000000108a3c87b19d5b9a00c75d84a92d6dcf00ba96edf35ede0e2b57c26e94801b498924166bde57d5f24258d9fd028096cc15a8b912b494d4bbe609031ea1ca65a548971d5d16296dd08e020000007a27310d5d01f8a8a0f5212d7f628f554afea715ccbc66cbb1016490f5d579308cb3188cf2fcaf67e0c16443d526ba4b968f07ae362c2133c168313e84beb871203880dd453c45d0a137d7f5a8b039dbfa62fb2b4214f8e69f967bf1fbd89e77fcca110000000800000000000000f8877994ebdc35f7efd41e3babd9b3782edd6776d5b6cb4ecd72c9de9b5503747d71440378cf2c2c7ea2dc5febb654a867f853713cf4c0bb322fbbe446d18dee4c821275ef18259cafc346c8b3b9fb0f3adcf6ea310a6b9a3f59e29a5909ea047fb61affb4bc8bbea1fb761b8933795b1a91358a7791aa843d07020e8bb6fc18458c49ac6313e7165b7d9f65e94a62b69f1011b94340cdb7303f01e5cdb5682ddf73d65c3de1d88dd7496d6345d5b9de0223988056a53e19a8b96b9640bc6c09d3c2ff894d626b57c776ed53f94d5e22ff148061b37f72bd92924cb1d0a725e19b264346b7cae0251a850de78316503f3c3d395c7e3f04fc8d52583327cd2341ce4b2d092815376299686f41353b2823814563011a2223b9dd00000000000000000000003a131374a3371cb3e2a9bb4d798b91cefa444501f40b7c9589e8c0bb6c82123d2b45ce905d0903b32ecf30e828c71a07a83f3275f3d661d1af0ffbd5d7f0"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r6, 0xfeffff, 0xe80, 0x3f000002, &(0x7f0000000700)="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", 0x0, 0xf0, 0x0, 0xf0, 0xffffff0c}, 0x40) sendmsg$NFNL_MSG_CTHELPER_NEW(r5, &(0x7f0000000480)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)={0x54, 0x0, 0x9, 0x101, 0x0, 0x0, {0x3, 0x0, 0x2}, [@NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x18}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x3}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x1}}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0xfffffeff}}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x4040000}, 0x8000) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = accept$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000004c0)=0x14) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000200)={'erspan0\x00', &(0x7f0000000180)={'erspan0\x00', 0x0, 0x40, 0x10, 0xd129, 0x40, {{0xb, 0x4, 0x0, 0x1e, 0x2c, 0x68, 0x0, 0xc, 0x2f, 0x0, @multicast2, @multicast2, {[@generic={0x0, 0xb, "3bf0b1ef103609cbbe"}, @timestamp={0x44, 0x8, 0xf7, 0x0, 0x8, [0x5]}, @noop, @end]}}}}}) bind$packet(r8, &(0x7f0000000240)={0x11, 0x1b, r9, 0x1, 0x81}, 0x14) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000001500010000000000000000000a000000080001"], 0x1c}}, 0x0) close(0x3) 1m40.154800057s ago: executing program 4 (id=15071): r0 = socket(0x400000000010, 0x1, 0x0) write(r0, &(0x7f0000000040)="3a03000018002551075c0165ff0ffc02802000030004000500e1000c0400070080000900", 0x33a) 1m40.051958254s ago: executing program 4 (id=15073): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xe, 0x3, &(0x7f0000000000)=@framed={{0x62, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0xa3}}, &(0x7f0000000480)='GPL\x00'}, 0x90) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000300)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r1, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYRES16=r2, @ANYRES32=r2], 0x44}}, 0x2000800) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000000c4c0000000c0a010300000000000000000100000008000440000000000900010073797a300000000024000380200000800800018018000b801400018010000100636f756e7465720004000280140000001000010000000000000000000000010a"], 0xd0}}, 0x0) 1m39.797077689s ago: executing program 4 (id=15078): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_SET(r0, &(0x7f0000002440)={0x0, 0x0, &(0x7f0000002400)={&(0x7f0000002080)={0x18, r1, 0xd01, 0x0, 0x0, {}, [@TIPC_NLA_MEDIA={0x4}]}, 0x18}}, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000000000)=""/211, 0xd3}, {&(0x7f0000000180)=""/65, 0x41}, {&(0x7f0000000200)=""/22, 0x16}], 0x3, 0xf8de, 0x48d) 1m39.781088529s ago: executing program 4 (id=15080): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x14, 0x26, 0x301, 0x270bda5, 0x25dfdbfa, {0x1}}, 0x14}}, 0x80) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) (async, rerun: 32) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) (rerun: 32) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="44000000100003052bbd70000007000000000000", @ANYRES32=0x0, @ANYBLOB="00000000001000001c00128009000100626f6e64000000000c000280050001000500000008000a00", @ANYRES32=r2], 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x4000000) (async) r3 = socket$inet_sctp(0x2, 0x5, 0x84) (async) r4 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x8) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r3, 0x84, 0x79, &(0x7f0000000000)={r5, 0x5, 0x7}, 0x8) (async) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000000)={r5, 0x8, 0x25}, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000071120800000000009500"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) (async) socket$kcm(0x29, 0x7, 0x0) 1m31.638128046s ago: executing program 34 (id=15005): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$XFS_IOC_FD_TO_HANDLE(r0, 0xc038586a, &(0x7f00000001c0)={r0, &(0x7f0000000080)=')-(}[[{\\\x00', 0x288043, &(0x7f00000000c0)={@align=0x5, {0x7f, 0xf37, 0x8, 0x1f}}, 0x8, &(0x7f0000000100)={@_ha_fsid}, &(0x7f0000000140)=0x3}) getsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, &(0x7f0000000200)=0x1, &(0x7f0000000240)=0x2) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r3, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000002580)={0x2040, r4, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x2014, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x1004, 0x4, "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"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x7ffd}, @ETHTOOL_A_BITSET_MASK={0x1004, 0x5, "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"}]}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}]}, 0x2040}}, 0x0) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1400000026000100000000000000000006"], 0x14}], 0x1}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000c00)={0x24, 0x40, 0x107, 0x70bd2b, 0x25dfdbfe, {0x3, 0x7c}, [@nested={0x4, 0x1c2}, @nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0x10}]}, @typed={0x4, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4c090}, 0xc000) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001d40)=@base={0x12, 0x6, 0x4, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r6}, &(0x7f0000000040), &(0x7f0000000140)=r5}, 0x20) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) sendmsg$NL80211_CMD_GET_WIPHY(r5, &(0x7f0000000480)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x28, r7, 0x400, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x13}, @void, @val={0xc, 0x99, {0xa089, 0x3b}}}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x40040}, 0x24000884) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="660a00000000000061115000005e0cee0300"/32], &(0x7f0000000000)='GPL\x00'}, 0x90) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a64000000060a010400000000000000000200000038000480340001800b0001006e756d67656e00002400028008000140000000000800024000000003080003400000000108000440ffffffff0900010073797a30000000000900020073797a32"], 0x8c}}, 0x0) 1m24.656234409s ago: executing program 35 (id=15080): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x14, 0x26, 0x301, 0x270bda5, 0x25dfdbfa, {0x1}}, 0x14}}, 0x80) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) (async, rerun: 32) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) (rerun: 32) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="44000000100003052bbd70000007000000000000", @ANYRES32=0x0, @ANYBLOB="00000000001000001c00128009000100626f6e64000000000c000280050001000500000008000a00", @ANYRES32=r2], 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x4000000) (async) r3 = socket$inet_sctp(0x2, 0x5, 0x84) (async) r4 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x8) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r3, 0x84, 0x79, &(0x7f0000000000)={r5, 0x5, 0x7}, 0x8) (async) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000000)={r5, 0x8, 0x25}, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000071120800000000009500"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) (async) socket$kcm(0x29, 0x7, 0x0) 5.458497092s ago: executing program 5 (id=16502): mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0xb, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800006, 0x7000001, 0x6e073, 0xffffffffffffffff, 0x0) r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000008c0)=@mangle={'mangle\x00', 0x44, 0x6, 0x418, 0x0, 0x218, 0x2b0, 0xe8, 0x218, 0x380, 0x380, 0x380, 0x380, 0x380, 0x6, 0x0, {[{{@ip={@multicast1, @dev={0xac, 0x14, 0x14, 0x13}, 0xff, 0xff000000, 'pim6reg1\x00', 'bridge_slave_0\x00', {}, {0xff}, 0x88, 0x3}, 0x0, 0xc0, 0xe8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x1}}, @common=@ttl={{0x28}, {0x0, 0x10}}]}, @TTL={0x28, 'TTL\x00', 0x0, {0x1, 0x9}}}, {{@ip={@private=0xa010100, @local, 0x7fffff80, 0x0, 'vcan0\x00', 'veth0_virt_wifi\x00', {}, {0xff}, 0x6, 0x0, 0x5a}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x10, 0x0, 0x2}}}, {{@uncond, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@private=0xa010102, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0xffffff00, 'syzkaller0\x00', 'bond0\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, 0xff, 0x2, [0x1a, 0x36, 0x1d, 0x1c, 0x25, 0x1e, 0x2c, 0x7, 0x1e, 0x7, 0x2d, 0x37, 0x30, 0x9, 0x3b, 0x16], 0x0, 0x6, 0x2}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x478) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2, 0x4010, r0, 0x6b899000) 5.365508031s ago: executing program 5 (id=16503): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000440)={0x2, 0x3}, 0x8) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="740000001000210400000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="adffa8886004000024001280090001007866726d000000001400028008000100010000000800020011000000050021000000000008000a00", @ANYRES32, @ANYBLOB='\n\x00:'], 0x74}}, 0x0) r2 = socket$kcm(0x29, 0x2, 0x0) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000002c0)=@bpf_tracing={0x1a, 0x13, &(0x7f0000000040)=@raw=[@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @ldst={0x1, 0x3, 0x1, 0x6, 0x4, 0xc}], &(0x7f0000000100)='syzkaller\x00', 0x2, 0x2a, &(0x7f0000000180)=""/42, 0x41100, 0x2, '\x00', 0x0, 0x17, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x6, 0x3}, 0x8, 0x10, &(0x7f0000000200)={0x3, 0x3, 0x1, 0x7}, 0x10, 0x1dd03, 0xffffffffffffffff, 0x1, &(0x7f0000000240)=[0x1, 0xffffffffffffffff], &(0x7f0000000280)=[{0x2, 0x5, 0x5, 0x4}], 0x10, 0x5}, 0x94) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000380)={0xffffffffffffffff, r3}) 5.148474847s ago: executing program 5 (id=16509): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x6, 0x7}}]}}]}, 0x48}}, 0x4c840) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x38, 0x40, 0x107, 0xfffffffe, 0x2, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x14, 0x2, 0x0, 0x1, [@nested={0x10, 0x14, 0x0, 0x1, [@nested={0xc, 0x16, 0x0, 0x1, [@typed={0x8, 0xb6, 0x0, 0x0, @u32=0x4888}]}]}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc800) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=@newtfilter={0x44, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0xfff3, 0xfff3}, {0x0, 0xfff3}, {0x2, 0x300}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8847}, @TCA_FLOWER_KEY_MPLS_BOS={0x5}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) setsockopt$sock_int(r0, 0x1, 0x1, &(0x7f00000000c0), 0x4) 5.069357476s ago: executing program 5 (id=16511): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast2, @dev={0xac, 0x14, 0x14, 0x10}}, 0xc) getsockopt$inet_buf(r1, 0x0, 0x29, &(0x7f0000000000)=""/137, &(0x7f0000695ffc)=0xbf) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000000c0)=0x8e92, 0x4) 5.029658598s ago: executing program 5 (id=16513): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000c40), 0x12) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_type(r2, &(0x7f0000000100), 0x2, 0x0) write$cgroup_type(r3, &(0x7f0000000280), 0x9) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="20000000520001000000000000000000020300000c00010001"], 0x20}}, 0x80) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000340)={0x54, r6, 0x1, 0xfffffffc, 0x0, {0x1e}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3e}, {0xc}, {0xc}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000081}, 0x10) 4.895189904s ago: executing program 5 (id=16516): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000040000701905dc1f62bbd7000fadbdf25037c00000400c2801c0001801800108014000d00"/56], 0x38}, 0x1, 0x0, 0x0, 0x4c090}, 0xc000) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x3) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[], 0x38}}, 0x0) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000000)={0x0, &(0x7f00000000c0)}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r3) getpeername$packet(r5, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f0000000380)={'syztnl2\x00', &(0x7f0000000300)={'ip6gre0\x00', 0x0, 0x4, 0x5, 0x1, 0x9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0, 0x8, 0x1, 0x4, 0x4}}) getpeername$packet(r5, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000440)=0x14) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r5, 0x89f8, &(0x7f0000000500)={'gre0\x00', &(0x7f0000000480)={'gretap0\x00', 0x0, 0x7, 0x7800, 0x0, 0x8001, {{0x13, 0x4, 0x0, 0x4, 0x4c, 0x64, 0x0, 0x1, 0x4, 0x0, @multicast1, @private=0xa010102, {[@timestamp_addr={0x44, 0xc, 0x33, 0x1, 0xe, [{@loopback, 0x6}]}, @noop, @timestamp_addr={0x44, 0xc, 0xb9, 0x1, 0x4, [{@broadcast, 0x6a}]}, @lsrr={0x83, 0x1f, 0x26, [@rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x7}, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @broadcast, @multicast1, @dev={0xac, 0x14, 0x14, 0x31}]}]}}}}}) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f0000000880)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000840)={&(0x7f0000000a80)={0x2dc, r6, 0x10, 0x70bd2b, 0x25dfdbff, {}, [@ETHTOOL_A_FEATURES_HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}, @ETHTOOL_A_FEATURES_WANTED={0x254, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0xd4, 0x3, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5d09}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, ')&:\\\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4a}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffff001}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '}@\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}]}]}, @ETHTOOL_A_BITSET_BITS={0x17c, 0x3, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, '/dev/net/tun\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x100}]}, {0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '&\\\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xf}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'TIPC\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x10001}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, '+)\\\xd71@\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '@\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7fffffff}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x100}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, '):),:.\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, '/dev/net/tun\x00'}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '\xbb\xbb\xbb\xbb\xbb\xbb'}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'TIPC\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x811}]}]}]}, @ETHTOOL_A_FEATURES_HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}]}]}, 0x2dc}, 0x1, 0x0, 0x0, 0x400c000}, 0x4040000) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000900), r1) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r1, &(0x7f0000000a40)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000940)={0xa0, r11, 0x300, 0x70bd27, 0x25dfdbff, {}, [@HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg\x00'}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 2.11328811s ago: executing program 8 (id=16575): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0xd4, 0x1, 0x1, 0x801, 0x0, 0x0, {0x1, 0x0, 0x7}, [@CTA_SYNPROXY={0x3c, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x10001}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x2}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0xa}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x9}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x100}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x6}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x9}]}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x4}, @CTA_TUPLE_ORIG={0x68, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}]}, @CTA_SEQ_ADJ_REPLY={0x14, 0x10, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x1}]}]}, 0xd4}, 0x1, 0x0, 0x0, 0x800}, 0x4048080) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="050010000200000040000000400000000000000063cee319c86706b5cecae8b50e62f64337b4bfb8b32ad992262e6a258fa289ab2970dc0ae08328d700f5ed34b83511d1eb69541e6c932c6c67f691a00617edc2ab717949419a0d280a2074bdc0936f37eec4722090b73cc7755b1a9e3f9854c84457", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_LOOKUP_ELEM(0x15, &(0x7f0000000b80)={r1, 0x0, 0x0}, 0x20) r2 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r2, &(0x7f0000000400)={&(0x7f0000000040)={0xa, 0x4e20, 0x7a, @mcast2, 0x9}, 0x1c, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="3000000000000000290000000400000084026400ff000000050200030401"], 0x30}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_SERVICE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x14, r4, 0x1, 0x70bd28, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x503, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21111, 0x8831}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ICV_LEN={0x5, 0x3, 0x10}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48890}, 0x4000) 2.110710936s ago: executing program 8 (id=16577): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x3, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1}, 0x94) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000d80)={0x58, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x4}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x58}}, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000040)={r2, r1, 0x25, 0x8, @void}, 0x10) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r2, r1, 0x25, 0x0, @val=@netkit}, 0x1c) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x6, 0x0, 0x0, 0x0, 0x71, 0x11, 0x24}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x7}, @exit]}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0xe}, 0x70) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={r4, 0xe8, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) 2.058030738s ago: executing program 8 (id=16578): syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r0 = accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x80000) setsockopt(r0, 0x300000, 0x8001, 0x0, 0x0) 2.027795425s ago: executing program 8 (id=16579): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000020c0)=[@in6={0xa, 0x0, 0x0, @remote, 0x34}]}, &(0x7f0000002100)=0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, 0x0, &(0x7f0000000180)) socket$phonet(0x23, 0x2, 0x1) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map, r0, 0x26, 0x7}, 0x10) 1.553962058s ago: executing program 6 (id=16584): r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f72024fc60", 0x14}], 0x1}, 0x0) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r1) sendmsg$NL80211_CMD_SET_BEACON(r2, &(0x7f0000000540)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000500)={&(0x7f00000003c0)={0x120, r3, 0x100, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_IE={0x7, 0x2a, [@sec_chan_ofs={0x3e, 0x1, 0x3}]}, @NL80211_ATTR_BEACON_TAIL={0x1e, 0xf, [@erp={0x2a, 0x1, {0x0, 0x1}}, @rann={0x7e, 0x15, {{0x0, 0x8}, 0x14, 0x4, @broadcast, 0xc, 0xf9, 0xe1e}}]}, @NL80211_ATTR_BEACON_TAIL={0x74, 0xf, [@mic={0x8c, 0x18, {0x1f8, "ae975d1c3f1f", @long="04a9954ddc6a6760dee11df9a3c99319"}}, @random={0x0, 0x27, "ff8401bcc9e66e417559761e28904a8082640a2b1419151d16b05982c7d821868d7505454a386c"}, @chsw_timing={0x68, 0x4, {0x5, 0x3e7a}}, @prep={0x83, 0x25, {{0x0, 0x1}, 0x7, 0xe3, @broadcast, 0x4, @value=@broadcast, 0xc27, 0xfffffffe, @device_b, 0x8}}]}, @NL80211_ATTR_FTM_RESPONDER={0x70, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_CIVICLOC={0x6b, 0x3, "9b654874323afd97b87a668e0c45a429b1ed541998906aefbcedc9769aa4c325b8b2ee40555417a02d826eb82476597ee033847b205c579c3be2fd5a2af0aaf4da1acf976a25672dd070da63ba2cd5a934cb8009d1e15235b36e0d0c8376e8a425d685440170f2"}]}]}, 0x120}, 0x1, 0x0, 0x0, 0x4804}, 0x20000004) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x20, &(0x7f00000002c0)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in={0x2, 0x4e23, @broadcast}]}, &(0x7f0000000180)=0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r6, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r8, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0xff, r8}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) r9 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r9, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local}, 0xc) r10 = socket(0x10, 0x803, 0x4) sendmsg$nl_route(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x20088814}, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) setsockopt$inet_msfilter(r9, 0x0, 0x29, &(0x7f0000000380)={@multicast2, @local, 0x1, 0x2, [@local, @loopback]}, 0x18) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@delchain={0x24, 0x11, 0x1, 0x13, 0x0, {0x0, 0x0, 0x0, r11, {0x0, 0xb}}}, 0x24}}, 0x0) r12 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_BT_FLUSHABLE(r12, 0x112, 0x8, &(0x7f0000000000), &(0x7f0000000040)=0x4) r13 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001fc0), 0xffffffffffffffff) r14 = socket$nl_generic(0x10, 0x3, 0x10) r15 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r14, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r15, 0x1}, 0x14}}, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r4, &(0x7f0000002140)={0x0, 0x0, &(0x7f0000002100)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r13, @ANYBLOB="01000380080001000300000066ffe377c54200f7a724d783f9ca29ec4b5b92cc9236207d1af09c9efa891be6ed5f4f2dd0e97179a480dbb9cb7b276109b3f224889d589a60736d6ec6153e7879650436cdede81b5b4d451f90894c9de1ae3fa5486f12ed72a1c59b7d025c7fdbc4024e377a4238df7fd2facdaa254c242e119804dc5442fb1cdbdddd1744638b20c9d83d9c6caf2c57df31b5211b1f966d19bc"], 0x20}, 0x1, 0x0, 0x0, 0x44000}, 0x80d4) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000001080)=0x8) 1.447104879s ago: executing program 7 (id=16587): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000ec0)=ANY=[@ANYBLOB="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"], 0x3f4}, 0x1, 0x0, 0x0, 0x40}, 0x4000041) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000e40)=@newtaction={0x5c, 0x30, 0xb, 0x5, 0x0, {}, [{0x48, 0x1, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x80000001, 0xffffffff, 0x4, 0x0, 0x400}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8890}, 0x40) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x24, 0x0, &(0x7f0000000040)) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, 0x0, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000800}, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r6, {0x0, 0xd}, {0xffff, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_TARGET={0x8, 0x8, 0x1}]}}]}, 0x3c}}, 0x4890) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f00000004c0)=@xdp={0x2c, 0xdd86, r6, 0x3e}, 0x80, &(0x7f0000000840)=[{&(0x7f00000024c0)='\'', 0x1}], 0x1}, 0x4) sendmsg$nl_generic(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c0800002c0007012bbd700000000000067c00000c00018006000600843b000009000280040071008c0000000800e400", @ANYRES32, @ANYBLOB="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", @ANYRES32, @ANYBLOB="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"], 0x85c}, 0x1, 0x0, 0x0, 0x24048011}, 0xc000) socket$phonet(0x23, 0x2, 0x1) 1.097860387s ago: executing program 2 (id=16593): bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x8a}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$rds(0x15, 