last executing test programs: 3m26.301778783s ago: executing program 0 (id=1857): r0 = socket$inet_sctp(0x2, 0x0, 0x84) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000000)={0x0, 0x101, 0x4, 0x4f7b8806}, &(0x7f0000000040)=0x10) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f0000000080)={r1, 0x9}, 0x8) r2 = accept(r0, 0x0, &(0x7f00000000c0)) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000100)={r1, 0x8b}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp6_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f0000000180)=@assoc_id=r3, 0x4) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r2, 0x84, 0xf, &(0x7f00000001c0)={r1, @in={{0x2, 0x4e24, @multicast1}}, 0x50d5, 0x6bc, 0x3, 0x9, 0x2}, &(0x7f0000000280)=0x98) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r4, 0x84, 0x17, &(0x7f00000002c0)={r5, 0x0, 0x5f, "02aa74ab9513ced04cc5bffe6db7e9ab69231007ed913618088ee744914a339e208d666da182675955fcc8355ded8e612ac5237948835794223a20abb4616fd19f94913425f8453f7b179ea798b903bb552edafbc9c8c568ceb12b47648d19"}, 0x67) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r2, 0x84, 0x70, &(0x7f0000000340)={r5, @in6={{0xa, 0x4e20, 0x7, @private1, 0x6}}, [0x3, 0x5, 0x6, 0x1, 0x6f, 0x8, 0xb96, 0x6, 0x5d, 0xb0, 0x7, 0x3, 0x9, 0x5]}, &(0x7f0000000440)=0x100) getsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000480), &(0x7f00000004c0)=0x4) r7 = accept4(r0, &(0x7f0000000500)=@caif=@dgm, &(0x7f0000000580)=0x80, 0x800) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f00000005c0)={0x0, 0x1, 0x20, 0x1000, 0x7}, &(0x7f0000000600)=0x18) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r7, 0x84, 0x72, &(0x7f0000000640)={r8, 0x1ff}, 0xc) getsockopt$inet6_tcp_int(r2, 0x6, 0x4, &(0x7f0000000680), &(0x7f00000006c0)=0x4) setsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000700)={r6, 0x1000, 0x7, 0x1}, 0x10) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r7, 0x84, 0x7c, &(0x7f0000000740)={r5, 0xc9, 0xca}, &(0x7f0000000780)=0x8) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nfc(&(0x7f0000000800), 0xffffffffffffffff) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000840)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000880)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000008c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r9, &(0x7f0000000980)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x34, r10, 0x10, 0x70bd27, 0x25dfdbfb, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r11}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r12}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r13}]}, 0x34}}, 0x20000884) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f00000009c0)={r5, 0x6}, &(0x7f0000000a00)=0x8) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r2, 0x84, 0x4, &(0x7f0000000a40)=0x5, 0x4) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r7, 0x84, 0x8, &(0x7f0000000a80)=0x8, 0x4) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r7, 0x84, 0x5, &(0x7f0000000ac0)={r5, @in6={{0xa, 0x4e24, 0x0, @loopback, 0xfff}}}, 0x84) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r14 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000b80)={0x0, 0x2}, 0xc) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000c40)={r14, &(0x7f0000000bc0)="651a8ee009fd2f6351b82fa3fee819f8fcbdce6d3a8d58ad562b4caf372f7de15bece97c3608be5809ea2effe11428970846db9941", &(0x7f0000000c00)=@udp=r2, 0x2}, 0x20) 3m26.159422798s ago: executing program 1 (id=1859): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = epoll_create1(0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r2, &(0x7f0000000040)={0x2000000f}) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r3, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x54}, 0x10) getsockname$packet(r3, 0x0, &(0x7f0000000480)) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r0) r4 = socket(0x18, 0x80000, 0x8) sendmsg$DEVLINK_CMD_SB_POOL_GET(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x70}, 0x1, 0x0, 0x0, 0xc001}, 0x4884) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) accept$alg(r6, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r8, @ANYBLOB="00000000000000001c0012800b00010067656e65766500000c00028008000200ac1414bb080004"], 0x44}, 0x1, 0x2, 0x0, 0x4003}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01000000000000000000037400062c00070073797352656d5f753a6f626a6563745f723a756465765f68656c7065725f657865635f743a7330000800020000000000080007002609090914000600626f6e64300000000000000000000000080003"], 0x78}, 0x1, 0xffffffff00000003}, 0x0) 3m26.027125662s ago: executing program 0 (id=1861): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x8) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @remote}, 