last executing test programs: 3m28.457314532s ago: executing program 0 (id=685): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b80)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00'}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r3, 0x107, 0x7, &(0x7f0000000100)=0x4000200, 0x4) setsockopt$packet_tx_ring(r3, 0x107, 0x5, &(0x7f0000000080)=@req3={0x8000, 0x6, 0x300, 0xfc}, 0x1c) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x6, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000900), 0x8) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)={0x1b, 0x0, 0x0, 0x4, 0x0, 0xffffffffffffffff, 0x8, '\x00', 0x0, r5, 0x3, 0x0, 0x2}, 0x50) r7 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=@newqdisc={0x78, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r9, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0xca9, 0x0, 0x0, 0x0, 0xf407}, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x11, 0x6, 0x1ff, {0x0, 0x0, 0x0, 0x3}}}}]}, 0x78}}, 0x0) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r10, 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000700)={0xffffffffffffffff, 0x20, &(0x7f00000006c0)={&(0x7f0000000c40)=""/4096, 0x1000, 0x0, &(0x7f0000000540)=""/157, 0x9d}}, 0x10) r12 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000740)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x4, 0x4}, 0x50) r13 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000007c0)={0xffffffffffffffff, 0x5, 0x8}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x15, 0x4, &(0x7f00000001c0)=@raw=[@map_val={0x18, 0xa, 0x2, 0x0, r6, 0x0, 0x0, 0x0, 0x2}, @cb_func={0x18, 0x2, 0x4, 0x0, 0xfffffffffffffffc}], &(0x7f00000003c0)='syzkaller\x00', 0x9, 0x0, 0x0, 0x41000, 0xa, '\x00', r9, @fallback=0x2d, r10, 0x8, &(0x7f00000004c0)={0x5, 0x100}, 0x8, 0x10, &(0x7f0000000500)={0x5, 0xd, 0x3, 0x5}, 0x10, r11, r0, 0x0, &(0x7f0000000800)=[r12, r13, 0x1], 0x0, 0x10, 0x81}, 0x94) setsockopt$inet_int(r4, 0x0, 0xb, &(0x7f00000000c0)=0x3, 0x4) syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x68, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}, "00186371ae9b1c03"}}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x4000, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r4, &(0x7f0000004200)=[{{0x0, 0x0, 0x0}, 0xfffffffa}, {{0x0, 0x0, 0x0}, 0x3}], 0x2, 0x2002, 0x0) 3m27.502882453s ago: executing program 0 (id=693): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a01000000000000000000010000000900010073797a30000000000900020073797a3000000000400003800800014000000000080002400000fbff2b0003801400010067656e6576653000000000000000000014000100776732000000000000000000c6e49c0f5c000000180a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c000380140001"], 0x110}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2686dd4c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r2 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2}, &(0x7f00000001c0)=0x1c, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000540)=0x0, &(0x7f00000005c0)=0x4) setsockopt$inet6_mreq(r2, 0x29, 0x15, &(0x7f00000006c0)={@loopback, r3}, 0x14) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f0000000200)=[@in={0x2, 0x4e20, @empty}, @in6={0xa, 0x4e23, 0x0, @loopback, 0x2}, @in6={0xa, 0x4e21, 0x55, @remote, 0x8}, @in={0x2, 0x4e21, @empty}], 0x58) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r4, &(0x7f0000000d00)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0xfffffffc}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000400)="b8", 0x1}], 0x1}}, {{&(0x7f0000000080)={0xa, 0x4e20, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x45af}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000340)="013d", 0x2}], 0x1, 0x0, 0xfffffe23}}], 0x2, 0x0) shutdown(r4, 0x1) getsockopt$inet_sctp6_SCTP_RTOINFO(r4, 0x84, 0x0, &(0x7f0000000140)={0x0, 0x5d05, 0x5, 0x1}, &(0x7f0000000180)=0x10) r6 = socket$inet_sctp(0x2, 0x5, 0x84) r7 = socket$kcm(0x10, 0x2, 0x0) ioctl$INCFS_IOC_FILL_BLOCKS(r1, 0x80106720, &(0x7f0000000f80)={0x3, &(0x7f0000000f00)=[{0x6, 0x4d, &(0x7f00000008c0)="febdc75006904f97c4d9c4224cc82363d8418affd3b1309755d550784e65c7db34748f7041c70fc37a7bac6b4339ad21168ebd581d34d5d90cfd1383d2c1a953a78c7dffcccf337a5676f54433", 0x0, 0x1}, {0xb3, 0xed, &(0x7f0000000b00)="2f31d66836d8ff99fd8f292e1d2ce4eedc184bb6f3961af1009c9911db034d80de066a3293504addb6bae6a2f67bee84cdce3b9b52870c799760a1760773721f3dd01a858f764a15322c49b662f10035774dd819639063e8b99f9b1a7c179ef05ba4da8c3cf2ef5521482eceaba718ccc95e29b831ebe6b1dc9436018811a3c15aaf98950506fa3398d4dd6547839f0eac9a4632f44e959242dc51fe663cfd1ba0a6939c7b57fb8349698cf58c3c5ee4f879a80de7c5c274f3182c4d20aeca0adb9668e5fbb9f4a35e534370d59107cef451f6e39ee8be61d2e48ee315f6976bc826346771a2eb714a8fdd4bed", 0x1}, {0x6, 0xcf, &(0x7f0000000e00)="f500956b58eb75367f675d84313942e8184673648f06536ccda6e64c2a31d0e369a5d1667d6fca455f882467469d74c5ca3176f873aa6034e46e830f2837bc4d983dcfbdce382f87ad10c3e4fbdfddbeb266d8f95b3e98c4b72b51d84fa536cdc9bb929ed31f252c4b3c69fded0be7b8db04bc2a71e9919fbc5a984e70f375da7000f6d9c2893e60a4fc01a080ce8651e91da8f4b9bb862217b5fd59d98211add1680834b8440c102ecdf017dbb5b54ada8b2b6f5aaf47abda543b4806fe92345f3733dff386ed942e08996e0e4acc", 0x1, 0x1}]}) sendmsg$inet(r7, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000d00)=""/197, 0xc5}, {&(0x7f0000000700)=""/215, 0xd7}, {&(0x7f0000003200)=""/4031, 0xfbf}, {&(0x7f0000000c00)=""/196, 0xc4}, {&(0x7f0000000a00)=""/196, 0xfe85}, {&(0x7f0000002180)=""/100, 0x64}, {&(0x7f0000002200)=""/4066, 0xfe2}, {&(0x7f00000003c0)=""/242, 0xf2}, {&(0x7f0000000300)=""/172, 0xac}, {&(0x7f0000000800)=""/150, 0xa6}, {&(0x7f0000000240)=""/159, 0x9f}], 0xb}, 0x40002002) recvmmsg(r7, &(0x7f00000019c0)=[{{0x0, 0x0, 0x0}, 0x7}, {{0x0, 0x0, 0x0}, 0x7fffffff}], 0x2, 0x12020, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r6, 0x84, 0x72, &(0x7f0000000040)={r5, 0x9, 0x10}, &(0x7f00000000c0)=0xc) 3m26.88135088s ago: executing program 0 (id=699): bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x5, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41000, 0x10, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) r0 = socket$kcm(0x2, 0x200000000000001, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x5452, &(0x7f0000000100)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x1a, 0x3, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000d485000000000000000000050000800000000000e93fdce83a7637e38a7d5673fc28ca44721e1aef6c83d1693d21dc6faa1f5d97e5747849be9776b2622152cf58c1bf39dc9bb57890086f26cf3b9595ce693eafc8229a0803a7150c6ebafbc0cf6354628b18b6d6a6328285b457a9e00ca654e3379a33e04ad8327256955c534f261ce11cebc33069c18625d3c6cb9fa6dd3466f3eabf6ee8e16c118e56ab6aa61736eb07af1ccf7c3c432e66857d330954c6"], &(0x7f0000000340)='syzkaller\x00', 0x1, 0xc5, &(0x7f0000000180)=""/197, 0x0, 0x0, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2600}, 0x80) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0900000001000000e27f00000100000000000000", @ANYRES32, @ANYBLOB="0400000000000000000000000000000000f1ff00", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/14], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180), &(0x7f0000000200), 0x3, r1}, 0x38) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='workqueue_queue_work\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='workqueue_queue_work\x00', r3}, 0x10) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) close(r4) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x3000c0c0) sendmsg$kcm(r0, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x24000000) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r7 = socket$kcm(0x2, 0xa, 0x2) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r8, &(0x7f00000086c0)=[{{0x0, 0x0, 0x0}, 0x101}, {{0x0, 0x0, 0x0}, 0x80000001}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000440)=""/183, 0xb7}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000000000)=""/41, 0x29}, {&(0x7f00000018c0)=""/4104, 0x1008}, {&(0x7f0000000640)=""/68, 0x44}, {&(0x7f0000000500)=""/224, 0xe0}, {0x0}], 0x7}, 0x80000000}], 0x4, 0x4022, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r6, &(0x7f00000002c0)={@val={0x0, 0xf7}, @val={0x2, 0x1, 0x4, 0x81, 0x9}, @eth={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x19}, @val={@val={0x88a8, 0x2}, {0x8100, 0x1, 0x1, 0x3}}, {@canfd={0xd, {{0x4, 0x1, 0x1}, 0x18, 0x1, 0x0, 0x0, "9920c0dc2c2ea171e384dd74360a53f909f2e2595886de72dfa5d6c4963a6e3623c24662c396d7440d9f702e3c6e7826b5a6783becdf58adef27dc0df23490a5"}}}}}, 0x6c) syz_emit_ethernet(0x14, &(0x7f0000000080)={@empty, @random='\x00\x00\x00\x00C7', @val={@void, {0x8100, 0x0, 0x0, 0x2}}, {@generic={0x88f5, "1f77"}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r5, 0x0, 0x22, 0x0, &(0x7f0000000380)="f6f4e9a1d78ad62ceef1884386dd78bb3fb7dbfc8180ca8395ccfda2e499b3dcf581", 0x0, 0xa1b, 0x0, 0x2f, 0x0, &(0x7f0000000700)="010a", 0x0}, 0x50) 3m25.694611207s ago: executing program 0 (id=712): r0 = socket(0x15, 0x5, 0x0) connect$l2tp6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x2e}, 0xfffffffd, 0x3}, 0x20) getsockname$llc(r0, 0x0, &(0x7f00000002c0)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x3, &(0x7f0000000000)=@raw=[@alu={0x7, 0x1, 0xd, 0xd, 0x4, 0xc, 0x4}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x5}], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3m25.474422885s ago: executing program 0 (id=714): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x310000, 0x1000, 0x4, 0x3}, 0x20) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@delchain={0x150, 0x65, 0x2, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x2, 0xa}, {0xfff2, 0x1}, {0x0, 0xb}}, [@TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_bpf={{0x8}, {0x11c, 0x2, [@TCA_BPF_CLASSID={0x8, 0x3, {0x8, 0xfff1}}, @TCA_BPF_ACT={0xf4, 0x1, [@m_ctinfo={0xf0, 0x1b, 0x0, 0x0, {{0xb}, {0x84, 0x2, 0x0, 0x1, [@TCA_CTINFO_ZONE={0x6, 0x4, 0x401}, @TCA_CTINFO_ACT={0x18, 0x3, {0xd, 0x6, 0x3, 0x101, 0x4}}, @TCA_CTINFO_ACT={0x18, 0x3, {0x8, 0x8, 0x5, 0x0, 0x9}}, @TCA_CTINFO_ACT={0x18, 0x3, {0x1, 0x4, 0x8, 0x8, 0x40}}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x400}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0xffffffb4}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x3}, @TCA_CTINFO_ACT={0x18, 0x3, {0x0, 0x0, 0xe, 0x8, 0x512ce089}}]}, {0x43, 0x6, "db2918d72a158ab531e46516ea3a92c607dc8bc4d720040303277e82273db377477ddbc625ff21a6b7f57f1d792e01b509065668715d0998bea200d1d4ed40"}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_FD={0x8}, @TCA_BPF_FD={0x8}]}}]}, 0x150}, 0x1, 0x0, 0x0, 0x81}, 0x20000080) r2 = socket(0x10, 0x803, 0x0) sendto(r2, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x70, 0x2, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x7}, [@IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0x2}}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x4}}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x5c}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x70}}, 0x8000) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x2, 0x5, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @private1}}, @sadb_sa={0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}]}, 0x60}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0103fcffffff000000002b0000000c0006"], 0x20}, 0x1, 0x0, 0x0, 0x840}, 0x0) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000001c0)=0x2, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000081662f000000000000000000000060122f00000000009500000000000094"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r9 = socket(0x400000000010, 0x3, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r11, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000e40)=@newtfilter={0x84, 0x2c, 0xd27, 0x70bd2d, 0x25dfdc00, {0x0, 0x0, 0x0, r11, {0x0, 0x3}, {}, {0xfff3, 0xffe0}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0xd, 0xd0ea, 0x20000001, 0x3, 0x4}, 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x50}, 0x0) r12 = socket(0x400000000010, 0x3, 0x0) r13 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r12, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@delchain={0x24, 0x66, 0x221, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r14, {0x0, 0x1}, {}, {0xb, 0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x8848}, 0x20004800) bind$xdp(r0, &(0x7f0000000200)={0x2c, 0x1, r5, 0x25, r0}, 0x10) 3m24.613933925s ago: executing program 0 (id=723): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x9, 0x0, r0}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000021c0)={0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x10800ff, r1}, 0x38) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_freezer_state(r2, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r3, &(0x7f0000000040)='FROZEN\x00', 0x7) r4 = openat$cgroup_procs(r2, &(0x7f00000000c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000180), 0x12) write$cgroup_freezer_state(r3, &(0x7f0000000080)='THAWED\x00', 0x7) 3m20.809354122s ago: executing program 3 (id=771): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00'}) socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="500000001000210400000000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="adffa888e16000002800128009000100766c616e00000000180002800c0002000e0000000a000000060001000004000008000500", @ANYRES32=r4, @ANYBLOB="c8ecd1f7b8be49b5a978"], 0x50}}, 0x2) openat$cgroup_ro(r0, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) 3m20.552086905s ago: executing program 3 (id=775): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x4001}, 0xfea3) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0xb0, 0x0, 0x2, 0x401, 0x0, 0x0, {0x7, 0x0, 0x6}, [@CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0xffffffff}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x81}, @CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x3}, @CTA_EXPECT_MASTER={0x20, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @broadcast}}}]}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x7}, @CTA_EXPECT_NAT={0x5c, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x50, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @rand_addr=0x64010100}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x14, 0x4, @empty}}}]}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x8004}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000005e"], 0x1c}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000001c00110c0000001400000f0007000000", @ANYRES32=r3, @ANYBLOB="800202000a000200577f0000aabb000020000e"], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x58}}, 0x0) 3m20.460620662s ago: executing program 3 (id=778): r0 = socket(0x2a, 0x2, 0x0) ioctl$sock_netdev_private(r0, 0x89ff, &(0x7f0000000180)="95c6fc9dea3d91a6c7db818eb1677f68d14abfaae71b7a8fcf8c92f970794a06d800eb162c5f51694a9caf1b054498f018bf956866bdb8201b6248bc95f157d8542b3023cebba55f4cac53d816bdabe362d975aa6ff2603e03f24f68bde1e6857d") getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_ATM={0x8, 0x4, 0x2}]}}]}, 0x3c}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010100000000000008002b00000008000300", @ANYRES32=r4, @ANYBLOB="04004600050034006e000000080026006c090000200051"], 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x4804) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x99b}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x1}]}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xb4}, 0x1, 0x0, 0x0, 0x8040}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$SOCK_DESTROY(r7, &(0x7f00000004c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000480)={&(0x7f0000000880)={0x3b0, 0x15, 0x20, 0x70bd28, 0x25dfdbfc, {0x11, 0x6}, [@INET_DIAG_REQ_BYTECODE={0x98, 0x1, "74484da91770ae86cd1d1c5c248d06beb17a27ca1b621940990adb77f8d8503d00105597322594e897eddab238932588b263030cba68215290b1ef65a7218a8fe4f405ecb9d4f1d5af2a23ded4e6b91ce8333771d7cfeb02ddeb777afe30f439cd22b549b98749ca1b655f3b3627045d2c1c7ac8ff7a08a705d7fcfd160c3232b833bb38f4330de9726a8192e5123fb32e835396"}, @INET_DIAG_REQ_BYTECODE={0x1c, 0x1, "e9aaba8eff66f2ca454ee6e5338977d980ec4752d18a889a"}, @INET_DIAG_REQ_BYTECODE={0xd6, 0x1, "4a3a29b7790eabc8b77e47ff49c4453835716ccc49b6f395f9811300344ce17f351328d4c2dc2d8bde26cb2d102ce2b1e13cf7252197dea1d64e8329bc139701abb4ccb2488a51fefdc410f4390e06a4886c4b230b44b50ada4e34a6c7b7df899d4af6fb73738102ac2648f50f199dc56f6cfe49e6edcc0dfb55b7928b695fca890b97bbc02215469417a5280883087bc49362c8076247b2358997d9dc0f0c35bfa34928f4c393db251d68aad8c4b26f65d75a95f6984b29c633bd307737959301a43cdcbcf0b6ffa8634bd9276e975a9f4d"}, @INET_DIAG_REQ_BYTECODE={0x26, 0x1, "164d420be5ce1c047c9796e90b3ced5dc1bb0df1591022d67cec40d264263200e72b"}, @INET_DIAG_REQ_BYTECODE={0x4}, @INET_DIAG_REQ_BYTECODE={0x97, 0x1, "44f12f28949d5344eb866a943fa2d499f062dd89520f4851771a7111567008559f6c320e59fa1ff8560cf0f2b498827756f3748d5399dccb3e2dc318a3b033ab06d796a5e9bff80f68376c3cf7c0d8ea7563ba7513984e921d8b4b75e39a3efd444bd889e0b36e5cabba60737cd91f634e45fbd2be0f93d3b55d91526c7710c0322087666c1e02085a3b79ce621ab3c804d04e"}, @INET_DIAG_REQ_BYTECODE={0x42, 0x1, "23e922599c2775a124b56e219a4edfc87cb0fad8caeda91d0508db21d44cdd22252cb57424ff4045a790566ef69842d4616f8fe2ce2d330392d9c6e4bec6"}, @INET_DIAG_REQ_BYTECODE={0x4}, @INET_DIAG_REQ_BYTECODE={0x102, 0x1, "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"}]}, 0x3b0}, 0x1, 0x0, 0x0, 0x10}, 0x48004) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x4, &(0x7f0000000140)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x55, '\x00', 0x0, 0x0, r7}, 0x94) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300), r8) r11 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r11, 0x29, 0x1a, 0x0, 0x0) setsockopt$sock_linger(r11, 0x1, 0xd, &(0x7f0000000200)={0x1, 0x8}, 0x8) setsockopt$inet6_IPV6_DSTOPTS(r8, 0x29, 0x3b, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x138) sendmsg$TIPC_NL_NODE_GET(r9, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000340)={&(0x7f0000000540)={0x110, r10, 0x400, 0x70bd26, 0x25dfdbff, {}, [@TIPC_NLA_BEARER={0x4}, @TIPC_NLA_NET={0x50, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x2}, @TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7fff}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2000ee8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x6}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}]}, @TIPC_NLA_NET={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0xfffffff8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xb81}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7ff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x100}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x90}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x10}]}, @TIPC_NLA_PUBL={0x54, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x101}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7ff}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8001}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xffff}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}, @TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9}]}]}, 0x110}, 0x1, 0x0, 0x0, 0x10}, 0x10) getsockopt(0xffffffffffffffff, 0x28, 0x2, &(0x7f0000001100)=""/4109, &(0x7f00000000c0)=0x100d) 3m20.116256172s ago: executing program 3 (id=780): socket$nl_sock_diag(0x10, 0x3, 0x4) (async) r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) getpeername$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f0000000300)={0x398, 0x13, 0x300, 0x70bd28, 0x25dfdbfb, {0x1a, 0x7, 0x2, 0x78, {0x4e22, 0x4e20, [0xe040, 0x10, 0xa2, 0x5], [0x8, 0xe, 0xcd, 0x3], r1, [0x4, 0x7fff]}, 0x2, 0x7fff}, [@INET_DIAG_REQ_BYTECODE={0x29, 0x1, "da8c3d0ce5d579d057649b2f5260ba967e3fb0a0c80afc334cbb2bd8cd9f70184f3fab9d49"}, @INET_DIAG_REQ_BYTECODE={0x9d, 0x1, "4529a5923778f80c6b4eda19db0f89c5023725e73b117d8936ca868140a901f9f1e9c3c2d5b7017fbed66c45d547de7939d39ab9bc0154e6fc10bad0844e8eea7a8d943fbe0bef760d563f8ece78e39734d2d3e57d4beab53ea6bb85b32824fc13fd148649f75d2119b43a53fd9a3e247185be3bfa8df0d8ac22f951f04808d29c365d82a3fae7da0a42c0a08af71b2547a2da2add34c89a64"}, @INET_DIAG_REQ_BYTECODE={0xca, 0x1, "14107bdeabd41d2507d89bf9592e5a3ac176e5ebd71d20a20808047a79be4dc2833c305908fcfe9594ab4155695f1fdade06b520620d5f6e671a92feba9af7535a025730ad3e1add35d23477baf061333b23b457c225a4a27297048880b8837c22c1eb9fe4128f522ee7f3879c501dd68c41fb5e1a6c560ef0f0b0ccde54e2cfbc2323498a675f04e3aa66a596c9769f0257481c216c4a33083810f4347243b43f20a5a803a13ef9c241d92a475283ba698f67c73c08bc2f28c1572eca57f7c6149b5b5eef64"}, @INET_DIAG_REQ_BYTECODE={0x38, 0x1, "33846d05de3a844a85db5f88757c09bb41c3ff5050e5fb4343146010b07f1a89e06d73c5d16cc06b087fb95cbd503c7a23cb96cf"}, @INET_DIAG_REQ_BYTECODE={0x8a, 0x1, "7c078af6ecc0113ae5e1eca806b0fc9e4958af0a4476bad34a01c075b6ae3049ef2258f23d0e588334d93a0c8948f2be9e123ae4da59ed8794beb4e6bf6bec1959a22a5d1770b1b74bc4821b8b95ee03775451dc6c4e533c5819304c7c14b99ee4df77d6790ca2a2832adfc9a142dcd7eaa276602f944c9b22f056aeebebf4d66ce80f368e0c"}, @INET_DIAG_REQ_BYTECODE={0xf0, 0x1, "cdac6e65f39c11c97fe075ee2d12cf54b702b39fabfad3d1430d27802d6e8d0cc016c152e1e9970c369dcc02141d009335faffb401c89b769c710ad9e1bdc84bc0429a01e207fc21694c75dd8566f7c8fe46203dddde474be84f9088a27989237fb4ff4569470dc039ea0e2efb5d405f01002a136f30691490cb489cae2d045daaf564e070314631b17273395ee2f4eabd8cfaf4fc6b726344977354126f734534f2a9bd3ac7cf7beb8efea08c0776706a0ceceda6781c7ca57be4e5a3ba0556c0ea4920e2f407f77d4f63fd7d5fd5fef936690c297f2dedd5c67cae761a8f15375332da41ece77c50f2cbf0"}]}, 0x398}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x3a) sendmmsg$inet6(r2, &(0x7f00000002c0)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000001c0)="03a13549a725007f31ba1d7aeb8942296f46403ad1d621693584ac792857411e92d85ac3c6aafd4f3078aba42850a410d08a94d3ede9d9a05efcf1506655c3f1b84b427ac5eca99de0ec954ba9f906c5b163c70015eb7d88bd40e520b36a70e617583f1dc2d43ce19a2fcb83563d3f2b89e7eb803d91e965eda7263e08e64398f1c1435a224062c3c85fbc995ae2a7c8141065e5f6e13f3d1d79344268597d71e77b1f865b73a462546e89780709ceea46e904cbfc71665e7436dc728ca54963c858f6c9467ab42e90153d5570c5286deaf3b78f", 0xd4}, {&(0x7f00000006c0)="6a08dbaef5d5b364d98a72638f99c7b0379046c4689d21fd99de248aa876ffca9f14f1581567dceda6642812a221882a29e6b776bb6752f66f311b12e700f3ea839abc4f0b7e63de9305db9494772aef52b5b29966180d37b9f50be5fc654ad5dd18d1ba887b12f21b70001fe06e10d92f4f4ae7e626d23ed22846587028ea1b0b8aad9904b09c95178f31433cee43fd4cdd754399c05f6544b75a65679eef42caed5a458cd63727d637c084b78351afe9f922a125f309aedf0e8e324d3404fe2b0f89a2569a3ceaa3ea7d5cdac27c4737061bc055804638c5bcd0cbb00e", 0xde}, {&(0x7f0000000080)="85d42388bd7051dcab80d412f9f8cea6bd76370686fcd5b37859243f65f5a7b98c3a0ba236e1f76e9e9c652ac8e8", 0x2e}, {&(0x7f00000007c0)="c568a8e9d11ed63cce09d6e3ac36237dc4386d26d7e8cc14cab38849020740107efd44020e55092309a4f687c4433080a7a1c0dc4a47fe66af6a75e47d52bf8193f3b917a7e30b80daa11042ed447e68ed05cb40", 0x54}], 0x4, &(0x7f0000000840)=[@pktinfo={{0x24, 0x29, 0x32, {@dev={0xfe, 0x80, '\x00', 0x21}, r1}}}, @dstopts={{0xa0, 0x29, 0x37, {0x21, 0x10, '\x00', [@generic={0x2, 0x6c, "a741745d8f009629694dc5a728848df2c5055dd06c141210ac33d089ef6bf1027df71c111d2c129c3f734299ff6ddc7a48f761cc9372a15cf20de6ea72077bb6fb672b5109f839dda1de17a4d44b4fa0029c07b17d72c540050577eb3c73c0f02c4f1dfced8d844bde875d51"}, @generic={0xa, 0x1, "11"}, @jumbo={0xc2, 0x4, 0x8}, @ra={0x5, 0x2, 0x7}, @jumbo={0xc2, 0x4, 0x26}]}}}, @rthdr_2292={{0x98, 0x29, 0x39, {0x2b, 0x10, 0x1, 0xfa, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, @private0={0xfc, 0x0, '\x00', 0x1}, @private1={0xfc, 0x1, '\x00', 0x1}]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x390}}, @hopopts_2292={{0x2b0, 0x29, 0x36, {0xff, 0x52, '\x00', [@generic={0x7f, 0xe4, "693bd7f225d4c52d55a2ec3df2d943bfee74b0b76a652e4650e3d5508ef669e7c8ba9c760df687b2da003331dcd85c864490f380ac040a15b3a6e76b86cae1f265e33e026262e569f0077928bb7203010e8376e7795845fc217b80cf96b9f780ac01827b8c4258cdd199dab98923ae84c131e355e82c8cb0a884e8e5b892ce4aed6cb5c38de27aba84fcd22634e4a983638c7dc715cce1a3dd2eb1edd3d39b484e846353cc56deef09a7499ca9a256a608e74b7ef2c7f8bb9f6fa36f819389dbde44d9533f2b640cdf88183a2b00d71d0c636236b79460b58ff9b0c9d16daf8a2c8fa8c9"}, @enc_lim={0x4, 0x1, 0x9}, @generic={0x8, 0x86, "5a38df18f5800e516033f37c7256ce584807dbe9963c2004d9729a8b52bd3c87ba4de80e16a298fe9a7b7ad50a07a3f7483877b7f77ae32c8b52f12a5ab1000dde507fdfa68e9e2972b74a7a2f4287c6fb290e453f2e97fececa4eca7607a58302a7d18381ca4feb3531607347f1b801b2fb4ec7246793c1f5846312106bdf9194f8e5924cc7"}, @generic={0x8, 0xfa, "fd813e84585a4ca3aed3b5353577aeeb16633a5f007d62f75e6c692676ff4f1d51f5c7af7628bc3a5765e110baa9f9e4359f2ebbf0e05561b34151f7855e4503d5f45f9f42c4ed5d0a6ccd07ee0fa50b8845064da485de59b617a07f9f78458949fcc4aa90ae41bd14e5b82e55f74ca49504b09cd1720685a502a5eee0421a8872a62aceda0097880fc8e2b8e5109d88f15a50b4540f0131e2c529d5dbd9de91a41990ec04d6f69aa8a9d53e12703c04c02139a742e8d8326e66d5b6769d6349bcccd3f74f8d72b3ec4d9b3bf7bc02ad2260c6babaecf6a0db5e20c73a46ce38f4eb0fbfda99f65846f7a58e216f534c8bb1a67662b2b82d53ae"}, @ra={0x5, 0x2, 0x78}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @ra={0x5, 0x2, 0x7}, @jumbo={0xc2, 0x4, 0xfffffff6}, @hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0x11}}]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0xf5}}, @rthdr_2292={{0x48, 0x29, 0x39, {0x88, 0x6, 0x0, 0x4, 0x0, [@mcast2, @dev={0xfe, 0x80, '\x00', 0x39}, @empty]}}}], 0x488}}], 0x1, 0x0) 3m19.95904467s ago: executing program 3 (id=783): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x30, 0x3, 0x6, 0x104, 0x0, 0x0, {0x0, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x50}, 0x4c800) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000140)=@framed={{0x18, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000dd0a00001f00000073013b00000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7, 0x0, 0xffffffffffffffff, 0x68000000}, 0x48) (rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB="1806000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000009500009883"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000600), r2) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = accept$unix(0xffffffffffffffff, &(0x7f0000000500), &(0x7f0000000100)=0x6e) (async, rerun: 64) r5 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) sendmsg$nl_route(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYBLOB=' \x00\x00\x00e\x00\a'], 0x20}}, 0x0) accept4$unix(r4, &(0x7f0000000580), &(0x7f0000000280)=0x6e, 0x0) (async) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r3) r7 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r7, 0x84, 0x6b, &(0x7f00000003c0)=[@in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}], 0x10) (async) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r7, 0x84, 0x1e, &(0x7f00000008c0)=0x576, 0x4) r8 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="1400000016000b63d25a8064000000000124fc60", 0x14}], 0x1}, 0x0) (async, rerun: 64) getsockopt$IP_VS_SO_GET_INFO(r2, 0x0, 0x481, &(0x7f00000007c0), &(0x7f0000000800)=0xc) (rerun: 64) recvmsg$kcm(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000001300)=""/4068, 0xfe4}, {&(0x7f0000000300)=""/202, 0xca}, {&(0x7f0000000140)=""/20, 0x14}], 0x3}, 0x12120) (async, rerun: 64) r9 = socket$netlink(0x10, 0x3, 0x0) (rerun: 64) writev(r9, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) socket$inet6_mptcp(0xa, 0x1, 0x106) (async, rerun: 64) writev(r9, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) (rerun: 64) sendmsg$IEEE802154_LLSEC_DEL_KEY(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x14, r6, 0x201, 0x70bd2c, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4002080}, 0x4000) (async, rerun: 64) r10 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x32, &(0x7f0000000080)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x801, 0x70bd2d, 0x25dfdbff, {}, [@IFLA_MTU={0x8, 0x4, 0x42}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000010000000000020000000000000a20000000000a03000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000029680000001e0a05010000000000006e6dd60000070000000900020073797a31000000000900010073797a30000000003c00038038000080340001802d000100fefe807eb37bc2a7a6110a370abbe10adf32aa848edc90232d4665de2ae1583b710c20da833679ebe6000000140000001000010000000000000000000084000a1e9e1bcd55a63c45e17eb2e0faa812c97f11a7057f1586d42b29568a8967bf3f7a86166de9b4ac4897f10769eb9c5414"], 0xec}}, 0x0) 3m19.644521608s ago: executing program 3 (id=787): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r1, &(0x7f00000001c0)="c2", 0x1, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) shutdown(r1, 0x1) (async) getsockopt$bt_hci(r1, 0x84, 0x14, &(0x7f0000002140)=""/4092, &(0x7f0000001080)=0xffc) (async) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000100)={0x1d, r3, 0x0, {0x1, 0x0, 0x4}, 0x1}, 0x18) (async) sendmsg$can_j1939(r2, &(0x7f0000000240)={&(0x7f00000001c0)={0x1d, r3, 0x0, {0x2, 0xff, 0x3}, 0xfe}, 