0x5, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) ioctl$TUNSETLINK(r1, 0x400454cd, 0x10f) connect$rds(r0, &(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0xa) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x4, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="660a0061118c0000000000850000006b0000009500000000000000"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) connect$can_j1939(r3, &(0x7f0000000640)={0x1d, r4, 0xffffffffffffffff, {0x0, 0x1}}, 0x18) setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0, 0xffffffc0, @vifc_lcl_ifindex=r4, @local}, 0x10) 1.069728234s ago: executing program 8 (id=16594): r0 = socket$kcm(0x29, 0x5, 0x0) sendmmsg$inet(r0, &(0x7f0000000840)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000a00)='(', 0x1}], 0x1}}], 0x1, 0x4880) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) (async) sendfile(r0, r1, 0x0, 0xffffffff000) (async) unshare(0xc040480) unshare(0xc040480) 1.042732119s ago: executing program 7 (id=16595): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=@newtaction={0x68, 0x30, 0xffff, 0x70bd25, 0x0, {0x0, 0x0, 0x1300}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x0, 0x7, 0x400, 0xfffffff7}, 0x2}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x68}}, 0x4000000) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="090d2000000000f0ff000700000008000300", @ANYRES32=r3, @ANYBLOB="0800051d000000001400060076657468115f746f5f7465616d0000000400cc0008000500090000001400040073"], 0x58}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_SIOCOUTQ(r7, 0x5411, &(0x7f0000000f00)) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000010024bd7000fc0ddf2500000000", @ANYRES32=0x0, @ANYBLOB="1b0b04000300000008001b"], 0x28}, 0x1, 0x0, 0x0, 0x68010}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1f, 0x2, &(0x7f0000000200)=@raw=[@call={0x85, 0x0, 0x0, 0x6c}, @exit], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x90) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r9 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x20040000}, 0x4000) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, 0x0) sendmsg$nl_route_sched(r10, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000240)=ANY=[@ANYBLOB="240000004dbcd18f118ce8c02b59d209a090653cb18b4858abea824c42d215d0cb8fbc1e9cc30783f7649d498e5a1e1db86bbb247079ec80d2af853d71929dafa6bf8376f9d47bb7ac4a3d3555114a545fbe14b88922d35a899f7dfbfd86ace3ba7d81269428d030813c500858d5960536cd35e9899c490c1d4185dfc25f9b82268b4fa88e24a0944cb8f3eabd4a0c3aa91d5126c0a62490cee245ea41b986be80d72b922252e9aa62c2ba7405a39d5ad7fb82524312ae71fc3187d24af225edaf5f5863813cd82b19ab1e8a15eca1a255a5cb7c", @ANYRES16=r8, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r11, @ANYBLOB="0800050003000000"], 0x24}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="180000002e00010026bdf000fcdbdf1b04000000040018"], 0x18}, 0x1, 0x0, 0x0, 0x4000d}, 0x850) 994.461403ms ago: executing program 6 (id=16596): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000003c0)='cgroup.clone_children\x00', 0x2, 0x0) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000140), 0x10) sendmsg$can_bcm(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="050000000300000000000000", @ANYBLOB="0080220294bbf164"], 0x48}, 0x1, 0x0, 0x0, 0x40010}, 0x0) sendfile(r1, r1, 0x0, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) openat$cgroup_int(r0, &(0x7f00000003c0)='cgroup.clone_children\x00', 0x2, 0x0) (async) socket$can_bcm(0x1d, 0x2, 0x2) (async) connect$can_bcm(r2, &(0x7f0000000140), 0x10) (async) sendmsg$can_bcm(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="050000000300000000000000", @ANYBLOB="0080220294bbf164"], 0x48}, 0x1, 0x0, 0x0, 0x40010}, 0x0) (async) sendfile(r1, r1, 0x0, 0x8) (async) 881.367511ms ago: executing program 6 (id=16597): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x4008054) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x3, 0x4, &(0x7f0000000600)=ANY=[@ANYBLOB="180704000100003707000000000000007110950000ff0100ecff78bb112279252f90ee152d4bee6599adbb53e5f847c7bd1f3c39458e57fccdc9d2aac218416107b264b106642bb3beef0a5823ee1628c0e5d2f1baf907ec1935a789debcde50bb63789523a91773d75ebeda933d4bbcc01ffee7f53d601f1526128d1f79e7f9677e29705df320e13859ee0da90900000050a8234fe856dff13a3310df1f616ac273132914b287459cb2a9e547ca2c02f6afd4c9ef30e5a7b4de5603c7d85cdb2915df167fc80fdb4223a7e5ab45db1755744c392387ec28893fa71ab9bcd2", @ANYRESOCT=r0, @ANYRESOCT=0x0, @ANYRES64=0x0, @ANYRES64=r0], &(0x7f0000000100)='GPL\x00', 0x6}, 0x94) 879.220151ms ago: executing program 2 (id=16598): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x0, 0x7fffd, 0x8, 0x0, 0x1}, 0x48) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106(gcm(anubis))\x00'}, 0x58) (async) setsockopt$ALG_SET_AEAD_AUTHSIZE(r2, 0x117, 0x5, 0x0, 0x2) (async) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000280)={r1, 0x0, 0x0}, 0x20) (async) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x30, 0x38, 0x800, 0x70bd25, 0x25dfdbfd, {0x2}, [@nested={0x8, 0x38, 0x0, 0x1, [@nested={0x4, 0x6}]}, @nested={0x10, 0x1, 0x0, 0x1, [@typed={0xc, 0x8c8, 0x0, 0x0, @u64=0x2}]}, @nested={0x4, 0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x8800}, 0x0) (async) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f0000000140)={@remote, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x1, 0x4, [@initdev={0xac, 0x1e, 0x0, 0x0}, @local, @rand_addr=0x64010101, @broadcast]}, 0x20) (async, rerun: 64) r4 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x38, 0x40, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x1c, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}, @typed={0x8, 0x15, 0x0, 0x0, @uid}, @typed={0x8, 0xa, 0x0, 0x0, @fd}]}, @nested={0x4, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x48815}, 0x48810) 807.340723ms ago: executing program 2 (id=16599): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0xfffffffffffffff5, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x18, 0x10, 0x3}, @TCA_FQ_FLOW_MAX_RATE={0x2, 0x2}, @TCA_FQ_PLIMIT={0x0, 0x1, 0x5}]}}]}, 0x48}}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000080)="4486", 0x2}, {&(0x7f00000000c0)="feac8e746793ffc4fed39d563aa54a", 0xf}, {&(0x7f0000000100)="c3ec0fcab488a68ff2cc4c1cca247bfe4f30c17b3903bc1de5963fa1d10c934e29cfbcf87cc1c8971dcd5f73", 0x2c}, {&(0x7f0000000140)="972d84daafa7ee69bbd3bc6a34e20778a28706ce3eca65f9fd40117920e6f10dabb1a42138a09bcc243e0621cee360", 0x2f}, {&(0x7f00000001c0)="5af8f2866f8abfbc0a4e778d58a1c1b86f578d0aaf45ec260ee6b73d6f07d5757fe406d9de965d451a3b690827dffd7a0ba17ae16655ab27605f26c9a3449600f0df30636f703d7e6eaca977f1a2f9bc6bdfc34c53db54dd20ded19e485b0cb1642b0ccda377b9de54b52bc3692ba165a67f980095cb349368a4e7a4", 0x7c}], 0x5, &(0x7f0000000340)=[{0x68, 0x111, 0x9, "a355445414f45490eb1f1ab7c0a4f3809cb994803ba8a2227b6ef77dfcb7a161a2df646f0370ef86eaa8ed0613ef86c1651c5334d3cfcb6c69b6aa1de1f70c16b0153525a7a67d17747c28184800ff507a93337530605d"}, {0xb8, 0x101, 0x8fc, "4ab4b1346f43dab20feb3def56ea1a6188db77ba277c9e55f7616c4177140510379c30eb4e45e0a57c054af0e225d15477a1482813052aa0e88aab79f10e6887649de39a1a3ba6f5cbc3d02cdbbf2c560c72cf6d50ff9b001966abb3bb4bd8a132cdc465255f2e14d138ed28e9ff1962b28e82fa95ef2cbb31f7b23553698afb9a5093aaecc12a7576d85b4461da02c8ce32c6f4638b7bc32eda461e7be8f52eae05f364f35c"}, {0x100, 0x110, 0x0, "723918a25b4c517fdf672f90859b0f18bc1c7162fdcd519ea81431c5f42859bc10e1a7a5a50c653316c4bc180b956b6219b20e48370be7ca5426ea681f7132b83cba986f4ce0016c2d4a44866ab1a33122bed4c4575f16747cc6bca2e35a2de2d20ea0c0ff24cc804201b78a0c210e9660d80b393560805a72dcf7ace24821995f606bece4ca06a83d99d3aa64fe5d00eca52522d8bbf4935cbc4615aed315e02aeba4b1d8e5a0a0f20cd44a4dc1b13901be16f1a6f19a6825576ccc819eacd411af27bd58acceb9d48d433ba07657bb236bfdd9879f9f71a8580699ed90d891d10fcf78b0c5a0c0d3bcf397ae6a01e2"}, {0x68, 0x116, 0x6, "3aa545448c39c4aef6d29556ccb2d8759558a2ed043dea2fa4f865a8a02dd4bc880e6124e36a256e809c6eca71c9578769e6f1b792845e7588273ea6a23067a92c6100b0ca993279fe1217589fe546007d8ebe64c546"}, {0xf0, 0x107, 0x800, "40fe32ded9c4e150324edc122c1e285e8248ca3153c2948b68ec2ae070c8c31da65f56e1652c4475efe07e61527ff2a7c1186ec83fdc77df690de34fa83dea4e3e97738d61496885744e641cf9c3fa561dec796094db2013f5b397b08b30fb2b3467233a1579783d6e454691c99198e3e187aee370419b760338514abf1e7e256171cbcf5c6c9311dfb14088fb53d1f7a755183d2fb4a9eab357ba6c83a4e8ce57dac00e5495b78e6609440b381909f5f11de5bf0689141c31c36a9debc59e7f57bc50b7cb6c2939e89163d12486f2dc77ec1f7ebbb9186c5e9940e8a1b3cbca"}], 0x378}, 0x80) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="240000001a0001000000000000000000020000000000000000000000080009"], 0x24}}, 0x0) 774.126973ms ago: executing program 7 (id=16600): r0 = socket(0x10, 0x2, 0x0) (async) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="54000000020601080000000000000000000000000c00078008000640000000000500010006000000050005000a00000005000400000000000900020073797a31000000000d000300686173683a6e6574"], 0x54}, 0x1, 0x0, 0x0, 0x48000}, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xf, "0000000000000000000100000e00"}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2000000}, 0x0) (async) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) sendto$packet(r5, 0x0, 0x0, 0x4000, &(0x7f0000000080)={0x11, 0x1a, r6, 0x1, 0x0, 0x6, @remote}, 0x14) (async) r7 = socket(0x10, 0x80003, 0x0) sendmsg$IPSET_CMD_ADD(r7, &(0x7f0000000780)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000740)={&(0x7f0000000680)={0x8c, 0x9, 0x6, 0x101, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_ADT={0x40, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_ETHER={0xa, 0x11, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_ETHER={0xa, 0x11, @local}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e24}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_COMMENT={0x9, 0x1a, 'syz1\x00'}}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x7}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x3}, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x7}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4010}, 0x10) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'lo\x00', 0x0}) (async) r9 = socket$unix(0x1, 0x5, 0x0) (async) r10 = socket$nl_generic(0x10, 0x3, 0x10) (async) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) (async) r13 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r13, 0x0, 0x60, &(0x7f0000000140)={'filter\x00', 0x7, 0x4, 0x3c0, 0x2d8, 0x1f0, 0x0, 0x108, 0x2d8, 0x2d8, 0x4, 0x0, {[{{@uncond, 0xc0, 0x108}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0xe8, 0x0, {0xa00}}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE2={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x410) (async) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010000000000000000003900000008000300", @ANYRES32=r12, @ANYBLOB="24005a802000018014000300000000000000000001020004"], 0x40}}, 0x0) (async) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xb, "0000000000020400"}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) 705.477227ms ago: executing program 6 (id=16601): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003"], 0xfc}}, 0x0) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x5}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@ipv6_getroute={0x1c, 0x1a, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0xfe}}, 0x1c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xd, 0x4, 0x0, 0x0, 0x2, 0x99, &(0x7f0000000180)=""/153, 0x41000, 0x0, '\x00', 0x0, @sock_ops}, 0x94) setsockopt(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x1e, 0x5, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000280), r2) getsockname$packet(r2, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) socket$inet6_udp(0xa, 0x2, 0x0) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000240)={0x5}, 0x8) socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r7, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x54, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x1}, @IFLA_GRE_REMOTE={0x8, 0x7, @rand_addr=0x64010101}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e22}]}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x54}}, 0x24000000) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000200)={0xa, 0xfdfc, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000100), 0x3) 695.261933ms ago: executing program 2 (id=16602): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0xffffffff) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000004000000000000000000000850000007a00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4}, 0x94) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={0x28, r4, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_NETNS_FD={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x48800) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="3500000004000000080000000b73b6979aad16cfa886b9cc4fea0b4c7a493d95406f34521b141ded007f473d8d1e71177afadc27971ad0e15f92c3651e2fbaead8c2de761c2704f845ac422ef84518b52de831aa5aa7cc2352ad6bca1e8aa7823d669dcc5f09b3d931a476a27b2be5a40b62b051ba5167fb027bbe227ce8ae17c1c4943a0eef95b4c9b5b762daedb5d9"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000740)=ANY=[@ANYRES32=r6, @ANYRES32=r2, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r6, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r1}, 0x20) sendmmsg$inet6(r1, &(0x7f0000000b00)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000ac0)="01", 0x1}], 0x1}}], 0x1, 0x241) ioctl$FS_IOC_ENABLE_VERITY(r5, 0x40806685, &(0x7f0000000940)={0x1, 0x0, 0x1000, 0xd6, &(0x7f0000000780)="06fa4b5250adb48554c9bd465962b81de7a22d36115b59025b151575188dd167a129f72dd4e0260959c953a65a2b43c1fe4ed3559092b59f297a8c3cf1bfa5784e680a460203218fcefe20e94e33bc7b976cd8b812acce05911cabb42111f0d5f0fd90ffe1ece8c559648e27aab05ce21f5e98b433547bdc4abcea112a9f3d68147e4437e36915915a80949967a6db5eb360777329f1a7526130ebcf92e0071e3cd706c2c19a281a0c0bd79be79db80efebbc169fce1451477c6af5f3687b6e5e676e04f41988b4b70ead939f99a7e528c977c26ad8b", 0xba, 0x0, &(0x7f0000000880)="6d99800d1ed92fb51a06bfcaf20e79ee4ddaf7c3040f8a9283a06a4816019de9d16027c1967842e1d40463912dcf7e5a2670ac3d9f6a8a87067a75e5e35f504bf625471e7d935d8b39b5df56a0d302420c78398627c7f73257bc30d476f176b799f45bf22cacceaf5130f5bb91aa17567c1d2ff10678bb6854ac6f6bd2fcb11a24bd57477f688294598bcdf7daec8736ffc1e4b7abafccc335378b91d9883c43441b729588e84b782e758f753a7298afeb2e19db4c754cf53488"}) sendmsg$inet(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000100)="90e74e0b", 0x4}], 0x1}, 0x24000041) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x30, 0x10, 0x1, 0x70bd25, 0x25dfdbf9, {0x0, 0x0, 0x600, 0x0, 0x48815, 0x40103}, [@IFLA_GROUP={0x8}, @IFLA_TXQLEN={0x8, 0xd, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) r7 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$DCCPDIAG_GETSOCK(r7, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x74, 0x13, 0x2, 0x70bd2d, 0x25dfdbfd, {0x15, 0x9, 0xb, 0x2, {0x4e20, 0x4e24, [0x898, 0x63, 0x2, 0x400], [0x0, 0x7, 0xfffffffe, 0x5], 0x0, [0xfffffffa, 0x5]}, 0x7, 0x8}, [@INET_DIAG_REQ_BYTECODE={0x25, 0x1, "65001861b652a2a3b414b915ef05446425d0f98f8a56bf375d3035c619c21ef53f"}]}, 0x74}, 0x1, 0x0, 0x0, 0x1}, 0x810) 569.106613ms ago: executing program 8 (id=16603): unshare(0x46000480) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x4, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, [@jmp={0x5, 0x1, 0xa}]}, &(0x7f0000000000)='syzkaller\x00'}, 0x94) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) close(0x3) bind$alg(r2, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmsg$alg(r3, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x800}, 0x4000010) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r1, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x3e8, 0x0, 0xfffffffffffffd25) sendmsg$NFT_BATCH(r0, &(0x7f0000001200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000011c0)={&(0x7f0000001240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWSET={0x588, 0x9, 0xa, 0x801, 0x0, 0x0, {0x7, 0x0, 0xa}, [@NFTA_SET_DESC={0x14, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x8000}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x9}]}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x5}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_DESC={0x544, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0xc8, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}]}, {0x3c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7f}]}, {0x44, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8b}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x400000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x400}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xe297}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x60000000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7fff}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}]}, {0x4}]}, @NFTA_SET_DESC_CONCAT={0x48, 0x2, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7fff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffff7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x10001}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xb}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}]}]}, @NFTA_SET_DESC_CONCAT={0x4c, 0x2, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffffa}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x101}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xb}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80000000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0xfffffed4, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}]}, {0x4}]}, @NFTA_SET_DESC_CONCAT={0xc4, 0x2, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1ff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7fff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x200}]}, {0x4c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xb}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8}]}, {0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xe5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3ff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x506}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x10000}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x98e}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xdf55}]}]}, @NFTA_SET_DESC_CONCAT={0xc4, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8e}]}, {0x44, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x40000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffffffff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2c1e}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xaf4}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x400}]}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0xffff}, @NFTA_SET_DESC_CONCAT={0x70, 0x2, 0x0, 0x1, [{0x4c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8a}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xf4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x621}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x40}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}]}]}, @NFTA_SET_DESC_CONCAT={0x18, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x398}]}]}, @NFTA_SET_DESC_CONCAT={0x1c4, 0x2, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xe04e}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x10}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}]}, {0x4c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xb136a028}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}]}, {0x4c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffeffff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x342e}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1ca0}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5950fc}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xdbb}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1efe0}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}]}, {0x4c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xb6}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xbc1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}]}, {0x3c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffc00}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}]}, {0x4c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xc640}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}]}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x40}]}]}, @NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWOBJ={0x1c, 0x12, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x3}, @NFT_OBJECT_QUOTA=@NFTA_OBJ_TYPE={0x8}}, @NFT_MSG_DELTABLE={0xe8, 0x2, 0xa, 0x401, 0x0, 0x0, {0x3, 0x0, 0x6}, [@NFTA_TABLE_USERDATA={0x9d, 0x6, "a6e00be34b8f612601761cd78288e715fd498f62d6c9036dcd0e002078bf9ddb2033a5cbfc47fffb1b616a310fced8fc03bbcfa818454cf435d9716b0ed338adb52d748a3fa5c3717735f67d4d2c83e573aaad7a4e8b3c4a5bb8aa41ddc79238124f0eb25eed6cec8c2c3275152643236def8c6a95e021595720c56959b33225c3adf6423172116c02cf6f3d08c07614a0d5ef0107365f51cd"}, @NFTA_TABLE_USERDATA={0x19, 0x6, "db5dde5c2677636d3f54691b5dabbf1bb4102c99f1"}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}]}, @NFT_MSG_DELFLOWTABLE={0x164, 0x18, 0xa, 0x3, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFTA_FLOWTABLE_HOOK={0x70, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x68, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth1_to_bond\x00'}, {0x14, 0x1, 'ipvlan1\x00'}, {0x14, 0x1, 'batadv0\x00'}, {0x14, 0x1, 'team_slave_0\x00'}, {0x14, 0x1, 'netpci0\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x4}]}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_HOOK={0xd8, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xff}, @NFTA_FLOWTABLE_HOOK_DEVS={0xcc, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth0_to_team\x00'}, {0x14, 0x1, 'pim6reg1\x00'}, {0x14, 0x1, 'caif0\x00'}, {0x14, 0x1, 'veth0_virt_wifi\x00'}, {0x14, 0x1, 'dvmrp1\x00'}, {0x14, 0x1, 'erspan0\x00'}, {0x14, 0x1, 'caif0\x00'}, {0x14, 0x1, 'ipvlan1\x00'}, {0x14, 0x1, 'virt_wifi0\x00'}, {0x14, 0x1, 'ip_vti0\x00'}]}]}]}, @NFT_MSG_DELSETELEM={0x294, 0xe, 0xa, 0x5, 0x0, 0x0, {0x8, 0x0, 0xa}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x258, 0x3, 0x0, 0x1, [{0x1d8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0x1c4, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0x84, 0x1, "e1d22dc6836cb16b84e0df71351fe9ff79d8a4e31dc492ca294da7bdfe406e3bf9382d3ec0b628b3635e4b5e6c38a9c069fd3b56cfd76f6a8ad2fd6bc26c4c9bcac292ccbfc8a1d6b4494d25f1873cf67553a2322005f48bf5bccc81a6f76dd3d8bd28037b67ae1d006de0aac5a0c4acbb43a3733379a18fb59278dcaa128519"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VALUE={0xb7, 0x1, "b42c910cc86866c051fff520bf3d372aa57e27cf2067da88431088468edd66e6673a621a51949c8425138a2a1498f2170ac53525ab6fd203a0b871353c96cf21e83dd1086729f77343b9a610568b922797af4ba86d2b10e1c5a8cd09ebcd9c3e2922c309f56cc0511684e28724531b52cde5b4b8b7ac12d9194dda6cbe3240c09ab30f99e4e09a072394a30f76690eb8c63c75e458348200dae2c2ed647e2baa3eabc28597f06c1ec1720d0d98c270349ba89d"}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}]}, @NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @masq={{0x9}, @void}}]}, {0x7c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0x4c, 0x7, 0x0, 0x1, @socket={{0xb}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x8}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SOCKET_LEVEL={0x8, 0x3, 0xc}, @NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x1b}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SOCKET_LEVEL={0x8, 0x3, 0x4e}, @NFTA_SOCKET_LEVEL={0x8, 0x3, 0xb9}]}}}, @NFTA_SET_ELEM_KEY={0x20, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x7}]}]}]}, @NFT_MSG_DELCHAIN={0xb0, 0x5, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x4}, [@NFTA_CHAIN_HOOK={0x5c, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'ip6erspan0\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x33359dd4}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x7e47ed65}, @NFTA_HOOK_DEV={0x14, 0x3, 'team_slave_1\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}]}, @NFTA_CHAIN_TYPE={0xa, 0x7, 'route\x00'}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}, @NFTA_CHAIN_TABLE={0x0, 0x1, 