0x6}, 0x1c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) syz_emit_ethernet(0x42, &(0x7f0000000480)=ANY=[@ANYBLOB="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", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="80956071907800e7080a00000006000000000000"], 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x4, @mcast2, 0xffffffff}, 0x1c) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000280)={0x3}, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x1e, 0xa01, 0x0, 0x0, {0x7}}, 0x14}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_TPROXY_REG_PORT={0x8, 0x3, 0x1, 0x0, 0xc}, @NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x7c}, 0x1, 0x0, 0x0, 0x24040851}, 0x0) 3m25.857251218s ago: executing program 4 (id=1862): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000000c0), r0) r2 = accept4$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x0, 0xc00) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, 0x0) sendmsg$NLBL_CALIPSO_C_LISTALL(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={0x14, r1, 0x3d810686a7d95765, 0x70bd2a, 0x25dfdbf9}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x24004052) socket$inet6(0xa, 0x3, 0x8000000003c) socket$igmp6(0xa, 0x3, 0x2) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000280), r0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000500)=@newtfilter={0x3c, 0x2c, 0xd3f, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0xfff3, 0xffe0}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_IP_TTL={0x5, 0x52, 0xd}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8848}, 0x24000804) getsockopt$inet6_mptcp_buf(r3, 0x11c, 0x3, &(0x7f00000003c0)=""/4096, &(0x7f0000000080)=0x1000) 3m25.766324343s ago: executing program 0 (id=1863): r0 = socket(0x25, 0x5, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, 0x0, 0x3c0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x54, 0x10, 0x609, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x88aefe86, 0x40000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_ADDRESS={0xa, 0x1, @remote}, @IFLA_XDP={0x4}]}, 0x54}}, 0x0) r8 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r8, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r10 = openat$cgroup_int(r9, &(0x7f0000000080)='hugetlb.1GB.rsvd.limit_in_bytes\x00', 0x2, 0x0) write$cgroup_subtree(r10, &(0x7f00000000c0)=ANY=[@ANYBLOB='k'], 0x8) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r13 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r13, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r15 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r15, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r14, @ANYBLOB="080026007f17000008009f0006"], 0x34}, 0x1, 0x0, 0x0, 0xd37697ff28093c0e}, 0x24000040) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r6, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x34, r12, 0x100, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x3ff, 0x2d}}}}, [@NL80211_ATTR_BSSID={0xa, 0xf5, @random="9830ace5983a"}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000080}, 0x80) r16 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r16, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000001300)=[{&(0x7f0000001340)="d8000000100081044e81f782db44b904021d080006000000e8fe55a1180015000600142603600e120a000d0000000401a80016000a003a40f8ff070000000000004dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025cc049e00360db70100000040fad95667e006dcdf63951f215ce29bf1d809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x60, &(0x7f0000000300)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b0001006772657461700000240002800800070064010100060003601008000008001500700f0d0008000700ac1414bb08000a00", @ANYRES32=r11], 0x5c}}, 0x40) 3m25.763357642s ago: executing program 1 (id=1865): r0 = socket$netlink(0x10, 0x3, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', r1, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000080)=ANY=[], 0x10448) (async) unshare(0x2000400) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) pread64(r3, &(0x7f0000000480)=""/61, 0x3d, 0x7fffffffffffffff) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) (async) pselect6(0x71, 0x0, &(0x7f0000000040)={0x2}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140), 0x8}) 3m25.423343888s ago: executing program 1 (id=1867): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x40}, 0x94) r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000d40)=@newqdisc={0x88, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xc}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x2, [0x6, 0x9, 0xc, 0xf, 0x1, 0xa, 0xf, 0x1, 0x10, 