0x18, &(0x7f0000000200)={&(0x7f0000000440)="fd98a2b5d26c75348f703578d3d66a0dd76c74721a197ec6eb5d2392e6423771a3f60d80a2a8e371814912c9914957298d1d5b5863a2b18bd0a86be33e6285914571fa6dd76421b0fca2af8ba7c17d4571d86b1232e673e7b35d7df8f0b3276e8fe1b19e3408bec350389182b3aabb980d6c80353176d8e494229bd797dab32ffe27f84436be6ef8539227d559392a405863061bb11c2c12c734c3b2d95c21c3795b2b83cdb65a5cfacb618707e2e945ac7c40752d781cc3723d19690122103d6dde78c84cce9c46828e20fbe67ee46a32a3b2a9f61f2699baad975230b36249dc260f282b1988f57400f6d905855f6a937c050b9accf880490fa69a1e6648b587c710a003c89c811c43b8f1e75a16672af27282ebecf77931dae0a2f9a7b7618a4960088182cb559f952c4833db96581b0cb9e46348f027d8351ef3978e62006cda6b22a5abfb432a1127f682eb87ffaa652243428526c9527356fe1b7b712402b2a8be9f17dcb1c634dccab6e8943813ed144e1c10d9d6f76b6e8b1069f3874990f36afc2951d735217b76e8772e6c0622b14f9e03aad215c800556027a951beb93ee9f9c8ddfcc72e8e927bb9fe8c95bff42e1d1346ff8dc5038599ea1d60aa4f8d0f6de9d2c37e1a915e903bb7374aa5ace967e86bb7e9f40a9d6f53b07757d1bac8abf33b464aae6131e50aae50f28b6e8c27d6f0996357ed35742afd8ab09ea31498ae0e0270b054af13f8a356d49100d9dee1d3204536f582abdc09573c25246e826edaa739c0b072a6650f0d1b8c2415a8ec60faf99cf23fa23c4b3d98636dc51ac6c9967a1bfc070e092118e1bd13eaedc35081eeff1d96b5acd984974c1af5b0b7bab63a88eb2ad5868949907625c2d71edec80ee9c7c20cee59382e206db6f600815a1f093500d5679280a4a4e9560dadb5227fa104b9d96d0974dd009089b4c0b4a674c453a717de6c1a2929cb70cf6caf905a45267f45a3278d6d465d2837dcd697381f47b72f54822acc2b84be8545ce67e61af22838436bb55f43e9e2a7d5e1bf4a11c963d79a9409db5eed6ce4d805027b0e613b8e06ce27ac1e0f3c438233eb64c4def5185d70a906f114d08db571803f8a1955d2243511354d5a4da77b2856ae6532dc018f463cfaefce1a8ea9079554d012e12508afeb342ab5502e31e2d5fbf076f7c501a6deb99d6f0792134712a520b61b6d56bea8e0f15e16b38a456cc5a6f005f1cb13047709cf05e1a731eb901b2be5d28de81392f17fa645a3737d5e3b32fa9ea3477544e804d1ffe72759903dfdcc8e3868fe5b10c68e0208f0e033a79786a4616cb3d90044d20edb8a061acbc36f2288026ecdd2e86b88ac1d76c53710dd68dadb3a7a82947a3810b2ce02a7aa572023dbcbbbc09680e8d71d04886191daa067b071d8109388e651a7f6874a662a8a80eb52c21947e634c2d4cc300aa0ddf48c9363e7a04d2c4f8981c0b0684977e035bd1bf8930082ba5f79f09ad0e8a991895b80b6e136c1361332124bb903a12fb1079e0eb5b77a0dc9ef5243b502f8ebd458a277a3b7dd261fcb452ce826eb22c28c577d5db107b6a015b7c2fad0ca1410ad933ae1ca3cf887aa8aa3bb299ce2fb2350299b785273bc4e6aac418dd14be19a03a0b7062893a69d6d19507bd537eae0dfd9b2ad1f98c87da1758d450bd6af5049bc6ffbb3515289dfdf513e4c337ee60300f4f5f48ac891c58e06f599f5abd293e5f295bf8966752c608df91cccc2120a5be8398b7aba6bd1d737a780bfb3a38070a416a32d9ef99da58c1b6a48a9dc8e72689947489af81bbbdbf17d08f69b147b8d8a1753e4532f115789e6801c1a01aa44c985082620bae0f82079cc62608a477c5285c888c65f0a8df921edfc3ebbc39fc4de9718d27d23141cda3bc3bbe2fdfb219c5213cc6a60a5f190ffb9fb04c086e0fa5f590a300a0ade3f49936c9348922e3ebc27205542db50a2ee4922e3e0952f72b721de59efd5972a2c29371d3ff8b607fb7b51a33bbf22b3d9facdce2d5607345a757b995e904841d6dec99a7c48ba3f33dfda23c22ca9b2629458313a1a85ae3e96bf4e86d057301846825d0dd0fad79cbbb422e0b9ebc726ddbe64846499db63fce4d367928898c0133857f260ba3872a213fc0fd50436b827b2ff90363218ab1e7e2c453c13c0ccb45db68eb63ba822d3a012e77f4a13060b6568e663f913c4705b19662235f2c15c5694843fbf0195bbf423618b50409ca82e1b4bddfd3b5ce68c4ec19b689a889d6d17cb5627aa303e0f5ac78a3fa65b26167dfc44e2565e27dffc740182e51d921de2a50eb33084e11abb985382be7407af64264814e89e3618bb262a85e12b4acad8c517576585ea332912f377c7dc33c745d2f772c4d0ebce95593db70e87329d4471e5332d5325baa881847b6b03633547f72e5070df49979d1e92f6bdc31028921305567e35e8216309af6d392c3b97acf986226e93ea2661636e8a37a9c0e05f1b8a8d2c81006afe24e2", 0x6fa}, 0x1, 0x0, 0x0, 0x20000845}, 0x24000005) (async, rerun: 32) r4 = socket$can_j1939(0x1d, 0x2, 0x7) (rerun: 32) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000000100)={0x1d, r5, 0x0, {0x1, 0x0, 0x4}, 0x1}, 0x18) (async) sendmsg$can_j1939(r4, &(0x7f0000001680)={&(0x7f0000001700)={0x1d, r5, 0x0, {0x2, 0xfe, 0x3}, 0x1fe}, 0x18, &(0x7f0000000200)={&(0x7f0000000440)="fd98a2b5d26c75348f", 0x9}, 0x1, 0x0, 0x0, 0x40}, 0x24000005) (async, rerun: 64) r6 = socket$nl_sock_diag(0x10, 0x3, 0x4) (rerun: 64) sendmsg$SOCK_DIAG_BY_FAMILY(r6, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000000040)={0x14, 0x14, 0xf03, 0x0, 0x0, {0x2c}}, 0x14}}, 0x0) (async, rerun: 64) r7 = socket$netlink(0x10, 0x3, 0x0) (rerun: 64) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00', 0x0}) (async) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000040)=ANY=[@ANYRES16=0x0, @ANYRESHEX=r9, @ANYRES16=r9, @ANYRESOCT=r9, @ANYRESDEC=r8, @ANYRESOCT=r7, @ANYBLOB="8d74bc81ed1ced7a0786bec5b07458f41c907b2919bce53b083e4154c1928003d5ce80dd35b4358accb00632bd664be1f794427830513a23eec7"], 0x48}, 0x1, 0x0, 0x0, 0x24040000}, 0x2000800) (async) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="340000001100050000000000feffffff07000000", @ANYRES32=r8, @ANYBLOB="003000000000000014001a80100004800c000980"], 0x34}, 0x1, 0x0, 0x0, 0x800c000}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000b00)=ANY=[@ANYBLOB="580000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000300012800c0001006d6163766c616e00200002800800010010000000080003000000000008000400"], 0x58}}, 0x0) 3m9.127349886s ago: executing program 32 (id=723): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x9, 0x0, r0}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000021c0)={0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x10800ff, r1}, 0x38) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_freezer_state(r2, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r3, &(0x7f0000000040)='FROZEN\x00', 0x7) r4 = openat$cgroup_procs(r2, &(0x7f00000000c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000180), 0x12) write$cgroup_freezer_state(r3, &(0x7f0000000080)='THAWED\x00', 0x7) 3m4.635355455s ago: executing program 33 (id=787): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r1, &(0x7f00000001c0)="c2", 0x1, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) shutdown(r1, 0x1) (async) getsockopt$bt_hci(r1, 0x84, 0x14, &(0x7f0000002140)=""/4092, &(0x7f0000001080)=0xffc) (async) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000100)={0x1d, r3, 0x0, {0x1, 0x0, 0x4}, 0x1}, 0x18) (async) sendmsg$can_j1939(r2, &(0x7f0000000240)={&(0x7f00000001c0)={0x1d, r3, 0x0, {0x2, 0xff, 0x3}, 0xfe}, 0x18, &(0x7f0000000200)={&(0x7f0000000440)="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", 0x6fa}, 0x1, 0x0, 0x0, 0x20000845}, 0x24000005) (async, rerun: 32) r4 = socket$can_j1939(0x1d, 0x2, 0x7) (rerun: 32) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000000100)={0x1d, r5, 0x0, {0x1, 0x0, 0x4}, 0x1}, 0x18) (async) sendmsg$can_j1939(r4, &(0x7f0000001680)={&(0x7f0000001700)={0x1d, r5, 0x0, {0x2, 0xfe, 0x3}, 0x1fe}, 0x18, &(0x7f0000000200)={&(0x7f0000000440)="fd98a2b5d26c75348f", 0x9}, 0x1, 0x0, 0x0, 0x40}, 0x24000005) (async, rerun: 64) r6 = socket$nl_sock_diag(0x10, 0x3, 0x4) (rerun: 64) sendmsg$SOCK_DIAG_BY_FAMILY(r6, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000000040)={0x14, 0x14, 0xf03, 0x0, 0x0, {0x2c}}, 0x14}}, 0x0) (async, rerun: 64) r7 = socket$netlink(0x10, 0x3, 0x0) (rerun: 64) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00', 0x0}) (async) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000040)=ANY=[@ANYRES16=0x0, @ANYRESHEX=r9, @ANYRES16=r9, @ANYRESOCT=r9, @ANYRESDEC=r8, @ANYRESOCT=r7, @ANYBLOB="8d74bc81ed1ced7a0786bec5b07458f41c907b2919bce53b083e4154c1928003d5ce80dd35b4358accb00632bd664be1f794427830513a23eec7"], 0x48}, 0x1, 0x0, 0x0, 0x24040000}, 0x2000800) (async) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="340000001100050000000000feffffff07000000", @ANYRES32=r8, @ANYBLOB="003000000000000014001a80100004800c000980"], 0x34}, 0x1, 0x0, 0x0, 0x800c000}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000b00)=ANY=[@ANYBLOB="580000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000300012800c0001006d6163766c616e00200002800800010010000000080003000000000008000400"], 0x58}}, 0x0) 3.844453317s ago: executing program 2 (id=2789): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newqdisc={0x54, 0x10, 0x1, 0x70bd25, 0x25dfdbfc, {0x6, 0x0, 0x8100, 0x0, {0x1, 0x10}, {0xfff1}, {0xe, 0x10}}, [@TCA_RATE={0x6, 0x5, {0xfc}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x400c800}, 0x20000000) r2 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f0000000300)=[@in={0x2, 0x4e23, @remote}, @in6={0xa, 0x4e24, 0xe4, @private0, 0x4}, @in={0x2, 0x4e20, @multicast1}, @in6={0xa, 0x5806, 0x9, @private0={0xfc, 0x0, '\x00', 0x1}}, @in={0x2, 0x4e23, @rand_addr=0x64010100}, @in6={0xa, 0x4e20, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x6}, @in={0x2, 0x4e23, @empty}], 0x94) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000c00)=ANY=[@ANYBLOB="180000003e000100fcff07000400000001000000040000"], 0x18}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) syz_emit_ethernet(0x42, &(0x7f0000000200)={@link_local={0x3}, @multicast, @void, {@arp={0x806, @ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x1, @remote, @remote, @empty, @private1={0xfc, 0x1, '\x00', 0x1}}}}}, 0x0) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r2, 0x84, 0x7, &(0x7f0000000140), &(0x7f00000001c0)=0x4) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x24}}, 0x0) recvmmsg$unix(r5, &(0x7f0000002a40)=[{{0x0, 0x0, &(0x7f0000000bc0)=[{0x0}, {&(0x7f0000000640)=""/249, 0xf9}, {&(0x7f0000004480)=""/4098, 0x1002}, {&(0x7f0000000740)=""/13, 0xd}, {0x0}], 0x5}}], 0x1, 0x2080, 0x0) write(r5, 0x0, 0x0) setsockopt$WPAN_SECURITY_LEVEL(0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000007540), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_DELETE(r6, &(0x7f0000007640)={0x0, 0x0, &(0x7f0000007600)={&(0x7f0000007580)={0x14, r7, 0x1, 0x70bd27, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x8080}, 0x40080) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001030000000000000000fc0100000000000000000000000000003ed3000000000000000000000000000000000000000000000200"], 0xb8}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r8, 0x8933, &(0x7f0000000040)={'wg2\x00'}) sendmsg$nl_xfrm(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="8801000014"], 0x188}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="340000001000030000"], 0x34}, 0x1, 0x2}, 0x0) 2.52012442s ago: executing program 2 (id=2798): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000100)=0xf, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000080)=[@in={0x2, 0x4e21, @private=0xa010102}], 0x10) readv(r0, &(0x7f0000000600)=[{&(0x7f0000000180)=""/135, 0x87}], 0x1) setsockopt(r0, 0x84, 0x7f, &(0x7f0000000040)="020000000980ffff", 0x8) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000100)={0x2, 0x4e22, @local}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=@ipv6_newrule={0x24, 0x18, 0x409, 0x0, 0x0, {0xa, 0x0, 0x14}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x1e, 0x1}]}, 0x24}}, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r3, &(0x7f0000000440)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x1, @remote}, 0xa}}, 0x26) sendmmsg$inet(r3, &(0x7f0000005f80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8040) 2.426741176s ago: executing program 1 (id=2799): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, r1, 0x0) socket$kcm(0x29, 0x7, 0x0) r2 = socket(0x14, 0x2, 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x6, 0x42050004, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000400)={'veth0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0xf1, &(0x7f0000000240)={&(0x7f0000000500)=@newqdisc={0x38, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xfffffd6e, 0x2, [@TCA_HHF_HH_FLOWS_LIMIT={0x4}]}}]}, 0x38}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x2c, r5, 0x6a98047402e98331, 0x0, 0x0, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x841}, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000080)={&(0x7f0000000540)={0xaf8, r5, 0x20, 0x70bd2a, 0x25dfdbff, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0x43c, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x4f, 0x5, "c487c917bd4fbb9265b265b3c45132def86506ac0fac16eb89dce1b22f3f96c5a2fd7163322f5149ee431a2646b4e19ad9fa22c2f498f933aba145b0d60261c7f5d594d9766ab9152c10e1"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x8}, @ETHTOOL_A_BITSET_MASK={0xa9, 0x5, "b1fed10838a1945de1c9871d8c7f9c4ecf99309cacf8e1c876901bb420f44344263448f5ca4b5e80b08150c3fc40ffa81ba9ef837ed888ea182ca7cb7dbf3a1a998436c500df0f150f5bd36e29d952dad5f6f566fcede2dda1ed1eac63c7a25b45f1e3270c75bb39ad3dec02f81b81c46cf961a3cac1f5c5ffd98c3c94d75d9cb61562f46f1e5b450500c288b2ba2446f864bc80b941de3a76c2c1c8ca1a514379dd0b15d5"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0xfe, 0x5, "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"}, @ETHTOOL_A_BITSET_BITS={0x30, 0x3, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'hhf\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'veth0\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_BITS={0xa4, 0x3, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffeff}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, '+:{[..*+\\}\x00'}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x10}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '#\x00'}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '(\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_MASK={0xfa, 0x5, "1b63ea8de59737ad81236919e0f8ee018917e2a1e573088be05526f2e29217167dfc20f3547acdbd11643af541b6d6a5b96b2cb7bd3f7f516c2b167f4f7016fe4634d3e2461392a8f13cd14a1043054f6af8f525a471dfa50d083951335ca88c4d9df516c8bc06798c17cdcfa1e2af2009ba5a88791bb4d5a4310f9b24290ead985a9cb5ef33f93aff6f686a6646e0b94c4ba38e9593abdd1caac3a8fed8e14374b730fcb609fb4aab21a153ff17825a265625e0e712ce6d9977dcc5b18c452c3ea0d70dfcedc21e4a83d8ff3cf108520de006da3fc57ac5ffa908be767583bfebd7c0909d0582f7b0232391933c5203a8880d91a8a0"}, @ETHTOOL_A_BITSET_BITS={0x60, 0x3, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}]}, {0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3b}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'veth0\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6160b59a}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'veth0\x00'}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5d9c}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x74, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x10001}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xe1f}, @ETHTOOL_A_BITSET_BITS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x10001}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'hhf\x00'}]}]}, @ETHTOOL_A_BITSET_VALUE={0x32, 0x4, "33857e7cb290884ea37eab01867a5b340c526e5e4e958569980576a04be99d38a6c76be825a399a1e8c54bdd296d"}]}, @ETHTOOL_A_DEBUG_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}]}, @ETHTOOL_A_DEBUG_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x2ec, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0xed, 0x5, "1250e2ab6b93528c2f9b31dd261ddd198e588aba2fe5b7019c06e1044c3032229ab4c3144fa9fa58b6b703618448953e4faee94ffa275b2c563cb8fb8aef3946882f4527299225aba77f357dfb3313a83f017317bf52d9b9bf29f3e5b34c4e996d71e8fe0a5707bb1cdc97f921c6dd2f2927eeaab38bc6e63a112b6c12c831aaef6eb2eb3afe0b9480602a31539fb5bce002d54fc12813905d30a992a6b30ffae89f8d6c9f016a578d0effe7c97e9728ccfb7759bb69bf3466432efd872472252859850a1bb5ff3a6fb9d2feafe1d8f5b2a22105f0eac57d08dd03a8540f4faef61ede7db5a0ea0351"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x8}, @ETHTOOL_A_BITSET_MASK={0x12, 0x5, "66d972a7f56ab1dc88b6cf9a2eed"}, @ETHTOOL_A_BITSET_MASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0xfb, 0x4, "a3f982062c92005171d6d54eaaf798a2eb8f8c2a53acb97a3c438dd5422607565a7c3f9e53064555e7fbacca3173ccc8a114f12827604bfcec7887688379988804a7a4a1ad1b91fbb8dbe65002dfcbada41f132eae9bf0c75bfb2dfc72fc7576ea89e4773fa5a5de8471de054932ea3306198a258abb0fbca48505285c2f6d9b9dca86ff826c95884785b88b90b2ff72b842d6bd4fd1bd34d1cdf79a0b4d9e9bd2173c811e4cfbde432b755b00b29a7205cf5e11996a7f2c77ad69e1941eca0f578d0a89986890c2be5d51a9b1675351e6af73744f395a037175091ef45a394c2ec4a5e89dc68e9cf3748d501bfbca479d5e09eeea2fa8"}, @ETHTOOL_A_BITSET_VALUE={0xdc, 0x4, "a93a57b8ef058205bcbff595c0b2be2dd927e7eac576af0c58ab526c80b9e65cc9087a32dd112caacc39458e71c3dd5a149b45dc3f424d5b25ba76d5ceed9e7b27b2c9f10c0b9927b361e3cd27c2448d6d8be86aaf1338f3394b2d2d9501032e1c6d24385e4ef9e6b038f6a860485d2e9496293affd88d71975b5ce2e6f5279a8882981d5614b280b6114c74a00ff461a2b89ce0c4f418252d1314bec481ec9e39f101e5cf0128960890e628b78044e8a5ba1083d0219489d969d7763c4d3c3930dcc161b083e9d77fa59058e3c031123f0e39c143c80994"}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x190, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xd}, @ETHTOOL_A_BITSET_MASK={0x8, 0x5, "1cbc2eee"}, @ETHTOOL_A_BITSET_MASK={0xab, 0x5, "52f5549d9bdb3e0ce844c8c5bff61973ad1e95ebc4fda0ac66fed194ddc20bbb813f2c78c8946f9497238bca09f0b661758a60895615d4c8360abf2658b093b117ad1ec50d94af953ac0eceac227a0cf5bc1fe2c1dcb399f7b04de81631ffafaf24962f50fdab50faa3c642fe1edb540caf38abc0403e3acfbc6bf58b3c589a2a6a02b753a35368b8436ebf1a5799d2c94b7ed42588fb0279a675123ad0e7e3c12ccb3fdc4fc08"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x9c1}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0x59, 0x4, "b3f3415d1ca49a674760392eb8ee495441966f2364e3dbebd50da4e73c49155d0c1d6180dbab0448434a7529b42f75a47a40a35edf0198fdf3c06c45146859a49e280acd8914ef161c82f44ed397c811363ebf82b6"}, @ETHTOOL_A_BITSET_BITS={0x64, 0x3, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'hhf\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'hhf\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'veth0\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4455}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '.#\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'hhf\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x160, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x17, 0x4, "919f1f7bc730e8c6f9514e2dc211452d2c4f4d"}, @ETHTOOL_A_BITSET_VALUE={0xa9, 0x4, "ef74af812587419501f9e2956c57bd5ada80e45760f1a842a0388e1ef46ff2e460fd7d784d2bb3e287d78756a472f5b9f8958b9ad43e7cdc1ff1bb8139ef9d56c4b634b1e925526dbf191cbc70f8616878893e72f4f69019799560c5d09a268ac9fd2c3c20dae987cdc4dd0de511aba55b5d2549d4154d6f6f9b44177d1807e03282bca3f15a5ef175d96bcf6ceaf1dfd00c02eedb850b9d8e44419da9ea18ede5315b3ad6"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x2}, @ETHTOOL_A_BITSET_BITS={0x90, 0x3, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xb96d}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'hhf\x00'}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '${]%$\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'veth0\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '//{]\x9b\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x100}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'hhf\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}]}]}]}]}, 0xaf8}, 0x1, 0x0, 0x0, 0x24000000}, 0x4000) 2.116443686s ago: executing program 4 (id=2803): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={0xffffffffffffffff, 0xe0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f00000004c0), &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x83, &(0x7f0000000540)=[{}], 0x8, 0x10, &(0x7f0000000580), &(0x7f00000005c0), 0x21, 0xb, 0x8, 0x8, &(0x7f00000004c0)}}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32, @ANYBLOB="0000000000000001b800"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r2}, &(0x7f0000000000), &(0x7f0000000080)=r1}, 0x20) r3 = socket$nl_route(0x10, 0x3, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x1e, 0x4, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000000000000000f271121100a0c3000000009500"/34], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000140)={'vcan0\x00', 0x0}) (async) r5 = socket$can_j1939(0x1d, 0x2, 0x7) (async) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, r6, 0x10, 0x70bd2b, 0x25dfdbfc}, 0x14}}, 0x4000015) r7 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) getsockopt$bt_BT_VOICE(r7, 0x112, 0xb, &(0x7f0000000280)=0x2, &(0x7f00000002c0)=0x2) bind$can_j1939(r5, &(0x7f0000000080)={0x1d, r4}, 0x18) sendmsg$can_j1939(r5, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f00000000c0)="92", 0x1a000}}, 0xee) (async, rerun: 32) r8 = socket$can_j1939(0x1d, 0x2, 0x7) (async, rerun: 32) ioctl$FAT_IOCTL_GET_VOLUME_ID(r2, 0x80047213, &(0x7f0000000800)) r9 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r9, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[{0x10, 0x110, 0xe}, {0x10, 0x110, 0xe}], 0x20}, 0x0) (async, rerun: 32) bind$can_j1939(r8, &(0x7f0000000000)={0x1d, r4, 0x3, {0x1, 0xff, 0x3}}, 0x18) (rerun: 32) r10 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000780), r10) (async) sendmsg$nl_route_sched(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=@newtfilter={0x24, 0x11, 0x10, 0x70bd25, 0x100000, {0x0, 0x0, 0x74, r4, {0xfff1, 0x8}, {0x5, 0xfff3}, {0xfff1, 0x6}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4040}, 0xc4) 2.108133425s ago: executing program 5 (id=2804): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000100)={'gre0\x00', &(0x7f0000000000)={'ip_vti0\x00', 0x0, 0x7800, 0x80, 0x5, 0x6, {{0x29, 0x4, 0x0, 0x4, 0xa4, 0x67, 0x0, 0xff, 0x4, 0x0, @multicast2, @rand_addr=0x64010100, {[@noop, @rr={0x7, 0x13, 0x46, [@multicast2, @private=0xa010102, @loopback, @loopback]}, @timestamp_addr={0x44, 0x24, 0x73, 0x1, 0x5, [{@broadcast, 0x9}, {@multicast1, 0x9}, {@remote, 0x7f}, {@broadcast, 0xb82}]}, @noop, @noop, @timestamp_addr={0x44, 0x54, 0xca, 0x1, 0x8, [{@empty, 0x7950}, {@multicast1, 0xfffffb13}, {@remote, 0x4d7c}, {@multicast1, 0x1}, {@multicast1}, {@multicast1, 0x2}, {@private=0xa010102, 0x6}, {@private=0xa010102, 0xac6}, {@dev={0xac, 0x14, 0x14, 0x1d}, 0x5}, {@multicast1, 0x2}]}]}}}}}) ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f00000001c0)) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000180)=0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="280000001000030400000000fedbdf2500007400", @ANYRES32=0x0, @ANYBLOB="000800000750050008001300", @ANYRES32=r1, @ANYBLOB="0463782a02a13080e6dd62fe77e1613362c81a0843e2fd12ac06a768fa757b554a93b3e3aed0103fc2a341d1593c45ec96dfd9b99cc6b1cf198d420cf9454c2349f84b5eb9a4a14948117e235e41a9d847da90fc41a0d96cb7ef2bceef3b2773b7935dde85c2a545104772926656bb6d8d6d204b9003254770"], 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r0, 0xffffffffffffffff}, &(0x7f0000000300), &(0x7f0000000340)}, 0x20) r3 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, 0x0, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) setsockopt$inet6_udp_int(r3, 0x11, 0xb, &(0x7f0000000140), 0x4) syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030486dd601b8b97004d88c19e9ace5ffb2e9fc603dd282100000002ff02000000000000000000000000000104004e200023b0"], 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000440)={r2, 0x58, &(0x7f00000003c0)}, 0x10) 1.913987314s ago: executing program 5 (id=2806): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x13, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000040000000000000000008510000002000068def31ae8b84be5a700850000007600000095000000000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) r0 = socket$netlink(0x10, 0x3, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async) r1 = socket(0x10, 0x80003, 0x0) (async) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) r7 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000002c0), 0x80080, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r7, 0x5201) (async) r8 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000001d80), 0x80800, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r8, 0x5201) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newtfilter={0x8c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r6, {0x0, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0xfffffffd, 0x400, 0x1, 0x6, 0x7}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x1, 0xf}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) r9 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r9, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r9, 0x29, 0x30, &(0x7f0000000980)=ANY=[@ANYBLOB="01000000000000000a00000000000000ff010000000000000000000000f4ff00000000000000000000000000000019000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000000000001"], 0x90) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) (async) r11 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r11, 0x0, 0x33, &(0x7f0000000000)=0x80000000, 0x4) r12 = socket$inet_mptcp(0x2, 0x1, 0x106) listen(r11, 0xe) setsockopt$inet_int(r12, 0x0, 0x33, &(0x7f0000000000)=0x80000000, 0x4) (async) bind$l2tp(r12, &(0x7f0000000080)={0x2, 0x0, @broadcast, 0x2}, 0x10) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x32, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0xfffffffe}}]}, 0x38}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=@newlink={0x34, 0x10, 0x3, 0x0, 0x0, {0x0, 0x0, 0x0, r13}, [@IFLA_AF_SPEC={0x14, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x2, 0x0, 0x1, {0x4}}, @AF_INET={0x8, 0x2, 0x0, 0x1, {0x4}}]}]}, 0x34}, 0x1, 0x2}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000003c0)={&(0x7f00000000c0)={0x2dc, 0x24, 0x8, 0x70bd26, 0x25dfdbfe, {0x18}, [@nested={0x192, 0xa4, 0x0, 0x1, [@typed={0x4, 0x104}, @generic="29e653b31808c0aa02c947611dafa61d323e225248c3d8b8fb4fb51fa5212ee574749e78dac0fe6877bc1ae1df9ae2073fd1e7d9e23583e26ca9ad5c45b511457576a2cafe30af93e8bfcae879f24df588eb492edbeb06f3b8b6c2d9e9d7b06274cf49ccc89e4c465bcd1794610640714dd30b28b028a5a0c2d8b311957259778f51c666b52301", @generic="5d286d8b18a2ac20be1c425c39752a7dda918d52e723fa7180163cb096f6276d34488bc5fb57ad6769e4c79024178e6ce53595f41fc235b532b53cc53d119d33402e384f7e116e754a81fe73af52debdd802ae86548e07fc2cfeee25267f10bf566fcab1a5dce34cf3c415be43adde22b99e24f7048e7d08d78b89294ce861d8737728ca5dd69c66716cf24b9ce77ba41c8db6fe8552fc6fc76f33d415ba08a119523748b126a4f63bc8336e7e62343af3706e8835e80c1114d359470161797f6406005e1f565f0214b214f1131be3ae8fa0eba9b50fe1d5f6484e912cfa3ffc6272c807e5df32bd649ddba9361412", @typed={0x14, 0x4f, 0x0, 0x0, @ipv6=@private2}]}, @generic="8b0385db621d004504eaaf29cbdd9ac90969169543ebd96cc591ab1e90821d4f8be2128f69003c2be4581e37db8e654027f55083822f6bfbcafaf501e7d97a59119b42e842007c67502e09cb58e36d84d413afc9d72f9dc80a4ed5da8c50e303281e83045229afb2e75d49e80966a16744c665ae0283b6f08876d56be834dac06b111a86bd7a2d34ed4e8d76790e9c5065032a7e2e8689ce765a1a596b5b5af8a182d55c2317e627306bdf5d793015f525c7f26fba974e5476b77b010c2263925e79bbff91a0840eb3c4e5493cb3b62cbbd49c15e42a10ad5091c6e74e04283f0c2649274af4", @typed={0x7, 0x123, 0x0, 0x0, @str='-*\x00'}, @generic="8a0a4edb98534b7613639ccca1d4cbd878ee163b966d9b2c06793752e03715140c75b4105dce4c05c5c34376f31feeda4ee6edd7296d5c81959d3124c9", @typed={0x8, 0xf8, 0x0, 0x0, @u32=0x5}]}, 0x2dc}, 0x1, 0x0, 0x0, 0x801}, 0x1) 1.877944399s ago: executing program 4 (id=2807): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001540)={&(0x7f0000000000)=ANY=[@ANYBLOB="24010000160001", @ANYRES64=r0], 0x124}}, 0x48050) 1.76637413s ago: executing program 6 (id=2808): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x4, 0x4}, 0x10) (async) getsockopt$bt_hci(r0, 0x84, 0x84, &(0x7f0000000040)=""/4146, &(0x7f0000000000)=0x1032) 1.672416324s ago: executing program 4 (id=2809): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='pids.current\x00', 0x0, 0x0) sendmsg$nl_generic(r1, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000180)={&(0x7f0000000700)={0x11b4, 0x3f, 0x800, 0x70bd2a, 0x25dfdbfd, {0x18}, [@nested={0xee, 0x17, 0x0, 0x1, [@generic="9491d4493ece616dc6476e1e497988011dd0bb95a4037c7c06c5ac80bbca36736152e7f3a56ed1ad5d5275c8cc5996462ccdaf7b4be93832b554ce535d9cdf14b003dc44b97dbaa0bc3b18ec5f423ddf49a9fa1629cfaa088f96d3a5a71c5ace4a2d9d79ede5626602065925eaf1a5169e77700f5981d54068cb21c2a5fc3224d195b25b3e589f3e88cd16b74e4eb8a343034fd235a5302e7278093f70fde25c3c390a84386f3ce8f61bab10be527379ff9ff6e8f258c3d4e96317e93e0be811e42212", @generic="4719c36cde8eb2136a012a82035656249304f4", @nested={0x4, 0x110}, @nested={0x4, 0x51}, @nested={0x4, 0x37}, @typed={0x8, 0xf8, 0x0, 