'syz0\x00'}, @NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWSETELEM={0x5c0, 0xc, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x5ac, 0x3, 0x0, 0x1, [{0xa8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0xa3, 0x6, 0x1, 0x0, "9197fb77beac5c35359c212e7c39b79668cabd3e2c061400f08a998626e0de623d0df9ad5ab8c296d33c4851a174d3ab2aff587dd08d404c71bba489283aeb02e7a815c076d1d269211eb195886539ef0b3b72e4fe4ea89a50223c0fb903be4848173279fc8e10508772101c7f4c791a3ca661f7478726e6bf46d3e83c0cfeba1b9f1eb80d9a8f70250c39f6b122f141546db4e7b5301989391b51ebbfc06b"}]}, {0x4d8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x1b0, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x12, 0x1, "20faf987cbaed6d3b5762fabdc03"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VALUE={0xf6, 0x1, "f82cc556915b7764fe17544a10c6d2afdd5c2ad4b6c7195a4d8645d263564577453c2e7deb3043255ebf8a7554b58af817f096c2b67c200ebac754d3edab1103867b044f4ee12ddb7fda410bc3f8cbc260a49642c9a42d5232f179a959c1ce44428f91a9902c809ab449ddd7a6767385e26005a9c6f0accd31654381ce9c3a982af248cceee5729981559735082327eadd2fa327b8bdc67d29f260819569c08a3503d98fb1993c9d428d5aa1e9df7104a6570adfedaa270bb252ade388a699ddda553b3f90c976ec929889c97e946a6b078143666862d6df4bfe2f79b46c6d35011bd67c5897929c6c3453c5f9c3eac88ec0"}, @NFTA_DATA_VALUE={0x93, 0x1, "e506e14f7ce452e6782afe98617b26b1b6db928618a99b2a8eae349933a82625315b350049367e8f11c9c7cbc0884b4487782b571396a09b42c3da62f340f95d3b7841d5ba7b8b141324f645c60dfcbfaddb5a733c45fca028127daadf0233a6669ef217a37d9b28d02a694b6716b00dff9ac569b5cb1a376997cdb6d1e0e0f9d21da3fd9839a810cffe0b5f966f33"}]}, @NFTA_SET_ELEM_USERDATA={0x9c, 0x6, 0x1, 0x0, "bb8a4343ad91cfcfb6f2b863855cdf8145f96165e5c3da7d197cf908bb4a9fed7310d33c0b51fe3316c9a2f38b5445b0d056635cbd386758240e526db1e184dfc2fe50ff069a4955b3b73a5e06faa35a12bdb64b66b17f7a9b206b896e702c7e4a3308f65426a3ecf4a663e2790f63e3cb66618d841c5976a54cb537b9f050a193c91d516f15b521dce8cc7dcacb8d6be31be981e9d83fae"}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_SET_ELEM_USERDATA={0xf4, 0x6, 0x1, 0x0, "12c31939780d902866f099ae186970a53a3ff6414caae10c60b4caed61e925ef6c5995b003d938f4cced680e05566731bdbae903de752c7985fafe1f128070fd93456c28bffb435f739815b8e715063fb95c92f7b22232c00065c0c2dbb67ded69c06d25a1e4878d9b870ad825718911a910c2b6b02f47bd841788c2059238f5cbf7c2d6bbd6ff8c2f7f1ca1ffbca6054711ed7019661036a5b5791d53098b69cc9ca5dceea84a0b77288eed3672a01b9eece9bf5d86f1d7d2fe3a767311e3db71da1db5d54af9a52f58dae4a132f1683047969042547db6bbeeab530cb590cfab2489d55cd096cba6ddd25ae6c75ba7"}, @NFTA_SET_ELEM_USERDATA={0xdd, 0x6, 0x1, 0x0, "d30eaf4a834c57c8233edde52bf3583ef806338af1aa9a50eb97658912fd62d61fe86786d6434bf956ab1c8e72259e9159365f4d2b68889adccbfee0ae599f03c7a301869cb72b7c998df3ba33395d053e424dc6bfa85dc4f775be9c80bf609685224efa08f9e07241b7fa324d733e3645e5f7ab87d0d8752bc9c334a96b9e84afa01831e9da5817efaf9c2865334c5817e7ed63efd8b5a03890916078a2d50e6923fc35ee82dfb67822eb0e85aac276df35b1150f8c86abf70404927960f5c7cdc6016cd29ac7416fd291a54c45ba65721ccb609f5b37ec60"}, @NFTA_SET_ELEM_DATA={0x9c, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VERDICT={0x54, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}]}, {0x28, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x100}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}]}]}]}], {0x14}}, 0x113c}, 0x1, 0x0, 0x0, 0x4}, 0x4040084) 485.526683ms ago: executing program 7 (id=16604): r0 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100}, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r2, &(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc) r3 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r3, &(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000}, 0xc) socket$netlink(0x10, 0x3, 0x0) bind$netlink(r2, &(0x7f00000002c0)={0x10, 0x0, 0x25dfdbfb, 0x400000}, 0xc) r4 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r4, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc) r5 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r5, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc) r6 = socket$netlink(0x10, 0x3, 0x9) bind$netlink(r6, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x22ffffffff}, 0xc) socket$netlink(0x10, 0x3, 0xb) bind$netlink(r3, &(0x7f0000000200)={0x10, 0x0, 0x25dfdbfd, 0x80000}, 0xc) r7 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r7, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000}, 0xc) r8 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r8, &(0x7f0000000340)={0x10, 0x0, 0x2004, 0x22ffffffff}, 0xc) r9 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r9, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x1}, 0xc) r10 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r10, &(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc) r11 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r11, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x200000}, 0xc) bind$netlink(r1, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x80020000}, 0x48) r12 = socket$netlink(0x10, 0x3, 0x4) writev(r12, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80043f679a10ff3d425f9cc3f4ff7f4e32f61bcdf1e422000000000100804824cabecc4b381eaadc28f23457e792945f64009400050028925aaa000000c600000000000000feff2c707f8f00ff", 0x58}], 0x1) 415.033195ms ago: executing program 6 (id=16605): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@bridge_newvlan={0x24, 0x70, 0x239, 0x70bd2d, 0x25dfdbff, {0x7, 0x0, 0x0, r1}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x0, 0x2}}}]}, 0x24}, 0x1, 0x0, 0x0, 0x804}, 0x44014) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x5c, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x5c}}, 0x0) 392.81455ms ago: executing program 7 (id=16606): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="620000a56040c3fb64f3e100711017000000000000000000"], &(0x7f0000000480)='GPL\x00'}, 0x90) (async) connect$inet6(r1, &(0x7f0000000e00)={0xa, 0x4e22, 0x4, @mcast1, 0x91}, 0x1c) r2 = socket$inet6(0xa, 0x80803, 0x87) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@empty=0xa4, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x547b31180522e14c}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@broadcast}, 0x0, @in6=@private1}}, 0xe4) (async) connect$inet6(r2, &(0x7f00000000c0), 0x1c) (async, rerun: 64) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) (rerun: 64) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000380)={'tunl0\x00', &(0x7f0000000740)={'sit0\x00', 0x0, 0x8, 0x40, 0x7ff, 0x4, {{0x3b, 0x4, 0x0, 0x0, 0xec, 0x65, 0x0, 0x0, 0x29, 0x0, @loopback, @local, {[@timestamp_prespec={0x44, 0x1c, 0x62, 0x3, 0xa, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x9}, {@local, 0x5}, {@empty, 0x40}]}, @timestamp_prespec={0x44, 0x2c, 0x38, 0x3, 0x5, [{@empty, 0x5}, {@private=0xa010101, 0x668}, {@rand_addr=0x64010101, 0x7}, {@broadcast, 0x7}, {@multicast1, 0x6}]}, @timestamp_addr={0x44, 0x14, 0x98, 0x1, 0x0, [{@remote, 0xae0}, {@empty, 0xe89}]}, @noop, @timestamp_addr={0x44, 0x1c, 0xe3, 0x1, 0x1, [{@empty, 0x8abe}, {@local, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x2}]}, @cipso={0x86, 0x42, 0x1, [{0x1, 0xe, "99e9b23f225d786774fd753b"}, {0x1, 0x9, "3f52c5a73ab803"}, {0x62d586df61850c52, 0x12, "00000095a9050392f7e31ebd2a656628"}, {0x0, 0xe, "b0e1655bbfd05fa45a696990"}, {0x5, 0x5, "0f4da4"}]}, @timestamp={0x44, 0x14, 0xf0, 0x0, 0x6, [0x2, 0x2, 0xf, 0xa]}, @end, @ssrr={0x89, 0x7, 0xa0, [@local]}, @noop]}}}}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000200)={'syztnl1\x00', &(0x7f00000006c0)={'syztnl2\x00', r3, 0x4, 0xe9, 0x1, 0x0, 0x6b, @local, @dev={0xfe, 0x80, '\x00', 0x34}, 0x40, 0x700, 0x3, 0x1c000000}}) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x8, 0x40, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50) (async, rerun: 32) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[], 0x18}}, 0x20004000) (async, rerun: 32) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r5 = socket$netlink(0x10, 0x3, 0x2) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x54, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}]}, 0x54}}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020205d0af8ff00000000bea100000000000007010000f8ffffffb702000008000000b7030000ffee0000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x54, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0xb, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8}, 0x1c) (async) getsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f00000003c0)={@multicast1, @multicast2}, &(0x7f00000005c0)=0xc) (async, rerun: 64) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async, rerun: 64) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000780)="2e00000011008188040f46ecdb4cb9cca7480ef413000000e3bd6efb440009000e000a400d000000ba80000054eb", 0x2e}], 0x1}, 0x6400000c) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r7, 0x0) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (rerun: 32) 81.407301ms ago: executing program 6 (id=16607): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = socket$unix(0x1, 0x5, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000600)=@getqdisc={0x30, 0x26, 0x400, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x5, 0xfff2}, {0xe, 0x10}, {0x1, 0xfff3}}, [{0x4}, {0x4}, {0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x240080c1}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x80000, {0x0, 0x0, 0x0, r4, {0x0, 0x6}, {0x3, 0xb}, {0xfff3, 0x6}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2404c0f1}, 0x6008000) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r0, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000001500)='\x00', 0x1}, {&(0x7f0000002800)="cf", 0x1}, {&(0x7f0000000380)="08e0", 0x2}, {&(0x7f0000000180)="8a", 0x1}, {&(0x7f00000005c0)="f5fbfd", 0x3}], 0x5}}, {{0x0, 0x0, &(0x7f0000002f00)=[{&(0x7f0000001580)="ce", 0x1}, {&(0x7f00000007c0)="f2", 0x1}, {&(0x7f0000002e40)="d4", 0x1}], 0x3, 0x0, 0xffffffffffffff6d}}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000003000)="e1", 0x1}, {&(0x7f00000010c0)="fa", 0x1}, {&(0x7f0000001680)="d8", 0x1}, {&(0x7f0000001600)="f2", 0x1}, {&(0x7f0000000580)="b8", 0x1}, {&(0x7f00000002c0)='y@', 0x2}, {&(0x7f0000000280)="b7", 0x1}], 0x7}}, {{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000880)="87", 0x1}, {&(0x7f0000000900)="11", 0x1}], 0x2}}], 0x4, 0x4000000) sendto$inet(r0, &(0x7f00000004c0)="d9da7f8c33dd", 0x6, 0x40851, 0x0, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) r6 = socket(0x2, 0x80805, 0x1) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000200)=[@in={0x2, 0x4e20, @loopback}]}, &(0x7f0000000000)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f0000000040)={0xa, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000140)=0x2c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x1f, &(0x7f0000000080)={0x0, @in6={{0xa, 0x4e23, 0x4004, @empty, 0xc}}, 0x9, 0xb73}, 0x90) r7 = socket$rds(0x15, 0x5, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="1401000026000100000000001a000000030100800c"], 0x114}], 0x1}, 0x4000040) setsockopt$RDS_CONG_MONITOR(r7, 0x114, 0x6, 0x0, 0x0) 79.600345ms ago: executing program 7 (id=16608): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791048000000000071043b000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000073110a000000008510000002000000850000000000000095000810000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6}, 0x70) bind$unix(r1, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r1, 0x0) connect$unix(r0, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = socket$unix(0x1, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket(0x400000000010, 0x3, 0x0) socket(0x400000000010, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x20084040}, 0x0) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.throttle.io_serviced\x00', 0x275a, 0x0) connect$unix(r2, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r1, 0x802) r5 = openat$cgroup_ro(r1, &(0x7f0000000180)='blkio.bfq.io_wait_time_recursive\x00', 0x0, 0x0) epoll_pwait(r5, &(0x7f0000000080)=[{}, {}, {}], 0x3, 0x7, &(0x7f00000000c0)={[0x3]}, 0x8) socket$netlink(0x10, 0x3, 0x4) 76.077226ms ago: executing program 2 (id=16609): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4050000d62b00006110600000000000c6000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4050000d62b00006110600000000000c6000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1200000004000000040000000104000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x48) r0 = socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r0, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r2}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x1}], 0x1}}], 0x1, 0x0) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_inet_SIOCGIFADDR(r3, 0x8915, 0x0) (async) ioctl$sock_inet_SIOCGIFADDR(r3, 0x8915, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000005000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newtaction={0x64, 0x30, 0xeaa3ef926154ef0f, 0x0, 0x0, {}, [{0x50, 0x1, [@m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x8001, 0x2, 0x8, 0x7, 0x10001}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) 0s ago: executing program 2 (id=16610): socket$kcm(0x11, 0x2, 0x0) (async) r0 = socket$kcm(0x11, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000180)={&(0x7f0000001340)=@hci={0x1f, 0xe00, 0xe}, 0x80, &(0x7f0000002540)=[{&(0x7f00000006c0)='b', 0x1}], 0x1}, 0x0) r1 = socket(0x10, 0x3, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x6c, &(0x7f00000000c0)={0x0, 0x86, "4d0fb084befac31149def623b577ddd7adb65fb77357eea7e7870a6f68b841ec91c855079b41fc99f405bbfa7877bd9615d98d7fc48d870dd471e79023c46036bfa6f71ce506e6a289f02b4b1390556fc1e631911d1ed2be67ea7b4b40634a764d7dc4cc0b007f8ab2901d7db006c6e934da7235c261797ecb87aafccc1735b81dc9df891942"}, &(0x7f00000001c0)=0x8e) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000200)={r2, 0x6, 0x6a2}, 0x8) (async) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000200)={r2, 0x6, 0x6a2}, 0x8) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) (async) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_STATUS(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="0b866aac696fe21c000000", @ANYRES16=r4, @ANYBLOB="0100f9fffffffdeadf040092ffbd"], 0x14}, 0x1, 0x0, 0x0, 0x44000}, 0x40810) ioctl$sock_TIOCINQ(r1, 0x541b, &(0x7f0000000080)) sendto$inet6(r1, &(0x7f0000000000)="7800000018002507b9409b14ffff00000202be04020506050e130204430009003f0020480a0000000d0085a168d0bf46d32345653600648d27000b000a00000049935ade4a460c89b6ec0cff3959547f509058ba86c902000000004a3200040016000b000a0000000000e000e218d1ddf66ed538f2523250", 0x11, 0xc0d0, 0x0, 0x3c) kernel console output (not intermixed with test programs): W filter on device bond0 [ 1143.391433][T27619] syzkaller0: entered promiscuous mode [ 1143.413033][T27619] syzkaller0: entered allmulticast mode [ 1143.447672][T27318] 8021q: adding VLAN 0 to HW filter on device team0 [ 1143.709063][ T3360] bridge0: port 1(bridge_slave_0) entered blocking state [ 1143.716635][ T3360] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1143.749131][T27650] mac80211_hwsim hwsim153 ÿ: renamed from wlan1 [ 1143.879338][ T3360] bridge0: port 2(bridge_slave_1) entered blocking state [ 1143.886910][ T3360] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1144.421534][T27683] xt_cluster: you have exceeded the maximum number of cluster nodes (2048 > 32) [ 1144.490369][T27683] __nla_validate_parse: 3 callbacks suppressed [ 1144.490401][T27683] netlink: 24 bytes leftover after parsing attributes in process `syz.5.14874'. [ 1144.500340][T27694] netlink: 64 bytes leftover after parsing attributes in process `syz.4.14876'. [ 1144.541202][T27683] openvswitch: netlink: Flow key attr not present in new flow. [ 1144.749503][T27705] netlink: 12 bytes leftover after parsing attributes in process `syz.4.14878'. [ 1144.810200][T27195] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1144.841028][T27709] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14879'. [ 1144.904289][T27709] 8021q: adding VLAN 0 to HW filter on device bond12 [ 1145.186380][T27195] veth0_vlan: entered promiscuous mode [ 1145.217094][T27318] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1145.268315][T27195] veth1_vlan: entered promiscuous mode [ 1145.439375][T27195] veth0_macvtap: entered promiscuous mode [ 1145.478926][T27195] veth1_macvtap: entered promiscuous mode [ 1145.525148][T27737] netlink: 48 bytes leftover after parsing attributes in process `syz.5.14886'. [ 1145.556278][T27195] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1145.632596][T27195] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1145.688381][ T3281] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1145.719549][ T3281] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1145.754913][ T3281] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1145.805639][ T3281] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1145.832333][T27746] syzkaller1: entered promiscuous mode [ 1145.838734][T27746] syzkaller1: entered allmulticast mode [ 1146.220781][T27318] veth0_vlan: entered promiscuous mode [ 1146.250207][ T83] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1146.288020][ T83] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1146.349496][T27759] xt_hashlimit: size too large, truncated to 1048576 [ 1146.360239][T27762] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14894'. [ 1146.370306][T14831] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1146.385992][T27318] veth1_vlan: entered promiscuous mode [ 1146.386923][T14831] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1146.405364][T27762] netlink: 'syz.1.14894': attribute type 18 has an invalid length. [ 1146.419424][T27762] netlink: 4 bytes leftover after parsing attributes in process `syz.1.14894'. [ 1146.469437][T14831] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1146.529857][T27762] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14894'. [ 1146.530784][T27318] veth0_macvtap: entered promiscuous mode [ 1146.550731][T27762] netlink: 'syz.1.14894': attribute type 18 has an invalid length. [ 1146.581101][T27762] netlink: 4 bytes leftover after parsing attributes in process `syz.1.14894'. [ 1146.611189][T27318] veth1_macvtap: entered promiscuous mode [ 1146.696748][T27769] syzkaller0: entered promiscuous mode [ 1146.720442][T27769] syzkaller0: entered allmulticast mode [ 1146.757278][T27318] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1146.791590][T27318] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1146.875985][T14831] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1146.919373][T14831] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1146.949978][T14831] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1146.998747][T14831] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1147.192992][T14852] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1147.224682][T14852] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1147.318825][T14852] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1147.352774][T14852] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1147.576324][T27811] netlink: 48 bytes leftover after parsing attributes in process `syz.1.14908'. [ 1147.934200][T27834] lo speed is unknown, defaulting to 1000 [ 1147.970030][T27834] xfrm0 speed is unknown, defaulting to 1000 [ 1148.825188][T27869] netlink: 'syz.2.14921': attribute type 2 has an invalid length. [ 1149.147860][T27890] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 3, id = 0 [ 1149.525146][T25825] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1149.538147][T25825] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1149.547165][T25825] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1149.559191][T25825] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1149.568101][ T5725] IPVS: starting estimator thread 0... [ 1149.577047][T25825] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1149.613972][T27911] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 1149.672277][T27912] IPVS: using max 52 ests per chain, 124800 per kthread [ 1149.766450][T27895] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1149.809436][T27895] syzkaller0: entered promiscuous mode [ 1149.820387][T27895] syzkaller0: entered allmulticast mode [ 1149.875472][T27921] __nla_validate_parse: 3 callbacks suppressed [ 1149.875503][T27921] netlink: 4 bytes leftover after parsing attributes in process `syz.5.14931'. [ 1150.401190][T27956] netlink: 36 bytes leftover after parsing attributes in process `syz.6.14938'. [ 1150.596421][T27906] lo speed is unknown, defaulting to 1000 [ 1150.617960][T27906] xfrm0 speed is unknown, defaulting to 1000 [ 1150.714168][T27973] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 1150.748664][T27976] netlink: 212344 bytes leftover after parsing attributes in process `syz.2.14942'. [ 1150.797325][T27976] ksmbd: Unknown IPC event: 3, ignore. [ 1150.968086][T27991] netlink: 16 bytes leftover after parsing attributes in process `syz.5.14946'. [ 1150.984405][T27991] netlink: 16 bytes leftover after parsing attributes in process `syz.5.14946'. [ 1151.228888][T28002] netlink: 16 bytes leftover after parsing attributes in process `syz.5.14951'. [ 1151.309988][T28008] Cannot find add_set index 0 as target [ 1151.324907][T28008] netlink: 24 bytes leftover after parsing attributes in process `syz.6.14952'. [ 1151.518510][T28025] netlink: 12 bytes leftover after parsing attributes in process `syz.1.14957'. [ 1151.532444][T28023] netlink: 1044 bytes leftover after parsing attributes in process `syz.6.14955'. [ 1151.543878][T27906] bridge0: port 1(bridge_slave_0) entered blocking state [ 1151.555906][T27906] bridge0: port 1(bridge_slave_0) entered disabled state [ 1151.565737][T27906] bridge_slave_0: entered allmulticast mode [ 1151.574938][T27906] bridge_slave_0: entered promiscuous mode [ 1151.589779][T27906] bridge0: port 2(bridge_slave_1) entered blocking state [ 1151.597552][T27906] bridge0: port 2(bridge_slave_1) entered disabled state [ 1151.607084][T27906] bridge_slave_1: entered allmulticast mode [ 1151.607923][T28029] netlink: 4 bytes leftover after parsing attributes in process `syz.1.14957'. [ 1151.618565][T27906] bridge_slave_1: entered promiscuous mode [ 1151.666452][T27947] Bluetooth: hci7: command tx timeout [ 1151.770241][T27906] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1151.786591][T27906] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1151.854330][T27906] team0: Port device team_slave_0 added [ 1151.876575][T27906] team0: Port device team_slave_1 added [ 1151.921132][T27906] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1151.943191][T27906] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1151.977628][T27906] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1152.044581][T27906] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1152.068379][T27906] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1152.099605][T27906] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1152.193987][T27906] hsr_slave_0: entered promiscuous mode [ 1152.201410][T27906] hsr_slave_1: entered promiscuous mode [ 1152.220030][T27906] debugfs: 'hsr0' already exists in 'hsr' [ 1152.227049][ T83] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1152.229083][T27906] Cannot create hsr debugfs directory [ 1152.243124][T28040] syzkaller0: entered promiscuous mode [ 1152.248997][T28040] syzkaller0: entered allmulticast mode [ 1152.293889][T28040] syzkaller0: left promiscuous mode [ 1152.300642][T28040] syzkaller0: left allmulticast mode [ 1152.569311][T28076] Cannot find set identified by id 0 to match [ 1152.618608][T27906] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1152.634339][T27906] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1152.805084][T27906] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1152.817765][T27906] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1152.932649][T27906] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1152.945269][T27906] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1153.001954][T27906] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1153.014116][T27906] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1153.029324][T28100] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1153.037876][T28100] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1153.048959][T28100] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1153.057433][T28100] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1153.752404][T27947] Bluetooth: hci7: command tx timeout [ 1155.510778][T28076] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1155.542407][T27906] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1155.604783][T27906] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1155.650512][T27906] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1155.688857][T27906] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1155.716579][T27906] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1155.738314][T28110] __nla_validate_parse: 3 callbacks suppressed [ 1155.738343][T28110] netlink: 36 bytes leftover after parsing attributes in process `syz.1.14975'. [ 1155.761909][T27906] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1155.780484][T27906] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1155.826594][T27947] Bluetooth: hci7: command tx timeout [ 1155.842521][T27906] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1156.111515][T27906] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1156.158624][T28141] netlink: 'syz.2.14984': attribute type 21 has an invalid length. [ 1156.197624][T28139] bridge0: port 1(bridge_slave_0) entered disabled state [ 1156.208682][T28139] bridge0: port 2(bridge_slave_1) entered disabled state [ 1156.277717][T28141] bond1: option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 1156.291112][T28141] bond1 (unregistering): Released all slaves [ 1156.345600][T28146] bridge0: port 1(bridge_slave_0) entered blocking state [ 1156.353176][T28146] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1156.367007][T28146] bridge0: port 2(bridge_slave_1) entered blocking state [ 1156.374579][T28146] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1156.422890][T28150] netlink: 8 bytes leftover after parsing attributes in process `syz.5.14986'. [ 1156.475708][T27906] 8021q: adding VLAN 0 to HW filter on device team0 [ 1156.515590][ T4358] bridge0: port 1(bridge_slave_0) entered blocking state [ 1156.523141][ T4358] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1156.570998][ T4358] bridge0: port 2(bridge_slave_1) entered blocking state [ 1156.578530][ T4358] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1156.683847][T28161] tunl0: entered promiscuous mode [ 1156.714820][T28161] netlink: 'syz.5.14989': attribute type 4 has an invalid length. [ 1156.723796][T28161] netlink: 9 bytes leftover after parsing attributes in process `syz.5.14989'. [ 1156.814998][T28165] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1156.884043][T28165] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1156.949708][T28168] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1156.975890][T28170] syzkaller1: entered promiscuous mode [ 1156.998850][T28170] syzkaller1: entered allmulticast mode [ 1157.170353][T28152] gtp0: entered promiscuous mode [ 1157.190685][T28152] gtp0: entered allmulticast mode [ 1157.211179][T28184] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1157.213852][T28187] netlink: 'syz.5.14995': attribute type 1 has an invalid length. [ 1157.243553][T28187] netlink: 16179 bytes leftover after parsing attributes in process `syz.5.14995'. [ 1157.254932][T28187] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1157.270195][T28187] netlink: 'syz.5.14995': attribute type 9 has an invalid length. [ 1157.314079][T28187] netlink: 4 bytes leftover after parsing attributes in process `syz.5.14995'. [ 1157.416533][T28193] netlink: 'syz.6.14996': attribute type 1 has an invalid length. [ 1157.475907][T28192] netlink: 28 bytes leftover after parsing attributes in process `syz.6.14996'. [ 1157.488567][T28197] openvswitch: netlink: Message has 8 unknown bytes. [ 1157.496229][T28192] netlink: 'syz.6.14996': attribute type 7 has an invalid length. [ 1157.509592][T28197] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1157.527848][T28192] netlink: 20 bytes leftover after parsing attributes in process `syz.6.14996'. [ 1157.844560][T27906] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1157.899023][T28219] netlink: 'syz.2.15003': attribute type 1 has an invalid length. [ 1157.914207][T27947] Bluetooth: hci7: command tx timeout [ 1157.964773][T28219] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1157.987140][ T3360] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1157.998708][T28221] openvswitch: netlink: Actions may not be safe on all matching packets [ 1158.065550][T28225] bond1: (slave gretap1): making interface the new active one [ 1158.078807][T28227] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 1158.096977][T28225] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 1158.511568][T27906] veth0_vlan: entered promiscuous mode [ 1158.528623][T27906] veth1_vlan: entered promiscuous mode [ 1158.635837][T28244] netlink: 'syz.6.15009': attribute type 1 has an invalid length. [ 1158.655181][T28244] netlink: 4 bytes leftover after parsing attributes in process `syz.6.15009'. [ 1158.661292][T28247] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 1158.670416][T27906] veth0_macvtap: entered promiscuous mode [ 1158.679221][T28244] netlink: 12 bytes leftover after parsing attributes in process `syz.6.15009'. [ 1158.704543][T28247] netlink: 8 bytes leftover after parsing attributes in process `syz.5.15011'. [ 1158.738293][T27906] veth1_macvtap: entered promiscuous mode [ 1158.901827][T27906] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1158.929345][T27906] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1158.972226][T28262] bond2: option arp_interval: mode dependency failed, not supported in mode balance-tlb(5) [ 1158.983833][T28262] bond2 (unregistering): Released all slaves [ 1159.019789][T19522] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1159.030907][T19522] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1159.044654][T28267] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 1159.061161][T19522] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1159.069904][T19522] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1159.281453][ T4358] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1159.313043][ T4358] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1159.436025][ T83] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1159.447846][ T83] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1159.467621][T28283] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 1159.599420][T28279] xt_hashlimit: size too large, truncated to 1048576 [ 1159.636526][T28288] netlink: 'syz.4.14924': attribute type 3 has an invalid length. [ 1159.813336][T28295] netlink: 'syz.4.15023': attribute type 1 has an invalid length. [ 1159.848940][T28299] veth1_to_bond: entered allmulticast mode [ 1159.860572][T28299] veth1_to_bond: left allmulticast mode [ 1159.985308][T28303] lo: entered allmulticast mode [ 1160.006838][T28303] tunl0: entered allmulticast mode [ 1160.027203][T28303] gre0: entered allmulticast mode [ 1160.037463][T28303] gretap0: entered allmulticast mode [ 1160.049121][T28303] erspan0: entered allmulticast mode [ 1160.057379][T28303] ip_vti0: entered allmulticast mode [ 1160.065601][T28303] ip6_vti0: entered allmulticast mode [ 1160.073437][T28303] sit0: entered allmulticast mode [ 1160.082454][T28303] ip6tnl0: entered allmulticast mode [ 1160.090282][T28303] ip6gre0: entered allmulticast mode [ 1160.116237][T28303] syz_tun: entered allmulticast mode [ 1160.219000][T28317] syzkaller0: entered promiscuous mode [ 1160.231552][T28317] syzkaller0: entered allmulticast mode [ 1160.319046][T28319] syzkaller0: entered promiscuous mode [ 1160.336654][T28319] tipc: Started in network mode [ 1160.343943][T28319] tipc: Node identity ac14142f, cluster identity 4711 [ 1160.353390][T28319] tipc: New replicast peer: 0.0.0.0 [ 1160.359589][T28319] tipc: Enabled bearer , priority 10 [ 1160.721571][T28326] x_tables: duplicate underflow at hook 1 [ 1161.790506][T28357] x_tables: duplicate underflow at hook 2 [ 1163.105290][T14852] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1163.227495][T22900] tipc: Node number set to 2886997039 [ 1163.361846][T28365] __nla_validate_parse: 4 callbacks suppressed [ 1163.361878][T28365] netlink: 112 bytes leftover after parsing attributes in process `syz.6.15043'. [ 1163.395464][T28371] netlink: 40 bytes leftover after parsing attributes in process `syz.5.15044'. [ 1163.431395][T28373] netlink: 40 bytes leftover after parsing attributes in process `syz.5.15044'. [ 1163.453603][T28362] netlink: 4 bytes leftover after parsing attributes in process `syz.4.15042'. [ 1163.541642][T28374] netlink: 36 bytes leftover after parsing attributes in process `syz.2.15045'. [ 1163.584696][T28374] netlink: 16 bytes leftover after parsing attributes in process `syz.2.15045'. [ 1163.644876][T28382] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15045'. [ 1163.657002][T28374] netlink: 36 bytes leftover after parsing attributes in process `syz.2.15045'. [ 1163.718368][T28382] netlink: 4 bytes leftover after parsing attributes in process `syz.2.15045'. [ 1163.743098][T28390] syzkaller0: entered promiscuous mode [ 1163.748603][T28390] syzkaller0: entered allmulticast mode [ 1163.801120][T28393] netlink: 260 bytes leftover after parsing attributes in process `syz.4.15048'. [ 1164.368744][T28427] validate_nla: 2 callbacks suppressed [ 1164.368774][T28427] netlink: 'syz.2.15060': attribute type 12 has an invalid length. [ 1164.406352][T28427] netlink: 'syz.2.15060': attribute type 29 has an invalid length. [ 1164.426344][T28422] netlink: 'syz.5.15062': attribute type 4 has an invalid length. [ 1164.517096][T28436] IPv6: sit1: Disabled Multicast RS [ 1164.674076][T28440] netlink: 'syz.2.15068': attribute type 3 has an invalid length. [ 1164.849419][T28450] netlink: 'syz.2.15072': attribute type 1 has an invalid length. [ 1164.945801][T28450] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1164.970681][T28451] bond2: (slave geneve2): making interface the new active one [ 1164.984776][T28451] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 1165.177064][T28469] netlink: 'syz.6.15077': attribute type 1 has an invalid length. [ 1165.220139][T28469] ip6gretap1: entered promiscuous mode [ 1165.227648][T28469] ip6gretap1: entered allmulticast mode [ 1165.241916][T28469] bond2: (slave ip6gretap1): making interface the new active one [ 1165.253707][T28469] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1165.263793][T28469] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1165.272835][T28469] bond2: (slave ip6gretap1): Enslaving as an active interface with an up link [ 1165.283817][T28474] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 1165.576631][T28490] bridge0: port 2(bridge_slave_1) entered disabled state [ 1165.593159][T28490] bridge0: port 1(bridge_slave_0) entered disabled state [ 1165.681300][T28495] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1165.712038][T28496] tipc: Started in network mode [ 1165.718398][T28496] tipc: Node identity ac14142f, cluster identity 4711 [ 1165.726503][T28496] tipc: New replicast peer: 0.0.0.0 [ 1165.733371][T28496] tipc: Enabled bearer , priority 10 [ 1166.216379][T28520] nbd: must specify a size in bytes for the device [ 1166.609542][T28542] ICMPv6: NA: 00:00:00:00:00:00 advertised our address fe80::aa on syz_tun! [ 1166.853811][T24788] tipc: Node number set to 2886997039 [ 1167.339899][T28585] lo speed is unknown, defaulting to 1000 [ 1167.372304][T28585] xfrm0 speed is unknown, defaulting to 1000 [ 1167.510491][T28590] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1167.517454][T28590] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 1167.596850][T28597] tipc: Enabled bearer , priority 0 [ 1167.656031][T28597] syzkaller0: entered promiscuous mode [ 1167.663757][T28597] syzkaller0: entered allmulticast mode [ 1167.671467][T28597] tipc: Resetting bearer [ 1167.963927][T28612] team0: entered promiscuous mode [ 1167.978975][T28612] team_slave_0: entered promiscuous mode [ 1167.988896][T28612] team_slave_1: entered promiscuous mode [ 1168.191826][T28628] atomic_op ffff88803a241998 conn xmit_atomic 0000000000000000 [ 1168.386908][T14831] tipc: Resetting bearer [ 1168.415416][T28596] tipc: Resetting bearer [ 1168.521698][T28596] tipc: Disabling bearer [ 1168.605714][T28646] __nla_validate_parse: 13 callbacks suppressed [ 1168.605743][T28646] netlink: 4 bytes leftover after parsing attributes in process `syz.2.15131'. [ 1168.624880][T28646] netlink: 4 bytes leftover after parsing attributes in process `syz.2.15131'. [ 1168.647492][T28647] openvswitch: netlink: VXLAN extension 78 out of range max 1 [ 1168.671483][T28652] netlink: 4 bytes leftover after parsing attributes in process `syz.2.15131'. [ 1168.684941][T28652] netlink: 4 bytes leftover after parsing attributes in process `syz.2.15131'. [ 1168.781305][T28655] netdevsim netdevsim6 netdevsim0: entered allmulticast mode [ 1168.795852][T28655] netlink: 20 bytes leftover after parsing attributes in process `syz.6.15133'. [ 1168.819657][T28657] netlink: 'syz.2.15134': attribute type 1 has an invalid length. [ 1168.875457][T14852] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1168.900145][T28661] netlink: 4 bytes leftover after parsing attributes in process `syz.6.15136'. [ 1168.900491][T28662] netlink: 4 bytes leftover after parsing attributes in process `syz.6.15136'. [ 1168.911143][T28660] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 1169.106685][T28670] netlink: 'syz.6.15140': attribute type 1 has an invalid length. [ 1169.551155][T28695] netlink: 'syz.2.15147': attribute type 21 has an invalid length. [ 1169.742535][T27947] Bluetooth: hci3: command tx timeout [ 1169.938485][T28706] netlink: 'syz.5.15151': attribute type 83 has an invalid length. [ 1170.015367][T28708] netlink: 8 bytes leftover after parsing attributes in process `syz.5.15152'. [ 1170.026578][T28708] netlink: 24 bytes leftover after parsing attributes in process `syz.5.15152'. [ 1170.038920][T28708] netlink: 8 bytes leftover after parsing attributes in process `syz.5.15152'. [ 1170.373948][ T29] audit: type=1107 audit(1782167261.501:54): pid=28719 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='Ù7Tq•Q' [ 1170.385362][T28724] netlink: 'syz.6.15155': attribute type 1 has an invalid length. [ 1170.500322][T28727] netlink: 'syz.6.15158': attribute type 1 has an invalid length. [ 1170.533438][T28727] team0: entered promiscuous mode [ 1170.534221][T28733] openvswitch: netlink: Missing valid actions attribute. [ 1170.538827][T28727] team_slave_0: entered promiscuous mode [ 1170.549943][T28733] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1170.556118][T28727] team_slave_1: entered promiscuous mode [ 1170.581033][T28727] team0: left promiscuous mode [ 1170.586385][T28727] team_slave_0: left promiscuous mode [ 1170.595009][T28727] team_slave_1: left promiscuous mode [ 1170.611306][T28733] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 1171.207554][ T29] audit: type=1804 audit(1782167262.341:55): pid=28772 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.6.15166" name="/newroot/79/cgroup.controllers" dev="tmpfs" ino=422 res=1 errno=0 [ 1171.283557][ T29] audit: type=1800 audit(1782167262.341:56): pid=28772 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.15166" name="cgroup.controllers" dev="tmpfs" ino=422 res=0 errno=0 [ 1171.727392][T28797] netlink: 'syz.6.15175': attribute type 39 has an invalid length. [ 1171.976464][T28813] team0: entered promiscuous mode [ 1171.982053][T28813] team_slave_0: entered promiscuous mode [ 1171.989069][T28813] team_slave_1: entered promiscuous mode [ 1172.196201][T28825] netlink: 'syz.2.15183': attribute type 1 has an invalid length. [ 1172.224214][T28825] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1172.421327][T28836] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 1172.842046][T28860] gtp0: entered promiscuous mode [ 1172.869418][T28860] gtp0: entered allmulticast mode [ 1172.946687][T28865] openvswitch: netlink: Message has 6 unknown bytes. [ 1172.957565][T28864] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1173.359703][T28878] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1173.425940][T25825] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1173.435436][T25825] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1173.444190][T25825] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1173.459155][T25825] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1173.469654][T25825] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1174.167452][T28880] lo speed is unknown, defaulting to 1000 [ 1174.191181][T28880] xfrm0 speed is unknown, defaulting to 1000 [ 1174.304104][T28920] __nla_validate_parse: 14 callbacks suppressed [ 1174.304134][T28920] netlink: 36 bytes leftover after parsing attributes in process `syz.2.15209'. [ 1174.323449][T28920] netlink: zone id is out of range [ 1174.330324][T28920] netlink: zone id is out of range [ 1174.351464][T28920] netlink: zone id is out of range [ 1174.367639][T28920] netlink: zone id is out of range [ 1174.387603][T28920] netlink: zone id is out of range [ 1174.404551][T28920] netlink: zone id is out of range [ 1174.410147][T28920] netlink: zone id is out of range [ 1174.417972][T28920] netlink: zone id is out of range [ 1174.425324][T28920] netlink: zone id is out of range [ 1174.430818][T28920] netlink: zone id is out of range [ 1174.595638][T28934] netlink: 'syz.6.15213': attribute type 1 has an invalid length. [ 1174.638387][T28934] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 1174.857744][T28945] netlink: 'syz.6.15218': attribute type 1 has an invalid length. [ 1174.929632][T28945] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1175.030239][T28880] bridge0: port 1(bridge_slave_0) entered blocking state [ 1175.039116][T28880] bridge0: port 1(bridge_slave_0) entered disabled state [ 1175.049633][T28880] bridge_slave_0: entered allmulticast mode [ 1175.058176][T28880] bridge_slave_0: entered promiscuous mode [ 1175.071291][T28880] bridge0: port 2(bridge_slave_1) entered blocking state [ 1175.084031][T28880] bridge0: port 2(bridge_slave_1) entered disabled state [ 1175.103309][T28880] bridge_slave_1: entered allmulticast mode [ 1175.111789][T28880] bridge_slave_1: entered promiscuous mode [ 1175.193426][T28951] bond3: (slave geneve2): making interface the new active one [ 1175.207915][T28951] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 1175.248381][T28880] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1175.446798][T28880] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1175.469859][T28966] netlink: 'syz.2.15222': attribute type 8 has an invalid length. [ 1175.503262][T25825] Bluetooth: hci5: command tx timeout [ 1175.519927][T28880] team0: Port device team_slave_0 added [ 1175.530125][T28880] team0: Port device team_slave_1 added [ 1175.606846][T28880] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1175.615427][T28880] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1175.645806][T28880] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1175.658339][T28972] netlink: 28 bytes leftover after parsing attributes in process `syz.6.15224'. [ 1175.686026][T28972] netlink: 4 bytes leftover after parsing attributes in process `syz.6.15224'. [ 1175.687908][T28973] netlink: 260 bytes leftover after parsing attributes in process `syz.6.15224'. [ 1175.706260][T28972] netlink: 8 bytes leftover after parsing attributes in process `syz.6.15224'. [ 1175.755778][T28880] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1175.765829][T28880] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1175.799588][T28880] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1175.805246][T28982] netlink: 12 bytes leftover after parsing attributes in process `syz.5.15226'. [ 1175.831615][T28972] netlink: 8 bytes leftover after parsing attributes in process `syz.6.15224'. [ 1175.841116][T28972] netlink: 60 bytes leftover after parsing attributes in process `syz.6.15224'. [ 1175.846692][T28982] 8021q: adding VLAN 0 to HW filter on device bond10 [ 1175.850260][T28972] netlink: 16 bytes leftover after parsing attributes in process `syz.6.15224'. [ 1175.876577][T28976] netlink: 36 bytes leftover after parsing attributes in process `syz.5.15226'. [ 1175.922501][T28880] hsr_slave_0: entered promiscuous mode [ 1175.929677][T28880] hsr_slave_1: entered promiscuous mode [ 1175.937137][T28880] debugfs: 'hsr0' already exists in 'hsr' [ 1175.943236][T28880] Cannot create hsr debugfs directory [ 1176.246544][T29001] netlink: 'syz.5.15231': attribute type 7 has an invalid length. [ 1176.272369][T29001] netlink: 'syz.5.15231': attribute type 5 has an invalid length. [ 1176.413905][T29008] veth0_macvtap: left promiscuous mode [ 1176.420070][T29008] macvtap0: entered allmulticast mode [ 1176.468601][T29012] syzkaller0: entered promiscuous mode [ 1176.477078][T29012] syzkaller0: entered allmulticast mode [ 1176.486953][T28880] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1176.499076][T28880] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1176.529175][T28880] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1176.541483][T28880] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1176.555376][T28880] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1176.567651][T28880] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1176.576852][T28880] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1176.605959][T28880] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1176.671042][T29023] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 1176.715572][T29023] syzkaller0: entered promiscuous mode [ 1176.722036][T29023] syzkaller0: entered allmulticast mode [ 1176.838917][T28880] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1176.884662][T28880] 8021q: adding VLAN 0 to HW filter on device team0 [ 1176.901733][ T3360] bridge0: port 1(bridge_slave_0) entered blocking state [ 1176.909312][ T3360] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1176.938966][ T3360] bridge0: port 2(bridge_slave_1) entered blocking state [ 1176.946564][ T3360] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1177.559518][T28880] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1177.585622][T25825] Bluetooth: hci5: command tx timeout [ 1177.969314][T29077] bond0: entered promiscuous mode [ 1177.994708][T29077] bond_slave_0: entered promiscuous mode [ 1178.021316][T29077] bond_slave_1: entered promiscuous mode [ 1178.196378][T28880] veth0_vlan: entered promiscuous mode [ 1178.292902][T28880] veth1_vlan: entered promiscuous mode [ 1178.370843][T28880] veth0_macvtap: entered promiscuous mode [ 1178.415116][T28880] veth1_macvtap: entered promiscuous mode [ 1178.456401][T28880] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1178.508071][T28880] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1178.546122][ T3360] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1178.598257][ T3360] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1178.612433][ T3360] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1178.621712][ T3360] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1178.634630][T29111] nbd: must specify a device to reconfigure [ 1178.776673][ T83] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1178.795763][ T83] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1178.814984][T29120] syzkaller0: entered promiscuous mode [ 1178.821905][T29120] syzkaller0: entered allmulticast mode [ 1178.871231][ T3360] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1178.879136][ T3360] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1179.161388][T29137] 0·: renamed from hsr0 (while UP) [ 1179.214678][T29137] 0·: entered allmulticast mode [ 1179.231000][T29137] hsr_slave_0: entered allmulticast mode [ 1179.246103][T29137] hsr_slave_1: entered allmulticast mode [ 1179.257524][T29142] tipc: Started in network mode [ 1179.270863][T29139] netlink: 'syz.5.15269': attribute type 4 has an invalid length. [ 1179.283091][T29142] tipc: Node identity 1e4eee2c4398, cluster identity 4711 [ 1179.307174][T29137] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1179.314999][T29142] tipc: Enabled bearer , priority 11 [ 1179.327260][T29142] tipc: Enabling of bearer rejected, already enabled [ 1179.358390][T29139] .