0x9, 0x3, 0xb, 0x8, 0x5, 0x0, 0xa], 0x1, [0x4, 0x8, 0x81, 0x5, 0x9, 0x40, 0x4, 0xf, 0x8000, 0x6, 0x3, 0x27, 0x0, 0x5, 0x9, 0x8], [0x2, 0x6df, 0x3, 0xf, 0x8001, 0x5, 0xeaa, 0x8, 0x20, 0x2, 0x1, 0x200, 0x3, 0x4, 0xfff9, 0x80]}}}}]}, 0x88}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv4_newrule={0x24, 0x20, 0x20, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x8, 0x1f}, [@FRA_GENERIC_POLICY=@FRA_IP_PROTO={0x5, 0x16, 0x11}]}, 0x24}}, 0x44004) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=@getaddr={0x14, 0x16, 0x20, 0x70bd26, 0x25dfdbfc, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4840}, 0x200d8054) r4 = socket$packet(0x11, 0x3, 0x300) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=@updpolicy={0x17c, 0x19, 0x1, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @empty}, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0xff}}, [@tmpl={0xc4, 0x5, [{{@in6=@mcast1, 0x4d2, 0x33}, 0xa, @in6=@empty, 0x3501, 0x1, 0x0, 0x3b, 0x83, 0x5, 0x7}, {{@in6=@local, 0x4d6, 0x3c}, 0xa, @in6=@private1, 0x3502, 0x2, 0x0, 0x7, 0x7f, 0x0, 0x4}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4d3, 0x6c}, 0x2, @in=@private=0xa010100, 0x3502, 0x5, 0x0, 0xd1, 0xe, 0x47b, 0x3}]}]}, 0x17c}}, 0x4000) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) r6 = socket(0x28, 0x1, 0x0) getsockname$packet(r6, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="280000006800010002000000fcffff7f00000000000000000c0061e90ee1068a0200010000000d00"], 0x28}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r9, 0x6, 0xd, &(0x7f0000000100)='highspeed', 0x9) bind$inet6(r9, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) sendto$inet6(r9, &(0x7f0000000280)='2', 0x1, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0xfb3, @loopback, 0x2000003}, 0x1c) shutdown(r9, 0x1) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000001000010700000000200000000a0000000c0002006e6c3830323131"], 0x20}}, 0x0) recvmmsg(r10, &(0x7f0000001580)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) recvmmsg(r10, &(0x7f0000001440)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000011c0)=""/70, 0x46}, {&(0x7f00000000c0)=""/43, 0x2b}, {&(0x7f0000002a00)=""/4106, 0x104d}, {&(0x7f00000015c0)=""/4096, 0x1000}], 0x4}, 0x1801}], 0x1, 0x0, 0x0) sendmsg$NL80211_CMD_TDLS_MGMT(r6, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000300)={&(0x7f00000001c0)={0x34, r8, 0x400, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xc, 0x7}}}}, [@NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0x6}, @NL80211_ATTR_MAC={0xa}]}, 0x34}, 0x1, 0x0, 0x0, 0x810}, 0x40000) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000008c0)=ANY=[@ANYRES32=r2], 0x54}, 0x1, 0x0, 0x0, 0x4804}, 0x28040840) sendto$packet(r4, &(0x7f0000000180)="0b0312002e0064000200475400f6a13bb1000000086086dd4803", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x8100}, 0x14) 3m25.346270614s ago: executing program 4 (id=1868): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x28, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x4}}}]}]}], {0x14}}, 0x50}}, 0x0) (async) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000400)='netfs_rreq_ref\x00', r0, 0x0, 0x9}, 0x18) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r1}, 0x8) close(r2) (async) r3 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x14, 0x4000004, 0x8, 0x6, 0x0, 0x1, 0x0, '\x00', 0x0, r2}, 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r3, &(0x7f0000000140), 0x0}, 0x20) (async) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) (async) connect$inet6(r4, &(0x7f0000000600)={0x2, 0x4e23, 0x0, @dev={0xfe, 0x80, '\x00', 0x34}, 0x4}, 0x1c) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e21, 0x62c00, @mcast1, 0x2}, 0x1c) (async) r5 = socket$netlink(0x10, 0x3, 0x8000000004) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000240)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000180)=""/60, 0x3c, 0x1, &(0x7f00000001c0)=""/32, 0x20}, &(0x7f0000000280)=0x40) (async) writev(r5, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff81004e230e227f000001925aa80020007b00090080007f000001e809000000ff0000f03ac71002000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) r6 = socket$key(0xf, 0x3, 0x2) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000006000000040000000000000f020000000000000000000001050000018000000000000000010000850200000000000000010000000000000400000000da"], 0x0, 0x52}, 0x20) sendmsg$key(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000002c0)=ANY=[@ANYBLOB="000004000000000000000000000002000100"/32], 0x20}}, 0x0) 3m25.270664322s ago: executing program 4 (id=1869): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r1, 0x29, 