0x0, @u32=0x4}]}, @generic="d419e74267c81f473f6c657157c0c45ddb637d038f0623bfc7bef0d7b5a13bb3afa6041d2da5a8f9b4a98dab060313e776207ff58560ae64ffb37adc4edb827d6e90642bf65bc02506d4262acdc8ae7369a9e4c13b89e63458465c4f2585d8f1c2061d39c69a6b89fb379729b6de0de79922027b2f86406f4b0bd2bad55590166f0688dcd21c6f0defb2c72110ca829ae67c3fd0fff734906c509fd01fa8c3a4e2d53dd8e58324a2e03cf029776fe5dc4be7e18920069e7eafdb0f9eabf7d4e69eb4580c33c24d0c1df26c2f06059f30df95c021dff282aaaaeb120f3a1d023a8e9112d68183a2724fd075e2043cc228470db134a40849dd073e29066f759b6ddbfe5a283c171086b51b7237a4fe783f64ceee2c2180db3f7f3f424a58ccca694a4d128bb13badbd3d8ede51ae98eb9de04b149c8613eb0238d1bc64276f7eac9300a495b1704835f838770e6e2224c14bd0fd2b726479099f8ed643fa885d5277e625eb87e70aa1ff8eb9bda20c797e5f93b37a8b3c6338e3917ec4f6665958d0d154b7cffdd99d0c2a1f82bdb19a4a9329a64518eb09cf4f2d9210ca0be0ab6a9185cf67d29ddcadc71ee9febc22b18a453c3fde3fa90f9486538fa0e87f3f5d2027495542c8437ae200e0335e53123f3ef2e1d94a7a9b5bd595b03255d8d4d50fc3339ae832f3a78c484e4945a13ba9ca7909f12c9461c4c2497581fb24b4800ae19a98bbf187e8f04f0d2882e6fe8123181e941ba5c3991f1d9db9a855ce64f8d2e2217ddee8ada7ea7e9460b41c414c626c825f9e926d31273a96dcf9afff4b2f006fb307715ccd90790aaf69f9588869d9ac7e58666718dc72b4b2edf9db331365f492acb87604ff2e03bee639b6f4e9b4f1aba6d160f0666f5fdec0282463b0e020333618e1703d85c70a4ecf7950c7da187d62d95186076e5e3f2f08daf8559da0d81110a476575fd8787f4a544e53c0584d07f5220917436ed7ade4b7a77e03da49c9a4462baf0a6daecf18615f9b57d095b1134e4d9cd536c475c219c81bc5fe49586a4e22f7a67ab4f0be5114e0c22bcf799e43465d68f60ce98310e7a25f8d15ce749eb5ebc1e567d76f9c619401a0363aa063f78ffb05fd6985b2da2f4be0e127c3b5064e23a359d83464241ab1d4a42788d4bfb7259c969b42ae5323e3f025d1ed62e3142b76580440bcb07fd408b9900eaf85d400eea61d44f8b2b0a6f0bd040e82da5080712cf252c7c96034e6cfd22bf8b94e58fbcd283087c87f9af09e68e45f3f4114084a7ba17339ff37f40b366ee99ed465f445b6e1cf1ee5784a60b35a11c895759083017ad9d823c80119e2b09e7bb951e836cbf7307a3adaa762ef0783dcc6b950e8550c776b220a3f3d81ac36c4f0a670c707a0eab6176b54aa33be3e6ed05987d00e08ecc00d33b10819a797e033c1b15b605a50d6e44795c8ab266662305c2419bd74c84d27819f362463faf1448ca964a63490c4abe943697ab58263d8c25a580fa8c3a4bc09955b7d82994bb681797b2eae442757b59a0797ce151d0d016a3dd1440d275d140f848695afac5996269a0d854b9e4a1790f94078ffff93fd82d5a49e6710d045c196809e2d9f780929c6fb564a9aab81b1c4b87fd2e337e3b8afea697de93502f98e30d6158679d8f101f97beca3396feafb7d933c7917de145d3f0e6a39f792f7a3c71b73ee3b49287e7cddaeec3e175aaed259b59ea9bd10ce7081ec1a2f2b854e3350f7e94c259811107a70284b433e7555631c7449b7b0be9780f1b19030e9b683854445dc2e99b6d9e801415dad0cc218be1eee400b3a31a5b5a9a3973c959cbece2f7da59e33d2fd751c475001cb68db6b8faafbb13a797c07942b1b7b7ff57cc8021e380e86cf1b2970de6aba53edc5cba490f131366a3a7fc324ea838413a6da157385040d54c1e22cb087ea2adef9254a9b6e3efdfe0aa9e7e09feb4eca9aa3708efb98faeb5a5678975cb026e95936a47cc21b6302fa5f7b654c8025d94d8d3f8a08d47a53f298bda0cd2528cb7b93ba2ab2f030f642b52b6c7841287b0a2d191179068431a237c11ae0e84ffcb149f6c36fac751bd044a60e2024e72cd9ca1204f6a48b39fff74a6bb41fcaee33938f39fe557013b284b46f5f404f75e43f01f1d93efc67a0679ed72ada919d11954ddabb6db19a31b2c025095fc6ef73b639d84028420628d530e37e3f9f85a341abf637f68789df75e03e52903f4c14122f7f506c79411967bdab977025b3b4bb37d278c0de95d807e97d111bc26c955cacd851a38c97c48a56a76c7f4c2f390c3d45cfa91dcbc88a30533126214f41f4168e2717a2a4329a6d92cae354c87f1d06485155f10a941dfb35a0f20ca46bf3815bfd3c9691b03f86d31ae687bca863aa4d8b72114c98ffc01ab4dcaaaf602b4013c0d98b3d7b8e547684083b69f4092dac0efcdb29cf0a47915fa17ed09adee96ecd987370721bde528fd2e9a0acacae4ae7af5476a37ce17f6eaeadfbc448190911ef56698f9e27eddf4a3bcd0821b919d0ed9c3c760aa09669217d58b984838923e3eb2d77df9eff3d640d98482955e39551f7b28814f05f0f038dd3d59b2bf71ccf0797044f9e2c82900695b031867936012b10c10a194edc8127a938f90013001176b77dda48472a1ededa2ab44bece38cd4314c6e2eede4011c0afe6989e2e4037b1b41e4d18055fc8efdbad09f124062901fabc7c6890e49d9d191823c3f56d8250c3304fb65eff3e0d1701083728c34a6d010736371569efa2d97bdd72f5299c6d22fc5b04705dfbba4d4abc7ae52bed795e7626ff362d2d3d50c6498284508e8367f48a1a442868ad8063e5bac89309a6ed0ed802bd2b5ac372dec36b61e6203460e611caea59779298e7e73cbf941e6991fba0b9f2f07c646fa2132331f551e3e733725817fb81e2ea2af48f33698febc721eedbf232491e6635b2d4b88218bf6aad280a47fd9f2c06664d42a4c8ce3b91bb8bffe6cd106ead4b2235fb83369cb7760e143286d1f383f86d3bb80b2aba76a3eff52a6f10d5291648c8c142692fd077d52ac2c8387c04ca95fc0d96b8d5a91212324119449a30fea50ef7fb9a3aa8769735ef933fd8d8cc855b4ff356dfd131d820d81b260752e1ce8d51619cb6b5b671bcff1a2ce3439d403a7d970658f5c5f18e26d272efd98eb39eec5f4620a3055f439d7b79b53f313ade97e37127c537a7d41964e2af6cb889a59e81fc24bad57c09a115971549ad839c12930ae9c46cf7cd18b5046da55ce9234a4857f612873318fa86b70ba5028ce402ffb7eee48bbc98522fd89b80d8b1d168ba90970d750707d920cc53e9311a614fbdc972e728c51ef532cd4b7097f6ee51aa3f6725843a69e49a89e0e0c8dcbf44d546fe0d618f74a65a6c5d8bdc20ff69f6ce02386083d3cb7b489567be64822dd0cd91a11f7dc61b0ba575c5b78a17c8fe00391aa2f4ea5b51729fad5966486f1aac965b4a0b84fdf20dd35868ddc55c576ecebd85c64ad2b5f8d8b2a7a09cc61ea4b18d9895400d10eaccc9dc3b7e7aa558ba6742edf6ddffc24e9ce37fd7a5056140ed1f6de0383b1882cd52f5304c1a44446814fdf6d3576209a064ffb278d8ef0d2be10c817390c86091272088b5af003dd61f61681b046f41a851c7ce4f27c1a67c4976794617b407d1fe85113491732fd37e95f0b0badd690f76837a7472617da5e577c42323e43f32ac9c8c477fe22a68f8e3af786cd5663367d4b6827003d162d64e3d6a60fee992f3ec0eb496c93e318fb99760383d4678805b6458f9e28524174c86061489bedb1a832d044680283ed929c5b3ba27bbdc130a2ee08739a1f4a692dba76bb02fdacf8f61cba5a7641c596e4e0bcfe591cbb59495c08711d5629d7ae0b9e39b21eefb6061df2f4e753952c35818458cef976fd83915337b01cc89753f002289f34d41e277d33f4019b784454d836803e15f52ae352392fa25763035c602095ec4fb7ef24114059fa4b3adae0b9ba0740c0de1519e1fcbf7f5f3c7ad884a9df438d06bf0b42d955864bbcb9d03f4bfcce3491cdd1d04b5b948578b52bf55a36a3a21891c120c70971c5311ff28d9ba492decb638af1f4259a69750b5fc547cda8ab32c8b1f0eda76266895ef38b4117ca3ec1fd7eefe7c85adb9ee180bc748d3ce2f3a51c41ef990fffa3b1f15a6d27862eff57bd2eacdb97740f3f81f0881059853d2f16bc92fee5f362f007766215c90e8a78ed4371293b4d59bce14a8682d716dfcb4fe8c8e894a45f671366c0288f2e0537d9e42acc0ff94a728de53cdbb52a711779137156c95a4c163c08082b2375ca38a41927fd59b53c309434f914b5c5a3d180a8c9261a7ab4c7b188c0ad2016c9c0bc85fc8b71d3d48fdab2c767d4de8396fdc3368765f38e1ce8b780cec911c503395b99ed6458429bbc54f0d429a463e4d193748fa215d55723606b7bd1aaf113b84faeb7dc30d5f9372b9a22ada550d3efe4e2f702fc5f8b8d100c3be72dc7afada46c080e27fdf1f254078294ea261211c80719c692c5fded8c694a1d344a2a4d636706736d571ff42399b11ab1f7c81c342dcf8127034a3608bede73900289983ebdd015125846c7ad8650aef94c4b6336af040c5348f333e4ce5bea5f1c9511df86f13ad61828c875ae5b1641d638081d4d2c50fc8ce7cec888b798765a130682860c7613c379d1b3c30b28cf6dc0555f749e3f1f4c201150335231711eec2e8819e67c435163d34fc273cb10ccd0deae7ae4de07000a105e0b96604adb072750fbe6a42e8be10deae020029d30ed816d509a89dc9c9673f3d42fea1ecf46370ac217e7051932b843f557ca889a1525f9a8a903160ab6b3f133dae38cba69b5eca461573f76381037ef50c9eeedd2f286faf353cbe0ce303e51d5b626b7f8e35c239c9f3e47f0f348c20ded36c60c4a146cd8cca48d4aad90c72c8fe61582ba115ac739f73363107dd5668aa658b37985e620369e714bd108c4508f70f6cb3b4bff0ae0ab35c9afa7720a3edd0538d7007896f1dd880a82359c358915999466b4f8e5a1603b0ed857d9e13cd6a671d098816c00d904caf033c98c19b3475b04c689afeb98dc2d6b97d30a68103c6ed5f771ae8bdcaa65c9937851a1d147a6b4087b89dd297a8def4c3ac0c1d161551a99a7c440f145c8e915150395cdd6d506a86aa950c60c30cb6c0889f48df050ef0031dd919bcdcbba79f0156d9448569b21841a7dd8a5e5687b5907b86622b72deb730a55e65b5ef09005b9628ef2272e8c745e4b95669d2221127b7a190a888c58ecc6b274966b515fc394b7df4a7f5bf9cc4808a29ec47547b275d1e0ba05679c095dc49882c1731db9bd9452550658e68ef447349064a0d88b593ab68308934364c59ca5a9225518f28f3e8808529b3e07eb0448fd7c2e1be6b7e781deb5c993847a0ca4aa711796364c713e5f3faf8e68967f581fcb787684778666feab91b3ca9602348c0f1239f3bd6984a64e4e5ce8ac84a40472db78ee8e9378094fc30234cb856a1148567704d2371ce567d7a1a61dd8046b167bad203ed3038d2b347a47aac99ce61d81febe39fb13791ed909e7ae20e3fea01a7cecbc253a642705160562217de2b6447412b951946d490829d21838e1c86848d1b10756927b73947f27fe3ae82cd990f750fc9a496042934f6fd3cbcba64eae46b78d1c52f46f7804a2cf5f135852b6a92196018b496ff10bfe619c3ad193f8636d82ab8124488c52dae2bf2702c1", @generic="417ff1ae6665b7df0403e4969c6a1825dfc5049553660817d3909193aa0cf547759dfc0398c7245bbd714008bbefecfdc0f3caf2d9c495ae9e35f0a4f1d43dc614e77d313af790bdaa4138fd3bb68443319b6ebc7d4ec6f2d98a0cae87a878ae78a42c0d7004bbe7d62bc178e9a02f5940a9de8db600580da6f6dcce5b4a453a3af11b5e91f2bd293242a5ca51b55508274a38814f154ab7738acb49c73492ce8e8d6de0192f809fe38c9c0ad202"]}, 0x11b4}, 0x1, 0x0, 0x0, 0x4000}, 0xc0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000580)={'wg1\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000005c0)=@ipv6_newaddrlabel={0x38, 0x48, 0x1, 0x70bd2c, 0x25dfdbfc, {0xa, 0x0, 0x38, 0x0, r3, 0x4}, [@IFAL_LABEL={0x8, 0x2, 0x6}, @IFAL_ADDRESS={0x14, 0x1, @remote}]}, 0x38}, 0x1, 0x0, 0x0, 0x80c4}, 0x4000) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a90000000060a0b0400000000000000000200000064000480600001800a000100696e6e65720000005000028008000240000000840800034000000007080004400000000f08000140000000152c0005800c0001007061796c6f6164001c00028008000340000000e1080004400000008b08000240000000050900010073797a30000000000900020073797a32"], 0xb8}}, 0x0) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000000280)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f00000018c0)={0x56c, 0xd, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x518, 0x3, 0x0, 0x1, [{0xf4, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPR={0x34, 0x7, 0x0, 0x1, @tunnel={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TUNNEL_MODE={0x8}, @NFTA_TUNNEL_KEY={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_TUNNEL_KEY={0x8}]}}}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x7}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x7a7f}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x6}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x8}, @NFTA_SET_ELEM_USERDATA={0x75, 0x6, 0x1, 0x0, "8e2f95fa82e2d7048936f37ad6328f80d67ccb7f091d3d4468ee8dff16a847d2cfbcc0a0f0c6f045bd532c66cfb4dc8ba91372abf086d0abfef63c178f3e24402321620697bda31b644b254d9de5614a06516cef711bc02988cdc5167594255f9f9ba84962589cfc63a9f114ab659bf605"}]}, {0x3dc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0x38, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x3ff}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x40}, @NFTA_SET_ELEM_EXPR={0x18, 0x7, 0x0, 0x1, @nat={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_NAT_REG_ADDR_MAX={0x8, 0x4, 0x1, 0x0, 0x11}]}}}, @NFTA_SET_ELEM_KEY={0x15c, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x48, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0xef, 0x1, "7d5c60593fe787c56b7a87d98750f72760d4294288b53195d2ea04cd91fe1aa9fb5f46a7348391227c7d976f9672e2e2d3f307237da3077c8499e3a43dd22abe8103689564640a6b60cedbafe0686ed5969dd78048c616e79dee9bc58e1308c25f023a76e6c6878590a347fa4b7d271b18372fc4a2e5d0df6a9ad98dc3a7f44b592695ec97defd1bf0fe2c1cb4d952bebd109dfd192e356d44ad43e9f040a0bc2d4679ebdca75dbdbb6ab455b558f250fb8e4087ccdec2df3f671bd9a0ca0f2c3dfb73c333279c46ed9d783b910c0c0fd2b62e94e1f480b19d8bd8dd2fd8440ff8140faab52c8f4f1c62ee"}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x8}, @NFTA_SET_ELEM_DATA={0x1fc, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4a, 0x1, "e90b41455ab2f49e71debe23553e035a2592694e797c7f9d9c36ff69ca260ea9b866bda3355de8dae9d3e8d1dc1b9aad0fc398a71ad75eb880bfb75e1374519553a1c12b2b49"}, @NFTA_DATA_VERDICT={0x54, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VALUE={0x8d, 0x1, "c208a7c40cd7a3c7d1191bd9c85457fc6103227eda0f643cf9660b8fe7ed886e98c3924bbf1ad03e3a7f6539450313011aa65e66f80e3863bc85eaa65854ac35706ac52fe5655dbcff33b850d5dbbb8a75d47d80fd7078c904fa5e615e3acf517037189d5dab14b96c7b3ebd62434bf7dc8dfd37aee287f9680737355c62286cf3ea7037abaca8faed"}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VALUE={0x95, 0x1, "3e2b38de3bd284f37c0438e64b8d5f8c2a42d3e1c6b13c92cb984da848183d7042b860c6b61b579fb351407b10409b9434957aa33ff0632c2b9e5e887044be5bf0528d1047994a0c072221efec3253088cf63dcd406dbc5868d30c3044c03225d384676bb3b39177dbceaa91f83d76d7431d413688eb0baae1fe780378b3311f443154932d2530e33b1ab6ae502e46915d"}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x5}]}, {0x44, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0x40, 0x7, 0x0, 0x1, @rt={{0x7}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_RT_KEY={0x8}, @NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0x13}, @NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x4}]}}}]}]}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}, 0x56c}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x41071, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x80002, 0x0) 1.59135792s ago: executing program 6 (id=2810): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x2a, &(0x7f00000002c0)={@link_local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @dev={0xac, 0x14, 0x14, 0x22}}, @address_request={0x11, 0x0, 0x0, 0x1}}}}}, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000040)={0x34, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x59}]}]}]}, 0x34}}, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000040)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r5, 0x3) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x36, &(0x7f00000002c0)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x65, 0x0, 0xf, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0xffff}}}}}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000140)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0xda18, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x80, 0x0, 0x0, 0x1000}}}}}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000180)={0xffffffffffffffff}) sendto$inet(r7, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r9, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r10, @ANYBLOB="08002600851600000a00180000000000000000001c005a8018000180140003"], 0x4c}}, 0x0) sendmsg$NL80211_CMD_RELOAD_REGDB(r7, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x14, r8, 0x100, 0x70bd27, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x4001) setsockopt$sock_int(r6, 0x1, 0x43, &(0x7f00000006c0)=0xc, 0x4) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@ipmr_delroute={0x3c, 0x19, 0x2, 0x70bd2a, 0x25dfd9fd, {0x80, 0x14, 0x20, 0x2, 0xfe, 0x1, 0xfe, 0x7, 0x2500}, [@RTA_SPORT={0x6, 0x1c, 0x4e23}, @RTA_UID={0x8, 0x19, r4}, @RTA_MARK={0x8, 0x10, 0x6}, @RTA_DST={0x8, 0x1, @dev={0xac, 0x14, 0x14, 0xc}}]}, 0x3c}, 0x1, 0x2000000000000000}, 0x44) 1.579926226s ago: executing program 5 (id=2811): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b80)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) r0 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, 0x0, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00'}, 0x94) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r2, 0x0, 0xb, &(0x7f00000000c0)=0x3, 0x4) syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x68, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}, "00186371ae9b1c03"}}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x4000, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r2, &(0x7f0000004200)=[{{0x0, 0x0, 0x0}, 0xfffffffa}, {{0x0, 0x0, 0x0}, 0x3}], 0x2, 0x2002, 0x0) r3 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@newqdisc={0x78, 0x24, 0xf0b, 0x400, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x6}, {0xffff, 0x8}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0xfffffffb, 0x6, 0xc8cb, 0x5, 0x401}, 0x6, 0x0, 0x0, 0x7, 0x3, 0xd, 0x18, 0x17, 0x0, 0x7, {0x9, 0x1, 0x11e, 0x6, 0x2, 0x435}}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000040)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xfffa, 0xffe0}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x86dd}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x81}, 0x24004000) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x60, 0x10, 0x401, 0xfffffffd, 0x2, {0x0, 0x0, 0x0, 0x0, 0xe59bca127d81b0fa, 0xc574450d1af2b4a4}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0x14, 0x5, 0x0, 0x1, [@IFLA_BRPORT_ISOLATED={0x5, 0x21, 0x1}, @IFLA_BRPORT_BCAST_FLOOD={0x5}]}}}, @IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x20044010}, 0x20000000) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r5) getsockopt$inet_mreqn(r3, 0x0, 0x20, &(0x7f0000000240)={@empty, @dev, 0x0}, &(0x7f0000000380)=0xc) sendmsg$ETHTOOL_MSG_RINGS_GET(r5, &(0x7f00000004c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000003c0)={&(0x7f00000006c0)={0x168, r7, 0x2, 0x70bd29, 0x25dfdbff, {}, [@HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x168}, 0x1, 0x0, 0x0, 0x4000}, 0xc004) 1.549703201s ago: executing program 2 (id=2812): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x0, @vifc_lcl_ifindex, @loopback}, 0x10) r2 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x40000) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) setsockopt$XDP_UMEM_FILL_RING(r4, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r5, 0x11b, 0x6, &(0x7f0000000200)=0x1, 0x4) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r5, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r5, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) r8 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r8, &(0x7f0000000040)={0xa, 0xe22, 0x0, @loopback}, 0x1c) r9 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r9, &(0x7f0000000000)=[{&(0x7f00000001c0)="580000001500add427323b472545b45602117fffffff81000e224e217f000001925aa80020007b00090080007f000001e809000000ff0000f03ac71036000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) ioctl$ifreq_SIOCGIFINDEX_wireguard(r6, 0x8933, &(0x7f0000000400)={'wg2\x00', 0x0}) bind$xdp(r5, &(0x7f0000000100)={0x2c, 0xa, r10}, 0x10) bind$xdp(r4, &(0x7f0000000180)={0x2c, 0x1, r7, 0x0, r5}, 0x10) sendmsg$nl_route_sched(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)=@deltfilter={0x4c, 0x2d, 0x400, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0x1e, 0xe}, {0xfff3, 0xffe0}, {0xf, 0x1ffc2}}, [@TCA_CHAIN={0x8, 0xb, 0x5}, @TCA_RATE={0x6, 0x5, {0x9, 0x53}}, @TCA_RATE={0x6, 0x5, {0xf, 0x16}}, @TCA_CHAIN={0x8, 0xb, 0x5}, @TCA_RATE={0x6, 0x5, {0x0, 0x2}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20048001}, 0x4044) r11 = socket$netlink(0x10, 0x3, 0x0) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r12, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x29}]}, @NFT_MSG_NEWSETELEM={0x68, 0x1e, 0xa, 0x105, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x3c, 0x3, 0x0, 0x1, [{0x38, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x34, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x2d, 0x1, "fefe807eb37bc2a7a6110a370abbe10adf32aa848edc90232d4665de2ae1583b710c20da833679ebe6"}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xec}}, 0x0) sendmmsg(r11, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.400561511s ago: executing program 4 (id=2813): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB='\x00'], 0x4e}}, 0x20008000) clock_gettime(0xfffffff2, 0x0) recvfrom(r0, 0x0, 0x0, 0x100, 0x0, 0x0) unshare(0x28020480) r1 = socket$caif_stream(0x25, 0x1, 0x1) setsockopt$CAIFSO_LINK_SELECT(r1, 0x116, 0x7f, 0x0, 0x22) 1.3912542s ago: executing program 2 (id=2814): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r1) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="1900000004000000040000000280000000000000", @ANYRES32=0x1, @ANYBLOB="0000009946ac2b00"/24, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r3, &(0x7f0000000380)="3418", &(0x7f0000000000)=""/10, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000300)={r3, 0x0, &(0x7f00000002c0)=""/26}, 0x20) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="2c000000d87d673c6343931b0b2718caec4a5d12d0d015e37dce001a742b7e32c13fa75fa51643c4", @ANYRES16=r2, @ANYRES64=r0], 0x2c}, 0x1, 0x0, 0x0, 0xc1}, 0x40) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r4, &(0x7f00000003c0)={&(0x7f0000000180), 0x10, &(0x7f0000000380)=[{&(0x7f0000000480)="c3e972bd85a6d84136d6dd55048d3593a74f338ce6772ab9a6f64041c2f6fbbecdc08ebcd3192b6a53662dae7c8e9c665e80a5d0925f728dcac30c29793992e588952653d414cb8ccdabc38767fee819ec5af0c5ee936880fe8549b4ed347779cab4ffd4e0b62c53a1c01db28f2b3f91c34211c9353bc1dece61511917c2245fd66cb8dffeacb4d46d627c97b498bf1ff6b313bfbc9765457c831771d5eec7997ec242e4505f01c1bb3e069b2e630f42a2be86598a61", 0x64}, {&(0x7f0000000300)='V', 0x1}, {&(0x7f0000001600)="3eed50d0125719a810f88e3f47186fe4dae74182dfd109a2587c4797410c9b8e39bd3d9aa144d5908647c30c8db69b5c17084c9b1bfbb8680737c4f88abcdbc7d294d72ab1b344270915df9ddf5635644c351c22b29d948ac4106bce7107570beed63077cfbc98ef71699eae65d37724d995b553e7a3ade619b522313ab382caf879feb48942878e605ee3ee2872794e3abe22a3f025068b628a5d92468092a5cc649bbbd978b5772e537939432a502122235ced312dafd108c9ffeb0b38cc16da9418ca01d485a6afb5827da4df6e1121ec307de14bb32b6a977608e4576a998182dd93d592ff43e55bfdbbce23ecd501e43b3e93ef8d9d01711dff54c301e299d3801a3cffe6c9883fbd0e47124dc02569f62d48b878fcb58ce99fcffcd2a5166eff3ad93cf1d137274993d86a3b3730d63ded759f6ca88fa449e5575b15321e5a58a1f888eed7466db4976ce35f6d2efb5ad05d99a66482dc607cb5acb24d326803bd337519cc98103f59c63b5962cd72e4497d1b00817d6e09de70270a09b493c2226617b1c9ef9d506be00d6e07f14633a966f04ecca90fb8d2b963ad6f3817935bd6534fa3da1c5dc468789cbf1192f3c0bff3777f1edd2ada5d35f88f12f29e952c44445ce623509d66811c80a9e0f13ad85aba37d86ff0da4dda601d9e8acb264233bc939fb056316612cff687d5c44157be05bcc88b333ff2a40041d98f1acfe6e2231a84e09bd7a54a0442cf87ce3ee8fd8da39da1862862ae40fc3cb3055c8b70e62f243850707341f51426bb3e71c7a4fffefab060db786000618b05eb087a424a2f30f6a232ff44b605f70ceec0a8f70e37907f6e0bbba21e9d5b7ecb6d287742b75c101ba79525918c3473eae38f3c177249dfa8816661c9921f0b0c858d53ab87c8407b97950c842111002edd1d1e80b801b495da28bcd5409bc971e55dab1857e188ac9728efc8f9a4543945f86ade13b445eacecbbf848a96410ac37c57e3e9e8bc8b8fadd559d225c7468639da2b5d1208558b51e94c14faa7947a7c60e81a96bb5d194cc7289adbc02ebb4b49be1f1efc429db2f9b79b5a22919dba0c35341042c5776942c52365367c4bfc95b42be383cca7107161ded7e851d0126da33d581f1e2b08d0c061e86d31e7a83f9b51c79b4034c7deda7697034e1404c6e8e459f76c2efe64350146c7437ef808e04ca14df5f6f500264fd977272bbf8fc096774e8eb61d0963430751ac1425a073f84346b0eba368cba7fa34adc420800d4f99927280eba199f9695cf88124fafc3a2b1226d2f2ab3ea27c69a127650cf5c725b54c02bd8729033cf699ce7f030f9a3442056244da3cfb61a8126dba11377624f39eb009242152fd7b8b88de7dd86057f29bfcb7b7df0e65e7e9ac9eeaa41afa62743698bff03d5b2d51fb6bca2d92294e8e177cfa3661b26f1c040e9bed983b7bc0aa154eb9c92e4ee25091318c53113a1c23ac62d2d71504cba99041f29a4f332133292cf20abec9222a2acca57cac48fa6c0668ee5eecb494741a64d33b011dcca74696d4614c5b45a5d20983b1708d365ed3ffa60f9161972a611c22642c3c259b41f943f6d7a8b60f284d325e38fe76f0645e069ff70cae38850ccf973193b6232c987df26239a574691f7f07fffa6deae1eb0324fe546573c36f2a2c31cd442517a9b036ae6a2a491e7343864693c107a5dc2585820863c146c1ba6caa4fea9b87d567716f4c8ca1a9d2848055cd750512d3b7415d090019dc8a04a1a1d28931093cd8f00e94c407ca1fa2a5ce903d9df26e008c07cd13afa783220e1bd5e6b60645f3dbb6ecb4156fedafa2dd25498c6a99d94f0b38125ea7741b75109dcac9f80635f79f5c8a0483bb9f05a3a5bf721c7541edb252449f8b13e63c370a6146332f03ca1f1b6fe0bed984f13744bb7fa0fe322e83ddf9ffb2083e94f33604a0a199220c450dad94bf154805e7f9e4350ca2d81adf2978c87dcc8a8a7d56297ec124bfef0d28f35777205e973272c87e01070f14f5b14daa3b5104d9ff6b296c4f16ed49eb42d35e7ba3bccb7a26c33a263df88aadd596e9d9de0abbd4d449df11081f2cd62e1d8962b9b9feb25a3b8e03537d61a61c11ac22b7211d12c84e60a6abcc219e558b2513d8c530b3c7a57cdc47de545aafbb2a13c0e6c75b1b92fa241c713c83a09c92b2b61d565120372a9143415583c9596f27a663d4967cd653b08cebd6cb96c1f0dc80d57267ac9a8281d7149bde880828ee27d69a6818db58320db29d1b044eaf6ab8a5108bc522de406990b5393b1f7e7bab71bf6cf8eed1cd59c7607d662e8b313f5c4fce0f59b1027371381011b63dd5b2b09739082c0d62ffad96e30153a395234937d377c32fe7af82aca3a19d0ebc4a5c5fb5ff190f14d5695c703b571fb4bf03756635cafc6cf6267eab836c347a9d07e8089fc105346934cf3364e5be370b3c42b94bc5ae3d17a817398566a2953251eb91697d67278145df9a4b917bcca1bf211780b22f4caacfcb7604c84f943d05f6fdf8edbd258d7d8dbf84f9d99e57472c5b1c2337d749a1f345e662e2536d23c7a63bbbbf00f8b5b0a2106a0342ab27b9a10b82e82668cd49e0cbb09d7be0217645f1dda3be59c8232fa290d34791cda52aa5b5cec6339ab96a2eb3f5328cc7c0e6717c2824344547a2ed518f6b2b4e4fe5b684596aa6a9d3988fc5d5ff4cb46cec99d951b8386b10949a163af974b7543df97b4882a4ed60e927a1deb67c5f814235bef65fea79a2c712815be7403c93a3707fb90d4604ec3a6a3b0928f253f6ab6bd56c958e026c8c58172c4ac2a3efe2ecd5cea70c8313f9ac2d638bc296ba99e2ca86d2fd06b5402cdcddc3f3c9845d5ae77f6f36963b91e8f6cdccd17abe8d40ed02463af4bb0e496344f350097f1cc13313fa1e172b63556ed2b8a8121c01a5fb343ff7767821626fc49b0d6bd522e1c9bf137d5a5bccb4bc8dbb64c83a82ef6c2894f3896c9f6bf0c3764011d53eeb6db9ea9dae22d3ebcca4942d5828c0bca0d9ea37701d5a06c066ac4fe318e11e9c0d6c658ac810fb5d7836cfffe4ccbb0934e5567d74695980a156d4bf1c18861c5a29ccd349999dc20562d00e1f6c1851ae563541086438d60b975c8ceb466414ff60efa0b2dee790fd0659ffa98b92414c13d5a6825368f56c4984412205041cd8e006c7127d4395ecdffb5addf80ef938ce54a367154c4fc286d5f969325c12b13655a9a956dd3b98281f537e837669fc55d8930676e807aa8cd046e0f4583d59f86cb99f3f7a7ddde1fb39111fdec7677d2fee4b8f4814a5def5ebcc67c653384ce80eaffd880405f7edf8fd3ea049f040595df4a75e2f892e7a85e0ba351fb8d263bfff7168bb85017b360fcd2ba89346682a6ea7ccc46afbdb5ab444e3f477238b2ab503bde914d3cf1789539cde9c0621152cd97bff9f235d88a1ef4ea4309db3a05d401af7fb82784b050ef529dab4f1f003eb29710a962f7538c521e617e2f0efac36182d09985e1d725cc38c3833a53742a02f76fb2854a9e45f0febacf3bda83f11183ef5b9fef02ebcdf56d4104b175bad937d8f61964f97d673577cdcbbb48d8eb62b063ee6563b9ff053719baff871bcd83822d865b2f7ef023076425ac5cd71b1f2309de0c6f14cc9c4d3e8fad945f756a7c8a084ea1bfdf5ac6e740043e7f7bdaca06774b084ae314c2636529d4fdcd965c7f8c07156572620b827d694efdc9d2bfc5aa9391220a83765f2c71fcd48d4acaed60afb53d1013fa3b15e948ec4159f7d130ef85b594018346e99034c18738285223ea53a6b1d5cf11a607de2e19608ba03ec970a915b773824261f3fc931dd6d3b934d89f07baf14776314c3eeb8cd0537ef5736f565fbd14e520d4ab2f77ed9597b76ff91f8d1f99ebd6e473efda7accb273975a06944d1037032129992b994ca791a09b4d83980a1e494b0f97098df5f6fb6bbb02722adb11dc319c565c2c363cbd19d9fb3efb4613b62d6584cd53f7bd80e3e89304f444ce9dd1835661e3bb4de02ccf568a2a5daaf0d56898d4286c3fb62e22af62d7ac318685834467f337561dde2e0c1e2827cdffcf42c17728ee64b3ff4ccc0227590badd0bd7e448b8cca0892d6a5e0130d2ac665f47c6b28daa101c1b319869bdd39fa924d6d9ba7d72feda5f21ac78641c7d4801d41c7879721b3be4dab40d9c4a78552440101f373489cc5240b0144a9ce32691a784b6dfe971a21bb5980ff67da2d1bb90b223c9e192a39c1aeadd1f5c790811079c0b51a97105c99b6f95d71bb3ea47c33d9dcb0a53c929c44499e184a3cd722c908d3b0d157e28ffdeb2ed7192e780d96a7a2f0fd5a87bdc973e049da0caf931f26f5a21813e2e602ceb2259997e0205ce48fd9424bd6d4d75dd4301f429ee30745cd839a40dbeab4c3db2f0f10bbaea071ca41d1392385681730a3678a5f60f604dbe19cb9d7dd234337e327451b8cc65394af399432ef7fc3765d055874ebdca14e5999292d6f72f31e92bacf25db5ef8f5212952c1910de06ddbe1687a0e1837922f2228289916ed3aeb7b9cc24da3ae47139e371930afa6d3573df6732c26c0c7ae06d9cedfa77160711bcb06e6553338deae4c5731cf53cc154113096d02f3036d7d9edfcdc331e4bb860c5208489212e904eab70e7f860b0379895cbdecbf7a0b7a25e5b853c7dbe08a4e296a30afec8cf5a9f6ea4aef32a508655d539a770b21e660c9ee1d7688c56abeb7cf1afccc8d59780cf26312589e0c8e1bc00ad7b1325cd9a5dd69246e0b33407c381ea09265154aec297e4ccdf9785a1042a83e77c13d4ce4360782f2428f9916b5cd123b089eb683d30c1e895b9944aa905a1a5b52301d8cc5e4741834ead6ebdb5dc05c9c49c5e883e99d40b9838037beaf876534d747856103e59caf6266fbbe760b6ef83d004634b74f14f8eb4aef93c4cc9cbbd78d83d532c70feef51ea3f170b25d81a6a9b074bfca7e9b3771bf83517e0dd9d0600f70b86b20f61fe36076f8bada334b2390fa954973bc901619a3cfd039349cb328625f495ab288dbdd6dbfd022c2a83f59e0b998619a12e35891b5ae9e83a71765507b4a571cd2241e5885c705244c1022688bef7c5065fbcf219fc01753adb611b3fbc09403dcb10a4f99d788667eff75fa27074ca8481a633530e26163ccf7dada049d23e717e067b6fa5b2f652bc50abda9e7ccdc5f2f3c35ecc2c4431c819c9691be4422e379750774e9f39dae06f26423c8a4278789c9f3111b43f6dd25b0ad47c4cc5fda3f3ed82079c9366e0adced883488f429c1d7e1b351fd0bb204dd7977ef224c4df6d7a5f7697bc6500a7d03a8a914154779fa7092bf1be6bad4092367ce5d295a5d5d0e7c469f372ca2011d612637025e89f178ae9ada0c5b73bcb7d7c034ff595263cd4216e3c76ba5f3d81932a088a90bf8043e877e299c670ef1622a098d5519d9adc4ee7d4cd00e5934a4375fa83fdb81214b892482b31bdde59a70aaf25cb7f417c3a2a91c4e54b48149f6c41d9d396ee6ff13e3028c64a7c9b1f2e7c6e67184a3d52d6f570db3d225c947423c4c6533f22df57d15c5e5a3183422bd378b06fe4732a9401dcb19840fb8fa5c50a0ff497fef362c507753e46b8881d3e767f3b1d893a3805941c94f2efa05ce34b9ea81d716984af6834230d4707a87089d40779503ee6a9bb245d7d997f14acb80e89731c042bbbbe3dcd05177b0ee0eec23455830ef5b65aca357f2b0b887e0b9821c0", 0x1000}, {&(0x7f0000000340)="b768eb20304f2fdc5a9694a4867840d93170ca1a86406f", 0xfffffec0}], 0x4, 0x0, 0x0, 0x8010}, 0x0) setsockopt$sock_attach_bpf(r5, 0x1, 0x21, &(0x7f0000000040), 0x4) sendmmsg(r5, &(0x7f000000d500)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f000000be00)=[{&(0x7f000000ac40)="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", 0x5dd}], 0x1}}], 0x6, 0x20000004) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f00000003c0)=[@in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}], 0x10) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f00000008c0)=0x576, 0x4) r6 = socket$netlink(0x10, 0x3, 0x0) writev(r6, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r6, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) 1.380398468s ago: executing program 6 (id=2815): r0 = socket$netlink(0x10, 0x3, 0x0) (async, rerun: 32) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0xc2300, 0x0) (rerun: 32) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) (async) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000140)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x0, '\x00', r3, 0xffffffffffffffff, 0x3, 0x3, 0x2}, 0x50) (async) pipe(&(0x7f00000055c0)={0xffffffffffffffff}) shutdown(r5, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x10, 0x1b, &(0x7f0000000580)=@framed={{0x6d, 0xa, 0xa, 0x0, 0x0, 0x79, 0x10, 0x8}, [@cb_func={0x18, 0x8}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, @jmp={0x5, 0x1, 0x2, 0x5, 0x9, 0x0, 0xfffffffffffffffc}, @cb_func={0x18, 0xa, 0x4, 0x0, 0xfffffffc}, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @map_val={0x18, 0x6, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0xa}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f0000000480)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x61}, 0x94) (async) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0x6}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newtfilter={0xfc, 0x2c, 0xd27, 0x70bd25, 0x4, {0x0, 0x0, 0x0, r3, {0x4, 0x2}, {}, {0x1, 0x6}}, [@filter_kind_options=@f_flower={{0xb}, {0xcc, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0xbc, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x1c, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_DIR={0x5, 0x3, 0x6}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x91}]}, @TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x3c, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0xb}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_DIR={0x5, 0x3, 0x40}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x100}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_DIR={0x5, 0x3, 0x41}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_DIR={0x5, 0x3, 0xc8}]}, @TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x3c, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_DIR={0x5, 0x3, 0x93}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_HWID={0x5}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_DIR={0x5, 0x3, 0x1a}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_DIR={0x5, 0x3, 0xd5}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0xa49d}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_DIR={0x5, 0x3, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_HWID={0x5, 0x4, 0x5}]}, @TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x24, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0xffff}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_DIR={0x5, 0x3, 0xc3}]}]}, @TCA_FLOWER_KEY_ETH_DST_MASK={0xa, 0x5, [0x0, 0xff, 0x0, 0x0, 0x0, 0xff]}]}}]}, 0xfc}}, 0x20040054) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0x68, 0x30, 0x9, 0x0, 0x0, {}, [{0x54, 0x1, [@m_bpf={0x50, 0x1, 0x0, 0x0, {{0x8}, {0x28, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x107}, @TCA_ACT_BPF_OPS={0x4}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 860.536079ms ago: executing program 1 (id=2816): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x1bc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}, [@tmpl={0x104, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@dev}, {{@in6=@remote, 0x0, 0x33}, 0x0, @in=@multicast1}, {{@in=@multicast1, 0x0, 0x6c}, 0x0, @in=@local}, {{@in6=@mcast1, 0x0, 0x32}, 0x0, @in6=@private1}]}]}, 0x1bc}}, 0x0) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000240)={&(0x7f0000000080)={0x144, r1, 0x10, 0x70bd26, 0x25dfdbfe, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0xd4}, {0x6, 0x16, 0x8}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x5}, {0x8, 0xb, 0x6}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x6}, {0x6, 0x16, 0xb91f}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x1c0}, {0x8, 0xb, 0x3}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x7}, {0x6, 0x16, 0x2}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x10}, {0x8, 0xb, 0xb}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x9}, {0x6, 0x16, 0xd5}, {0x5}, {0x6, 0x11, 0x7}, {0x8, 0xb, 0x807}}]}, 0x144}}, 0x56) (async) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000240)={&(0x7f0000000080)={0x144, r1, 0x10, 0x70bd26, 0x25dfdbfe, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0xd4}, {0x6, 0x16, 0x8}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x5}, {0x8, 0xb, 0x6}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x6}, {0x6, 0x16, 0xb91f}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x1c0}, {0x8, 0xb, 0x3}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x7}, {0x6, 0x16, 0x2}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x10}, {0x8, 0xb, 0xb}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x9}, {0x6, 0x16, 0xd5}, {0x5}, {0x6, 0x11, 0x7}, {0x8, 0xb, 0x807}}]}, 0x144}}, 0x56) 764.215962ms ago: executing program 1 (id=2817): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000040)=ANY=[@ANYBLOB="b406000000000000711124000000000085100000f5ff020085030000000000000000000080ca2e186fb0f42ce4f506130d10000000009500000000f0ff00"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0xe}, 