last executing test programs: 2m20.633929976s ago: executing program 3 (id=6743): r0 = socket$inet6(0xa, 0x1, 0x0) socket$key(0xf, 0x3, 0x2) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in=@multicast1, 0x0, 0x0, 0x0, 0x4, 0x2}, {0x80000000000000, 0x0, 0x0, 0x0, 0x2000, 0x0, 0xfffffffffffffffd}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback, 0x0, 0x6c}, 0x0, @in6=@private2, 0x0, 0x0, 0x0, 0x4}}, 0xe8) socket$nl_generic(0x10, 0x3, 0x10) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) r1 = socket$kcm(0x29, 0x5, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0xf3e, 0xb) 2m19.741691788s ago: executing program 3 (id=6761): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x2a, 0x2, 0x13) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) getsockopt$rose(r2, 0x104, 0x4, 0x0, &(0x7f0000000080)) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x7c, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x35288}, [@IFLA_LINKINFO={0x5c, 0x12, 0x0, 0x1, @ipoib={{0xa}, {0x4c, 0x2, 0x0, 0x1, [@IFLA_IPOIB_PKEY={0x6, 0x1, 0x1}, @IFLA_IPOIB_UMCAST={0x6, 0x3, 0x354}, @IFLA_IPOIB_MODE={0x6}, @IFLA_IPOIB_PKEY={0x6, 0x1, 0x200}, @IFLA_IPOIB_UMCAST={0x6}, @IFLA_IPOIB_PKEY={0x6, 0x1, 0xfff2}, @IFLA_IPOIB_MODE={0x6, 0x2, 0x1}, @IFLA_IPOIB_UMCAST={0x6}, @IFLA_IPOIB_UMCAST={0x6, 0x3, 0x1}]}}}]}, 0x7c}}, 0x4000080) 2m19.669440547s ago: executing program 3 (id=6764): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f00004f1000/0x3000)=nil, 0x3000, 0x2000006, 0x12, r0, 0x913e0000) r1 = socket$netlink(0x10, 0x3, 0xc) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) mmap(&(0x7f000012a000/0x4000)=nil, 0x4000, 0x80000c, 0x28012, r2, 0x80089000) sendmsg$IPSET_CMD_SWAP(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14000000060601"], 0x14}}, 0x810) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r1) r3 = socket(0x10, 0x400000000080803, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f00000001c0)=@ethtool_ringparam={0x10, 0x0, 0x48, 0xfffffffe, 0xc10, 0x7, 0x20000, 0x0, 0xf}}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f0000000400)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c0000000200fffb10000000000000f5ffffff000000"], 0x0, 0x26, 0xfffffffffffffc38}, 0x28) 2m19.505519994s ago: executing program 3 (id=6767): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0xfd63, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="4e0000fefff5ffffffde00800008000000000000", @ANYRES64=0x0, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c00028005002100000000080500010004"], 0x4c}}, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000080)={0x197036f3, 0x0}, 0x8) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x8001, 0x0, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x4}, 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000004080)=@base={0x2, 0x4, 0x4, 0xbf22, 0x400}, 0x48) mmap(&(0x7f0000fa2000/0x4000)=nil, 0x4000, 0x2, 0x82011, r3, 0x0) mmap(&(0x7f0000fa3000/0x3000)=nil, 0x3000, 0x0, 0x13, r3, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{0x1, 0xffffffffffffffff}, &(0x7f0000000200), &(0x7f0000000240)='%pI4 \x00'}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r5, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r6 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000540)=@generic={&(0x7f0000000500)='./file0\x00'}, 0x18) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000600)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)='%-010d \x00'}, 0x20) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x2, 0xfffffffb, 0x5, 0x465, 0x11101, 0x1, 0x1f200000, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x4}, 0x50) bpf$TOKEN_CREATE(0x24, &(0x7f00000007c0)={0x0, r0}, 0x8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff}) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0) setsockopt$sock_attach_bpf(r9, 0x1, 0x2a, &(0x7f0000000100)=r10, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x9, 0x26, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xd1ea, 0x0, 0x0, 0x0, 0x25d}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@cb_func={0x18, 0x2, 0x4, 0x0, 0xfffffffffffffff8}, @ldst={0x0, 0x2, 0x2, 0x8, 0x9, 0x80, 0x1}, @alu={0x4, 0x0, 0x3, 0x6, 0x6, 0x30, 0x1}, @exit, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8001}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}, @map_idx_val={0x18, 0x5, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x3}, @map_fd={0x18, 0x0, 0x1, 0x0, r4}, @generic={0x3, 0x7, 0x6, 0xf226, 0x9}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000400)='GPL\x00', 0x200000, 0x7d, &(0x7f0000000440)=""/125, 0x41000, 0x4d, '\x00', 0x0, @cgroup_sock=0x2, 0xffffffffffffffff, 0x8, &(0x7f00000004c0)={0xa, 0x1}, 0x8, 0x10, 0x0, 0x0, r1, r5, 0x0, &(0x7f00000006c0)=[r6, r7, r8, r0], 0x0, 0x10, 0x9}, 0x94) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000000c0)=r1, 0x4) 2m19.351267762s ago: executing program 3 (id=6770): r0 = socket$kcm(0x10, 0x2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0xe0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0), ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0], 0x0, 0x30, &(0x7f0000000280)=[{}, {}, {}], 0x18, 0x10, &(0x7f00000003c0), &(0x7f0000000400), 0x8, 0x64, 0x8, 0x8, &(0x7f0000000440)}}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x1e, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000600000000000000010000008520000005000000046109000400000018260000", @ANYRES32, @ANYBLOB="000000000606000007b7f849db488b0591706136", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000085200000010000009500000000000000"], &(0x7f0000000640)='GPL\x00', 0xa38, 0x8, &(0x7f0000000680)=""/8, 0x41100, 0x1b, '\x00', r1, @fallback=0x36, 0xffffffffffffffff, 0x8, &(0x7f00000006c0)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000000700)={0x0, 0xe, 0xfffffffd, 0x7af2}, 0x10, r2, 0xffffffffffffffff, 0x4, &(0x7f0000000740)=[0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1], &(0x7f0000000780)=[{0x5, 0x1, 0x9, 0x8}, {0x0, 0x3, 0xc}, {0x0, 0x4, 0xe, 0x4}, {0x1, 0x3, 0xe, 0xb}], 0x10, 0xa}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r4, 0x1, 0x4c, &(0x7f0000000000), 0x4) recvmsg$unix(r4, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x2000) socket$inet_sctp(0x2, 0x1, 0x84) r6 = socket$kcm(0xa, 0x2, 0x0) sendmsg$sock(r6, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) ioctl$int_out(r5, 0x5460, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x4, &(0x7f0000000380)=ANY=[@ANYRES64=r1], &(0x7f0000000980)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, r2, r3}, 0x94) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) r9 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r9, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r9, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) listen(0xffffffffffffffff, 0x50) setsockopt$inet_IP_XFRM_POLICY(r9, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@mcast2, 0x0, 0x0, 0xffff, 0x0, 0x2}, {0x0, 0x28c, 0x1, 0x0, 0x1f20000, 0x0, 0x2}, {0x7}, 0x0, 0x0, 0x1}, {{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2000000, 0x33}, 0x2, @in=@multicast1, 0x0, 0x3, 0x0, 0xb7, 0x0, 0x800}}, 0xe8) sendmmsg(r9, &(0x7f0000007fc0), 0x800001d, 0x0) r10 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r5, 0x84, 0x71, &(0x7f0000000a00)={0x0, 0xe43}, &(0x7f0000000a40)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r10, 0x84, 0x6c, &(0x7f0000000a80)={r11, 0x49, "7d1744d08bf73b695c7cf8b54b86c9d25a5de760cf5d1503c7dbf5c2274057871f1d42e759c7b95a0853dfcbb34f187fb916cf63854f772fa7ed9b03609a7a9aee3f1a11f0eb37191b"}, &(0x7f0000000b00)=0x51) setsockopt$sock_int(r10, 0x1, 0xf, &(0x7f00000002c0)=0x20, 0x4) setsockopt$sock_attach_bpf(r10, 0x1, 0x34, &(0x7f00000000c0)=r7, 0x4) listen(r10, 0xfffffffd) close(r10) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb01001800000000000000ebfdffff3300000002000000060000000200000f03000000040000000101000000000000feffffff000000000200000063d038020000000000000a04000000000030616100"], 0x0, 0x4e, 0x0, 0x0, 0x1}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000000068112580000000000420907ab00000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xc}, 0x90) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081064e81f782db44b904021d080006007c09e8fe55a10a0015000500142603600e1208000f0000000401a8001600a400014002000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r5, 0x0, 0x486, &(0x7f0000000340), &(0x7f00000009c0)=0xc) 2m18.221969157s ago: executing program 3 (id=6779): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_DEST(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x74, r1, 0x400, 0x70bd25, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x60, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private2}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x44}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bond_slave_1\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x5bc}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x8000}, 0x699dc5440c9c365d) r2 = syz_genetlink_get_family_id$smc(&(0x7f00000001c0), r0) sendmsg$SMC_PNETID_ADD(r0, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x50, r2, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x4008820}, 0x20000010) unshare(0x40000000) 2m3.192196219s ago: executing program 32 (id=6779): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_DEST(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x74, r1, 0x400, 0x70bd25, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x60, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private2}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x44}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bond_slave_1\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x5bc}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x8000}, 0x699dc5440c9c365d) r2 = syz_genetlink_get_family_id$smc(&(0x7f00000001c0), r0) sendmsg$SMC_PNETID_ADD(r0, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x50, r2, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x4008820}, 0x20000010) unshare(0x40000000) 1m48.548112109s ago: executing program 0 (id=7224): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$bt_hci(r0, 0x84, 0x84, 0x0, &(0x7f0000001080)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002f40)=ANY=[@ANYBLOB="40000000210a010800000000000000000a0000010900020073797a31000000000900010073797a3100000000140003"], 0x40}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007311350000000000061c0000000000009500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x22) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYRESHEX=r0, @ANYRES64=r0], 0x50) sendto$inet6(r0, &(0x7f00000002c0)="b087f24bfc00a48793ab58bcddb37f8e0e442c56e4fc021f993890ab3f129781aaf1d0b132e2cac433d54bf19a16ee27cf71e7a9dfafb5b88139d9c5854025edc59739cce6e58c9eaa291d6fb15df7a189618990456a58143e58d1bb1233da7ea464e636f8b23cea2f94fe77dce6c0e44db53b4a594420431ed626bee4018bfc41e2e0d0c4d2fc", 0x87, 0x8044, &(0x7f0000000080)={0xa, 0x4e23, 0x5, @empty, 0x5}, 0x1c) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000001c0)={{r2, 0xffffffffffffffff}, &(0x7f0000000880), &(0x7f0000000040)='%pi6 \x00'}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r5}, &(0x7f0000000000), &(0x7f0000000080)=r4}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000280)={r3}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000400008500000061000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1m48.546324476s ago: executing program 2 (id=7225): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)=ANY=[@ANYBLOB="140000001a00a21bdbbc25047c9600"], 0x14}}, 0x8004) r1 = socket$inet(0x2, 0x3, 0x33) socket$nl_route(0x10, 0x3, 0x0) socket$nl_audit(0x10, 0x3, 0x9) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001040)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r5, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x4}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), r7) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r7, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)={0x94, r8, 0x405, 0x70bd27, 0x25dfdbff, {}, [{{0x8, 0x1, r9}, {0x78, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xffff}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x20000401}, 0x44084) r10 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r10, &(0x7f00000005c0)="bad330fbc9b55400040000ea0756", 0xe, 0x40051, &(0x7f0000000080)={0x11, 0x88a8, r5, 0x1, 0xd8, 0x6, @multicast}, 0x14) getsockopt$inet_mreqsrc(r1, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) 1m48.363474274s ago: executing program 0 (id=7228): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="ab", 0x1}], 0x1, &(0x7f0000000240)=[@rights={{0x14, 0x1, 0x1, [r1]}}], 0x18}, 0x20040001) r2 = socket$tipc(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x5}}, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'xfrm0\x00', 0x0}) r4 = socket$packet(0x11, 0x3, 0x300) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000180)={'vcan0\x00', 0x0}) sendto$packet(r5, &(0x7f0000000080)="18", 0x48, 0x0, &(0x7f00000000c0)={0x11, 0xd, r6, 0x1, 0x0, 0x6, @random="42b106616fdb"}, 0x14) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000180)={'ip6tnl0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x29, 0x80, 0x2, 0x1000, 0x41, @mcast2, @local, 0x7, 0x7800, 0x4, 0x1000}}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000540)={'ip6gre0\x00', &(0x7f00000004c0)={'syztnl1\x00', 0x0, 0x4, 0x80, 0x2, 0xfffff13d, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private1, 0x8080, 0x10, 0x1000000, 0x4}}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000640)={0xffffffffffffffff, 0x58, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000700)={'syztnl0\x00', &(0x7f0000000680)={'syztnl2\x00', 0x0, 0x7800, 0x0, 0x1, 0xfffffffc, {{0xc, 0x4, 0x1, 0x1, 0x30, 0x64, 0x0, 0x0, 0x29, 0x0, @multicast1, @broadcast, {[@timestamp_prespec={0x44, 0x1c, 0x92, 0x3, 0x8, [{@empty, 0x5}, {@local, 0x7}, {@remote, 0x4}]}]}}}}}) getsockname$packet(0xffffffffffffffff, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000780)=0x14) r13 = socket$netlink(0x10, 0x3, 0x0) r14 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r13, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000074c0)=@newqdisc={0x38, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r15, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_QUANTUM={0x8, 0x2, 0x64f4}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r16 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r16, 0x8933, &(0x7f0000000080)={'netdevsim0\x00', 0x0}) sendmsg$nl_route_sched(r16, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r17, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_rr={{0x7}, {0x18, 0x2, {0x7, "bf32568d2fd41b329a5f8a92fc91d2ff"}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x44000800}, 0x4000010) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000007c0)={'wg0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000800)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000840)={'vcan0\x00', 0x0}) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000880)=0x0, &(0x7f00000008c0)=0x4) sendmsg$ETHTOOL_MSG_WOL_GET(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000900)={0x190, 0x0, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r17}]}, @HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r18}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r19}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r20}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r21}]}]}, 0x190}, 0x1, 0x0, 0x0, 0x80}, 0x4004050) sendmmsg$inet(r2, &(0x7f0000006740)=[{{0x0, 0x0, &(0x7f00000056c0)=[{&(0x7f0000001240)="80349c0d9e8fcc9f44658138dc4a3c4ad42f918348474a5bc38ff0e0571fc22c8eb5cb22fdf30ced1a4c1ccb5e5b35fed7db48c1a8a7132adc5623d146ddfe2254dd2579b4284b53d1cea6206864473d31bdb00c9d1462458b678827e80c94d88099e7471a58b1463086f9cdd1ccc19fa2fc4a9dd5a56fe782d15e66648c7630f1aaa7e9820460c46e292dbb8fa6f6701048ff17f46097b1ee0750ed038f18b81b2ba014bf866062c9a6f88b5d07e13b7eddd968ba9c7a53609c7b61471a51fd85bceebc0a92b2cd7c45a7f4571e693abebc3c5ff16c8128d92476", 0xdb}, {&(0x7f0000000280)="5b4ea50f20d7212327afde5e7a457cde2dff791c69fbc3", 0x17}, {&(0x7f00000002c0)="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", 0xeb}, {&(0x7f0000001440)="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", 0xb82}, {&(0x7f0000002440)="253c10cd0a56ebbb9e8b465670109c340c95f1d27d36cbeb7fa948545e9b18da346b70b5dc6ea12ad1a30e4f7038336f1af1d61b04de988f1755e9b3ba9919b2a4952ceda920a7f0e22dd239d4a74f2d1c854bc64f09f979aa3e9f5c25ff8ec189e5d809483583f648cd8870291200e428", 0x71}, {&(0x7f00000024c0)="2ba671ae8107530b978dd82841597ed8f4275ed9e6b9f7b73ee6324ddf688ad9d88125b82afd2e28aef7183086ce0dd4ee880fc56a2ca8b52ef8f5b5f3e475f49b0bcd201fe612703d680fdd1151dd32535b04d4697d472c7750d6c4c197162e9f872253b611b1ca20e79dcf40d1faf58a453f8db9a03fdd351b54ad4e77fa0fda7990bb281079ae7ba3994aef7380e1d6342305e2d12c57379fd12e784f48e4e832171df4576c8724e3bfd70ebc92fc11914cd4", 0xb4}, {&(0x7f00000025c0)="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", 0xa9b}], 0x7}}], 0x300, 0x0) connect$tipc(r2, &(0x7f00000052c0)=@nameseq={0x1e, 0x1, 0x0, {0x0, 0x3}}, 0x10) close(0x3) 1m48.232678365s ago: executing program 2 (id=7233): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$l2tp(0x2, 0x2, 0x73) sendto$l2tp(r1, 0x0, 0x0, 0x2e1fafc2002a218b, &(0x7f0000000100)={0x2, 0x0, @broadcast, 0x4}, 0x10) sendto$inet6(r0, &(0x7f0000000e40)="b3019c28", 0x4, 0x0, &(0x7f0000000000)={0xa, 0x200, 0x0, @loopback, 0xffffffff}, 0x1c) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000001740)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r3, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x0, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1c, 0x3, &(0x7f0000000640)=@framed={{0x18, 0x2, 0x0, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x3b}}, &(0x7f00000000c0)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r5, r4}, 0x94) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x6, &(0x7f0000000240)=ANY=[@ANYBLOB="48c7a5ef9749087703000018180000", @ANYRES32=0x1, @ANYBLOB="0000000000000000085d0400070000009500000000000000"], &(0x7f0000000280)='syzkaller\x00', 0x80000000, 0xdc, &(0x7f00000002c0)=""/220, 0x41000, 0x2, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000003c0)={0x1e5f, 0x1, 0x3, 0x40}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000400)=[0xffffffffffffffff, r0, 0xffffffffffffffff], &(0x7f0000000440)=[{0x2, 0x4, 0x9, 0x4}, {0x1, 0x1, 0x2, 0x8}, {0x3, 0x5, 0x10, 0x8}, {0x3, 0x5, 0xc, 0x4}], 0x10, 0x1}, 0x94) r7 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000540)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) close(r8) r9 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)=ANY=[@ANYRES32=r10, @ANYRES32=r9, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r10}, &(0x7f0000000000), &(0x7f0000000080)=r8}, 0x20) r11 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000d263e14a0a00009f37d80000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000001340)={r11, &(0x7f00000012c0), 0x0}, 0x20) r12 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32, @ANYBLOB='y\n\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="01360000020000000200"/28], 0x50) r13 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000002000000000000000000000000000010000000000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x6, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8ab8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r13, @ANYBLOB="0000000000000000b703000010000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r14 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000a40)={0x1b, 0x0, 0x0, 0x100001ff, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x22}, 0x50) r15 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000680)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x7f, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2, 0x4}, 0x50) r16 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000740)=@o_path={&(0x7f0000000700)='./file0\x00', 0x0, 0x10, r1}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x19, 0x5, &(0x7f0000000900)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8}, [@map_idx={0x18, 0xa, 0x5, 0x0, 0xe}]}, &(0x7f0000000080)='GPL\x00', 0x3, 0x9f, &(0x7f0000000140)=""/159, 0x41100, 0x43, '\x00', 0x0, @fallback=0x27, r2, 0x8, &(0x7f00000000c0)={0x3, 0x4}, 0x8, 0x10, &(0x7f0000000200)={0x1, 0x7, 0xd0, 0x1}, 0x10, r5, r6, 0x0, &(0x7f0000000780)=[r7, r10, r11, r12, r13, r14, r15, r16], 0x0, 0x10, 0x4}, 0x94) socket$nl_route(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000000940)=[{{0x0, 0x57, 0x0}, 0xc45}], 0x400000000000257, 0x10162, 0x0) 1m48.050298318s ago: executing program 2 (id=7236): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000005c0)={0xffffffffffffffff, 0x58, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000940)={0xffffffffffffffff, 0xe0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x4, &(0x7f0000000640)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000680)=[0x0, 0x0, 0x0, 0x0], 0x0, 0xd1, &(0x7f00000006c0)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000700), &(0x7f0000000740), 0x8, 0x42, 0x8, 0x8, &(0x7f0000000780)}}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000003000), r5) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000003040)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER(r5, &(0x7f0000003140)={0x0, 0x0, &(0x7f0000003100)={&(0x7f00000001c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01002bbd7000fbdbdf25020000000a000900aaaaaaaaaa44000008000300", @ANYRES32=r7], 0x30}, 0x1, 0x0, 0x0, 0x20000050}, 0x20040084) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r11, {0x0, 0xfff3}, {0xffff, 0xffff}, {0x0, 0x3}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x9, 0x9, 0x81, 0xd4, 0x7, 0xfffffffb, 0x100, 0xf4e5, 0x5}}}}]}, 0x58}}, 0x20040084) sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000b00)=@newqdisc={0x24, 0x29, 0x4ee4e6a52ff56541, 0x4001, 0xfffdfdfc, {0x0, 0x0, 0x0, r11, {}, {0xffff, 0xffff}, {0x2, 0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000010c0)={'team0\x00', 0x0}) sendmmsg$inet(r1, &(0x7f0000001140)=[{{&(0x7f0000000000)={0x2, 0x4e24, @broadcast}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000100)="d3cbf14987ca5636e30be8762535f99d52babe94140fa7493602c29d738479af37e7a01fcd3d39d50aac4fd75f0d706b48ce71605f20db03bb7a77b0d40420e1ab7265b30b623736d7746c76482a971460129a2b3e303b31b4cb81f36aefb1c99ab6cf88f9b82344127228fabbdcb3b9da6714634084f2a5440b64cc7b28dded20", 0x81}, {&(0x7f0000000040)}], 0x2, &(0x7f0000000240)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private=0xa010100, @loopback}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xcd}}, @ip_retopts={{0x24, 0x0, 0x7, {[@generic={0x89, 0x11, "0481de8e67904ec316fc394b71b96a"}]}}}], 0x60}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000300)="ac0b8402dfda72b1770da26b2f99367542c56cc980a23c770f907d", 0x1b}, {&(0x7f0000000340)="7a92cb0b4a59dcbb87d9755fd2297a2399e680bd357253ac25c35529485a915a34759d717884fff6f6556c3880efed0b1001c8e2d177b5ce9c6f7e0f720479f8a65f8944c431af353f5af804cbafdc58626d6e1ef2b7235fa408ec2f0ba9226af701c400adc60c91d1d6d86a5561b99dcf8dd08e751ac1851c5ea5aad197141a37a86caac976912be191eae092a1e025b92185a12891f460cc4d1243f3f9d3b575760179b7985d22b3eca746420c95245c9036dd54bbc30f8c9ba7d1509a16c77f0f62ed0a990e49bd2357ebc721ee9a73209029260a0e", 0xd7}, {&(0x7f0000000440)="3f5afab09d8fff74e41c952b5edf7701a38845a120a03b44578bf8a2dbf0b9e7071472644772f80a176889c4ae1920997c70d6f3e08f184102a1aa43ddcc3a22ae", 0x41}, {&(0x7f00000004c0)="c18db293ef0c8247fa5e75bfa68603d9f2c249d878dc11c4aa2692b9da461b0bd1fd7ebe0e6fd9d7130780dd977a9ce42a3e9b90035ee59f8d27060dd3", 0x3d}], 0x4, &(0x7f0000000980)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @multicast2, @loopback}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x1000}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @remote, @remote}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r7, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x9}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xa}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xaed}}, @ip_ttl={{0x14, 0x0, 0x2, 0x1}}], 0xd8}}, {{0x0, 0x0, &(0x7f0000000c80)=[{&(0x7f0000000a80)="9ddcb5e9f7d933d432fbf21583b430d97b82b6607de6da2c53928d1e949831376cc9a6517d4a52bd2566fa0931e62b7a274b9621cce5102f030ef60d9a02f414556a15b5edc4207e69833570f25418301d4593023d63ee63a65471e2c8e89d8d09df92aa86a116", 0x67}, {&(0x7f0000000b00)="b549fbe36f6c710f0c45b1747fc820a67cf7857b95d68f4c4da921fc9dad7a83293372d6ecca00dbd8c50daa4e63dca851c77e89c52354d199d7894346d2388c8f", 0x41}, {&(0x7f0000000b80)="c091ff6ca7b714586e440c810f56c5aa6f72ffd6c1b333628e108333d441762eb7baff30626a1bf1af2d15b4274ad0f76f478f3e3dc7154eef69cc0137d18803da1f0d72e4bf0688651335b8a7a9b69846d9ae74a6d277dce4a258d716c678684ebc0a2e5ffb3ab08cd0559991e21678115bd5608f0d4fedc70ad32e5d200b5d6aa456dab65a1fd098ab8b0f73e8359122db021fe85cd69a9105f20717d50c0ed61af2432fc8c29a576feaa665364c561735d5a6432afec1a6ed2f77c4cfb704962a2d24c94173870511", 0xca}], 0x3, &(0x7f0000000cc0)=[@ip_ttl={{0x14, 0x0, 0x2, 0x2b}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @rand_addr=0x64010102, @rand_addr=0x64010101}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x8}}], 0x50}}, {{&(0x7f0000000d40)={0x2, 0x4e20, @broadcast}, 0x10, &(0x7f0000000f80)=[{&(0x7f0000000d80)="7ccfde428806677e8c098962f4e6a75e6b0528c6102bac6dd1d2f5f88c6cb83b2a6b8dc3abe416ccbf95706f3bd24647d61a0478d850b51877158ed727bcd98acab82362fc036d3f4f383dfd3f674dc4ed42b480ff3119e310f0a22409f1e31c3f85ee0c4964106dd9f44157e78f058e9d98f89d303e4cc5ae366a7e284573172c8ffd1aa99ca43287a37758d59a7dc7995490f0c6e0dd3c477af361096aae8a46ceb5b4df87c126b16ec0ef1ca7ee0e3ee5767574f6a82d26a1f56f896bdcbbe8eb7d2f92b78b06", 0xc8}, {&(0x7f0000000e80)="eef97fbc965867e93b03f3d376478cc6452a7787b8f4c3f29710161fe2e2ac91211ba901e7794ac213ad5c6d35a4f2f922cf77d7ce77e12bc5950d15a5db47935ab50226a690646d6b4b689911052e20a98d369cf05a4f7494381f37f21e4551be1832e8afc0a5006353f831bfedbc321eeabefb7ab9ac07ce79b4287b262263f2b3d00da008537d47b6ce9c44c9937f0f35cbf71cdcb802457f6bd8d0f7695fe6308b013ae1e9f4600c2025c4a03c8252da1a634605cc4fb39d60a1b6e0a0e69894dc6dbde723ff44a9e7d96b48d693e025d7d24e509d2faf", 0xd9}], 0x2, &(0x7f0000000fc0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r11, @loopback, @rand_addr=0x64010102}}}, @ip_retopts={{0x44, 0x0, 0x7, {[@generic={0x88, 0x10, "bd10e6e68ee9b26714b8cdfc685b"}, @noop, @timestamp={0x44, 0x18, 0x54, 0x0, 0x3, [0x1dc, 0x9, 0xffffffff, 0xff, 0x6]}, @rr={0x7, 0x7, 0x2, [@initdev={0xac, 0x1e, 0x0, 0x0}]}, @end]}}}, @ip_retopts={{0x14, 0x0, 0x7, {[@noop]}}}, @ip_ttl={{0x14}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x5}}, @ip_ttl={{0x14, 0x0, 0x2, 0x1}}], 0xc8}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001100)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x4}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r12, @multicast1, @local}}}], 0x38}}], 0x5, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x7, 0x4, &(0x7f0000000480)=@framed={{}, [@alu={0x4, 0x1, 0x3, 0x0, 0x0, 0x1}]}, &(0x7f00000005c0)='syzkaller\x00', 0x2}, 0x90) sendmsg$NFT_BATCH(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x17}, @NFTA_CT_DREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x7, 0xffffffffffffffff, &(0x7f0000000080)=0x20) 1m47.88238313s ago: executing program 0 (id=7239): r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f00000002c0)={0x190, r2, 0x3, 0x70bd29, 0x25dfdbfd, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8}, {0x6, 0x11, 0x5}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8}, {0x6, 0x11, 0x5}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x5}, {0x6}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0x7f}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x81}, {0x6, 0x11, 0x401}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0xc9}, {0x6, 0x11, 0x7}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x5af4}, {0x6, 0x11, 0xfff7}}]}, 0x190}, 0x1, 0x0, 0x0, 0x48015}, 0x80) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000008000000000000001c2df6f270000000fad413ec50000000f00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r3}, 0x10) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="9000000020001f", 0x7, 0x0, 0x0, 0x0) r5 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r5, &(0x7f0000000000)='.', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r4}, 0x10) close(0x4) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000015c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DISCONNECT(r1, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001600)={0x3c, r6, 0x1, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0xd}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x36}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x15}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x9}]}, 0x3c}}, 0x4) 1m47.675657065s ago: executing program 2 (id=7243): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x32}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x5}}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f00000000c0)=@name={0x1e, 0x2, 0x0, {{0x42, 0x3}}}, 0x10) r3 = accept4$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @private0}, &(0x7f0000000200)=0x1c, 0x80000) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, &(0x7f0000000240)=[@in={0x2, 0x4e20, @empty}, @in6={0xa, 0x4e21, 0x21a, @private2, 0x10}], 0x2c) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x1}, 0x10) r4 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000080)={0x42, 0x80000009, 0x2}, 0x10) r5 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r5, &(0x7f0000000380)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000884}, 0x4) bind$alg(r0, &(0x7f0000000600)={0x26, 'hash\x00', 0x0, 0x0, 'xcbc(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r6 = accept4(r0, 0x0, 0x0, 0x80000) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0xc, &(0x7f0000000000)=@framed={{}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r7}, {}, {}, {}, {0x7, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffe00}, {}, {}, {0x85, 0x0, 0x0, 0x55}}]}, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$DEVLINK_CMD_RATE_NEW(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, 0x0, 0x20, 0x70bd29, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x20000814) connect$rxrpc(r6, &(0x7f0000000080)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e23, 0x0, @remote, 0x8}}, 0x24) 1m47.670852545s ago: executing program 0 (id=7244): ioctl$BTRFS_IOC_FS_INFO(0xffffffffffffffff, 0x8400941f, &(0x7f0000000000)) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000400)={0xf, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x9, "7c2aa0c9d12be0"}) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f0000001400)={{r1, 0x3, 0x7ff, 0xfffffffffffffffb, 0x8, 0x5, 0x5, 0x80000000, 0x3, 0x70, 0x678bfd3f, 0x1, 0x1, 0x15ee, 0x4}}) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r0, 0xf50f, 0x0) r2 = accept4$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000002400), 0xc00) getsockopt$PNPIPE_IFINDEX(r2, 0x113, 0x2, &(0x7f0000002440)=0x0, &(0x7f0000002480)=0x4) getsockopt$IP_SET_OP_GET_FNAME(r2, 0x1, 0x53, &(0x7f00000024c0)={0x8, 0x7, 0x0, 'syz2\x00'}, &(0x7f0000002500)=0x2c) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000002540)={r2}) connect$unix(r4, &(0x7f0000002580)=@abs={0x0, 0x0, 0x4e22}, 0x6e) r5 = accept4$rose(r4, &(0x7f0000002600)=@full={0xb, @dev, @remote, 