0xcb, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0x5c, 0x30, 0x1, 0x0, 0x0, {}, [{0x48, 0x1, [@m_bpf={0x44, 0x1, 0x0, 0x0, {{0x8}, {0x1c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x0, 0x0, 0x20000000}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x5c}}, 0x0) 3m25.196933422s ago: executing program 0 (id=1870): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xe, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x91}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f00000017c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x19}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000200)={'syztnl2\x00', &(0x7f0000000040)={'syztnl0\x00', 0x0, 0x80, 0x8000, 0x80000001, 0xffff, {{0x1d, 0x4, 0x0, 0x3, 0x74, 0x68, 0x0, 0x27, 0x2f, 0x0, @rand_addr=0x64010102, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp_prespec={0x44, 0x24, 0x45, 0x3, 0x3, [{@multicast2, 0x4}, {@multicast2, 0x785}, {@remote, 0x80}, {@multicast2, 0x5773}]}, @timestamp_addr={0x44, 0x34, 0x74, 0x1, 0xf, [{@loopback, 0x1000}, {@multicast1, 0x4}, {@local, 0x8}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3}, {@dev={0xac, 0x14, 0x14, 0x1f}, 0x9}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x7}]}, @generic={0x88, 0x8, "f5c5e8c9021f"}]}}}}}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x46fd, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r4 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0xa, r3, 0x6}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000780)="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", 0x132}, {&(0x7f0000000440)="63f805d7649496db72959832930469edc7b700c9e37eed5653ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d33330e2ef36205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb00"/135, 0x87}, {&(0x7f0000001400)="7f4ba13c5a27118dc920175650f0c9ba1809dd13a6e2d5b38f40adfa278c09e0e3bd05add4d780cd753b50f06f3b51f43761c7783f38ceaefc2dad57889d8b3a2d21314410f64ec2fa92e3a14b0141b39c020021d1edd011fbccb808a317fff4cf49aab12da619d67102048ec43c76cdb9d395e8b7b6e589d788aeeecb5080fc3d5ec6ccd656e49c0a642671d3fc363b46240bbc46ad965399b71db3c8f2b269b20870a3d2a6a8de5213b0f9d41c510c827056b7284391da244ec7653648b6", 0xbf}], 0x3}, 0x4084) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x6c, 0x0, 0x10, 0x70bd2a, 0x25dfdbfd, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x24014004}, 0x804) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x444000, 0x0) write$tun(r5, &(0x7f0000000500)=ANY=[@ANYBLOB="aaaaaa030f000000000000270011aaf41d8541bace6fa0a9775f74d29fe1465c91732eb8cf3bacdd390c7363eb1f227fdbdfcd0f8051d72e8541449c7a7adbd8d1"], 0x41) 3m25.124221965s ago: executing program 4 (id=1872): r0 = socket$pppl2tp(0x18, 0x1, 0x1) (async) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) connect$pppl2tp(r0, &(0x7f00000004c0)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x8, 0x0, 0x1003, 0x0, {0xa, 0x0, 0x8, @private0={0xfc, 0x0, '\x00', 0x1}}}}, 0x32) (async) r2 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r2, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) (async) listen(r2, 0xfff) r3 = accept4(r2, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f00000001c0)=@int=0x5470, 0x4) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@ipv6_newrule={0x58, 0x20, 0x1, 0x0, 0x0, {0xa, 0x0, 0x20, 0x40, 0x0, 0x0, 0x0, 0x7}, [@FIB_RULE_POLICY=@FRA_OIFNAME={0x14, 0x11, 'veth0_to_bridge\x00'}, @FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'veth1_vlan\x00'}, @FRA_SRC={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x17}}]}, 0x58}, 0x1, 0x0, 0x0, 0x24040804}, 0x0) (async) sendmsg$nl_route(r4, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=@ipv6_newrule={0x44, 0x20, 0x4, 0x70bd28, 0x25dfdbfe, {0xa, 0x14, 0x80, 0x1, 0x36, 0x0, 0x0, 0x8, 0x2}, [@FRA_SRC={0x14, 0x2, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}}, @FRA_SRC={0x14, 0x2, @remote}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x40014) (async) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(0xffffffffffffffff, &(0x7f0000005100)={0x0, 0x0, &(0x7f00000050c0)={&(0x7f00000003c0)=ANY=[@ANYRES16, @ANYBLOB, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x20044804}, 0x4000000) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x1}], 0x1) 3m24.957587651s ago: executing program 1 (id=1873): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xd, 0x8, &(0x7f0000000040)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x7a}}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$netlink(0x10, 0x3, 0x18) 3m24.955411282s ago: executing program 4 (id=1874): syz_emit_ethernet(0x79, &(0x7f00000004c0)={@link_local, @link_local, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x3, 