0x70) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1000000004000000080000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="ebc5e8bd3b36a53f00000400cbd168a3c67eab6fe37097f4285eded7e3778c601fc9eb6e558a8cf42113380c67e64cea4743297a1273ab8414bfd11e727449f80334953b6807ccf8ad9f61c3c839a9daaa372f"], 0x50) bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x6, 0xd, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000ae020600000000000000000008000000b7040000020004008500000033000000950ea868cb611d132dc4535b6030a9be0cb38d6b909f3356bd0dcd52f72e94f12dd3dc49cb54a5e21f4a76000000000000000000000000000000e3f0df6e33c1b243495887ee2795c840eccffd691fa5e863a73bb7d8c7f924e49ae5c16f8bdfcd72f8eb708bf65a74eed510c8c01b5e0170acdead84af56d51160b7009321b5e5f60fe09ddb041bb787dad9cd3b009db66329cfa0e9c8ea198d8c73c6331959aa"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xe, 0x0, &(0x7f0000000280)="432275e2065074ef2415f73227b2", 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={r0, 0xe8, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) 702.248387ms ago: executing program 1 (id=2818): r0 = socket$igmp(0x2, 0x3, 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0900000001000000e27f00000100000012"], 0x50) (async) r2 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x4020940d, &(0x7f0000000000)={'vcan0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x200000}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) (async) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000200)={0x0, 0x4, 0x0, 0x0, @vifc_lcl_addr=@dev={0xac, 0x14, 0x14, 0x3e}, @loopback}, 0x10) (async) socket$inet_icmp_raw(0x2, 0x3, 0x1) 500.445341ms ago: executing program 5 (id=2819): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000001740)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x0, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x1c, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000002ff0100000000000000000095"], &(0x7f0000000180)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r3, r2}, 0x94) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x6, 0x4, &(0x7f0000000180)=@framed={{}, [@ldst={0x7830c3240c0dc35e, 0x0, 0x0, 0x0, 0x0, 0x18}]}, &(0x7f0000000000)='GPL\x00', 0x3}, 0x90) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) r9 = epoll_create(0x3) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r4, &(0x7f0000000440)={0x90002001}) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000016c0)=@newqdisc={0x154, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0x3}, {0xffff, 0xffff}, {0xfff3, 0xd}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x124, 0x2, [@TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x8000, 0x4, 0x7, 0x1d, 0x17, 0x9}}]}}]}, 0x154}, 0x1, 0x0, 0x0, 0x10}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000280)={'batadv_slave_0\x00', 0x0}) sendmsg$ETHTOOL_MSG_COALESCE_GET(r5, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={&(0x7f00000005c0)={0xa0, 0x0, 0x100, 0x70bd2d, 0x80000001, {}, [@HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg\x00'}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}]}]}, 0xa0}}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xd, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x8c}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @sock_ops, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 498.354927ms ago: executing program 6 (id=2820): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) r1 = epoll_create(0x80) ioctl$VFAT_IOCTL_READDIR_BOTH(r1, 0x82307201, &(0x7f0000000180)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) r2 = socket$caif_seqpacket(0x25, 0x5, 0x5) r3 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)={0x44, r5, 0xe096044a3fc9e6f1, 0x70bd25, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x4}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0xfd}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x200000d0}, 0x8050) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000100)={0x40000005}) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x248, 0x14, 0x601, 0x0, 0x0, {0x2b, 0xfa}, [@INET_DIAG_REQ_BYTECODE={0x8c, 0x1, "a70bb27b94edad6cf3143799fbc6976ac5b94a8481a03fa6802239203707fdf301addf300af0ded29a014ee3d4af7d837d1caeb0ef44feaf8d2fd26b563e450c5dd9f8348a877321b27e71b8f6c1e34cd0f5f73312ed8057e00e005473274c5460ca1913a13933c87e1968c9fe2ebd68daf6745937263abf71c72b5810dda4f72cddd86cb55920c7"}, @INET_DIAG_REQ_BYTECODE={0xfe, 0x1, "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"}, @INET_DIAG_REQ_BYTECODE={0xa6, 0x1, "52695f99c5734ac523d780aae568dc40f7bb02d5f3cad6aae00e4e054be9dd9785c6e91e27fa3c336971bdba7afa30bcf7a26eeca17d62daeeaf2d391f98ebbabab8c3ab2fa96c24272732096bcbf075c65af45f0991fbf869b9f0d7f31961f8fb273807464425eda8768a3dd4c74e5516ec80abc3c5b018794412917c3d1c13d5858ab71cf5d0052e0bb899a49f3d6e3883f2d87d1a5b247c8d810f7aeef3ffa9af"}]}, 0x248}}, 0x0) 457.513131ms ago: executing program 1 (id=2821): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000001a40)=[{&(0x7f0000000000)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0}], 0x1, 0x0) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f00000000c0)={r2, 0x7f}, 0x8) r3 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r3, &(0x7f00000001c0), 0x10) bind$can_raw(r3, &(0x7f0000000000), 0x10) getsockopt$inet_sctp_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, &(0x7f0000000000)={0x2, [0x4, 0x7]}, &(0x7f0000000040)=0x8) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) unshare(0x6020480) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000400)={@ifindex, r5, 0x37}, 0x20) ioctl$sock_SIOCETHTOOL(r4, 0x89f0, &(0x7f0000000180)={'bridge0\x00', &(0x7f0000000080)=@ethtool_ringparam={0x7, 0x0, 0x20040001, 0xfffffffe, 0xfffffffe, 0x0, 0x0, 0x400, 0x3a}}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r6, 0x0, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r7, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_TCP_CONGESTION(r7, 0x6, 0xd, &(0x7f0000000500)='dctcp\x00', 0x6) setsockopt$inet_tcp_int(r7, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r6, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x2c, 0x3, 0x8, 0x401, 0x0, 0x0, {0x7, 0x0, 0x2}, [@CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xe37}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x4004) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r7, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r7, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x3b}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r7, 0x6, 0x16, &(0x7f0000000340)=[@sack_perm, @window={0x3, 0x6, 0x7}, @mss={0x2, 0x7}, @window={0x3, 0x0, 0x4}, @window={0x3, 0x8, 0x6}, @timestamp, @window={0x3, 0xfffe}, @sack_perm], 0x200000000000005e) sendmmsg$inet(r7, &(0x7f0000000dc0)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000200)="94badbcf667789629fe4ee49e3c07642d93a99f7aa5dd54602e22c03835e30059844c9ad53f850443d0031fc4c16b2e3148fb641d174a08ebf4d46595a1be34f1e2cdb0e246cd6232b5ba0db956554dc631a87a8c229f3470d848d6fc56232118fa9df18d8511731c37833848967441cc029171613a6096b3568a391571e62b5a728", 0x82}], 0x1}}], 0x1, 0x20040010) setsockopt$inet_tcp_TCP_REPAIR(r7, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r7, &(0x7f00000004c0)='<', 0x381, 0x805, 0x0, 0x0) ioctl$PPPIOCGUNIT(r6, 0x80047456, &(0x7f00000000c0)) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f0000000200)={0x1, [0x0]}, &(0x7f0000000240)=0x8) syz_emit_ethernet(0xe2, &(0x7f0000000640)={@broadcast, @random="6487a2bed3d6", @val={@void, {0x8100, 0x0, 0x0, 0x2}}, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0xd0, 0x300, 0x0, 0x0, 0x6c, 0x0, @private=0x200, @remote}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x1, [0x2]}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd, [], "7877c03ce4349215b80faf4f8c415a27c34f0e396f8c2c03e78529fb35c738ef36d9087203e8357ca2951811f41c774aee351973e70b78ac5b6a62f8ec46f74c4d85673af38ad16ebcdc342e69293a964d9a72684f37c5b699249b3afacfdf3b8941bdb2e17398252c84e3a8a1c816477c72a45e4024"}, {0x8, 0x88be, 0x0, {{}, 0x1, {0x2}}}, {0x8, 0x22eb, 0x2000000, {{0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x6}}}, {0x8, 0x6558, 0x4}}}}}}, 0x0) 451.66707ms ago: executing program 2 (id=2822): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) setsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, 0x0, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x786c4}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0x7}, @IFLA_BOND_MODE={0x5, 0x1, 0x4}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x4000) 376.559245ms ago: executing program 4 (id=2823): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r1 = socket(0x10, 0x803, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0xc00}}}]}, 0x38}}, 0x0) (async) r4 = socket(0x400000000010, 0x3, 0x0) (async) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x8c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r6, {0x0, 0x3}, {}, {0x7}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x9, 0x9, 0x1, 0x80200001}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}, @TCA_CHAIN={0x8, 0xb, 0x7}]}, 0x8c}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) (async) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) setsockopt$bt_BT_SECURITY(r8, 0x112, 0x4, 0x0, 0x0) (async) r9 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r9, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r9, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r9, 0x89f2, 0x0) (async) getpid() (async) sendmmsg(r9, &(0x7f0000007fc0), 0x800001d, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000340)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0xfff3}, {}, {0xfff3}}}, 0x24}}, 0x0) 320.709497ms ago: executing program 6 (id=2824): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x13, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000001900ff00000000001851000020"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x10001}, 0x94) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xe, 0x0, 0x0, 0x2, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xa30}, 0x94) ioctl$sock_SIOCBRADDBR(r1, 0x89a0, &(0x7f00000002c0)='ip6_vti0\x00') r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) bpf$TOKEN_CREATE(0x24, &(0x7f0000000340)={0x0, r2}, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000040)=@ethtool_wolinfo={0x5, 0x0, 0x2, "0a08cf30c194"}}) r7 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x8c, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r8, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0xe, 0xfd, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1], 0x0, [0x8, 0x4, 0x2, 0x0, 0x8, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8]}}]}}]}, 0x8c}}, 0x0) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r5, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000540)={0x80, r10, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x35}, @val={0x8, 0x3, r11}, @val={0xc}}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "829ecbbdc9b5bb2a787bfb26587a45dc653f3dfd4ad81f6b"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}]]}, 0x80}}, 0x80) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r12 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r12, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r12, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$nl_route(r9, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)=@getneightbl={0x14, 0x42, 0x300, 0x70bd2b, 0x25dfdbff, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000004}, 0x4000044) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r13, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r14, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 309.721147ms ago: executing program 2 (id=2825): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000400)={0x2, 0x9, 0x2, 0x6, 0x2}, 0x10}, 0x1, 0x7}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0xcc, 0x0, 0x100, 0x70bd2c, 0x25dfdbfc, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0xd9}, {0x6, 0x16, 0x232}, {0x5, 0x12, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x4}, {0x6, 0x16, 0x79}, {0x5}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x89f}, {0x6, 0x16, 0x9}, {0x5, 0x12, 0x1}}]}, 0xcc}, 0x1, 0x0, 0x0, 0x54}, 0x4000800) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x8, 0x42, 0x40, 0x42}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000080), 0x1006, r2, 0x0, 0xd88d02a0}, 0x38) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000240)={r2, &(0x7f0000000100), 0x0}, 0x20) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000003980)={{0x14}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @payload={{0xc}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x1}]}], {0x14}}, 0x68}, 0x1, 0x0, 0x0, 0x20044000}, 0x0) socket$key(0xf, 0x3, 0x2) (async) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000400)={0x2, 0x9, 0x2, 0x6, 0x2}, 0x10}, 0x1, 0x7}, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0xcc, 0x0, 0x100, 0x70bd2c, 0x25dfdbfc, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0xd9}, {0x6, 0x16, 0x232}, {0x5, 0x12, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x4}, {0x6, 0x16, 0x79}, {0x5}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x89f}, {0x6, 0x16, 0x9}, {0x5, 0x12, 0x1}}]}, 0xcc}, 0x1, 0x0, 0x0, 0x54}, 0x4000800) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x8, 0x42, 0x40, 0x42}, 0x50) (async) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000080), 0x1006, r2, 0x0, 0xd88d02a0}, 0x38) (async) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000240)={r2, &(0x7f0000000100), 0x0}, 0x20) (async) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000003980)={{0x14}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @payload={{0xc}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x1}]}], {0x14}}, 0x68}, 0x1, 0x0, 0x0, 0x20044000}, 0x0) (async) 208.402175ms ago: executing program 5 (id=2826): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000600)=ANY=[@ANYBLOB="380100001a0001000000000000000000fc010000000000000000000000000000ac1e000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8800000000000000000000000076e73c8e00002b000000fc02000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000348d63310000000000000000040000000200000000000000000000ee2b6c00480003006465666c617465000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000009ea8f53ca3f34553b29432a006a9bc1a11c7896320a901a79425703d5b0fd940bc5a17fc0013291a77f226298303ebfc74aa95e3b1cd7cb3dffa3e4e49ec7cf80f9c33fb93d326729415871a7680d178df4ff38a9680492098b1b25956348ebf597289e3abfeefcf1a9d8f9fd0fb361fd7287a79cc422f2b4d12f642208e8e1d506dc34949287bc3c945688e"], 0x138}}, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$can_j1939(0x1d, 0x2, 0x7) (async) r4 = socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000000c0)={'vxcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000000340)={0x1d, r5, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x74, r5, {0xfffd, 0xfff3}, {0x1, 0x1}, {0xfff2, 0x10}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x850) setsockopt$inet6_group_source_req(r1, 0x29, 0x38, 0x0, 0x0) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_VOICE(r6, 0x112, 0xb, &(0x7f0000000000)=0x3, 0x2) connect$bt_sco(r6, &(0x7f0000000040)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) (async) r7 = socket(0x10, 0x3, 0x0) getsockopt$inet6_opts(r4, 0x29, 0x0, &(0x7f0000000380)=""/136, &(0x7f0000000040)=0x88) (async, rerun: 32) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r7, 0x89f0, &(0x7f00000005c0)={'ip_vti0\x00', &(0x7f0000000440)={'gretap0\x00', 0x0, 0x7, 0x7800, 0x81, 0x7, {{0x5, 0x4, 0x1, 0x8, 0x14, 0x65, 0x0, 0x7, 0x4, 0x0, @rand_addr=0x64010102, @rand_addr=0x64010101}}}}) (async, rerun: 32) r8 = socket(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000001800090400000000000000000a000000000000030000000008001e0001"], 0x24}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50005}, 0x0) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_int(r10, 0x29, 0x1a, &(0x7f0000000000)=0x7ff, 0x4) (async) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r10, 0x84, 0x6e, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @private2}, @in6={0xa, 0x4e23, 0x0, @ipv4}], 0x38) (async, rerun: 32) r11 = socket(0x10, 0x803, 0x0) (rerun: 32) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b00010065727370616e000014"], 0x44}}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a000000010003b0e2a1a86eb2636037f00000000", @ANYRES32=r12, @ANYBLOB="0200000000008000800012000800010076746936740002"], 0xa0}}, 0x0) (async, rerun: 64) r13 = socket(0x10, 0x3, 0x0) (rerun: 64) sendmmsg(r13, &(0x7f0000000000), 0x400000000000235, 0x0) 155.78163ms ago: executing program 1 (id=2827): r0 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) preadv(r0, &(0x7f0000000700)=[{&(0x7f0000000340)=""/139, 0x8b}, {&(0x7f0000000400)=""/251, 0xfb}, {&(0x7f0000000500)=""/204, 0xcc}, {&(0x7f0000000600)=""/200, 0xc8}], 0x4, 0x1, 0x200) syz_emit_ethernet(0x31d, &(0x7f0000000000)={@random="856b934629fa", @local, @void, {@mpls_uc={0x8847, {[{0xe}, {0x2, 0x0, 0x1}, {0x7, 0x0, 0x1}, {0x2}, {0xb1806}, {0xfffff}, {0x7f}, {0x7fff}], @ipv4=@gre={{0x3d, 0x4, 0x1, 0x10, 0x2ef, 0x66, 0x0, 0x5, 0x2f, 0x0, @empty, @local, {[@rr={0x7, 0x13, 0x14, [@private=0xa010101, @initdev={0xac, 0x1e, 0x1, 0x0}, @local, @multicast2]}, @timestamp={0x44, 0x20, 0x46, 0x0, 0x0, [0xdf, 0x5, 0xb4, 0xf90, 0x8001, 0x9, 0x0]}, @timestamp_prespec={0x44, 0xc, 0xb4, 0x3, 0x8, [{@private=0xa010102, 0x9}]}, @cipso={0x86, 0x16, 0x0, [{0x6, 0x8, "6df788325ffa"}, {0x7, 0x6, "5ce9bd3c"}, {0x1, 0x2}]}, @cipso={0x86, 0x54, 0x1, [{0x1, 0x8, 'Gb{t57'}, {0x7, 0x6, "8505139f"}, {0x7, 0xd, "ac22f5ea168204d59550ce"}, {0x6, 0xd, "9899dd6f322ef946893ad8"}, {0x2, 0x12, "6a8c842190d42c104b9b59deec18b25d"}, {0x1, 0x2}, {0x2, 0x5, "ba991d"}, {0x2, 0xd, "e499adbca4f3bc4f0df534"}]}, @ssrr={0x89, 0xf, 0xdc, [@empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010100]}, @ssrr={0x89, 0x27, 0xd2, [@private=0xa010100, @loopback, @rand_addr=0x64010102, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, @dev={0xac, 0x14, 0x14, 0x25}, @dev={0xac, 0x14, 0x14, 0x1b}, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}]}]}}, {{0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x880b, 0xe3, 0x3, [0x6, 0x5], "aba114f250eb18ac697af9fc8ffd36309f0766dfa6052e0723d66587c345b897994c4798cc81b69f6e3212b5202c605429dcedd202f38cc842a344005b058002165274995e6efdeee66b2a285dbd80671e776c661bb7b503add764a3b921888b4850d298098e59c349d8bc522f6f3bf07e9e8462ab4a325c140c0f154259fd73452634970a38c165e4fdae3d5c6ce976b3dfd131f7a31a3a6ef92207014abe07ad71b4be36745f7cd9b577c3de8124defb15bdb3e9525b9871a81709092ced15f10891a90329946ff01fc4846da6e23783dae397d1c07628c7b370e567bd8f4acf1d58"}, {0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x800, [0xbb], "56f6120241568cdeebb1ea7addd145d952115abdf3a4786325fbf34c9ed6730c3af698c322dbf85b9f9ddb5d453c63037015777cdf87092687134bdfeea9d031"}, {0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x86dd, [0x976, 0xb], "74204dbf416a0318c9352f665136d007f7dbb52ab04bcbf4713e3b6c88acfb02b132531843fb6f92214eaf45ee913435181b6c96b411203042310f06dbd7c9e3a0114684e57fc784ab807144c2f30bcd57ff4a91475d"}, {0x8, 0x88be, 0x0, {{0xb, 0x1, 0xd5, 0x1, 0x1, 0x0, 0x0, 0xfd}, 0x1, {0x6}}}, {0x8, 0x22eb, 0x3, {{0x4, 0x2, 0x3, 0x3, 0x0, 0x2, 0x1, 0x9}, 0x2, {0x2ed, 0x5, 0x3, 0x7, 0x1, 0x1, 0x1, 0x1, 0x1}}}, {0x8, 0x6558, 0x2, "1fe9e6d56823a4362161019d23870d252729f7b22a1a440940b6907266bec142ef6b75fa660dea5d966f2089c8b93dfa014efad4"}}}}}}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0) 62.169529ms ago: executing program 4 (id=2828): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$SIOCNRDECOBS(r0, 0x89e2) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000fc0), r3) sendmsg$NFC_CMD_SE_IO(r4, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000000)=ANY=[@ANYRESDEC=r2, @ANYRES16=r3, @ANYBLOB="01002cbd7000fddbdf251b00000008001500020000000400190008000100", @ANYRESOCT], 0x28}, 0x1, 0x0, 0x0, 0x44040}, 0x2400cc84) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="10010000", @ANYRES16=r2, @ANYBLOB="0500000000000000deff0e00000008000300", @ANYRES32=r5], 0x110}}, 0x0) 318.648µs ago: executing program 6 (id=2829): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f0000000300)=@caif=@dgm={0x25, 0x5, 0x18}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000880)="bec5a4ed416417b525a652f1d13303584256c5ca221990e0c5b04d15181a96805956ca0297c5a4c3633fb93fa120bf450987637d243a7690506b1fccc6f53ce199397e7f6283a8f5706f28652c3998fbb50089f41ac3d16631fdadb109d2ebfa119bf337d960737f5e7de6ee2ff6f1df0f24004656e9773c2ad54918e1c1dfca1ff33b63d5488a78b71d9fc2bdbd0e2e63b0fc13d75c31070b8aa8f47fe34be715e5989c06577b59bf7c778b947ece0217779c2cba2180b06badf971e2fab94221bc3d0a4efddd9a823129bcece1715c0fbe0743e4f536f0a7ba331d87", 0xdd}, {&(0x7f0000000540)="f24a6e51246d06fbfdbbcf4e690fc33e70f66647b0515cd9e38078f3548b0cc60b043fa6dcf13788bb233dd10763240972b002de5523f50331f0a6019164f3f670531822b693fcd5a1b414c3d0127511948135c74809731ebbd05df0709758eeb8d540e72b6fbca4077973b53e454b7487c11a53fad7dadb6a2170cfd02a40870ad664745866748852", 0x89}, {&(0x7f0000000440)="4ceecec2fd1b6cbf944f3c71f6c7c36bd4259413693073334eca673efd6c91c8430970ab83beec3d0bb10b3361297c551877c839539e4210624fc28706993d1f354e4ae7a3147e93cb7f15e4bee792a898b35671906e082cef39b8", 0x5b}, {&(0x7f0000000980)="5c2a39da69ef397dd72488550d099d717ac96a5f8c2e45a73d46c39baacf4578aafa8dd96bb76c229a78a681e3746856634d2b5734d1d7a0d5a79d020b2017de3d6f38b625c3460b34060058ec85a58f6a372b1c21ea8b3220662615a7d10dab360b22776ef1e86e1b2cf3e2cbb1a9d2707e0a7a46c1751c0c19861808cb65540b2ab7877a15887753a3d4219fb5d39aa5078398220a392cae5cb7118d0081bd124102d38283ddcfa0878ee9473939a0ea7376e26e2718c71d03843812a0b1af06648c946a9e9acdae976dc55a", 0xcd}, {&(0x7f00000006c0)="3857be7feb09e5023d4fc1b4a67ba2898fa88fb0737d3adc925dd333b5", 0x1d}, {&(0x7f0000000a80)="4b46f220485b82964c57f33eff7462a4d5c19f8992659690b55e166676e27d11e63eeb18a489e375e1ad6d12cdc4273d333787798defdf42ba14a3f5a3b55aee6c29ded8c1809c04bfa1cf22daa2f0dfe1f8cbf95a4c4874cd90c91db377ce104f206af1f9467f83158304ddf26fb6ce4c57199c7830a89376045c5d064f8c41c8be9bff01613b56c04099fadec96d7821da8dcdb8b7b8db64bd6ae3f2eb4bdd4860b5c34d8519c71d30940baa5ad9116cad6aa7", 0xb4}], 0x6}, 0x54) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_subtree(r3, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000080)=ANY=[@ANYBLOB='+cp\x00\x00'], 0x5) bind$alg(r2, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) r5 = accept(r2, 0x0, 0x0) sendmmsg$alg(r5, &(0x7f0000001a80)=[{0x0, 0x0, &(0x7f0000001880)=[{&(0x7f00000004c0)="af1b3f1b205dad4ab38248541eb62165129e1210209045aa4f78bc81276c50a6d016c28087f3157d2364", 0x2a}, {&(0x7f0000000500)="6d87202237a75ac67aa150a62f55271985359ecfe8113ed49f37a4ef95d6d9667a10758b0f992025ec0b7f33da70f54f603199d85a2c709ce5bad007385804", 0x3f}, {&(0x7f0000000600)="fd3c34f687297c63c2ed81541b2fd0069ede3384d1510b", 0x17}], 0x3, 0x0, 0x0, 0x4048848}], 0x1, 0x0) recvmmsg(r5, &(0x7f0000009940)=[{{0x0, 0x0, &(0x7f0000005c40)=[{&(0x7f0000005900)=""/135, 0x87}], 0x1}, 0x7}], 0x1, 0x100, 0x0) bind$alg(r1, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000001280)="b7f2288a91", 0x5) r6 = accept$alg(r1, 0x0, 0x0) sendmmsg$alg(r6, &(0x7f0000001900)=[{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f00000000c0)="5bdbd57a0e656889964df9937f561de9", 0x10}, {&(0x7f0000000780)="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", 0xff}], 0x2, 0x0, 0x0, 0x20043}], 0x1, 0x485c) recvmmsg(r6, &(0x7f0000001140)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000001040)=""/187, 0xbb}, {&(0x7f0000000600)=""/83, 0x53}], 0x2}, 0x400}], 0x1, 0x22, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) close(r7) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYRES32=r7], 0x20}}, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="08000000040000000400000001"], 0x50) syz_emit_ethernet(0x112a, &(0x7f0000000d40)={@multicast, @remote, @void, {@ipv6={0x86dd, @tipc_packet={0x8, 0x6, "98ce9c", 0x10f4, 0x6, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {[@hopopts={0x3b}, @hopopts={0x2b, 0x8, '\x00', [@hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @enc_lim={0x4, 0x1, 0x7}, @generic={0x13}, @enc_lim={0x4, 0x1, 0x94}, @enc_lim={0x4, 0x1, 0x9}, @calipso={0x7, 0x20, {0x3, 0x6, 0xb2, 0x0, [0xc5c31af, 0x8001, 0x0]}}, @jumbo={0xc2, 0x4, 0x1}]}, @routing={0x3c, 0x0, 0x1, 0x94}, @srh={0xff, 0xe, 0x4, 0x7, 0xe, 0x40, 0xfed9, [@local, @dev={0xfe, 0x80, '\x00', 0x42}, @private1, @mcast2, @mcast1, @empty, @empty]}, @dstopts={0x33, 0xa, '\x00', [@calipso={0x7, 0x28, {0x2, 0x8, 0x5, 0xc, [0x2, 0x9, 0xc8ac, 0x3c]}}, @calipso={0x7, 0x28, {0x0, 0x8, 0xc, 0xc, [0x5, 0x4403aad3, 0x7, 0x4]}}, @pad1]}, @hopopts={0x9, 0x1d8, '\x00', [@jumbo={0xc2, 0x4, 0x42}, @generic={0x81}, @enc_lim, @calipso={0x7, 0x48, {0x1, 0x10, 0x6, 0x4, [0x8, 0x8000, 0x1, 0x1, 0x9, 0x80000000, 0x7, 0x0]}}, @ra={0x5, 0x2, 0x8000}, @jumbo={0xc2, 0x4, 0x7}, @calipso={0x7, 0x28, {0x3, 0x8, 0x81, 0x0, [0x9, 0x5, 0x40, 0x3]}}, @generic={0x7, 0xe38, "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"}]}], @name_distributor={{0xec, 0x0, 0x0, 0x0, 0x1, 0xa, 0xb, 0x2, 0x400, 0x0, 0x1, 0x6, 0x0, 0x2, 0x4e23, 0x4e22, 0x0, 0x3, 0x0, 0x0, 0x1}, [{0x3, 0xa, 0x4, 0x62, 0x7fff, 0x5, 0x6, 0x10001}, {0x85, 0x5, 0x40, 0x3, 0x8, 0x6, 0x0, 0x8}, {0x10000, 0x3, 0x0, 0xf8b0, 0x6, 0x400, 0x0, 0x6}, {0x4, 0x7, 0x0, 0x8, 0x10, 0x18000000, 0x6}, {0xf, 0x8001, 0x1, 0x80, 0x80000001, 0x800, 0x9, 0xfffff81}, {0x8, 0x8, 0x8, 0x400, 0x4cee1ac4, 0x1b97, 0x4, 0x1}, {0x1, 0x7, 0x2, 0x10001, 0xd3fb, 0x8, 0x1, 0x400}]}}}}}}, 0x0) setsockopt$inet6_udp_int(r5, 0x11, 0x66, &(0x7f00000001c0)=0x4c, 0x4) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000000)={r8, &(0x7f0000000140), &(0x7f0000000200)=""/221}, 0x20) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000180)=@generic={&(0x7f0000000040)='./file0\x00', r8}, 0x18) 0s ago: executing program 5 (id=2830): socketpair$nbd(0x1, 0x1, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x3, &(0x7f0000000340)=@framed, &(0x7f0000000080)='syzkaller\x00', 0x4}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=ANY=[@ANYBLOB="50000000100003040000000000000000f2000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e000000001800028006000100010000000c000200540a00001800000008000500", @ANYRES32=r3], 0x50}, 0x1, 0xba01, 0x0, 0x10}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a300000000040000000160a01000000000000000000010000000900010073797a30000000000900020073797a3000000000140003800800014000000000080002400000000050000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000001c000380980003801400010076657468305f746f5f68737200000000080007400000ae"], 0xd8}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@empty, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@multicast1, 0x0, 0x2b}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x3}}, 0xe8) r6 = socket$key(0xf, 0x3, 0x2) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x4, 0x0, 0x1}]}, &(0x7f0000000100)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x5}, 0x94) setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) sendmsg$key(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[], 0x10}}, 0x0) kernel console output (not intermixed with test programs): 1 has an invalid length. [ 178.298934][ T9071] netlink: 152 bytes leftover after parsing attributes in process `syz.4.849'. [ 178.396645][ T9079] netlink: 12 bytes leftover after parsing attributes in process `syz.4.849'. [ 178.596024][ T9087] netlink: 60 bytes leftover after parsing attributes in process `syz.2.852'. [ 179.339364][ C0] vcan0: j1939_tp_rxtimer: 0xffff88801e34c400: rx timeout, send abort [ 179.347836][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88801e34c400: 0x3fe02: (3) A timeout occurred and this is the connection abort to close the session. [ 179.586359][ T9102] netlink: 'syz.4.858': attribute type 29 has an invalid length. [ 179.668645][ T9105] can: request_module (can-proto-0) failed. [ 180.175047][ T5867] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 180.191798][ T5867] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 180.206647][ T5867] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 180.219903][ T5867] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 180.230611][ T5867] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 180.312512][ T51] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 180.329939][ T51] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 180.341312][ T51] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 180.360957][ T51] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 180.378638][ T51] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 180.539149][ T9121] lo speed is unknown, defaulting to 1000 [ 180.628418][ C0] vcan0: j1939_tp_rxtimer: 0xffff88801e34c000: rx timeout, send abort [ 180.637310][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88801e34c000: 0x3fe02: (3) A timeout occurred and this is the connection abort to close the session. [ 181.060625][ T9165] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 181.114699][ T9168] __nla_validate_parse: 5 callbacks suppressed [ 181.114719][ T9168] netlink: 8 bytes leftover after parsing attributes in process `syz.1.873'. [ 181.144877][ T9156] lo speed is unknown, defaulting to 1000 [ 181.558982][ T9179] netlink: 20 bytes leftover after parsing attributes in process `syz.2.876'. [ 181.611907][ T9180] netlink: 'syz.2.876': attribute type 2 has an invalid length. [ 181.636303][ T9121] chnl_net:caif_netlink_parms(): no params data found [ 181.924914][ C0] vcan0: j1939_tp_rxtimer: 0xffff88801e34f800: rx timeout, send abort [ 181.933473][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88801e34f800: 0x3fe02: (3) A timeout occurred and this is the connection abort to close the session. [ 181.935301][ T9191] netlink: 24 bytes leftover after parsing attributes in process `syz.2.878'. [ 181.970448][ T9191] tipc: Enabled bearer , priority 0 [ 181.979956][ T9121] bridge0: port 1(bridge_slave_0) entered blocking state [ 181.987405][ T9121] bridge0: port 1(bridge_slave_0) entered disabled state [ 181.994864][ T9121] bridge_slave_0: entered allmulticast mode [ 182.002952][ T9121] bridge_slave_0: entered promiscuous mode [ 182.016356][ T9191] syzkaller0: entered promiscuous mode [ 182.028405][ T9191] syzkaller0: entered allmulticast mode [ 182.038291][ T9121] bridge0: port 2(bridge_slave_1) entered blocking state [ 182.046468][ T9121] bridge0: port 2(bridge_slave_1) entered disabled state [ 182.054213][ T9121] bridge_slave_1: entered allmulticast mode [ 182.062274][ T9121] bridge_slave_1: entered promiscuous mode [ 182.139427][ T9191] tipc: Resetting bearer [ 182.148683][ T9121] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 182.162293][ T9121] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 182.190321][ T9190] tipc: Resetting bearer [ 182.217853][ T9202] netlink: 'syz.1.881': attribute type 4 has an invalid length. [ 182.218013][ T9190] tipc: Disabling bearer [ 182.255417][ T9202] netlink: 'syz.1.881': attribute type 1 has an invalid length. [ 182.268827][ T9202] netlink: 228 bytes leftover after parsing attributes in process `syz.1.881'. [ 182.285320][ T9121] team0: Port device team_slave_0 added [ 182.296875][ T9121] team0: Port device team_slave_1 added [ 182.305483][ T9202] netlink: 8 bytes leftover after parsing attributes in process `syz.1.881'. [ 182.345342][ T9121] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 182.352687][ T9121] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 182.399766][ T9121] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 182.419898][ T9121] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 182.436017][ T9121] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 182.463874][ T9121] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 182.481768][ T5867] Bluetooth: hci5: command tx timeout [ 182.487098][ T9205] netlink: 'syz.2.882': attribute type 29 has an invalid length. [ 182.573691][ T9209] netlink: 8 bytes leftover after parsing attributes in process `syz.2.884'. [ 182.612933][ T9121] hsr_slave_0: entered promiscuous mode [ 182.631197][ T9121] hsr_slave_1: entered promiscuous mode [ 182.651150][ T9121] debugfs: 'hsr0' already exists in 'hsr' [ 182.660294][ T9121] Cannot create hsr debugfs directory [ 183.099335][ T9121] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 183.123155][ T9121] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 183.146776][ T9121] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 183.166720][ T9121] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 183.212066][ C0] vcan0: j1939_tp_rxtimer: 0xffff88806a529800: rx timeout, send abort [ 183.220596][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88806a529800: 0x3fe02: (3) A timeout occurred and this is the connection abort to close the session. [ 183.317242][ T9230] lo: left promiscuous mode [ 183.397986][ T9230] syz_tun: left promiscuous mode [ 183.410846][ T9230] syz_tun: left allmulticast mode [ 183.536116][ T9230] bond0: (slave bond_slave_0): Releasing backup interface [ 183.560465][ T9230] bond0: (slave bond_slave_1): Releasing backup interface [ 183.592136][ T9230] team0: Port device team_slave_0 removed [ 183.609396][ T9230] team0: Port device team_slave_1 removed [ 183.619210][ T9230] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 183.633751][ T9230] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 183.647199][ T9230] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 183.658458][ T9230] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 183.767464][ T9230] batadv2: left allmulticast mode [ 183.773349][ T9230] batadv2: left promiscuous mode [ 183.778638][ T9230] bridge0: port 1(batadv2) entered disabled state [ 183.840788][ T1148] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 183.867658][ T1148] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.895183][ T1148] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 183.917869][ T1148] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.952903][ T9241] netlink: 'syz.4.892': attribute type 4 has an invalid length. [ 184.119953][ T9254] netlink: 8 bytes leftover after parsing attributes in process `syz.2.894'. [ 184.170626][ T1148] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 184.195520][ T1148] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.239461][ T1148] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 184.267431][ T1148] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.332975][ T9255] netlink: 60 bytes leftover after parsing attributes in process `syz.1.893'. [ 184.452284][ T9254] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 184.485111][ T9254] gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 184.494215][ T9254] gretap2: entered promiscuous mode [ 184.500358][ T9254] gretap2: entered allmulticast mode [ 184.505781][ C0] vcan0: j1939_tp_rxtimer: 0xffff88806a52b800: rx timeout, send abort [ 184.514256][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88806a52b800: 0x3fe02: (3) A timeout occurred and this is the connection abort to close the session. [ 184.564643][ T5867] Bluetooth: hci5: command tx timeout [ 184.591774][ T9256] tipc: Enabled bearer , priority 0 [ 184.689732][ T9121] 8021q: adding VLAN 0 to HW filter on device bond0 [ 184.728312][ T9262] tipc: Bearer : already 2 bearers with priority 10 [ 184.757962][ T9262] tipc: Bearer : trying with adjusted priority [ 184.792613][ T9262] tipc: Enabling of bearer rejected, failed to enable media [ 184.804002][ T9258] syzkaller0: entered promiscuous mode [ 184.809592][ T9258] syzkaller0: entered allmulticast mode [ 184.958041][ T9265] bond0: entered promiscuous mode [ 184.963325][ T9265] bond0: entered allmulticast mode [ 184.969310][ T9265] 8021q: adding VLAN 0 to HW filter on device bond0 [ 184.989421][ T9246] tipc: Resetting bearer [ 185.045684][ T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 185.047522][ T9246] tipc: Disabling bearer [ 185.055426][ T51] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 185.067359][ T51] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 185.075819][ T51] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 185.086024][ T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 185.190182][ T9274] openvswitch: netlink: nsh attr 0 has unexpected len 1 expected 0 [ 185.283502][ T9270] macvtap1: entered promiscuous mode [ 185.297585][ T9270] vlan0: entered promiscuous mode [ 185.306923][ T9270] macvtap1: entered allmulticast mode [ 185.316213][ T9270] vlan0: entered allmulticast mode [ 185.326814][ T9270] veth0_vlan: entered allmulticast mode [ 185.360517][ T9121] 8021q: adding VLAN 0 to HW filter on device team0 [ 185.422706][ T1011] bridge0: port 1(bridge_slave_0) entered blocking state [ 185.429894][ T1011] bridge0: port 1(bridge_slave_0) entered forwarding state [ 185.447068][ T1011] bridge0: port 2(bridge_slave_1) entered blocking state [ 185.454402][ T1011] bridge0: port 2(bridge_slave_1) entered forwarding state [ 185.506735][ T9271] lo speed is unknown, defaulting to 1000 [ 185.565439][ T9286] nbd: couldn't find device at index 771751936 [ 185.640389][ T9288] netlink: 340 bytes leftover after parsing attributes in process `syz.1.903'. [ 185.782515][ C0] vcan0: j1939_tp_rxtimer: 0xffff88806a52bc00: rx timeout, send abort [ 185.791014][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88806a52bc00: 0x3fe02: (3) A timeout occurred and this is the connection abort to close the session. [ 186.119166][ T9121] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 186.137089][ T9299] netlink: 8 bytes leftover after parsing attributes in process `syz.4.906'. [ 186.634875][ T51] Bluetooth: hci5: command tx timeout [ 186.770903][ T9271] chnl_net:caif_netlink_parms(): no params data found [ 187.072055][ C0] vcan0: j1939_tp_rxtimer: 0xffff888027b4f000: rx timeout, send abort [ 187.080421][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888027b4f000: 0x3fe02: (3) A timeout occurred and this is the connection abort to close the session. [ 187.100153][ T9271] bridge0: port 1(bridge_slave_0) entered blocking state [ 187.114826][ T51] Bluetooth: hci1: command tx timeout [ 187.123693][ T9271] bridge0: port 1(bridge_slave_0) entered disabled state [ 187.137138][ T9271] bridge_slave_0: entered allmulticast mode [ 187.148146][ T9271] bridge_slave_0: entered promiscuous mode [ 187.176629][ T9271] bridge0: port 2(bridge_slave_1) entered blocking state [ 187.210311][ T9342] netlink: 8 bytes leftover after parsing attributes in process `syz.1.916'. [ 187.212612][ T9271] bridge0: port 2(bridge_slave_1) entered disabled state [ 187.230239][ T9344] netlink: 'syz.2.917': attribute type 4 has an invalid length. [ 187.238581][ T9271] bridge_slave_1: entered allmulticast mode [ 187.246855][ T9271] bridge_slave_1: entered promiscuous mode [ 187.320334][ T9121] veth0_vlan: entered promiscuous mode [ 187.343224][ T9342] netlink: 'syz.1.916': attribute type 32 has an invalid length. [ 187.353864][ T9342] netlink: 60 bytes leftover after parsing attributes in process `syz.1.916'. [ 187.354994][ T9271] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 187.403628][ T9271] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 187.526999][ T9121] veth1_vlan: entered promiscuous mode [ 187.696207][ T9350] netlink: 8 bytes leftover after parsing attributes in process `syz.4.918'. [ 187.704391][ T9271] team0: Port device team_slave_0 added [ 187.737439][ T9271] team0: Port device team_slave_1 added [ 187.866268][ T9271] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 187.883127][ T9271] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 187.927871][ T9271] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 187.954174][ T9271] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 187.961315][ T9271] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 187.988730][ T9271] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 188.076958][ T9365] netlink: 'syz.2.922': attribute type 1 has an invalid length. [ 188.152358][ T9271] hsr_slave_0: entered promiscuous mode [ 188.163323][ T9271] hsr_slave_1: entered promiscuous mode [ 188.169997][ T9271] debugfs: 'hsr0' already exists in 'hsr' [ 188.180014][ T9271] Cannot create hsr debugfs directory [ 188.231170][ T9121] veth0_macvtap: entered promiscuous mode [ 188.359025][ C0] vcan0: j1939_tp_rxtimer: 0xffff888027b4d000: rx timeout, send abort [ 188.367606][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888027b4d000: 0x3fe02: (3) A timeout occurred and this is the connection abort to close the session. [ 188.386144][ T9121] veth1_macvtap: entered promiscuous mode [ 188.457113][ T9370] netlink: 52 bytes leftover after parsing attributes in process `syz.2.924'. [ 188.478532][ T9375] netlink: 'syz.1.925': attribute type 12 has an invalid length. [ 188.490512][ T9375] netlink: 132 bytes leftover after parsing attributes in process `syz.1.925'. [ 188.550456][ T9379] netlink: 8 bytes leftover after parsing attributes in process `syz.2.927'. [ 188.649931][ T9121] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 188.711744][ T51] Bluetooth: hci5: command tx timeout [ 188.720284][ T9383] netlink: 14 bytes leftover after parsing attributes in process `syz.1.928'. [ 188.760327][ T9383] smc: removing net device bond0 with user defined pnetid SYZ2 [ 188.769286][ T9383] bond0 (unregistering): Released all slaves [ 188.793999][ T9121] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 188.820361][ T9388] netlink: 8 bytes leftover after parsing attributes in process `syz.4.930'. [ 188.832095][ T9379] netlink: 'syz.2.927': attribute type 2 has an invalid length. [ 189.019254][ T9392] netlink: 32 bytes leftover after parsing attributes in process `syz.2.932'. [ 189.043071][ T13] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.055674][ T13] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.095387][ T13] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.106584][ T13] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.191208][ T9397] gretap0: entered promiscuous mode [ 189.196882][ T51] Bluetooth: hci1: command tx timeout [ 189.308972][ T9397] 0{X: renamed from gretap0 [ 189.325148][ T9397] 0{X: left promiscuous mode [ 189.349278][ T9397] 0{X: entered allmulticast mode [ 189.363153][ T9397] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 189.538935][ T9271] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 189.568316][ T9418] bond0: option ad_select: unable to set because the bond device is up [ 189.583329][ T9271] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 189.601267][ T9271] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 189.625302][ T9271] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 189.645169][ C0] vcan0: j1939_tp_rxtimer: 0xffff888027b4e400: rx timeout, send abort [ 189.653662][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888027b4e400: 0x3fe02: (3) A timeout occurred and this is the connection abort to close the session. [ 189.668421][ T1143] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 189.688424][ T1143] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 189.795167][ T9427] netlink: 'syz.4.940': attribute type 1 has an invalid length. [ 189.852058][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 189.860034][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 190.250106][ T9271] 8021q: adding VLAN 0 to HW filter on device bond0 [ 190.341061][ T9271] 8021q: adding VLAN 0 to HW filter on device team0 [ 190.368600][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 190.375868][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 190.390378][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 190.397620][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 190.410820][ T9449] (unnamed net_device) (uninitialized): option use_carrier: invalid value (4) [ 190.934826][ C0] vcan0: j1939_tp_rxtimer: 0xffff888027b4c800: rx timeout, send abort [ 190.943375][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888027b4c800: 0x3fe02: (3) A timeout occurred and this is the connection abort to close the session. [ 191.166737][ T9271] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 191.272810][ T51] Bluetooth: hci1: command tx timeout [ 191.394605][ T9485] __nla_validate_parse: 5 callbacks suppressed [ 191.394627][ T9485] netlink: 12 bytes leftover after parsing attributes in process `syz.2.951'. [ 191.573820][ T9496] tap0: tun_chr_ioctl cmd 1074025672 [ 191.579178][ T9496] tap0: ignored: set checksum disabled [ 191.733550][ T9502] netlink: 'syz.2.954': attribute type 12 has an invalid length. [ 191.841142][ T9503] netlink: 'syz.2.954': attribute type 12 has an invalid length. [ 191.950535][ T9509] netlink: 32 bytes leftover after parsing attributes in process `syz.1.955'. [ 192.188806][ T9526] netlink: 60 bytes leftover after parsing attributes in process `syz.5.957'. [ 192.227940][ C0] vcan0: j1939_tp_rxtimer: 0xffff888027b4d800: rx timeout, send abort [ 192.237938][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888027b4d800: 0x3fe02: (3) A timeout occurred and this is the connection abort to close the session. [ 192.345928][ T9524] team0: Device ip6gre1 is up. Set it down before adding it as a team port [ 192.397066][ T9271] veth0_vlan: entered promiscuous mode [ 192.427619][ T9271] veth1_vlan: entered promiscuous mode [ 192.557156][ T9271] veth0_macvtap: entered promiscuous mode [ 192.585214][ T9271] veth1_macvtap: entered promiscuous mode [ 192.655620][ T9540] netlink: 'syz.5.961': attribute type 15 has an invalid length. [ 192.682871][ T9540] netlink: 24 bytes leftover after parsing attributes in process `syz.5.961'. [ 192.742243][ T9542] netlink: 8 bytes leftover after parsing attributes in process `syz.1.963'. [ 192.783548][ T9271] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 192.843390][ T9271] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 192.912302][ T1148] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.938532][ T1148] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.959564][ T1148] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.979278][ T1148] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.059186][ T9551] netlink: 'syz.1.966': attribute type 21 has an invalid length. [ 193.132762][ T9550] sctp: [Deprecated]: syz.1.966 (pid 9550) Use of int in max_burst socket option deprecated. [ 193.132762][ T9550] Use struct sctp_assoc_value instead [ 193.163208][ T9551] netlink: 4 bytes leftover after parsing attributes in process `syz.1.966'. [ 193.189244][ T9558] netlink: 20 bytes leftover after parsing attributes in process `syz.1.966'. [ 193.257439][ T9558] bridge0: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 193.352090][ T51] Bluetooth: hci1: command tx timeout [ 193.442508][ T9571] netlink: 60 bytes leftover after parsing attributes in process `syz.2.969'. [ 193.467799][ T9570] x_tables: ip6_tables: quota.0 match: invalid size 24 (kernel) != (user) 144 [ 193.495840][ T9551] lo speed is unknown, defaulting to 1000 [ 193.513529][ C0] vcan0: j1939_tp_rxtimer: 0xffff888027b4fc00: rx timeout, send abort [ 193.522280][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888027b4fc00: 0x3fe02: (3) A timeout occurred and this is the connection abort to close the session. [ 193.568847][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 193.597663][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 193.710316][ T9578] netlink: 'syz.4.972': attribute type 9 has an invalid length. [ 193.787409][ T1143] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 193.819173][ T1143] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 193.925487][ T9582] netlink: 4 bytes leftover after parsing attributes in process `syz.5.973'. [ 193.964336][ T9580] netlink: 4 bytes leftover after parsing attributes in process `syz.5.973'. [ 194.652035][ T9599] smc: net device bond0 applied user defined pnetid SYZ0 [ 194.659576][ T9602] smc: net device bond0 erased user defined pnetid SYZ0 [ 194.798553][ T9613] netlink: 'syz.2.980': attribute type 11 has an invalid length. [ 194.808910][ C1] vcan0: j1939_tp_rxtimer: 0xffff888056a8e800: rx timeout, send abort [ 194.817694][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888056a8e800: 0x3fe02: (3) A timeout occurred and this is the connection abort to close the session. [ 194.872014][ T9613] netlink: 'syz.2.980': attribute type 11 has an invalid length. [ 194.983514][ T9615] nbd: must specify a device to reconfigure [ 195.498362][ T9640] tipc: Started in network mode [ 195.527622][ T9640] tipc: Node identity 0685219ae40e, cluster identity 4711 [ 195.556942][ T9640] tipc: Enabled bearer , priority 0 [ 195.619668][ T9643] syzkaller0: entered promiscuous mode [ 195.666392][ T9643] syzkaller0: entered allmulticast mode [ 195.773676][ T9643] tipc: Resetting bearer [ 195.879944][ T9643] tipc: Resetting bearer [ 195.920714][ T9643] tipc: Disabling bearer [ 196.106287][ C1] vcan0: j1939_tp_rxtimer: 0xffff888056a8d400: rx timeout, send abort [ 196.114859][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888056a8d400: 0x3fe02: (3) A timeout occurred and this is the connection abort to close the session. [ 196.904435][ T9659] __nla_validate_parse: 2 callbacks suppressed [ 196.904457][ T9659] netlink: 8 bytes leftover after parsing attributes in process `syz.4.991'. [ 196.923701][ T9659] openvswitch: netlink: nsh attribute has 2338 unknown bytes. [ 196.931398][ T9659] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 197.069700][ T9681] netlink: 'syz.1.994': attribute type 10 has an invalid length. [ 197.081426][ T9681] syz_tun: entered promiscuous mode [ 197.363624][ T9705] netlink: 1 bytes leftover after parsing attributes in process `syz.1.1001'. [ 197.404456][ C1] vcan0: j1939_tp_rxtimer: 0xffff888032b7d000: rx timeout, send abort [ 197.412966][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888032b7d000: 0x3fe02: (3) A timeout occurred and this is the connection abort to close the session. [ 197.486667][ T9713] netlink: 60 bytes leftover after parsing attributes in process `syz.6.998'. [ 197.828389][ T59] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 197.864358][ T59] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 197.901653][ T59] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 197.935559][ T59] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 197.949638][ T9728] IPVS: length: 8 != 1152 [ 198.698867][ C1] vcan0: j1939_tp_rxtimer: 0xffff888056a88000: rx timeout, send abort [ 198.707489][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888056a88000: 0x3fe02: (3) A timeout occurred and this is the connection abort to close the session. [ 198.995775][ T9756] x_tables: ip_tables: udp match: only valid for protocol 17 [ 199.133413][ T9761] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1015'. [ 199.147442][ T9756] netem: incorrect ge model size [ 199.175664][ T9756] netem: change failed [ 199.268237][ T9756] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1012'. [ 199.329537][ T9756] netlink: 'syz.6.1012': attribute type 1 has an invalid length. [ 199.518426][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.524896][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 199.653351][ T9779] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1016'. [ 199.847524][ T9788] tipc: Enabling of bearer rejected, already enabled [ 199.895253][ T9791] tipc: Enabling of bearer rejected, already enabled [ 199.912574][ T9795] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 199.991041][ C1] vcan0: j1939_tp_rxtimer: 0xffff888056a88400: rx timeout, send abort [ 200.000648][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888056a88400: 0x3fe02: (3) A timeout occurred and this is the connection abort to close the session. [ 200.024228][ T9800] netlink: 'syz.6.1023': attribute type 23 has an invalid length. [ 200.269143][ T9812] netlink: 'syz.5.1027': attribute type 1 has an invalid length. [ 200.460217][ T9817] 8021q: adding VLAN 0 to HW filter on device bond2 [ 200.475920][ T9817] bond1: (slave bond2): making interface the new active one [ 200.533050][ T9821] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1027'. [ 200.533348][ T9817] bond1: (slave bond2): Enslaving as an active interface with an up link [ 200.568634][ T9819] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1028'. [ 200.609958][ T9812] bond1: (slave gretap1): Enslaving as a backup interface with an up link [ 200.627704][ T9821] 8021q: adding VLAN 0 to HW filter on device bond1 [ 200.707605][ T9812] netlink: 56 bytes leftover after parsing attributes in process `syz.5.1027'. [ 201.286222][ C1] vcan0: j1939_tp_rxtimer: 0xffff888056a89000: rx timeout, send abort [ 201.294824][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888056a89000: 0x3fe02: (3) A timeout occurred and this is the connection abort to close the session. [ 201.598658][ T9848] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.855025][ T9848] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.050110][ T6889] udevd[6889]: inotify_add_watch(7, /dev/nbd0, 10) failed: No such file or directory [ 202.094390][ T9848] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.248094][ T9848] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.313228][ T9880] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1043'. [ 202.351710][ T9880] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1043'. [ 202.468678][ T9883] netlink: 'syz.1.1044': attribute type 1 has an invalid length. [ 202.477651][ T9885] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1045'. [ 202.513448][ T9883] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1044'. [ 202.561104][ T1155] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.578002][ T9883] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1044'. [ 202.580025][ T1155] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.587309][ C1] vcan0: j1939_tp_rxtimer: 0xffff888056a89c00: rx timeout, send abort [ 202.603974][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888056a89c00: 0x3fe02: (3) A timeout occurred and this is the connection abort to close the session. [ 202.646346][ T1148] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.671970][ T9888] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1044'. [ 202.719670][ T9890] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1047'. [ 202.770447][ T1148] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.789417][ T9890] netdevsim netdevsim6: loading /lib/firmware/. failed with error -22 [ 202.811219][ T9890] netdevsim netdevsim6: Direct firmware load for . failed with error -22 [ 202.828743][ T9890] netdevsim netdevsim6: Falling back to sysfs fallback for: . [ 202.869850][ T9896] team0: Device ip6gre1 is of different type [ 202.955022][ T9900] netlink: 'syz.1.1049': attribute type 1 has an invalid length. [ 202.968187][ T9900] netlink: 'syz.1.1049': attribute type 2 has an invalid length. [ 202.995565][ T9901] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1050'. [ 203.273345][ T9919] netlink: 'syz.1.1052': attribute type 2 has an invalid length. [ 203.391114][ T9921] netlink: 'syz.1.1053': attribute type 7 has an invalid length. [ 203.414048][ T9921] netlink: 140 bytes leftover after parsing attributes in process `syz.1.1053'. [ 203.774932][ T9936] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1059'. [ 203.892576][ C1] vcan0: j1939_tp_rxtimer: 0xffff888056a89400: rx timeout, send abort [ 203.900986][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888056a89400: 0x3fe02: (3) A timeout occurred and this is the connection abort to close the session. [ 204.035008][ T9951] netlink: 'syz.5.1063': attribute type 30 has an invalid length. [ 204.082038][ T9952] netlink: 'syz.5.1063': attribute type 30 has an invalid length. [ 204.498264][ T9964] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 204.648579][ T9977] validate_nla: 2 callbacks suppressed [ 204.648600][ T9977] netlink: 'syz.5.1069': attribute type 58 has an invalid length. [ 205.048008][ T9989] veth0: entered promiscuous mode [ 205.061320][ T9988] veth0: left promiscuous mode [ 205.184661][ C1] vcan0: j1939_tp_rxtimer: 0xffff888056a8ac00: rx timeout, send abort [ 205.193189][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888056a8ac00: 0x3fe02: (3) A timeout occurred and this is the connection abort to close the session. [ 205.311139][T10004] openvswitch: netlink: Actions may not be safe on all matching packets [ 206.482752][ C1] vcan0: j1939_tp_rxtimer: 0xffff888056a89800: rx timeout, send abort [ 206.491179][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888056a89800: 0x3fe02: (3) A timeout occurred and this is the connection abort to close the session. [ 206.596761][T10052] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 206.807742][T10077] netlink: 'syz.1.1096': attribute type 1 has an invalid length. [ 207.202570][T10079] veth5: entered promiscuous mode [ 207.385619][T10098] __nla_validate_parse: 61 callbacks suppressed [ 207.385639][T10098] netlink: 1196 bytes leftover after parsing attributes in process `syz.5.1101'. [ 207.594809][T10106] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1105'. [ 207.708423][T10119] netlink: 'syz.5.1107': attribute type 1 has an invalid length. [ 207.735592][T10116] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1105'. [ 207.745908][T10116] tc_dump_action: action bad kind [ 207.751300][T10119] netlink: 'syz.5.1107': attribute type 2 has an invalid length. [ 207.773837][ C1] vcan0: j1939_tp_rxtimer: 0xffff888056a8b400: rx timeout, send abort [ 207.782539][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888056a8b400: 0x3fe02: (3) A timeout occurred and this is the connection abort to close the session. [ 207.841355][T10119] netlink: 'syz.5.1107': attribute type 2 has an invalid length. [ 207.852801][T10104] netlink: 9 bytes leftover after parsing attributes in process `syz.4.1104'. [ 207.902310][T10104] netlink: 5 bytes leftover after parsing attributes in process `syz.4.1104'. [ 207.911347][T10104] 0{X: renamed from eql (while UP) [ 207.955461][T10121] netlink: 'syz.5.1107': attribute type 2 has an invalid length. [ 207.973528][T10119] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1107'. [ 208.005280][T10104] 0{X: entered allmulticast mode [ 208.011829][T10104] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 208.280659][T10138] openvswitch: netlink: Flow key attribute not present in set flow. [ 208.503086][T10146] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1115'. [ 208.782754][T10171] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1122'. [ 208.809665][T10173] netlink: 'syz.4.1123': attribute type 4 has an invalid length. [ 208.845406][T10173] netlink: 'syz.4.1123': attribute type 4 has an invalid length. [ 209.066134][ C1] vcan0: j1939_tp_rxtimer: 0xffff888056a88800: rx timeout, send abort [ 209.074863][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888056a88800: 0x3fe02: (3) A timeout occurred and this is the connection abort to close the session. [ 209.209500][T10190] netlink: 'syz.2.1128': attribute type 21 has an invalid length. [ 209.221147][T10190] netlink: 'syz.2.1128': attribute type 6 has an invalid length. [ 209.232055][T10191] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1126'. [ 209.234104][T10190] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1128'. [ 209.581871][T10199] sctp: [Deprecated]: syz.2.1132 (pid 10199) Use of int in max_burst socket option deprecated. [ 209.581871][T10199] Use struct sctp_assoc_value instead [ 209.751705][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 210.363869][ C1] vcan0: j1939_tp_rxtimer: 0xffff888056a8a800: rx timeout, send abort [ 210.370993][T10221] netlink: 'syz.5.1140': attribute type 21 has an invalid length. [ 210.372614][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888056a8a800: 0x3fe02: (3) A timeout occurred and this is the connection abort to close the session. [ 210.718622][T10231] : renamed from bridge_slave_0 (while UP) [ 210.932838][T10242] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input5 [ 211.532902][T10271] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 211.600676][T10273] netlink: zone id is out of range [ 211.610977][T10273] netlink: get zone limit has 8 unknown bytes [ 211.668804][ C1] vcan0: j1939_tp_rxtimer: 0xffff888056a88c00: rx timeout, send abort [ 211.677536][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888056a88c00: 0x3fe02: (3) A timeout occurred and this is the connection abort to close the session. [ 212.061045][T10287] lo speed is unknown, defaulting to 1000 [ 212.215470][T10264] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 212.241271][T10296] tipc: Enabled bearer , priority 0 [ 212.270588][T10296] syzkaller0: entered promiscuous mode [ 212.293582][T10296] syzkaller0: entered allmulticast mode [ 212.426346][T10296] tipc: Resetting bearer [ 212.472028][T10296] netlink: 'syz.6.1161': attribute type 1 has an invalid length. [ 212.477468][T10313] __nla_validate_parse: 8 callbacks suppressed [ 