`: renamed from bond0 (while UP) [ 1179.395491][T29142] tipc: Enabling of bearer rejected, already enabled [ 1179.407888][T29142] tipc: Enabling of bearer rejected, already enabled [ 1179.417449][T29142] tipc: Enabling of bearer rejected, already enabled [ 1179.447394][T29142] tipc: Enabling of bearer rejected, already enabled [ 1179.479247][T29142] tipc: Enabling of bearer rejected, already enabled [ 1179.510157][T29142] tipc: Enabling of bearer rejected, already enabled [ 1179.521040][T29142] tipc: Enabling of bearer rejected, already enabled [ 1179.534150][T29142] tipc: Enabling of bearer rejected, already enabled [ 1179.548592][T29142] tipc: Enabling of bearer rejected, already enabled [ 1179.561368][T29142] tipc: Enabling of bearer rejected, already enabled [ 1179.584008][T29142] tipc: Enabling of bearer rejected, already enabled [ 1179.612955][T29142] tipc: Enabling of bearer rejected, already enabled [ 1179.652667][T29142] tipc: Enabling of bearer rejected, already enabled [ 1179.674589][T25825] Bluetooth: hci5: command tx timeout [ 1179.693747][T29142] tipc: Enabling of bearer rejected, already enabled [ 1179.729931][T29142] tipc: Enabling of bearer rejected, already enabled [ 1179.758304][T29142] tipc: Enabling of bearer rejected, already enabled [ 1179.774232][T29142] tipc: Enabling of bearer rejected, already enabled [ 1179.785539][T29142] tipc: Enabling of bearer rejected, already enabled [ 1179.794886][T29142] tipc: Enabling of bearer rejected, already enabled [ 1179.805535][T29142] tipc: Enabling of bearer rejected, already enabled [ 1179.815356][T29142] tipc: Enabling of bearer rejected, already enabled [ 1179.824862][T29142] tipc: Enabling of bearer rejected, already enabled [ 1179.833974][T29142] tipc: Enabling of bearer rejected, already enabled [ 1179.843505][T29142] tipc: Enabling of bearer rejected, already enabled [ 1179.856775][T29142] tipc: Enabling of bearer rejected, already enabled [ 1179.880378][T29142] tipc: Enabling of bearer rejected, already enabled [ 1179.889710][T29142] tipc: Enabling of bearer rejected, already enabled [ 1179.921930][T29142] tipc: Enabling of bearer rejected, already enabled [ 1179.939811][T29142] tipc: Enabling of bearer rejected, already enabled [ 1179.957578][T29142] tipc: Enabling of bearer rejected, already enabled [ 1179.973494][T29142] tipc: Enabling of bearer rejected, already enabled [ 1179.994010][T29142] tipc: Enabling of bearer rejected, already enabled [ 1180.016433][T29142] tipc: Enabling of bearer rejected, already enabled [ 1180.035207][T29142] tipc: Enabling of bearer rejected, already enabled [ 1180.046408][T29142] tipc: Enabling of bearer rejected, already enabled [ 1180.057384][T29142] tipc: Enabling of bearer rejected, already enabled [ 1180.302591][T22900] tipc: Node number set to 1574366764 [ 1180.384885][ T83] net_ratelimit: 47 callbacks suppressed [ 1180.384914][ T83] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1180.480629][T29191] IPVS: set_ctl: invalid protocol: 108 172.30.1.6:20004 [ 1180.538732][T29195] __nla_validate_parse: 13 callbacks suppressed [ 1180.538750][T29195] netlink: 260 bytes leftover after parsing attributes in process `syz.7.15283'. [ 1180.558717][T29195] netlink: 'syz.7.15283': attribute type 1 has an invalid length. [ 1180.569516][T29195] netlink: 224 bytes leftover after parsing attributes in process `syz.7.15283'. [ 1180.594343][T29200] netlink: 'syz.7.15283': attribute type 1 has an invalid length. [ 1180.628734][T29200] netlink: 224 bytes leftover after parsing attributes in process `syz.7.15283'. [ 1180.683350][T29206] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 1180.697455][T29206] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 1180.712038][T29206] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 1180.726751][T29206] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 1180.739803][T29206] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 1180.881246][T29213] gre3: entered promiscuous mode [ 1180.901744][T29213] gre3: entered allmulticast mode [ 1181.037016][T29227] netlink: 'syz.2.15291': attribute type 5 has an invalid length. [ 1181.066161][T29227] netlink: 4 bytes leftover after parsing attributes in process `syz.2.15291'. [ 1181.311303][T29242] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15295'. [ 1181.357456][T29242] netlink: 20 bytes leftover after parsing attributes in process `syz.2.15295'. [ 1181.742974][T27947] Bluetooth: hci5: command tx timeout [ 1181.831039][T29204] lo speed is unknown, defaulting to 1000 [ 1181.866335][T29268] syzkaller0: entered promiscuous mode [ 1181.901064][T29271] netlink: 'syz.6.15306': attribute type 2 has an invalid length. [ 1181.916774][T29268] syzkaller0: entered allmulticast mode [ 1181.941090][T29204] xfrm0 speed is unknown, defaulting to 1000 [ 1182.027265][T29274] netlink: 'syz.5.15307': attribute type 3 has an invalid length. [ 1182.078817][T29278] netlink: 12 bytes leftover after parsing attributes in process `syz.6.15309'. [ 1182.135958][T29278] vcan0: tx drop: invalid da for name 0x0000000000000003 [ 1182.159592][T29278] netlink: 12 bytes leftover after parsing attributes in process `syz.6.15309'. [ 1182.248058][T29284] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.15310'. [ 1182.434270][T29292] netlink: 12 bytes leftover after parsing attributes in process `syz.6.15313'. [ 1182.721813][T29305] pimreg: entered allmulticast mode [ 1182.746685][T29204] bridge0: port 1(bridge_slave_0) entered blocking state [ 1182.754866][T29204] bridge0: port 1(bridge_slave_0) entered disabled state [ 1182.765855][T29204] bridge_slave_0: entered allmulticast mode [ 1182.779513][T29204] bridge_slave_0: entered promiscuous mode [ 1182.786535][T27947] Bluetooth: hci8: command tx timeout [ 1182.798660][T29204] bridge0: port 2(bridge_slave_1) entered blocking state [ 1182.817394][T29204] bridge0: port 2(bridge_slave_1) entered disabled state [ 1182.835320][T29204] bridge_slave_1: entered allmulticast mode [ 1182.857741][T29204] bridge_slave_1: entered promiscuous mode [ 1182.967651][T29315] bond0: Unable to set peer notification delay as MII monitoring is disabled [ 1182.981464][T29315] bond0 (unregistering): Released all slaves [ 1183.011738][T29204] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1183.022064][T29317] netlink: 'syz.5.15318': attribute type 12 has an invalid length. [ 1183.033990][T29317] netlink: 'syz.5.15318': attribute type 29 has an invalid length. [ 1183.049439][T29204] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1183.113987][T29204] team0: Port device team_slave_0 added [ 1183.125522][T29204] team0: Port device team_slave_1 added [ 1183.192832][T29204] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1183.206984][T29204] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1183.236873][T29204] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1183.250495][T29204] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1183.259793][T29204] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1183.294507][T29204] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1183.339400][T19522] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1183.351062][T19522] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1183.416168][T19522] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1183.450902][T19522] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1183.821473][T29331] bridge0: port 2(bridge_slave_1) entered disabled state [ 1183.829519][T29331] bridge0: port 1(bridge_slave_0) entered disabled state [ 1183.839418][T27947] Bluetooth: hci5: command 0x0405 tx timeout [ 1183.891126][T29331] team0: left promiscuous mode [ 1183.919320][T29331] team_slave_0: left promiscuous mode [ 1183.935732][T29331] team_slave_1: left promiscuous mode [ 1184.066093][T29331] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 1184.298585][T29204] hsr_slave_0: entered promiscuous mode [ 1184.323688][T29204] hsr_slave_1: entered promiscuous mode [ 1184.330662][T29204] debugfs: 'hsr0' already exists in 'hsr' [ 1184.378742][T29204] Cannot create hsr debugfs directory [ 1184.607760][T29372] netlink: 'syz.2.15332': attribute type 1 has an invalid length. [ 1184.863222][T27947] Bluetooth: hci8: command tx timeout [ 1185.052634][T29204] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1185.065649][T29204] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1185.074646][T29204] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1185.086777][T29204] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1185.096409][T29204] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1185.111095][T29204] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1185.119903][T29204] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1185.133107][T29204] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1185.236771][T29204] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1185.265016][T29204] 8021q: adding VLAN 0 to HW filter on device team0 [ 1185.279552][ T3281] bridge0: port 1(bridge_slave_0) entered blocking state [ 1185.287120][ T3281] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1185.303873][ T3360] bridge0: port 2(bridge_slave_1) entered blocking state [ 1185.311416][ T3360] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1185.503716][ T3360] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1185.817734][T29204] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1186.111503][T29204] veth0_vlan: entered promiscuous mode [ 1186.127514][T29204] veth1_vlan: entered promiscuous mode [ 1186.168468][T29204] veth0_macvtap: entered promiscuous mode [ 1186.181552][T29204] veth1_macvtap: entered promiscuous mode [ 1186.208209][T29204] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1186.229607][T29204] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1186.248593][T19522] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1186.261843][T19522] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1186.271349][T19522] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1186.286161][T19522] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1186.368110][ T3360] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1186.377914][ T3360] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1186.423587][ T3281] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1186.431918][ T3281] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1186.520524][T29410] macvtap0: entered promiscuous mode [ 1186.526814][T29410] macvtap0: entered allmulticast mode [ 1186.533200][T29410] veth0_macvtap: entered allmulticast mode [ 1186.942482][T27947] Bluetooth: hci8: command tx timeout [ 1187.617065][T29445] __nla_validate_parse: 8 callbacks suppressed [ 1187.617098][T29445] netlink: 28 bytes leftover after parsing attributes in process `syz.7.15343'. [ 1187.673567][T29445] netlink: 28 bytes leftover after parsing attributes in process `syz.7.15343'. [ 1187.694111][T29448] netlink: 16 bytes leftover after parsing attributes in process `syz.2.15344'. [ 1187.924738][T29467] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1187.937509][T29468] netlink: 108 bytes leftover after parsing attributes in process `syz.7.15350'. [ 1188.000331][T29460] veth0_to_team: entered promiscuous mode [ 1188.011791][T29460] veth0_to_team: left promiscuous mode [ 1188.339140][T29488] netlink: 212324 bytes leftover after parsing attributes in process `syz.7.15356'. [ 1188.354106][T29488] netlink: 56 bytes leftover after parsing attributes in process `syz.7.15356'. [ 1188.364423][T29488] netlink: 24 bytes leftover after parsing attributes in process `syz.7.15356'. [ 1188.395751][T29491] netlink: 'syz.6.15355': attribute type 21 has an invalid length. [ 1188.557497][T29494] ip6erspan0: entered allmulticast mode [ 1188.823463][T29505] netlink: 'syz.7.15362': attribute type 2 has an invalid length. [ 1188.895619][T29506] netlink: 120 bytes leftover after parsing attributes in process `syz.5.15361'. [ 1189.022338][T27947] Bluetooth: hci8: command tx timeout [ 1189.046263][T29517] ip_vti0: entered promiscuous mode [ 1189.061293][T29517] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15366'. [ 1189.109586][T29523] netlink: 4 bytes leftover after parsing attributes in process `syz.6.15364'. [ 1189.120702][T29523] openvswitch: netlink: ufid size 17 bytes exceeds the range (1, 16) [ 1189.130181][T29523] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 1189.309378][T29526] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1189.646943][T29533] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1189.670202][T29535] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1189.823098][T29516] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1189.859192][T29540] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1190.011165][T29548] netlink: 'syz.7.15372': attribute type 2 has an invalid length. [ 1190.265388][T29557] netlink: 'syz.5.15377': attribute type 83 has an invalid length. [ 1190.553859][T14831] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1190.672063][T29572] bond1: option all_slaves_active: invalid value (222) [ 1190.689589][T29572] bond1 (unregistering): Released all slaves [ 1190.767667][T29577] syzkaller0: entered promiscuous mode [ 1190.775865][T29577] syzkaller0: entered allmulticast mode [ 1190.931971][T29585] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1191.794001][T29631] netlink: 'syz.8.15396': attribute type 11 has an invalid length. [ 1191.809032][T29633] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 1192.052800][T29649] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1192.092227][T29651] IPVS: set_ctl: invalid protocol: 12 100.1.1.0:20003 [ 1192.466717][T29676] syzkaller0: entered promiscuous mode [ 1192.474964][T29676] syzkaller0: entered allmulticast mode [ 1192.553445][ C1] vcan0: j1939_tp_rxtimer: 0xffff88804b1ffc00: rx timeout, send abort [ 1192.605776][T29683] netlink: 'syz.8.15415': attribute type 1 has an invalid length. [ 1192.712677][T29689] __nla_validate_parse: 11 callbacks suppressed [ 1192.712694][T29689] netlink: 44 bytes leftover after parsing attributes in process `syz.5.15418'. [ 1192.831906][T29694] netlink: 8 bytes leftover after parsing attributes in process `syz.8.15421'. [ 1192.906613][T29700] netlink: 'syz.5.15423': attribute type 29 has an invalid length. [ 1192.966529][T29700] netlink: 8 bytes leftover after parsing attributes in process `syz.5.15423'. [ 1192.966724][T29707] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15424'. [ 1192.985229][T29700] netlink: 'syz.5.15423': attribute type 1 has an invalid length. [ 1192.994360][T29708] netlink: 8 bytes leftover after parsing attributes in process `syz.6.15426'. [ 1193.006310][T29708] netlink: 8 bytes leftover after parsing attributes in process `syz.6.15426'. [ 1193.052280][ C1] vcan0: j1939_tp_rxtimer: 0xffff888049e08c00: rx timeout, send abort [ 1193.152002][ C1] vcan0: j1939_tp_rxtimer: 0xffff88804b1ffc00: abort rx timeout. Force session deactivation [ 1193.212727][T29719] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15430'. [ 1193.382497][T29736] syzkaller0: entered promiscuous mode [ 1193.388502][T29736] syzkaller0: entered allmulticast mode [ 1193.392104][T29738] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1193.524385][T29743] ip_vti0: left promiscuous mode [ 1193.550239][ C1] vcan0: j1939_tp_rxtimer: 0xffff888049e0a800: rx timeout, send abort [ 1193.649055][ C1] vcan0: j1939_tp_rxtimer: 0xffff888049e08c00: abort rx timeout. Force session deactivation [ 1193.695729][T29743] bridge0: port 2(bridge_slave_1) entered disabled state [ 1193.703159][T29743] bridge0: port 1(bridge_slave_0) entered disabled state [ 1193.736994][T29743] bond0: left promiscuous mode [ 1193.771783][T29743] bond_slave_0: left promiscuous mode [ 1193.777518][T29743] bond_slave_1: left promiscuous mode [ 1193.783522][T29743] team0: left promiscuous mode [ 1193.788309][T29743] team_slave_0: left promiscuous mode [ 1193.794521][T29743] team_slave_1: left promiscuous mode [ 1193.990262][T29743] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 1194.150445][ C1] vcan0: j1939_tp_rxtimer: 0xffff888049e0a800: abort rx timeout. Force session deactivation [ 1194.233554][T29766] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 1194.285887][T29768] IPVS: length: 52 != 24 [ 1194.305979][T29766] netlink: 'syz.5.15446': attribute type 2 has an invalid length. [ 1194.484527][T29784] netlink: 12 bytes leftover after parsing attributes in process `syz.2.15451'. [ 1194.600535][T29753] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1194.610580][T29786] netlink: 51 bytes leftover after parsing attributes in process `syz.5.15449'. [ 1194.689613][T29784] netlink: 12 bytes leftover after parsing attributes in process `syz.2.15451'. [ 1194.997944][T29811] netdevsim netdevsim6 netdevsim0: entered promiscuous mode [ 1195.365092][T29834] netlink: 'syz.8.15463': attribute type 11 has an invalid length. [ 1195.384069][T29837] syzkaller0: entered promiscuous mode [ 1195.401084][T29837] syzkaller0: entered allmulticast mode [ 1195.495801][T29839] syzkaller0: entered promiscuous mode [ 1195.533947][T29839] syzkaller0: entered allmulticast mode [ 1195.553359][T29834] tipc: Started in network mode [ 1195.559644][T29834] tipc: Node identity 36fc133bd53a, cluster identity 4711 [ 1195.568100][T29834] tipc: Enabled bearer , priority 0 [ 1195.575631][T29834] syzkaller0: entered promiscuous mode [ 1195.581106][T29834] syzkaller0: entered allmulticast mode [ 1195.590166][T29839] netlink: 'syz.2.15466': attribute type 1 has an invalid length. [ 1195.747536][T29856] netlink: 'syz.6.15472': attribute type 1 has an invalid length. [ 1195.796210][ T4358] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1195.880155][T29859] IPVS: set_ctl: invalid protocol: 117 172.20.20.170:20000 [ 1196.018404][ T42] IPVS: starting estimator thread 0... [ 1196.177532][T29832] tipc: Resetting bearer [ 1196.180815][T29874] IPVS: sed: FWM 3 0x00000003 - no destination available [ 1196.212844][T29832] tipc: Disabling bearer [ 1196.238663][T29875] IPVS: using max 51 ests per chain, 122400 per kthread [ 1196.261532][T29886] netlink: 'syz.2.15482': attribute type 1 has an invalid length. [ 1196.345267][T29892] netlink: 'syz.7.15484': attribute type 8 has an invalid length. [ 1196.353561][T29892] bridge0: port 2(bridge_slave_1) entered disabled state [ 1196.360961][T29892] bridge0: port 1(bridge_slave_0) entered disabled state [ 1196.399814][T29894] syzkaller0: entered promiscuous mode [ 1196.406140][T29894] syzkaller0: entered allmulticast mode [ 1196.441312][T29894] tipc: Started in network mode [ 1196.446201][T29894] tipc: Node identity dab152504901, cluster identity 4711 [ 1196.453413][T29894] tipc: Enabled bearer , priority 0 [ 1196.477577][T29894] netlink: 'syz.2.15485': attribute type 1 has an invalid length. [ 1196.499746][T29893] tipc: Resetting bearer [ 1196.514238][T29900] netlink: 'syz.5.15488': attribute type 1 has an invalid length. [ 1196.576336][T29893] tipc: Disabling bearer [ 1196.664945][T29900] bond0: entered promiscuous mode [ 1196.688697][T29900] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1196.739978][T29907] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1196.754675][T29907] bond0: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 1196.765809][T29907] bond0: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 1196.781079][T29907] bond0: (slave ip6gre1): making interface the new active one [ 1196.788564][T29907] ip6gre1: entered promiscuous mode [ 1196.800393][T29907] bond0: (slave ip6gre1): Enslaving as an active interface with an up link [ 1196.867482][T29914] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1196.880832][T29914] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1196.944209][T29919] IPVS: set_ctl: invalid protocol: 115 172.20.20.187:20003 [ 1197.206139][T29936] IPv6: sit1: Disabled Multicast RS [ 1197.214788][T29936] sit1: entered allmulticast mode [ 1197.390282][T29949] netlink: 'syz.2.15504': attribute type 3 has an invalid length. [ 1200.262234][T29943] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1200.401072][T29981] netlink: 'syz.5.15515': attribute type 26 has an invalid length. [ 1200.847412][T30018] netlink: 'syz.6.15525': attribute type 1 has an invalid length. [ 1200.866676][T30018] netlink: 'syz.6.15525': attribute type 1 has an invalid length. [ 1200.890747][T30020] __nla_validate_parse: 26 callbacks suppressed [ 1200.890765][T30020] netlink: 36 bytes leftover after parsing attributes in process `syz.8.15526'. [ 1201.065484][T30033] tipc: Enabling of bearer rejected, media not registered [ 1201.087477][T30041] netlink: 12 bytes leftover after parsing attributes in process `syz.5.15532'. [ 1201.104437][T30041] netlink: 12 bytes leftover after parsing attributes in process `syz.5.15532'. [ 1201.115536][T30033] bond4: option min_links: invalid value (18446744073709551614) [ 1201.168805][T30033] bond4: option min_links: allowed values 0 - 2147483647 [ 1201.179538][T30033] bond4 (unregistering): Released all slaves [ 1201.287976][T30053] netlink: 44 bytes leftover after parsing attributes in process `syz.7.15537'. [ 1201.297940][T30054] tipc: Enabling of bearer rejected, failed to enable media [ 1201.314546][T30052] tipc: Enabling of bearer rejected, failed to enable media [ 1201.340231][T30054] xt_hashlimit: overflow, try lower: 3/0 [ 1201.346324][T30056] xt_hashlimit: overflow, try lower: 3/0 [ 1201.410048][T30069] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1201.416782][T30070] netlink: 264 bytes leftover after parsing attributes in process `syz.7.15542'. [ 1201.417454][T30069] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1201.442667][T30069] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1201.450061][T30069] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1201.535159][T14831] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1201.590782][T30081] tipc: New replicast peer: 255.255.255.255 [ 1201.597113][T30081] tipc: Enabled bearer , priority 10 [ 1201.810293][T30097] bond1: Removing last ns target with arp_interval on [ 1201.842879][T30096] bond2: Removing last ns target with arp_interval on [ 1201.897657][T30101] netlink: 36 bytes leftover after parsing attributes in process `syz.5.15551'. [ 1201.979006][T30109] netlink: 24 bytes leftover after parsing attributes in process `syz.8.15555'. [ 1202.248574][T30113] syzkaller0: tun_net_xmit 1 [ 1202.294248][T30119] netlink: 212344 bytes leftover after parsing attributes in process `syz.7.15560'. [ 1202.407890][T30127] netlink: 20 bytes leftover after parsing attributes in process `syz.2.15563'. [ 1202.730449][T14731] tipc: Node number set to 2886997039 [ 1202.795346][T30152] IPVS: set_ctl: invalid protocol: 58 224.0.0.1:20000 [ 1202.836749][T30152] netlink: 1 bytes leftover after parsing attributes in process `syz.6.15570'. [ 1202.891010][T30155] syzkaller1: entered promiscuous mode [ 1202.896510][T30155] syzkaller1: entered allmulticast mode [ 1202.994389][T30157] netlink: 'syz.2.15573': attribute type 1 has an invalid length. [ 1203.012893][T30159] bond4 (unregistering): Released all slaves [ 1203.137653][T30157] bond4: (slave gretap2): making interface the new active one [ 1203.147350][T30157] bond4: (slave gretap2): Enslaving as an active interface with an up link [ 1203.165056][T30158] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1203.583950][T30188] netlink: 'syz.5.15581': attribute type 7 has an invalid length. [ 1203.592144][T30188] netlink: 'syz.5.15581': attribute type 8 has an invalid length. [ 1203.637962][T30188] macvtap1: entered promiscuous mode [ 1203.643296][T30188] vlan0: entered promiscuous mode [ 1203.648608][T30188] macvtap1: entered allmulticast mode [ 1203.653985][T30188] vlan0: entered