0x0, [@rose, @default, @remote, @remote, @netrom, @rose]}, &(0x7f0000002640)=0x40, 0x80000) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f00000026c0)={'wlan0\x00', &(0x7f0000002680)=@ethtool_ts_info}) ioctl$SIOCRSACCEPT(r4, 0x89e3) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000002700)={'team_slave_0\x00'}) getsockopt$inet_mptcp_buf(r4, 0x11c, 0x2, &(0x7f0000002740)=""/93, &(0x7f00000027c0)=0x5d) setsockopt$inet6_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000002800)=0x1, 0x4) sendmsg$TIPC_NL_LINK_SET(r4, &(0x7f0000002940)={&(0x7f0000002840)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000002900)={&(0x7f0000002880)={0x64, 0x0, 0x800, 0x70bd2a, 0x25dfdbfd, {}, [@TIPC_NLA_SOCK={0x50, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x668a}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x80000000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3ff}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7ff}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5686}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x10}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xfffffc01}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xfffff000}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x8000}, 0x24000100) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000002980)=0x0) connect(r5, &(0x7f00000029c0)=@nfc={0x27, r7, 0x1, 0x6}, 0x80) pipe(&(0x7f0000002a40)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f0000002ac0)=@raw={'raw\x00', 0x9, 0x3, 0x370, 0x0, 0xffffffff, 0xffffffff, 0x118, 0xffffffff, 0x2a0, 0xffffffff, 0xffffffff, 0x2a0, 0xffffffff, 0x3, &(0x7f0000002a80), {[{{@ipv6={@loopback, @empty, [0xff, 0xff, 0xff000000], [0xff000000, 0xffffffff, 0xff000000], 'veth1_to_team\x00', 'veth1_to_bond\x00', {}, {}, 0x84, 0x4, 0x2, 0x2}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@eui64={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x7, 0x7618, 0x512c, 'syz0\x00', {0x6}}}}, {{@ipv6={@remote, @mcast2, [0xff, 0xffffff00, 0x0, 0xff], [0xffffff00, 0xffffffff, 0x0, 0xff000000], 'team_slave_0\x00', 'ip_vti0\x00', {0xff}, {0xff}, 0x16, 0x4, 0x1}, 0x0, 0x160, 0x188, 0x0, {}, [@common=@icmp6={{0x28}, {0x284b1cb5f890ba5c, "ca43", 0x1}}, @common=@srh1={{0x90}, {0x62, 0x0, 0x9, 0x26, 0xda, @private0={0xfc, 0x0, '\x00', 0x1}, @local, @mcast2, [0xffffffff, 0xffffff00, 0x0, 0xffffff00], [0x0, 0xffffffff, 0xbfba3edd6aeb9927, 0xffff00], [0xffffff00, 0xff000000, 0xff, 0xff], 0x1020, 0x3004}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x1, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d0) socket$kcm(0x29, 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r6, 0x6, 0x23, &(0x7f0000003040)={&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000002ec0)=""/236, 0xec, 0x0, &(0x7f0000002fc0)=""/86, 0x56}, &(0x7f0000003080)=0x40) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$gtp(&(0x7f0000003100), r9) sendmsg$GTP_CMD_ECHOREQ(r10, &(0x7f0000003200)={&(0x7f00000030c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000031c0)={&(0x7f0000003140)={0x48, r11, 0x800, 0x70bd27, 0x25dfdbfd, {}, [@GTPA_TID={0xc, 0x3, 0x1}, @GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_TID={0xc}, @GTPA_PEER_ADDR6={0x14, 0xb, @private0}]}, 0x48}}, 0xcfdb1be0fcd6f53) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r8, 0x84, 0x70, &(0x7f0000003240)={0x0, @in6={{0xa, 0x4e21, 0x39, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x7}}, [0x7fffffff, 0x2, 0x6, 0x4, 0xb1c0, 0x3c, 0x0, 0xa, 0x0, 0x0, 0x962, 0xfffffffffffffeff, 0x5, 0x0, 0x8]}, &(0x7f0000003340)=0x100) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r4, 0x84, 0x71, &(0x7f0000003380)={r12, 0x5}, 0x8) setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f00000033c0)={@private1, r3}, 0x14) 1m47.328478935s ago: executing program 2 (id=7248): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0xc, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000300)={r5, r2, 0x25, 0x0, @val=@tcx={@void, @value=r5}}, 0x1c) syz_emit_ethernet(0xd87, &(0x7f0000001980)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @multicast, @void, {@llc={0x4, {@snap={0x1, 0x1, '+', "39f266", 0x88be, "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"}}}}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0x3, &(0x7f0000000080)=0x5, 0x4) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r6, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0xb0, 0x3, 0x8, 0x201, 0x0, 0x0, {0x7, 0x0, 0x8}, [@CTA_TIMEOUT_DATA={0x44, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_SHUTDOWN_ACK_SENT={0x8, 0x7, 0x1, 0x0, 0x3}, @CTA_TIMEOUT_SCTP_SHUTDOWN_RECD={0x8, 0x6, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_SCTP_HEARTBEAT_SENT={0x8, 0x8, 0x1, 0x0, 0x80000001}, @CTA_TIMEOUT_SCTP_ESTABLISHED={0x8, 0x4, 0x1, 0x0, 0xc2}, @CTA_TIMEOUT_SCTP_HEARTBEAT_SENT={0x8, 0x8, 0x1, 0x0, 0x62}, @CTA_TIMEOUT_SCTP_HEARTBEAT_SENT={0x8, 0x8, 0x1, 0x0, 0x679}, @CTA_TIMEOUT_SCTP_SHUTDOWN_SENT={0x8, 0x5, 0x1, 0x0, 0x7ff}, @CTA_TIMEOUT_SCTP_COOKIE_WAIT={0x8, 0x2, 0x1, 0x0, 0x2}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x886c}, @CTA_TIMEOUT_DATA={0x2c, 0x4, 0x0, 0x1, @udp=[@CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0xffffffff}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0xfff}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x5}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0xc}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x5}]}, @CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x3ff}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x2}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8917}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}]}, 0xb0}, 0x1, 0x0, 0x0, 0x40000}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1400939dbded0b72b040c13bd0cd5500001000010000000000000000000000000a64000000060a0b040000000000000000070000003800048034000180090001006861736800000000240002800800044000008001080007400000000108000240b0ecc880de1ada4d000000090900010073797a3000000000097a3200000000140000001100010000000000000000000000000a8a72f2a3a8729f8eb9e98b96f59507a82b17eaa07d37d8c89e04c50989b88b377bf457e39338adca92d782c7bd23e29335322ceb8d3dab71819341328ab9bcc57f"], 0x8c}}, 0x0) r7 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000280)={0xffffffff}, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c00)={0x24, 0x12, 0xa01, 0x0, 0x0, {0x7, 0x2}, [@nested={0x10, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}]}]}, 0x24}}, 0x0) ioctl$sock_rose_SIOCRSCLRRT(r7, 0x89e4) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[], 0x30}}, 0x0) 1m47.327319481s ago: executing program 0 (id=7249): clock_gettime(0x0, &(0x7f0000000740)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000100)={0x81, 0xa0b, 0x2, 0x9, 0x2, 0x100000000, 0x5f, 0x1}, &(0x7f0000001340)={0x5, 0x20000053a9, 0x5, 0x2, 0x6, 0x8, 0x7fffffff, 0x6}, &(0x7f00000001c0)={0x1516, 0x80000000, 0x7, 0x81, 0x4, 0x7, 0x7, 0x2}, &(0x7f0000000200)={r0, r1+60000000}, &(0x7f0000000280)={&(0x7f0000000240)={[0x7]}, 0x8}) r2 = socket(0xa, 0x1, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000300)=@raw={'raw\x00', 0x9, 0x3, 0x320, 0x140, 0xffffffff, 0xffffffff, 0x140, 0xffffffff, 0x250, 0xffffffff, 0xffffffff, 0x250, 0xffffffff, 0x3, &(0x7f0000000100), {[{{@uncond, 0x0, 0xf8, 0x140, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@eui64={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x401, 0xfffffff0, 0x1, 'syz1\x00', {0x7}}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private1={0xfc, 0x1, '\x00', 0x1}, [0xff, 0xff, 0xffffff00, 0xffffff00], [0xff000000, 0xff000000, 0xffffffff, 0xffffffff], 'vcan0\x00', 'dummy0\x00', {}, {}, 0x0, 0x0, 0x1, 0x5b}, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x1a, 0x9, 0xffffffff, 0x0, 'snmp_trap\x00', 'syz0\x00', {0x5}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x8, 0xe, &(0x7f0000000880)=ANY=[@ANYRESHEX=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb}, 0x94) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) r5 = socket(0x2, 0x80805, 0x0) getsockopt$bt_hci(r5, 0x84, 0x80, &(0x7f0000000000)=""/4102, &(0x7f0000001080)=0x1006) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x8, 0x0, &(0x7f0000003c00)) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000080)={0x0, 0x3}, &(0x7f00000000c0)=0x8) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000200)={'bond0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="400d0000000000002800128008000100687372001c00028008000200", @ANYRES32=r10, @ANYBLOB="08000100", @ANYRES32=r9], 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x20008000) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r2, 0x84, 0x5, &(0x7f0000000240)={r7, @in={{0x2, 0x4e20, @multicast1}}}, 0x84) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000cc0)=@filter={'filter\x00', 0xe, 0x3, 0x4d2, [0x0, 0x2000000007c0, 0x20000000093e, 0x200000000b0c], 0x0, &(0x7f0000000780), &(0x7f0000000dc0)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff01000000030000003100000000117465616d5f736c6176655f300000000070696d726567000000000000000000006261746164763000000000000000000076657468305f766c616e0000000000000180c2000000ffffff00ffffaaaaaaaaaa37ff000080ff006e000000160100004e0100004e464c4f4700000000000000000000000000000000000000000000000000000050000000000000008604000003007f000100000024ce96094817f758556345ee65aa103de0fb66373318d0bf37d2ed83aac6869f917286e8bf14ab05c4a9d525764524bccba4c67229d6b3ad0af98d577796375600000000434f4e4e5345434d41524b00000000000000000000000000000000000000000008000000000000000100000000000000646e6174000000000000000000000000000000000000000000000000000000001000000000000000ffffffffffff0000fdffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000001000000fcffffff010000000500000010000000884776657468305f766c616e00000000000076657468315f746f5f7465616d00000073797a5f74756e00000000000000000062726964c40000000000000000000000aaaaaaaaaabb00000000ff00aaaaaaaaaa0b00ff00ffffffd6000000560100009e010000637075000000000000000000000000000000000000000000000000000000000008000000000000000100000001000000636c7573746572000000000000000000000000000000000000000000000000001000000000000000020000000180000028000000000000006c6f67000000000000000000000000000000000000000000000000000000000028000000000000000b61d5e4ce7e855cc583c22bcb683fbfde796993fe994b62f1738ddbe7ec5a00080000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000fcffffff000000004552524f520000000000000000000000000000000000000000000000000000002000000000000000482d55f75bbf3376c036636e3eec9cf25ce41a7a73b47d4197447a37e983000000000000000000000000000000000000000000000000000000000000000000000000000002000000feffffff010000000300000001000000080073797a6b616c6c65723100000000000069703665727370616e300000000000006970766c616e3100000000000000000064766d72703000000000000000000000b8301171de7b00ff000000008692fdde0db6ffff0000ff006e000000de00000056010000646e6174000000000000000000000000000000000000000000000000000000001000000000000000bbbbbbbbbbbb0000feffffff00000000646e6174000000000000000000000000000000000000000000000000000000001000000000000000aaaaaaaaaaaa000010000000000000006e666c6f67000000000000000000000000000000000000000000000000000000500000000000000002000000010009000000000037bce0458b20dca2d59870059730be3db28fd2f55c2afc4fa2c8218f6347d49b77a66072bf8dcd474598fc63c7b5091f9aa6ccf73057016dc87487240bd0c02c00000000bce583eaad9ef6655baa4ef587d0b90ab3ed51b48ab126cf1a9cfe37a5a3683ee2470a94bd472e40a2c8b8b62fca779fd79427970b98f1d6edb1f4219e8b11d909685ca1bab14c7352ad5f7820c8b0ffe17c3061c102097524bc3b096cbf67c6faa632bec9ac90cb684edbd9fb5122c3ea"]}, 0x5bb) connect$llc(0xffffffffffffffff, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random="0000000200"}, 0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) r12 = socket(0x10, 0x3, 0x0) r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0x6, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000faffffff0000000000004000850000002c0000001800000004000000000000000700000095"], &(0x7f0000000200)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r13, 0x27, 0xe, 0x0, &(0x7f0000000640)="ed7e17526b2d6f70ac1ae867fd2a", 0x0, 0x0, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) r14 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r14, &(0x7f0000000100)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000060000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff0000000309", 0x48}], 0x1) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, 0x0, &(0x7f0000000040)=0xffd2) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000d40)={r11, 0x0, 0x100, 0xb4}, &(0x7f0000000d80)=0x10) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r12, 0x84, 0x9, &(0x7f0000000680)={r7, @in={{0x2, 0x4e22, @multicast1}}, 0x9c00, 0x8, 0x7, 0x7, 0x2c, 0x5, 0x1d}, &(0x7f0000000140)=0x9c) 1m47.121962063s ago: executing program 2 (id=7256): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg$unix(r1, &(0x7f0000003380)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40012000, 0x0) sendto$unix(r0, &(0x7f0000000000)="ba", 0x1, 0x48005, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000d, 0x4008031, 0xffffffffffffffff, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r2, 0x0, 0x2b, &(0x7f0000000000)={0x7, {{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {{0x2, 0x4e23, @local}}}, 0x108) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x68c000, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000240)=ANY=[@ANYBLOB="e80000006c00010029bd7000fcdbdf2500000000", @ANYRES32, @ANYBLOB="001000008000000008000f002000000014003500726f7365300000000000000000000000a40034801400350070696d367265673000000020000000001400350076657468305f6d614176746170000000140035006d61637674617030020000000000000014003500677265300000000000000000000000001400350076657468305f746f5f626174616476001400350001657468315f6d6163767461700000001400350067726530000000000000000000000000140035006261746164765f736c6176655f31000008000f"], 0xe8}}, 0x0) close(r3) 1m46.870383663s ago: executing program 33 (id=7256): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg$unix(r1, &(0x7f0000003380)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40012000, 0x0) sendto$unix(r0, &(0x7f0000000000)="ba", 0x1, 0x48005, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000d, 0x4008031, 0xffffffffffffffff, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r2, 0x0, 0x2b, &(0x7f0000000000)={0x7, {{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {{0x2, 0x4e23, @local}}}, 0x108) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x68c000, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000240)=ANY=[@ANYBLOB="e80000006c00010029bd7000fcdbdf2500000000", @ANYRES32, @ANYBLOB="001000008000000008000f002000000014003500726f7365300000000000000000000000a40034801400350070696d367265673000000020000000001400350076657468305f6d614176746170000000140035006d61637674617030020000000000000014003500677265300000000000000000000000001400350076657468305f746f5f626174616476001400350001657468315f6d6163767461700000001400350067726530000000000000000000000000140035006261746164765f736c6176655f31000008000f"], 0xe8}}, 0x0) close(r3) 1m46.865420656s ago: executing program 0 (id=7258): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) accept4(r1, 0x0, 0x0, 0x800) shutdown(r1, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r2) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000140)=ANY=[@ANYBLOB="d0000000", @ANYRES16=r3, @ANYBLOB="010000000000000000000100000008000100000000000400048008000c8004000b800800020001000000a00008801c0007800837d73ec300000008000600000000000800050000000000240007800800050000230000000005000000000061ff0500000000000800050000000000040007"], 0xd0}}, 0x0) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="140100002e0001000000000042d6e4fbdbdd2501"], 0x114}], 0x1, 0x0, 0x0, 0x41}, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) listen(r1, 0x0) (async) accept4(r1, 0x0, 0x0, 0x800) (async) shutdown(r1, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r2) (async) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000140)=ANY=[@ANYBLOB="d0000000", @ANYRES16=r3, @ANYBLOB="010000000000000000000100000008000100000000000400048008000c8004000b800800020001000000a00008801c0007800837d73ec300000008000600000000000800050000000000240007800800050000230000000005000000000061ff0500000000000800050000000000040007"], 0xd0}}, 0x0) (async) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="140100002e0001000000000042d6e4fbdbdd2501"], 0x114}], 0x1, 0x0, 0x0, 0x41}, 0x0) (async) 1m46.73851175s ago: executing program 34 (id=7258): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) accept4(r1, 0x0, 0x0, 0x800) shutdown(r1, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r2) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000140)=ANY=[@ANYBLOB="d0000000", @ANYRES16=r3, @ANYBLOB="010000000000000000000100000008000100000000000400048008000c8004000b800800020001000000a00008801c0007800837d73ec300000008000600000000000800050000000000240007800800050000230000000005000000000061ff0500000000000800050000000000040007"], 0xd0}}, 0x0) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="140100002e0001000000000042d6e4fbdbdd2501"], 0x114}], 0x1, 0x0, 0x0, 0x41}, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) listen(r1, 0x0) (async) accept4(r1, 0x0, 0x0, 0x800) (async) shutdown(r1, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r2) (async) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000140)=ANY=[@ANYBLOB="d0000000", @ANYRES16=r3, @ANYBLOB="010000000000000000000100000008000100000000000400048008000c8004000b800800020001000000a00008801c0007800837d73ec300000008000600000000000800050000000000240007800800050000230000000005000000000061ff0500000000000800050000000000040007"], 0xd0}}, 0x0) (async) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="140100002e0001000000000042d6e4fbdbdd2501"], 0x114}], 0x1, 0x0, 0x0, 0x41}, 0x0) (async) 7.865863703s ago: executing program 1 (id=8776): getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000040)={@ipv4={""/10, ""/2, @multicast2}, 0x0}, &(0x7f0000000080)=0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x4, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}, [@jmp={0x5, 0x1, 0xc}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r0}, 0x94) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000001980)={0x0, 0x0, &(0x7f0000001940)={0x0, 0xf4}, 0x1, 0x0, 0x0, 0xc001}, 0x4000000) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000100)={0x0, 0xa6, "3f7bf519a65567aeab23592c84cbceba9c779c3d6762dc695785f1cc8c457f63edb0e4d4fff26b254c3f5725b647f4eec78d1dd76785d158f2ec961600cbaf71cf3428507929721ec5b8d64c54088b5ac4383f2c6334952d0da9dcd072cc872688e4db8bd864fa5b316c2a38fc5e36e6fcaccbaf221f3241db426ed7bac8e771a35d07127bacfedb450ea375a107586a0b19cdf7158ceeb59af108367364a467183c556244af"}, &(0x7f00000001c0)=0xae) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000200)={0x1, 0x1, 0x2, 0x6220d5e2, r2}, 0x10) 7.729193678s ago: executing program 1 (id=8780): bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async) r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) (async, rerun: 64) close(0x3) (async, rerun: 64) close(0x4) (async) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r2) (async, rerun: 32) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') (async, rerun: 32) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000380)={'gretap0\x00', &(0x7f0000000480)={'gre0\x00', 0x0, 0x7f20, 0x8000, 0x3, 0x6, {{0x26, 0x4, 0x1, 0x4, 0x98, 0x65, 0x0, 0x85, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x43}, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@noop, @timestamp_addr={0x44, 0x44, 0x6f, 0x1, 0x4, [{@empty}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x9}, {@multicast1, 0x1}, {@multicast2, 0x5}, {@rand_addr=0x64010102, 0x1}, {@loopback, 0x10000}, {@remote, 0x200}, {@private=0x1, 0x1}]}, @timestamp_addr={0x44, 0x2c, 0xb1, 0x1, 0x5, [{@broadcast, 0x2}, {@remote, 0x36}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@multicast2, 0x7}, {@rand_addr=0x64010100, 0x96}]}, @generic={0x44, 0xd, "88f34f700cb7ab58a2649c"}, @ra={0x94, 0x4, 0x1}]}}}}}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x18, 0x1a, &(0x7f0000000140)=ANY=[@ANYBLOB="180000000500000000000000aa8c000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000040000000001801000020756c3d00000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000006000000850000000600000018110000", @ANYRES32=r4, @ANYBLOB="00000000000000008500000075000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x7, 0x4, 0x8, 0x8}, 0x48) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000680)=@bpf_ext={0x1c, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x2a5007a7}, [@generic={0x1, 0x2, 0x6, 0x2, 0x5}, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x8}, @map_val={0x18, 0x1, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x40}, @func={0x85, 0x0, 0x1, 0x0, 0x2}, @alu={0x7, 0x1, 0x7, 0x0, 0x8, 0xfffffffffffffffe, 0x8}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x4}]}, &(0x7f0000000240)='syzkaller\x00', 0xf39, 0x3b, &(0x7f0000000340)=""/59, 0x41100, 0x8, '\x00', r3, 0x0, r0, 0x8, &(0x7f0000000540)={0x6, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x14301, r1, 0x1, &(0x7f0000000580)=[r4, r0, 0x1, r5], &(0x7f0000000640)=[{0x4, 0x2, 0xa, 0xb}], 0x10, 0x5}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r6, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) (async) close(0x4) (async) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x41071, 0xffffffffffffffff, 0x0) splice(r8, &(0x7f0000000040)=0xfffffffffffffffb, r7, 0x0, 0x200800000000ff, 0x4) r9 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f0000000fc0)=@raw={'raw\x00', 0x3c1, 0x3, 0x310, 0x0, 0x111, 0x4b4, 0x130, 0xd4feffff, 0x240, 0x20a, 0x278, 0x240, 0x278, 0x3, 0x0, {[{{@ipv6={@remote, @empty, [0x0, 0xffffff00], [], 'nicvf0\x00', 'team_slave_0\x00', {}, {}, 0x6, 0xfe}, 0x0, 0x108, 0x130, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[0x0, 0x1], [0x0, 0x1], 0x8, 0x0, 0x80, 0xe}}, @common=@ah={{0x30}, {[0x4d3, 0x4d5], 0xc, 0x6, 0x1}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xf7ff}}}, {{@ipv6={@loopback, @mcast2, [0x0, 0x0, 0x0, 0xffffffff], [], 'veth1_to_hsr\x00', 'pim6reg1\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x370) r10 = socket$netlink(0x10, 0x3, 0x0) socket$nl_crypto(0x10, 0x3, 0x15) (async) r11 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) (async) sendmsg$nl_route(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@ipv6_newrule={0x38, 0x20, 0x1, 0x70bd23, 0x0, {0xa, 0x0, 0x20, 0x40, 0x0, 0x0, 0x0, 0x7}, [@FRA_DST={0x14, 0x1, @loopback}, @FIB_RULE_POLICY=@FRA_SPORT_RANGE={0x8, 0x17, {0x4e24, 0x4e24}}]}, 0x38}, 0x1, 0x0, 0x0, 0x24048844}, 0x0) sendmsg$nl_route(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x0) 7.551183285s ago: executing program 1 (id=8782): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000480)="b19cccf184f531d9ec214627c11430d1", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f00000009c0)=[{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)="3f5e978e345482212cf7cd37be", 0xd}, {&(0x7f0000000000)="ece600", 0x3}], 0x2, 0x0, 0x0, 0x20000000}], 0x1, 0x24000040) recvmmsg(r1, &(0x7f0000000ac0)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)=""/240, 0xf0}], 0x1}, 0x3}], 0x1, 0x2120, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r3, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) r4 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r4, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x43, 0x1, 0x9}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1}, 0x10) close(0x3) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000680)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010028bd7000fddbdf250700000008000300", @ANYRES32=r7, @ANYBLOB="0c009900ff070000700000001400040073797a6b616c6c657230000000000000080005000800000071d7"], 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) connect$netlink(r2, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000001500)=@newtaction={0x18, 0x31, 0x829, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) 6.617892493s ago: executing program 1 (id=8796): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@ipv6_newrule={0x4c, 0x20, 0x1, 0x0, 0x25dfdbfc, {0xa, 0x80, 0x4908d13283d17e5f, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3001a}, [@FIB_RULE_POLICY=@FRA_DPORT_RANGE={0x8, 0x18, {0x4e24, 0x4e24}}, @FRA_SRC={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, @FRA_DST={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x4c}}, 0x40000) socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x3c1, 0x3, 0x430, 0x0, 0x5c, 0x160, 0x0, 0x3e0, 0x360, 0x228, 0x25a, 0x360, 0x228, 0x4, 0x0, {[{{@ipv6={@remote, @dev={0xfe, 0x80, '\x00', 0xfe}, [], [], 'veth0_to_batadv\x00', 'pim6reg\x00', {0xff}, {}, 0x3a}, 0x5002, 0x208, 0x250, 0x52020000, {0x0, 0x6802000000000000}, [@common=@icmp6={{0x28}, {0x12, "d176", 0x1}}, @common=@rt={{0x138}, {0x5, [0x7fffffff, 0x3], 0x742e, 0x4, 0x6, [@private1={0xfc, 0x1, '\x00', 0x1}, @private2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private1, @local, @loopback, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, @dev={0xfe, 0x80, '\x00', 0x11}, @local, @private0, @local, @private2, @private2={0xfc, 0x2, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @broadcast}, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @mcast2], 0xc}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x1}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @empty, [0xffffffff], [], 'veth1_to_hsr\x00', 'dummy0\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x10, 0x0, 0x0, 0x0, 'snmp\x00', 'syz0\x00', {0x2}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x490) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x6b, 0x11, 0x4b}, [@ldst={0x6}]}, &(0x7f00000001c0)='syzkaller\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) r2 = socket$inet_sctp(0x2, 0x5, 0x84) sendmmsg$inet(r2, &(0x7f0000002180)=[{{&(0x7f0000000080)={0x2, 0x4e20, @private=0xa010102}, 0x10, &(0x7f00000001c0)=[{&(0x7f00000000c0)="99b1", 0x2}], 0x1}}], 0x1, 0x0) sendto$inet(r2, &(0x7f0000000300)="ab", 0x1, 0x0, &(0x7f0000000380)={0x2, 0x4e22, @local}, 0x10) sendmsg$inet_sctp(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000003c0)="4c875ca1829aeeb2fab897971b525046745505ebc3fa0ced4d959dd6e775f1094339edc27952c8cefafb0ffb253f0e93943495b57297a40d47a1c11f5548957453220e38abbdf0db533b1684902a49f816e89c0cce8ff91e93da6fdd3ff930b860f98b0dea21de358862b9f099cbda0305914b83b71e602e3823bd7e0c4169ad53d30467699b5f4f83fec9f399635f3a808f1b2cf7deaf0b4bb87270e9ba80430a99763a86e27487d6ea505848e42b93e6dc5c2271153f", 0xb7}], 0x1, &(0x7f0000000040)=[@sndinfo={0x20, 0x84, 0x2, {0x807, 0x41}}], 0x20, 0x4048801}, 0x6050) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=@newtfilter={0x43c, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, 0x0, {0x5}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_basic={{0xa}, {0x40c, 0x2, [@TCA_BASIC_POLICE={0x408, 0x4, [@TCA_POLICE_RATE={0x404, 0x2, [0x3, 0x8, 0x62, 0x2, 0x0, 0xc, 0x2, 0x7fff, 0x0, 0xffffff70, 0x19, 0xffffffa9, 0x2, 0x7, 0x80000001, 0x7, 0x3, 0x36, 0xc, 0x6, 0x6, 0x5d0bef1f, 0x400, 0x1, 0x837, 0xffffffff, 0x9fec, 0x401, 0x68, 0x9, 0xdd64, 0x1, 0x4, 0x8001, 0xfffffffe, 0x2, 0x0, 0x200, 0xfff, 0xfffffff1, 0x7, 0x4, 0xf, 0x7, 0x7469, 0xb, 0x2, 0x200, 0xff32, 0x6, 0xca, 0x4ec1, 0x1, 0x9, 0x80, 0x0, 0x10000, 0x0, 0xb4, 0x7, 0x6, 0x0, 0x0, 0x8156b2a, 0x2, 0xd5c, 0x4, 0xa0, 0x2, 0x7, 0x4, 0x0, 0x81, 0xff, 0x2, 0xe6b, 0x9, 0xa, 0xc8c, 0x1, 0xd2a, 0x6, 0xf4e, 0x9, 0x3a0, 0x3, 0x10000, 0x7ff, 0x44, 0x1, 0x2, 0x800, 0x3, 0x8, 0x0, 0x8e5e00, 0x922e, 0x0, 0x8, 0x3, 0xf, 0x4, 0x2, 0x2c000, 0x80, 0x5, 0x7, 0x2, 0x5, 0x0, 0x9, 0x6, 0x0, 0x3365, 0x1, 0x5, 0xffffffff, 0x1000, 0x0, 0x4, 0x0, 0x1, 0x2, 0x81, 0x111, 0x2, 0x5c20, 0x7f, 0x0, 0xe, 0xfffffffb, 0x6, 0x391, 0x0, 0x0, 0x3, 0x9, 0xc95d90e, 0xff, 0x2, 0x7, 0x7fffffff, 0xc7, 0x4, 0x7, 0x0, 0x9, 0xffffffff, 0x9, 0x1, 0x4, 0x3, 0x7, 0xfffffff9, 0x10, 0x2, 0xfff, 0x2, 0x6, 0x8b4, 0x600000, 0x1, 0x6, 0x0, 0x10000, 0x0, 0x3, 0x5, 0x0, 0x1000, 0x6, 0x9, 0x0, 0x1, 0x81, 0x2, 0xffff6c4b, 0x800, 0x7, 0x5, 0x7fff, 0x8, 0xffffffff, 0x9, 0x6, 0x0, 0x40, 0x67e1, 0x80000000, 0x2, 0x603c, 0x4, 0x4, 0x0, 0xfffffff8, 0x7, 0x3, 0x10, 0x400, 0xfffffe00, 0x1, 0x3, 0x0, 0xffff, 0x4, 0x6, 0x8, 0x0, 0x400, 0x1, 0x8a, 0x10, 0x2, 0x0, 0xfffffffd, 0x3, 0x7, 0x616, 0x2, 0x2, 0xd1, 0x2, 0xfffffffc, 0x8, 0xe, 0x800, 0x1, 0x4, 0xd87, 0x80000001, 0x48e0, 0x8, 0x9, 0x40, 0x400, 0x5, 0x2, 0x4e1b, 0x1, 0x1000, 0x8, 0x4, 0x3, 0x0, 0x2, 0x9, 0x2, 0x3, 0x10001, 0xffff, 0x4d, 0xd, 0x8, 0x2, 0x2, 0x8]}]}]}}]}, 0x43c}}, 0x4000) r3 = socket$inet(0x2, 0x4000000805, 0x0) sendmmsg(r3, &(0x7f0000000e40)=[{{&(0x7f0000000000)=@l2tp={0x2, 0x0, @local, 0x400}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000100)="ae10355a3319", 0x6}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="100000000000000084"], 0x10}}], 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) r4 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x2, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000004000000ffff1700c4000000000028009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0x93, &(0x7f0000000100)=""/147, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x17, 0x10, 0x0, 0x0, 0x61e5cc96}, 0x22) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB="3000000010000108fdff763f0000000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008001b000000000008001a800400"], 0x30}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=@newlink={0x5c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private2}]}}}]}, 0x5c}}, 0x0) 5.593583833s ago: executing program 1 (id=8807): r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002880)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x62, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0x28}}, &(0x7f0000000480)='GPL\x00'}, 0x94) setsockopt$sock_int(r0, 0x1, 0x9, &(0x7f00000003c0)=0x246, 0x4) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_netprio_ifpriomap(r2, &(0x7f0000000040), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r3, &(0x7f0000000200)=ANY=[@ANYBLOB='gretap0 8'], 0xa) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYRES32=r1, @ANYRES32=0x1, @ANYBLOB="0904000000000000007e", @ANYBLOB="b3f5bce692e4b313000000000038574e00"/31], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000580), 0x1000, r4}, 0x8b) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001600)={r4, &(0x7f0000000580), &(0x7f0000001580)=""/92}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={0x1, 0xffffffffffffffff}, 0x4) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000002ac0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="ff00000000000080000000000000000000000008fd10a0d6ac2bd28aba525346b8ba5a4fefcfe560bf7e793dcea0f8880ba82342a1e605b0dcadc8329d4851368667d15f3530560ec518a1e6833b61127db808542dea084b75365406aa3923d10aa0801ca69b74b42e5b7a50e1a33014483d7e2af5fa82dad19c60653f074335e2f45f1ca29f670b9a924ea2d9d83d312511f8e671967f957477d914d980babf959a10c080c21f6f4de9c1bad703827ba0872dea3dfae9db53906081022862e2b463a4544181ca81559c0285c8b4537fee167a5fe9db774a0280a88c0fa032969e577a8937a09e8c6b4804b2000000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="04000000030000000100"/28], 0x50) r7 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000100)={0x0, 0xae9}, 0xc) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000004c0)={'ip6tnl0\x00', &(0x7f0000000400)={'ip6gre0\x00', 0x0, 0x29, 0x5, 0x40, 0xfffd, 0x10, @private1, @private0, 0x7, 0x4d21cc64e12bc66d, 0x1ff, 