212.477491][T10313] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1163'. [ 212.479825][T10296] netlink: 15 bytes leftover after parsing attributes in process `syz.6.1161'. [ 212.569030][T10296] netlink: 56 bytes leftover after parsing attributes in process `syz.6.1161'. [ 212.647020][T10295] tipc: Resetting bearer [ 212.666385][T10315] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1166'. [ 212.728753][T10315] netlink: 'syz.1.1166': attribute type 4 has an invalid length. [ 212.762350][T10295] tipc: Disabling bearer [ 212.961170][ C1] vcan0: j1939_tp_rxtimer: 0xffff888056a8a400: rx timeout, send abort [ 212.969844][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888056a8a400: 0x3fe02: (3) A timeout occurred and this is the connection abort to close the session. [ 213.090805][T10332] netlink: 300 bytes leftover after parsing attributes in process `syz.6.1172'. [ 213.187539][T10332] netlink: 'syz.6.1172': attribute type 21 has an invalid length. [ 213.259601][T10332] netlink: 152 bytes leftover after parsing attributes in process `syz.6.1172'. [ 213.911965][T10352] netlink: 'syz.4.1176': attribute type 4 has an invalid length. [ 214.246522][ C1] vcan0: j1939_tp_rxtimer: 0xffff888056a8bc00: rx timeout, send abort [ 214.256026][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888056a8bc00: 0x3fe02: (3) A timeout occurred and this is the connection abort to close the session. [ 214.375966][T10373] Bluetooth: MGMT ver 1.23 [ 214.449175][T10359] bridge0: port 2(bridge_slave_1) entered disabled state [ 214.456992][T10359] bridge0: port 1() entered disabled state [ 214.600823][T10379] netlink: 2716 bytes leftover after parsing attributes in process `syz.4.1182'. [ 214.670928][T10359] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check. [ 215.544601][ C1] vcan0: j1939_tp_rxtimer: 0xffff888056a8b000: rx timeout, send abort [ 215.553271][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888056a8b000: 0x3fe02: (3) A timeout occurred and this is the connection abort to close the session. [ 215.641781][T10417] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1196'. [ 215.770067][T10433] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1198'. [ 215.775351][T10435] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1200'. [ 216.074635][T10442] netlink: 'syz.1.1201': attribute type 12 has an invalid length. [ 216.092470][T10442] netlink: 'syz.1.1201': attribute type 12 has an invalid length. [ 216.346565][T10462] netlink: 'syz.6.1205': attribute type 10 has an invalid length. [ 216.372955][T10462] bridge0: port 2(bridge_slave_1) entered disabled state [ 216.381222][T10462] bridge_slave_1: left allmulticast mode [ 216.420567][T10462] bridge_slave_1: left promiscuous mode [ 216.440159][T10462] bridge0: port 2(bridge_slave_1) entered disabled state [ 216.527733][T10462] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 216.830884][ C1] vcan0: j1939_tp_rxtimer: 0xffff888032b71400: rx timeout, send abort [ 216.839567][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888032b71400: 0x3fe02: (3) A timeout occurred and this is the connection abort to close the session. [ 217.337787][T10507] tipc: Enabling of bearer rejected, failed to enable media [ 217.366368][T10508] tipc: Enabling of bearer rejected, failed to enable media [ 217.394085][ T30] audit: type=1800 audit(1755594997.600:4): pid=10505 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1217" name=4996AE17DFFC2E43C8174B54B620636894AAACF28FF62616363C70A440AEC4014CAF28C0ADC04308 dev="tmpfs" ino=364 res=0 errno=0 [ 217.448363][T10510] netlink: 'syz.2.1219': attribute type 3 has an invalid length. [ 217.533980][T10510] netlink: 'syz.2.1219': attribute type 2 has an invalid length. [ 217.610047][T10521] __nla_validate_parse: 5 callbacks suppressed [ 217.610070][T10521] netlink: 80 bytes leftover after parsing attributes in process `syz.5.1222'. [ 217.960064][T10539] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1226'. [ 218.126228][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807ac49400: rx timeout, send abort [ 218.134775][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88807ac49400: 0x3fe02: (3) A timeout occurred and this is the connection abort to close the session. [ 218.284784][T10528] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 218.353607][T10539] IPVS: Error connecting to the multicast addr [ 218.652213][T10567] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1231'. [ 218.661158][T10567] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1231'. [ 218.899036][T10577] netlink: 112 bytes leftover after parsing attributes in process `syz.1.1237'. [ 218.981346][T10580] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1239'. [ 218.992298][ T9] IPVS: starting estimator thread 0... [ 218.994335][T10580] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1239'. [ 219.005315][T10581] IPVS: lblc: SCTP 172.20.20.187:0 - no destination available [ 219.009186][T10580] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1239'. [ 219.092303][T10582] IPVS: using max 25 ests per chain, 60000 per kthread [ 219.117200][T10584] syzkaller1: entered promiscuous mode [ 219.130161][T10584] syzkaller1: entered allmulticast mode [ 219.259046][T10590] (unnamed net_device) (uninitialized): option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 219.284109][T10589] (unnamed net_device) (uninitialized): option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 219.423447][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805686f400: rx timeout, send abort [ 219.432308][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88805686f400: 0x3fe02: (3) A timeout occurred and this is the connection abort to close the session. [ 219.567820][T10603] netlink: 'syz.2.1248': attribute type 1 has an invalid length. [ 219.616986][T10603] netlink: 'syz.2.1248': attribute type 3 has an invalid length. [ 219.655491][T10603] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1248'. [ 219.665571][T10605] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1247'. [ 220.001236][T10640] netlink: 'syz.5.1254': attribute type 1 has an invalid length. [ 220.017346][T10631] pim6reg: entered allmulticast mode [ 220.130139][T10640] 8021q: adding VLAN 0 to HW filter on device bond3 [ 220.226948][T10640] vlan2: entered allmulticast mode [ 220.246134][T10640] veth1: entered allmulticast mode [ 220.269532][T10640] bond3: (slave vlan2): Opening slave failed [ 220.307391][T10653] sctp: [Deprecated]: syz.2.1257 (pid 10653) Use of struct sctp_assoc_value in delayed_ack socket option. [ 220.307391][T10653] Use struct sctp_sack_info instead [ 220.680475][T10668] geneve2: entered promiscuous mode [ 220.712054][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805686fc00: rx timeout, send abort [ 220.720512][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88805686fc00: 0x3fe02: (3) A timeout occurred and this is the connection abort to close the session. [ 220.970095][T10684] wg1: entered promiscuous mode [ 220.979255][T10684] wg1: entered allmulticast mode [ 221.196788][T10697] netlink: 'syz.6.1272': attribute type 2 has an invalid length. [ 221.319500][T10697] openvswitch: netlink: Missing key (keys=40, expected=100) [ 221.999838][ C1] vcan0: j1939_tp_rxtimer: 0xffff888057aa3400: rx timeout, send abort [ 222.008796][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888057aa3400: 0x3fe02: (3) A timeout occurred and this is the connection abort to close the session. [ 222.154456][T10747] netlink: 'syz.5.1286': attribute type 4 has an invalid length. [ 222.219845][T10747] netlink: 'syz.5.1286': attribute type 4 has an invalid length. [ 222.639300][T10767] __nla_validate_parse: 13 callbacks suppressed [ 222.639322][T10767] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1293'. [ 222.657889][T10769] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1294'. [ 223.294495][ C1] vcan0: j1939_tp_rxtimer: 0xffff888056534000: rx timeout, send abort [ 223.303326][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888056534000: 0x3fe02: (3) A timeout occurred and this is the connection abort to close the session. [ 223.816812][T10778] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1296'. [ 223.951272][T10772] lo speed is unknown, defaulting to 1000 [ 224.054160][T10786] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1301'. [ 224.087880][T10786] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1301'. [ 224.172177][T10792] unsupported nla_type 52263 [ 224.392232][T10795] tipc: Enabled bearer , priority 12 [ 224.468866][T10797] netlink: 192 bytes leftover after parsing attributes in process `syz.6.1305'. [ 224.555393][T10801] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1306'. [ 224.581991][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805656d400: rx timeout, send abort [ 224.590391][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88805656d400: 0x3fe02: (3) A timeout occurred and this is the connection abort to close the session. [ 224.650994][T10797] netlink: 288 bytes leftover after parsing attributes in process `syz.6.1305'. [ 224.774180][T10813] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1310'. [ 225.669386][T10845] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1320'. [ 225.875970][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805656cc00: rx timeout, send abort [ 225.884744][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88805656cc00: 0x3fe02: (3) A timeout occurred and this is the connection abort to close the session. [ 225.938597][T10860] sctp: [Deprecated]: syz.5.1324 (pid 10860) Use of struct sctp_assoc_value in delayed_ack socket option. [ 225.938597][T10860] Use struct sctp_sack_info instead [ 226.757490][T10897] netlink: 'syz.5.1337': attribute type 1 has an invalid length. [ 226.783210][T10904] tipc: Enabling of bearer rejected, failed to enable media [ 227.163870][ C1] vcan0: j1939_tp_rxtimer: 0xffff888056452400: rx timeout, send abort [ 227.172447][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888056452400: 0x3fe02: (3) A timeout occurred and this is the connection abort to close the session. [ 227.646556][T10948] __nla_validate_parse: 13 callbacks suppressed [ 227.646579][T10948] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1347'. [ 227.825772][T10953] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1348'. [ 227.885579][T10954] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.1350'. [ 227.900790][T10960] netlink: 'syz.4.1351': attribute type 1 has an invalid length. [ 228.109006][T10960] bond4: entered promiscuous mode [ 228.120931][T10960] 8021q: adding VLAN 0 to HW filter on device bond4 [ 228.145569][T10955] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 228.188964][T10965] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 228.249144][T10979] tipc: Enabled bearer , priority 0 [ 228.292725][T10976] netlink: 'syz.1.1354': attribute type 4 has an invalid length. [ 228.301384][T10639] netdevsim netdevsim6 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 228.321227][T10639] netdevsim netdevsim6 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 228.358771][T10639] netdevsim netdevsim6 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 228.378337][T10974] syzkaller0: entered promiscuous mode [ 228.385355][T10974] syzkaller0: entered allmulticast mode [ 228.393734][T10639] netdevsim netdevsim6 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 228.418497][T10987] netlink: 3 bytes leftover after parsing attributes in process `syz.4.1357'. [ 228.435352][T10987] openvswitch: netlink: Actions may not be safe on all matching packets [ 228.449076][ C1] vcan0: j1939_tp_rxtimer: 0xffff888056453000: rx timeout, send abort [ 228.457636][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888056453000: 0x3fe02: (3) A timeout occurred and this is the connection abort to close the session. [ 228.485385][T10977] tipc: Resetting bearer [ 228.509379][T10970] tipc: Resetting bearer [ 228.560383][T10970] tipc: Disabling bearer [ 228.632216][T10995] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1360'. [ 228.735801][T11003] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1360'. [ 228.882328][T11011] netlink: 'syz.5.1361': attribute type 1 has an invalid length. [ 228.919139][T11011] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1361'. [ 229.168409][T11021] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1363'. [ 229.266806][T11030] sock: sock_set_timeout: `syz.5.1364' (pid 11030) tries to set negative timeout [ 229.464755][T11033] netlink: 68 bytes leftover after parsing attributes in process `syz.6.1368'. [ 229.668410][T11045] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1366'. [ 229.739228][ C1] vcan0: j1939_tp_rxtimer: 0xffff888030309400: rx timeout, send abort [ 229.748006][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888030309400: 0x3fe02: (3) A timeout occurred and this is the connection abort to close the session. [ 229.830740][T11037] veth1_to_hsr: entered allmulticast mode [ 230.485815][T11088] netlink: 'syz.5.1382': attribute type 1 has an invalid length. [ 231.126015][ C1] vcan0: j1939_tp_rxtimer: 0xffff888030308800: rx timeout, send abort [ 231.193532][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888030308800: 0x3fe02: (3) A timeout occurred and this is the connection abort to close the session. [ 231.538074][T11139] netlink: 'syz.4.1396': attribute type 1 has an invalid length. [ 231.575358][T11144] netlink: 'syz.6.1399': attribute type 1 has an invalid length. [ 231.623293][T11144] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 231.670428][T11139] bond5: entered promiscuous mode [ 231.671204][T11148] netlink: 'syz.1.1400': attribute type 21 has an invalid length. [ 231.696151][T11139] 8021q: adding VLAN 0 to HW filter on device bond5 [ 231.720018][T11139] netlink: 'syz.4.1396': attribute type 11 has an invalid length. [ 231.779682][T11148] netlink: 'syz.1.1400': attribute type 6 has an invalid length. [ 231.960970][T11164] macvlan0: entered promiscuous mode [ 231.967692][T11164] macvlan0: entered allmulticast mode [ 232.127251][T11139] syzkaller1: entered promiscuous mode [ 232.133108][T11139] syzkaller1: entered allmulticast mode [ 232.473137][ C1] vcan0: j1939_tp_rxtimer: 0xffff88801fb03400: rx timeout, send abort [ 232.488085][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88801fb03400: 0x3fe02: (3) A timeout occurred and this is the connection abort to close the session. [ 232.950568][T11216] dvmrp0: entered allmulticast mode [ 232.975901][T11207] __nla_validate_parse: 8 callbacks suppressed [ 232.975921][T11207] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1417'. [ 233.701309][T11258] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1428'. [ 233.748388][T11258] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1428'. [ 233.771811][ C1] vcan0: j1939_tp_rxtimer: 0xffff88806e465c00: rx timeout, send abort [ 233.780316][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88806e465c00: 0x3fe02: (3) A timeout occurred and this is the connection abort to close the session. [ 233.781641][T11258] netlink: 'syz.6.1428': attribute type 6 has an invalid length. [ 233.886549][T11261] tipc: Enabled bearer , priority 0 [ 233.906041][T11261] syzkaller0: entered promiscuous mode [ 233.934202][T11264] netlink: 'syz.5.1430': attribute type 6 has an invalid length. [ 233.942307][T11261] syzkaller0: entered allmulticast mode [ 233.958190][T11264] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.1430'. [ 234.096592][T11261] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.120613][T11264] syzkaller1: entered promiscuous mode [ 234.128567][T11264] syzkaller1: entered allmulticast mode [ 234.137908][T11269] netdevsim netdevsim6 : renamed from netdevsim0 (while UP) [ 234.182687][T11266] tipc: Resetting bearer [ 234.220515][T11261] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.288633][T11261] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.396729][T11261] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.639616][T10636] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.650421][T11287] netlink: 'syz.4.1435': attribute type 10 has an invalid length. [ 234.670535][T11259] tipc: Resetting bearer [ 234.689499][T11287] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1435'. [ 234.745952][T11259] tipc: Disabling bearer [ 234.807612][T11287] batadv0: entered promiscuous mode [ 234.822436][T11287] batadv0: entered allmulticast mode [ 234.837628][T11294] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1435'. [ 234.857905][T11287] bridge0: port 3(batadv0) entered blocking state [ 234.877808][T11287] bridge0: port 3(batadv0) entered disabled state [ 234.889209][T11287] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 234.974755][T10634] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.055923][ C1] vcan0: j1939_tp_rxtimer: 0xffff88806e467400: rx timeout, send abort [ 235.064543][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88806e467400: 0x3fe02: (3) A timeout occurred and this is the connection abort to close the session. [ 235.137619][T10634] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.187297][T11317] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1438'. [ 235.216824][T11312] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 235.252025][T11316] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1438'. [ 235.385487][T11313] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 235.481932][T10635] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.510826][T11300] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1437'. [ 235.898197][T11342] tipc: Enabling of bearer rejected, failed to enable media [ 235.943610][T11347] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1445'. [ 235.986609][T11344] tipc: Enabling of bearer rejected, failed to enable media [ 236.348116][ C1] vcan0: j1939_tp_rxtimer: 0xffff88806e466000: rx timeout, send abort [ 236.356701][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88806e466000: 0x3fe02: (3) A timeout occurred and this is the connection abort to close the session. [ 236.575610][T11360] 8021q: adding VLAN 0 to HW filter on device bond4 [ 236.671340][T11367] 8021q: adding VLAN 0 to HW filter on device bond4 [ 236.703524][T11367] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address [ 236.736220][T11367] bond4: (slave vxcan3): Error -95 calling set_mac_address [ 236.838594][T11360] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 237.644412][ C1] vcan0: j1939_tp_rxtimer: 0xffff888031af5400: rx timeout, send abort [ 237.661696][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888031af5400: 0x3fe02: (3) A timeout occurred and this is the connection abort to close the session. [ 238.094737][T11428] __nla_validate_parse: 2 callbacks suppressed [ 238.094842][T11428] netlink: 696 bytes leftover after parsing attributes in process `syz.6.1469'. [ 238.203120][T11428] netlink: 'syz.6.1469': attribute type 1 has an invalid length. [ 238.684076][T11463] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1477'. [ 238.714204][T11463] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1477'. [ 238.729641][T11465] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1478'. [ 238.742264][T11466] team_slave_0: entered promiscuous mode [ 238.748138][T11466] team_slave_1: entered promiscuous mode [ 238.756755][T11466] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 238.765034][T11466] team0: Device macvtap1 is already an upper device of the team interface [ 238.789384][T11466] team_slave_0: left promiscuous mode [ 238.794929][T11466] team_slave_1: left promiscuous mode [ 238.940253][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807b2ca000: rx timeout, send abort [ 238.949453][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88807b2ca000: 0x3fe02: (3) A timeout occurred and this is the connection abort to close the session. [ 239.126957][T11474] sch_tbf: burst 19920 is lower than device lo mtu (11337746) ! [ 239.191937][T11476] netlink: 1044 bytes leftover after parsing attributes in process `syz.5.1482'. [ 239.303636][T11484] netlink: 232 bytes leftover after parsing attributes in process `syz.5.1482'. [ 239.434061][T11490] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1488'. [ 239.479982][T11490] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1488'. [ 239.631126][T11502] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1490'. [ 239.736434][T11502] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1490'. [ 240.014083][T11514] netlink: 'syz.2.1493': attribute type 83 has an invalid length. [ 240.112061][T11522] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 240.193722][T11527] hsr_slave_0: left promiscuous mode [ 240.231084][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805730e000: rx timeout, send abort [ 240.239843][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88805730e000: 0x3fe02: (3) A timeout occurred and this is the connection abort to close the session. [ 240.271747][T11527] hsr_slave_1: left promiscuous mode [ 240.703477][T11549] tipc: Enabled bearer , priority 0 [ 240.730565][T11549] syzkaller0: entered promiscuous mode [ 240.761171][T11549] syzkaller0: entered allmulticast mode [ 240.783770][T11549] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1514) ! [ 240.832181][T11549] tipc: Resetting bearer [ 240.847573][T11548] tipc: Resetting bearer [ 240.913399][T11548] tipc: Disabling bearer [ 241.528499][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807db08800: rx timeout, send abort [ 241.537197][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88807db08800: 0x3fe02: (3) A timeout occurred and this is the connection abort to close the session. [ 241.789053][T11600] netlink: 'syz.2.1516': attribute type 10 has an invalid length. [ 242.167102][T11614] netlink: 'syz.4.1522': attribute type 1 has an invalid length. [ 242.225218][T11618] netlink: 'syz.2.1523': attribute type 1 has an invalid length. [ 242.283851][T11624] netlink: 'syz.6.1525': attribute type 1 has an invalid length. [ 242.303003][T11618] netlink: zone id is out of range [ 242.308378][T11618] netlink: zone id is out of range [ 242.314943][T11618] netlink: del zone limit has 4 unknown bytes [ 242.330519][T11618] netlink: 'syz.2.1523': attribute type 1 has an invalid length. [ 242.348731][T11618] netlink: 'syz.2.1523': attribute type 2 has an invalid length. [ 242.380858][T11618] netlink: 'syz.2.1523': attribute type 1 has an invalid length. [ 242.408114][T11618] netlink: 'syz.2.1523': attribute type 2 has an invalid length. [ 242.643183][T11636] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode [ 242.681680][T11636] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode [ 242.813215][T11641] tipc: Started in network mode [ 242.818393][T11641] tipc: Node identity 061dd9ccd44a, cluster identity 3 [ 242.825493][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807db08000: rx timeout, send abort [ 242.834547][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88807db08000: 0x3fe02: (3) A timeout occurred and this is the connection abort to close the session. [ 242.868801][T11641] tipc: Enabled bearer , priority 0 [ 242.985146][T11641] syzkaller0: entered promiscuous mode [ 242.998267][T11641] syzkaller0: entered allmulticast mode [ 243.045192][T11648] tipc: Resetting bearer [ 243.085286][T11638] tipc: Resetting bearer [ 243.163683][T11638] tipc: Disabling bearer [ 243.259652][T11670] __nla_validate_parse: 13 callbacks suppressed [ 243.259674][T11670] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1536'. [ 243.291944][T11671] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.1537'. [ 243.303174][T11672] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1538'. [ 243.486180][T11681] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1539'. [ 244.017438][T11702] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1545'. [ 244.101091][ C1] vcan0: j1939_tp_rxtimer: 0xffff88806ea3a800: rx timeout, send abort [ 244.109623][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88806ea3a800: 0x3fe02: (3) A timeout occurred and this is the connection abort to close the session. [ 244.139258][T11702] bridge_slave_0: left allmulticast mode [ 244.150275][T11702] bridge_slave_0: left promiscuous mode [ 244.168487][T11702] bridge0: port 1(bridge_slave_0) entered disabled state [ 244.977863][T11719] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1552'. [ 245.092996][T11726] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0001 with DS=0x2 [ 245.185508][T11731] validate_nla: 1 callbacks suppressed [ 245.185530][T11731] netlink: 'syz.4.1556': attribute type 32 has an invalid length. [ 245.219200][T11731] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1556'. [ 245.387204][ C1] vcan0: j1939_tp_rxtimer: 0xffff888056ee4000: rx timeout, send abort [ 245.395931][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888056ee4000: 0x3fe02: (3) A timeout occurred and this is the connection abort to close the session. [ 245.506146][T11731] (unnamed net_device) (uninitialized): option coupled_control: invalid value (52) [ 246.046453][T11775] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1566'. [ 246.278972][T11787] netlink: 'syz.4.1570': attribute type 8 has an invalid length. [ 246.301027][T11787] syzkaller0: entered promiscuous mode [ 246.307271][T11787] syzkaller0: entered allmulticast mode [ 246.338903][T11787] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 246.390255][T11791] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1571'. [ 246.685494][ C1] vcan0: j1939_tp_rxtimer: 0xffff888032d58c00: rx timeout, send abort [ 246.701578][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888032d58c00: 0x3fe02: (3) A timeout occurred and this is the connection abort to close the session. [ 247.003964][T11810] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1578'. [ 247.031373][T11810] netlink: 'syz.2.1578': attribute type 4 has an invalid length. [ 247.272908][T11822] openvswitch: netlink: VXLAN extension 1 has unexpected len 0 expected 4 [ 247.880136][T11851] netlink: 'syz.1.1586': attribute type 1 has an invalid length. [ 247.989136][ C1] vcan0: j1939_tp_rxtimer: 0xffff888032d5a800: rx timeout, send abort [ 247.997902][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888032d5a800: 0x3fe02: (3) A timeout occurred and this is the connection abort to close the session. [ 248.352049][T11873] __nla_validate_parse: 6 callbacks suppressed [ 248.352070][T11873] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1595'. [ 248.395432][T11871] openvswitch: netlink: Flow actions attr not present in new flow. [ 248.449669][T11877] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1598'. [ 248.667269][T11885] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1600'. [ 248.727925][T11885] IPVS: set_ctl: invalid protocol: 98 172.20.20.170:20003 [ 248.758014][T11885] netlink: 112 bytes leftover after parsing attributes in process `syz.2.1600'. [ 248.914909][T11898] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1602'. [ 248.938599][T11898] netlink: 'syz.1.1602': attribute type 1 has an invalid length. [ 248.986584][T11898] netlink: 108 bytes leftover after parsing attributes in process `syz.1.1602'. [ 249.034927][T11893] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1602'. [ 249.044429][T11903] wg1: entered promiscuous mode [ 249.049338][T11903] wg1: entered allmulticast mode [ 249.242681][T11910] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1609'. [ 249.287460][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805e886000: rx timeout, send abort [ 249.296191][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88805e886000: 0x3fe02: (3) A timeout occurred and this is the connection abort to close the session. [ 249.421937][T11917] tipc: Enabling of bearer rejected, failed to enable media [ 250.227067][T11954] sch_fq: defrate 0 ignored. [ 250.565173][T11969] bond2: entered promiscuous mode [ 250.570430][T11969] bond2: entered allmulticast mode [ 250.576099][ C1] vcan0: j1939_tp_rxtimer: 0xffff88806e8c6400: rx timeout, send abort [ 250.584689][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88806e8c6400: 0x3fe02: (3) A timeout occurred and this is the connection abort to close the session. [ 250.601062][T11969] 8021q: adding VLAN 0 to HW filter on device bond2 [ 251.138156][T11983] team0: Device vti0 is up. Set it down before adding it as a team port [ 251.176075][ T36] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.189660][ T36] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 20000 - 0 [ 251.211852][ T36] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.255251][ T36] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 20000 - 0 [ 251.307193][ T36] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.357623][ T36] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 20000 - 0 [ 251.395484][ T36] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.434584][ T36] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 20000 - 0 [ 251.800875][ T30] audit: type=1804 audit(1755595032.000:5): pid=12033 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.1635" name="/newroot/358/memory.events" dev="tmpfs" ino=1838 res=1 errno=0 [ 251.852034][ T30] audit: type=1800 audit(1755595032.000:6): pid=12033 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1635" name="memory.events" dev="tmpfs" ino=1838 res=0 errno=0 [ 251.874340][ C1] vcan0: j1939_tp_rxtimer: 0xffff88806e8c6c00: rx timeout, send abort [ 251.882775][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88806e8c6c00: 0x3fe02: (3) A timeout occurred and this is the connection abort to close the session. [ 252.165159][T12046] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1639'. [ 252.177461][T12045] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1638'. [ 252.438049][T12062] netlink: 'syz.2.1641': attribute type 4 has an invalid length. [ 252.492560][T12054] netlink: 'syz.2.1641': attribute type 1 has an invalid length. [ 252.688047][T12077] tipc: Enabling of bearer rejected, media not registered [ 252.778108][T12082] blkio.reset_stats is deprecated [ 252.922762][T12090] sctp: [Deprecated]: syz.4.1652 (pid 12090) Use of struct sctp_assoc_value in delayed_ack socket option. [ 252.922762][T12090] Use struct sctp_sack_info instead [ 252.988514][T12096] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 253.151041][ C1] vcan0: j1939_tp_rxtimer: 0xffff888078853400: rx timeout, send abort [ 253.159689][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888078853400: 