allmulticast mode [ 1203.659095][T30188] veth0_vlan: entered allmulticast mode [ 1203.700302][T30192] sit0: entered promiscuous mode [ 1203.720861][T30192] netlink: 'syz.5.15583': attribute type 1 has an invalid length. [ 1204.111376][T30222] netlink: 'syz.6.15590': attribute type 4 has an invalid length. [ 1204.284199][T30232] netlink: 'syz.5.15593': attribute type 1 has an invalid length. [ 1204.493104][T30250] C: entered allmulticast mode [ 1204.699197][T30268] openvswitch: netlink: IP tunnel dst address not specified [ 1204.711171][T30271] IPv4: Oversized IP packet from 127.202.26.0 [ 1204.787939][T30270] IPv4: Oversized IP packet from 127.202.26.0 [ 1204.955688][T30286] syzkaller1: entered promiscuous mode [ 1204.961188][T30286] syzkaller1: entered allmulticast mode [ 1205.365846][T30309] syzkaller0: entered promiscuous mode [ 1205.371605][T30309] syzkaller0: entered allmulticast mode [ 1206.038539][T30369] __nla_validate_parse: 16 callbacks suppressed [ 1206.038557][T30369] netlink: 24 bytes leftover after parsing attributes in process `syz.6.15634'. [ 1206.091615][T30374] xt_hashlimit: size too large, truncated to 1048576 [ 1206.188211][T30380] nbd: couldn't find a device at index 1048580 [ 1206.195250][T30378] bridge_slave_0 (unregistering): left allmulticast mode [ 1206.223828][T30378] bridge_slave_0 (unregistering): left promiscuous mode [ 1206.230844][T30378] bridge0: port 1(bridge_slave_0) entered disabled state [ 1206.669990][T30404] syzkaller0: entered promiscuous mode [ 1206.675485][T30404] syzkaller0: entered allmulticast mode [ 1206.756475][T30399] lo: entered promiscuous mode [ 1206.766081][T30399] tunl0: entered promiscuous mode [ 1206.771516][T30399] gre0: entered promiscuous mode [ 1206.777203][T30399] gretap0: entered promiscuous mode [ 1206.782908][T30399] erspan0: entered promiscuous mode [ 1206.788523][T30399] ip_vti0: entered promiscuous mode [ 1206.891961][T30418] netlink: 4 bytes leftover after parsing attributes in process `syz.7.15651'. [ 1206.901487][T30414] netlink: 'syz.8.15648': attribute type 1 has an invalid length. [ 1206.909623][T30414] netlink: 476 bytes leftover after parsing attributes in process `syz.8.15648'. [ 1206.937532][T30414] netlink: 1041 bytes leftover after parsing attributes in process `syz.8.15648'. [ 1207.095450][T30431] netlink: 12 bytes leftover after parsing attributes in process `syz.5.15650'. [ 1207.098716][T30433] netlink: 96 bytes leftover after parsing attributes in process `syz.8.15652'. [ 1207.154731][T30431] netlink: 20 bytes leftover after parsing attributes in process `syz.5.15650'. [ 1207.289412][T30441] block nbd6: reconnected socket [ 1207.304015][T27947] block nbd6: Receive control failed (result -32) [ 1207.331407][T14852] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1207.723687][T30469] xt_cluster: you have exceeded the maximum number of cluster nodes (2048 > 32) [ 1208.556938][T30533] netlink: 32 bytes leftover after parsing attributes in process `syz.6.15675'. [ 1208.611657][T30534] syzkaller0: entered promiscuous mode [ 1208.635468][T30534] syzkaller0: entered allmulticast mode [ 1208.643949][T30536] netlink: 44 bytes leftover after parsing attributes in process `syz.2.15676'. [ 1208.653314][T30536] netlink: 21 bytes leftover after parsing attributes in process `syz.2.15676'. [ 1208.842265][T30552] IPv6: NLM_F_CREATE should be specified when creating new route [ 1208.949690][T30546] x_tables: ip6_tables: NETMAP.0 target: invalid size 40 (kernel) != (user) 0 [ 1208.975464][T30546] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1208.996396][T30546] bond0: (slave lo): Error: Device can not be enslaved while up [ 1209.014201][T30555] netlink: 'syz.8.15681': attribute type 1 has an invalid length. [ 1209.106614][T30562] netlink: 'syz.2.15683': attribute type 1 has an invalid length. [ 1209.114422][T30560] syzkaller0: entered promiscuous mode [ 1209.119946][T30560] syzkaller0: entered allmulticast mode [ 1209.352310][T30578] netlink: 'syz.2.15688': attribute type 39 has an invalid length. [ 1209.894220][T30604] netdevsim netdevsim8 netdevsim0: entered promiscuous mode [ 1209.905384][T30604] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1210.004906][T14751] IPVS: starting estimator thread 0... [ 1210.015572][T30610] xt_hashlimit: size too large, truncated to 1048576 [ 1210.073204][T30614] netlink: 'syz.8.15693': attribute type 1 has an invalid length. [ 1210.121149][T30616] netlink: 'syz.5.15694': attribute type 1 has an invalid length. [ 1210.242344][T30611] IPVS: using max 48 ests per chain, 115200 per kthread [ 1210.645932][T30640] netlink: 'syz.5.15698': attribute type 4 has an invalid length. [ 1210.756917][T30652] netlink: zone id is out of range [ 1210.758796][T30654] netlink: 'syz.6.15704': attribute type 39 has an invalid length. [ 1210.762639][T30652] netlink: zone id is out of range [ 1210.776648][T30652] netlink: zone id is out of range [ 1210.782098][T30654] syzkaller0: entered promiscuous mode [ 1210.782118][T30654] syzkaller0: entered allmulticast mode [ 1210.794879][T30652] netlink: zone id is out of range [ 1210.800216][T30652] netlink: zone id is out of range [ 1210.805917][T30652] netlink: zone id is out of range [ 1210.811282][T30652] netlink: zone id is out of range [ 1210.816737][T30652] netlink: zone id is out of range [ 1211.190228][T30672] __nla_validate_parse: 11 callbacks suppressed [ 1211.190245][T30672] netlink: 8 bytes leftover after parsing attributes in process `syz.8.15709'. [ 1211.285967][T30675] netlink: 4 bytes leftover after parsing attributes in process `syz.8.15710'. [ 1211.368251][T30686] netlink: 'syz.2.15713': attribute type 1 has an invalid length. [ 1211.376397][T30686] netlink: 96 bytes leftover after parsing attributes in process `syz.2.15713'. [ 1211.395989][T30686] netlink: 1 bytes leftover after parsing attributes in process `syz.2.15713'. [ 1211.411448][T30688] tipc: Enabling of bearer rejected, failed to enable media [ 1211.484225][T30688] netlink: 'syz.8.15714': attribute type 10 has an invalid length. [ 1211.497321][T30688] netlink: 28 bytes leftover after parsing attributes in process `syz.8.15714'. [ 1211.591093][T30693] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1211.595861][T30698] Cannot find add_set index 46338 as target [ 1211.664167][T30700] netlink: 7064 bytes leftover after parsing attributes in process `syz.8.15718'. [ 1211.715219][T30704] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15719'. [ 1211.726332][T30704] netlink: 24 bytes leftover after parsing attributes in process `syz.2.15719'. [ 1211.738386][T30704] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15719'. [ 1211.752867][T30704] netlink: 24 bytes leftover after parsing attributes in process `syz.2.15719'. [ 1211.893683][T30722] bond0: Master is either lo or non-ether device [ 1212.507688][T30767] validate_nla: 3 callbacks suppressed [ 1212.507712][T30767] netlink: 'syz.8.15740': attribute type 1 has an invalid length. [ 1212.686996][T30780] IPv6: sit1: Disabled Multicast RS [ 1212.788313][T30786] x_tables: duplicate underflow at hook 1 [ 1212.819929][T30785] netlink: 'syz.5.15749': attribute type 26 has an invalid length. [ 1212.841061][T30785] netlink: 'syz.5.15749': attribute type 26 has an invalid length. [ 1212.862967][T30777] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1212.879892][T30777] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1212.936903][T30782] vlan2: entered allmulticast mode [ 1212.943090][T30782] bond0: entered allmulticast mode [ 1212.953844][T30782] bond_slave_0: entered allmulticast mode [ 1212.959601][T30782] bond_slave_1: entered allmulticast mode [ 1212.984910][T30799] netlink: 'syz.6.15751': attribute type 18 has an invalid length. [ 1212.999996][ T3360] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1213.008760][ T3360] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1213.053151][T14852] net_ratelimit: 1192 callbacks suppressed [ 1213.053178][T14852] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1213.113702][ T3360] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1213.151528][T30807] netlink: 'syz.5.15752': attribute type 1 has an invalid length. [ 1213.186397][ T3360] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1213.537549][T30832] openvswitch: netlink: Message has 166 unknown bytes. [ 1213.609605][T30836] 8021q: adding VLAN 0 to HW filter on device macsec2 [ 1213.620145][T30847] openvswitch: netlink: IP tunnel dst address not specified [ 1213.642039][T22873] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 1213.735851][T30855] team0: No ports can be present during mode change [ 1214.014979][T30872] syzkaller0: entered promiscuous mode [ 1214.020476][T30872] syzkaller0: entered allmulticast mode [ 1214.107642][T30883] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1214.156772][T30872] tipc: Enabled bearer , priority 0 [ 1214.223990][T30881] Bluetooth: MGMT ver 1.23 [ 1214.249978][T30868] tipc: Resetting bearer [ 1214.269781][T30868] tipc: Disabling bearer [ 1214.306682][T30895] netlink: 'syz.5.15783': attribute type 32 has an invalid length. [ 1214.343400][T30895] bond11: option coupled_control: invalid value (192) [ 1214.351543][T30895] bond11 (unregistering): Released all slaves [ 1214.797874][T30936] tipc: Enabled bearer , priority 0 [ 1214.808256][T30936] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 1214.818746][T30936] tipc: Resetting bearer [ 1214.891071][T30935] tipc: Disabling bearer [ 1215.119752][T30960] bridge0: port 2(bridge_slave_1) entered disabled state [ 1215.127713][T30960] bridge0: port 1(bridge_slave_0) entered disabled state [ 1215.994151][T30980] syzkaller0: entered promiscuous mode [ 1216.006459][T30980] syzkaller0: entered allmulticast mode [ 1216.075160][T30986] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 1216.084575][ T29] audit: type=1107 audit(1782167307.171:57): pid=30995 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='\èÛ,’È·&NMzŸ*ƒÂt!*ð2ÉêID¹´ÊŽFo5AæÂ䈩 žÙz É †êK˜ÜÉc [ 1216.084575][ T29] ^bð]ªõGP"–*6ø §*•@Žu_«' [ 1216.254607][T31009] netlink: 'syz.6.15822': attribute type 11 has an invalid length. [ 1216.269955][T31009] netlink: 'syz.6.15822': attribute type 5 has an invalid length. [ 1216.279557][T31009] __nla_validate_parse: 23 callbacks suppressed [ 1216.279584][T31009] netlink: 6548 bytes leftover after parsing attributes in process `syz.6.15822'. [ 1216.466986][T31027] netlink: 36 bytes leftover after parsing attributes in process `syz.5.15828'. [ 1216.776780][T31041] netlink: 'syz.7.15833': attribute type 1 has an invalid length. [ 1216.812757][T31041] netlink: 'syz.7.15833': attribute type 4 has an invalid length. [ 1216.838820][T31043] netlink: 80 bytes leftover after parsing attributes in process `syz.6.15834'. [ 1216.848557][T31041] netlink: 9462 bytes leftover after parsing attributes in process `syz.7.15833'. [ 1216.865496][T31045] netlink: 'syz.2.15835': attribute type 10 has an invalid length. [ 1216.879081][T31045] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1216.887192][T31045] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 1216.961706][T31046] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1217.005678][T31046] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1217.042391][T31046] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 1217.056511][T31046] bond0 (unregistering): Released all slaves [ 1217.093135][T31051] syzkaller1: entered promiscuous mode [ 1217.100945][T31051] syzkaller1: entered allmulticast mode [ 1217.350997][T31054] syzkaller1: entered promiscuous mode [ 1217.362325][T31054] syzkaller1: entered allmulticast mode [ 1217.500396][T31055] netlink: 16402 bytes leftover after parsing attributes in process `syz.8.15838'. [ 1217.830352][T31032] Set syz1 is full, maxelem 65536 reached [ 1218.186609][ T3281] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1220.752174][T31062] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1220.773054][T31078] netlink: 'syz.5.15843': attribute type 1 has an invalid length. [ 1221.035538][T31105] netlink: 8 bytes leftover after parsing attributes in process `syz.6.15851'. [ 1221.133013][T31115] netlink: 72 bytes leftover after parsing attributes in process `syz.7.15850'. [ 1221.142082][T31115] netlink: 12 bytes leftover after parsing attributes in process `syz.7.15850'. [ 1221.159314][T31115] netlink: 40 bytes leftover after parsing attributes in process `syz.7.15850'. [ 1221.179821][T31124] sctp: [Deprecated]: syz.5.15854 (pid 31124) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1221.179821][T31124] Use struct sctp_sack_info instead [ 1221.197712][T31120] sctp: [Deprecated]: syz.5.15854 (pid 31120) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1221.197712][T31120] Use struct sctp_sack_info instead [ 1221.284380][T31126] netlink: 8 bytes leftover after parsing attributes in process `syz.8.15857'. [ 1221.393634][T31142] syzkaller1: entered promiscuous mode [ 1221.403900][T31142] syzkaller1: entered allmulticast mode [ 1221.405597][T31146] __nla_validate_parse: 2 callbacks suppressed [ 1221.405612][T31146] netlink: 12 bytes leftover after parsing attributes in process `syz.6.15863'. [ 1221.887710][T31170] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15870'. [ 1221.896951][T31170] netlink: 'syz.2.15870': attribute type 4 has an invalid length. [ 1221.910749][T31170] netlink: 152 bytes leftover after parsing attributes in process `syz.2.15870'. [ 1221.944845][T31174] netlink: 'syz.8.15874': attribute type 1 has an invalid length. [ 1222.098159][T31182] 8021q: adding VLAN 0 to HW filter on device bond11 [ 1222.156606][T31182] netlink: 196 bytes leftover after parsing attributes in process `syz.5.15878'. [ 1222.178687][T31191] xt_hashlimit: size too large, truncated to 1048576 [ 1222.187878][T31182] netlink: 196 bytes leftover after parsing attributes in process `syz.5.15878'. [ 1222.197025][T31182] netlink: 19 bytes leftover after parsing attributes in process `syz.5.15878'. [ 1222.241486][T31196] netlink: 45349 bytes leftover after parsing attributes in process `syz.2.15881'. [ 1222.253736][T31182] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 1222.332520][T31196] 0ªX¹¦Dö»: renamed from gretap0 [ 1222.339773][T31196] 0ªX¹¦Dö»: left promiscuous mode [ 1222.350348][T31196] 0ªX¹¦Dö»: entered allmulticast mode [ 1222.359792][T31193] syzkaller0: entered promiscuous mode [ 1222.365277][T31193] syzkaller0: entered allmulticast mode [ 1222.504155][T31208] netlink: 'syz.7.15886': attribute type 3 has an invalid length. [ 1222.588456][T31212] netlink: 16 bytes leftover after parsing attributes in process `syz.8.15888'. [ 1222.707148][T31221] netlink: 8 bytes leftover after parsing attributes in process `syz.7.15890'. [ 1222.755239][T31221] netlink: 12 bytes leftover after parsing attributes in process `syz.7.15890'. [ 1223.288614][T31270] team0: Port device syz_tun removed [ 1223.327201][ T3281] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1223.373044][T31286] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1223.467191][T31289] netlink: 'syz.6.15907': attribute type 32 has an invalid length. [ 1223.686784][T31289] bond4: option coupled_control: invalid value (192) [ 1223.747245][T31289] bond4 (unregistering): Released all slaves [ 1223.758661][T31305] netlink: 'syz.2.15913': attribute type 3 has an invalid length. [ 1223.766494][T31305] netlink: 'syz.2.15913': attribute type 1 has an invalid length. [ 1223.830024][ T3281] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1223.853307][ T3281] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1223.926441][T14751] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1224.034017][T31322] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1224.121967][ T42] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1224.220166][ T42] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1224.293191][T31338] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 1224.490766][T31354] vlan2: entered promiscuous mode [ 1224.498060][T31361] xt_l2tp: invalid flags combination: 8 [ 1224.530555][T31354] hsr0: entered promiscuous mode [ 1224.538455][T31354] vlan2: entered allmulticast mode [ 1224.543589][T31354] hsr0: entered allmulticast mode [ 1224.548616][T31354] hsr_slave_0: entered allmulticast mode [ 1224.554307][T31354] hsr_slave_1: entered allmulticast mode [ 1225.789409][T31444] veth0: entered promiscuous mode [ 1225.807193][T31443] veth0: left promiscuous mode [ 1225.877452][T31451] bridge: RTM_NEWNEIGH with unconfigured vlan 1 on bridge0 [ 1225.952480][T31455] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 1226.201448][T31479] netlink: 'syz.5.15955': attribute type 63 has an invalid length. [ 1226.222348][T31471] syzkaller1: entered promiscuous mode [ 1226.228311][T31471] syzkaller1: entered allmulticast mode [ 1226.419414][T31488] veth3: entered promiscuous mode [ 1226.425910][T31488] veth3: entered allmulticast mode [ 1226.545512][T31493] sctp: [Deprecated]: syz.5.15961 (pid 31493) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1226.545512][T31493] Use struct sctp_sack_info instead [ 1226.576161][T31495] __nla_validate_parse: 18 callbacks suppressed [ 1226.576191][T31495] netlink: 52 bytes leftover after parsing attributes in process `syz.8.15963'. [ 1226.592613][T31493] netlink: 4 bytes leftover after parsing attributes in process `syz.5.15961'. [ 1226.654795][T31493] team0 (unregistering): Port device team_slave_0 removed [ 1226.675577][T31493] team0 (unregistering): Port device team_slave_1 removed [ 1226.945010][T31509] Cannot find del_set index 3 as target [ 1227.072646][T31524] netlink: 9 bytes leftover after parsing attributes in process `syz.2.15972'. [ 1227.090547][T31524] 0·: renamed from hsr0 (while UP) [ 1227.143904][T31524] A link change request failed with some changes committed already. Interface c0· may have been left with an inconsistent configuration, please check. [ 1227.166390][T31529] netlink: 12 bytes leftover after parsing attributes in process `syz.6.15973'. [ 1227.192994][T31526] netlink: 8 bytes leftover after parsing attributes in process `syz.7.15967'. [ 1227.224060][T31529] netlink: 12 bytes leftover after parsing attributes in process `syz.6.15973'. [ 1227.248617][T31528] tipc: Enabled bearer , priority 0 [ 1227.266960][T31528] syzkaller0: entered promiscuous mode [ 1227.280982][T31528] syzkaller0: entered allmulticast mode [ 1227.289992][T31526] IPVS: set_ctl: invalid protocol: 115 224.0.0.1:19998 [ 1227.458280][T31528] tipc: Resetting bearer [ 1227.471957][T31539] netlink: 8 bytes leftover after parsing attributes in process `syz.6.15975'. [ 1227.480310][T31541] netlink: 20 bytes leftover after parsing attributes in process `syz.5.15976'. [ 1227.489989][T31539] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1227.490527][T31539] netlink: 152 bytes leftover after parsing attributes in process `syz.6.15975'. [ 1227.562501][T31522] tipc: Resetting bearer [ 1227.581488][T31522] tipc: Disabling bearer [ 1227.602866][T31541] netlink: 20 bytes leftover after parsing attributes in process `syz.5.15976'. [ 1227.648097][T31541] nbd: device at index 64 is going down [ 1227.688933][T25451] udevd[25451]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1227.916697][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1227.937878][ T29] audit: type=1107 audit(1782167318.961:58): pid=31555 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='xmøm4ÿ„ràÆŸ&þ§DDJ™²Gõ8' [ 1227.973894][T31560] No such timeout policy "syz0" [ 1227.986328][T31561] netlink: 'syz.6.15982': attribute type 61 has an invalid length. [ 1228.135746][T31560] bridge0: port 2(bridge_slave_1) entered blocking state [ 1228.142875][T31560] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1228.275023][T31560] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1228.284923][T31560] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1228.332233][T31576] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 1228.340942][T31561] veth3: entered allmulticast mode [ 1228.499292][T31583] openvswitch: netlink: IPv4 tun info is not correct [ 1228.625134][T31586] syzkaller0: entered promiscuous mode [ 1228.630632][T31586] syzkaller0: entered allmulticast mode [ 1228.809277][T31590] bond1: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 1228.851532][T31590] bond1 (unregistering): Released all slaves [ 1228.960955][T31582] syz.7.15988 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 1228.998786][T31582] CPU: 0 UID: 0 PID: 31582 Comm: syz.7.15988 Not tainted syzkaller #0 PREEMPT(full) [ 1228.998812][T31582] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1228.998822][T31582] Call Trace: [ 1228.998829][T31582] [ 1228.998838][T31582] dump_stack_lvl+0xe8/0x150 [ 1228.998863][T31582] dump_header+0xd3/0x4b0 [ 1228.998886][T31582] oom_kill_process+0x3ab/0x970 [ 1228.998909][T31582] out_of_memory+0x1064/0x1480 [ 1228.998926][T31582] ? try_charge_memcg+0xbca/0x1590 [ 1228.998952][T31582] ? __pfx_out_of_memory+0x10/0x10 [ 1228.998969][T31582] ? do_raw_spin_unlock+0xf5/0x210 [ 1228.998993][T31582] try_charge_memcg+0xc74/0x1590 [ 1228.999014][T31582] ? fs_reclaim_acquire+0x7c/0x100 [ 1228.999040][T31582] ? __pfx_try_charge_memcg+0x10/0x10 [ 1228.999061][T31582] ? lock_release+0x4b/0x3c0 [ 1228.999081][T31582] ? rcu_is_watching+0x15/0xb0 [ 1228.999100][T31582] ? rcu_is_watching+0x15/0xb0 [ 1228.999115][T31582] ? lock_release+0x4b/0x3c0 [ 1228.999134][T31582] ? percpu_ref_tryget+0xfd/0x180 [ 1228.999158][T31582] charge_memcg+0x19c/0x2b0 [ 1228.999176][T31582] ? mem_cgroup_swapin_charge_folio+0x33/0x390 [ 1228.999195][T31582] mem_cgroup_swapin_charge_folio+0x262/0x390 [ 1228.999216][T31582] __swap_cache_prepare_and_add+0xdd/0x700 [ 1228.999237][T31582] ? page_rmappable_folio+0x9a/0x170 [ 1228.999263][T31582] swap_cache_alloc_folio+0xf1/0x240 [ 1228.999282][T31582] swap_cluster_readahead+0x523/0x670 [ 1228.999303][T31582] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 1228.999326][T31582] ? get_vma_policy+0x27b/0x3c0 [ 1228.999348][T31582] swapin_readahead+0x196/0xc50 [ 1228.999366][T31582] ? rcu_is_watching+0x15/0xb0 [ 1228.999387][T31582] ? swap_table_get+0x1e/0x260 [ 1228.999402][T31582] ? rcu_is_watching+0x15/0xb0 [ 1228.999419][T31582] ? __pfx_swapin_readahead+0x10/0x10 [ 1228.999436][T31582] ? lock_release+0x4b/0x3c0 [ 1228.999456][T31582] ? rcu_is_watching+0x15/0xb0 [ 1228.999470][T31582] ? get_swap_device_info+0x1c/0x2b0 [ 1228.999489][T31582] ? swap_table_get+0x1e/0x260 [ 1228.999503][T31582] ? swap_table_get+0x1e/0x260 [ 1228.999519][T31582] ? swap_table_get+0x216/0x260 [ 1228.999536][T31582] ? swap_cache_get_folio+0x2ea/0x2f0 [ 1228.999561][T31582] do_swap_page+0x545/0x5340 [ 1228.999581][T31582] ? __pte_offset_map+0x29/0x240 [ 1228.999599][T31582] ? lock_acquire+0x5f/0x350 [ 1228.999620][T31582] ? count_memcg_event_mm+0x21/0x260 [ 1228.999636][T31582] ? rcu_is_watching+0x15/0xb0 [ 1228.999652][T31582] ? count_memcg_event_mm+0x21/0x260 [ 1228.999669][T31582] ? do_swap_page+0x128/0x5340 [ 1228.999685][T31582] ? __pfx_do_swap_page+0x10/0x10 [ 1228.999700][T31582] ? __pte_offset_map+0x45/0x240 [ 1228.999716][T31582] ? __pte_offset_map+0x1ae/0x240 [ 1228.999734][T31582] ? pte_offset_map_rw_nolock+0xea/0x160 [ 1228.999754][T31582] handle_mm_fault+0x124c/0x3080 [ 1228.999778][T31582] ? handle_mm_fault+0xec/0x3080 [ 1228.999799][T31582] ? __pfx_handle_mm_fault+0x10/0x10 [ 1228.999814][T31582] ? lock_vma_under_rcu+0x45a/0x500 [ 1228.999837][T31582] ? rcu_is_watching+0x15/0xb0 [ 1228.999852][T31582] ? rcu_is_watching+0x15/0xb0 [ 1228.999868][T31582] do_user_addr_fault+0xa4d/0x1340 [ 1228.999890][T31582] ? trace_page_fault_user+0x84/0x1e0 [ 1228.999906][T31582] exc_page_fault+0x6a/0xc0 [ 1228.999928][T31582] asm_exc_page_fault+0x26/0x30 [ 1228.999944][T31582] RIP: 0033:0x7f8e50451522 [ 1228.999959][T31582] Code: 24 70 0f 29 9c 24 80 00 00 00 0f 29 a4 24 90 00 00 00 0f 29 ac 24 a0 00 00 00 0f 29 b4 24 b0 00 00 00 0f 29 bc 24 c0 00 00 00 <80> 3d be 41 ef 00 00 74 56 e8 50 ab 0d 00 48 8b 3d f1 c7 39 00 48 [ 1228.999972][T31582] RSP: 002b:00007f8e513d6f60 EFLAGS: 00010246 [ 1228.999991][T31582] RAX: 0000000000000000 RBX: 00007f8e50632068 