0x2}}) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000005c0)={0xffffffffffffffff, 0x20, &(0x7f0000000580)={&(0x7f00000006c0)=""/4096, 0x1000, 0x0, &(0x7f00000016c0)=""/4096, 0x1000}}, 0x10) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r11 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r11, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r12 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r12, 0x10f, 0x87, &(0x7f00000008c0), 0x43) write$cgroup_subtree(r12, &(0x7f0000000040)=ANY=[], 0xfdef) close(r12) recvmsg(r11, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000003a80)=""/4101, 0x1005}], 0x1}, 0x2101) mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0x3, 0x28011, r10, 0xc6e9f000) mmap(&(0x7f0000867000/0x2000)=nil, 0x2000, 0x0, 0x11, r10, 0xffffe000) r13 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) r14 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x6, 0x1c, &(0x7f0000000040)=ANY=[@ANYBLOB="1808000030000000000000000000000018110000", @ANYRES32=r14, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca900000000000035090100013800002c00000000000000b7020000000000007b9af8ff00000000b509000000000000dbaaf8fff1000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffc70200000800000018220000", @ANYRES32=r13, @ANYBLOB="0000478100000000b705000008a7d0004608f0ff000056080000010000008500000007000000b70000000000e0ff9500"/64], &(0x7f0000000980)='GPL\x00', 0xb, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r15 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000026c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x4, 0x3}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000002780)={0x13, 0x26, &(0x7f0000002940)=ANY=[@ANYBLOB="1800000001010000000000008000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000b7080000000000007b8af8ff00000000b7080000030000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180000000c0000000000000400c16565b9400d289c64efd9017bda3a08800018120000fad449f2e88d39c517417989b52191d046deb069cab7984a0740da9f789bd5b5f24fdab42d62a7239b5f1c1ce2b0a6d01619f1dce793b58b086520b95f", @ANYRES32=r6, @ANYBLOB="000000000000000018240000", @ANYRES32=r7, @ANYBLOB="00000000010000008510000000000000950000000000000018350000030000000000000000000000bf91000000000000b7020000010000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000280)='syzkaller\x00', 0xb8, 0xcd, &(0x7f00000002c0)=""/205, 0x40f00, 0x20, '\x00', r8, @fallback=0x1f, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x7, 0x5}, 0x8, 0x10, &(0x7f0000000540)={0x4, 0x10, 0xffff, 0x9}, 0x10, r9, r10, 0x0, &(0x7f0000002740)=[r13, r15], 0x0, 0x10, 0x3}, 0x94) 5.422128838s ago: executing program 1 (id=8811): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') r0 = socket$rxrpc(0x21, 0x2, 0x2) getsockopt(r0, 0x110, 0x6, 0x0, &(0x7f0000000280)=0x51) unshare(0x6a040000) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f260006d2688a84c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) syz_emit_ethernet(0x6a, &(0x7f0000000280)={@empty, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2f}, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x3, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x2f, 0x0, @private, @multicast1}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x8100}, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x800, [0x9, 0x0]}, {}, {0x8, 0x88be, 0x2, {{0x0, 0x1, 0xff}}}}}}}}, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async) close(0x4) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') (async) socket$rxrpc(0x21, 0x2, 0x2) (async) getsockopt(r0, 0x110, 0x6, 0x0, &(0x7f0000000280)=0x51) (async) unshare(0x6a040000) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00}, 0x94) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f260006d2688a84c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) (async) syz_emit_ethernet(0x6a, &(0x7f0000000280)={@empty, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2f}, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x3, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x2f, 0x0, @private, @multicast1}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x8100}, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x800, [0x9, 0x0]}, {}, {0x8, 0x88be, 0x2, {{0x0, 0x1, 0xff}}}}}}}}, 0x0) (async) 2.546891581s ago: executing program 6 (id=8867): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0x8, &(0x7f0000001f80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0xd}, 0x48) r1 = socket$nl_rdma(0x10, 0x3, 0x14) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r4, 0x0, 0x400000008000f28, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETSTEERINGEBPF(r5, 0x400454da, &(0x7f0000000000)) splice(r3, 0x0, r2, 0x0, 0x114, 0xe) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="00010000031401"], 0x100}, 0x1, 0x0, 0x0, 0x4040024}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x2800000002000000, 0xe, 0x55, &(0x7f0000000140)="a06ad876d56a0064d082778c3938", &(0x7f0000000380)=""/85, 0x0, 0x4000000}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1e, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x15}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) 2.330202969s ago: executing program 6 (id=8870): socket$inet6_sctp(0xa, 0x5, 0x84) (async) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000001280)="b7", 0x1) getsockopt$bt_hci(r0, 0x84, 0x1, &(0x7f0000001280)=""/4107, &(0x7f00000000c0)=0x100b) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x7}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0xc, &(0x7f0000000380)=@framed={{}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r1}, {}, {0x3, 0x3, 0x3, 0xa, 0x5}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x14}}]}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x1ab0429c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$TUNSETCARRIER(r3, 0x400454e2, &(0x7f0000000040)) (async) ioctl$TUNSETCARRIER(r3, 0x400454e2, &(0x7f0000000040)) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) write$tun(r3, &(0x7f0000000280)={@val={0x0, 0x88f8}, @void, @eth={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x18}, @val={@void, {0x8100, 0x0, 0x0, 0xfff}}, {@generic={0x88fb}}}}, 0x16) (async) write$tun(r3, &(0x7f0000000280)={@val={0x0, 0x88f8}, @void, @eth={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x18}, @val={@void, {0x8100, 0x0, 0x0, 0xfff}}, {@generic={0x88fb}}}}, 0x16) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$can_raw(0x1d, 0x3, 0x1) r7 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000640)=@raw={'raw\x00', 0x3c1, 0x3, 0x380, 0x128, 0x1170, 0x1398, 0x128, 0x1170, 0x2b0, 0x1398, 0x1398, 0x2b0, 0x1398, 0x3, 0x0, {[{{@ipv6={@empty, @mcast1, [0xff, 0xffffffff], [0xffffffff], 'veth1_to_bridge\x00', 'veth0_to_hsr\x00', {}, {}, 0x2b, 0x3b, 0x3}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@ah={{0x30}, {[0x4d4, 0x4d3], 0x2, 0x9, 0x7}}, @inet=@rpfilter={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0xfffe, 0x10, 0x2}}}, {{@uncond, 0x0, 0x160, 0x188, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x2}}, @common=@srh1={{0x90}, {0x1, 0x0, 0x0, 0x0, 0x0, @loopback, @private0, @loopback, [0x0, 0x0, 0x0, 0xff], [], [0xffffff, 0x0, 0xff000000], 0x0, 0x803}}]}, @common=@unspec=@NFQUEUE0={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x43c) sendmsg$NFNL_MSG_ACCT_NEW(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRESDEC=r6], 0x28}}, 0x1) (async) sendmsg$NFNL_MSG_ACCT_NEW(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRESDEC=r6], 0x28}}, 0x1) 1.978320804s ago: executing program 4 (id=8877): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket(0x10, 0x803, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="450a00000000000061118400000000001800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x90) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r1) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="600000001000370400"/20, @ANYRES32=r2, @ANYBLOB="8304050000000000400012800b000100697036746e6c00003000028089578b840ba8868f000000000000000000000001060011004e22000005000900040000000500060007000000"], 0x60}, 0x1, 0x0, 0x0, 0x9005}, 0x0) sendmmsg$inet(r0, &(0x7f0000000880)=[{{&(0x7f0000000580)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880) 1.882095988s ago: executing program 5 (id=8878): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x401, 0x20000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0xfffffffffffffd38}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x240008c4}, 0x0) bind$netlink(r0, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbfb, 0x10000000}, 0xc) 1.878009783s ago: executing program 6 (id=8879): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000540)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in=@remote, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0xf0}, {@in6=@mcast2, 0x0, 0x3c}, @in=@local, {0x200000, 0x0, 0xffffffffffff7fff}, {}, {}, 0x0, 0x0, 0x2}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x138}}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000002580)={&(0x7f0000002480)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000002540)={&(0x7f00000024c0)=ANY=[@ANYBLOB="60000000210004002dbd7000fbdbdf250a148006040000070c00010014000200fc010000000000000000000000000000080006000600000014000100ff02000000000000000000000000000114000200fe8000000000000000000000002000aa"], 0x60}, 0x1, 0x0, 0x0, 0x40}, 0x48000) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206010100000000000000000000000005000100070000000900020073797a300000000014000780050015000000000008001240000000000d000300686173683a6e657400000000050005000a000000050004"], 0x5c}}, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2000000000000022, 0x0, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendmmsg$inet6(r4, &(0x7f0000019680)=[{{&(0x7f0000000100)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141414}}, 0x1c, 0x0}}], 0x1, 0x20004855) connect$inet6(r1, &(0x7f0000000240)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}, 0x2000000b}, 0x1c) unshare(0x62040200) socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r5, &(0x7f00000023c0)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x3, @mcast1, 0x100}, 0x1c, &(0x7f0000001880)=[{&(0x7f0000000300)="372b69ef74fc8fd060312cf275a7cde63b47408297863a724d45563c7e1f07593dc46c5b05e8740ec512a1c62e01cf215629ed907500574952fd8a45211904d16722a2d7617b3878b23daa34a6edfd46486abe129e8c5940725fe6ed4576227ae83ccdd835e1a0bff8452bf981e26ca528b6562c5bb7393a37783d16dae62a3d2ce4af1bbe8579e4e596412257ec966187b37e0648ca76a228440bf3fe94fc55b1f6f0eddacd1cc77a1b4242ad11f448b037190f11bc3fe573fed14d6b29ed0f68b6981d39cbd915c58b4fc02806071cec809bfbc4a03704690e16104c8a996bb5a2befb9411c4530544a091f9bad985a1232e", 0xf3}, {&(0x7f00000007c0)="7857dcb82c24f156d96a3e9b9abf0095e1ea3ec08992967bbf9768dd62f0e608f689a50e0751445f5f42a8c938e3b1f51cd35a9794b3e9e9b570370014de7af0e145fd9b05d4559061ffcd3bfc00c13b7ba49fa9119f0b9aa91c88df02ff105bb9533350fcc0050a1f73ad9c9b82d4669e7ca2de3c4572615fa6078c86c8baf4424b592879471a2dba36c8571d5049730513d04218d720ba151689a407b7c3780d68cfb78ff881075416d2217a2705c0a0c2dcc6fb13fb96c52332789da916134c992d5a5f091e360bfbfbb63dc7652066a8f48ea60a3aeead1c8c4e94efb72156e2fbf1b00bc89b5c2717229966a7069f59c99e205153fab221b1e7adbef793ac5930c17376c1ba87ca68c8d193ecad04ab80cca68d32fb1a1e08c0199b766b3691601cbfe009817208c2603468fc5032156f499111478de10a9b4aa011e726a5f02db3358d7913c01ac8c888e3e507ec6311b2a74b1cf6a11bf86124769187a7557726df9569d38ee148f2cf77fba02c1a855f427167d3f15bbaed1f33090ed8ebc1f91aba6579ba9d6b74e88bb02f03085dfbeea849ea4e1060b6e79350a0bc58115b883af0258c7c392c7b6833fcf1bfa579ec35e67e4d9c81913419b45f001221c3b4418a1d11ad5fff51d28ab7d345de5854e0ec8adb33b152e3987f9f5b9e2031a480f0642cda003b6a527430063b793d1308f85efce4db9529e1301da9c79ed5911ee550506418a1d4878b135b267473032088b603380181d7e34f2c9377aa511911b61f0b83d4a1dd52665080fc1cb0dce7e7109e5f895d5bf80933549c238559dd9ce1f896ac59463523ab7aab34ce452e475299613df782ad215d5fc91c3ed799a1f561e0b79221250b7271e61600b97611286af7bfabe2b67ff229d1288cb187d1c6159a25f3d1d12926e1338356ad03a41aeaf29d7f53637c917500a462d04338aae91c4c5cb7a9cfcc455c0122fa93d59a41155c3b2b8cc4ec50240fa139f14006f2fa381c14087f52dba3f05e0927a2e9c4193ae6c80cc7cc032d6d589f6e0da7c1a48acfa22c0b84b22ce03909c53b067bb57e07f32ecb8199d5f30835950f4c75cf0656bd2ea1d0e0868e99e98cb5ab7383ddb54beb9bd8ac8881d37d215693b2feee3f493c04b6d48706505c5400643c97d169909574bd337cedcdbba4824438b58223c302ffa98d1e3a43d7acd84e03aa7d59183dc9cf04ab6ca84406e9ce1d01290e8a6e5a2509e096c2cb0a94bc146aa1d02d97914103d102d5e1c2f784312d57f313df06b207981ab99ef914b2d0b1e4c504b8f8ce170fe6b8e326176534b2ba2663386a68f586b34baded3adac6e17d71d348307621bc83e1b86467637c89072cb3272cf006d5845213a1c53161ade858501e16583e9d9c0b196ea05c862f8d2272783bcad560285c00e9595cb7215b7263f3cdc8ddc4876873faeac882b4e2fa70262abd413f4fdf3e1b145ce8f6613a70718da2e3014a42da73aac658d2832e88d5a26e1e8be0d5b46aac32c76450d1d8c8dc5f54f5b9aad04db92c3e3dd23cbc05c67af8acb901d5b3037f29144bab05f420a9702bf3cb62bcfc29b31b4c51e1a35024f6781e6fc8cdbdec061f8301f2da9aee9db332b0d3822a9f3fe80b7e2294e8113e2081dfbcc8d296e4bb8bb2ec1d135b4e2a1d74973ada0d487d0b2afa2863727a4bdd2be72a79b1c671a93cd38496c93111c48be44fe29cbb7d749f96debaa15c38bd3c57ca8dd15a3b34eae2321955c22f6236dae567dbcb86a0b9297944f88bc1f34a0fbe888b4f23aee185ee0ab1cb79c3f9a039944378047d121b32bf1225dfe681fb48942bdddff00d8635137ae151e088d17e21065721137543efc46945d46053697c5c6edf92b94b3a4fa2a59b8be48044c1116dd65133f3fee34d8e8b342fc26f0c5334e2bd45c56a87875f50ecb5ef97e500794f306a09d9a7c5002ffec4dc5817686fac90d1973d7c7cfdac774c9c911f606febf55fcc3ef6906f75a3038e04d3e6663611519b1496511b8e2cee3c843f0c0b4b66df4eb5ebc6a079896ef5206f89ddb7c6d72367c4f8671de6f42232d0f997b3f08034ab2eaa9fa9c7d39096790cf6065c4da2372720bd725f0e9efe4f4ebfffb12e48c9e9e521eedce9002fef98388caf4ba57121485b08717ad6702723bd3d0949111af057ff387ec571e6da145a25f675515a4ba8e1cea8c09fe663ab10b5e40ba335b225194f66a3f42996b083b34079649459470306e2df79c20ad9e39d6db52bc3761a7706c4e8e4699d1ec88e32c396e6cbac2a52129ca2bc5ad4d5e8c4b7b5ec9544c89e9fccf40bab42e870b06ada7b6749a80279419e4f02dec0422fbe596cdfeb9a898d4d00063e5228d33cc737951a56e5652f4ed4dbbdff25a3094e0ea0da114ac8482ec3f087bf361f9712e443d59437cb6c55d1b11d983cf90418b8c7b8e8eee03c56bdefefbd00b636f2730e451c4753db77a612c0194cdf11db70361f395fdef33eca67d1e5327a8a631a66dc44344b0c50803b09fce1b697da46cdd593c2a7e59d6201ead8ea2ee7461d95b0b98810fc0aaac1c977cfd799950b2f15ec05198ce417697335064beacfeed64e08e749b29c7eda91727b0953f9a2ddd852d2c5fa2cee374a9528074c4e3b19ce27e5f1cabd881efee197cd0c44dec9a6ddd109399498eb5186b1b5d8d23debff0f26197f289d722db19a098326aeca3fd18f7c62cdaa1bac71bd53fc7af9a90f8586266d0d91c217ab28790730c61be2a9e21994f1bee02ef1e1e2e8cfb896283962367e38c5a9f0010e6689a0eb8b08d6c4359048ade91a8d45ccca9b553543b695662dd9e8dc505fa8f6150330699fb592eb576a7c7af926505e31adef07873ac88bcc30c30a74dc31995ad819062d7cbdbdba0171f0c4e7b4a78dba410ac63db1a99c08cf32fa818bdaaf1bf14b40506350e38da024cdc07d2c253ccc3350d35e65272ae267b83234b77a3398d7bb6ff6c432b2cb6d72cafe2b55f86bc426345a4440d19c155b08d331505d692b71cd5f64b73ba4633258068d425d9f2a7187ac79cad97afc97613b96c17b07f011195f8dbd74523423b065da83e8ba081143d8715cdb8fb5f48f0e2a09273e6fc4878c4b0f52772fe1e03a5a3d9d1791c70dfcf5b636ae18b504d9a6999ebb4ddaf0d80202724371ebd971bed1641c53d5b1d83e772f98b0c7dbd0748b24083420de3f22b32edf262e7832e5be4d984bbf841ac13a2b4539791fca59ac3f4eca18d20311b990214ac9aafbc9ab3e1cee9b64482a128cb38f8900e0b8bf4681faf3b51eeeff59f8bfeffb37c1cd222a376888a43ec88aa0603d1a9f8f089572ec6dafb152a3f291b34cebadbe1b9499741cf0bb0315b3edd569538096059bc64058e9dc40e1a2d287ed4537bb786ef31ae4f9dd5c6f61fc6dda0230a0234e8db41677a1385ee143ee319dad2565af5256f8f86211293b4ee4a79eb9b8d426c6935ae408d29d4b13da4b1c965b7944410c97aa7856099770751078ad479f1c66bd6f981736894f22ff9e66bab278d78aba5d010a582aa0e5712385e3f4e47f2e5c25642e3a0b214a4521842eccee84ce17baa705ad2f45f0f7d257f2391584687bf5a19daeb2f80c742a5b01b32865d576037b0881497f39124bd710856997ca25c45f9ad973c075cd1ccecdab53147bc5b0881b4bc7e836481e98f14dc5fe8cc9edfa73fba9440499878d78d13df89cfa27363a7d8366fc05907e840797349ac7f1daad760487a4b1bc1efb0e5147a68c7d09927849b1d4cd087920e6d76ab9336a484ac1ea0f85ca2d582f55dcf082dd8775dcc9634049fb2065552759fe870dc5efbd95c4f5a8c1aea5ca0eb13feaecc7b52948a33a616ee21e4ee7b8e26fb2daf70f2f91adfba3ce1705f0a43e46d8451b12e10f044bba61dafd7b2e7fc79bd4bd8ec7cc7dd50821886066dd9e87409ffdd58a169ad73fd430af38f42df4929e46f31400a674d1d80db230d72c152f89f19754e56111c17904019b52e4b3b067dc7d0af38cf025ebbc96e1e986eb9fd69d9e11080b713ca8ed4358cf5b499ca3f0aacf79a60e65c1507db09a5d494c4d07bbae27ef7d7eb852e625118bc2b5cd2a47f40ea4b1c5af8b473045b323352c3a04c002b8162eb29dd6bb54d24299419bf892d24171c4c8403aed0901a121bb0e87134c8a70c2e5cde737ea4fdcef8d39c880bbf4f495e7cd2370bcf273a3fe81f2d349b1ca12152f3ccfaa778043d5a4f60bea76c14fb419d9c755acfc54acb8547e918e1ad6a5feb7293e32f25d50e65370c353f27c570f00632a80d5c09437ceb8031b617ca7db40348da331e225a7d073d62a74225c6b8b287c353a8b3c179cfcac701c85498654524c3ee984c8a02820a30861af2833b67973dc9f10b27134a8abd9fd14aacfb17a6017e2100405d8a933535193c1d7b932dc9d730444a99ed9146a9ee1bdb38a923402d93eeeebb66ea63363a8d9ba050f8ae602c630d5ab907448b7fd9dc010b1c710d8e795c6147781788633fc7f482ad0cf98f2215ce7bf7a08898f5dba8dffeb95cb8e1c2f0a30575123f8505e9f2530874a0326c8b74be7b8fa85136cd4baa556ba657dabf8f75aed638731103d8d175003fd4d671d3fbcbf43c9c8d4ffb1310fe0679cf77a3e8e1659482ed5539419c0107ad32db0b7b10c4f12e1ad375962b28e9baf51cc93adacdc102271eaf174788ff9974ef073ad37985741ab53440bece814834b462ea9a814ea9d4f76f99093172ea0da813825eec2c28a26aee5f93b7773ce4138012680e11f9c0b358e19e858810dd990ef440b9326c47010ae5fd030114a37be9e80893c76ee6fe361be49326230853f9bd0b8f5ddacdb5558f43e9769a2aee09f1d656da2ba33a2fa37b2b0af8533d81c83f2b42e203fd71786196c3ce3cc2b6166886d4ae0da6a285d35e11896d8dd311fd5cfdc4a3783b0b0f23c172d6dbcc5f0997eaa105b9c1a6ec88ce69f816cfaaf701b152508cb915f59ea449945faef802d840c0a03c109b2d2319b76230ac6c8fed93f16160c3de4f5b09db39bae6caba6a236e0051ef34cd5558c1ca224154478bff1405e419468f4bb659e8d59dbea6f864c701b72a9f1074195ccd7cad8bdc47eb9e85478b42b83f16715f44b458b176b1ad18a89d965cefb0baa9df93c1d88fd88fadd3fc3324bca7d29dd4c6619b92def9150988de4995c6d29e7336a0f9d0e86fd42c2309fa8cefa0358a5e2a331681d106354c834934f4adad7578b781b7918716cad021119c3b4b45ddc0c70d4867606da71b4b5fa1eb0e581a540cb046a2afe6a6d9f2b3674cf034c468465837da99650460e97b3b96dedd9fd310da7971b6b210c642b47b021adb3f9ed7335a318956d329b61f84c0ca0800474f70abde1c79803ad9e7d614dcb80546117ecf6299db53c3dc52ef9d6656ae79524a62bb6a2b5c0c349063ad338159a7e03a800f0027eeb58e56cf209cdbbcd169b2d384e2170cca3b8d16ede8c461658ee170cad8f3be991743bfdc495c5abfd51da2a4dc708e3eb8bf369ab5d7730a6e8f9991ff9e5cfb33bc14461cb1951fa9db2106e9ae594a479ccaee0b96f16dd122387acd6733b52c3b6d76ed58591cbd165f3f244bf494e04ac061d8b13d97d0c5a3a1523a7fbc7eb699ad08e444c211703fa4ae61688d185e60b68e7a31f26c9087b589ae1cb2be95d99a45443e8173c5a602a84eca83b4c2f1c5c1bcd791a967a4a514f0d1b4317dbf6355486d0", 0x1000}, {&(0x7f0000000280)="64c4586d85b9b5cd342fd8cce16bfd65559dbc31c060e28096f826a8b27337e7c840602066ec30", 0x27}, {&(0x7f0000000500)="43222fd82fa3513c113fd02f8cd5ecda55a40f4aef1fbe25f8ce0f4bb2cfb08b4ec7aa4d441f39", 0x27}, {&(0x7f0000000540)="797e76ea6de502960dde56c85623c49c79cd8724d9b060433156a3f3110b52e5fb30c1e180864d828c751fa7ebd97d3a7938a8f726e2ef25f53b6923ff80890c8e86abbb617ab88347d4a191dd70004e2767d6b51eec6221ca1ce23c80c57cce99ae1cffb7b1ba844ff60509e235f2626b2d12b5e7c3aedbab65da45f38c9a7fa36d6be25334501b0e2ec4d88e789a5c126bd4b7589cfdfa258c48a478708ed9b5dcce9b79f7337359f1360f92bcbefd102d5dda90ab9231924150669e6b9fca213bb3d37d19b17e0cad6f6790530829d1ec97574f99456d2c17f6b4905f90a72ffd9f", 0xe3}, {&(0x7f0000000640)="0041533d7fc6bfbc5d1da4fb763cf79a8d4e928280933853922b697143fedb510c533ba258010100db549017fcd838386556f8", 0x33}, {&(0x7f0000000680)="f2f3d800d93ffb81fa3e1b48d956fdcfaab4c012a94536fbb5b89be801901d1f98ee5768935fa49a00f39ebc3c9069a27220f056af47571a99edc1cedc36ecae3f6caceae09ca2d379b3b20e1e", 0x4d}, {&(0x7f0000000700)="8947ce60ba25a286aa1528ea2b", 0xd}, {&(0x7f00000017c0)="28dc1ac116a7ef5717b3dd00d54818ebb48d712e231d3919c20ca467f821514c8464ecd6afd521ab262e218fc5f7f23b96bc30d727b988d5b9040a0df0654b7025b563b9c4fb97f7ab1ef0df53aa454ab08482279ca721bf3c65bdd0a5d5b5ebbf2a35d355ba4a31fca4dd2d84687256df144b38e37c2cbc458a007a5ceab7ca180ec97961bbd76d724b205ecb73aae45791c018e51f3e772eb41eeebe3807", 0x9f}], 0x9}}, {{&(0x7f0000001940)={0xa, 0x4e20, 0x4000008, @dev={0xfe, 0x80, '\x00', 0x17}}, 0x1c, &(0x7f0000002040)=[{&(0x7f0000001980)="4e0bbbf39042351b23d50a5dab32f0b0db4490bc67b3452e54254fba480a80afa2e5c3036ad52631c4ff9b84cead33ff42d1030826b768c17c84daf7e465c20f0818dc2cca907b06230df897b55f4adfdc78a51793f9be9e163a06d8d23b3f6c176c3e9affb5cfd89b947a90ec3b99b22fbc84b3133d858b40988950ebaba8347201138ac98644b9408673885a03f66e2ea51718cee7d6b07ebb59fa9b452eef38d64a042595078974f48d80cbff69ae44645a87473f2971a2cdfa9f02b9cc0deac76eee0115b117a5b379fd596b92f94a86d60bd9a6bf966719047db2a01bd94850f65be25399f3bc91df322a9b2ea09801a7e603874ccbe7", 0xf9}, {&(0x7f0000001a80)="0d30bfe39df31ffb443c8df2af75a97fb587a0cfb80a69d9978bb87112bd6359ef2eb284e82ed7bc26d8f6440aa632a2f6eb6382b0a3c0189481d1fe69fc65f17cf47880f136a904e165b3e9bbbaa022d03b6291b9bcd8efd610c777bbdba9e098467d6977cad00eaaf39e589f09d8c31562a4e1de385d9449460ce9728956486c232747f29b686f93b0e05905f44b976e07a3b5beb9cf7444ee29ca6355ae5eb492f495970bbfd92e75d62ec8319959d0e45d19a3c548792743ce214c8199f479ed51b532a95030371d60", 0xffffffffffffff28}, {&(0x7f0000001b80)="ef8964faac07a3a7f84615ba9e86d0a9be86eebfb7021effe990cfd43db7418609e4d05ce5668acdd21ef88975582f224eb0d700511960c3367a3cbdd17dc78c09434f75a216c3b13f58dec06849383a7623db9f3f6ae7c6d3e23b536326e45eddc22463d996db79eff0a245176d72bfc420602ff210216ed65ccd081a64cec7dd7ebbab000c0e444be8f2eaa5f592fa1cea42d935b09c75b069310b2beb4dc638541289f658ae088637c1f022f37eeec420ce951247c7a13bc7696f78d1e90e0d24f59f226a19f6a38f26fc715cdedfeb", 0xd1}, {&(0x7f0000001c80)="17abce9ae69905c0f54cd75ced64beff71d00e3d2253d3ec14ec68ce0a6c950f507486e160472ef61c6ab5c611863013", 0x30}, {&(0x7f0000001cc0)="b75c646ebca8a16d2121db340c2e1e09b732c1cc5973de0c4432188ae52de6a83618b877a685bc739b81a529fe4c1d3dd5d1f8b3ff13e94dbca31ab040ae957eba4a7db9652f744bc12b0cfc1b828dde31a0406d8fd80efdb138cf8f6d9889f0bdd2ac89fae9cb3fe9db9062403d22e7d2", 0x71}, {&(0x7f0000001d40)="3b38d3ff52f1efbb8ecf8b11c854dae319d30291e492eaae7b8f9dff2d3f8f247fdd556b3c79d172e2a8edbb054e48f5e97d3ea9b0202883c40ddf8785c5ac10b8352c", 0x43}, {&(0x7f0000001dc0)="bb0b3117c3eb87b9d0493b6ee1cd4f0089196e1f14a1c2fa84f4d9e52d177e02bc6a5ec1d168a689bca9cc37b128803d86aa3b69e99ade4bcd467145b4f640921fcf3af12face376a98e3be08ff30b0f7da9585b921bda26f0144e15ad95b8b98fe3d8c2ecd7d82b76b0f624d734bba2e7aa7f7ac5f16810462e4ed44ded0cf5518a8618efe3854ff93b82215f6be6b11c", 0x91}, {&(0x7f0000001e80)="e03eceeb819a1a3bc8463a4a9007a8232634d677b5fb0b16a9b8bb38268e4670b789da4ea181c7b12a5149cdaced47a7c7efb9f1cd5cb99468f54d02c8f00da82f4e48439198b5979a8e9b27e15f5091524f3e851d508dc8158fe15f5470b24d90b48fe88a9b580f619c8773458b5c5be959777667f22725a8eb5ed1f1eafe423931c2e387d8639f3ca8aacdbb35197a2e58ecabec6f9acf7827336945959f0f5e471910bac7d5b8847861d5500fa09417f221160cbe6865c4a3bb6161b5e182b8d1e8aadf19060cc99d0130051cccc27488bf6a4cec85abf48d80e8b5c0fa849087be723036a643fc34211f61e61c4f890214bce3", 0xf5}, {&(0x7f0000001f80)="3d1cf7798a60dafb9ed143cd7eef57ecd6267c6de12fa88267989b33593e43bba8e967157f9c35c72cdd6697440f6fea23edead3c30cbc2d18eda1", 0x3b}, {&(0x7f0000001fc0)="068324c6d3eef6ab3965e49dc1b1a4cd6fa2e1259968b2099fa226e998c6fdf7c82ae25bbaa824fce2de6f84ef7ff3ad289bc6c7c7b0efc2083c3d4e863c718485234f4a7817d686", 0x48}], 0xa, &(0x7f00000025c0)=[@rthdr_2292={{0x78, 0x29, 0x39, {0x33, 0xc, 0x1, 0x6, 0x0, [@private2={0xfc, 0x2, '\x00', 0x3}, @remote, @dev={0xfe, 0x80, '\x00', 0x1b}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @remote]}}}], 0x78}}, {{&(0x7f0000002180)={0xa, 0x4e23, 0x4, @private2, 0xc}, 0x1c, &(0x7f0000002380)=[{&(0x7f00000021c0)="408ab8f41a87e8da199d8a49733ce0633782445e26d2b3c3728f3c531482ccec37107b1cfd6e576c7c71a7c99c4f05ea674de1035579f7327dae1748c5520aa88147ed5bb9d0e6e0e236f916398a3a9e42be8b47a854f05161a3f7f8575f229f0408dd483b33471ede90d27d42", 0x6d}, {&(0x7f0000002240)="80fde8c1141d537031bb24787dc3294969ecbaec27eecf0ec8d6b570b4ff", 0x1e}, {&(0x7f0000002280)="d51a60183290701da54aafcd20081245fca57affc3d15381ffee3f3632bfc5189c28bd3836b075981724051d2d906efcacfda5733693f173fda63d9a28e9d79d4417357d3846f4cc481cf4ccc81607b8e2b6cd5c34627f1b14f5758e75ce425a4c20fd5db4a6b0e8a8de15b57006d993131fc04dea9b815c4625616bd506d52f24119157bac49184e659bf63ee6b3950e26fb3f9f54adaf6dbd4d2f324e0130647cb43f2b5f2cfcd52c1b76a3166f80b7d5a9f6bba3d9aeedf10cd29470adb902c270762c69a84e1133c16e3fcffc25dac0a78cd53487dd14a58b8f3dbf0a95d773814ee7f2f7b40fef1b899921084323ce11b0550", 0xf5}], 0x3}}], 0x3, 0x10) setsockopt$inet6_tcp_TLS_TX(r5, 0x6, 0x1, &(0x7f00000000c0)=@gcm_256={{0x303}, '\x00', "5193bb672965593497c186a80e00", '\x00\x00=*', "1202000000040030"}, 0x38) setsockopt$inet6_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f0000000400)={@in6={{0xa, 0x4e24, 0x8, @loopback, 0x7}}, 0x0, 0x0, 0x41, 0x0, "b208405cce4456e4fc8f2dabd194ff3763f799f91cf7e5e8260998f956ec57c24451db07550335ebf4a3d0168ccaa268e928f39cd7494c2b19ebef230a3373685fbacfcf3b6e9633bd997a9bfcf08f67"}, 0xd8) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, [@IFLA_VFINFO_LIST={0x18, 0x16, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@IFLA_VF_RATE={0x10, 0x6, {0x45d7, 0x34c, 0x1}}]}]}, @IFLA_GROUP={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x20044000}, 0x0) r7 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_ADD_RULE(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)={0x420, 0x3f4, 0x4, 0x70bd25, 0x25dfdbfd, {0x3, 0x0, 0x0, [0xa, 0x7ff, 0xd, 0xffffffff, 0x3ff, 0x2, 0x8, 0x0, 0x7, 0xcf04, 0xfffffffd, 0xfffff801, 0x18000, 0xfffffffe, 0x1dab5af3, 0x1c5c, 0x28, 0x4, 0xcc1, 0x1, 0x0, 0x9, 0x8, 0x7, 0x34, 0x10000, 0x9, 0xd, 0x7, 0x8, 0xf598, 0x3, 0x3, 0x7ff, 0x6, 0x800, 0x8, 0x1, 0x3, 0x6, 0x10000, 0x9, 0xf, 0x4ec7, 0x1, 0x40, 0x675, 0xff, 0x1000, 0x4, 0x800, 0x9, 0x9b5, 0xa, 0xffff9fc0, 0x3, 0x0, 0x9, 0x3ff, 0x8, 0x10000, 0x3ff, 0x2, 0xffffffff], [0xb7, 0x4, 0x4, 0x4, 0x8001, 0x40, 0x7, 0x3, 0x200, 0x8535, 0x10, 0x1000, 0x1b60, 0xffffffff, 0x334d6605, 0x4, 0x200, 0xfffffffa, 0x1, 0x7, 0xef, 0x4d0, 0x4, 0x10, 0x3, 0x1, 0xffff7fff, 0x1, 0xc09b, 0x4, 0x8, 0x9, 0x0, 0x7fff, 0x5, 0x8, 0x0, 0x19, 0x3, 0x6, 0x401, 0xdb2, 0x9, 0x3, 0x1, 0x7f, 0x9, 0x800, 0x7fff, 0x200, 0xfffffff6, 0xe637, 0x8d2, 0x7, 0x5, 0x41, 0xf, 0x800, 0xbbc3, 0x4, 0x6d, 0x6, 0x100, 0x8000], [0x8001, 0x5, 0x10d, 0x0, 0xa4b, 0xec, 0x3, 0x7fffffff, 0x800, 0x31, 0x9, 0x24, 0x9, 0x1, 0xfffffffe, 0x2, 0x328d, 0xff, 0x7, 0x8, 0x0, 0x8, 0xc0, 0x9, 0x8, 0xa963, 0x8, 0x1, 0x77, 0x5, 0x3ff, 0x8, 0xfffffffc, 0xffff38e6, 0xc, 0x7, 0x75a, 0x1, 0x6, 0x3, 0xe53e, 0x7f800000, 0x10000, 0x3, 0x3, 0x79274e0c, 0x8, 0xe62f, 0x4, 0x1000, 0x0, 0xe872, 0xfff, 0x80000000, 0x4, 0x2, 0x7f, 0x9, 0xfffffff8, 0x2, 0x80, 0x9, 0xbd02, 0x7f28], [0x280b, 0x6, 0xe057, 0x1000, 0xb, 0x7, 0x8, 0x1, 0x1, 0x81, 0x726, 0x5, 0x7, 0x6, 0x8, 0x100, 0xfffffff2, 0x4, 0x800, 0x7, 0x8000008, 0x3, 0x0, 0x9, 0xe, 0x0, 0x4, 0x1, 0x8, 0x6, 0x2000, 0x6, 0x4, 0x3, 0x5, 0x5, 0x8, 0x10000, 0x10000, 0x200, 0x1000, 0x1, 0x7, 0x0, 0xc21, 0x1000, 0x2, 0x6, 0x5, 0x8, 0x80, 0x3, 0x10000, 0x9, 0x4, 0x800, 0x80, 0x7, 0xb, 0x17ce28af, 0xfff, 0x1000, 0x101, 0x3]}}, 0x420}, 0x1, 0x0, 0x0, 0x1}, 0x20000800) unshare(0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0xa, &(0x7f0000000040)=0xa, 0x4) connect$inet6(r5, &(0x7f00000001c0)={0xa, 0x0, 0x5, @loopback}, 0x1c) mmap(&(0x7f00009a7000/0x2000)=nil, 0x2000, 0x0, 0x8010, 0xffffffffffffffff, 0x78ed000) syz_emit_ethernet(0x0, 0x0, 0x0) socket$inet(0xa, 0x801, 0x84) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000740)=@newtaction={0x78, 0x30, 0xb, 0x0, 0x0, {}, [{0x64, 0x1, [@m_ct={0x60, 0x1, 0x0, 0x0, {{0x7}, {0x38, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}, @TCA_CT_MARK={0x8, 0x10}, @TCA_CT_LABELS={0x14, 0x7, "296524f13eb7394549979c0db12f7a74"}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x78}}, 0x0) 1.838757684s ago: executing program 4 (id=8881): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'essiv(cbc(aes),sha256)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000340)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x20) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000004e40)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000440)=""/135, 0x87}], 0x1}, 0x6}], 0x1, 0x10000, 0x0) sendmmsg$alg(r1, &(0x7f0000004bc0)=[{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000280)="44ace52704335ca863b4cdc92fd998cdc759c3d24309ba0cded675e4abacecc7663bf294eddb86b24658feca67bf7d02bfdd83542109107abf4f53bca29bf5c76a222401abe3911e3e", 0x49}, {&(0x7f0000000500)="d8be53965232d42e620cb1e9b97aa72ea637b4797dea320227e26102b9e385ac54cb51b7a85aacfb57c0c35eef7eafb2c8cc9ef319c8c45e41eac6acbce6", 0x3e}], 0x2, &(0x7f00000001c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x4004849}], 0x1, 0x8810) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) sendmsg$nl_route_sched(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000940)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r5, {0xf000, 0xffff}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) sendmsg$nl_route_sched(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000940)=@newtfilter={0x24, 0x2c, 0x1, 0x70bd2a, 0xffffeffe, {0x0, 0x0, 0x0, r5, {0xf000, 0xff48}, {0x0, 0xfff1}, {0x7, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x200040c0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) 1.697200928s ago: executing program 5 (id=8882): r0 = socket(0x23, 0x800, 0x0) (async) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000002c0)={@cgroup, 0xffffffffffffffff, 0x12, 0x2000000, 0x0, @void, @value=0x0}, 0x20) (async) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)={0x1b, 0x0, 0x0, 0x96a4, 0x0, 0x1, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x4, 0x4}, 0x50) (async) r2 = socket(0x2b, 0x80801, 0x1) setsockopt$inet6_tcp_int(r2, 0x6, 0x3, &(0x7f0000000040)=0xc5, 0x4) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) getsockname$packet(r0, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000400)=0x14) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x1c, &(0x7f0000000300)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x10}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@call={0x85, 0x0, 0x0, 0x7d}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @btf_id={0x18, 0x1, 0x3, 0x0, 0x3}], {{}, {}, {0x85, 0x0, 0x0, 0x149}}}, &(0x7f0000003ff6)='GPL\x00', 0xa, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x24, '\x00', r5, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, r4}, 0x94) (async) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000100)=@req={0x3fc, 0x0, 0x0, 0x6}, 0x10) (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r6, &(0x7f0000000000), 0x12) (async) ioctl$FS_IOC_RESVSP(r6, 0x40305829, &(0x7f0000000440)={0x1100, 0x0, 0x0, 0x10000}) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x4, 0x11, r6, 0x773c1000) (async) r7 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r7, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) recvmmsg$unix(r0, &(0x7f0000003100)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000040)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)=""/40, 0x28}], 0x1}, 0x20003ff1}], 0x1, 0x0, 0x0) (async) close(r7) 1.53972419s ago: executing program 5 (id=8884): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000001000), r0) sendmsg$NFC_CMD_DISABLE_SE(r0, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000001100)={0x24, r1, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_SE_INDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x20044110}, 0x20000010) r2 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r2, 0x84, 0x1a, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x7a, 0xa, 0x0, 0xff00, 0x0, 0x71, 0x10, 0x8e}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80) syz_emit_ethernet(0x22, &(0x7f0000000040)={@local, @link_local, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x89, 0x0, @dev, @local}}}}}, 0x0) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000100)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r3, 0x8, 0x70bd2d, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x14) 1.493511942s ago: executing program 4 (id=8885): r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) bpf$MAP_CREATE(0x0, 0x0, 0x48) r3 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0xe4ffffff00000000, &(0x7f0000000100)=ANY=[@ANYBLOB="1400000004000000040000000400000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000c6ffb56f01fcc22aac34aa91bb8cb4454920d8895f51c8a723f02fe9b17e15b024381521876b5c32acc6f24fd100f441d87f6b9fb3dc0ee531168ac9d5d0cba8eb77ecd8acfb65e5fc74e262a669f2c81f8293b0e627798276f7bee8787c1cae0987423151", @ANYRES32=r2, @ANYRES32, @ANYBLOB="020000000100"/28], 0x50) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={0x0}, 0x1, 0x0, 0x0, 0x4000431}, 0x4040084) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001240)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0x4000000, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x2c, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x1, 0x0, 0xfff6, 0x0, 0x0, 0xfffffffd}, {0xff, 0x0, 0xfffe}, 0x0, 0x1}}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x2400c081}, 0x0) r5 = socket(0x2d, 0x2, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r5, 0x11d, 0x70, 0x0, 0x0) r6 = getuid() ioctl$SIOCAX25GETUID(r5, 0x89e0, &(0x7f00000000c0)={0x3, @default, r6}) sendmmsg$inet(r0, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000d80)='T', 0x1}], 0x1}}], 0x1, 0xc0) r7 = socket(0xa, 0x4, 0x80000001) getsockopt$TIPC_SRC_DROPPABLE(r7, 0x10f, 0x80, 0x0, &(0x7f0000000040)) socket$inet(0x2, 0x1, 0x0) (async) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) (async) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) (async) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00'}) (async) bpf$MAP_CREATE(0x0, 0x0, 0x48) (async) socket$nl_route(0x10, 0x3, 0x0) (async) bpf$MAP_CREATE(0xe4ffffff00000000, &(0x7f0000000100)=ANY=[@ANYBLOB="1400000004000000040000000400000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000c6ffb56f01fcc22aac34aa91bb8cb4454920d8895f51c8a723f02fe9b17e15b024381521876b5c32acc6f24fd100f441d87f6b9fb3dc0ee531168ac9d5d0cba8eb77ecd8acfb65e5fc74e262a669f2c81f8293b0e627798276f7bee8787c1cae0987423151", @ANYRES32=r2, @ANYRES32, @ANYBLOB="020000000100"/28], 0x50) (async) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) (async) sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={0x0}, 0x1, 0x0, 0x0, 0x4000431}, 0x4040084) (async) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001240)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0x4000000, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x2c, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x1, 0x0, 0xfff6, 0x0, 0x0, 0xfffffffd}, {0xff, 0x0, 0xfffe}, 0x0, 0x1}}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x2400c081}, 0x0) (async) socket(0x2d, 0x2, 0x0) (async) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r5, 0x11d, 0x70, 0x0, 0x0) (async) getuid() (async) ioctl$SIOCAX25GETUID(r5, 0x89e0, &(0x7f00000000c0)={0x3, @default, r6}) (async) sendmmsg$inet(r0, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000d80)='T', 0x1}], 0x1}}], 0x1, 0xc0) (async) socket(0xa, 0x4, 0x80000001) (async) getsockopt$TIPC_SRC_DROPPABLE(r7, 0x10f, 0x80, 0x0, &(0x7f0000000040)) (async) 1.301291817s ago: executing program 4 (id=8886): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000480)={'ip6gre0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x2f, 0x84, 0x8f, 0x8, 0x6c, @private1={0xfc, 0x1, '\x00', 0x2}, @mcast1, 0x8000, 0x8000, 0x80000000}}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.numa_stat\x00', 0x26e1, 0x0) close(r1) r2 = socket$inet6(0xa, 0x80002, 0x88) sendmmsg$inet(r2, &(0x7f0000000b00)=[{{&(0x7f0000000040)={0x2, 0x4e20, @local}, 0x10, 0x0}}], 0x1, 0x20047f7f) r3 = socket(0xa, 0x5, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x4e20, 0x6, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x26}}, 0x6}]}, &(0x7f0000000100)=0x10) getsockopt$IP_VS_SO_GET_DAEMON(r3, 0x0, 0x34, 0x0, &(0x7f0000000040)=0x1) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000280)={0x2, 0x7, 0x4, 0x101, 0x4}, 0x14) ioctl$SIOCSIFHWADDR(r1, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100"}) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={&(0x7f0000000000)="eb1117f480a21078dad1d7e7f75f468a800922ee742dc3b618ebd9ee2e2307a21b3936d94df2ae1ce891e90fc454f98283660359e42169b8e37f99c68725f93c40a4a4c30ae85cf1ca8ce14bac1708f881f12d73f93d4aafcc456826f6f140c92f143fd037c1", &(0x7f0000000080)=""/76, &(0x7f0000000100)="d125424698ad769d809aff402a2b40f546e3f774d7cd3f00cd9d7264dba5669b30fb4483a5", &(0x7f0000000140)="3906bca5fe2d56fb43aa0ace730ad32626978c4d4ab2abf24c66e558f6f95a34bcdcc70eb61fed26a63be6df6d2c97ad810398e533d1a713b471effcc9bdfc5b2bbf679e0b919e79a1375a7a39b70ac63e266bee8de4508455fbd33be8cef748041691a51b2fbb65ccb76126f2c16b2315d60b126be600a9c7f8f6b5ea1d26c5c320bbcfc46ad49f5181f8581dbe44b6205b959ce827cd5fca5510eb97e35af51206ec3113df8e1b469055a92297e955a4eac3e83186d81a732326cf969c8f9af2b53aed0a0e496d44737d70eb1d3818d740307ff10dce5ddb4eb257a5", 0x9e59, r1, 0x4}, 0x38) 1.247545272s ago: executing program 5 (id=8887): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000000)={0x0, 0x8000, 0x7, 0xa}, &(0x7f0000000040)=0x10) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r0, 0x84, 0x78, &(0x7f0000000080)=r1, 0x4) recvfrom$unix(0xffffffffffffffff, &(0x7f00000000c0)=""/43, 0x2b, 0x0, &(0x7f0000000100)=@abs={0x0, 0x0, 0x4e21}, 0x6e) r2 = accept4$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @private1}, &(0x7f00000001c0)=0x1c, 0x800) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000200)={r1, 0x8613, 0x0, 0x7, 0x5}, &(0x7f0000000240)=0x18) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f0000000280)={r3, 0x5}, &(0x7f00000002c0)=0x8) r5 = socket$igmp(0x2, 0x3, 0x2) ioctl$SIOCGETMIFCNT_IN6(r5, 0x89e0, &(0x7f0000000300)={0x1}) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f0000000340)={r4, 0xc, 0x6, [0x2c4, 0xff, 0x0, 0xf001, 0x3ff, 0x800]}, 0x14) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r6, 0x84, 0x12, &(0x7f0000000380)=0xfffff000, 0x4) pwritev(r0, &(0x7f0000000500)=[{&(0x7f00000003c0)="e3d72bd42151f8a22a5669ae1c58e69f9ae2f97ad826638c18c354f80820e0a4283a4c0d279cd35622f5bc9fc7f85d2cc8811f6861d0068c1035ca657cf84c635065f783a48e6f6c4dc1bd4291ce47796e640f05f3a1f298a8e7b98e72bac00e2cef400d4af39aff9ebf661575d07d42fc2eb79f8b6266f06ea99e1b4939c989e1491a11eefdd119c5abd3841135de13bc6eb857b2ebf3d690c826cf8134667e52b2f055178db6eec50d117422a8ef31887aa497c46cba10c8f7d5c9d93275c7a23ffab7c5b1f565163631f741a6ba08b908c18e7081b0bc1739ac903c80cf595a2f478c4a9ea52737d3", 0xea}, {&(0x7f00000004c0)="7a5a4d07939369d86bd292f808620bd40cb21babbe0a5d055df62bb5d8a0edbcb711da81305d3eeaef278328d51d74065493", 0x32}], 0x2, 0xe6, 0xabd) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_ADD(r7, &(0x7f0000000900)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000580)={0x314, 0x0, 0x300, 0x70bd2b, 0x25dfdbfd, {}, [@TIPC_NLA_MEDIA={0x64, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xa2eb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x40}]}]}, @TIPC_NLA_SOCK={0x28, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfffffff7}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}]}, @TIPC_NLA_NET={0x4}, @TIPC_NLA_LINK={0xcc, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x42}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xa26}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xb62}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x400}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_LINK={0xa0, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x82b2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x400}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffeff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffff7}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_NODE={0x10, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xcb}]}, @TIPC_NLA_SOCK={0x88, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}]}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_CON={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x80000000}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}]}, @TIPC_NLA_SOCK={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x800}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1ff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x326a}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_NET={0x38, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x1000}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}]}]}, 0x314}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000940)={0x0, 0x0, 0x6, 0x0, '\x00', [{0x6, 0x2, 0x9, 0xfff, 0x23, 0xb}, {0x7, 0xfffffff9, 0x1, 0xe8, 0x0, 0x9}], ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000c00)={'ip6tnl0\x00', &(0x7f0000000b80)={'ip6_vti0\x00', 0x0, 0x2f, 0x2, 0x4, 0x9, 0x40, @private0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x700, 0x7, 0xffff, 0x5}}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000c40)={r8, 0x1, 0x6, @multicast}, 0x10) r9 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000cc0), r7) sendmsg$L2TP_CMD_SESSION_CREATE(r7, &(0x7f0000000d80)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000d00)={0x24, r9, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x20040800}, 0x20000000) r10 = accept4$packet(0xffffffffffffffff, &(0x7f0000000dc0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000e00)=0x14, 0x0) recvfrom$packet(r10, &(0x7f0000000e40)=""/75, 0x4b, 0x40, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000ec0)="e765e9cf676c5646a0274b11aec6dcb0539a421ac453a7daefdb2c822c1ab35aadf0ddc9ca4c08cfcd89f11c7635fa9dc549c6cf145eb86134eeae722ae6d6f906fd88b31edb2d2547a3ab14dd5ae624655874e0c24667adca05470e2fcc85ccc6cbafd958d555447f505c1af96d54b1b0a72e41f9290b1c9c620679", 0x7c, 0x0, &(0x7f0000000f40)={0xa, 0x4e21, 0xfffffffd, @remote, 0x40}, 0x1c) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000001040)={r4, 0xb0, &(0x7f0000000f80)=[@in={0x2, 0x4e21, @broadcast}, @in6={0xa, 0x4e20, 0xa56, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8}, @in6={0xa, 0x4e21, 0xffff, @remote, 0x7fffffff}, @in6={0xa, 0x4e24, 0x2, @private2, 0x9}, @in={0x2, 0x4e24, @loopback}, @in={0x2, 0x4e23, @local}, @in6={0xa, 0x4e22, 0x2, @local, 0x40}, @in={0x2, 0x4e22, @broadcast}]}, &(0x7f0000001080)=0x10) setsockopt(r2, 0x6, 0x4, &(0x7f00000010c0)="f9008ba3b1d94317e1d5a697763fddead3eff72cda4a68aef130c712c7f6a99a375f3a8a92634d7b865a8a7bbf38fa84a073184dd0d676f462b21031d10ae34f48b7287f363bb103da20f2b863d406fd6afac5cca5f071d90465eae4dd7765e068f7aacb8c5c191a37a8a8381ec54d6dca54e3ee8978894d4afea3debba094b81721ed80019fb26f96b28db595b9d168d954eb271c", 0x95) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r6, 0x84, 0xc, &(0x7f0000001180)=0x81, 0x4) ioctl$BTRFS_IOC_BALANCE_CTL(r5, 0x40049421, 0x2) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r6, 0x84, 0x72, &(0x7f00000011c0)={r3, 0x800, 0x30}, 0xc) getsockopt$inet_mreqn(r5, 0x0, 0x23, &(0x7f0000001240)={@multicast1, @multicast2, 0x0}, &(0x7f0000001280)=0xc) sendmsg$MPTCP_PM_CMD_GET_ADDR(r7, &(0x7f0000001400)={&(0x7f0000001200)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000013c0)={&(0x7f00000012c0)={0xe4, 0x0, 0x300, 0x70bd25, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x34, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6}, @MPTCP_PM_ADDR_ATTR_ID={0x5}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x10}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r12}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x12}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x9}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_ADDR={0x18, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x7}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x40}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x14, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r11}]}, @MPTCP_PM_ATTR_ADDR={0x38, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x11}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ID={0x5}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}]}, 0xe4}, 0x1, 0x0, 0x0, 0x10}, 0x3ee1b741e7e5d49e) 1.019733601s ago: executing program 6 (id=8890): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3032, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0}, 0x18) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff, 0x4}, 0x10) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_int(r4, 0x0, 0x13, 0x0, &(0x7f0000000080)) socket$nl_route(0x10, 0x3, 0x0) r5 = syz_open_procfs$namespace(0x0, &(0x7f00000002c0)='ns/net\x00') unshare(0x22020600) accept$packet(0xffffffffffffffff, 0x0, 0x0) socket$rds(0x15, 0x5, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_SET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20040000}, 0x4000801) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000007440), 0xffffffffffffffff) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) syz_emit_ethernet(0x86, &(0x7f0000000300)=ANY=[@ANYBLOB="ffdfffff03000000000000000800450000780000001e00119078000000000000000000001b59006490780200000003000000000000000002000000753904030405a00bf0dd00000000000000000000000000000000009384bbeb3018ad591b661f875dfb1be5d2a0087a62022a1564a129d3a14a1d8c69000000000000000000000000160000af4b0466"], 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x24, r1, 0xd66771a5e8224ded, 0x0, 0x0, {{}, {@void, @void, @void}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r2}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r5}]}, 0x24}}, 0x0) 849.735046ms ago: executing program 6 (id=8893): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_REMOVE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_TOKEN={0x8}, @MPTCP_PM_ATTR_LOC_ID={0x5}]}, 0x24}}, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x1) setsockopt$inet6_IPV6_RTHDR(r2, 0x29, 0x39, &(0x7f00000000c0)=ANY=[@ANYBLOB="8402020100"], 0x18) r4 = socket$pppl2tp(0x18, 0x1, 0x1) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000180)={r3, 0x30, &(0x7f0000000000)=[@in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x4e21, @empty}, @in={0x2, 0x4e22, @private=0xa010102}]}, &(0x7f0000000300)=0x10) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r4, 0x111, 0x5, 0x9, 0x4) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r2, 0x84, 0x5, &(0x7f0000000240)={r3, @in={{0x2, 0x4e20, @broadcast}}}, 0x84) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={r3, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) ioctl$TUNATTACHFILTER(r5, 0x401054d5, &(0x7f00000001c0)={0x1, &(0x7f0000000140)=[{0x6, 0x8, 0x3}]}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000000)={0x400000000000000, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x3, 0x0, 0x9, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1=0xe0000009}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @empty}}]}, 0x50}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r8) sendmsg$TIPC_CMD_ENABLE_BEARER(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x60040, 0x0) close(r10) socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFHWADDR(r10, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3, 0xc1ddfe9aa4c8d4f8, 0xffffffffffffffff, 0xba4f5000) socket$netlink(0x10, 0x3, 0x2) 623.90778ms ago: executing program 6 (id=8895): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f00000000c0), &(0x7f0000000100)=0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000004080)=@base={0x2, 0x4, 0xfff, 0xbf22, 0x400}, 0x50) mmap(&(0x7f0000fa2000/0x4000)=nil, 0x4000, 0x2, 0x82011, r1, 0x0) mmap(&(0x7f0000fa3000/0x3000)=nil, 0x3000, 0x0, 0x13, r1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) setsockopt$netlink_NETLINK_NO_ENOBUFS(r2, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000001a0001000000000000000a0080"], 0x38}}, 0x0) 609.272774ms ago: executing program 7 (id=8896): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x60, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x6}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x60}}, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000300)=@ethtool_rxnfc={0x0, 0x2, 0x6, {0x3, @usr_ip6_spec={@empty, @dev={0xfe, 0x80, '\x00', 0x24}, 0xfffffff8, 0x3d, 0xe}, {0x0, @remote, 0xe, 0x4, [0x7, 0x6]}, @ah_ip4_spec={@multicast1, @private=0xa010101, 0x0, 0x5}, {0x0, @empty, 0x6, 0x5, [0x6, 0x9]}, 0xff, 0x3}}}) (async) ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000300)=@ethtool_rxnfc={0x0, 0x2, 0x6, {0x3, @usr_ip6_spec={@empty, @dev={0xfe, 0x80, '\x00', 0x24}, 0xfffffff8, 0x3d, 0xe}, {0x0, @remote, 0xe, 0x4, [0x7, 0x6]}, @ah_ip4_spec={@multicast1, @private=0xa010101, 0x0, 0x5}, {0x0, @empty, 0x6, 0x5, [0x6, 0x9]}, 0xff, 0x3}}}) 547.6746ms ago: executing program 7 (id=8897): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x94) close(r0) socket$xdp(0x2c, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) r2 = epoll_create(0x80) r3 = socket$caif_seqpacket(0x25, 0x5, 0x5) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000100)={0x40000005}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000000)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x4}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x54}}, 0x4) sendmsg$netlink(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="1c00000042000106"], 0x1c}], 0x1}, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet(0x2, 0x3, 0x33) socket$nl_route(0x10, 0x3, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) getsockopt$inet_mreqsrc(r4, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) 433.497702ms ago: executing program 7 (id=8898): pipe(&(0x7f0000000340)) (async) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r3, @ANYBLOB="000024000000000024001200140001006272696467655f736c617665800000000c000500080005"], 0x3}, 0x1, 0x0, 0x0, 0x40910}, 0x0) splice(r0, 0x0, r2, 0x0, 0x10d00, 0xf) 379.34028ms ago: executing program 7 (id=8899): r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$bt_BT_VOICE(r1, 0x112, 0xb, &(0x7f0000000000)=0x7fff, &(0x7f0000000080)=0x2) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdirat$cgroup(r4, &(0x7f0000000080)='syz1\x00', 0x1ff) (async) r5 = openat$cgroup(r4, &(0x7f0000000180)='syz1\x00', 0x200002, 0x0) r6 = openat$cgroup_type(r5, &(0x7f00000000c0), 0x2, 0x0) write$cgroup_type(r6, &(0x7f0000000100), 0x9) (async) write$cgroup_pid(r3, &(0x7f00000001c0), 0x12) r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f00000000c0)='devlink_health_report\x00', 0xffffffffffffffff, 0x0, 0x19f}, 0x18) (async) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000002c0)=0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={r8, r7, 0x0, 0x125, &(0x7f0000000300)='cgroup\x00:\x80\xb8\xcei\xb4\xd9\x92\x97\x1f\xda\xe5\xa5\xf2\x10\xcc\xffb\x99\xe3\xe9e\x15\xea)$\xf5C_Q\x18$\xa460\xca\xb6\xbak\xe0\xe1H\x1f\xc4U\xfe\xb0!\x8e\xbe\xe3\xf6}\xb6WPq6\xa7\x10R]\xee\xd16\xc3)T\x90\xf7d\xd2|\x8f\xf5\x9c\x8b\x88\x14R%\xcf[C\xa5u\xb5\x06uA\xe5\x05|6xLb\xae\x10Lo\x9c2\xfa\xa5\x83\f4/\xd2Z2\xa8\xe8puA\xba\xabv\x1d\x95\xccQi\xbeBk(2\v\xd7m0K\xe5T\x1c\x9fU\xadv\x9f\xf5\x9e\xa5\xe0\xdf\xe6\xd8\xa0\x06c\xaap\x17rPs\xd7D\xa6?}\xb7E$\xe4\xfb)s\xc7\x9b\xcb\xadr\xa1\x05\xbf\xd6\xf8h\xd5l\x89\xfb\xc6\x9f[Iq\x85\xa01`\xed\xc1\x86\xf4\x93\xac|S\xd6\xfa3\xa5y\x17\x8b$K\xf0\xfeC\xa0w\xbb7\xd6Zw\xc2\f\xc7i\xaa\xa9\x06\xd0\xda4\x9d\x95G\x92.\x1c\xb1\xff\x7f)\xc1m\x8cD\x18\"p{\xea\x7f\xefaw(}\xfea\x10\xda\xd9\x13m\xf7K\x9a4\xe6\xfc}\xef\xbfe*PN\xf7\x00\x00\x00\x00\x00\x00\x00\x00'}, 0x30) (async) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r10 = openat$cgroup_procs(r9, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) (async) r11 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@newspdinfo={0x1c, 0x24, 0x1, 0x0, 0x0, 0x0, [@XFRMA_SPD_IPV4_HTHRESH={0x6, 0x3, {0x0, 0x60}}]}, 0x1c}}, 0x0) preadv(r10, &(0x7f0000000040)=[{&(0x7f0000000100)=""/120, 0x78}], 0x1, 0x4, 0x8) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000200)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000000800010002081000418e00000004fcff", 0x58}], 0x1) 335.902097ms ago: executing program 4 (id=8900): r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0xe}, {0xfff3, 0xffff}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x1}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0xffff, 0xffe0}, {}, {0x1, 0x6}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x14, 0x2, [@TCA_CGROUP_EMATCHES={0x7, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x4}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x1) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 273.680339ms ago: executing program 5 (id=8901): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MIIMON={0x8, 0x3, 0xffffffe1}]}}}]}, 0x3c}}, 0x0) sendmsg$rds(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f00000000c0)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10, &(0x7f0000000600)=[{&(0x7f0000000100)=""/102, 0x66}, {&(0x7f0000000180)=""/134, 0x86}, {&(0x7f0000000240)=""/69, 0x45}, {&(0x7f00000002c0)=""/66, 0x42}, {&(0x7f0000000340)=""/192, 0xc0}, {&(0x7f0000000400)=""/220, 0xdc}, {&(0x7f0000000500)=""/214, 0xd6}], 0x7, 0x0, 0x0, 0x4041}, 0x4000000) 247.762492ms ago: executing program 7 (id=8902): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000040000701fcffffff00000100017c0000040042800c0001800600060065580000100002800c0006"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) syz_init_net_socket$x25(0x9, 0x5, 0x0) unshare(0x26020480) unshare(0x10000000) socket(0x22, 0x3, 0x0) ioctl$SIOCX25GDTEFACILITIES(0xffffffffffffffff, 0x89ea, &(0x7f0000000c00)) 223.771397ms ago: executing program 4 (id=8903): r0 = socket$inet6(0xa, 0x3, 0x7) preadv(r0, &(0x7f0000000580)=[{&(0x7f0000000300)=""/106, 0x6a}, {&(0x7f0000000600)=""/142, 0x8e}, {&(0x7f00000006c0)=""/185, 0xb9}], 0x3, 0x2, 0x6) r1 = socket$inet6(0xa, 0x2, 0x3a) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xb, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x20}, 0x94) (async) bind$alg(0xffffffffffffffff, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58) (async) bind$802154_raw(0xffffffffffffffff, &(0x7f00000000c0)={0x24, @long={0x3, 0x2}}, 0x14) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000240)={0xa0000008}) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) r3 = socket$kcm(0x2, 0xa, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb7, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x8f}, [@ldst={0x7}]}, &(0x7f00000002c0)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x2a) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) (async) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000780)="5857005520c49eb1c0477e92835284aef22efcb4df2538223163a3bc0cd916542a9edae5f8b850265f48561692d1afa30236a46a550e75757e66a58bdb5c903b4a6bd68a45c3cdd70804aa2cf6ac27912903d8258b29e0675c886a3c472e8cba01261bf24c012c40232b22e8aca4d534b5636b67a277b519d301e3a5f8757bd7ffe7b0bf1e7df11e80834b31aa576b725c876e52c1fdec3b1016a2028e74dbaba13d55515f60c6d19dd65a2a91d96517177849254857154cebe5127a3ac6e479053b95dffe564d3fbcd44a1849d282068b7dbc715dce63221712dffdd90ab563449424fe82591c6e6a6312a22db21d", 0xef) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0b372219d205e81f4a7f71c27c4aae1efd7e0054a863f3d5cfe6cb56dc86a5ab3b998d6b831eda9235b5bb9fa6935849e6098ed884e7cb51726b3", 0x3d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a17550988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad1df0cbee75db5969d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x78, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) write$tun(r2, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x27}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0xfd5e, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffff20, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x700, 0x0, 0x18, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2, 0xffffff07, 0x40000000}, @generic={0x0, 0x2, "d588380003c1"}]}}}}}}, 0xfd6c) (async) sendmmsg$inet6(r1, &(0x7f0000001a80)=[{{&(0x7f0000000280)={0xa, 0x0, 0x2, @mcast2, 0x9}, 0x1c, &(0x7f0000000540)=[{&(0x7f0000000100)="8000102e7577d401", 0x8}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x40000000) 20.985552ms ago: executing program 7 (id=8904): socketpair(0x18, 0x800, 0xffff7fff, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000040)={'pimreg1\x00', {0x2, 0x4e22, @multicast2}}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000080)={0x0, 'geneve0\x00', {}, 0x3}) setsockopt$inet6_tcp_int(r0, 0x6, 0x12, &(0x7f00000000c0)=0x3, 0x4) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000100)={0x0, 0x34a6, "f95ab5", 0x68, 0x4}) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000140)={@in6={{0xa, 0x4e20, 0x3, @mcast2, 0x8}}, 0x0, 0x0, 0x30, 0x0, "920b2b0d21dd8b683646664b2603ba74fdc7eb9291d16c4638ac030b4566b524d6bc7cb802d44c8cd0710c255183154820faa98e33b8bda845bb767d9ca35eaca90b9d2e0bc7cd349e41f1441c77bcf8"}, 0xd8) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0xc55, 0x10}, &(0x7f0000000280)=0xc) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f00000002c0)={r2, @in={{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}, [0x7fff, 0x6, 0x80, 0x0, 0x5, 0x801e, 0x4, 0x1, 0x6, 0x2f60000, 0x0, 0x200, 0x5, 0x0, 0x3]}, &(0x7f00000003c0)=0x100) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000440)=@o_path={&(0x7f0000000400)='./file0\x00', 0x0, 0x0, r1}, 0x18) sendto$llc(r1, &(0x7f0000000480)="4b3bed5fca6262796eadb6b388960d99d5ad52234b5feb9147f356e55f85a9e49d79f7bb0eac8bf48736996bb8699ebaffcbdbcb0b0a67ae65f781a8f1c436a412ea8ed7a5b7669a807367ecee5725dbe3fe", 0x52, 0x4040, &(0x7f0000000500)={0x1a, 0x307, 0x9, 0x9, 0xd5, 0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x39}}, 0x10) r4 = socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r4, 0x111, 0x5, 0x4, 0x4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000580), r1) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x34, r6, 0x100, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x19}, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000740)={r3, 0xbc, &(0x7f0000000680)=[@in6={0xa, 0x4e20, 0x4, @mcast1, 0x9}, @in6={0xa, 0x4e22, 0xcda2, @empty, 0x800}, @in={0x2, 0x4e20, @remote}, @in={0x2, 0x7f, @dev={0xac, 0x14, 0x14, 0x19}}, @in6={0xa, 0x4e20, 0x8, @empty, 0x400}, @in6={0xa, 0x4e22, 0x8b, @remote, 0x9}, @in6={0xa, 0x4e21, 0x9, @private1, 0x101}, @in={0x2, 0x4e21, @rand_addr=0x64010100}]}, &(0x7f0000000780)=0x10) setsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f00000007c0)=@assoc_value={r7, 0x81}, 0x8) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000840), r1) sendmsg$NL80211_CMD_GET_POWER_SAVE(r0, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x14, r8, 0x200, 0x70bd29, 0x25dfdbfb, {{}, {@void, @void}}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0xc004010}, 0x80) getsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000940)=@assoc_id=r7, &(0x7f0000000980)=0x4) setsockopt$pppl2tp_PPPOL2TP_SO_SENDSEQ(r1, 0x111, 0x3, 0x1, 0x4) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f00000009c0)) sendmsg$NL80211_CMD_REQ_SET_REG(r0, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x7c, r8, 0x300, 0x70bd2d, 0x25dfdbff, {}, [@NL80211_ATTR_REG_RULES={0x40, 0x22, 0x0, 0x1, [{0x3c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x3}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0xa}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x4}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x8}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x8}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x1}]}]}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x15}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x32}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'b\x00'}, @NL80211_ATTR_DFS_REGION={0x5}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x7c}, 0x1, 0x0, 0x0, 0x58000}, 0x48000) r9 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r9, 0x0, 0x40, &(0x7f0000000bc0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x488, 0x1c8, 0x1c8, 0x330, 0x0, 0x1c8, 0x3f0, 0x3f0, 0x3f0, 0x3f0, 0x3f0, 0x6, &(0x7f0000000b40), {[{{@ip={@local, @empty, 0x0, 0xff, 'gretap0\x00', 'pimreg1\x00', {}, {}, 0x2f, 0x1, 0x28}, 0x0, 0xb0, 0xd8, 0x0, {}, [@common=@set={{0x40}, {{0x2, [0x7, 0x2, 0x0, 0x4, 0x2, 0x2], 0x2, 0x1}}}]}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0x4, 0x7f}}}, {{@ip={@multicast1, @rand_addr=0x64010100, 0x0, 0xffffffff, 'veth0_to_bridge\x00', 'hsr0\x00', {}, {0xff}, 0x1d, 0x2, 0x41}, 0x0, 0xc8, 0xf0, 0x0, {}, [@common=@ah={{0x30}, {[0xffffffff, 0x1]}}, @inet=@rpfilter={{0x28}, {0x4}}]}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x6}}}, {{@uncond, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x9, 0xfffffff8, @private=0xa010100, 0x4e24}}}, {{@uncond, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@addrtype={{0x30}, {0x408, 0x408, 0x1, 0x1}}]}, @inet=@DSCP={0x28, 'DSCP\x00', 0x0, {0x19}}}, {{@ip={@broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xffffffff, 0xff000000, 'veth0_macvtap\x00', 'veth0_to_bridge\x00', {0xff}, {}, 0x6c, 0x0, 0x40}, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@icmp={{0x28}, {0xb, "a4f1"}}]}, @TTL={0x28, 'TTL\x00', 0x0, {0x3, 0x7f}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4e8) select(0x40, &(0x7f00000010c0)={0x8, 0xe, 0xfff, 0xffffffff, 0x2, 0x6, 0x9, 0x8}, &(0x7f0000001100)={0xfffffffffffffffc, 0x7fffffffffffffff, 0x8, 0x0, 0xfffffffffffffeff, 0x1, 0x2, 0x401}, &(0x7f0000001140)={0x6, 0x1, 0xfffffffffffffffb, 0x7ff, 0xeb6, 0xffffffffffffffff, 0x80000001, 0xffff}, &(0x7f0000001180)={0x0, 0xea60}) r10 = accept(r5, 0x0, &(0x7f00000011c0)) r11 = syz_genetlink_get_family_id$devlink(&(0x7f0000001240), r0) sendmsg$DEVLINK_CMD_PORT_SPLIT(r10, &(0x7f0000001400)={&(0x7f0000001200)={0x10, 0x0, 0x0, 0x258b1bfdaf560620}, 0xc, &(0x7f00000013c0)={&(0x7f0000001280)={0x128, r11, 0x8, 0x70bd2a, 0x25dfdbfb, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0x9, 0x3}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0x9, 0x5}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0x9, 0x6}}]}, 0x128}, 0x1, 0x0, 0x0, 0x4000840}, 0x41) 0s ago: executing program 5 (id=8905): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x7, 0x4, 0xc}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007bffff0000000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xd, &(0x7f0000000c80)=ANY=[@ANYRESOCT=r0], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x51, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$SIOCNRDECOBS(r2, 0x89e2) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff002, 0x0, 0x2000000000032, 0xffffffffffffffff, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000180)={'syztnl2\x00', &(0x7f00000003c0)={'ip6gre0\x00', 0x0, 0x2f, 0x0, 0x6, 0x8, 0x41, @mcast1, @rand_addr=' \x01\x00', 