0x0, 0x6b, 0x0, 0x0, 0x0, 0x2f, 0x0, @private, @multicast1}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x6558, 0x0, 0x0, [0x0, 0xfffd]}, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x800, [0x3]}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd, [], "57a197f243aa2abb5f831e11b1"}, {0x8, 0x88be, 0x0, {{0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5}}}}}}}}, 0x0) (async, rerun: 64) r0 = socket$xdp(0x2c, 0x3, 0x0) (async, rerun: 64) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x2c, 0x6, 0x4, 0x0, 0x0, 0x0, 0x0, 0x9, 0xff, 0x0, 0x0, 0x8001, 0x3}}) (async) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000040)={'veth0_to_team\x00', 0x100}) sendmsg$nl_route(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="40000000200025a726bd7000fddbdf250a1400cdff00000122000100080006000000000014000100fe8000000000000000007f4183a700000000003c050015007c01b3cc9d29b33c449c5333a3d5de566d2f91e6688e837fd4809e2cd9d98de825180a619baa1214f86db5677d722bbf010cd9556dbbf56cea39140b1c2f2b91d878fc4aeb539889eb9b79d5f00deaad4738c1fa9a306e3f836d95a9781abe090e65052faeab1c93e03e"], 0x40}, 0x1, 0x0, 0x0, 0x20008081}, 0x0) (async, rerun: 32) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) (async, rerun: 32) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000140)=0x40, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) (async, rerun: 64) r5 = socket$xdp(0x2c, 0x3, 0x0) (rerun: 64) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r5, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) (async) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r2) sendmsg$ETHTOOL_MSG_STRSET_GET(r2, &(0x7f0000000440)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8400028}, 0xc, &(0x7f0000000400)={&(0x7f00000005c0)={0x3f0, r6, 0x20, 0x70bd2b, 0x25dfdbfd, {}, [@ETHTOOL_A_STRSET_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}]}, @ETHTOOL_A_STRSET_STRINGSETS={0x184, 0x2, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0xa}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}]}, {0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x9d46aa80303dd7b2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0xa}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}]}]}, @ETHTOOL_A_STRSET_HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x13c, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}, {0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0xb}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6ba4aa22c8ab2cdc}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}]}, @ETHTOOL_A_STRSET_STRINGSETS={0xa8, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}, {0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0xc}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}]}]}, 0x3f0}, 0x1, 0x0, 0x0, 0x4008054}, 0x4040000) (async) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000b00)=ANY=[@ANYBLOB="580000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000300012800c0001006d6163766c616e00200002800800010010000000080003000000000008000400"], 0x58}}, 0x0) (async, rerun: 64) setsockopt$XDP_RX_RING(r5, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) (rerun: 64) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r5, 0x11b, 0x5, &(0x7f0000000300)=0x1, 0x4) bind$xdp(r5, &(0x7f0000000100)={0x2c, 0x0, r9}, 0x10) (async) bind$xdp(r0, &(0x7f0000000240)={0x2c, 0x1, r4, 0x0, r5}, 0x60) (async) accept4(r5, &(0x7f00000009c0)=@caif=@rfm, &(0x7f0000000540)=0x80, 0x0) (async) r10 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) r11 = socket$packet(0x11, 0x2, 0x300) (rerun: 32) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r11, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r12, {0x3, 0xfff1}, {0x4, 0xa}, {0x0, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x4048080}, 0x0) 3m24.945796393s ago: executing program 1 (id=1875): writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000080)="390000001000090468fe0700000000000000ff3f02000000480100100000000019002b000a0003002000000000000072000000000000000000", 0x39}], 0x1) 3m24.902605664s ago: executing program 0 (id=1876): r0 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) r1 = socket$alg(0x26, 0x5, 0x0) accept4$alg(r1, 0x0, 0x0, 0x0) ioctl$sock_bt_bnep_BNEPCONNDEL(r0, 0x400442c9, &(0x7f0000000040)={0x1, @random="0db179f3cd42"}) 3m24.649651062s ago: executing program 0 (id=1879): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000000c0)={0x2, &(0x7f0000000040)=[{0x40, 0x5d, 0x2, 0x8}, {0x6, 0x0, 0x6, 0x1}]}, 0x10) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000140)="01020000010006", 