RCX: 00007f8e50641f1c [ 1229.000001][T31582] RDX: 000000000000d8d1 RSI: 0000000000000000 RDI: 00007f8e50632068 [ 1229.000011][T31582] RBP: 00007f8e50641f1c R08: 0000000000000000 R09: 3fffffffffffffff [ 1229.000022][T31582] R10: 4000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1229.000032][T31582] R13: 00007f8e50816218 R14: 00007f8e50816180 R15: 00007ffd6a690d08 [ 1229.000051][T31582] [ 1229.001976][T31582] memory: usage 307200kB, limit 307200kB, failcnt 447 [ 1229.434010][T31582] memory+swap: usage 307308kB, limit 9007199254740988kB, failcnt 0 [ 1229.442359][T31582] kmem: usage 307160kB, limit 9007199254740988kB, failcnt 0 [ 1229.450010][T31582] Memory cgroup stats for /syz7: [ 1229.450158][T31582] cache 0 [ 1229.458714][T31582] rss 8192 [ 1229.461891][T31582] rss_huge 0 [ 1229.467927][T31582] shmem 0 [ 1229.471035][T31582] mapped_file 0 [ 1229.474707][T31582] dirty 0 [ 1229.477858][T31582] writeback 0 [ 1229.481383][T31582] workingset_refault_anon 160 [ 1229.486545][T31582] workingset_refault_file 0 [ 1229.491244][T31612] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 1229.500783][T31582] swap 106496 [ 1229.505863][T31582] swapcached 892928 [ 1229.509931][T31582] pgpgin 6926 [ 1229.513504][T31582] pgpgout 6915 [ 1229.517076][T31582] pgfault 14195 [ 1229.520743][T31582] pgmajfault 118 [ 1229.524559][T31582] inactive_anon 45056 [ 1229.528774][T31582] active_anon 0 [ 1229.532480][T31582] inactive_file 0 [ 1229.536344][T31582] active_file 0 [ 1229.539988][T31582] unevictable 0 [ 1229.543693][T31582] hierarchical_memory_limit 314572800 [ 1229.549426][T31582] hierarchical_memsw_limit 9223372036854771712 [ 1229.555910][T31582] total_cache 0 [ 1229.559578][T31582] total_rss 8192 [ 1229.630123][T31582] total_rss_huge 0 [ 1229.633884][T31582] total_shmem 0 [ 1229.637348][T31582] total_mapped_file 0 [ 1229.641328][T31582] total_dirty 0 [ 1229.644784][T31582] total_writeback 0 [ 1229.648584][T31582] total_workingset_refault_anon 160 [ 1229.653776][T31582] total_workingset_refault_file 0 [ 1229.659132][T31582] total_swap 106496 [ 1229.663155][T31582] total_swapcached 892928 [ 1229.683745][T31582] total_pgpgin 6926 [ 1229.687579][T31582] total_pgpgout 6915 [ 1229.691759][T31582] total_pgfault 14195 [ 1229.764291][T31582] total_pgmajfault 118 [ 1229.768388][T31582] total_inactive_anon 45056 [ 1229.772899][T31582] total_active_anon 0 [ 1229.817369][T31582] total_inactive_file 0 [ 1229.821561][T31582] total_active_file 0 [ 1229.825540][T31582] total_unevictable 0 [ 1229.829519][T31582] anon_cost 0 [ 1229.844850][T31582] file_cost 0 [ 1229.848169][T31582] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz7,task_memcg=/syz7,task=syz.7.15988,pid=31578,uid=0 [ 1229.917388][T31582] Memory cgroup out of memory: Killed process 31582 (syz.7.15988) total-vm:98788kB, anon-rss:1260kB, file-rss:21588kB, shmem-rss:0kB, UID:0 pgtables:120kB oom_score_adj:1000 [ 1230.528288][T31654] bond0 (unregistering): Released all slaves [ 1230.565475][T31660] tipc: Enabling of bearer rejected, already enabled [ 1231.314067][T31694] bond12: invalid ARP target 0.0.0.0 specified for addition [ 1231.354106][T31694] bond12: option arp_ip_target: invalid value (0) [ 1231.399779][T31694] bond12 (unregistering): Released all slaves [ 1231.407753][T27947] Bluetooth: hci8: command tx timeout [ 1231.613207][T31703] Unsupported ieee802154 address type: 0 [ 1231.822871][T31708] __nla_validate_parse: 5 callbacks suppressed [ 1231.822889][T31708] netlink: 20 bytes leftover after parsing attributes in process `syz.6.16029'. [ 1231.830820][T31712] netlink: 36 bytes leftover after parsing attributes in process `syz.2.16031'. [ 1231.925596][T31715] netlink: 8 bytes leftover after parsing attributes in process `syz.8.16032'. [ 1231.974527][T31715] netlink: 'syz.8.16032': attribute type 6 has an invalid length. [ 1232.020703][T31715] netlink: 4 bytes leftover after parsing attributes in process `syz.8.16032'. [ 1232.096532][T31715] netlink: 8 bytes leftover after parsing attributes in process `syz.8.16032'. [ 1232.140766][T31715] netlink: 'syz.8.16032': attribute type 6 has an invalid length. [ 1232.151893][T31715] netlink: 4 bytes leftover after parsing attributes in process `syz.8.16032'. [ 1232.977815][T31770] lo: left promiscuous mode [ 1232.984213][T31770] tunl0: left promiscuous mode [ 1232.989087][T31770] gre0: left promiscuous mode [ 1233.026078][T31770] 0ªX¹¦Dö»: left allmulticast mode [ 1233.032022][T31770] erspan0: left promiscuous mode [ 1233.037799][T31770] ip_vti0: left promiscuous mode [ 1233.057199][T31770] macvtap0: left allmulticast mode [ 1233.081407][T31770] gtp0: left promiscuous mode [ 1233.086117][T31770] gtp0: left allmulticast mode [ 1233.180987][T31770] vlan2: left promiscuous mode [ 1233.185977][T31770] 0·: left promiscuous mode [ 1233.212566][T31770] vlan2: left allmulticast mode [ 1233.217447][T31770] 0·: left allmulticast mode [ 1233.222251][T31770] hsr_slave_0: left allmulticast mode [ 1233.228380][T31770] hsr_slave_1: left allmulticast mode [ 1233.376048][T31773] syzkaller0: entered promiscuous mode [ 1233.381548][T31773] syzkaller0: entered allmulticast mode [ 1233.538756][T31801] netlink: 4 bytes leftover after parsing attributes in process `syz.7.16057'. [ 1233.754754][T31814] netlink: 12 bytes leftover after parsing attributes in process `syz.8.16060'. [ 1233.883690][T31823] netlink: 8 bytes leftover after parsing attributes in process `syz.5.16063'. [ 1234.219706][T31850] netlink: 12 bytes leftover after parsing attributes in process `syz.8.16069'. [ 1234.684909][T31874] bridge3: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 1234.839046][T31889] : entered promiscuous mode [ 1234.885332][T31891] syzkaller0: entered promiscuous mode [ 1234.890956][T31891] syzkaller0: entered allmulticast mode [ 1235.037606][T31900] netlink: 'syz.2.16085': attribute type 1 has an invalid length. [ 1235.062373][T25825] Bluetooth: hci8: command 0x0405 tx timeout [ 1235.088969][T31900] bond0: entered promiscuous mode [ 1235.105998][T31900] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1235.164858][T31900] bond0: (slave bridge2): making interface the new active one [ 1235.176652][T31900] bridge2: entered promiscuous mode [ 1235.183569][T31900] bond0: (slave bridge2): Enslaving as an active interface with an up link [ 1235.284688][T31913] netlink: 'syz.5.16091': attribute type 5 has an invalid length. [ 1235.548686][T31936] netlink: 'syz.8.16096': attribute type 11 has an invalid length. [ 1236.014193][T31967] openvswitch: netlink: Message has 8 unknown bytes. [ 1236.035393][T31964] x_tables: unsorted entry at hook 3 [ 1236.040472][T31967] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1236.077671][T31980] openvswitch: netlink: Message has 8 unknown bytes. [ 1236.097452][T31980] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1236.101301][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1236.383595][T31999] nbd: couldn't find a device at index 0 [ 1236.827205][T32046] bridge4: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 1236.845663][T32044] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1236.871851][T32048] __nla_validate_parse: 13 callbacks suppressed [ 1236.871880][T32048] netlink: 24 bytes leftover after parsing attributes in process `syz.2.16128'. [ 1237.065613][T32059] netlink: 'syz.6.16131': attribute type 1 has an invalid length. [ 1237.163393][T32059] bond5: entered promiscuous mode [ 1237.168718][T32059] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1237.217112][T32059] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1237.240495][T32059] bond5: (slave vti0): The slave device specified does not support setting the MAC address [ 1237.250504][T32059] bond5: (slave vti0): Setting fail_over_mac to active for active-backup mode [ 1237.262231][T32059] bond5: (slave vti0): making interface the new active one [ 1237.269450][T32059] vti0: entered promiscuous mode [ 1237.308652][T32059] vti0: left promiscuous mode [ 1237.714155][T32089] syzkaller0: entered promiscuous mode [ 1237.719650][T32089] syzkaller0: entered allmulticast mode [ 1237.783610][T32080] netlink: 8 bytes leftover after parsing attributes in process `syz.7.16138'. [ 1237.835326][T32080] netlink: 40 bytes leftover after parsing attributes in process `syz.7.16138'. [ 1237.848383][T32106] netlink: 256 bytes leftover after parsing attributes in process `syz.2.16147'. [ 1237.860163][T32106] netlink: 8 bytes leftover after parsing attributes in process `syz.2.16147'. [ 1238.540123][T32101] veth0_macvtap: left allmulticast mode [ 1238.919706][T32140] netlink: 12 bytes leftover after parsing attributes in process `syz.5.16152'. [ 1238.989611][T14852] netdevsim netdevsim8 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1239.011309][T32145] netlink: 'syz.5.16152': attribute type 1 has an invalid length. [ 1239.034416][T32144] netlink: 32 bytes leftover after parsing attributes in process `syz.7.16155'. [ 1239.053277][T14852] netdevsim netdevsim8 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1239.062177][T14852] netdevsim netdevsim8 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1239.082614][T14852] netdevsim netdevsim8 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1239.191903][T32156] netlink: 'syz.8.16157': attribute type 32 has an invalid length. [ 1239.341778][T32167] netlink: 52 bytes leftover after parsing attributes in process `syz.7.16164'. [ 1239.659629][T32183] netlink: 8 bytes leftover after parsing attributes in process `syz.6.16170'. [ 1239.669028][T32183] netlink: 'syz.6.16170': attribute type 1 has an invalid length. [ 1239.689128][T32183] netlink: 'syz.6.16170': attribute type 2 has an invalid length. [ 1239.718333][T32178] netlink: 4 bytes leftover after parsing attributes in process `syz.7.16169'. [ 1239.835848][T32190] 8021q: adding VLAN 0 to HW filter on device bond12 [ 1239.843386][T32190] bridge0: port 3(bond12) entered blocking state [ 1239.849796][T32190] bridge0: port 3(bond12) entered disabled state [ 1239.856406][T32190] bond12: entered allmulticast mode [ 1239.863218][T32190] bond12: entered promiscuous mode [ 1239.946762][T32202] bond6: entered promiscuous mode [ 1240.108644][T32215] netlink: 'syz.5.16181': attribute type 26 has an invalid length. [ 1240.130267][T32215] netlink: 'syz.5.16181': attribute type 26 has an invalid length. [ 1240.172832][T32215] 1·: renamed from c0· (while UP) [ 1240.189152][T32215] A link change request failed with some changes committed already. Interface c1· may have been left with an inconsistent configuration, please check. [ 1240.291200][T32234] openvswitch: netlink: IPv6 tunnel dst address is zero [ 1240.291734][T32236] netlink: 'syz.2.16185': attribute type 1 has an invalid length. [ 1240.504300][T32251] bond0: left promiscuous mode [ 1240.561399][T32251] bridge2: left promiscuous mode [ 1240.656343][T32259] xt_recent: hitcount (4294901760) is larger than allowed maximum (65535) [ 1240.823490][T32271] openvswitch: netlink: Flow actions attr not present in new flow. [ 1240.846455][T32271] IPv6: sit2: Disabled Multicast RS [ 1241.132966][T32294] bond13: option lp_interval: invalid value (0) [ 1241.139741][T32294] bond13: option lp_interval: allowed values 1 - 2147483647 [ 1241.151185][T32294] bond13 (unregistering): Released all slaves [ 1241.179009][T32298] netlink: 'syz.2.16207': attribute type 12 has an invalid length. [ 1241.303369][T32315] netlink: 'syz.2.16213': attribute type 1 has an invalid length. [ 1241.563157][T32328] bond6: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-xor(2) [ 1241.575058][T32328] bond6 (unregistering): Released all slaves [ 1241.970743][T32374] __nla_validate_parse: 13 callbacks suppressed [ 1241.970774][T32374] netlink: 12 bytes leftover after parsing attributes in process `syz.7.16229'. [ 1242.115180][T32379] netlink: 64985 bytes leftover after parsing attributes in process `syz.7.16230'. [ 1242.234313][T32386] netlink: 48 bytes leftover after parsing attributes in process `syz.5.16232'. [ 1242.441897][T32398] tipc: Enabling of bearer rejected, media not registered [ 1242.523938][T14845] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1242.802563][T32422] validate_nla: 1 callbacks suppressed [ 1242.802579][T32422] netlink: 'syz.6.16243': attribute type 9 has an invalid length. [ 1243.145163][T32444] netlink: 48 bytes leftover after parsing attributes in process `syz.6.16249'. [ 1243.155139][T32443] netlink: 48 bytes leftover after parsing attributes in process `syz.6.16249'. [ 1243.222375][ T3360] bond0: (slave bridge2): link status definitely down, disabling slave [ 1243.230753][ T3360] bond0: now running without any active interface! [ 1243.271678][T32452] netlink: 'syz.6.16253': attribute type 23 has an invalid length. [ 1243.343227][T32454] netlink: 56 bytes leftover after parsing attributes in process `syz.8.16252'. [ 1243.352338][T25825] Bluetooth: hci8: link tx timeout [ 1243.353815][T32460] netlink: 'syz.6.16253': attribute type 61 has an invalid length. [ 1243.357446][T25825] Bluetooth: hci8: killing stalled connection 11:aa:aa:aa:aa:aa [ 1243.440196][T32454] bond1 (unregistering): Released all slaves [ 1243.458851][T32468] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1243.527376][T32472] netlink: 'syz.2.16257': attribute type 24 has an invalid length. [ 1243.539504][T32473] netlink: 'syz.2.16257': attribute type 24 has an invalid length. [ 1244.254315][T32501] netlink: 'syz.7.16269': attribute type 4 has an invalid length. [ 1244.271415][T32501] netlink: 'syz.7.16269': attribute type 4 has an invalid length. [ 1244.333069][T32505] netlink: 'syz.7.16271': attribute type 1 has an invalid length. [ 1244.341541][T32505] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1244.687845][T32523] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1244.695289][T32523] bridge0: port 1(bond3) entered blocking state [ 1244.714878][T32523] bridge0: port 1(bond3) entered disabled state [ 1244.721402][T32523] bond3: entered allmulticast mode [ 1244.729147][T32523] bond3: entered promiscuous mode [ 1244.735024][T32523] bridge0: port 1(bond3) entered blocking state [ 1244.741341][T32523] bridge0: port 1(bond3) entered forwarding state [ 1244.827957][T32535] IPv6: sit1: Disabled Multicast RS [ 1244.876590][T32535] netlink: 8 bytes leftover after parsing attributes in process `syz.8.16279'. [ 1245.070643][T32543] bond6: option fail_over_mac: invalid value (16) [ 1245.078412][T32543] bond6 (unregistering): Released all slaves [ 1245.093257][T32547] erspan0: entered promiscuous mode [ 1245.098838][T32547] netlink: 8 bytes leftover after parsing attributes in process `syz.6.16284'. [ 1245.122091][ T3281] bridge0: port 1(bond3) entered disabled state [ 1245.129847][T32548] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1245.189641][T32552] netlink: 36 bytes leftover after parsing attributes in process `syz.6.16287'. [ 1245.352033][T32558] netlink: 'syz.8.16289': attribute type 1 has an invalid length. [ 1245.368983][T32558] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1245.431023][T25825] Bluetooth: hci8: command 0x0405 tx timeout [ 1245.441821][T32564] netlink: 8 bytes leftover after parsing attributes in process `syz.8.16291'. [ 1245.567095][T32569] syzkaller0: entered promiscuous mode [ 1245.575148][T32569] syzkaller0: entered allmulticast mode [ 1245.971089][T32587] netlink: 'syz.8.16298': attribute type 33 has an invalid length. [ 1246.004806][T32587] bond2: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 1246.048153][T32587] bond2 (unregistering): Released all slaves [ 1246.149741][T32594] syzkaller0: entered promiscuous mode [ 1246.167724][T32594] syzkaller0: entered allmulticast mode [ 1246.891722][T32612] xt_hashlimit: size too large, truncated to 1048576 [ 1247.124145][T32617] __nla_validate_parse: 1 callbacks suppressed [ 1247.124162][T32617] netlink: 124 bytes leftover after parsing attributes in process `syz.5.16307'. [ 1247.150831][T32617] xt_bpf: check failed: parse error [ 1247.265180][T32617] netlink: 8 bytes leftover after parsing attributes in process `syz.5.16307'. [ 1247.274178][T32617] netlink: 12 bytes leftover after parsing attributes in process `syz.5.16307'. [ 1248.010241][T32645] netlink: 4 bytes leftover after parsing attributes in process `syz.7.16315'. [ 1248.263355][ T3360] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1248.559482][T32571] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1248.665080][T32649] netlink: 8 bytes leftover after parsing attributes in process `syz.6.16316'. [ 1248.681021][T32649] netlink: 32 bytes leftover after parsing attributes in process `syz.6.16316'. [ 1248.691317][T32651] IPVS: set_ctl: invalid protocol: 98 100.1.1.1:20004 [ 1248.692438][T32653] netlink: 'syz.7.16318': attribute type 1 has an invalid length. [ 1248.761866][T32653] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1248.820275][T22869] hid-generic 0005:0458:0440.0004: hidraw0: BLUETOOTH HID vc3.36 Device [syz0] on aa:aa:aa:aa:aa:aa [ 1248.896131][T32673] netlink: 'syz.8.16322': attribute type 2 has an invalid length. [ 1248.909141][T32653] netlink: 12 bytes leftover after parsing attributes in process `syz.7.16318'. [ 1248.918886][T32653] netlink: 28 bytes leftover after parsing attributes in process `syz.7.16318'. [ 1249.169024][T14845] bond0: (slave bond_slave_0): interface is now down [ 1249.176326][T14845] bond0: (slave bond_slave_1): interface is now down [ 1249.195781][T14845] bond0: now running without any active interface! [ 1249.302587][T32705] netlink: 64 bytes leftover after parsing attributes in process `syz.2.16331'. [ 1249.367676][T32709] bond13: option arp_all_targets: invalid value (18446744073709551613) [ 1249.396200][T32709] bond13 (unregistering): Released all slaves [ 1249.703826][T32737] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 1249.785878][T32737] netlink: 28 bytes leftover after parsing attributes in process `syz.6.16339'. [ 1249.832744][T25825] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 1249.839985][T25825] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 1249.847231][T25825] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 1249.854799][T25825] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 1249.862221][T25825] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 1249.950487][T32743] bond0: option miimon: invalid value (18446744071829782528) [ 1249.960041][T32743] bond0: option miimon: allowed values 0 - 2147483647 [ 1250.160581][T32739] lo speed is unknown, defaulting to 1000 [ 1250.167103][T32739] xfrm0 speed is unknown, defaulting to 1000 [ 1250.433785][T32767] pimreg: left allmulticast mode [ 1250.457221][ T302] netlink: 'syz.8.16345': attribute type 1 has an invalid length. [ 1250.498463][T32739] bridge0: port 1(bridge_slave_0) entered blocking state [ 1250.505666][T32739] bridge0: port 1(bridge_slave_0) entered disabled state [ 1250.528986][T32739] bridge_slave_0: entered allmulticast mode [ 1250.536131][T32739] bridge_slave_0: entered promiscuous mode [ 1250.543888][T32739] bridge0: port 2(bridge_slave_1) entered blocking state [ 1250.551029][T32739] bridge0: port 2(bridge_slave_1) entered disabled state [ 1250.558318][T32739] bridge_slave_1: entered allmulticast mode [ 1250.565402][T32739] bridge_slave_1: entered promiscuous mode [ 1250.579923][ T302] bond2: (slave bridge2): making interface the new active one [ 1250.589199][ T302] bond2: (slave bridge2): Enslaving as an active interface with an up link [ 1250.646701][T32739] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1250.658481][T32739] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1250.684126][T32739] team0: Port device team_slave_0 added [ 1250.693453][T32739] team0: Port device team_slave_1 added [ 1250.740050][T32739] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1250.747627][T32739] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1250.792492][T32739] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1250.804512][T32739] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1250.856433][T32739] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1250.882634][T32739] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1250.968196][ T316] batadv0: entered promiscuous mode [ 1250.974061][ T316] macsec1: entered promiscuous mode [ 1250.981372][ T316] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 1251.003253][ T316] batadv0: left promiscuous mode [ 1251.042831][ T321] tipc: Enabled bearer , priority 0 [ 1251.141849][ T318] syzkaller0: entered promiscuous mode [ 1251.147347][ T318] syzkaller0: entered allmulticast mode [ 1251.153503][ T318] tipc: Resetting bearer [ 1251.166994][ T334] tipc: Enabling of bearer rejected, already enabled [ 1251.180749][ T332] team0: Port device syz_tun added [ 1251.199080][T32739] hsr_slave_0: entered promiscuous mode [ 1251.205645][T32739] hsr_slave_1: entered promiscuous mode [ 1251.253168][T32739] debugfs: 'hsr0' already exists in 'hsr' [ 1251.259196][T32739] Cannot create hsr debugfs directory [ 1251.284749][ T317] tipc: Resetting bearer [ 1251.363913][ T317] tipc: Disabling bearer [ 1251.503253][T32739] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1251.538539][T32739] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1251.549931][T32739] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1251.779461][ T365] netlink: 'syz.8.16364': attribute type 1 has an invalid length. [ 1251.799244][ T371] netlink: 'syz.7.16365': attribute type 1 has an invalid length. [ 1251.835811][ T365] bond3: entered promiscuous mode [ 1251.841235][ T365] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1251.861868][ T371] bond5: entered promiscuous mode [ 1251.878515][ T371] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1251.894046][T32739] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1251.918877][T32739] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1251.929637][T25825] Bluetooth: hci9: command tx timeout [ 1251.937989][T32739] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1251.969368][ T371] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1251.976449][ T371] bond5: (slave vti0): The slave device specified does not support setting the MAC address [ 1251.987440][ T371] bond5: (slave vti0): Setting fail_over_mac to active for active-backup mode [ 1252.050330][ T371] bond5: (slave vti0): making interface the new active one [ 1252.057747][ T371] vti0: entered promiscuous mode [ 1252.066699][ T371] vti0: left promiscuous mode [ 1252.090046][ T365] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1252.097207][ T365] bond3: (slave ip6gre2): The slave device specified does not support setting the MAC address [ 1252.122430][ T365] bond3: (slave ip6gre2): Setting fail_over_mac to active for active-backup mode [ 1252.134708][ T365] bond3: (slave ip6gre2): making interface the new active one [ 1252.142195][ T365] ip6gre2: entered promiscuous mode [ 1252.148834][ T365] bond3: (slave ip6gre2): Enslaving as an active interface with an up link [ 1252.262467][T32739] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1252.276012][T32739] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1252.289691][T32739] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1252.411131][ T413] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1252.429924][ T413] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1252.438975][ T413] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1252.446362][ T413] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1252.526473][ T420] xt_hashlimit: size too large, truncated to 1048576 [ 1252.583351][ T423] can: request_module (can-proto-0) failed. [ 1252.665270][T32739] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1252.677017][T32739] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1252.687287][T32739] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1252.786108][ T433] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1252.893570][ T438] netlink: 'syz.2.16385': attribute type 8 has an invalid length. [ 1252.901451][ T438] __nla_validate_parse: 7 callbacks suppressed [ 1252.901465][ T438] netlink: 8 bytes leftover after parsing attributes in