0x3fe02: (3) A timeout occurred and this is the connection abort to close the session. [ 253.224545][T12105] openvswitch: netlink: Unknown nsh attribute 0 [ 253.236847][T12105] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 253.271082][T12105] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0x5 [ 253.510821][T12122] __nla_validate_parse: 6 callbacks suppressed [ 253.510842][T12122] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1661'. [ 253.746664][T12127] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1663'. [ 253.879204][T12137] tipc: Enabled bearer , priority 0 [ 254.012907][T12135] tipc: Disabling bearer [ 254.844928][T12171] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1676'. [ 254.994323][T12173] netlink: 72 bytes leftover after parsing attributes in process `syz.5.1677'. [ 255.327688][T12187] netlink: 'syz.5.1680': attribute type 29 has an invalid length. [ 255.338419][T12187] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1680'. [ 255.338593][T12184] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1681'. [ 255.407107][T12189] netlink: 'syz.5.1680': attribute type 29 has an invalid length. [ 255.462355][T12192] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1683'. [ 255.466567][T12189] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1680'. [ 255.492983][T12194] bridge0: failed insert local address into bridge forwarding table [ 255.842988][T12208] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1685'. [ 255.864413][T12208] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1685'. [ 256.567934][ T24] IPVS: starting estimator thread 0... [ 256.606953][T12242] 8021q: adding VLAN 0 to HW filter on device bond0 [ 256.662160][T12236] IPVS: using max 29 ests per chain, 69600 per kthread [ 256.827772][T12250] netlink: 'syz.4.1696': attribute type 4 has an invalid length. [ 257.058488][T12257] tipc: Enabled bearer , priority 0 [ 257.106096][T12257] syzkaller0: entered promiscuous mode [ 257.130757][T12257] syzkaller0: entered allmulticast mode [ 257.208899][ T5864] IPVS: starting estimator thread 0... [ 257.219922][T12260] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 257.227236][T12265] IPVS: set_ctl: invalid protocol: 0 255.255.255.255:20002 [ 257.243999][T12267] tipc: Resetting bearer [ 257.311676][T12266] IPVS: using max 27 ests per chain, 64800 per kthread [ 257.420252][T12255] tipc: Resetting bearer [ 257.532801][T12255] tipc: Disabling bearer [ 257.671499][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 258.513506][T12311] __nla_validate_parse: 9 callbacks suppressed [ 258.513526][T12311] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1712'. [ 258.654354][T12313] openvswitch: netlink: IPv6 tunnel dst address is zero [ 258.664759][T12313] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1713'. [ 258.708313][T12320] TCP: TCP_TX_DELAY enabled [ 258.711655][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 259.221817][T12347] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1722'. [ 259.266499][T12347] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1722'. [ 259.299707][T12352] lo speed is unknown, defaulting to 1000 [ 259.315611][T12354] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 259.460474][T12359] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1726'. [ 259.482853][T12360] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1725'. [ 259.747396][T12367] netlink: 'syz.1.1728': attribute type 1 has an invalid length. [ 259.751848][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 260.004276][T12371] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1729'. [ 260.791502][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 260.832563][T12404] netlink: 'syz.2.1740': attribute type 1 has an invalid length. [ 260.898879][T12409] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1742'. [ 260.913188][T12410] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1740'. [ 260.957488][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 260.964153][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 260.975218][T12412] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1742'. [ 261.095869][T12409] geneve3: entered promiscuous mode [ 261.395597][T12432] Bluetooth: hci1: Opcode 0x0401 failed: -4 [ 261.606750][T12438] netlink: 'syz.5.1750': attribute type 1 has an invalid length. [ 261.831799][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 261.846628][T12453] netlink: 'syz.2.1755': attribute type 1 has an invalid length. [ 261.942702][T12459] bond3: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 262.101375][T12008] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 262.101811][T12453] 8021q: adding VLAN 0 to HW filter on device bond3 [ 262.224055][T12011] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 262.822488][T12499] ieee802154 phy0 wpan0: encryption failed: -22 [ 262.871513][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 262.949230][T12506] netlink: 'syz.2.1769': attribute type 3 has an invalid length. [ 263.431998][ T51] Bluetooth: hci1: command 0x0401 tx timeout [ 263.911741][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 264.951538][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 265.163379][T12544] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 265.264657][T12552] policy can only be matched on NF_INET_PRE_ROUTING [ 265.301759][T12552] unable to load match [ 265.302140][T12558] sctp: [Deprecated]: syz.2.1783 (pid 12558) Use of struct sctp_assoc_value in delayed_ack socket option. [ 265.302140][T12558] Use struct sctp_sack_info instead [ 265.660238][T12580] __nla_validate_parse: 8 callbacks suppressed [ 265.660261][T12580] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1786'. [ 265.707793][T12580] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1786'. [ 265.938974][T12591] vlan4: entered promiscuous mode [ 265.967354][T12591] bridge0: entered promiscuous mode [ 265.991904][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 266.002193][T12591] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1788'. [ 266.027662][T12593] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1790'. [ 266.079999][T12598] netlink: 'syz.5.1791': attribute type 1 has an invalid length. [ 266.111750][T12598] netlink: 'syz.5.1791': attribute type 2 has an invalid length. [ 266.136203][T12602] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1792'. [ 266.375148][T12616] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1794'. [ 266.387459][T12619] netlink: 'syz.6.1796': attribute type 15 has an invalid length. [ 266.612580][T12622] sctp: [Deprecated]: syz.2.1797 (pid 12622) Use of int in maxseg socket option. [ 266.612580][T12622] Use struct sctp_assoc_value instead [ 266.822709][T12633] tipc: Enabled bearer , priority 0 [ 266.831132][T12633] syzkaller0: entered promiscuous mode [ 266.851085][T12633] syzkaller0: entered allmulticast mode [ 266.888084][T12633] tipc: Resetting bearer [ 266.906965][T12632] tipc: Resetting bearer [ 266.936955][T12632] tipc: Disabling bearer [ 267.031608][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 267.068311][T12647] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 267.086722][T12648] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 267.132919][T12647] netlink: 'syz.1.1806': attribute type 1 has an invalid length. [ 267.150978][T12647] netlink: 184 bytes leftover after parsing attributes in process `syz.1.1806'. [ 267.418045][T12664] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1813'. [ 267.478846][T12664] geneve2: entered promiscuous mode [ 267.632086][T12679] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 267.900358][T12691] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1821'. [ 267.968013][T12690] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1819'. [ 268.071622][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 268.443309][T12716] bond3: (slave ip6gretap1): Removing an active aggregator [ 268.471137][T12716] bond3: (slave ip6gretap1): Releasing backup interface [ 268.558460][T12727] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 268.561616][T12731] delete_channel: no stack [ 268.766137][T12727] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 268.840366][T12741] atomic_op ffff88807cb73198 conn xmit_atomic 0000000000000000 [ 268.908553][T12735] sch_tbf: burst 4 is lower than device ip6tnl0 mtu (1452) ! [ 269.111491][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 269.214003][T12755] netlink: 'syz.4.1839': attribute type 1 has an invalid length. [ 269.247475][T12756] dvmrp1: entered allmulticast mode [ 269.494750][T12763] tipc: Enabled bearer , priority 0 [ 269.536918][T12763] syzkaller0: entered promiscuous mode [ 269.548316][T12763] syzkaller0: entered allmulticast mode [ 269.660654][T12774] netlink: 'syz.6.1845': attribute type 1 has an invalid length. [ 269.710765][T12763] tipc: Resetting bearer [ 269.723788][T12781] netlink: 'syz.6.1845': attribute type 1 has an invalid length. [ 269.741908][T12762] tipc: Resetting bearer [ 269.807633][T12762] tipc: Disabling bearer [ 270.151637][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 270.244058][T12797] netlink: 'syz.4.1848': attribute type 10 has an invalid length. [ 271.191842][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 271.238413][T12825] __nla_validate_parse: 3 callbacks suppressed [ 271.238436][T12825] netlink: 9 bytes leftover after parsing attributes in process `syz.2.1856'. [ 271.290799][T12825] gretap0: entered promiscuous mode [ 271.540349][T12838] netlink: 'syz.5.1862': attribute type 10 has an invalid length. [ 271.584559][T12837] sit0: entered promiscuous mode [ 271.613052][T12837] netlink: 'syz.6.1861': attribute type 1 has an invalid length. [ 271.650876][T12837] netlink: 1 bytes leftover after parsing attributes in process `syz.6.1861'. [ 271.692759][T12842] netlink: 'syz.6.1861': attribute type 1 has an invalid length. [ 271.741881][T12842] netlink: 136 bytes leftover after parsing attributes in process `syz.6.1861'. [ 271.764297][T12842] netlink: 'syz.6.1861': attribute type 2 has an invalid length. [ 271.780148][T12842] netlink: 'syz.6.1861': attribute type 1 has an invalid length. [ 271.850358][T12842] netlink: 'syz.6.1861': attribute type 7 has an invalid length. [ 272.206273][T12842] : entered promiscuous mode [ 272.226605][T12853] tipc: Enabled bearer , priority 0 [ 272.231798][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 272.273954][T12853] syzkaller0: entered promiscuous mode [ 272.279473][T12853] syzkaller0: entered allmulticast mode [ 272.354096][T12853] tipc: Resetting bearer [ 272.364655][T12852] tipc: Resetting bearer [ 272.428952][T12852] tipc: Disabling bearer [ 272.628130][T12872] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1872'. [ 272.665869][T12868] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1870'. [ 272.676374][T12868] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:0000 [ 272.682262][T12872] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1872'. [ 272.692476][T12868] tipc: Enabled bearer , priority 10 [ 272.895929][T12883] netlink: 'syz.4.1875': attribute type 1 has an invalid length. [ 272.935062][T12884] netlink: 252 bytes leftover after parsing attributes in process `syz.5.1874'. [ 272.992712][T12892] netlink: 'syz.1.1877': attribute type 10 has an invalid length. [ 273.003948][T12893] sctp: [Deprecated]: syz.6.1876 (pid 12893) Use of int in max_burst socket option deprecated. [ 273.003948][T12893] Use struct sctp_assoc_value instead [ 273.046890][T12892] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1877'. [ 273.267746][T12898] netlink: 'syz.6.1879': attribute type 15 has an invalid length. [ 273.271652][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 273.292415][T12898] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1879'. [ 273.382698][T12906] sit0: entered promiscuous mode [ 273.394600][T12906] netlink: 'syz.5.1881': attribute type 1 has an invalid length. [ 273.435308][T12906] netlink: 1 bytes leftover after parsing attributes in process `syz.5.1881'. [ 273.832791][T12931] netdevsim netdevsim1: Firmware load for '..' refused, path contains '..' component [ 273.873200][T12933] nftables ruleset with unbound chain [ 273.927795][T12939] rose0: entered promiscuous mode [ 274.310123][T12966] sit2: entered promiscuous mode [ 274.317298][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 274.365199][T12966] sit2: entered allmulticast mode [ 275.208677][T13016] Bluetooth: hci1: Opcode 0x0401 failed: -4 [ 275.219872][T13015] syzkaller0: entered promiscuous mode [ 275.234581][T13015] syzkaller0: entered allmulticast mode [ 275.351591][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 276.290920][T13071] syzkaller0: entered allmulticast mode [ 276.323920][T13067] syzkaller0: mtu greater than device maximum [ 276.391490][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 276.470188][T13075] __nla_validate_parse: 10 callbacks suppressed [ 276.470206][T13075] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1932'. [ 276.681202][T13094] validate_nla: 6 callbacks suppressed [ 276.681222][T13094] netlink: 'syz.2.1936': attribute type 1 has an invalid length. [ 276.862196][T13095] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1933'. [ 276.884408][T13093] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1934'. [ 277.035608][T13108] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1938'. [ 277.082373][T13111] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1939'. [ 277.174426][T13118] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1940'. [ 277.216342][T13117] syzkaller1: entered promiscuous mode [ 277.222101][T13117] syzkaller1: entered allmulticast mode [ 277.266938][T13120] netlink: 81 bytes leftover after parsing attributes in process `syz.6.1942'. [ 277.271920][ T51] Bluetooth: hci1: command 0x0401 tx timeout [ 277.394405][T13127] netlink: 212376 bytes leftover after parsing attributes in process `syz.5.1944'. [ 277.431620][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 277.680169][T13140] (unnamed net_device) (uninitialized): peer notification delay (1164) is not a multiple of miimon (100), value rounded to 1100 ms [ 277.784536][T13140] smc: adding net device bond0 with user defined pnetid SYZ2 [ 277.795822][T13140] bond0: entered promiscuous mode [ 277.800979][T13140] bond0: entered allmulticast mode [ 277.806886][T13140] 8021q: adding VLAN 0 to HW filter on device bond0 [ 278.091972][T13156] netlink: 'syz.1.1955': attribute type 4 has an invalid length. [ 278.154534][T13159] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 278.174731][T13159] netlink: 'syz.4.1956': attribute type 21 has an invalid length. [ 278.183793][T13159] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1956'. [ 278.229590][T13164] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 278.243946][T13156] syzkaller0: entered promiscuous mode [ 278.249454][T13156] syzkaller0: entered allmulticast mode [ 278.350255][T13156] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 278.471639][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 279.403913][T13194] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1964'. [ 279.484362][T13200] openvswitch: netlink: Flow key attr not present in new flow. [ 279.511664][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 279.550489][T13205] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 4032 [ 279.677703][T13201] : entered promiscuous mode [ 279.823238][T13219] netlink: 'syz.1.1971': attribute type 1 has an invalid length. [ 279.980806][T13224] bond4: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 280.058659][T13231] veth5: entered promiscuous mode [ 280.070372][T13231] bond4: (slave veth5): Enslaving as a backup interface with a down link [ 280.091768][T12008] bond4: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 280.121996][T13224] 8021q: adding VLAN 0 to HW filter on device bond4 [ 280.241822][T12010] bond4: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 280.375517][T13244] team0: Device vti0 is of different type [ 280.551610][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 280.704664][T13260] netlink: 'syz.2.1983': attribute type 5 has an invalid length. [ 280.743827][T13264] netlink: 'syz.4.1985': attribute type 1 has an invalid length. [ 280.893661][T13269] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 281.158094][T13283] openvswitch: netlink: Key type 85 is out of range max 32 [ 281.222129][T13287] netlink: 'syz.1.1994': attribute type 21 has an invalid length. [ 281.230210][T13287] netlink: 'syz.1.1994': attribute type 4 has an invalid length. [ 281.238131][T13287] netlink: 'syz.1.1994': attribute type 5 has an invalid length. [ 281.248067][T13287] netlink: 'syz.1.1994': attribute type 3 has an invalid length. [ 281.459143][T13297] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 281.591575][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 281.810998][T13312] __nla_validate_parse: 9 callbacks suppressed [ 281.811021][T13312] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2003'. [ 282.078694][T13322] validate_nla: 3 callbacks suppressed [ 282.078714][T13322] netlink: 'syz.5.2007': attribute type 1 has an invalid length. [ 282.133514][T13327] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2007'. [ 282.224363][T13322] netlink: 'syz.5.2007': attribute type 9 has an invalid length. [ 282.267323][T13322] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2007'. [ 282.295121][T13333] tipc: Enabling of bearer rejected, failed to enable media [ 282.459314][T13322] syzkaller0: entered promiscuous mode [ 282.465717][T13322] syzkaller0: entered allmulticast mode [ 282.490605][ T36] syzkaller0: tun_net_xmit 48 [ 282.536088][T13346] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2013'. [ 282.631497][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 283.671494][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 284.235918][T13359] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2016'. [ 284.384953][T13369] smc: net device bond0 applied user defined pnetid SYZ0 [ 284.393477][T13369] smc: net device bond0 erased user defined pnetid SYZ0 [ 284.533278][T13378] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2022'. [ 284.613977][T13378] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2022'. [ 284.711492][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 284.784589][T13382] 8021q: adding VLAN 0 to HW filter on device bond0 [ 284.800408][T13382] bond0: (slave rose0): Enslaving as an active interface with an up link [ 284.844779][T13387] syzkaller1: entered promiscuous mode [ 284.863408][T13387] syzkaller1: entered allmulticast mode [ 284.918737][T13393] netlink: 'syz.6.2028': attribute type 16 has an invalid length. [ 284.920553][T13390] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2024'. [ 284.929325][T13393] netlink: 'syz.6.2028': attribute type 17 has an invalid length. [ 285.003342][T13396] netlink: 'syz.6.2028': attribute type 16 has an invalid length. [ 285.056259][T13396] netlink: 'syz.6.2028': attribute type 17 has an invalid length. [ 285.099369][T13393] sit0: left promiscuous mode [ 285.208198][T13393] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 285.265743][T13396] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 285.670547][T13420] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2035'. [ 285.751503][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 286.009957][T13431] netlink: 211664 bytes leftover after parsing attributes in process `syz.1.2038'. [ 286.245684][T13456] bridge_slave_0: mtu less than device minimum [ 286.298576][T13450] syzkaller0: entered allmulticast mode [ 286.791597][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 286.814664][T13491] __nla_validate_parse: 2 callbacks suppressed [ 286.814683][T13491] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2053'. [ 286.830674][T13493] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2052'. [ 286.852505][T13491] netlink: 272 bytes leftover after parsing attributes in process `syz.6.2053'. [ 286.888293][T13491] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2053'. [ 286.962828][T13502] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2054'. [ 287.235886][T13510] syzkaller0: entered promiscuous mode [ 287.270551][T13510] syzkaller0: entered allmulticast mode [ 287.295038][T13504] lo speed is unknown, defaulting to 1000 [ 287.406322][T13520] netlink: 244 bytes leftover after parsing attributes in process `syz.5.2062'. [ 287.439182][T13518] netlink: 'syz.6.2061': attribute type 28 has an invalid length. [ 287.447820][T13518] netlink: 'syz.6.2061': attribute type 3 has an invalid length. [ 287.461170][T13518] netlink: 132 bytes leftover after parsing attributes in process `syz.6.2061'. [ 287.498054][T13518] netlink: 164 bytes leftover after parsing attributes in process `syz.6.2061'. [ 287.501719][T13521] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 287.584533][T13523] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2063'. [ 287.679900][T13527] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 287.783491][T13531] tipc: New replicast peer: 255.255.255.255 [ 287.826678][T13531] tipc: Enabled bearer , priority 10 [ 287.831774][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 287.947529][T13539] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2066'. [ 288.150669][T13539] geneve3: entered promiscuous mode [ 288.645592][T13578] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 288.655563][T13574] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 288.951947][T11990] tipc: Node number set to 3528972748 [ 289.630367][T13622] netlink: 'syz.5.2090': attribute type 1 has an invalid length. [ 289.673256][T13619] netlink: 'syz.1.2088': attribute type 12 has an invalid length. [ 289.844143][T13632] syzkaller1: entered promiscuous mode [ 289.849668][T13632] syzkaller1: entered allmulticast mode [ 289.894989][T13632] netlink: 'syz.5.2093': attribute type 1 has an invalid length. [ 289.911639][ C1] net_ratelimit: 2 callbacks suppressed [ 289.911660][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 289.974159][T13632] bond6: entered promiscuous mode [ 289.979674][T13632] 8021q: adding VLAN 0 to HW filter on device bond6 [ 290.042428][T13641] netlink: 'syz.6.2096': attribute type 11 has an invalid length. [ 290.076635][T13639] 8021q: adding VLAN 0 to HW filter on device bond6 [ 290.096625][T13639] bond6: (slave wireguard0): The slave device specified does not support setting the MAC address [ 290.116511][T13639] bond6: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 290.134175][T13639] bond6: (slave wireguard0): making interface the new active one [ 290.149699][T13639] wireguard0: entered promiscuous mode [ 290.158184][T13639] bond6: (slave wireguard0): Enslaving as an active interface with an up link [ 290.170465][T13653] netlink: 'syz.4.2098': attribute type 2 has an invalid length. [ 290.209179][T13654] netlink: 'syz.2.2099': attribute type 1 has an invalid length. [ 290.262959][T13649] unknown channel width for channel at 909000KHz? [ 290.442611][T13665] RDS: rds_bind could not find a transport for 400:0:1200:0:1030:0:ffff:ffff, load rds_tcp or rds_rdma? [ 290.933681][T13688] openvswitch: netlink: Flow key attr not present in new flow. [ 290.951514][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 290.992898][T13688] netlink: 'syz.6.2109': attribute type 1 has an invalid length. [ 291.839620][T13753] __nla_validate_parse: 19 callbacks suppressed [ 291.839641][T13753] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2122'. [ 291.991576][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 292.806520][T13767] netlink: 'syz.6.2131': attribute type 1 has an invalid length. [ 292.889205][T13767] 8021q: adding VLAN 0 to HW filter on device bond3 [ 292.899945][T13773] pim6reg1: entered promiscuous mode [ 292.935592][T13773] pim6reg1: entered allmulticast mode [ 293.021597][T13768] bond3: (slave wlan0): Enslaving as an active interface with an up link [ 293.031536][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 293.080365][T13767] vlan0: entered allmulticast mode [ 293.085944][T13767] veth1: entered allmulticast mode [ 293.092189][T13767] veth1: entered promiscuous mode [ 293.103947][T13767] bond3: (slave vlan0): Enslaving as an active interface with an up link [ 293.134661][T13790] tipc: Enabled bearer , priority 0 [ 293.143350][T13784] syzkaller0: entered promiscuous mode [ 293.148862][T13784] syzkaller0: entered allmulticast mode [ 293.496811][T13810] tipc: Bearer : already 2 bearers with priority 10 [ 293.518146][T13810] tipc: Bearer : trying with adjusted priority [ 293.553059][T13810] tipc: Enabling of bearer rejected, failed to enable media [ 293.565130][T13811] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2141'. [ 293.573192][T13813] netlink: 'syz.1.2142': attribute type 13 has an invalid length. [ 293.597364][T13816] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 293.607030][T13813] netlink: 'syz.1.2142': attribute type 58 has an invalid length. [ 293.633867][T13783] tipc: Resetting bearer [ 293.680069][T13813] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2142'. [ 293.743019][T13783] tipc: Disabling bearer [ 293.788834][T13816] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2140'. [ 293.885773][T13827] team0: Device gtp0 is up. Set it down before adding it as a team port [ 294.113256][T13843] netlink: 76 bytes leftover after parsing attributes in process `syz.6.2149'. [ 294.147146][T13843] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2149'. [ 294.164796][T13840] tipc: Enabled bearer , priority 0 [ 294.200899][T13848] netlink: 830 bytes leftover after parsing attributes in process `syz.5.2150'. [ 294.210419][T13843] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2149'. [ 294.228633][T13848] netlink: 'syz.5.2150': attribute type 4 has an invalid length. [ 294.273713][T13840] tipc: Disabling bearer [ 294.316829][T13843] netem: unknown loss type 0 [ 294.329220][T13843] netem: change failed [ 294.508783][T13858] netlink: 'syz.4.2154': attribute type 39 has an invalid length. [ 294.615525][T13867] ieee802154 phy0 wpan0: encryption failed: -22 [ 294.708321][T13874] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2158'. [ 294.861976][T13871] netlink: 60 bytes leftover after parsing attributes in process `syz.6.2158'. [ 295.023677][T13886] openvswitch: netlink: Missing key (keys=40, expected=100) [ 295.167693][T13897] netlink: 'syz.5.2166': attribute type 5 has an invalid length. [ 295.437804][T13889] netlink: 'syz.1.2163': attribute type 6 has an invalid length. [ 295.445882][T13908] netlink: 'syz.6.2168': attribute type 1 has an invalid length. [ 295.608285][T13913] IPVS: set_ctl: invalid protocol: 44 172.20.20.50:20000 [ 296.189191][T13944] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 297.029934][T13998] netlink: 'syz.4.2193': attribute type 11 has an invalid length. [ 297.057327][T13998] __nla_validate_parse: 12 callbacks suppressed [ 297.057349][T13998] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2193'. [ 297.770780][T14041] netlink: 27 bytes leftover after parsing attributes in process `syz.6.2207'. [ 297.810946][T14034] veth0: entered promiscuous mode [ 297.908186][T14050] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2208'. [ 297.985642][T14039] veth0: left promiscuous mode [ 298.231235][T14069] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2213'. [ 298.298108][T14072] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2215'. [ 298.468275][T14078] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2215'. [ 298.806091][T14087] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2218'. [ 298.818117][T14087] syzkaller0: entered promiscuous mode [ 298.823839][T14087] syzkaller0: entered allmulticast mode [ 298.981844][T14091] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2220'. [ 299.077155][T14092] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2220'. [ 299.127590][T14091] geneve2: entered promiscuous mode [ 299.205771][T14102] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2221'. [ 299.379819][T14113] netlink: 'syz.6.2226': attribute type 12 has an invalid length. [ 299.613317][T11990] hid-generic 0005:16C0:5505.0002: item fetching failed at offset 0/1 [ 299.622751][T11990] hid-generic 0005:16C0:5505.0002: probe with driver hid-generic failed with error -22 [ 299.638983][T14131] sock: sock_set_timeout: `syz.2.2233' (pid 14131) tries to set negative timeout [ 300.140316][T14148] openvswitch: netlink: Missing key (keys=40, expected=100) [ 300.233384][T14152] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 300.656273][T14176] tipc: Enabling of bearer rejected, media not registered [ 301.547612][T12007] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 301.742103][T14227] sctp: [Deprecated]: syz.5.2258 (pid 14227) Use of int in maxseg socket option. [ 301.742103][T14227] Use struct sctp_assoc_value instead [ 302.225428][T14234] __nla_validate_parse: 5 callbacks suppressed [ 302.225450][T14234] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2261'. [ 302.252151][T14234] openvswitch: netlink: Actions may not be safe on all matching packets [ 302.619472][ T5867] block nbd0: Receive control failed (result -32) [ 302.673319][T14253] wg1: entered promiscuous mode [ 302.730830][T14258] netlink: 'syz.1.2268': attribute type 13 has an invalid length. [ 302.745934][T14259] netlink: 'syz.1.2268': attribute type 1 has an invalid length. [ 302.765711][T14256] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2269'. [ 302.775513][T14259] netlink: 244 bytes leftover after parsing attributes in process `syz.1.2268'. [ 302.786609][T14260] netlink: 'syz.1.2268': attribute type 1 has an invalid length. [ 302.795835][T14260] netlink: 244 bytes leftover after parsing attributes in process `syz.1.2268'. [ 302.806783][T14258] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2268'. [ 302.822099][T14263] netlink: 'syz.6.2269': attribute type 1 has an invalid length. [ 303.272807][ T5867] Bluetooth: hci1: command 0x0401 tx timeout [ 303.426742][T14284] raw_sendmsg: syz.4.2278 forgot to set AF_INET. Fix it! [ 303.555544][T14292] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2279'. [ 303.584902][T14289] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2280'. [ 303.595185][T14289] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2280'. [ 303.642905][T14298] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2279'. [ 303.927784][T14312] netlink: 'syz.6.2285': attribute type 16 has an invalid length. [ 303.973455][T14312] netlink: 'syz.6.2285': attribute type 17 has an invalid length. [ 303.991854][ T5867] Bluetooth: hci5: command 0x0406 tx timeout [ 304.038145][T14316] openvswitch: netlink: Flow key attr not present in new flow. [ 304.076602][T14312] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 304.122453][T14318] netlink: 64 bytes leftover after parsing attributes in process `syz.5.2286'. [ 304.291895][T14324] geneve2: entered promiscuous mode [ 304.297164][T14324] geneve2: entered allmulticast mode [ 304.922921][T14353] delete_channel: no stack [ 305.064343][T14366] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 305.627398][T14390] bond7: entered promiscuous mode [ 305.674849][T14390] bond7: entered allmulticast mode [ 305.693571][T14390] 8021q: adding VLAN 0 to HW filter on device bond7 [ 305.793260][ T30] audit: type=1800 audit(1755595086.000:7): pid=14399 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2311" name="memory.events" dev="tmpfs" ino=2493 res=0 errno=0 [ 305.882732][ T30] audit: type=1804 audit(1755595086.030:8): pid=14399 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.2311" name="/newroot/489/memory.events" dev="tmpfs" ino=2493 res=1 errno=0 [ 306.363510][T14430] netlink: 'syz.5.2320': attribute type 23 has an invalid length. [ 306.564183][T14436] tipc: Enabled bearer , priority 0 [ 306.687555][T14436] syzkaller0: entered promiscuous mode [ 306.693301][T14436] syzkaller0: entered allmulticast mode [ 306.700660][T14436] tipc: Resetting bearer [ 306.729198][T14433] tipc: Resetting bearer [ 309.120890][T14433] tipc: Disabling bearer [ 309.278241][T14476] __nla_validate_parse: 10 callbacks suppressed [ 309.278262][T14476] netlink: 76 bytes leftover after parsing attributes in process `syz.6.2332'. [ 309.335494][T14476] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2332'. [ 309.376694][T14478] netem: change failed [ 309.445717][T14487] netem: change failed [ 309.604632][T14496] veth1_to_hsr: left allmulticast mode [ 309.707718][T14501] netlink: 14 bytes leftover after parsing attributes in process `syz.4.2337'. [ 309.780976][T14495] can: request_module (can-proto-0) failed. [ 309.826531][T14506] netlink: 165 bytes leftover after parsing attributes in process `syz.1.2341'. [ 309.858715][T14505] netlink: 165 bytes leftover after parsing attributes in process `syz.1.2341'. [ 309.893734][T14505] netlink: 268 bytes leftover after parsing attributes in process `syz.1.2341'. [ 309.963408][T14511] netlink: 300 bytes leftover after parsing attributes in process `syz.6.2343'. [ 310.055405][T14515] netlink: 80 bytes leftover after parsing attributes in process `syz.2.2344'. [ 310.066480][T14513] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2345'. [ 310.085334][T14515] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2344'. [ 310.159297][T14518] sch_tbf: burst 8 is lower than device ip6tnl0 mtu (1452) ! [ 310.609864][T14542] netlink: 'syz.5.2353': attribute type 11 has an invalid length. [ 310.884452][T14555] netlink: 'syz.5.2357': attribute type 1 has an invalid length. [ 310.903046][T14556] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 311.147962][T14572] netlink: 'syz.2.2361': attribute type 13 has an invalid length. [ 311.188232][T14572] netlink: 'syz.2.2361': attribute type 13 has an invalid length. [ 311.419017][T14585] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !寿$ULvyآDUDw}z [ 313.719137][T14725] netlink: 'syz.6.2407': attribute type 1 has an invalid length. [ 314.242062][T14727] team0 (unregistering): Port device team_slave_0 removed [ 314.272125][T14727] team0 (unregistering): Port device team_slave_1 removed [ 314.296586][T14727] team0 (unregistering): Port device bond1 removed [ 314.325650][T14725] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 314.541691][T14756] __nla_validate_parse: 15 callbacks suppressed [ 314.541713][T14756] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2413'. [ 314.586017][T14755] netlink: 'syz.5.2414': attribute type 3 has an invalid length. [ 314.623638][T14756] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2413'. [ 314.645317][T14755] netlink: 256 bytes leftover after parsing attributes in process `syz.5.2414'. [ 314.656037][T14756] netlink: 31 bytes leftover after parsing attributes in process `syz.1.2413'. [ 314.696891][T14756] netlink: 'syz.1.2413': attribute type 3 has an invalid length. [ 314.723195][T14756] netlink: 'syz.1.2413': attribute type 2 has an invalid length. [ 314.768154][T14756] netlink: 31 bytes leftover after parsing attributes in process `syz.1.2413'. [ 314.937248][T14772] netlink: 'syz.2.2419': attribute type 1 has an invalid length. [ 314.945377][T14772] netlink: 236 bytes leftover after parsing attributes in process `syz.2.2419'. [ 315.138218][T14785] tipc: Enabled bearer , priority 0 [ 315.165419][T14790] netlink: 'syz.5.2425': attribute type 6 has an invalid length. [ 315.183185][T14785] syzkaller0: entered promiscuous mode [ 315.189367][T14785] syzkaller0: entered allmulticast mode [ 315.202278][T14786] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2422'. [ 315.269503][T14785] Unsupported ieee802154 address type: 0 [ 315.327958][T14785] bridge4: entered promiscuous mode [ 315.347191][T14785] bridge4: entered allmulticast mode [ 315.389593][T14795] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2426'. [ 315.453174][T14785] tipc: Resetting bearer [ 315.466627][T14801] bridge0: entered allmulticast mode [ 315.498719][T14784] tipc: Resetting bearer [ 315.532296][T14803] netlink: 104 bytes leftover after parsing attributes in process `syz.5.2428'. [ 315.566557][T14784] tipc: Disabling bearer [ 315.620766][T14806] tipc: Enabling of bearer rejected, failed to enable media [ 315.810693][T14820] ipvlan3: entered promiscuous mode [ 316.134161][T14840] netlink: 'syz.5.2437': attribute type 5 has an invalid length. [ 316.362953][T14851] netlink: 72 bytes leftover after parsing attributes in process `syz.5.2441'. [ 316.577505][T14863] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input6 [ 316.890908][T14876] netdevsim0: mtu less than device minimum [ 317.173625][T14892] netlink: 'syz.5.2452': attribute type 2 has an invalid length. [ 317.223147][T14897] netlink: 'syz.4.2453': attribute type 1 has an invalid length. [ 317.323234][T14898] netlink: 'syz.6.2454': attribute type 1 has an invalid length. [ 317.423322][T14907] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 317.782939][T14922] veth1_to_bond: entered allmulticast mode [ 317.790898][T14920] veth1_to_bond: left allmulticast mode [ 317.888246][T14928] : entered promiscuous mode [ 318.023952][T14943] 8021q: VLANs not supported on syzkaller1 [ 322.402703][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 322.409281][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 327.515735][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 341.149404][T14970] __nla_validate_parse: 7 callbacks suppressed [ 341.149428][T14970] netlink: 72 bytes leftover after parsing attributes in process `syz.5.2474'. [ 341.171834][T14969] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2477'. [ 341.181167][T14969] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2477'. [ 341.353240][T14975] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2481'. [ 341.556534][T14987] gretap0: entered promiscuous mode [ 341.933021][T15009] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2493'. [ 342.119075][T15013] validate_nla: 4 callbacks suppressed [ 342.119135][T15013] netlink: 'syz.2.2494': attribute type 11 has an invalid length. [ 342.370563][T15025] netlink: 'syz.6.2498': attribute type 12 has an invalid length. [ 342.944589][T15039] tipc: Bearer : already 2 bearers with priority 10 [ 342.959942][T15039] tipc: Bearer : trying with adjusted priority [ 342.968337][T15039] tipc: Enabled bearer , priority 9 [ 343.030511][T15058] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 343.248670][T15064] tipc: Enabling of bearer rejected, failed to enable media [ 343.333160][T15064] team_slave_0: entered promiscuous mode [ 343.338895][T15064] team_slave_1: entered promiscuous mode [ 343.379175][T15064] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 343.386974][T15064] team0: Device macvtap1 is already an upper device of the team interface [ 343.402054][T15064] team_slave_0: left promiscuous mode [ 343.407694][T15064] team_slave_1: left promiscuous mode [ 343.630545][T15086] lo speed is unknown, defaulting to 1000 [ 343.757321][T15097] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2517'. [ 343.783840][T15097] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2517'. [ 343.849999][T15097] gretap2: entered promiscuous mode [ 343.865902][T15097] gretap2: entered allmulticast mode [ 344.162447][T15112] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2522'. [ 344.216276][T15112] team0: Device vti0 is of different type [ 344.539225][T15129] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2526'. [ 344.564392][T15135] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2529'. [ 344.781009][T15141] IPVS: set_ctl: invalid protocol: 115 255.255.255.255:20002 [ 344.796119][T15141] IPVS: set_ctl: invalid protocol: 115 255.255.255.255:20002 [ 345.233554][T15159] netlink: 'syz.4.2533': attribute type 7 has an invalid length. [ 345.292139][T15159] netlink: 'syz.4.2533': attribute type 8 has an invalid length. [ 345.700114][T15184] netlink: 'syz.2.2540': attribute type 2 has an invalid length. [ 346.314286][T15213] __nla_validate_parse: 134 callbacks suppressed [ 346.314307][T15213] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2551'. [ 346.330231][T15213] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2551'. [ 346.371197][ T59] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 346.381040][T15213] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2551'. [ 346.390284][ T59] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 346.400325][T15213] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2551'. [ 346.417378][ T59] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 346.451934][ T59] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 346.655699][T15226] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2556'. [ 346.693026][T15226] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2556'. [ 346.957238][T15239] netlink: 'syz.6.2562': attribute type 1 has an invalid length. [ 347.052549][T15239] bond4 (unregistering): Released all slaves [ 347.093859][T15240] ip6tnl2: entered promiscuous mode [ 347.096808][T15253] netlink: 'syz.5.2566': attribute type 33 has an invalid length. [ 347.107971][T15240] ip6tnl2: entered allmulticast mode [ 347.747015][T15294] netlink: 80 bytes leftover after parsing attributes in process `syz.2.2575'. [ 347.777152][T15294] netlink: 80 bytes leftover after parsing attributes in process `syz.2.2575'. [ 347.804764][T15294] netlink: 80 bytes leftover after parsing attributes in process `syz.2.2575'. [ 347.819194][T15294] netlink: 80 bytes leftover after parsing attributes in process `syz.2.2575'. [ 347.843549][T15287] (unnamed net_device) (uninitialized): Unable to set down delay as MII monitoring is disabled [ 347.859361][T15302] netlink: 'syz.6.2577': attribute type 16 has an invalid length. [ 347.878362][T15302] netlink: 'syz.6.2577': attribute type 3 has an invalid length. [ 348.372357][T15329] netlink: 'syz.2.2585': attribute type 3 has an invalid length. [ 348.485190][T15340] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 348.640338][T15340] lo speed is unknown, defaulting to 1000 [ 349.136855][T15365] macvlan0: entered promiscuous mode [ 349.178258][T15365] macvlan0: entered allmulticast mode [ 349.427694][T15378] gretap0: entered promiscuous mode [ 349.493641][T15378] netlink: 'syz.6.2604': attribute type 1 has an invalid length. [ 349.838456][T15378] 0{X: renamed from gretap0 [ 349.855466][T15399] netlink: 'syz.4.2607': attribute type 10 has an invalid length. [ 349.866784][T15378] 0{X: left promiscuous mode [ 349.875790][T15378] 0{X: entered allmulticast mode [ 349.911357][T15378] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 349.999408][T15399] batadv0: left promiscuous mode [ 350.004943][T15399] batadv0: left allmulticast mode [ 350.830300][T15442] netlink: 'syz.5.2620': attribute type 21 has an invalid length. [ 350.874272][T15442] netlink: 'syz.5.2620': attribute type 6 has an invalid length. [ 351.227656][T15466] syzkaller1: entered promiscuous mode [ 351.248711][T15466] syzkaller1: entered allmulticast mode [ 351.476165][T15475] __nla_validate_parse: 12 callbacks suppressed [ 351.476186][T15475] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2629'. [ 351.670712][T15488] netlink: 'syz.2.2634': attribute type 6 has an invalid length. [ 351.733222][T15493] netlink: 64 bytes leftover after parsing attributes in process `syz.5.2633'. [ 351.770196][T15495] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2636'. [ 351.892605][T15505] sctp: [Deprecated]: syz.2.2638 (pid 15505) Use of struct sctp_assoc_value in delayed_ack socket option. [ 351.892605][T15505] Use struct sctp_sack_info instead [ 352.270287][T15529] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2645'. [ 352.687883][T15551] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 352.765102][T15553] netlink: 248 bytes leftover after parsing attributes in process `syz.2.2652'. [ 352.830765][T15556] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2653'. [ 353.145259][T15568] netlink: 104 bytes leftover after parsing attributes in process `syz.6.2657'. [ 353.239030][T15572] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2659'. [ 353.292808][T15574] netlink: 'syz.6.2661': attribute type 1 has an invalid length. [ 353.300817][T15574] netlink: 224 bytes leftover after parsing attributes in process `syz.6.2661'. [ 353.311798][T15574] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2661'. [ 354.197798][T15622] netlink: 'syz.5.2671': attribute type 9 has an invalid length. [ 354.284145][T15622] netlink: 'syz.5.2671': attribute type 9 has an invalid length. [ 354.592459][T15641] netlink: 'syz.6.2678': attribute type 1 has an invalid length. [ 354.671920][T15641] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 354.881150][T15665] netlink: 'syz.4.2685': attribute type 2 has an invalid length. [ 354.903688][T15665] nbd: must specify at least one socket [ 355.135445][T15676] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_team, syncid = 4, id = 0 [ 355.331212][T15685] gtp0: entered promiscuous mode [ 355.366966][T15684] vlan5: entered allmulticast mode [ 355.375364][T15684] bridge0: entered allmulticast mode [ 355.383843][T15684] bridge6: port 1(vlan5) entered blocking state [ 355.390781][T15684] bridge6: port 1(vlan5) entered disabled state [ 355.400326][T15684] vlan5: entered promiscuous mode [ 357.373100][T15794] __nla_validate_parse: 13 callbacks suppressed [ 357.373123][T15794] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2715'. [ 357.655064][T15801] netlink: 'syz.6.2720': attribute type 3 has an invalid length. [ 358.075729][T15818] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2725'. [ 358.106370][T15821] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2726'. [ 358.395942][T15821] hsr_slave_1 (unregistering): left promiscuous mode [ 358.485616][T15832] netlink: 100 bytes leftover after parsing attributes in process `syz.5.2729'. [ 358.516033][T15832] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2729'. [ 358.639763][T15842] netlink: 'syz.4.2733': attribute type 29 has an invalid length. [ 358.661103][T15842] netlink: 'syz.4.2733': attribute type 29 has an invalid length. [ 358.680406][T15842] netlink: 500 bytes leftover after parsing attributes in process `syz.4.2733'. [ 359.140628][T15865] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2740'. [ 359.156482][T15865] 8021q: VLANs not supported on ip6_vti0 [ 359.490832][T15877] lo speed is unknown, defaulting to 1000 [ 359.491815][T15883] netlink: 'syz.4.2746': attribute type 4 has an invalid length. [ 359.540383][T15883] netlink: 'syz.4.2746': attribute type 4 has an invalid length. [ 360.078482][T15909] tipc: Enabled bearer , priority 0 [ 360.188827][T15910] tipc: Resetting bearer [ 360.199498][T15913] mac80211_hwsim hwsim10 syzkaller0: entered promiscuous mode [ 360.232047][T15913] mac80211_hwsim hwsim10 syzkaller0: entered allmulticast mode [ 360.294727][T15908] tipc: Disabling bearer [ 360.504538][T15925] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2757'. [ 362.701074][T15921] vlan1: entered allmulticast mode [ 362.706604][T15921] mac80211_hwsim hwsim20 wlan0: entered allmulticast mode [ 362.901354][T15937] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2759'. [ 363.189261][T15948] netlink: 284 bytes leftover after parsing attributes in process `syz.5.2764'. [ 363.268717][T15952] netlink: 212376 bytes leftover after parsing attributes in process `syz.6.2766'. [ 363.628641][T15967] netlink: 48 bytes leftover after parsing attributes in process `syz.5.2769'. [ 363.794884][T15973] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2772'. [ 363.851255][T15973] netlink: 100 bytes leftover after parsing attributes in process `syz.2.2772'. [ 364.011221][T15981] netlink: 212376 bytes leftover after parsing attributes in process `syz.5.2775'. [ 364.054739][T15981] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2775'. [ 364.163721][T15999] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2779'. [ 364.279545][T15994] macvlan2: entered promiscuous mode [ 364.286330][T15994] macvlan2: entered allmulticast mode [ 364.510542][T16014] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 364.520587][T16009] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 364.531294][T16015] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 364.594791][T16022] netlink: 112 bytes leftover after parsing attributes in process `syz.1.2783'. [ 364.605532][T16022] netlink: 'syz.1.2783': attribute type 4 has an invalid length. [ 364.854865][T16048] ieee802154 phy0 wpan0: encryption failed: -22 [ 364.894403][T16049] netlink: 'syz.2.2789': attribute type 16 has an invalid length. [ 364.911972][T16049] netlink: 'syz.2.2789': attribute type 17 has an invalid length. [ 364.930174][T16048] netem: change failed [ 365.006925][T16054] openvswitch: netlink: Flow key attr not present in new flow. [ 365.059159][T16049] gretap0: left promiscuous mode [ 365.204105][T16049] 8021q: adding VLAN 0 to HW filter on device team0 [ 365.248775][T16049] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 365.307500][T16049] wg1: left promiscuous mode [ 365.341578][T16049] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 365.352494][T16049] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 365.366592][T16049] veth1_macvtap: left promiscuous mode [ 365.373922][T16049] veth0_macvtap: left promiscuous mode [ 365.381110][T16049] veth0_macvtap: entered promiscuous mode [ 365.388875][T16049] veth1_macvtap: entered promiscuous mode [ 365.438056][T16049] gretap1: left promiscuous mode [ 365.443458][T16049] gretap1: left allmulticast mode [ 365.455714][T16049] bridge1: left allmulticast mode [ 365.469881][T16049] gretap2: left promiscuous mode [ 365.475153][T16049] gretap2: left allmulticast mode [ 365.492621][T16049] 8021q: adding VLAN 0 to HW filter on device bond1 [ 365.521048][T16049] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 365.532517][T16049] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 365.542670][T16049] 8021q: adding VLAN 0 to HW filter on device batadv3 [ 365.552666][T16049] 8021q: adding VLAN 0 to HW filter on device batadv4 [ 365.562626][T16049] 8021q: adding VLAN 0 to HW filter on device batadv5 [ 365.574154][T16049] 8021q: adding VLAN 0 to HW filter on device batadv6 [ 365.583968][T16049] 8021q: adding VLAN 0 to HW filter on device batadv7 [ 365.594424][T16049] 8021q: adding VLAN 0 to HW filter on device batadv8 [ 365.605221][T16049] 8021q: adding VLAN 0 to HW filter on device batadv9 [ 365.615983][T16049] 8021q: adding VLAN 0 to HW filter on device batadv10 [ 365.626695][T16049] 8021q: adding VLAN 0 to HW filter on device batadv11 [ 365.637253][T16049] 8021q: adding VLAN 0 to HW filter on device batadv12 [ 365.647693][T16049] 8021q: adding VLAN 0 to HW filter on device batadv13 [ 365.658241][T16049] 8021q: adding VLAN 0 to HW filter on device batadv14 [ 365.669245][T16049] 8021q: adding VLAN 0 to HW filter on device batadv15 [ 365.680437][T16049] 8021q: adding VLAN 0 to HW filter on device batadv16 [ 365.691233][T16049] 8021q: adding VLAN 0 to HW filter on device batadv17 [ 365.702748][T16049] 8021q: adding VLAN 0 to HW filter on device batadv18 [ 365.716736][T16049] 8021q: adding VLAN 0 to HW filter on device batadv19 [ 365.727833][T16049] 8021q: adding VLAN 0 to HW filter on device batadv20 [ 365.738090][T16049] 8021q: adding VLAN 0 to HW filter on device batadv21 [ 365.748898][T16049] 8021q: adding VLAN 0 to HW filter on device batadv22 [ 365.760322][T16049] 8021q: adding VLAN 0 to HW filter on device batadv23 [ 365.771033][T16049] 8021q: adding VLAN 0 to HW filter on device batadv24 [ 365.782437][T16049] 8021q: adding VLAN 0 to HW filter on device batadv25 [ 365.792635][T16049] 8021q: adding VLAN 0 to HW filter on device batadv26 [ 365.803605][T16049] 8021q: adding VLAN 0 to HW filter on device batadv27 [ 365.815244][T16049] 8021q: adding VLAN 0 to HW filter on device batadv28 [ 365.825984][T16049] 8021q: adding VLAN 0 to HW filter on device batadv29 [ 365.837061][T16049] 8021q: adding VLAN 0 to HW filter on device batadv30 [ 365.848793][T16049] 8021q: adding VLAN 0 to HW filter on device batadv31 [ 365.860004][T16049] 8021q: adding VLAN 0 to HW filter on device batadv32 [ 365.871024][T16049] 8021q: adding VLAN 0 to HW filter on device batadv33 [ 365.882875][T16049] mac80211_hwsim hwsim3 syzkaller0: left promiscuous mode [ 365.890197][T16049] mac80211_hwsim hwsim3 syzkaller0: left allmulticast mode [ 365.937944][T16049] 8021q: adding VLAN 0 to HW filter on device bond2 [ 365.954447][T16049] dummy0: entered promiscuous mode [ 365.966913][T16049] gtp0: left promiscuous mode [ 365.998216][T16061] dvmrp1: entered allmulticast mode [ 366.136006][T12015] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 366.167563][T12015] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.217652][T12015] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 366.251428][T12015] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.276711][T12015] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 366.304908][T12015] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.346994][T12015] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 366.394296][T12015] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.410323][T16140] netlink: 'syz.2.2814': attribute type 4 has an invalid length. [ 367.462442][T16148] netlink: 'syz.2.2814': attribute type 4 has an invalid length. [ 368.033275][T16156] pimreg: entered allmulticast mode [ 368.216116][T16163] (unnamed net_device) (uninitialized): option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 368.414580][T16175] __nla_validate_parse: 4 callbacks suppressed [ 368.414603][T16175] netlink: 72 bytes leftover after parsing attributes in process `syz.5.2826'. [ 368.497612][T16177] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2826'. [ 368.612830][T16187] [ 368.615218][T16187] ====================================================== [ 368.622256][T16187] WARNING: possible circular locking dependency detected [ 368.629310][T16187] syzkaller #0 Not tainted [ 368.633745][T16187] ------------------------------------------------------ [ 368.640781][T16187] syz.4.2828/16187 is trying to acquire lock: [ 368.646865][T16187] ffffffff8f68d258 (nr_neigh_list_lock){+...}-{3:3}, at: nr_rt_ioctl+0x390/0xd50 [ 368.656024][T16187] [ 368.656024][T16187] but task is already holding lock: [ 368.663389][T16187] ffff888043778270 (&nr_node->node_lock){+...}-{3:3}, at: nr_rt_ioctl+0x193/0xd50 [ 368.672632][T16187] [ 368.672632][T16187] which lock already depends on the new lock. [ 368.672632][T16187] [ 368.683044][T16187] [ 368.683044][T16187] the existing dependency chain (in reverse order) is: [ 368.692063][T16187] [ 368.692063][T16187] -> #2 (&nr_node->node_lock){+...}-{3:3}: [ 368.700066][T16187] lock_acquire+0x120/0x360 [ 368.705109][T16187] _raw_spin_lock_bh+0x36/0x50 [ 368.710405][T16187] nr_rt_ioctl+0x193/0xd50 [ 368.715345][T16187] sock_do_ioctl+0xd9/0x300 [ 368.720380][T16187] sock_ioctl+0x576/0x790 [ 368.725237][T16187] __se_sys_ioctl+0xfc/0x170 [ 368.730383][T16187] do_syscall_64+0xfa/0x3b0 [ 368.735423][T16187] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 368.741853][T16187] [ 368.741853][T16187] -> #1 (nr_node_list_lock){+...}-{3:3}: [ 368.749680][T16187] lock_acquire+0x120/0x360 [ 368.754718][T16187] _raw_spin_lock_bh+0x36/0x50 [ 368.760009][T16187] nr_rt_device_down+0xa9/0x720 [ 368.765386][T16187] nr_device_event+0x137/0x150 [ 368.770672][T16187] notifier_call_chain+0x1b3/0x3e0 [ 368.776321][T16187] netif_close_many+0x29c/0x410 [ 368.781702][T16187] netif_close+0x158/0x210 [ 368.786650][T16187] dev_close+0x10a/0x220 [ 368.791434][T16187] bpq_device_event+0x377/0x6a0 [ 368.796818][T16187] notifier_call_chain+0x1b3/0x3e0 [ 368.802457][T16187] netif_close_many+0x29c/0x410 [ 368.807840][T16187] netif_close+0x158/0x210 [ 368.812784][T16187] dev_close+0x10a/0x220 [ 368.817563][T16187] bond_setup_by_slave+0x5f/0x3f0 [ 368.823120][T16187] bond_enslave+0x7a0/0x3a20 [ 368.828240][T16187] bond_do_ioctl+0x635/0x9b0 [ 368.833381][T16187] bond_siocdevprivate+0x17e/0x350 [ 368.839033][T16187] dev_ifsioc+0xb57/0xf00 [ 368.843893][T16187] dev_ioctl+0x84c/0x1150 [ 368.848752][T16187] sock_ioctl+0x719/0x790 [ 368.853610][T16187] __se_sys_ioctl+0xfc/0x170 [ 368.858726][T16187] do_syscall_64+0xfa/0x3b0 [ 368.863772][T16187] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 368.870194][T16187] [ 368.870194][T16187] -> #0 (nr_neigh_list_lock){+...}-{3:3}: [ 368.878120][T16187] validate_chain+0xb9b/0x2140 [ 368.883421][T16187] __lock_acquire+0xab9/0xd20 [ 368.888635][T16187] lock_acquire+0x120/0x360 [ 368.893675][T16187] _raw_spin_lock_bh+0x36/0x50 [ 368.898966][T16187] nr_rt_ioctl+0x390/0xd50 [ 368.903907][T16187] sock_do_ioctl+0xd9/0x300 [ 368.908937][T16187] sock_ioctl+0x576/0x790 [ 368.913789][T16187] __se_sys_ioctl+0xfc/0x170 [ 368.918908][T16187] do_syscall_64+0xfa/0x3b0 [ 368.923945][T16187] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 368.930365][T16187] [ 368.930365][T16187] other info that might help us debug this: [ 368.930365][T16187] [ 368.940593][T16187] Chain exists of: [ 368.940593][T16187] nr_neigh_list_lock --> nr_node_list_lock --> &nr_node->node_lock [ 368.940593][T16187] [ 368.954436][T16187] Possible unsafe locking scenario: [ 368.954436][T16187] [ 368.961883][T16187] CPU0 CPU1 [ 368.967249][T16187] ---- ---- [ 368.972614][T16187] lock(&nr_node->node_lock); [ 368.977390][T16187] lock(nr_node_list_lock); [ 368.984507][T16187] lock(&nr_node->node_lock); [ 368.991789][T16187] lock(nr_neigh_list_lock); [ 368.996474][T16187] [ 368.996474][T16187] *** DEADLOCK *** [ 368.996474][T16187] [ 369.004618][T16187] 2 locks held by syz.4.2828/16187: [ 369.009825][T16187] #0: ffffffff8f68d2b8 (nr_node_list_lock){+...}-{3:3}, at: nr_rt_ioctl+0x104/0xd50 [ 369.019330][T16187] #1: ffff888043778270 (&nr_node->node_lock){+...}-{3:3}, at: nr_rt_ioctl+0x193/0xd50 [ 369.029006][T16187] [ 369.029006][T16187] stack backtrace: [ 369.034915][T16187] CPU: 1 UID: 0 PID: 16187 Comm: syz.4.2828 Not tainted syzkaller #0 PREEMPT(full) [ 369.034938][T16187] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 369.034956][T16187] Call Trace: [ 369.034965][T16187] [ 369.034975][T16187] dump_stack_lvl+0x189/0x250 [ 369.035002][T16187] ? __pfx_dump_stack_lvl+0x10/0x10 [ 369.035023][T16187] ? __pfx__printk+0x10/0x10 [ 369.035046][T16187] ? stack_trace_save+0x9c/0xe0 [ 369.035073][T16187] print_circular_bug+0x2ee/0x310 [ 369.035094][T16187] check_noncircular+0x134/0x160 [ 369.035117][T16187] validate_chain+0xb9b/0x2140 [ 369.035145][T16187] __lock_acquire+0xab9/0xd20 [ 369.035174][T16187] ? nr_rt_ioctl+0x390/0xd50 [ 369.035193][T16187] lock_acquire+0x120/0x360 [ 369.035217][T16187] ? nr_rt_ioctl+0x390/0xd50 [ 369.035238][T16187] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 369.035262][T16187] ? nr_rt_ioctl+0x390/0xd50 [ 369.035282][T16187] _raw_spin_lock_bh+0x36/0x50 [ 369.035303][T16187] ? nr_rt_ioctl+0x390/0xd50 [ 369.035323][T16187] nr_rt_ioctl+0x390/0xd50 [ 369.035348][T16187] ? __pfx_nr_rt_ioctl+0x10/0x10 [ 369.035373][T16187] ? apparmor_capable+0x137/0x1b0 [ 369.035397][T16187] ? capable+0x89/0xe0 [ 369.035415][T16187] ? nr_ioctl+0x1b1/0x3b0 [ 369.035433][T16187] sock_do_ioctl+0xd9/0x300 [ 369.035456][T16187] ? __pfx_sock_do_ioctl+0x10/0x10 [ 369.035476][T16187] ? __lock_acquire+0xab9/0xd20 [ 369.035508][T16187] sock_ioctl+0x576/0x790 [ 369.035529][T16187] ? __pfx_sock_ioctl+0x10/0x10 [ 369.035548][T16187] ? __fget_files+0x2a/0x420 [ 369.035575][T16187] ? __fget_files+0x3a0/0x420 [ 369.035600][T16187] ? __fget_files+0x2a/0x420 [ 369.035628][T16187] ? bpf_lsm_file_ioctl+0x9/0x20 [ 369.035650][T16187] ? __pfx_sock_ioctl+0x10/0x10 [ 369.035675][T16187] __se_sys_ioctl+0xfc/0x170 [ 369.035698][T16187] do_syscall_64+0xfa/0x3b0 [ 369.035725][T16187] ? lockdep_hardirqs_on+0x9c/0x150 [ 369.035748][T16187] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 369.035766][T16187] ? clear_bhb_loop+0x60/0xb0 [ 369.035785][T16187] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 369.035807][T16187] RIP: 0033:0x7f84f678ebe9 [ 369.035824][T16187] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 369.035840][T16187] RSP: 002b:00007f84f75f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 369.035859][T16187] RAX: ffffffffffffffda RBX: 00007f84f69b5fa0 RCX: 00007f84f678ebe9 [ 369.035872][T16187] RDX: 0000000000000000 RSI: 00000000000089e2 RDI: 0000000000000004 [ 369.035883][T16187] RBP: 00007f84f6811e19 R08: 0000000000000000 R09: 0000000000000000 [ 369.035894][T16187] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 369.035905][T16187] R13: 00007f84f69b6038 R14: 00007f84f69b5fa0 R15: 00007ffeb4f3a448 [ 369.035925][T16187] [ 369.327462][T16191] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2830'. [ 369.399938][T16187] netlink: 244 bytes leftover after parsing attributes in process `syz.4.2828'.