0x8000, 0x7, 0xfffffff8, 0x5c69}}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r1, 0x0, 0x6f, 0xbe, &(0x7f0000000700)="53e5a0f2a110bc9c699a277cf93572393ab21a52764b95e02e02f00b8434f6e43e4acf0f0faa76ee9ab4153b58a23c738c60d7c773ae66f148b75ceb0a9f7bf0f54d708be43b00b95ef4829f5133fecb011e9c5e89cd4b3634508e05d7472f3e4afd9e447b233c0f57b868ac4ffcfe", &(0x7f0000000780)=""/190, 0xffff, 0x0, 0xa2, 0x8, &(0x7f0000000840)="52ac81e0f4a643e81c93b2750926772d0e47dda890620f6f3ca9a155bb2e495d7e5c4cd8f99152abe9501351fb893537bc4a5ba315eca810696e3d65cc0e173ec4773af2de7b033248f83f872016ff2d89c27841808b892455461e5721b1140beae5c8fe4589c3b06b39b0422935e4912f914c00a00f77983949e2316cf4cf2cc7d1ee77a47381c3caf854869c8c3d08b78965492d1c13fd89d0166618b72e090700", &(0x7f0000000500)="02b484fcb8062e09", 0x2, 0x0, 0x1}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0x13, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000006001c9c7200488c000000ffffff7f18", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018140000", @ANYRES32=r0, @ANYBLOB="00000000000000001800000000000000000000007b030000bf91000000000000b7020000010000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0xdb, &(0x7f00000002c0)=""/219, 0x41000, 0x0, '\x00', r3, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000440)={0x2, 0x4, 0x8, 0x6}, 0x10, 0x0, 0x0, 0x5, 0x0, &(0x7f0000000480)=[{0x4, 0x2, 0xa, 0x6}, {0x3, 0x2, 0xa, 0x5}, {0x2, 0x4, 0x8, 0x1}, {0x1, 0x5, 0x8, 0x2}, {0x3, 0x5, 0xd, 0x6}], 0x10, 0x3ff}, 0x94) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)={0x40, r5, 0x1, 0x0, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x24, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "127621e0c0b54a63"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="09e03627fc5277779e45ed432a796e45"}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x44140}, 0x0) r7 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r9, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000040)={0x20, 0x140e, 0x88d1b80c9581b3cd, 0x70bd2b, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x4804) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r8) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f0000000b80)={0x1, [0x0]}, &(0x7f0000000bc0)=0x8) r13 = socket$alg(0x26, 0x5, 0x0) bind$alg(r13, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r13, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r14 = accept4(r13, 0x0, 0x0, 0x800) sendmmsg$alg(r14, &(0x7f0000000400)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="1800"], 0x18, 0x8004045}], 0x1, 0x800) recvmmsg(r14, &(0x7f0000000f00)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000280)=""/38, 0x26}], 0x1}, 0x3ff}], 0x1, 0x40002020, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r7, 0x84, 0x66, &(0x7f0000000c00)={r12, 0x7ff}, &(0x7f0000000c40)=0x8) sendmsg$NL80211_CMD_FRAME(r8, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r10, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r11, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) kernel console output (not intermixed with test programs): [ 628.643603][T29298] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6690'. [ 628.683423][T29297] batadv_slave_1: entered promiscuous mode [ 628.725067][T29300] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6690'. [ 628.736265][T29297] batadv_slave_1: left promiscuous mode [ 628.775484][T29301] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6689'. [ 628.785115][T15002] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 628.797601][T15002] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 628.822362][T29305] netlink: 52 bytes leftover after parsing attributes in process `syz.0.6691'. [ 628.839503][T29305] bridge0: port 2(bridge_slave_1) entered disabled state [ 628.846864][T29305] bridge0: port 1(bridge_slave_0) entered disabled state [ 628.912262][ T1112] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 628.923972][ T1112] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 629.232035][ T5852] Bluetooth: hci0: command 0x0c1a tx timeout [ 629.241306][T29324] bridge_slave_1 (unregistering): left allmulticast mode [ 629.250850][T29324] bridge_slave_1 (unregistering): left promiscuous mode [ 629.258450][T29324] bridge0: port 2(bridge_slave_1) entered disabled state [ 629.293807][T29327] tipc: Enabled bearer , priority 13 [ 629.805448][T29365] netlink: 'syz.0.6705': attribute type 1 has an invalid length. [ 629.836487][T29357] xfrm1: entered allmulticast mode [ 629.956758][T29365] bond2: entered promiscuous mode [ 629.970009][T29365] bond2: entered allmulticast mode [ 629.988343][T29365] 8021q: adding VLAN 0 to HW filter on device bond2 [ 630.031811][T29373] macvlan2: entered promiscuous mode [ 630.037692][T29373] macvlan2: entered allmulticast mode [ 630.045420][T29373] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 630.095744][T29376] netlink: 'syz.4.6707': attribute type 58 has an invalid length. [ 630.412627][ T5944] tipc: Node number set to 4064144272 [ 630.469624][T29401] xfrm1: entered allmulticast mode [ 630.495060][T29396] __nla_validate_parse: 8 callbacks suppressed [ 630.495080][T29396] netlink: 128 bytes leftover after parsing attributes in process `syz.2.6715'. [ 630.531732][T29396] netlink: 128 bytes leftover after parsing attributes in process `syz.2.6715'. [ 630.548724][T29406] netlink: 'syz.2.6715': attribute type 6 has an invalid length. [ 630.589169][T29396] netlink: 'syz.2.6715': attribute type 6 has an invalid length. [ 630.717060][T29424] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6723'. [ 630.733057][T29426] netlink: 'syz.4.6723': attribute type 5 has an invalid length. [ 630.779814][T29426] netlink: 3657 bytes leftover after parsing attributes in process `syz.4.6723'. [ 630.790056][T29429] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6724'. [ 630.823044][T29429] bond3: entered promiscuous mode [ 630.829514][T29429] 8021q: adding VLAN 0 to HW filter on device bond3 [ 630.838665][T29429] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6724'. [ 630.848096][T29429] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6724'. [ 630.871488][T29429] bond3: (slave gtp0): refused to change device type [ 630.893034][T29426] netlink: 'syz.4.6723': attribute type 5 has an invalid length. [ 630.935791][T29436] netlink: 'syz.0.6726': attribute type 32 has an invalid length. [ 630.952727][T29436] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6726'. [ 630.972670][T29426] netlink: 3657 bytes leftover after parsing attributes in process `syz.4.6723'. [ 630.984455][T29426] netlink: 'syz.4.6723': attribute type 5 has an invalid length. [ 630.992320][T29426] netlink: 3657 bytes leftover after parsing attributes in process `syz.4.6723'. [ 631.069190][T29436] bond3: option coupled_control: invalid value (52) [ 631.081348][T29436] bond3 (unregistering): Released all slaves [ 631.110114][T29426] netlink: 'syz.4.6723': attribute type 5 has an invalid length. [ 631.964539][T29499] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 632.216179][T29517] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 632.302241][T29515] netdevsim netdevsim0 v: renamed from netdevsim0 [ 632.349516][T29522] bond2: option packets_per_slave: mode dependency failed, not supported in mode active-backup(1) [ 632.381664][T29522] bond2 (unregistering): Released all slaves [ 632.595800][T29539] pimreg: entered allmulticast mode [ 633.167160][T29560] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 633.210093][T29560] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 633.387181][T29588] validate_nla: 32 callbacks suppressed [ 633.387199][T29588] netlink: 'syz.3.6770': attribute type 21 has an invalid length. [ 633.492050][T29560] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 633.553762][T29560] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 633.667779][T29597] IPVS: sh: SCTP 127.0.0.1:0 - no destination available [ 633.757252][T29560] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 633.786420][T29560] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 633.936473][T29560] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 633.968919][T29560] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 634.240695][T29612] team0: Port device team_slave_0 removed [ 634.473468][T24600] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 634.513728][T24600] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 634.575698][T24600] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 634.600952][T24600] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 634.683776][T14991] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 634.704423][T14991] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 634.797113][T29645] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 635.445837][T29666] netlink: 'syz.4.6791': attribute type 33 has an invalid length. [ 635.508378][T29669] netlink: 'syz.1.6792': attribute type 16 has an invalid length. [ 635.525392][T29670] netlink: 'syz.1.6792': attribute type 16 has an invalid length. [ 635.533311][T29669] netlink: 'syz.1.6792': attribute type 17 has an invalid length. [ 635.541302][T29670] netlink: 'syz.1.6792': attribute type 17 has an invalid length. [ 636.402053][ T3852] bond13 (unregistering): (slave ip6gretap1): Releasing active interface [ 636.535010][ T3852] bond2 (unregistering): (slave gretap1): Releasing active interface [ 636.557216][ T3852] bond7 (unregistering): (slave gretap2): Releasing active interface [ 636.629482][ T3852] dvmrp6 (unregistering): left allmulticast mode [ 637.168248][ T3852] bond0 (unregistering): Released all slaves [ 637.281073][ T3852] bond1 (unregistering): (slave veth3): Releasing active interface [ 637.291591][ T3852] bond1 (unregistering): Released all slaves [ 637.405485][ T3852] bond2 (unregistering): Released all slaves [ 637.419700][ T3852] bond3 (unregistering): Released all slaves [ 637.432262][ T3852] bond4 (unregistering): Released all slaves [ 637.446135][ T3852] bond5 (unregistering): Released all slaves [ 637.460821][ T3852] bond6 (unregistering): Released all slaves [ 637.483400][ T3852] bond7 (unregistering): Released all slaves [ 637.498536][ T3852] bond8 (unregistering): Released all slaves [ 637.615661][ T3852] bond9 (unregistering): Released all slaves [ 637.721568][ T3852] bond10 (unregistering): Released all slaves [ 637.831285][ T3852] bond11 (unregistering): Released all slaves [ 637.935112][ T3852] bond12 (unregistering): (slave veth15): Releasing active interface [ 637.946132][ T3852] bond12 (unregistering): (slave veth0_to_bond): Releasing active interface [ 637.956603][ T3852] bond12 (unregistering): Released all slaves [ 638.063049][ T3852] bond13 (unregistering): Released all slaves [ 638.077910][ T3852] bond14 (unregistering): Released all slaves [ 638.090677][ T3852] bond15 (unregistering): Released all slaves [ 638.193578][ T3852] bond16 (unregistering): Released all slaves [ 638.209631][T24600] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 638.218249][T24600] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 638.306354][T29668] bridge0: port 1(bridge_slave_0) entered disabled state [ 638.327703][T29668] bridge0: port 2(bridge_slave_1) entered disabled state [ 638.453980][T29669] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 638.485541][T29670] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 638.638775][T29686] __nla_validate_parse: 49 callbacks suppressed [ 638.638793][T29686] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6796'. [ 638.731846][T29692] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 638.908546][T29709] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.6802'. [ 639.015276][T29716] IPVS: set_ctl: invalid protocol: 58 172.20.20.170:20003 [ 639.100796][T29718] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6805'. [ 639.111824][T29718] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6805'. [ 639.575555][T29727] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 639.605204][T29707] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6799'. [ 640.068543][T29750] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6817'. [ 640.962908][T29770] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 641.099470][T29792] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6830'. [ 641.209537][T29796] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6832'. [ 641.535575][T29817] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6838'. [ 641.550631][T29817] nbd: must specify a device to reconfigure [ 641.577382][T29821] netlink: 256 bytes leftover after parsing attributes in process `syz.4.6839'. [ 641.604794][T29821] netlink: 'syz.4.6839': attribute type 9 has an invalid length. [ 641.714058][T29834] openvswitch: netlink: Flow key attr not present in new flow. [ 641.734336][T29833] netlink: 'syz.0.6844': attribute type 16 has an invalid length. [ 641.746342][T29833] netlink: 'syz.0.6844': attribute type 3 has an invalid length. [ 642.707412][T29862] netlink: 'syz.2.6853': attribute type 11 has an invalid length. [ 642.867946][T29874] netlink: 'syz.2.6857': attribute type 2 has an invalid length. [ 643.054436][T29888] bond3: option resend_igmp: invalid value (32767) [ 643.061008][T29888] bond3: option resend_igmp: allowed values 0 - 255 [ 643.119048][T29888] bond3 (unregistering): Released all slaves [ 643.697711][T29939] __nla_validate_parse: 10 callbacks suppressed [ 643.697730][T29939] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.6876'. [ 643.961677][T29948] netlink: 'syz.2.6879': attribute type 13 has an invalid length. [ 643.985742][T29948] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6879'. [ 644.007637][T29961] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 644.036799][T29961] syzkaller1: Refused to change device type [ 644.274407][T29980] bond1: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 644.329592][T29980] bond1 (unregistering): Released all slaves [ 644.394804][T29981] bond1: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 644.419733][T29995] netlink: 'syz.4.6891': attribute type 10 has an invalid length. [ 644.429580][T29981] bond1 (unregistering): Released all slaves [ 644.446844][T29996] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6893'. [ 644.456114][T29996] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6893'. [ 644.489981][T29995] team0: Port device dummy0 added [ 644.627572][T30002] batadv_slave_1: entered promiscuous mode [ 644.640804][T30000] batadv_slave_1: left promiscuous mode [ 644.727630][T30004] netlink: 'syz.0.6896': attribute type 2 has an invalid length. [ 644.869528][T30021] veth0: entered promiscuous mode [ 644.910358][T30019] veth0: left promiscuous mode [ 644.933969][T30032] netlink: 64 bytes leftover after parsing attributes in process `syz.2.6903'. [ 645.099804][T30042] netlink: 88 bytes leftover after parsing attributes in process `syz.1.6906'. [ 645.111658][T30047] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 645.353053][T30064] openvswitch: netlink: ufid size 17 bytes exceeds the range (1, 16) [ 645.385006][T30064] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 645.444388][T30067] netlink: 84 bytes leftover after parsing attributes in process `syz.4.6915'. [ 645.452849][T30073] netlink: 84 bytes leftover after parsing attributes in process `syz.4.6915'. [ 645.588101][T30067] 8021q: adding VLAN 0 to HW filter on device bond2 [ 645.595720][T30066] bond2: option mode: unable to set because the bond device is up [ 645.615313][T14992] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 645.625785][T14992] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 645.648982][T30073] bond_slave_0: entered promiscuous mode [ 645.656416][T30073] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 645.669360][T30073] bond2: (slave macvlan2): Enslaving as a backup interface with an up link [ 645.683766][T14992] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 645.695530][T14992] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 645.711587][T30086] syzkaller0: entered promiscuous mode [ 645.730337][T30086] syzkaller0: entered allmulticast mode [ 646.047882][T30108] netlink: 60 bytes leftover after parsing attributes in process `syz.1.6926'. [ 646.061962][T30108] tipc: Started in network mode [ 646.068134][T30108] tipc: Node identity 964fb3596455, cluster identity 4711 [ 646.076191][T30108] tipc: Enabled bearer , priority 0 [ 646.083387][T30113] veth0: entered promiscuous mode [ 646.088810][T30108] syzkaller0: entered promiscuous mode [ 646.096456][T30108] syzkaller0: entered allmulticast mode [ 646.137064][T30108] tipc: Resetting bearer [ 646.151643][T30111] veth0: left promiscuous mode [ 646.198559][T30107] tipc: Resetting bearer [ 646.268205][T30107] tipc: Disabling bearer [ 646.527481][T30137] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6937'. [ 646.636107][T30145] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 646.792177][T30154] netlink: 'syz.4.6943': attribute type 1 has an invalid length. [ 646.806606][T30157] netlink: 'syz.2.6944': attribute type 29 has an invalid length. [ 646.816150][T30157] netlink: 'syz.2.6944': attribute type 29 has an invalid length. [ 646.850738][T30159] netlink: 'syz.1.6942': attribute type 1 has an invalid length. [ 646.870435][T30154] 8021q: adding VLAN 0 to HW filter on device bond3 [ 647.281140][T30195] net veth1_virt_wifi .: renamed from virt_wifi0 [ 647.367390][T30201] netlink: 'syz.2.6954': attribute type 3 has an invalid length. [ 647.772257][T30234] tipc: Enabled bearer , priority 0 [ 647.781894][T30234] syzkaller0: entered promiscuous mode [ 647.787868][T30234] syzkaller0: entered allmulticast mode [ 647.801350][T30234] tipc: Resetting bearer [ 647.815575][T30233] tipc: Resetting bearer [ 647.834836][T30233] tipc: Disabling bearer [ 649.565265][T30351] __nla_validate_parse: 6 callbacks suppressed [ 649.565283][T30351] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6994'. [ 649.638461][T30360] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6996'. [ 649.683014][T30358] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6996'. [ 649.697468][T30360] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 649.753656][T30360] gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 649.761655][T30360] gretap2: entered promiscuous mode [ 649.763737][T30366] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 649.795087][T30360] gretap2: entered allmulticast mode [ 649.796674][ T5844] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 649.812891][ T5844] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 649.821878][ T5844] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 649.834788][ T5844] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 649.851596][ T5844] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 650.388413][T30407] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7006'. [ 650.570178][T30412] netlink: 84 bytes leftover after parsing attributes in process `syz.1.7008'. [ 650.594608][T30367] chnl_net:caif_netlink_parms(): no params data found [ 650.721595][T30420] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7010'. [ 650.735916][T30420] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 650.775907][T30419] netlink: 48 bytes leftover after parsing attributes in process `syz.2.7011'. [ 650.812374][T30426] bridge1: entered allmulticast mode [ 650.953716][T30435] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc. [ 651.047687][T30433] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 651.059832][T30433] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 651.080099][T30367] bridge0: port 1(bridge_slave_0) entered blocking state [ 651.088085][T30367] bridge0: port 1(bridge_slave_0) entered disabled state [ 651.098005][T30367] bridge_slave_0: entered allmulticast mode [ 651.107412][T30445] netlink: 'syz.1.7017': attribute type 1 has an invalid length. [ 651.108777][T30367] bridge_slave_0: entered promiscuous mode [ 651.134685][T30367] bridge0: port 2(bridge_slave_1) entered blocking state [ 651.142112][T30367] bridge0: port 2(bridge_slave_1) entered disabled state [ 651.153871][T30367] bridge_slave_1: entered allmulticast mode [ 651.163262][T30367] bridge_slave_1: entered promiscuous mode [ 651.249549][T30449] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7020'. [ 651.254613][T30433] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 651.270762][T30433] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 651.408507][T30367] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 651.421978][T30367] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 651.486962][T30433] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 651.504811][T30433] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 651.580918][T30367] team0: Port device team_slave_0 added [ 651.617595][T30433] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 651.633603][T30433] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 651.658553][T30367] team0: Port device team_slave_1 added [ 651.731134][T30469] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7026'. [ 651.799944][T30367] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 651.818154][T30367] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 651.845899][T30367] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 651.859577][T30367] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 651.868263][T30367] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 651.906198][T30367] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 651.945436][ T5844] Bluetooth: hci2: command tx timeout [ 651.956502][T14992] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 651.972862][T14992] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 651.983171][T30475] vcan0: entered allmulticast mode [ 652.065285][T30475] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7029'. [ 652.069625][T24598] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 652.088390][T24598] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 652.156994][T24598] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 652.166791][T24598] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 652.181243][T30367] hsr_slave_0: entered promiscuous mode [ 652.203727][T30367] hsr_slave_1: entered promiscuous mode [ 652.210243][T30367] debugfs: 'hsr0' already exists in 'hsr' [ 652.216489][T30367] Cannot create hsr debugfs directory [ 652.236163][T24598] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 652.244681][T24598] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 652.654870][T30512] netlink: 'syz.2.7038': attribute type 21 has an invalid length. [ 652.683785][T30512] IPv6: NLM_F_CREATE should be specified when creating new route [ 652.691651][T30512] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 652.698938][T30512] IPv6: NLM_F_CREATE should be set when creating new route [ 652.706262][T30512] IPv6: NLM_F_CREATE should be set when creating new route [ 652.713543][T30512] IPv6: NLM_F_CREATE should be set when creating new route [ 652.770488][T30367] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 652.787370][T30367] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 652.799016][T30367] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 652.816574][T30367] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 653.013398][T30367] 8021q: adding VLAN 0 to HW filter on device bond0 [ 653.046613][T30367] 8021q: adding VLAN 0 to HW filter on device team0 [ 653.060792][T14999] bridge0: port 1(bridge_slave_0) entered blocking state [ 653.068018][T14999] bridge0: port 1(bridge_slave_0) entered forwarding state [ 653.099092][T14999] bridge0: port 2(bridge_slave_1) entered blocking state [ 653.106352][T14999] bridge0: port 2(bridge_slave_1) entered forwarding state [ 653.495506][T30563] syzkaller1: entered promiscuous mode [ 653.517779][T30563] syzkaller1: entered allmulticast mode [ 653.588981][T30367] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 653.803489][T30579] netlink: 'syz.4.7055': attribute type 1 has an invalid length. [ 654.012845][T30580] xt_CT: You must specify a L4 protocol and not use inversions on it [ 654.026607][ T5844] Bluetooth: hci2: command tx timeout [ 654.193425][T30367] veth0_vlan: entered promiscuous mode [ 654.217448][T30367] veth1_vlan: entered promiscuous mode [ 654.273880][T30597] pimreg: entered allmulticast mode [ 654.337581][T30367] veth0_macvtap: entered promiscuous mode [ 654.374438][T30367] veth1_macvtap: entered promiscuous mode [ 654.440818][T30367] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 654.472922][T30367] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 654.518212][T30607] netlink: 'syz.4.7064': attribute type 5 has an invalid length. [ 654.528503][T24598] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 654.560358][T30603] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 654.575196][T30603] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 654.593751][T24598] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 654.602728][T24598] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 654.611530][T24598] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 654.629792][T30607] geneve2: entered promiscuous mode [ 654.643859][T30607] geneve2: entered allmulticast mode [ 654.655540][T30612] veth1_macvtap: left promiscuous mode [ 654.667443][T24598] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 39599 - 0 [ 654.748548][T24598] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 39599 - 0 [ 654.760915][T24598] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 39599 - 0 [ 654.795995][T30603] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 654.806119][T30603] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 654.816724][T30603] netdevsim netdevsim4 eth2 (unregistering): unset [1, 1] type 2 family 0 port 39599 - 0 [ 654.862128][T14999] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 654.887077][T14999] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 654.933434][T30621] sctp: [Deprecated]: syz.0.7068 (pid 30621) Use of struct sctp_assoc_value in delayed_ack socket option. [ 654.933434][T30621] Use struct sctp_sack_info instead [ 654.954686][T30603] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 654.990059][T30603] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 655.000570][T30603] netdevsim netdevsim4 eth1 (unregistering): unset [1, 1] type 2 family 0 port 39599 - 0 [ 655.033804][T24600] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 655.047275][T30625] __nla_validate_parse: 8 callbacks suppressed [ 655.047295][T30625] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.7070'. [ 655.065420][T24600] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 655.109242][T30603] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 655.130144][T30603] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 655.162318][T30603] netdevsim netdevsim4 eth0 (unregistering): unset [1, 1] type 2 family 0 port 39599 - 0 [ 655.213255][T30633] warn_alloc: 1 callbacks suppressed [ 655.213268][T30633] syz.2.7072: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 655.257923][T30633] CPU: 1 UID: 0 PID: 30633 Comm: syz.2.7072 Not tainted syzkaller #0 PREEMPT(full) [ 655.257951][T30633] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 655.257963][T30633] Call Trace: [ 655.257972][T30633] [ 655.257981][T30633] dump_stack_lvl+0x189/0x250 [ 655.258009][T30633] ? __pfx_dump_stack_lvl+0x10/0x10 [ 655.258029][T30633] ? __pfx__printk+0x10/0x10 [ 655.258052][T30633] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 655.258087][T30633] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 655.258117][T30633] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 655.258145][T30633] warn_alloc+0x214/0x310 [ 655.258167][T30633] ? stack_depot_save_flags+0x40/0x850 [ 655.258193][T30633] ? __pfx_warn_alloc+0x10/0x10 [ 655.258217][T30633] ? kasan_save_track+0x3e/0x80 [ 655.258237][T30633] ? __kasan_kmalloc+0x93/0xb0 [ 655.258261][T30633] ? xsk_setsockopt+0x4dc/0x8d0 [ 655.258277][T30633] ? do_sock_setsockopt+0x17c/0x1b0 [ 655.258301][T30633] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 655.258323][T30633] ? do_syscall_64+0xfa/0xf80 [ 655.258342][T30633] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 655.258369][T30633] __vmalloc_node_range_noprof+0x125/0x12d0 [ 655.258422][T30633] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 655.258447][T30633] ? __kasan_kmalloc+0x93/0xb0 [ 655.258474][T30633] vmalloc_user_noprof+0xad/0xf0 [ 655.258496][T30633] ? xskq_create+0xbf/0x170 [ 655.258516][T30633] xskq_create+0xbf/0x170 [ 655.258539][T30633] xsk_init_queue+0xb0/0x110 [ 655.258558][T30633] xsk_setsockopt+0x4dc/0x8d0 [ 655.258576][T30633] ? __pfx_xsk_setsockopt+0x10/0x10 [ 655.258597][T30633] ? __pfx_aa_sk_perm+0x10/0x10 [ 655.258625][T30633] ? aa_sock_opt_perm+0xff/0x1a0 [ 655.258646][T30633] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 655.258669][T30633] ? __pfx_xsk_setsockopt+0x10/0x10 [ 655.258689][T30633] do_sock_setsockopt+0x17c/0x1b0 [ 655.258718][T30633] __x64_sys_setsockopt+0x13f/0x1b0 [ 655.258747][T30633] do_syscall_64+0xfa/0xf80 [ 655.258769][T30633] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 655.258787][T30633] ? clear_bhb_loop+0x60/0xb0 [ 655.258806][T30633] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 655.258822][T30633] RIP: 0033:0x7f99cf78f749 [ 655.258839][T30633] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 655.258853][T30633] RSP: 002b:00007f99cd9f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 655.258871][T30633] RAX: ffffffffffffffda RBX: 00007f99cf9e5fa0 RCX: 00007f99cf78f749 [ 655.258884][T30633] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000006 [ 655.258895][T30633] RBP: 00007f99cf813f91 R08: 0000000000000004 R09: 0000000000000000 [ 655.258907][T30633] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 655.258919][T30633] R13: 00007f99cf9e6038 R14: 00007f99cf9e5fa0 R15: 00007ffe4157ace8 [ 655.258951][T30633] [ 655.258959][T30633] Mem-Info: [ 655.279072][T30634] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7072'. [ 655.316916][T30633] active_anon:5141 inactive_anon:0 isolated_anon:0 [ 655.316916][T30633] active_file:3018 inactive_file:40119 isolated_file:0 [ 655.316916][T30633] unevictable:768 dirty:71 writeback:0 [ 655.316916][T30633] slab_reclaimable:13740 slab_unreclaimable:193936 [ 655.316916][T30633] mapped:35353 shmem:1359 pagetables:1224 [ 655.316916][T30633] sec_pagetables:0 bounce:0 [ 655.316916][T30633] kernel_misc_reclaimable:0 [ 655.316916][T30633] free:1204666 free_pcp:17906 free_cma:0 [ 655.384289][T30638] bridge2: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 655.398986][T30633] Node 0 active_anon:20664kB inactive_anon:0kB active_file:12072kB inactive_file:160276kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:141412kB dirty:284kB writeback:0kB shmem:3900kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:18384kB pagetables:4860kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 655.674387][T30633] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:136kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 655.710196][T30633] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 655.741608][T30633] lowmem_reserve[]: 0 2504 2504 2504 2504 [ 655.749169][T30633] Node 0 DMA32 free:907176kB boost:0kB min:34308kB low:42884kB high:51460kB reserved_highatomic:0KB free_highatomic:0KB active_anon:20564kB inactive_anon:0kB active_file:12072kB