process `syz.2.16385'. [ 1252.949813][ T438] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1252.965002][T26975] IPVS: starting estimator thread 0... [ 1253.073833][ T443] IPVS: using max 67 ests per chain, 160800 per kthread [ 1253.074397][T32739] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1253.104348][T32739] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1253.175085][T32739] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1253.190339][T32739] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1253.199059][T32739] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1253.237076][T32739] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1253.244825][T32739] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1253.268477][T32739] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1253.378335][T14845] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1253.401416][ T468] netlink: 108 bytes leftover after parsing attributes in process `syz.7.16392'. [ 1253.526768][ T29] audit: type=1800 audit(1782167344.611:59): pid=453 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.16389" name=4996AE17DFFC2E43C8174B54B620636894AAACF28FF62616363C70A440AEC4014CAF28C0ADC04308 dev="tmpfs" ino=1667 res=0 errno=0 [ 1253.562805][ T475] netlink: 12 bytes leftover after parsing attributes in process `syz.6.16394'. [ 1253.623292][T32739] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1253.632219][ T475] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 1253.656885][T32739] 8021q: adding VLAN 0 to HW filter on device team0 [ 1253.701388][ T1039] bridge0: port 1(bridge_slave_0) entered blocking state [ 1253.708491][ T1039] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1253.735098][ T1039] bridge0: port 2(bridge_slave_1) entered blocking state [ 1253.742609][ T1039] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1253.778330][ T478] syzkaller1: entered promiscuous mode [ 1253.790966][ T478] syzkaller1: entered allmulticast mode [ 1254.033380][T25825] Bluetooth: hci9: command tx timeout [ 1254.101781][ T509] syzkaller0: entered promiscuous mode [ 1254.108384][ T509] syzkaller0: entered allmulticast mode [ 1254.297539][T32739] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1254.396167][ T526] netlink: 4 bytes leftover after parsing attributes in process `syz.6.16405'. [ 1254.439955][ T526] team0 (unregistering): Port device team_slave_0 removed [ 1254.457205][ T526] team0 (unregistering): Port device team_slave_1 removed [ 1254.537291][ T519] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1254.661055][T32739] veth0_vlan: entered promiscuous mode [ 1254.671228][T32739] veth1_vlan: entered promiscuous mode [ 1254.693442][T32739] veth0_macvtap: entered promiscuous mode [ 1254.702231][T32739] veth1_macvtap: entered promiscuous mode [ 1254.763948][T32739] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1254.781836][ T547] netlink: 'syz.8.16410': attribute type 21 has an invalid length. [ 1254.790487][ T547] IPv6: NLM_F_CREATE should be specified when creating new route [ 1254.790497][T32739] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1254.796701][T14852] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1254.860044][T14852] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1254.881132][ T556] netlink: 28 bytes leftover after parsing attributes in process `syz.2.16413'. [ 1254.893631][T14852] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1254.902350][T14852] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1254.928637][ T558] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_team, syncid = 4, id = 0 [ 1255.035348][ T3281] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1255.069816][ T3281] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1255.102314][ T565] netlink: 12 bytes leftover after parsing attributes in process `syz.2.16415'. [ 1255.152342][T14852] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1255.189083][T14852] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1255.212390][ T570] netlink: 'syz.6.16416': attribute type 11 has an invalid length. [ 1255.280559][ T572] xt_hashlimit: size too large, truncated to 1048576 [ 1255.361645][ T575] syzkaller0: entered promiscuous mode [ 1255.367149][ T575] syzkaller0: entered allmulticast mode [ 1255.400261][ T581] netlink: 32 bytes leftover after parsing attributes in process `syz.5.16338'. [ 1255.411313][ T581] netlink: 32 bytes leftover after parsing attributes in process `syz.5.16338'. [ 1255.460515][ T575] tipc: Enabled bearer , priority 0 [ 1255.478407][ T574] tipc: Resetting bearer [ 1255.493865][ T584] xt_hashlimit: overflow, try lower: 3/0 [ 1255.504600][ T574] tipc: Disabling bearer [ 1255.648940][ T584] bond7: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 1255.661257][ T584] bond7 (unregistering): Released all slaves [ 1255.849864][ T600] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1255.886266][ T602] netlink: 8 bytes leftover after parsing attributes in process `syz.7.16425'. [ 1255.928767][ T602] netdevsim netdevsim7 netdevsim0: entered promiscuous mode [ 1255.938075][ T602] netlink: 184 bytes leftover after parsing attributes in process `syz.7.16425'. [ 1255.972248][ T602] openvswitch: netlink: Unexpected mask (mask=4000040, allowed=10048) [ 1256.006880][ T606] bond0: (slave bond_slave_1): Releasing backup interface [ 1256.083586][T29206] Bluetooth: hci6: command 0x0406 tx timeout [ 1256.135107][T25825] Bluetooth: hci9: command tx timeout [ 1256.578704][ T647] netlink: 'syz.7.16441': attribute type 11 has an invalid length. [ 1256.650173][ T652] netlink: 'syz.8.16444': attribute type 5 has an invalid length. [ 1256.654363][ T647] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1256.680346][ T647] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1256.911443][ T670] netlink: 'syz.6.16450': attribute type 3 has an invalid length. [ 1256.983610][ T673] netlink: 'syz.7.16451': attribute type 1 has an invalid length. [ 1257.299743][ T693] xt_ecn: cannot match TCP bits for non-tcp packets [ 1257.567210][ T715] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 1257.769787][ T735] xt_TCPMSS: Only works on TCP SYN packets [ 1258.043192][ T761] __nla_validate_parse: 7 callbacks suppressed [ 1258.043210][ T761] netlink: 12 bytes leftover after parsing attributes in process `syz.7.16473'. [ 1258.058399][ T761] netlink: 60 bytes leftover after parsing attributes in process `syz.7.16473'. [ 1258.093838][ T761] netlink: 12 bytes leftover after parsing attributes in process `syz.7.16473'. [ 1258.103897][ T761] netlink: 60 bytes leftover after parsing attributes in process `syz.7.16473'. [ 1258.115558][ T761] netlink: 104 bytes leftover after parsing attributes in process `syz.7.16473'. [ 1258.242158][T25825] Bluetooth: hci9: command tx timeout [ 1258.300880][ T778] netlink: 52 bytes leftover after parsing attributes in process `syz.6.16478'. [ 1258.323779][ T777] netlink: 'syz.2.16480': attribute type 83 has an invalid length. [ 1258.363392][ T782] netlink: 8 bytes leftover after parsing attributes in process `syz.2.16481'. [ 1258.481754][ T790] syzkaller0: entered promiscuous mode [ 1258.487260][ T790] syzkaller0: entered allmulticast mode [ 1259.133500][ T744] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1259.337187][ T852] macvtap0: entered allmulticast mode [ 1259.346113][ T852] veth0_macvtap: entered allmulticast mode [ 1259.355221][ T855] netlink: 'syz.8.16500': attribute type 4 has an invalid length. [ 1259.367999][ T855] netlink: 224 bytes leftover after parsing attributes in process `syz.8.16500'. [ 1259.446551][ T857] netlink: 24 bytes leftover after parsing attributes in process `syz.7.16501'. [ 1259.454538][ T860] ipt_ECN: cannot use operation on non-tcp rule [ 1259.496721][ T862] netlink: 'syz.5.16503': attribute type 58 has an invalid length. [ 1259.541640][ T862] netlink: 20 bytes leftover after parsing attributes in process `syz.5.16503'. [ 1259.814958][ T882] netlink: 'syz.8.16508': attribute type 12 has an invalid length. [ 1259.824093][ T882] netlink: 'syz.8.16508': attribute type 1 has an invalid length. [ 1259.836563][ T891] sock: sock_timestamping_bind_phc: sock not bind to device [ 1259.874855][ T892] netlink: 'syz.7.16510': attribute type 1 has an invalid length. [ 1259.947953][ T895] netlink: 'syz.5.16513': attribute type 62 has an invalid length. [ 1259.956335][ T892] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1260.053352][ T887] bond6: (slave veth5): Enslaving as an active interface with a down link [ 1260.072300][ T892] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1260.079305][ T892] bond6: (slave batadv0): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 1260.134932][ T906] bridge3: entered allmulticast mode [ 1260.142798][ T902] syzkaller0: entered promiscuous mode [ 1260.148295][ T902] syzkaller0: entered allmulticast mode [ 1260.873317][ T983] syzkaller0: entered promiscuous mode [ 1260.878817][ T983] syzkaller0: entered allmulticast mode [ 1260.895895][ T982] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1260.989236][ T972] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1261.254980][ T1016] netlink: 'syz.2.16542': attribute type 2 has an invalid length. [ 1261.436136][ T1038] netlink: 'syz.8.16545': attribute type 13 has an invalid length. [ 1261.459116][ T1041] netlink: 'syz.2.16548': attribute type 10 has an invalid length. [ 1261.482242][ T1030] netlink: 'syz.8.16545': attribute type 13 has an invalid length. [ 1261.491442][ T1035] tipc: Resetting bearer [ 1261.543398][ T1041] ipvlan0: entered allmulticast mode [ 1261.560503][ T1041] veth0_vlan: entered allmulticast mode [ 1261.569713][ T1041] team0: Device ipvlan0 failed to register rx_handler [ 1261.635311][ T1055] openvswitch: netlink: IP tunnel TTL not specified. [ 1261.680570][ T1057] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_tx_wq": -EINTR [ 1261.917543][ T1084] tipc: Failed to remove unknown binding: 66,0,0/1574366764:1441033818/1441033820 [ 1261.936853][ T1084] tipc: Failed to remove unknown binding: 66,0,0/1574366764:1441033818/1441033819 [ 1261.980865][ T1104] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1262.148709][ T1119] netlink: 'syz.2.16564': attribute type 3 has an invalid length. [ 1262.267852][ T1128] macvlan0: entered promiscuous mode [ 1262.281964][ T1125] netlink: set zone limit has 4 unknown bytes [ 1262.288463][ T1125] netlink: zone id is out of range [ 1262.326495][ T1125] netlink: zone id is out of range [ 1262.336480][ T1132] netdevsim netdevsim2: Direct firmware load for .. failed with error -2 [ 1262.352769][ T1132] netdevsim netdevsim2: Falling back to sysfs fallback for: .. [ 1262.394644][ T1136] netlink: 'syz.7.16571': attribute type 1 has an invalid length. [ 1262.448218][ T1136] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1262.474793][ T1136] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 1262.480638][ T1136] syzkaller1: Linktype set failed because interface is up [ 1262.494431][ T1141] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1262.513593][T22899] syzkaller1: tun_net_xmit 90 [ 1262.523229][ T1136] bond7: (slave veth0_to_bond): making interface the new active one [ 1262.532502][ T1136] bond7: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 1262.558683][ T1136] macvlan2: entered promiscuous mode [ 1262.564021][ T1136] macvlan2: entered allmulticast mode [ 1262.571861][ T1136] bond7: entered promiscuous mode [ 1262.576961][ T1136] veth0_to_bond: entered promiscuous mode [ 1262.583273][ T1136] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1262.591091][ T1136] bond7: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 1262.621725][ T1136] bond7: left promiscuous mode [ 1262.627202][ T1136] veth0_to_bond: left promiscuous mode [ 1262.722566][T22899] syzkaller1: tun_net_xmit 90 [ 1262.776194][ T1148] veth0: entered promiscuous mode [ 1262.789830][ T1148] veth0 (unregistering): left promiscuous mode [ 1263.282883][ T1167] tipc: Enabling of bearer rejected, failed to enable media [ 1263.367230][ T1172] __nla_validate_parse: 11 callbacks suppressed [ 1263.367261][ T1172] netlink: 4 bytes leftover after parsing attributes in process `syz.6.16584'. [ 1263.404696][ T1172] netlink: 4 bytes leftover after parsing attributes in process `syz.6.16584'. [ 1263.469025][ T1180] netlink: 96 bytes leftover after parsing attributes in process `syz.7.16587'. [ 1263.478073][ T1180] netlink: 606 bytes leftover after parsing attributes in process `syz.7.16587'. [ 1263.647333][ T1189] netlink: 12 bytes leftover after parsing attributes in process `syz.2.16591'. [ 1263.775434][ T1199] syzkaller1: entered promiscuous mode [ 1263.781297][ T1199] syzkaller1: entered allmulticast mode [ 1263.903747][ T1206] netlink: 'syz.7.16595': attribute type 11 has an invalid length. [ 1264.011487][ T744] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1264.186575][ T753] bond6: (slave veth5): link status definitely up, 10000 Mbps full duplex [ 1264.213216][ T753] bond6: (slave veth5): making interface the new active one [ 1264.244853][ T753] bond6: active interface up! [ 1264.395051][ T1235] 8021q: adding VLAN 0 to HW filter on device team0 [ 1264.432906][ T1235] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1264.511411][ T1235] veth0_macvtap: entered promiscuous mode [ 1264.553732][ T1235] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 1264.604746][ T1235] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1264.635253][ T1235] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1264.668818][ T6752] bridge0: port 1(bridge_slave_0) entered blocking state [ 1264.675964][ T6752] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1264.684885][ T6752] bridge0: port 2(bridge_slave_1) entered blocking state [ 1264.691983][ T6752] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1264.704055][ T751] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1264.712781][ T751] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1264.747265][ T751] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1264.776027][ T1243] lo speed is unknown, defaulting to 1000 [ 1264.782562][ T1243] xfrm0 speed is unknown, defaulting to 1000 [ 1264.784572][ T753] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1264.806284][ T751] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1264.884729][ T30] INFO: task syz.0.14648:26693 blocked for more than 143 seconds. [ 1264.905474][ T30] Not tainted syzkaller #0 [ 1264.921634][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1264.940299][ T751] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1264.961058][ T30] task:syz.0.14648 state:D stack:25512 pid:26693 tgid:26691 ppid:16457 task_flags:0x400040 flags:0x00080002 [ 1264.973005][ T30] Call Trace: [ 1264.976289][ T30] [ 1264.979222][ T30] __schedule+0x17d9/0x56c0 [ 1264.983843][ T30] ? __kmalloc_node_track_caller_noprof+0x4d7/0x7b0 [ 1264.990449][ T30] ? netlink_rcv_skb+0x226/0x4a0 [ 1264.995521][ T30] ? genl_rcv+0x28/0x40 [ 1264.999683][ T30] ? __pfx___schedule+0x10/0x10 [ 1265.004544][ T30] ? rcu_is_watching+0x15/0xb0 [ 1265.009315][ T30] ? rcu_is_watching+0x15/0xb0 [ 1265.014081][ T30] ? lock_release+0x4b/0x3c0 [ 1265.018677][ T30] ? rcu_is_watching+0x15/0xb0 [ 1265.041639][ T30] schedule+0x164/0x360 [ 1265.045838][ T30] schedule_preempt_disabled+0x13/0x30 [ 1265.051316][ T30] __mutex_lock+0x7bf/0x1550 [ 1265.055921][ T30] ? __mutex_lock+0x5d4/0x1550 [ 1265.060695][ T30] ? nfsd_nl_threads_get_doit+0x1c0/0x790 [ 1265.066487][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 1265.071526][ T30] ? __nlmsg_put+0xef/0x1b0 [ 1265.076045][ T30] ? genlmsg_put+0x137/0x2e0 [ 1265.080643][ T30] nfsd_nl_threads_get_doit+0x1c0/0x790 [ 1265.086196][ T30] ? is_bpf_text_address+0x26/0x2b0 [ 1265.091441][ T30] ? rcu_is_watching+0x15/0xb0 [ 1265.096206][ T30] ? rcu_is_watching+0x15/0xb0 [ 1265.100977][ T30] ? __pfx_nfsd_nl_threads_get_doit+0x10/0x10 [ 1265.107062][ T30] ? __nla_parse+0x40/0x60 [ 1265.111574][ T30] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 1265.117907][ T30] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 1265.137658][ T30] genl_family_rcv_msg_doit+0x233/0x340 [ 1265.143574][ T30] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1265.149928][ T30] ? __pfx_stack_trace_save+0x10/0x10 [ 1265.155594][ T30] genl_rcv_msg+0x614/0x7a0 [ 1265.160222][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1265.165497][ T30] ? __pfx_nfsd_nl_threads_get_doit+0x10/0x10 [ 1265.171737][ T30] ? __netlink_lookup+0xc6/0x8b0 [ 1265.176914][ T30] ? rcu_is_watching+0x15/0xb0 [ 1265.181829][ T30] netlink_rcv_skb+0x226/0x4a0 [ 1265.186819][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1265.191985][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1265.200944][ T30] ? down_read+0x2be/0x330 [ 1265.206022][ T30] genl_rcv+0x28/0x40 [ 1265.210140][ T30] netlink_unicast+0x7bb/0x940 [ 1265.215147][ T30] netlink_sendmsg+0x813/0xb40 [ 1265.220046][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1265.227034][ T30] ? futex_unqueue+0x22/0x240 [ 1265.232103][ T30] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1265.237250][ T30] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1265.242851][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1265.248282][ T30] ____sys_sendmsg+0x9b9/0xa20 [ 1265.253285][ T30] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1265.258719][ T30] ? lock_release+0x4b/0x3c0 [ 1265.263563][ T30] ? import_iovec+0x73/0xa0 [ 1265.268256][ T30] ___sys_sendmsg+0x2a5/0x360 [ 1265.273196][ T30] ? __pfx____sys_sendmsg+0x10/0x10 [ 1265.278536][ T30] ? futex_wait+0x2a2/0x390 [ 1265.283289][ T30] ? __fget_files+0x2a/0x420 [ 1265.288001][ T30] ? __fget_files+0x3a2/0x420 [ 1265.294685][ T30] __x64_sys_sendmsg+0x1b1/0x290 [ 1265.299769][ T30] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1265.305510][ T30] ? rcu_is_watching+0x15/0xb0 [ 1265.310599][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1265.316975][ T30] do_syscall_64+0x174/0x580 [ 1265.321688][ T30] ? clear_bhb_loop+0x40/0x90 [ 1265.328245][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1265.334540][ T30] RIP: 0033:0x7fa9d379ce59 [ 1265.339394][ T30] RSP: 002b:00007fa9d46b2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1265.348173][ T30] RAX: ffffffffffffffda RBX: 00007fa9d3a15fa0 RCX: 00007fa9d379ce59 [ 1265.356457][ T30] RDX: 0000000004000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 1265.364784][ T30] RBP: 00007fa9d3832e6f R08: 0000000000000000 R09: 0000000000000000 [ 1265.373074][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1265.381247][ T30] R13: 00007fa9d3a16038 R14: 00007fa9d3a15fa0 R15: 00007ffd397f3e98 [ 1265.390449][ T30] [ 1265.393821][ T30] INFO: lockdep is turned off. [ 1265.398612][ T30] NMI backtrace for cpu 1 [ 1265.398627][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1265.398645][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1265.398655][ T30] Call Trace: [ 1265.398662][ T30] [ 1265.398669][ T30] dump_stack_lvl+0xe8/0x150 [ 1265.398691][ T30] nmi_cpu_backtrace+0x274/0x2d0 [ 1265.398785][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1265.398819][ T30] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 1265.398834][ T30] sys_info+0x135/0x170 [ 1265.398848][ T30] watchdog+0xfd7/0x1030 [ 1265.398875][ T30] ? watchdog+0x1c7/0x1030 [ 1265.398897][ T30] kthread+0x388/0x470 [ 1265.398920][ T30] ? __pfx_watchdog+0x10/0x10 [ 1265.398936][ T30] ? __pfx_kthread+0x10/0x10 [ 1265.398950][ T30] ret_from_fork+0x514/0xb70 [ 1265.398975][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 1265.398990][ T30] ? __switch_to+0xc89/0x1420 [ 1265.399010][ T30] ? __pfx_kthread+0x10/0x10 [ 1265.399023][ T30] ret_from_fork_asm+0x1a/0x30 [ 1265.399045][ T30] [ 1265.399054][ T30] Sending NMI from CPU 1 to CPUs 0: [ 1265.520534][ C0] NMI backtrace for cpu 0 [ 1265.520549][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) [ 1265.520567][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1265.520577][ C0] RIP: 0010:__raw_callee_save___pv_queued_spin_unlock+0x10/0x18 [ 1265.520606][ C0] Code: 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 52 b8 01 00 00 00 31 d2 f0 0f b0 17 <75> 06 5a c3 cc cc cc cc 56 0f b6 f0 e8 9f ff ff ff 5e 5a c3 cc cc [ 1265.520620][ C0] RSP: 0018:ffffc90000007f70 EFLAGS: 00000046 [ 1265.520635][ C0] RAX: 0000000000000001 RBX: ffff8880b86281c0 RCX: 0000000000000000 [ 1265.520647][ C0] RDX: 0000000000000000 RSI: 0000000000000004 RDI: ffff8880b86281c0 [ 1265.520657][ C0] RBP: 1ffff110170c5039 R08: ffff8880b86281c3 R09: 1ffff110170c5038 [ 1265.520669][ C0] R10: dffffc0000000000 R11: ffffed10170c5039 R12: dffffc0000000000 [ 1265.520681][ C0] R13: 1ffff110170c503a R14: ffff8880b86281d0 R15: ffff8880b86281c8 [ 1265.520693][ C0] FS: 0000000000000000(0000) GS:ffff88812527c000(0000) knlGS:0000000000000000 [ 1265.520706][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1265.520718][ C0] CR2: 00002000000000c0 CR3: 0000000074a06000 CR4: 00000000003526f0 [ 1265.520732][ C0] Call Trace: [ 1265.520740][ C0] [ 1265.520747][ C0] do_raw_spin_unlock+0xf5/0x210 [ 1265.520771][ C0] _raw_spin_unlock_irqrestore+0x23/0x80 [ 1265.520791][ C0] __sysvec_apic_timer_interrupt+0x102/0x430 [ 1265.520811][ C0] sysvec_apic_timer_interrupt+0xa1/0xc0 [ 1265.520831][ C0] [ 1265.520836][ C0] [ 1265.520843][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1265.520860][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 1265.520880][ C0] Code: ec 7f 02 c3 cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 83 87 21 00 fb f4 7c 03 03 00 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 [ 1265.520892][ C0] RSP: 0018:ffffffff8e607de0 EFLAGS: 00000246 [ 1265.520905][ C0] RAX: ffff88812527c000 RBX: ffffffff819a5170 RCX: 0000000080000001 [ 1265.520917][ C0] RDX: 0000000000000001 RSI: ffffffff8c291100 RDI: ffffffff819a5170 [ 1265.520928][ C0] RBP: ffffffff8e607eb8 R08: ffff8880b86338db R09: 1ffff110170c671b [ 1265.520940][ C0] R10: dffffc0000000000 R11: ffffed10170c671c R12: 0000000000000000 [ 1265.520951][ C0] R13: 1ffffffff1cd1de8 R14: 1ffffffff1cc0fc4 R15: dffffc0000000000 [ 1265.520965][ C0] ? do_idle+0x2e0/0x540 [ 1265.520993][ C0] ? do_idle+0x2e0/0x540 [ 1265.521016][ C0] default_idle+0x9/0x20 [ 1265.521037][ C0] default_idle_call+0x72/0xb0 [ 1265.521059][ C0] do_idle+0x2e0/0x540 [ 1265.521085][ C0] ? __pfx_do_idle+0x10/0x10 [ 1265.521111][ C0] cpu_startup_entry+0x43/0x60 [ 1265.521133][ C0] rest_init+0x2de/0x300 [ 1265.521148][ C0] start_kernel+0x38a/0x3e0 [ 1265.521352][ C0] x86_64_start_reservations+0x24/0x30 [ 1265.521397][ C0] x86_64_start_kernel+0x137/0x1b0 [ 1265.521414][ C0] common_startup_64+0x13e/0x157 [ 1265.521441][ C0] [ 1265.871527][ T1265] netlink: 240 bytes leftover after parsing attributes in process `syz.6.16607'. [ 1265.880898][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 1265.887771][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1265.896870][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1265.907029][ T30] Call Trace: [ 1265.910311][ T30] [ 1265.913237][ T30] vpanic+0x56c/0xa60 [ 1265.917223][ T30] ? __pfx___schedule+0x10/0x10 [ 1265.922075][ T30] ? __pfx_vpanic+0x10/0x10 [ 1265.926576][ T30] ? nmi_trigger_cpumask_backtrace+0x1f4/0x300 [ 1265.932731][ T30] panic+0xc5/0xd0 [ 1265.936454][ T30] ? __pfx_panic+0x10/0x10 [ 1265.940864][ T30] ? preempt_schedule_common+0x82/0xd0 [ 1265.946317][ T30] ? preempt_schedule_thunk+0x16/0x40 [ 1265.951685][ T30] ? nmi_trigger_cpumask_backtrace+0x2b6/0x300 [ 1265.957835][ T30] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 1265.963982][ T30] watchdog+0x1030/0x1030 [ 1265.968320][ T30] ? watchdog+0x1c7/0x1030 [ 1265.972728][ T30] kthread+0x388/0x470 [ 1265.976873][ T30] ? __pfx_watchdog+0x10/0x10 [ 1265.981537][ T30] ? __pfx_kthread+0x10/0x10 [ 1265.986111][ T30] ret_from_fork+0x514/0xb70 [ 1265.990685][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 1265.995787][ T30] ? __switch_to+0xc89/0x1420 [ 1266.000471][ T30] ? __pfx_kthread+0x10/0x10 [ 1266.005052][ T30] ret_from_fork_asm+0x1a/0x30 [ 1266.009815][ T30] [ 1266.013113][ T30] Kernel Offset: disabled [ 1266.017426][ T30] Rebooting in 86400 seconds..