0x7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=@framed={{0x62, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0x17}}, &(0x7f0000000480)='GPL\x00'}, 0x90) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000000c0)={0x2, &(0x7f0000000040)=[{0x40, 0x5d, 0x2, 0x8}, {0x6, 0x0, 0x6, 0x1}]}, 0x10) (async) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) (async) write(r0, &(0x7f0000000140)="01020000010006", 0x7) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=@framed={{0x62, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0x17}}, &(0x7f0000000480)='GPL\x00'}, 0x90) (async) 3m24.160906405s ago: executing program 32 (id=1879): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000000c0)={0x2, &(0x7f0000000040)=[{0x40, 0x5d, 0x2, 0x8}, {0x6, 0x0, 0x6, 0x1}]}, 0x10) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000140)="01020000010006", 0x7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=@framed={{0x62, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0x17}}, &(0x7f0000000480)='GPL\x00'}, 0x90) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000000c0)={0x2, &(0x7f0000000040)=[{0x40, 0x5d, 0x2, 0x8}, {0x6, 0x0, 0x6, 0x1}]}, 0x10) (async) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) (async) write(r0, &(0x7f0000000140)="01020000010006", 0x7) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=@framed={{0x62, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0x17}}, &(0x7f0000000480)='GPL\x00'}, 0x90) (async) 3m24.141521276s ago: executing program 1 (id=1881): r0 = openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2000006, 0x110, r0, 0xf6607000) sendfile(r0, r0, &(0x7f0000000040), 0x6) write$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000080)='FROZEN\x00', 0x7) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) sendmsg$nl_xfrm(r1, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)=@getae={0xd0, 0x1f, 0x200, 0x70bd29, 0x25dfdbfc, {{@in, 0x4d4, 0x8, 0xff}, @in=@remote, 0xf8c4, 0x3501}, [@proto={0x5, 0x19, 0x2b}, @replay_val={0x10, 0xa, {0x70bd27, 0x70bd28}}, @user_kmaddress={0x2c, 0x13, {@in6=@dev={0xfe, 0x80, '\x00', 0x22}, @in6=@private1, 0x0, 0x2}}, @offload={0xc, 0x1c, {r2}}, @mark={0xc, 0x15, {0x35075d, 0x4}}, @tfcpad={0x8, 0x16, 0x7}, @user_kmaddress={0x2c, 0x13, {@in6=@local, @in=@dev={0xac, 0x14, 0x14, 0x21}, 0x0, 0x2}}]}, 0xd0}, 0x1, 0x0, 0x0, 0x4004884}, 0x20000000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)=@newchain={0x34, 0x64, 0x1, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0xc, 0x2}, {0xfff2, 0x1}, {0x0, 0xffe0}}, [@TCA_CHAIN={0x8, 0xb, 0x2}, @TCA_CHAIN={0x8, 0xb, 0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x4c800}, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000003c0)={'vxcan1\x00', 0x0}) ioctl$sock_SIOCDELRT(r1, 0x890c, &(0x7f0000000400)={0x0, @vsock={0x28, 0x0, 0x2710, @my=0x1}, @can={0x1d, r3}, @ethernet={0x306, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x41}}, 0x7f, 0x0, 0x0, 0x0, 0x40, 0x0, 0x2, 0x48000000000000, 0x8534}) r4 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x0, 0x0, @loopback}, &(0x7f00000004c0)=0x1c, 0x800) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000500)=0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(r4, 0x29, 0x22, &(0x7f0000000540)={{{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, @in=@broadcast, 0x4e21, 0x53b, 0x4e23, 0x3, 0x0, 0x80, 0x0, 0x0, r2, r5}, {0x53cf430b, 0x2, 0x10000, 0x7, 0x286, 0xaf4, 0x2a6afcab}, {0xffffffffffffff9b, 0x8, 0x0, 0x9}, 0x8, 0x6e6bb3, 0x0, 0x1, 0x2, 0x2}, {{@in6=@loopback, 0x4d4, 0xff}, 0xa, @in6=@loopback, 0x3504, 0x1, 0x2, 0x8, 0xf00000, 0x6, 0xb}}, 0xe8) r6 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000640)='syz0\x00', 0x200002, 0x0) mkdirat$cgroup(r6, &(0x7f0000000680)='syz0\x00', 0x1ff) r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f00000006c0)={'vxcan0\x00'}) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r4, 0x84, 0x18, &(0x7f0000000700)={0x0, 0xd193}, &(0x7f0000000740)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r6, 0x84, 0x10, &(0x7f0000000780)=@sack_info={r8, 0x0, 0xfffffffa}, &(0x7f00000007c0)=0xc) bind$bt_sco(r7, &(0x7f0000000800), 0x8) r9 = socket$unix(0x1, 0x1, 0x0) connect$unix(r9, &(0x7f0000000840)=@file={0x0, './file0\x00'}, 0x6e) r10 = openat$cgroup(r6, &(0x7f00000008c0)='syz1\x00', 0x200002, 0x0) mkdirat$cgroup(r10, &(0x7f0000000900)='syz0\x00', 0x1ff) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000940)=""/203, &(0x7f0000000a40)=0xcb) mkdirat$cgroup(r6, &(0x7f0000000a80)='syz1\x00', 0x1ff) getsockopt$SO_COOKIE(r9, 0x1, 0x39, &(0x7f0000000ac0), &(0x7f0000000b00)=0x8) socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$inet(r9, &(0x7f0000000cc0)={&(0x7f0000000b40)={0x2, 