inactive_file:160276kB unevictable:1536kB writepending:284kB zspages:0kB present:3129332kB managed:2564520kB mlocked:0kB bounce:0kB free_pcp:57812kB local_pcp:39152kB free_cma:0kB [ 655.784565][T30633] lowmem_reserve[]: 0 0 0 0 0 [ 655.786165][T30649] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7075'. [ 655.789322][T30633] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 655.832860][T30633] lowmem_reserve[]: 0 0 0 0 0 [ 655.837641][T30633] Node 1 Normal free:3896128kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:12992kB local_pcp:7104kB free_cma:0kB [ 655.877468][T30633] lowmem_reserve[]: 0 0 0 0 0 [ 655.883738][T30633] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 655.943513][T30633] Node 0 DMA32: 80*4kB (UME) 18*8kB (UM) 9*16kB (UM) 7*32kB (UME) 18*64kB (UME) 8*128kB (UME) 155*256kB (UME) 77*512kB (UM) 67*1024kB (UME) 12*2048kB (UME) 179*4096kB (UM) = 908480kB [ 655.962616][T30633] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 655.974616][T30633] Node 1 Normal: 198*4kB (UM) 61*8kB (UME) 50*16kB (UME) 214*32kB (UME) 58*64kB (UME) 16*128kB (UME) 4*256kB (UME) 3*512kB (ME) 2*1024kB (ME) 1*2048kB (E) 946*4096kB (M) = 3896160kB [ 655.998167][T30633] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 656.009976][T30633] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 656.020357][T30633] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 656.033446][T30653] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7077'. [ 656.034485][T30633] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 656.051962][T30655] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7077'. [ 656.063276][T30633] 44495 total pagecache pages [ 656.068148][T30633] 0 pages in swap cache [ 656.072310][T30633] Free swap = 124996kB [ 656.103129][ T5844] Bluetooth: hci2: command tx timeout [ 656.104546][T30633] Total swap = 124996kB [ 656.149655][T30633] 2097051 pages RAM [ 656.155097][T30633] 0 pages HighMem/MovableOnly [ 656.159916][T30633] 424279 pages reserved [ 656.165878][T30633] 0 pages cma reserved [ 656.201425][ T6084] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 656.211302][ T6084] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 39599 - 0 [ 656.231541][ T6084] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 656.234138][T30661] netlink: 27 bytes leftover after parsing attributes in process `syz.0.7079'. [ 656.275380][T14999] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 656.292725][T14999] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 39599 - 0 [ 656.307966][T14999] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 656.411857][T14999] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 656.442079][T14999] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 39599 - 0 [ 656.471457][T14999] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 656.531004][T24598] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 656.554113][T24598] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 39599 - 0 [ 656.581245][T24598] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 656.666122][T30686] x_tables: ip6_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 656.755710][T30688] openvswitch: netlink: Message has 592 unknown bytes. [ 656.767923][T30692] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7088'. [ 656.769023][T30688] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 656.923905][T30697] netlink: 'syz.5.7090': attribute type 2 has an invalid length. [ 656.963108][T30697] netlink: 'syz.5.7090': attribute type 8 has an invalid length. [ 656.970868][T30699] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.7091'. [ 656.981618][T30697] netlink: 132 bytes leftover after parsing attributes in process `syz.5.7090'. [ 657.400033][T30716] xt_policy: output policy not valid in PREROUTING and INPUT [ 657.656491][T30725] bond0: (slave wg1): Error: Device can not be enslaved while up [ 658.183808][ T5844] Bluetooth: hci2: command tx timeout [ 658.276544][T30761] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7109'. [ 658.547126][T30775] "syz.1.7115" (30775) uses obsolete ecb(arc4) skcipher [ 658.657651][T30779] nbd: illegal input index -8454144 [ 658.696149][T30786] netlink: 'syz.1.7119': attribute type 1 has an invalid length. [ 658.718508][T30789] netlink: 'syz.2.7120': attribute type 33 has an invalid length. [ 658.744240][T30788] netlink: 'syz.2.7120': attribute type 33 has an invalid length. [ 658.754027][T30786] 8021q: adding VLAN 0 to HW filter on device bond3 [ 658.764376][T30788] netlink: 'syz.2.7120': attribute type 33 has an invalid length. [ 658.777911][T30786] bond3: entered promiscuous mode [ 658.789474][T30786] bond3: entered allmulticast mode [ 658.797375][T30789] netlink: 'syz.2.7120': attribute type 33 has an invalid length. [ 658.817539][T30795] syzkaller0: entered promiscuous mode [ 658.818608][T30788] netlink: 'syz.2.7120': attribute type 33 has an invalid length. [ 658.837089][T30795] syzkaller0: entered allmulticast mode [ 658.845386][T30788] netlink: 'syz.2.7120': attribute type 33 has an invalid length. [ 658.853849][T30788] netlink: 'syz.2.7120': attribute type 33 has an invalid length. [ 658.870395][T30789] netlink: 'syz.2.7120': attribute type 33 has an invalid length. [ 658.885388][T30789] netlink: 'syz.2.7120': attribute type 33 has an invalid length. [ 658.952993][T30798] tipc: Started in network mode [ 658.957907][T30798] tipc: Node identity f28d89313f1e, cluster identity 4711 [ 658.966099][T30798] tipc: Enabled bearer , priority 0 [ 659.074347][T30799] openvswitch: netlink: IP tunnel dst address not specified [ 659.259524][T30816] veth0_macvtap: left promiscuous mode [ 659.388165][ T5998] IPVS: starting estimator thread 0... [ 659.405788][T30818] can: request_module (can-proto-0) failed. [ 659.494005][T30829] IPVS: using max 34 ests per chain, 81600 per kthread [ 659.647339][T30843] veth0: entered promiscuous mode [ 659.654431][T30840] veth0: left promiscuous mode [ 660.082654][ T5899] tipc: Node number set to 3448998193 [ 660.356324][T30900] sctp: [Deprecated]: syz.2.7152 (pid 30900) Use of struct sctp_assoc_value in delayed_ack socket option. [ 660.356324][T30900] Use struct sctp_sack_info instead [ 660.412171][T30900] pim6reg: entered allmulticast mode [ 660.437842][T30907] tipc: Enabled bearer , priority 0 [ 660.540022][T30907] tipc: Disabling bearer [ 660.707526][T30927] Cannot find add_set index 2 as target [ 660.728779][T30927] __nla_validate_parse: 10 callbacks suppressed [ 660.728798][T30927] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7157'. [ 660.751148][T30928] : renamed from bridge_slave_0 (while UP) [ 660.766874][T30927] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7157'. [ 661.074499][T30952] openvswitch: netlink: Multiple metadata blocks provided [ 661.145301][T30956] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7169'. [ 661.166175][T30954] sch_tbf: burst 512 is lower than device syzkaller0 mtu (1500) ! [ 661.289620][T30965] bond2: (slave gretap3): making interface the new active one [ 661.296940][T30967] netlink: 165 bytes leftover after parsing attributes in process `syz.4.7172'. [ 661.298376][T30965] bond2: (slave gretap3): Enslaving as an active interface with an up link [ 661.323591][T30961] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7170'. [ 661.344149][T30961] bond2 (unregistering): (slave gretap3): Releasing active interface [ 661.368902][T30961] bond2 (unregistering): Released all slaves [ 661.411765][T30969] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 661.419918][T30970] netlink: 72 bytes leftover after parsing attributes in process `syz.5.7173'. [ 661.557093][T30979] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000 [ 661.588859][T30978] bond5: option all_slaves_active: invalid value (222) [ 661.599421][T30978] bond5 (unregistering): Released all slaves [ 661.706520][T30989] bond2: entered promiscuous mode [ 661.712197][T30989] 8021q: adding VLAN 0 to HW filter on device bond2 [ 661.740408][T30992] bridge1: entered promiscuous mode [ 661.772768][T30992] bridge1: entered allmulticast mode [ 661.794214][T30992] team0: Port device bridge1 added [ 661.857736][T30989] bond2: (slave bridge4): making interface the new active one [ 661.860932][T31004] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7183'. [ 661.876276][T30989] bridge4: entered promiscuous mode [ 661.877717][T30989] bond2: (slave bridge4): Enslaving as an active interface with an up link [ 661.985896][T31008] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7182'. [ 662.111416][T31014] 8021q: adding VLAN 0 to HW filter on device bond3 [ 662.136844][T31014] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7186'. [ 662.157059][T31014] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7186'. [ 662.223330][T31019] gretap0: refused to change device tx_queue_len [ 662.233417][T31019] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 662.347429][T31031] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0 [ 662.358499][T31031] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 662.369837][T31031] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0 [ 662.640285][T31046] sctp: [Deprecated]: syz.1.7195 (pid 31046) Use of struct sctp_assoc_value in delayed_ack socket option. [ 662.640285][T31046] Use struct sctp_sack_info instead [ 663.223537][T31080] 8021q: adding VLAN 0 to HW filter on device bond1 [ 663.314965][T31087] bond1: (slave veth3): Enslaving as an active interface with a down link [ 663.365903][T31080] bond1: (slave veth0_to_bond): making interface the new active one [ 663.376049][T31080] veth0_to_bond: entered promiscuous mode [ 663.382336][T31080] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 663.445649][T31087] bond1: (slave veth5): Enslaving as an active interface with a down link [ 663.580562][T31106] vlan2: entered promiscuous mode [ 663.589556][ T5998] IPVS: starting estimator thread 0... [ 663.603799][T31106] geneve1: entered promiscuous mode [ 663.615053][T31106] vlan2: entered allmulticast mode [ 663.620456][T31106] geneve1: entered allmulticast mode [ 663.704917][T31117] IPVS: using max 28 ests per chain, 67200 per kthread [ 663.841365][T31133] validate_nla: 130 callbacks suppressed [ 663.841383][T31133] netlink: 'syz.5.7220': attribute type 5 has an invalid length. [ 663.984531][T31146] syzkaller0: entered promiscuous mode [ 663.990134][T31146] syzkaller0: entered allmulticast mode [ 664.595951][T31191] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 664.947411][T31215] openvswitch: netlink: IP tunnel dst address not specified [ 665.029320][T31221] netlink: 'syz.1.7245': attribute type 83 has an invalid length. [ 665.042094][T31222] x_tables: duplicate underflow at hook 3 [ 665.114131][T31228] wg1: entered promiscuous mode [ 665.119308][T31228] wg1: entered allmulticast mode [ 665.233439][T31232] SET target dimension over the limit! [ 665.288562][T31231] wireguard0: entered promiscuous mode [ 665.294550][T31231] wireguard0: entered allmulticast mode [ 665.307630][T31231] team0: Device wireguard0 is of different type [ 665.825733][T31247] netem: change failed [ 665.851212][T31247] netem: change failed [ 665.870840][T31247] netem: change failed [ 665.885466][T31247] netem: change failed [ 665.925339][T31247] netem: change failed [ 665.954741][T31247] netem: change failed [ 665.963836][T31247] netem: change failed [ 665.986438][T31247] netem: change failed [ 665.992083][T31247] netem: change failed [ 666.012819][T31247] netem: change failed [ 666.018716][T31247] netem: change failed [ 666.044131][T31247] netem: change failed [ 666.063724][T31247] netem: change failed [ 666.063859][T31254] netlink: 'syz.5.7263': attribute type 2 has an invalid length. [ 666.074971][ T5852] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 666.086123][T31247] netem: change failed [ 666.094762][ T5852] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 666.106904][T31247] netem: change failed [ 666.111529][ T5852] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 666.119771][T31247] netem: change failed [ 666.120760][ T5852] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 666.134178][ T5852] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 666.163145][T31254] 9: entered promiscuous mode [ 666.173308][T31247] netem: change failed [ 666.203223][T31247] netem: change failed [ 666.211603][ T5844] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 666.222022][T31259] __nla_validate_parse: 17 callbacks suppressed [ 666.222040][T31259] netlink: 23 bytes leftover after parsing attributes in process `syz.4.7264'. [ 666.233211][ T5844] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 666.240784][T31247] netem: change failed [ 666.246881][ T5844] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 666.257582][ T5844] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 666.267846][ T5844] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 666.268016][T31247] netem: change failed [ 666.309151][T31263] macvtap0: Device is already in use. [ 666.316186][T31264] macvtap0: Device is already in use. [ 666.322252][T31247] netem: change failed [ 666.328885][T31247] netem: change failed [ 666.341811][T31247] netem: change failed [ 666.358437][T31247] netem: change failed [ 666.366833][T31263] tipc: Started in network mode [ 666.371767][T31263] tipc: Node identity 465e73e7c9e2, cluster identity 4711 [ 666.379921][T31263] tipc: Enabled bearer , priority 0 [ 666.392776][T31247] netem: change failed [ 666.409065][T31247] netem: change failed [ 666.420901][T31247] netem: change failed [ 666.427633][T31247] netem: change failed [ 666.435210][T31263] syzkaller0: entered promiscuous mode [ 666.440683][T31263] syzkaller0: entered allmulticast mode [ 666.448339][T31268] netlink: 'syz.4.7266': attribute type 4 has an invalid length. [ 666.456601][T31268] netlink: 152 bytes leftover after parsing attributes in process `syz.4.7266'. [ 666.486992][T31247] netem: change failed [ 666.513207][T31268] `: renamed from bond0 (while UP) [ 666.529795][T31268] bond_slave_0: left promiscuous mode [ 666.555876][T31247] netem: change failed [ 666.565304][T31263] tipc: Resetting bearer [ 666.583739][T31262] tipc: Resetting bearer [ 666.630093][T31262] tipc: Disabling bearer [ 666.660139][T31247] netem: change failed [ 666.951364][T31293] netlink: 24 bytes leftover after parsing attributes in process `syz.5.7272'. [ 666.987447][T31294] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7272'. [ 667.023102][T31293] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7272'. [ 667.126573][T31297] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7273'. [ 667.167047][T31255] chnl_net:caif_netlink_parms(): no params data found [ 667.513553][T31327] IPVS: set_ctl: invalid protocol: 0 172.30.0.5:20002 [ 667.593727][T31255] bridge0: port 1(bridge_slave_0) entered blocking state [ 667.624132][T31255] bridge0: port 1(bridge_slave_0) entered disabled state [ 667.651461][T31255] bridge_slave_0: entered allmulticast mode [ 667.687171][T31255] bridge_slave_0: entered promiscuous mode [ 667.729744][T31255] bridge0: port 2(bridge_slave_1) entered blocking state [ 667.750180][T31255] bridge0: port 2(bridge_slave_1) entered disabled state [ 667.770789][T31255] bridge_slave_1: entered allmulticast mode [ 667.791538][T31255] bridge_slave_1: entered promiscuous mode [ 667.827262][T31260] chnl_net:caif_netlink_parms(): no params data found [ 667.963433][T31351] netlink: 36 bytes leftover after parsing attributes in process `syz.5.7282'. [ 668.191263][ T5844] Bluetooth: hci1: command tx timeout [ 668.198894][T31364] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7282'. [ 668.237765][T31255] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 668.342956][ T5844] Bluetooth: hci4: command tx timeout [ 668.417652][T31255] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 668.525635][T31255] team0: Port device team_slave_0 added [ 668.579301][T31382] x_tables: duplicate underflow at hook 1 [ 668.615753][T31382] xt_CT: You must specify a L4 protocol and not use inversions on it [ 668.626637][T31255] team0: Port device team_slave_1 added [ 668.703719][T31260] bridge0: port 1(bridge_slave_0) entered blocking state [ 668.715014][T31260] bridge0: port 1(bridge_slave_0) entered disabled state [ 668.730470][T31260] bridge_slave_0: entered allmulticast mode [ 668.739940][T31260] bridge_slave_0: entered promiscuous mode [ 668.776540][T31260] bridge0: port 2(bridge_slave_1) entered blocking state [ 668.786452][T31260] bridge0: port 2(bridge_slave_1) entered disabled state [ 668.794522][T31260] bridge_slave_1: entered allmulticast mode [ 668.801990][T31260] bridge_slave_1: entered promiscuous mode [ 668.810957][T31255] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 668.818078][T31255] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 668.846473][T31255] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 668.879900][T31391] tipc: Started in network mode [ 668.885066][T31391] tipc: Node identity 9e7d4bae4f71, cluster identity 4711 [ 668.896644][T31391] tipc: Enabled bearer , priority 0 [ 668.907659][T31255] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 668.915473][T31255] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 668.941998][T31255] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 668.974448][T31391] syzkaller0: entered promiscuous mode [ 668.979971][T31391] syzkaller0: entered allmulticast mode [ 669.029560][T31260] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 669.041925][T31391] tipc: Resetting bearer [ 669.071909][T31391] tipc: Disabling bearer [ 669.093962][T31260] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 669.254902][T31255] hsr_slave_0: entered promiscuous mode [ 669.266461][T31255] hsr_slave_1: entered promiscuous mode [ 669.273924][T31255] debugfs: 'hsr0' already exists in 'hsr' [ 669.306241][T31255] Cannot create hsr debugfs directory [ 669.318150][T31260] team0: Port device team_slave_0 added [ 669.367651][T31260] team0: Port device team_slave_1 added [ 669.375226][T31414] netlink: 'syz.5.7302': attribute type 2 has an invalid length. [ 669.526146][T31425] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7305'. [ 669.548270][T31260] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 669.557718][T31260] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 669.591699][T31260] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 669.605449][T31260] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 669.614580][T31260] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 669.644111][T31260] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 669.667482][T31432] netlink: 'syz.5.7307': attribute type 11 has an invalid length. [ 669.781929][T31437] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7309'. [ 669.809324][T31260] hsr_slave_0: entered promiscuous mode [ 669.816663][T31260] hsr_slave_1: entered promiscuous mode [ 669.824683][T31260] debugfs: 'hsr0' already exists in 'hsr' [ 669.831014][T31260] Cannot create hsr debugfs directory [ 670.264504][T31255] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 670.273521][ T5844] Bluetooth: hci1: command tx timeout [ 670.287469][T31255] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 670.339845][T31255] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 670.391046][T31255] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 670.424974][ T5844] Bluetooth: hci4: command tx timeout [ 670.485641][T31457] bond2: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 670.506320][T31457] bond2: (slave lo): Enslaving as a backup interface with an up link [ 670.519305][T31457] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 670.547372][T31465] nbd: must specify an index to disconnect [ 670.603579][T31260] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 670.667780][T31460] syzkaller0: entered promiscuous mode [ 670.674173][T31460] syzkaller0: entered allmulticast mode [ 670.685173][T31260] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 670.726906][T31260] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 670.751980][T31480] IPv6: NLM_F_CREATE should be specified when creating new route [ 670.760065][T31480] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 670.767339][T31480] IPv6: NLM_F_CREATE should be set when creating new route [ 670.775066][T31260] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 670.788577][T31480] netlink: 'syz.5.7321': attribute type 9 has an invalid length. [ 672.343701][ T5844] Bluetooth: hci1: command tx timeout [ 672.507574][ T5844] Bluetooth: hci4: command tx timeout [ 672.538456][T31485] __nla_validate_parse: 5 callbacks suppressed [ 672.538472][T31485] netlink: 44 bytes leftover after parsing attributes in process `syz.4.7323'. [ 672.657611][T31499] bond_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 672.704354][T31499] bond_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 672.771422][T31255] 8021q: adding VLAN 0 to HW filter on device bond0 [ 672.848312][T31255] 8021q: adding VLAN 0 to HW filter on device team0 [ 672.915319][ T1112] bridge0: port 1(bridge_slave_0) entered blocking state [ 672.922502][ T1112] bridge0: port 1(bridge_slave_0) entered forwarding state [ 672.968505][T31260] 8021q: adding VLAN 0 to HW filter on device bond0 [ 672.990638][ T1112] bridge0: port 2(bridge_slave_1) entered blocking state [ 672.999841][ T1112] bridge0: port 2(bridge_slave_1) entered forwarding state [ 673.029870][T31530] xt_hashlimit: invalid interval [ 673.043852][T31260] 8021q: adding VLAN 0 to HW filter on device team0 [ 673.109728][T14992] bridge0: port 1(bridge_slave_0) entered blocking state [ 673.116961][T14992] bridge0: port 1(bridge_slave_0) entered forwarding state [ 673.136350][T14992] bridge0: port 2(bridge_slave_1) entered blocking state [ 673.143577][T14992] bridge0: port 2(bridge_slave_1) entered forwarding state [ 673.479739][T31255] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 673.530111][T31260] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 673.923642][T31563] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7337'. [ 673.933940][T31566] netlink: 48 bytes leftover after parsing attributes in process `syz.1.7338'. [ 673.998934][T31570] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7339'. [ 674.020920][T31575] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7339'. [ 674.193895][T31255] veth0_vlan: entered promiscuous mode [ 674.244135][T31255] veth1_vlan: entered promiscuous mode [ 674.269848][T31260] veth0_vlan: entered promiscuous mode [ 674.297961][T31260] veth1_vlan: entered promiscuous mode [ 674.327286][T31255] veth0_macvtap: entered promiscuous mode [ 674.358437][T31255] veth1_macvtap: entered promiscuous mode [ 674.391101][T31590] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7343'. [ 674.411309][T31260] veth0_macvtap: entered promiscuous mode [ 674.423093][ T5844] Bluetooth: hci1: command tx timeout [ 674.465234][T31255] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 674.474573][T31260] veth1_macvtap: entered promiscuous mode [ 674.491061][T31255] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 674.518659][ T4105] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 674.544319][ T4105] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 674.572881][ T4105] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 674.583157][ T5844] Bluetooth: hci4: command tx timeout [ 674.606508][ T4105] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 674.657625][T31260] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 674.693726][T31260] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 674.701461][T31603] syzkaller1: entered promiscuous mode [ 674.707270][T31603] syzkaller1: entered allmulticast mode [ 674.736784][ T4105] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 674.770828][ T4105] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 674.817313][ T4105] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 674.833398][ T4105] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 674.899851][T24597] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 674.917318][T24597] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 675.021566][T24597] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 675.031621][T24597] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 675.089377][T31609] netlink: 'syz.5.7349': attribute type 1 has an invalid length. [ 675.107505][T31609] netlink: 228 bytes leftover after parsing attributes in process `syz.5.7349'. [ 675.128060][T31608] netlink: 412 bytes leftover after parsing attributes in process `syz.5.7349'. [ 675.155197][T31608] netlink: 'syz.5.7349': attribute type 2 has an invalid length. [ 675.176020][T24598] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 675.189421][T24598] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 675.219700][T31611] netlink: 'syz.1.7350': attribute type 1 has an invalid length. [ 675.319617][T31615] bond4: (slave bridge3): making interface the new active one [ 675.329670][T31615] bond4: (slave bridge3): Enslaving as an active interface with an up link [ 675.349042][T31618] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 675.370806][T24600] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 675.379992][T24600] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 675.525212][T24597] veth0_to_bond: left promiscuous mode [ 675.668941][T31636] IPVS: set_ctl: invalid protocol: 51 127.0.0.1:20001 [ 675.812289][T31647] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7359'. [ 675.914680][T31649] netlink: 4552 bytes leftover after parsing attributes in process `syz.5.7361'. [ 675.950595][T31646] netlink: 'syz.4.7356': attribute type 32 has an invalid length. [ 676.075050][T31646] bond0: option coupled_control: invalid value (52) [ 676.088933][T31646] bond0 (unregistering): Released all slaves [ 676.291640][T31675] netlink: 'syz.5.7367': attribute type 18 has an invalid length. [ 676.642884][T31683] bridge0: port 2(bridge_slave_1) entered disabled state [ 676.650345][T31683] bridge0: port 1(bridge_slave_0) entered disabled state [ 676.972267][T31683] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 677.014623][T31683] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 677.214480][ T1112] nci: nci_rsp_packet: unknown rsp opcode 0x805 [ 677.470960][T31683] bridge1: left promiscuous mode [ 677.481612][T31683] bridge1: left allmulticast mode [ 677.517520][T31683] vlan2: left promiscuous mode [ 677.522312][T31683] geneve1: left promiscuous mode [ 677.531401][T31683] vlan2: left allmulticast mode [ 677.536427][T31683] geneve1: left allmulticast mode [ 677.550087][T31694] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 677.576914][ T6084] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 677.649622][ T6084] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 677.684404][ T6084] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 677.697819][ T6084] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 677.900930][T31715] syzkaller0: entered promiscuous mode [ 677.908750][T31715] syzkaller0: entered allmulticast mode [ 678.136608][T31724] __nla_validate_parse: 3 callbacks suppressed [ 678.136625][T31724] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7380'. [ 678.168719][T31724] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7380'. [ 678.221630][T31729] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7380'. [ 678.245577][T31727] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7381'. [ 678.321854][T31735] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7381'. [ 678.358936][T31739] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7384'. [ 678.369121][T31739] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7384'. [ 678.402066][T24589] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 678.421809][T31739] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7384'. [ 678.443070][T24589] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 678.477897][T24589] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 678.492765][T31739] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7384'. [ 678.522825][T24589] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 678.565647][T31751] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7386'. [ 678.611036][T31753] netlink: 'syz.7.7387': attribute type 83 has an invalid length. [ 678.710868][T31756] Bluetooth: MGMT ver 1.23 [ 678.821729][T31764] bond3: entered promiscuous mode [ 678.829205][T31764] bond3: entered allmulticast mode [ 678.835518][T31764] 8021q: adding VLAN 0 to HW filter on device bond3 [ 680.502191][T31847] bridge_slave_1: left allmulticast mode [ 680.512202][T31847] bridge_slave_1: left promiscuous mode [ 680.541558][T31847] bridge0: port 2(bridge_slave_1) entered disabled state [ 680.564252][T31816] Cannot find del_set index 0 as target [ 680.584230][T31847] bridge_slave_0: left allmulticast mode [ 680.589938][T31847] bridge_slave_0: left promiscuous mode [ 680.605693][T31850] netlink: 'syz.6.7417': attribute type 26 has an invalid length. [ 680.612878][T31847] bridge0: port 1(bridge_slave_0) entered disabled state [ 680.934415][T31869] netlink: 'syz.6.7422': attribute type 10 has an invalid length. [ 680.980674][T31869] netlink: 'syz.6.7422': attribute type 5 has an invalid length. [ 681.211220][T31894] openvswitch: netlink: Message has 1 unknown bytes. [ 681.241097][T31894] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 681.507786][T31910] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 681.515546][T31910] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 681.533898][T31910] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 681.542318][T31910] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 681.641798][T31913] 8021q: adding VLAN 0 to HW filter on device bond1 [ 681.698678][T31915] tipc: Enabling of bearer rejected, media not registered [ 681.842334][T31928] syzkaller0: entered promiscuous mode [ 681.856707][T31928] syzkaller0: entered allmulticast mode [ 681.984991][T14999] nci: nci_rf_discover_ntf_packet: unsupported rf_tech_and_mode 0x18 [ 682.072318][T31951] syzkaller0: entered promiscuous mode [ 682.078031][T31951] syzkaller0: entered allmulticast mode [ 682.496647][T31963] sctp: [Deprecated]: syz.4.7449 (pid 31963) Use of struct sctp_assoc_value in delayed_ack socket option. [ 682.496647][T31963] Use struct sctp_sack_info instead [ 683.168214][T31991] __nla_validate_parse: 47 callbacks suppressed [ 683.168232][T31991] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7456'. [ 683.187972][T31991] netlink: 'syz.4.7456': attribute type 1 has an invalid length. [ 683.267850][T31996] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 683.396470][T32010] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 683.554676][T32009] pim6reg: entered allmulticast mode [ 683.614843][T32019] syzkaller0: entered promiscuous mode [ 683.632816][T32019] syzkaller0: entered allmulticast mode [ 683.863134][T32039] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 683.918740][T32046] netlink: 32 bytes leftover after parsing attributes in process `syz.7.7472'. [ 683.968228][T32048] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7473'. [ 683.990202][T32050] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7473'. [ 684.405663][T32079] netlink: 28 bytes leftover after parsing attributes in process `syz.6.7481'. [ 684.517939][T32086] netlink: 40 bytes leftover after parsing attributes in process `syz.6.7483'. [ 684.548052][T32086] netlink: 44 bytes leftover after parsing attributes in process `syz.6.7483'. [ 684.773798][T32102] netlink: 20 bytes leftover after parsing attributes in process `syz.6.7486'. [ 685.033738][T32121] netlink: 40 bytes leftover after parsing attributes in process `syz.5.7494'. [ 685.071934][T32122] netlink: 40 bytes leftover after parsing attributes in process `syz.5.7494'. [ 685.122286][T32133] netlink: 'syz.7.7496': attribute type 10 has an invalid length. [ 685.154055][T32121] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 685.264130][T32133] 8021q: adding VLAN 0 to HW filter on device team0 [ 685.273878][T32133] bond0: (slave team0): Enslaving as an active interface with an up link [ 685.712045][T32167] bond4 (unregistering): Released all slaves [ 685.719791][T32172] netlink: 'syz.1.7509': attribute type 3 has an invalid length. [ 685.730199][T32172] netlink: 'syz.1.7509': attribute type 1 has an invalid length. [ 686.261793][T32173] bridge0: port 4(syz_tun) entered blocking state [ 686.274775][T32173] bridge0: port 4(syz_tun) entered disabled state [ 686.281875][T32173] syz_tun: entered allmulticast mode [ 686.289528][T32173] syz_tun: entered promiscuous mode [ 686.305199][T32173] bridge0: port 4(syz_tun) entered blocking state [ 686.312188][T32173] bridge0: port 4(syz_tun) entered forwarding state [ 686.336735][T32176] tipc: Started in network mode [ 686.341685][T32176] tipc: Node identity c6d3f8f32d14, cluster identity 4711 [ 686.395293][T32176] tipc: Enabled bearer , priority 0 [ 686.664627][T32204] bond0: option miimon: invalid value (18446744073709551585) [ 686.685790][T32204] bond0: option miimon: allowed values 0 - 2147483647 [ 686.705648][T32204] bond0 (unregistering): Released all slaves [ 686.755366][T32182] syzkaller0: entered promiscuous mode [ 686.760880][T32182] syzkaller0: entered allmulticast mode [ 686.808254][T32197] bond2: entered promiscuous mode [ 686.834407][T32197] 8021q: adding VLAN 0 to HW filter on device bond2 [ 686.878415][T32198] tipc: Resetting bearer [ 686.961698][T32198] tipc: Resetting bearer [ 687.046026][T32225] netlink: 'syz.7.7518': attribute type 30 has an invalid length. [ 687.056178][T32198] tipc: Disabling bearer [ 687.069386][T32224] netlink: 'syz.7.7518': attribute type 30 has an invalid length. [ 687.221484][T32233] xt_CT: You must specify a L4 protocol and not use inversions on it [ 687.431016][T32246] bridge0: port 2(bridge_slave_1) entered disabled state [ 687.438709][T32246] bridge0: port 1(bridge_slave_0) entered disabled state [ 687.467892][T32246] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 687.558938][T32257] SET target dimension over the limit! [ 687.587286][T32260] bond3: Unable to set peer notification delay as MII monitoring is disabled [ 687.615973][T32260] bond3 (unregistering): Released all slaves [ 687.766885][T32269] gretap0: entered promiscuous mode [ 687.772283][T32269] vlan0: entered promiscuous mode [ 687.981222][T32278] netlink: 'syz.4.7535': attribute type 1 has an invalid length. [ 688.009517][T32278] 8021q: adding VLAN 0 to HW filter on device bond0 [ 688.041479][T32278] bond0: (slave veth0_to_bond): making interface the new active one [ 688.050904][T32278] bond0: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 688.274319][T32292] sctp: [Deprecated]: syz.1.7537 (pid 32292) Use of int in max_burst socket option. [ 688.274319][T32292] Use struct sctp_assoc_value instead [ 688.465989][T32302] __nla_validate_parse: 13 callbacks suppressed [ 688.466009][T32302] netlink: 212368 bytes leftover after parsing attributes in process `syz.5.7544'. [ 688.507657][T32302] tipc: Enabled bearer , priority 0 [ 688.518374][T32302] syzkaller0: entered promiscuous mode [ 688.533215][T32302] syzkaller0: entered allmulticast mode [ 688.567243][T32302] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 688.591458][T32302] tipc: Resetting bearer [ 688.892760][T32326] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7553'. [ 688.908743][T32326] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7553'. [ 688.917979][T32326] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7553'. [ 688.930388][T32326] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7553'. [ 689.017674][T32308] bridge0: port 2(bridge_slave_1) entered disabled state [ 689.025137][T32308] bridge0: port 1(bridge_slave_0) entered disabled state [ 689.394495][T32308] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 689.435796][T32308] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 689.847150][T32301] tipc: Resetting bearer [ 689.874699][T32301] tipc: Disabling bearer [ 689.890666][T32334] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7556'. [ 689.913455][ T5975] tipc: Node number set to 2411492327 [ 689.922398][T32334] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7556'. [ 689.959674][T14995] netdevsim netdevsim6 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 689.974847][T14995] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 689.991332][T14995] netdevsim netdevsim6 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 690.005282][T14995] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 690.035095][T14995] netdevsim netdevsim6 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 690.059300][T32341] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7558'. [ 690.083152][T14995] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 690.112652][T14995] netdevsim netdevsim6 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 690.121667][T32341] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7558'. [ 690.152406][T14995] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 690.201414][T32352] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7558'. [ 690.240403][T32361] netlink: 'syz.4.7561': attribute type 3 has an invalid length. [ 690.466647][T32378] x_tables: duplicate underflow at hook 1 [ 691.049294][T32402] IPVS: set_ctl: invalid protocol: 255 10.1.1.0:20002 [ 691.277999][T32414] : entered promiscuous mode [ 691.395950][T32423] Cannot find add_set index 2 as target [ 691.440606][T32424] netlink: 'syz.1.7579': attribute type 1 has an invalid length. [ 691.464523][T32424] netlink: 'syz.1.7579': attribute type 7 has an invalid length. [ 691.481943][T32424] netlink: 'syz.1.7579': attribute type 8 has an invalid length. [ 691.494681][T32424] NCSI netlink: No device for ifindex 65584 [ 691.643937][T32437] netlink: 'syz.7.7585': attribute type 11 has an invalid length. [ 691.686478][T32445] IPv6: sit1: Disabled Multicast RS [ 691.698990][T32445] sit1: entered allmulticast mode [ 691.745730][T32447] bridge0: port 5(batadv0) entered blocking state [ 691.758841][T32447] bridge0: port 5(batadv0) entered disabled state [ 691.767690][T32447] batadv0: entered allmulticast mode [ 691.771176][T32452] netlink: 'syz.5.7589': attribute type 2 has an invalid length. [ 691.776403][T32447] batadv0: entered promiscuous mode [ 691.880853][T32458] sctp: [Deprecated]: syz.1.7591 (pid 32458) Use of int in maxseg socket option. [ 691.880853][T32458] Use struct sctp_assoc_value instead [ 692.234134][T24589] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 692.243500][T24589] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 692.418679][T32497] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 692.466940][T32497] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 692.560642][ T5975] IPVS: starting estimator thread 0... [ 692.619994][T32508] netlink: 'syz.4.7605': attribute type 5 has an invalid length. [ 692.677663][T32504] IPVS: using max 28 ests per chain, 67200 per kthread [ 692.932048][T32528] netlink: 'syz.7.7613': attribute type 1 has an invalid length. [ 693.390339][T32567] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 693.698143][T32591] __nla_validate_parse: 15 callbacks suppressed [ 693.698164][T32591] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7630'. [ 693.714810][T32597] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7631'. [ 693.930564][T32608] netlink: 24 bytes leftover after parsing attributes in process `syz.7.7632'. [ 694.055288][T32620] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7637'. [ 694.118461][T32623] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7637'. [ 694.227231][T32631] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7641'. [ 694.304691][T32637] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7643'. [ 694.498177][T32650] xt_CT: You must specify a L4 protocol and not use inversions on it [ 694.522125][T32648] IPVS: set_ctl: invalid protocol: 44 0.0.0.0:20000 [ 694.543663][T32647] IPVS: set_ctl: invalid protocol: 44 0.0.0.0:20000 [ 694.634789][T32650] bond4: Unable to set down delay as MII monitoring is disabled [ 694.637126][T32660] netlink: 'syz.6.7649': attribute type 1 has an invalid length. [ 694.661220][T32650] bond4 (unregistering): Released all slaves [ 694.748946][T32667] netlink: 696 bytes leftover after parsing attributes in process `syz.1.7653'. [ 694.876226][T32671] netlink: 60 bytes leftover after parsing attributes in process `syz.1.7657'. [ 694.908171][T32673] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 694.940444][T32671] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7657'. [ 695.129031][T32687] tipc: Enabled bearer , priority 0 [ 695.258615][T32687] syzkaller0: entered promiscuous mode [ 695.265087][T32687] syzkaller0: entered allmulticast mode [ 695.271510][T32687] tipc: Resetting bearer [ 695.452188][ T3480] tipc: Resetting bearer [ 695.509562][T32686] tipc: Resetting bearer [ 697.359025][T32686] tipc: Disabling bearer [ 697.367841][T14991] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 697.378894][T14991] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 697.472752][T32723] bridge0: port 3(ipvlan0) entered blocking state [ 697.496251][T32723] bridge0: port 3(ipvlan0) entered disabled state [ 697.504683][T32723] ipvlan0: entered allmulticast mode [ 697.510217][T32723] bridge0: entered allmulticast mode [ 697.524745][T32723] ipvlan0: left allmulticast mode [ 697.543566][T32723] bridge0: left allmulticast mode [ 697.568164][T14991] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 697.596530][T14991] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 698.735162][ T330] __nla_validate_parse: 3 callbacks suppressed [ 698.735180][ T330] netlink: 16 bytes leftover after parsing attributes in process `syz.6.7695'. [ 698.736278][ T328] netlink: 24 bytes leftover after parsing attributes in process `syz.5.7694'. [ 698.741595][ T330] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7695'. [ 698.848902][ T328] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 699.165231][ T338] tipc: Enabled bearer , priority 0 [ 699.218551][ T338] syzkaller0: entered promiscuous mode [ 699.237833][ T338] syzkaller0: entered allmulticast mode [ 699.419359][ T355] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7701'. [ 699.575934][ T338] tipc: Resetting bearer [ 699.627844][ T337] tipc: Resetting bearer [ 699.826201][ T366] netlink: 52 bytes leftover after parsing attributes in process `syz.4.7702'. [ 699.938708][ T337] tipc: Disabling bearer [ 700.014066][ T366] netlink: 52 bytes leftover after parsing attributes in process `syz.4.7702'. [ 700.858410][ T369] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7702'. [ 701.094279][ T404] netlink: 'syz.1.7711': attribute type 13 has an invalid length. [ 701.482887][ T413] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 701.498400][ T413] syzkaller0: entered promiscuous mode [ 701.519860][ T413] syzkaller0: entered allmulticast mode [ 701.568558][ T419] tipc: Enabled bearer , priority 0 [ 701.592996][ T403] tipc: Resetting bearer [ 701.653214][ T403] tipc: Disabling bearer [ 701.688796][ T420] syzkaller1: entered promiscuous mode [ 701.697204][ T420] syzkaller1: entered allmulticast mode [ 701.935386][ T432] netlink: 76 bytes leftover after parsing attributes in process `syz.1.7717'. [ 702.014559][ T438] lo: Caught tx_queue_len zero misconfig [ 702.033376][T15002] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 702.196320][ T443] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 702.369483][ T301] Set syz1 is full, maxelem 65536 reached [ 702.375452][ T402] SET target dimension over the limit! [ 702.513862][ T449] policy can only be matched on NF_INET_PRE_ROUTING [ 702.513889][ T449] unable to load match [ 702.540896][ T450] syzkaller0: entered promiscuous mode [ 702.549607][ T450] syzkaller0: entered allmulticast mode [ 703.057173][ T467] bridge2: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 703.106247][ T470] geneve2: entered promiscuous mode [ 703.116377][ T470] geneve2: entered allmulticast mode [ 703.142286][ T479] netlink: 24 bytes leftover after parsing attributes in process `syz.5.7732'. [ 703.213249][ T485] bridge5: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 703.365153][ T495] netlink: 16 bytes leftover after parsing attributes in process `syz.5.7737'. [ 703.416811][ T500] sctp: [Deprecated]: syz.1.7738 (pid 500) Use of int in max_burst socket option. [ 703.416811][ T500] Use struct sctp_assoc_value instead [ 703.585581][ T514] netlink: 'syz.7.7742': attribute type 7 has an invalid length. [ 703.609746][ T516] netlink: 'syz.1.7743': attribute type 4 has an invalid length. [ 703.748631][ T523] __nla_validate_parse: 1 callbacks suppressed [ 703.748650][ T523] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7745'. [ 703.995806][ T538] v: renamed from vlan0 [ 704.374935][ T572] netlink: 256 bytes leftover after parsing attributes in process `syz.1.7755'. [ 704.449011][ T572] Bluetooth: MGMT ver 1.23 [ 704.503158][ T579] netlink: 12 bytes leftover after parsing attributes in process `syz.7.7757'. [ 704.528158][ T579] SET target dimension over the limit! [ 704.823344][ T600] netlink: 'syz.5.7763': attribute type 1 has an invalid length. [ 704.831276][ T600] netlink: 224 bytes leftover after parsing attributes in process `syz.5.7763'. [ 704.832845][ T602] netlink: 'syz.4.7764': attribute type 2 has an invalid length. [ 704.854631][ T596] netlink: 64 bytes leftover after parsing attributes in process `syz.1.7762'. [ 704.858089][ T600] net veth1_virt_wifi .: renamed from virt_wifi0 [ 704.920410][ T602] 9: entered promiscuous mode [ 705.438802][ T641] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7773'. [ 705.496843][ T646] netlink: 28 bytes leftover after parsing attributes in process `syz.6.7775'. [ 705.677332][ T666] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 705.701714][ T667] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7782'. [ 706.187108][ T681] netlink: 56 bytes leftover after parsing attributes in process `syz.1.7787'. [ 706.224024][ T681] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7787'. [ 706.253131][ T681] netlink: 'syz.1.7787': attribute type 2 has an invalid length. [ 706.525367][ T717] bond1 (unregistering): Released all slaves [ 706.627268][ T718] RDS: rds_bind could not find a transport for ::ffff:172.30.0.2, load rds_tcp or rds_rdma? [ 706.750297][ T715] syzkaller0: entered promiscuous mode [ 706.782859][ T715] syzkaller0: entered allmulticast mode [ 706.927385][ T742] netlink: 'syz.7.7805': attribute type 2 has an invalid length. [ 707.279140][ T751] netlink: 'syz.1.7803': attribute type 8 has an invalid length. [ 709.040150][ T764] netlink: 'syz.4.7811': attribute type 1 has an invalid length. [ 709.138535][ T760] bond2: (slave lo): Releasing backup interface [ 709.150929][ T764] __nla_validate_parse: 5 callbacks suppressed [ 709.150946][ T764] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7811'. [ 709.196625][ T760] bond2: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 709.257008][ T760] bond1: (slave veth0_to_bond): Releasing active interface [ 709.290224][ T760] bond0: (slave bond_slave_0): Releasing backup interface [ 709.308795][ T760] bond0: (slave bond_slave_1): Releasing backup interface [ 709.325501][ T760] team0: Port device team_slave_0 removed [ 709.335589][ T760] team0: Port device team_slave_1 removed [ 709.342229][ T760] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 709.351304][ T760] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 709.429356][ T770] 8021q: adding VLAN 0 to HW filter on device bond6 [ 709.445214][ T770] bond5: (slave bond6): making interface the new active one [ 709.453265][ T770] bond5: (slave bond6): Enslaving as an active interface with an up link [ 709.471503][ T764] bond5: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 709.484722][ T764] bond5: (slave ipvlan0): The slave device specified does not support setting the MAC address [ 709.511777][ T786] netlink: 56 bytes leftover after parsing attributes in process `syz.1.7816'. [ 709.533853][ T786] netlink: 56 bytes leftover after parsing attributes in process `syz.1.7816'. [ 709.541017][ T792] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7816'. [ 709.674947][ T798] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7819'. [ 709.741138][ T799] netlink: 64 bytes leftover after parsing attributes in process `syz.5.7820'. [ 709.761366][ T805] netlink: 'syz.1.7823': attribute type 4 has an invalid length. [ 709.775198][ T799] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7820'. [ 709.825036][ T799] netlink: 'syz.5.7820': attribute type 2 has an invalid length. [ 709.902790][ T808] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7822'. [ 710.155215][ T827] netlink: 'syz.7.7827': attribute type 13 has an invalid length. [ 710.434698][ T842] bond1: Unable to set up delay as MII monitoring is disabled [ 710.445185][ T842] bond1 (unregistering): Released all slaves [ 710.453065][ T849] netlink: 24 bytes leftover after parsing attributes in process `syz.5.7835'. [ 710.901619][ T878] netlink: 28 bytes leftover after parsing attributes in process `syz.6.7847'. [ 711.098085][ T891] netlink: 'syz.6.7852': attribute type 2 has an invalid length. [ 711.106428][ T891] netlink: 'syz.6.7852': attribute type 8 has an invalid length. [ 711.120170][ T886] netlink: 'syz.4.7849': attribute type 39 has an invalid length. [ 711.146513][ T886] bridge0: port 4(syz_tun) entered disabled state [ 711.192371][ T886] syz_tun (unregistering): left allmulticast mode [ 711.200930][ T886] syz_tun (unregistering): left promiscuous mode [ 711.207731][ T886] bridge0: port 4(syz_tun) entered disabled state [ 711.268681][ T898] netlink: 'syz.6.7855': attribute type 83 has an invalid length. [ 711.310235][ T898] syzkaller0: entered promiscuous mode [ 711.322683][ T898] syzkaller0: entered allmulticast mode [ 711.615271][ T922] veth0: entered promiscuous mode [ 711.636512][ T923] veth0: left promiscuous mode [ 712.089869][ T965] netlink: 'syz.4.7872': attribute type 42 has an invalid length. [ 712.384376][ T981] tipc: Enabled bearer , priority 0 [ 712.416814][ T981] syzkaller0: entered promiscuous mode [ 712.432831][ T981] syzkaller0: entered allmulticast mode [ 712.451285][ T981] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 712.519040][ T981] tipc: Resetting bearer [ 712.539257][ T979] tipc: Resetting bearer [ 712.587024][ T979] tipc: Disabling bearer [ 712.654701][ T996] bond1: option packets_per_slave: mode dependency failed, not supported in mode active-backup(1) [ 712.667551][ T996] bond1 (unregistering): Released all slaves [ 713.027503][ T1030] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 713.283997][ T1047] block nbd6: server does not support multiple connections per device. [ 713.313037][ T1047] block nbd6: shutting down sockets [ 713.374599][ T1059] bridge8: entered promiscuous mode [ 713.379954][ T1059] bridge8: entered allmulticast mode [ 713.600483][ T1074] netlink: 'syz.7.7905': attribute type 10 has an invalid length. [ 713.651695][ T1074] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 713.665108][ T1079] netlink: 'syz.7.7905': attribute type 10 has an invalid length. [ 713.673758][ T1074] team0: Failed to send options change via netlink (err -105) [ 713.681356][ T1074] team0: Port device dummy0 added [ 713.701000][ T1079] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 713.731817][ T1079] team0: Failed to send options change via netlink (err -105) [ 713.742300][ T1079] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 713.752360][ T1079] team0: Port device dummy0 removed [ 713.763277][ T1079] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 713.764546][ T1086] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 714.084786][ T1114] tipc: Trying to set illegal importance in message [ 714.230598][ T1117] __nla_validate_parse: 14 callbacks suppressed [ 714.230618][ T1117] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7919'. [ 714.348569][ T1128] netlink: 'syz.6.7922': attribute type 4 has an invalid length. [ 714.369543][ T1129] netlink: 'syz.6.7922': attribute type 4 has an invalid length. [ 714.700769][ T1155] x_tables: ip6_tables: NETMAP.0 target: invalid size 40 (kernel) != (user) 0 [ 714.752761][ T1155] netlink: 76 bytes leftover after parsing attributes in process `syz.1.7931'. [ 714.848049][ T1163] pim6reg: entered allmulticast mode [ 715.012753][ T1188] netlink: 32 bytes leftover after parsing attributes in process `syz.1.7939'. [ 715.066112][ T1188] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7939'. [ 715.158375][ T1199] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7941'. [ 715.221825][ T1202] netlink: 'syz.1.7942': attribute type 1 has an invalid length. [ 715.235211][ T1202] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 715.242172][ T1204] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 715.252337][ T1200] bond_slave_0: Caught tx_queue_len zero misconfig [ 715.331041][ T1206] netlink: 60 bytes leftover after parsing attributes in process `syz.1.7944'. [ 715.398279][ T1211] netlink: 100 bytes leftover after parsing attributes in process `syz.4.7945'. [ 715.544929][ T1225] netlink: 20 bytes leftover after parsing attributes in process `syz.5.7947'. [ 715.559646][ T1225] netlink: 20 bytes leftover after parsing attributes in process `syz.5.7947'. [ 715.596263][ T1225] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7947'. [ 715.774499][ T1245] IPv6: NLM_F_REPLACE set, but no existing node found! [ 716.226896][ T1271] netlink: 'syz.1.7962': attribute type 8 has an invalid length. [ 716.588051][ T1290] netlink: 'syz.6.7969': attribute type 1 has an invalid length. [ 716.713630][ T1297] bond1: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 716.728297][ T1297] bond1: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 716.739072][ T1297] bond1: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 716.965759][ T1316] openvswitch: netlink: Key 32 has unexpected len 1026 expected 2 [ 717.289834][ T1341] Bluetooth: hci1: expected 19 bytes, got 2 bytes [ 717.334200][ T1332] bond0: (slave bond_slave_1): Releasing backup interface [ 717.615952][ T1356] macsec0: entered allmulticast mode [ 717.670155][ T1359] batman_adv: batadv0: Adding interface: dummy0 [ 717.676632][ T1359] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 717.715121][ T1359] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 717.895018][ T1372] ipt_ECN: cannot use operation on non-tcp rule [ 717.901456][ T1372] ipt_ECN: cannot use operation on non-tcp rule [ 717.993639][ T1385] batman_adv: batadv0: Adding interface: dummy0 [ 718.000258][ T1385] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 718.026576][ T1385] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 718.926531][ T1429] netlink: 'syz.5.8006': attribute type 2 has an invalid length. [ 719.006163][ T1434] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 719.059423][ T1434] netlink: 'syz.4.8007': attribute type 4 has an invalid length. [ 719.086876][ T1440] : renamed from bond_slave_0 (while UP) [ 719.103487][ T1443] netlink: 'syz.5.8011': attribute type 11 has an invalid length. [ 719.111551][ T1443] netlink: 'syz.5.8011': attribute type 4 has an invalid length. [ 719.701395][ T1470] __nla_validate_parse: 14 callbacks suppressed [ 719.701413][ T1470] netlink: 32 bytes leftover after parsing attributes in process `syz.7.8022'. [ 719.823388][ T1476] netlink: 7064 bytes leftover after parsing attributes in process `syz.1.8024'. [ 719.835226][ T1476] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 719.848646][ T1475] mac80211_hwsim hwsim59 wlan1: Caught tx_queue_len zero misconfig [ 720.029827][ T1482] tipc: Enabling of bearer rejected, failed to enable media [ 720.214798][ T1490] team0: Caught tx_queue_len zero misconfig [ 720.264234][ T1496] netlink: 8 bytes leftover after parsing attributes in process `syz.7.8030'. [ 720.274093][ T1496] netlink: 4 bytes leftover after parsing attributes in process `syz.7.8030'. [ 720.283573][ T1496] netlink: 'syz.7.8030': attribute type 12 has an invalid length. [ 720.314338][ T1496] netlink: 'syz.7.8030': attribute type 11 has an invalid length. [ 720.369438][ T1506] netlink: 20 bytes leftover after parsing attributes in process `syz.4.8031'. [ 720.385414][ T1507] xt_ecn: cannot match TCP bits for non-tcp packets [ 720.785107][ T1521] bridge8: entered promiscuous mode [ 720.790540][ T1521] bridge8: entered allmulticast mode [ 721.440821][ T1561] netlink: 'syz.7.8047': attribute type 2 has an invalid length. [ 721.479783][ T1563] Cannot find del_set index 49151 as target [ 721.491719][ T1561] 9: entered promiscuous mode [ 721.527855][ T1563] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 721.592253][ T1571] netlink: 'syz.1.8051': attribute type 10 has an invalid length. [ 721.684745][ T1574] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8053'. [ 721.700413][ T1571] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 721.933563][ T1587] xt_l2tp: missing protocol rule (udp|l2tpip) [ 721.989485][ T1591] netlink: 'syz.1.8060': attribute type 28 has an invalid length. [ 721.999690][ T1591] netlink: 'syz.1.8060': attribute type 3 has an invalid length. [ 722.008728][ T1591] netlink: 132 bytes leftover after parsing attributes in process `syz.1.8060'. [ 722.093013][ T1598] netlink: 'syz.6.8061': attribute type 10 has an invalid length. [ 722.113327][ T1598] netlink: 228 bytes leftover after parsing attributes in process `syz.6.8061'. [ 722.307226][ T1613] tc_dump_action: action bad kind [ 722.333047][ T1615] netlink: 'syz.5.8066': attribute type 1 has an invalid length. [ 722.547503][ T1621] bond6 (unregistering): Released all slaves [ 723.257786][ T1667] netlink: 12 bytes leftover after parsing attributes in process `syz.6.8080'. [ 723.284066][ T1667] netlink: 12 bytes leftover after parsing attributes in process `syz.6.8080'. [ 723.621674][ T1689] SET target dimension over the limit! [ 723.716250][ T1654] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 724.082764][ T1715] syzkaller0: entered promiscuous mode [ 724.088595][ T1715] syzkaller0: entered allmulticast mode [ 724.987563][ T5844] Bluetooth: hci0: command 0x0c1a tx timeout [ 726.529800][ T1793] __nla_validate_parse: 5 callbacks suppressed [ 726.529818][ T1793] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8111'. [ 726.613588][ T1799] openvswitch: netlink: Unknown nsh attribute 0 [ 726.619943][ T1799] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 726.644242][ T1796] Bluetooth: MGMT ver 1.23 [ 726.798622][ T1813] veth0: entered promiscuous mode [ 726.799540][ T1809] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip_vti0, syncid = 4, id = 0 [ 726.834037][ T1813] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8117'. [ 727.180072][ T1822] syzkaller0: entered promiscuous mode [ 727.193502][ T1822] syzkaller0: entered allmulticast mode [ 727.222384][ T1822] PF_CAN: dropped non conform CAN FD skbuff: dev type 280, len 65487 [ 727.347955][ T1844] sock: sock_set_timeout: `syz.5.8126' (pid 1844) tries to set negative timeout [ 727.360907][ T1848] netlink: 'syz.7.8124': attribute type 4 has an invalid length. [ 727.384822][ T1844] netlink: 16 bytes leftover after parsing attributes in process `syz.5.8126'. [ 727.437661][ T1850] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8128'. [ 727.456133][ T1851] netlink: 40 bytes leftover after parsing attributes in process `syz.4.8127'. [ 727.485212][ T1853] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8129'. [ 727.498256][ T1850] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8128'. [ 727.598391][ T1864] netlink: 56 bytes leftover after parsing attributes in process `syz.5.8131'. [ 727.700076][ T1870] netlink: 'syz.1.8133': attribute type 1 has an invalid length. [ 727.711476][ T1872] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048) [ 727.721191][ T1870] netlink: 'syz.1.8133': attribute type 28 has an invalid length. [ 727.740657][ T1870] netlink: 'syz.1.8133': attribute type 3 has an invalid length. [ 727.749229][ T1870] netlink: 132 bytes leftover after parsing attributes in process `syz.1.8133'. [ 727.849882][ T1880] IPVS: set_ctl: invalid protocol: 115 172.20.20.187:20001 [ 728.176106][ T1901] netlink: 104 bytes leftover after parsing attributes in process `syz.7.8141'. [ 728.252252][ T1904] syzkaller0: entered promiscuous mode [ 728.257893][ T1904] syzkaller0: entered allmulticast mode [ 728.326660][ T1909] netlink: 'syz.5.8144': attribute type 12 has an invalid length. [ 728.537649][ T1934] netlink: 'syz.7.8150': attribute type 1 has an invalid length. [ 728.621904][ T1942] bond4: (slave geneve3): making interface the new active one [ 728.632090][ T1942] bond4: (slave geneve3): Enslaving as an active interface with an up link [ 728.653019][T14992] netdevsim netdevsim7 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 728.666057][ T1948] netdevsim netdevsim6: Direct firmware load for .. failed with error -2 [ 728.679283][T14992] netdevsim netdevsim7 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 728.701302][T14992] netdevsim netdevsim7 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 728.711745][ T1948] netdevsim netdevsim6: Falling back to sysfs fallback for: .. [ 728.728640][T14992] netdevsim netdevsim7 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 728.751800][ T1945] veth0: entered promiscuous mode [ 728.791248][ T1954] xt_CT: No such helper "syz1" [ 728.800010][ T1952] team0 (unregistering): Port device team_slave_1 removed [ 729.034365][ T1966] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 729.046887][ T1966] team0: Port device batadv0 added [ 729.184607][ T1974] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 729.184869][ T5975] IPVS: starting estimator thread 0... [ 729.282963][ T1977] IPVS: using max 38 ests per chain, 91200 per kthread [ 729.547731][ T1982] netlink: 'syz.6.8166': attribute type 11 has an invalid length. [ 729.678080][ T1993] erspan0: entered promiscuous mode [ 729.699084][ T1993] debugfs: 'hsr1' already exists in 'hsr' [ 729.716056][ T1993] Cannot create hsr debugfs directory [ 729.744853][ T2001] syzkaller1: entered promiscuous mode [ 729.763853][ T2001] syzkaller1: entered allmulticast mode [ 729.771131][ T1995] syzkaller1: entered promiscuous mode [ 729.780366][ T1995] syzkaller1: entered allmulticast mode [ 730.383196][ T2045] gre0: entered promiscuous mode [ 730.509805][ T2054] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 730.541496][ T2054] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 731.080964][ T2099] sctp: [Deprecated]: syz.5.8203 (pid 2099) Use of struct sctp_assoc_value in delayed_ack socket option. [ 731.080964][ T2099] Use struct sctp_sack_info instead [ 731.119673][ T2102] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 731.334990][ T2121] netlink: 'syz.4.8208': attribute type 1 has an invalid length. [ 731.495175][ T2126] bond7: (slave geneve3): making interface the new active one [ 731.506909][ T2126] bond7: (slave geneve3): Enslaving as an active interface with an up link [ 731.508790][ T2131] openvswitch: netlink: Key type 31 is not supported [ 731.516353][ T60] netdevsim netdevsim4 eth0: set [1, 2] type 2 family 0 port 20004 - 0 [ 731.531432][ T60] netdevsim netdevsim4 eth1: set [1, 2] type 2 family 0 port 20004 - 0 [ 731.541931][ T60] netdevsim netdevsim4 eth2: set [1, 2] type 2 family 0 port 20004 - 0 [ 731.551873][ T60] netdevsim netdevsim4 eth3: set [1, 2] type 2 family 0 port 20004 - 0 [ 731.720904][ T2143] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 731.728425][ T2139] netlink: 'syz.1.8215': attribute type 16 has an invalid length. [ 731.734228][ T2143] rdma_rxe: rxe_newlink: failed to add bond_slave_0 [ 731.868608][ T2146] __nla_validate_parse: 21 callbacks suppressed [ 731.868626][ T2146] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8219'. [ 731.911568][ T2146] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8219'. [ 732.129773][ T2175] netlink: 4 bytes leftover after parsing attributes in process `syz.7.8223'. [ 732.149964][ T2175] netlink: 12 bytes leftover after parsing attributes in process `syz.7.8223'. [ 732.279966][ T2185] netlink: 'syz.1.8228': attribute type 1 has an invalid length. [ 732.311099][ T2185] 8021q: adding VLAN 0 to HW filter on device bond6 [ 732.335850][ T2185] 8021q: adding VLAN 0 to HW filter on device bond6 [ 732.344020][ T2185] bond6: (slave vxcan5): The slave device specified does not support setting the MAC address [ 732.355745][ T2185] bond6: (slave vxcan5): Error -95 calling set_mac_address [ 732.388165][ T2189] veth1: entered promiscuous mode [ 732.399243][ T2189] bond6: (slave veth1): Enslaving as an active interface with a down link [ 732.471369][ T2185] vlan0: entered allmulticast mode [ 732.477158][ T2185] bond6: entered allmulticast mode [ 732.917277][ T2176] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8225'. [ 733.085203][ T2203] tipc: Enabling of bearer rejected, failed to enable media [ 733.233282][ T2212] netlink: 256 bytes leftover after parsing attributes in process `syz.4.8235'. [ 733.282215][ T2213] netlink: 256 bytes leftover after parsing attributes in process `syz.4.8235'. [ 733.330946][ T2217] netlink: 24 bytes leftover after parsing attributes in process `syz.7.8238'. [ 733.438400][ T2227] netlink: 'syz.7.8240': attribute type 10 has an invalid length. [ 733.448014][ T2227] netlink: 'syz.7.8240': attribute type 10 has an invalid length. [ 733.471094][ T2227] netlink: 40 bytes leftover after parsing attributes in process `syz.7.8240'. [ 733.638599][ T2236] netlink: 196 bytes leftover after parsing attributes in process `syz.5.8243'. [ 733.653170][ T2237] netlink: 'syz.4.8244': attribute type 12 has an invalid length. [ 733.917167][ T2245] netlink: 'syz.6.8245': attribute type 1 has an invalid length. [ 734.201844][ T2258] xt_TPROXY: Can be used only with -p tcp or -p udp [ 734.320936][ T2271] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 734.685946][ T2294] netlink: 'syz.7.8263': attribute type 12 has an invalid length. [ 734.719205][ T2294] netlink: 'syz.7.8263': attribute type 11 has an invalid length. [ 734.836670][ T2301] netlink: 'syz.4.8266': attribute type 5 has an invalid length. [ 734.946244][ T2306] netlink: 'syz.4.8268': attribute type 1 has an invalid length. [ 735.068879][ T2313] netlink: 'syz.4.8269': attribute type 4 has an invalid length. [ 735.089145][ T2313] netlink: 'syz.4.8269': attribute type 1 has an invalid length. [ 735.130386][ T2315] xt_socket: unknown flags 0x50 [ 737.183187][ T2351] __nla_validate_parse: 12 callbacks suppressed [ 737.183205][ T2351] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8279'. [ 737.224955][ T2357] batadv_slave_0: entered promiscuous mode [ 737.371987][ T2355] batadv_slave_0: left promiscuous mode [ 737.622359][ T2387] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 737.820626][ T2401] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8294'. [ 738.128173][ T2425] delete_channel: no stack [ 738.245734][ T2433] netlink: 65039 bytes leftover after parsing attributes in process `syz.5.8302'. [ 738.755374][ T2477] netlink: 'syz.1.8314': attribute type 11 has an invalid length. [ 738.996521][ T2502] netlink: 80 bytes leftover after parsing attributes in process `syz.1.8319'. [ 739.179442][ T2520] syz_tun: entered allmulticast mode [ 739.191639][ T2519] syz_tun: left allmulticast mode [ 739.294209][ T2531] netlink: 'syz.4.8326': attribute type 2 has an invalid length. [ 739.314089][ T2537] netlink: 4 bytes leftover after parsing attributes in process `syz.7.8327'. [ 739.336463][ T2537] netlink: 'syz.7.8327': attribute type 16 has an invalid length. [ 739.351123][ T2537] netlink: 20 bytes leftover after parsing attributes in process `syz.7.8327'. [ 739.406454][ T2541] netlink: 8 bytes leftover after parsing attributes in process `syz.7.8329'. [ 739.433571][ T2541] netlink: 72 bytes leftover after parsing attributes in process `syz.7.8329'. [ 739.836468][ T2570] netlink: zone id is out of range [ 739.863232][ T2570] netlink: zone id is out of range [ 739.868567][ T2570] netlink: zone id is out of range [ 739.878654][ T2570] netlink: zone id is out of range [ 739.884627][ T2570] netlink: zone id is out of range [ 739.891255][ T2570] netlink: zone id is out of range [ 739.898411][ T2570] netlink: zone id is out of range [ 739.905300][ T2570] netlink: zone id is out of range [ 739.911222][ T2570] netlink: zone id is out of range [ 739.921224][ T2570] netlink: zone id is out of range [ 739.931434][ T2577] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8339'. [ 740.099898][ T2586] netlink: 20 bytes leftover after parsing attributes in process `syz.7.8342'. [ 740.480463][ T2557] delete_channel: no stack [ 740.593864][ T2619] bridge0: port 3(vlan2) entered blocking state [ 740.608481][ T2619] bridge0: port 3(vlan2) entered disabled state [ 740.616247][ T2619] vlan2: entered allmulticast mode [ 740.621536][ T2619] bridge0: entered allmulticast mode [ 740.630239][ T2619] vlan2: left allmulticast mode [ 740.635780][ T2619] bridge0: left allmulticast mode [ 740.716239][ T2630] netlink: 'syz.6.8350': attribute type 3 has an invalid length. [ 740.840542][ T2647] netlink: 'syz.7.8351': attribute type 1 has an invalid length. [ 740.929075][ T2660] netlink: 'syz.4.8354': attribute type 13 has an invalid length. [ 740.938523][ T2660] veth0_macvtap: left promiscuous mode [ 740.944473][ T2660] macvtap0: entered allmulticast mode [ 740.955769][ T2660] macvtap0: refused to change device tx_queue_len [ 741.077900][ T2666] bond2: option mode: unable to set because the bond device has slaves [ 741.515551][ T2696] x_tables: duplicate underflow at hook 2 [ 741.537063][ T2698] netlink: 'syz.4.8367': attribute type 1 has an invalid length. [ 741.846477][ T2721] netlink: 'syz.1.8372': attribute type 1 has an invalid length. [ 742.017162][ T2711] bond0: (slave team0): Releasing backup interface [ 742.031617][ T2711] team0 (unregistering): Port device team_slave_0 removed [ 742.043570][ T2711] team0 (unregistering): Port device team_slave_1 removed [ 742.055395][ T2711] team0 (unregistering): Port device batadv0 removed [ 742.110364][ T2733] bond7: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 742.206477][ T2740] veth5: entered promiscuous mode [ 742.229812][ T2740] bond7: (slave veth5): Enslaving as a backup interface with a down link [ 742.281198][ T2753] __nla_validate_parse: 9 callbacks suppressed [ 742.281218][ T2753] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8379'. [ 742.301272][ T2753] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8379'. [ 742.313134][ T2753] netlink: 4552 bytes leftover after parsing attributes in process `syz.5.8379'. [ 742.346512][ T2753] netlink: 4552 bytes leftover after parsing attributes in process `syz.5.8379'. [ 742.921338][ T2799] IPv6: NLM_F_CREATE should be specified when creating new route [ 743.243414][ T2816] syzkaller0: entered promiscuous mode [ 743.253535][ T2816] syzkaller0: entered allmulticast mode [ 743.528705][ T2846] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8404'. [ 745.376303][ T2855] bridge4: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 745.407868][ T2862] tipc: Enabled bearer , priority 0 [ 745.423639][ T2863] syzkaller0: entered promiscuous mode [ 745.434905][ T2863] syzkaller0: entered allmulticast mode [ 745.445029][ T2868] tipc: Resetting bearer [ 745.463782][ T5844] Bluetooth: hci4: command 0x0405 tx timeout [ 745.531585][ T2868] tipc: Resetting bearer [ 745.593464][ T2868] tipc: Disabling bearer [ 745.758628][ T2896] netlink: 12 bytes leftover after parsing attributes in process `syz.6.8414'. [ 746.359481][ T2938] net_ratelimit: 48 callbacks suppressed [ 746.359499][ T2938] openvswitch: netlink: Geneve option length err (len 4096, max 255). [ 746.580331][ T2967] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8430'. [ 746.674973][ T2967] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 746.765958][ T2976] netlink: 388 bytes leftover after parsing attributes in process `syz.4.8433'. [ 747.240586][ T3010] netlink: 20 bytes leftover after parsing attributes in process `syz.6.8448'. [ 747.949705][ T3056] netlink: 'syz.4.8473': attribute type 41 has an invalid length. [ 747.984106][ T3058] syzkaller1: entered promiscuous mode [ 747.999991][ T3058] syzkaller1: entered allmulticast mode [ 748.410976][ T3083] mac80211_hwsim hwsim63 wlan0: entered promiscuous mode [ 748.432899][ T3083] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 748.581678][ T3095] netlink: 32 bytes leftover after parsing attributes in process `syz.4.8491'. [ 748.711582][ T3104] netlink: 104 bytes leftover after parsing attributes in process `syz.6.8495'. [ 749.668819][ T3170] tipc: Enabling of bearer rejected, failed to enable media [ 749.762867][ T3175] tipc: Enabling of bearer rejected, failed to enable media [ 750.119843][ T3201] netlink: 168 bytes leftover after parsing attributes in process `syz.1.8538'. [ 750.294810][ T3188] syzkaller1: entered promiscuous mode [ 750.301633][ T3188] syzkaller1: entered allmulticast mode [ 750.396151][ T3216] netlink: 'syz.6.8544': attribute type 1 has an invalid length. [ 750.860257][ T3235] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8553'. [ 751.090171][ T3247] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8559'. [ 751.095217][ T3246] rdma_op ffff88804bfe59f0 conn xmit_rdma 0000000000000000 [ 751.616074][ T3272] sch_tbf: burst 274 is lower than device lo mtu (32783) ! [ 752.189231][ T3297] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8581'. [ 752.198791][ T3297] bond0: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 752.699055][ T3316] netlink: 'syz.7.8591': attribute type 12 has an invalid length. [ 752.716420][ T3316] netlink: 248 bytes leftover after parsing attributes in process `syz.7.8591'. [ 753.618942][ T3343] netlink: 12 bytes leftover after parsing attributes in process `syz.6.8603'. [ 753.683171][ T3347] netlink: 16 bytes leftover after parsing attributes in process `syz.7.8604'. [ 754.073037][ T3360] SET target dimension over the limit! [ 754.135043][ T3365] netlink: 'syz.5.8611': attribute type 1 has an invalid length. [ 754.163340][ T3365] netlink: 96 bytes leftover after parsing attributes in process `syz.5.8611'. [ 754.192820][ T3365] netlink: 1 bytes leftover after parsing attributes in process `syz.5.8611'. [ 754.212181][ T3365] netlink: 658 bytes leftover after parsing attributes in process `syz.5.8611'. [ 754.290930][ T3369] sch_tbf: burst 274 is lower than device lo mtu (65550) ! [ 754.327660][ T3365] syzkaller0: entered promiscuous mode [ 754.362793][ T3365] syzkaller0: entered allmulticast mode [ 754.378852][ T3365] netlink: 'syz.5.8611': attribute type 33 has an invalid length. [ 754.407254][ T3365] netlink: 152 bytes leftover after parsing attributes in process `syz.5.8611'. [ 754.844984][ T3392] xt_CT: No such helper "pptp" [ 755.019567][ T3413] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 755.059147][ T3417] netlink: 72 bytes leftover after parsing attributes in process `syz.1.8624'. [ 755.573523][ T3443] RDS: rds_bind could not find a transport for ::ffff:100.1.1.0, load rds_tcp or rds_rdma? [ 756.030213][ T3473] netlink: 8 bytes leftover after parsing attributes in process `syz.7.8640'. [ 756.061111][ T3473] netlink: 4 bytes leftover after parsing attributes in process `syz.7.8640'. [ 756.084932][ T3475] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 756.092019][ T3477] tls_set_device_offload: netdev not found [ 756.110407][ T3473] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 756.234512][ T3484] netlink: 'syz.1.8644': attribute type 10 has an invalid length. [ 756.279937][ T3491] netlink: 'syz.5.8646': attribute type 1 has an invalid length. [ 756.322017][ T3495] xt_NFQUEUE: number of total queues is 0 [ 756.503154][ T3502] vlan2: entered promiscuous mode [ 756.508325][ T3502] bond0: entered promiscuous mode [ 756.514191][ T3502] bond_slave_0: entered promiscuous mode [ 756.520136][ T3502] bond_slave_1: entered promiscuous mode [ 756.540309][ T3502] dummy0: entered promiscuous mode [ 756.548885][ T3507] netlink: 'syz.5.8651': attribute type 11 has an invalid length. [ 756.563201][ T3502] bond0: (slave vlan2): Opening slave failed [ 756.569340][ T3507] netlink: 224 bytes leftover after parsing attributes in process `syz.5.8651'. [ 756.589719][ T3506] netlink: 'syz.5.8651': attribute type 11 has an invalid length. [ 757.129110][ T3536] ip6erspan0: entered promiscuous mode [ 757.148235][ T3536] ip6erspan0: entered allmulticast mode [ 757.473216][ T3553] netlink: 'syz.1.8666': attribute type 1 has an invalid length. [ 757.969375][ T3579] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 757.977818][ T3579] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 758.582031][ T3617] bond6: invalid ARP target 0.0.0.0 specified for addition [ 758.623271][ T3617] bond6: option arp_ip_target: invalid value (0) [ 758.639758][ T3617] bond6 (unregistering): Released all slaves [ 758.962599][ T3642] netlink: 'syz.6.8691': attribute type 1 has an invalid length. [ 759.000019][ T3647] __nla_validate_parse: 6 callbacks suppressed [ 759.000037][ T3647] netlink: 60 bytes leftover after parsing attributes in process `syz.4.8692'. [ 759.068507][ T3647] netlink: 60 bytes leftover after parsing attributes in process `syz.4.8692'. [ 759.424169][ T3663] pim6reg1: entered promiscuous mode [ 759.430929][ T3663] pim6reg1: entered allmulticast mode [ 759.663317][ T3691] netlink: 8 bytes leftover after parsing attributes in process `syz.7.8699'. [ 759.710651][ T3691] netlink: 8 bytes leftover after parsing attributes in process `syz.7.8699'. [ 759.857997][ T3702] netlink: 44 bytes leftover after parsing attributes in process `syz.1.8704'. [ 759.870207][ T3702] netlink: 43 bytes leftover after parsing attributes in process `syz.1.8704'. [ 759.880389][ T3702] netlink: 'syz.1.8704': attribute type 6 has an invalid length. [ 759.888412][ T3702] netlink: 'syz.1.8704': attribute type 5 has an invalid length. [ 759.898546][ T3702] netlink: 43 bytes leftover after parsing attributes in process `syz.1.8704'. [ 760.216098][ T3729] netlink: 'syz.6.8711': attribute type 4 has an invalid length. [ 760.246869][ T3731] netlink: 'syz.5.8712': attribute type 4 has an invalid length. [ 760.499712][ T3742] netlink: 20 bytes leftover after parsing attributes in process `syz.6.8716'. [ 760.672301][ T3763] netlink: 212 bytes leftover after parsing attributes in process `syz.6.8722'. [ 760.840175][ T3776] bond0: (slave wg1): Error: Device type is different from other slaves [ 761.052394][ T3796] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8734'. [ 761.133896][ T3801] syzkaller0: entered promiscuous mode [ 761.144754][ T3801] syzkaller0: entered allmulticast mode [ 761.218614][ T3808] syzkaller0: entered promiscuous mode [ 761.238415][ T3808] syzkaller0: entered allmulticast mode [ 761.681001][ T3834] netem: change failed [ 761.753913][ T3840] pimreg: left allmulticast mode [ 761.778617][ T3842] netlink: 'syz.7.8750': attribute type 75 has an invalid length. [ 761.799481][ T3842] netlink: 'syz.7.8750': attribute type 11 has an invalid length. [ 761.877411][ T3854] netlink: 'syz.4.8753': attribute type 1 has an invalid length. [ 761.920983][ T3854] syzkaller0: entered promiscuous mode [ 761.926899][ T3854] syzkaller0: entered allmulticast mode [ 762.789870][ T3879] netlink: 'syz.5.8757': attribute type 32 has an invalid length. [ 763.967358][ T3860] veth0: entered promiscuous mode [ 763.996643][ T3879] bond6: option coupled_control: invalid value (52) [ 764.006029][ T3879] bond6 (unregistering): Released all slaves [ 764.034542][ T3862] veth0: left promiscuous mode [ 764.207754][ T3895] x_tables: duplicate entry at hook 3 [ 764.630824][ T3929] tipc: Enabling of bearer rejected, failed to enable media [ 764.651924][ T3930] __nla_validate_parse: 11 callbacks suppressed [ 764.651944][ T3930] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8774'. [ 764.721378][ T3930] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8774'. [ 764.747825][ T3938] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8778'. [ 764.910736][ T3960] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8779'. [ 764.920694][ T3960] netlink: 'syz.5.8779': attribute type 5 has an invalid length. [ 764.928843][ T3960] netlink: 20 bytes leftover after parsing attributes in process `syz.5.8779'. [ 764.940101][ T3938] hsr_slave_1 (unregistering): left promiscuous mode [ 764.957129][ T3960] geneve2: entered promiscuous mode [ 764.962881][ T3960] geneve2: entered allmulticast mode [ 764.970739][T14992] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 256 - 0 [ 764.980646][T14992] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 256 - 0 [ 764.992857][T14992] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 256 - 0 [ 765.002689][T14992] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 256 - 0 [ 765.277626][ T3986] netlink: 52 bytes leftover after parsing attributes in process `syz.6.8788'. [ 765.319584][ T3988] netlink: 12 bytes leftover after parsing attributes in process `syz.6.8789'. [ 765.331232][ T3989] netlink: 12 bytes leftover after parsing attributes in process `syz.6.8789'. [ 765.548885][ T3995] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8791'. [ 765.664998][ T3995] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 765.677084][ T3995] bond0 (unregistering): Released all slaves [ 765.854150][ T4004] syzkaller1: entered promiscuous mode [ 765.859780][ T4004] syzkaller1: entered allmulticast mode [ 765.999517][ T4019] xt_CT: You must specify a L4 protocol and not use inversions on it [ 766.217444][ T4028] tipc: Started in network mode [ 766.231794][ T4028] tipc: Node identity 4a642128d003, cluster identity 4711 [ 766.252719][ T4028] tipc: Enabled bearer , priority 0 [ 766.286528][ T4028] syzkaller0: entered promiscuous mode [ 766.292056][ T4028] syzkaller0: entered allmulticast mode [ 766.344297][ T4028] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 766.387604][ T4028] netlink: 224 bytes leftover after parsing attributes in process `syz.7.8799'. [ 766.399489][ T4028] ksmbd: Unknown IPC event: 3, ignore. [ 766.412068][ T4028] tipc: Resetting bearer [ 766.455116][ T4025] tipc: Resetting bearer [ 766.487816][ T4025] tipc: Disabling bearer [ 766.605776][ T4050] openvswitch: netlink: IP tunnel TTL not specified. [ 766.791571][ T4064] bridge: RTM_NEWNEIGH with invalid ether address [ 767.259458][ T4093] openvswitch: netlink: IP tunnel dst address not specified [ 767.679351][ T4116] xt_CT: You must specify a L4 protocol and not use inversions on it [ 767.934774][ T4131] netlink: 'syz.6.8827': attribute type 62 has an invalid length. [ 768.487777][ T4173] syzkaller0: entered promiscuous mode [ 768.505894][ T4173] syzkaller0: entered allmulticast mode [ 768.821120][ T4197] bond6 (unregistering): Released all slaves [ 769.017143][ T4210] lo: entered promiscuous mode [ 769.028587][ T4210] tunl0: entered promiscuous mode [ 769.036744][ T4210] gre0: entered promiscuous mode [ 769.042340][ T4210] gretap0: entered promiscuous mode [ 769.050027][ T4210] erspan0: entered promiscuous mode [ 769.056326][ T4210] ip_vti0: entered promiscuous mode [ 769.151269][ T4224] netlink: 'syz.4.8854': attribute type 1 has an invalid length. [ 769.228079][ T4230] bond8: (slave vxcan3): The slave device specified does not support setting the MAC address [ 769.240728][ T4230] bond8: (slave vxcan3): Error -95 calling set_mac_address [ 769.272029][ T4223] bond8: (slave gretap3): making interface the new active one [ 769.289989][ T4223] bond8: (slave gretap3): Enslaving as an active interface with an up link [ 769.328681][ T4224] macvlan0: entered promiscuous mode [ 769.334990][ T4224] macvlan0: entered allmulticast mode [ 769.341065][ T4224] bond8: entered promiscuous mode [ 769.346330][ T4224] gretap3: entered promiscuous mode [ 769.354807][ T4224] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 769.369005][ T4224] bond8: (slave macvlan0): the slave hw address is in use by the bond; giving it the hw address of gretap3 [ 769.391109][ T4224] bond8: left promiscuous mode [ 769.396527][ T4224] gretap3: left promiscuous mode [ 769.477175][ T4224] syz.4.8854 (4224) used greatest stack depth: 17440 bytes left [ 769.617975][ T4251] tipc: Enabling of bearer rejected, failed to enable media [ 769.627935][ T4251] syzkaller0: entered promiscuous mode [ 769.634024][ T4251] syzkaller0: entered allmulticast mode [ 769.864732][ T5844] Bluetooth: hci0: command 0x0c1a tx timeout [ 770.055754][ T4273] __nla_validate_parse: 9 callbacks suppressed [ 770.055774][ T4273] netlink: 44 bytes leftover after parsing attributes in process `syz.4.8868'. [ 770.072124][ T4273] netlink: 21 bytes leftover after parsing attributes in process `syz.4.8868'. [ 770.072412][ T4276] netlink: 240 bytes leftover after parsing attributes in process `syz.6.8867'. [ 770.084241][ T4273] netlink: 21 bytes leftover after parsing attributes in process `syz.4.8868'. [ 770.110617][ T4277] netlink: 104 bytes leftover after parsing attributes in process `syz.5.8869'. [ 770.127572][ T4233] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 770.154693][ T4275] netlink: 104 bytes leftover after parsing attributes in process `syz.5.8869'. [ 770.198817][ T4279] netlink: 36 bytes leftover after parsing attributes in process `syz.4.8871'. [ 770.324362][ T4288] netlink: 28 bytes leftover after parsing attributes in process `syz.5.8873'. [ 770.339500][ T4283] bond6: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 770.365733][ T4283] bond6 (unregistering): Released all slaves [ 770.388160][ T4284] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 770.543821][ T4304] netlink: 44 bytes leftover after parsing attributes in process `syz.4.8877'. [ 770.630198][ T4310] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8878'. [ 770.729215][ T4321] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 770.989999][ T4335] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 771.027839][ T4335] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 771.054829][ T4335] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 771.100926][ T4342] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 771.305731][ T4352] netlink: 'syz.7.8888': attribute type 62 has an invalid length. [ 771.637326][ T4367] bond7 (unregistering): Released all slaves [ 771.687357][ T4369] bond7 (unregistering): Released all slaves [ 771.714998][ T4371] tipc: Enabled bearer , priority 0 [ 771.726295][ T4371] tipc: Resetting bearer [ 771.738349][ T4370] tipc: Disabling bearer [ 772.285478][ T4396] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 772.295249][ T4393] bond6: option miimon: invalid value (18446744073709551585) [ 772.307671][ T4393] bond6: option miimon: allowed values 0 - 2147483647 [ 772.321592][ T4393] bond6 (unregistering): Released all slaves [ 772.501481][ T4408] [ 772.503847][ T4408] ====================================================== [ 772.510864][ T4408] WARNING: possible circular locking dependency detected [ 772.517908][ T4408] syzkaller #0 Not tainted [ 772.522433][ T4408] ------------------------------------------------------ [ 772.529453][ T4408] syz.5.8905/4408 is trying to acquire lock: [ 772.535535][ T4408] ffffffff8f4576b8 (nr_neigh_list_lock){+...}-{3:3}, at: nr_rt_ioctl+0x390/0xd50 [ 772.544693][ T4408] [ 772.544693][ T4408] but task is already holding lock: [ 772.552149][ T4408] ffff888075392270 (&nr_node->node_lock){+...}-{3:3}, at: nr_rt_ioctl+0x193/0xd50 [ 772.561438][ T4408] [ 772.561438][ T4408] which lock already depends on the new lock. [ 772.561438][ T4408] [ 772.571938][ T4408] [ 772.571938][ T4408] the existing dependency chain (in reverse order) is: [ 772.580958][ T4408] [ 772.580958][ T4408] -> #2 (&nr_node->node_lock){+...}-{3:3}: [ 772.589142][ T4408] _raw_spin_lock_bh+0x36/0x50 [ 772.594494][ T4408] nr_rt_device_down+0x12a/0x720 [ 772.599961][ T4408] nr_device_event+0x137/0x150 [ 772.605241][ T4408] notifier_call_chain+0x19d/0x3a0 [ 772.610866][ T4408] __dev_notify_flags+0x18d/0x2e0 [ 772.616410][ T4408] netif_change_flags+0xe8/0x1a0 [ 772.621868][ T4408] dev_change_flags+0x130/0x260 [ 772.627423][ T4408] dev_ioctl+0x7b4/0x1150 [ 772.632294][ T4408] sock_do_ioctl+0x22c/0x300 [ 772.637412][ T4408] sock_ioctl+0x576/0x790 [ 772.642267][ T4408] __se_sys_ioctl+0xfc/0x170 [ 772.647388][ T4408] do_syscall_64+0xfa/0xf80 [ 772.652499][ T4408] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 772.658907][ T4408] [ 772.658907][ T4408] -> #1 (nr_node_list_lock){+...}-{3:3}: [ 772.666717][ T4408] _raw_spin_lock_bh+0x36/0x50 [ 772.672007][ T4408] nr_rt_device_down+0xa9/0x720 [ 772.677383][ T4408] nr_device_event+0x137/0x150 [ 772.682749][ T4408] notifier_call_chain+0x19d/0x3a0 [ 772.688369][ T4408] __dev_notify_flags+0x18d/0x2e0 [ 772.693909][ T4408] netif_change_flags+0xe8/0x1a0 [ 772.699355][ T4408] dev_change_flags+0x130/0x260 [ 772.704724][ T4408] dev_ioctl+0x7b4/0x1150 [ 772.709565][ T4408] sock_do_ioctl+0x22c/0x300 [ 772.714668][ T4408] sock_ioctl+0x576/0x790 [ 772.719508][ T4408] __se_sys_ioctl+0xfc/0x170 [ 772.724616][ T4408] do_syscall_64+0xfa/0xf80 [ 772.729644][ T4408] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 772.736063][ T4408] [ 772.736063][ T4408] -> #0 (nr_neigh_list_lock){+...}-{3:3}: [ 772.743972][ T4408] __lock_acquire+0x15a6/0x2cf0 [ 772.749445][ T4408] lock_acquire+0x117/0x340 [ 772.754543][ T4408] _raw_spin_lock_bh+0x36/0x50 [ 772.759823][ T4408] nr_rt_ioctl+0x390/0xd50 [ 772.764752][ T4408] sock_do_ioctl+0xdc/0x300 [ 772.769759][ T4408] sock_ioctl+0x576/0x790 [ 772.774600][ T4408] __se_sys_ioctl+0xfc/0x170 [ 772.779711][ T4408] do_syscall_64+0xfa/0xf80 [ 772.784727][ T4408] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 772.791128][ T4408] [ 772.791128][ T4408] other info that might help us debug this: [ 772.791128][ T4408] [ 772.801348][ T4408] Chain exists of: [ 772.801348][ T4408] nr_neigh_list_lock --> nr_node_list_lock --> &nr_node->node_lock [ 772.801348][ T4408] [ 772.815338][ T4408] Possible unsafe locking scenario: [ 772.815338][ T4408] [ 772.822776][ T4408] CPU0 CPU1 [ 772.828135][ T4408] ---- ---- [ 772.833489][ T4408] lock(&nr_node->node_lock); [ 772.838245][ T4408] lock(nr_node_list_lock); [ 772.845383][ T4408] lock(&nr_node->node_lock); [ 772.852659][ T4408] lock(nr_neigh_list_lock); [ 772.857330][ T4408] [ 772.857330][ T4408] *** DEADLOCK *** [ 772.857330][ T4408] [ 772.865469][ T4408] 2 locks held by syz.5.8905/4408: [ 772.870569][ T4408] #0: ffffffff8f457718 (nr_node_list_lock){+...}-{3:3}, at: nr_rt_ioctl+0x104/0xd50 [ 772.880056][ T4408] #1: ffff888075392270 (&nr_node->node_lock){+...}-{3:3}, at: nr_rt_ioctl+0x193/0xd50 [ 772.889706][ T4408] [ 772.889706][ T4408] stack backtrace: [ 772.895585][ T4408] CPU: 1 UID: 0 PID: 4408 Comm: syz.5.8905 Not tainted syzkaller #0 PREEMPT(full) [ 772.895603][ T4408] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 772.895613][ T4408] Call Trace: [ 772.895621][ T4408] [ 772.895635][ T4408] dump_stack_lvl+0x189/0x250 [ 772.895655][ T4408] ? __pfx_dump_stack_lvl+0x10/0x10 [ 772.895670][ T4408] ? __pfx__printk+0x10/0x10 [ 772.895685][ T4408] ? stack_trace_save+0x9c/0xe0 [ 772.895708][ T4408] print_circular_bug+0x2e2/0x300 [ 772.895726][ T4408] check_noncircular+0x12e/0x150 [ 772.895744][ T4408] __lock_acquire+0x15a6/0x2cf0 [ 772.895766][ T4408] ? nr_rt_ioctl+0x390/0xd50 [ 772.895782][ T4408] lock_acquire+0x117/0x340 [ 772.895794][ T4408] ? nr_rt_ioctl+0x390/0xd50 [ 772.895812][ T4408] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 772.895830][ T4408] ? nr_rt_ioctl+0x390/0xd50 [ 772.895846][ T4408] _raw_spin_lock_bh+0x36/0x50 [ 772.895862][ T4408] ? nr_rt_ioctl+0x390/0xd50 [ 772.895878][ T4408] nr_rt_ioctl+0x390/0xd50 [ 772.895900][ T4408] ? __pfx_nr_rt_ioctl+0x10/0x10 [ 772.895921][ T4408] ? apparmor_capable+0x137/0x1a0 [ 772.895940][ T4408] ? capable+0x89/0xe0 [ 772.895953][ T4408] ? nr_ioctl+0x1b1/0x3b0 [ 772.895968][ T4408] sock_do_ioctl+0xdc/0x300 [ 772.895984][ T4408] ? __pfx_sock_do_ioctl+0x10/0x10 [ 772.895999][ T4408] ? do_futex+0x395/0x420 [ 772.896016][ T4408] sock_ioctl+0x576/0x790 [ 772.896031][ T4408] ? __pfx_sock_ioctl+0x10/0x10 [ 772.896046][ T4408] ? __fget_files+0x3a0/0x420 [ 772.896058][ T4408] ? __fget_files+0x2a/0x420 [ 772.896071][ T4408] ? bpf_lsm_file_ioctl+0x9/0x20 [ 772.896083][ T4408] ? __pfx_sock_ioctl+0x10/0x10 [ 772.896096][ T4408] __se_sys_ioctl+0xfc/0x170 [ 772.896113][ T4408] do_syscall_64+0xfa/0xf80 [ 772.896131][ T4408] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 772.896144][ T4408] ? clear_bhb_loop+0x60/0xb0 [ 772.896160][ T4408] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 772.896173][ T4408] RIP: 0033:0x7f9c5378f749 [ 772.896187][ T4408] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 772.896200][ T4408] RSP: 002b:00007f9c54624038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 772.896214][ T4408] RAX: ffffffffffffffda RBX: 00007f9c539e5fa0 RCX: 00007f9c5378f749 [ 772.896225][ T4408] RDX: 0000000000000000 RSI: 00000000000089e2 RDI: 0000000000000005 [ 772.896234][ T4408] RBP: 00007f9c53813f91 R08: 0000000000000000 R09: 0000000000000000 [ 772.896243][ T4408] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 772.896251][ T4408] R13: 00007f9c539e6038 R14: 00007f9c539e5fa0 R15: 00007ffff1e8a078 [ 772.896268][ T4408] [ 773.199179][ T4407] x_tables: duplicate underflow at hook 1 [ 778.582763][ T3852] unregister_netdevice: waiting for bond0 to become free. Usage count = 3 [ 778.591425][ T3852] ref_tracker: netdev@ffff888029438618 has 1/1 users at [ 778.591425][ T3852] ib_device_set_netdev+0x31f/0x6d0 [ 778.591425][ T3852] siw_newlink+0x400/0xd90 [ 778.591425][ T3852] nldev_newlink+0x4a5/0x5a0 [ 778.591425][ T3852] rdma_nl_rcv+0x6ae/0x980 [ 778.591425][ T3852] netlink_unicast+0x82f/0x9e0 [ 778.591425][ T3852] netlink_sendmsg+0x805/0xb30 [ 778.591425][ T3852] __sock_sendmsg+0x21c/0x270 [ 778.591425][ T3852] ____sys_sendmsg+0x505/0x820 [ 778.591425][ T3852] ___sys_sendmsg+0x21f/0x2a0 [ 778.591425][ T3852] __x64_sys_sendmsg+0x19b/0x260 [ 778.591425][ T3852] do_syscall_64+0xfa/0xf80 [ 778.591425][ T3852] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 778.591425][ T3852]