0x4e21, @broadcast}, 0x10, &(0x7f0000000c40)=[{&(0x7f0000000b80)="3f563d767d1432b7d5a764d1fbe198dbf03b286050919d34bc67880e387382613393ad5247c83c481f7812d36ce61141d6d5bcf3bc16e6bb4753badd46863bf6b32e811e87a039924b46f1a3cba69e1a4467233b24cf02f2706f92553420449118a459edf53238fc1bf6594d8f821318a7f7c83afbd862760e290d2a42a5fdf94198e7f36d504462713d5630382e23e641dc76542d87d6e01cfe04157c02ae2771fe7ebffcafa5c672a5e643c2fdde37a7dc", 0xb2}], 0x1, &(0x7f0000000c80)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x40}}], 0x18}, 0x20040080) ioctl$EXT4_IOC_GROUP_ADD(r4, 0x40286608, &(0x7f0000000d00)={0x3, 0x0, 0x80000000, 0xe5, 0x8, 0x4}) 3m24.046357252s ago: executing program 33 (id=1881): r0 = openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2000006, 0x110, r0, 0xf6607000) sendfile(r0, r0, &(0x7f0000000040), 0x6) write$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000080)='FROZEN\x00', 0x7) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) sendmsg$nl_xfrm(r1, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)=@getae={0xd0, 0x1f, 0x200, 0x70bd29, 0x25dfdbfc, {{@in, 0x4d4, 0x8, 0xff}, @in=@remote, 0xf8c4, 0x3501}, [@proto={0x5, 0x19, 0x2b}, @replay_val={0x10, 0xa, {0x70bd27, 0x70bd28}}, @user_kmaddress={0x2c, 0x13, {@in6=@dev={0xfe, 0x80, '\x00', 0x22}, @in6=@private1, 0x0, 0x2}}, @offload={0xc, 0x1c, {r2}}, @mark={0xc, 0x15, {0x35075d, 0x4}}, @tfcpad={0x8, 0x16, 0x7}, @user_kmaddress={0x2c, 0x13, {@in6=@local, @in=@dev={0xac, 0x14, 0x14, 0x21}, 0x0, 0x2}}]}, 0xd0}, 0x1, 0x0, 0x0, 0x4004884}, 0x20000000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)=@newchain={0x34, 0x64, 0x1, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0xc, 0x2}, {0xfff2, 0x1}, {0x0, 0xffe0}}, [@TCA_CHAIN={0x8, 0xb, 0x2}, @TCA_CHAIN={0x8, 0xb, 0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x4c800}, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000003c0)={'vxcan1\x00', 0x0}) ioctl$sock_SIOCDELRT(r1, 0x890c, &(0x7f0000000400)={0x0, @vsock={0x28, 0x0, 0x2710, @my=0x1}, @can={0x1d, r3}, @ethernet={0x306, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x41}}, 0x7f, 0x0, 0x0, 0x0, 0x40, 0x0, 0x2, 0x48000000000000, 0x8534}) r4 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x0, 0x0, @loopback}, &(0x7f00000004c0)=0x1c, 0x800) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000500)=0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(r4, 0x29, 0x22, &(0x7f0000000540)={{{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, @in=@broadcast, 0x4e21, 0x53b, 0x4e23, 0x3, 0x0, 0x80, 0x0, 0x0, r2, r5}, {0x53cf430b, 0x2, 0x10000, 0x7, 0x286, 0xaf4, 0x2a6afcab}, {0xffffffffffffff9b, 0x8, 0x0, 0x9}, 0x8, 0x6e6bb3, 0x0, 0x1, 0x2, 0x2}, {{@in6=@loopback, 0x4d4, 0xff}, 0xa, @in6=@loopback, 0x3504, 0x1, 0x2, 0x8, 0xf00000, 0x6, 0xb}}, 0xe8) r6 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000640)='syz0\x00', 0x200002, 0x0) mkdirat$cgroup(r6, &(0x7f0000000680)='syz0\x00', 0x1ff) r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f00000006c0)={'vxcan0\x00'}) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r4, 0x84, 0x18, &(0x7f0000000700)={0x0, 0xd193}, &(0x7f0000000740)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r6, 0x84, 0x10, &(0x7f0000000780)=@sack_info={r8, 0x0, 0xfffffffa}, &(0x7f00000007c0)=0xc) bind$bt_sco(r7, &(0x7f0000000800), 0x8) r9 = socket$unix(0x1, 0x1, 0x0) connect$unix(r9, &(0x7f0000000840)=@file={0x0, './file0\x00'}, 0x6e) r10 = openat$cgroup(r6, &(0x7f00000008c0)='syz1\x00', 0x200002, 0x0) mkdirat$cgroup(r10, &(0x7f0000000900)='syz0\x00', 0x1ff) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000940)=""/203, &(0x7f0000000a40)=0xcb) mkdirat$cgroup(r6, &(0x7f0000000a80)='syz1\x00', 0x1ff) getsockopt$SO_COOKIE(r9, 0x1, 0x39, &(0x7f0000000ac0), &(0x7f0000000b00)=0x8) socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$inet(r9, &(0x7f0000000cc0)={&(0x7f0000000b40)={0x2, 0x4e21, @broadcast}, 0x10, &(0x7f0000000c40)=[{&(0x7f0000000b80)="3f563d767d1432b7d5a764d1fbe198dbf03b286050919d34bc67880e387382613393ad5247c83c481f7812d36ce61141d6d5bcf3bc16e6bb4753badd46863bf6b32e811e87a039924b46f1a3cba69e1a4467233b24cf02f2706f92553420449118a459edf53238fc1bf6594d8f821318a7f7c83afbd862760e290d2a42a5fdf94198e7f36d504462713d5630382e23e641dc76542d87d6e01cfe04157c02ae2771fe7ebffcafa5c672a5e643c2fdde37a7dc", 0xb2}], 0x1, &(0x7f0000000c80)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x40}}], 0x18}, 0x20040080) ioctl$EXT4_IOC_GROUP_ADD(r4, 0x40286608, &(0x7f0000000d00)={0x3, 0x0, 0x80000000, 0xe5, 0x8, 0x4}) 3m23.97834319s ago: executing program 4 (id=1883): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40200, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f00000002c0)={'bridge_slave_1\x00', @multicast}) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) (async) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_subtree(r2, &(0x7f0000000200), 0x2, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000080)={0x0, r0, 0x7, 0x4, 0xe, 0x6}) (async) write$cgroup_subtree(r3, &(0x7f0000000040)={[{0x2b, 'cpu'}, {0x4a9e3e0ca749b20, 'rdma'}]}, 0x8) (async) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c01000013000100000000000000000000000000000000000000000000000001ffffffff0000000000000000000000000000000d040000090a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x13c}}, 0x0) 3m23.977652414s ago: executing program 34 (id=1883): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40200, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f00000002c0)={'bridge_slave_1\x00', @multicast}) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) (async) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_subtree(r2, &(0x7f0000000200), 0x2, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000080)={0x0, r0, 0x7, 0x4, 0xe, 0x6}) (async) write$cgroup_subtree(r3, &(0x7f0000000040)={[{0x2b, 'cpu'}, {0x4a9e3e0ca749b20, 'rdma'}]}, 0x8) (async) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c01000013000100000000000000000000000000000000000000000000000001ffffffff0000000000000000000000000000000d040000090a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x13c}}, 0x0) 4.639295853s ago: executing program 6 (id=4359): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_PMKSA(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x3c, r3, 0x1, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_PMKID={0x14, 0x55, "8280157fc7d74b396ccdc761c70f0426"}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20044054}, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x14}, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route_sched_retired(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000000b40)=@newchain={0x2a68, 0x64, 0x4, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xfff1, 0x74bf1e4db23ea930}, {0xfffd, 0x1}, {0x776744b553bdafa2, 0x1ffe7}}, [@f_tcindex={{0xc}, {0x1074, 0x2, [@TCA_TCINDEX_HASH={0x8, 0x1, 0x77b}, @TCA_TCINDEX_HASH={0x8, 0x1, 0xf}, @TCA_TCINDEX_SHIFT={0x8, 0x3, 0xf28}, @TCA_TCINDEX_ACT={0x1058, 0x7, [@m_simple={0x1054, 0x1a, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0xb, 0x3, 'bridge\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x3, 0x327f, 0xa92aff275b68b94f, 0x100, 0x8}}]}, {0x1004, 0x6, "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"}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}]}}, @f_tcindex={{0xc}, {0x14, 0x2, [@TCA_TCINDEX_MASK={0x6, 0x2, 0x4f5}, @TCA_TCINDEX_HASH={0x8, 0x1, 0x9cdc}]}}, @f_rsvp={{0x9}, {0x44, 0x2, [@TCA_RSVP_PINFO={0x20, 0x4, {{0x6, 0x6, 0x3}, {0x5c7, 0xfffffffc, 0x4}, 0x1}}, @TCA_RSVP_PINFO={0x20, 0x4, {{0xfffffff9, 0xfffffffe, 0x6ce}, {0x40, 0x9, 0x2}, 0x5e, 0x9, 0x87}}]}}, @f_rsvp={{0x9}, {0x440, 0x2, [@TCA_RSVP_POLICE={0x41c, 0x5, [@TCA_POLICE_RESULT={0x8, 0x5, 0xffffff52}, @TCA_POLICE_RATE64={0xc, 0x8, 0x4}, @TCA_POLICE_RATE={0x404, 0x2, [0xf, 0xd, 0xc3e9, 0x8, 0x2, 0x25, 0xcc7, 0x6, 0x7, 0x6, 0x7, 0x40, 0x2, 0x2, 0x3, 0x9, 0xf2, 0x3, 0x6, 0x5, 0x6, 0x3ff, 0x1000, 0x6, 0x5e00, 0x74ae, 0xb15, 0xbf39, 0x1, 0xffffffd5, 0x2, 0x800, 0x5, 0x1, 0x4, 0x100, 0x5, 0x1, 0x800, 0x6f, 0x8001, 0x0, 0x7, 0x2, 0x9, 0x60f9, 0x1, 0xfffffff0, 0x2, 0x2, 0x5, 0x1, 0x5, 0x9, 0x2, 0x2, 0x7, 0x1ff, 0x2, 0x6, 0xf, 0x6, 0x8, 0x1000, 0xfffffffe, 0x9, 0x8, 0x6, 0x400, 0xc, 0x0, 0x6, 0x2, 0x9, 0x3, 0xfffffffc, 0x3f, 0x7, 0x8, 0xff, 0x0, 0x6e8d6064, 0x8, 0x1ff, 0x9, 0x6, 0x6, 0x7, 0xe7, 0x7, 0x0, 0x2, 0x6, 0x101, 0xb, 0x5, 0x4, 0x6, 0x6, 0x6, 0x401, 0x1, 0x4, 0xcc, 0x7, 0x4, 0x1, 0x80000001, 0x8, 0xfffffffa, 0x6, 0x5, 0x81, 0x1000, 0x9, 0xaa8d, 0x791d, 0xe, 0xff, 0x3, 0x3, 0x6, 0x7, 0x2271, 0x2, 0x888, 0x800000, 0x10000, 0x5, 0x2a, 0x1000, 0x10000, 0x1, 0x6, 0xc, 0x0, 0x6, 0x8, 0x4, 0x43c, 0x1, 0x9, 0x4, 0x8, 0x8000, 0x8, 0x3, 0x0, 0xffffffff, 0x8, 0x3ff, 0x1, 0x2, 0x0, 0x7, 0x80, 0x9, 0x9, 0x200, 0x30000003, 0xdbc, 0x0, 0x5, 0xc6, 0x8000, 0x74797a9, 0x7, 0x3, 0x800, 0x1, 0xc9, 0x3, 0x7, 0x2, 0x8, 0x5, 0x0, 0x4, 0x1, 0x81, 0x7, 0x1000, 0x6, 0xe, 0x1ff, 0x1, 0x3, 0x3, 0x7, 0x401, 0x5, 0x80, 0x4, 0x6, 0x2, 0x80000000, 0x2, 0xfffffb2b, 0x80, 0x81, 0x2, 0x3, 0x7ff, 0x9, 0xfffffff7, 0x1000, 0x2, 0x1e, 0x4, 0xf, 0x3ff, 0xfffffff8, 0xf169, 0xf, 0xfffffffb, 0x0, 0xffffffff, 0x1, 0x3, 0x1, 0x5ffa, 0x1, 0x80000001, 0x8, 0x4, 0x7, 0xfffffffe, 0xfffffe01, 0x8, 0x2, 0x400, 0x7fffffff, 0xf0, 0x800, 0x1ea9, 0xe, 0xa, 0x9, 0x1, 0x3, 0x8, 0x3, 0x6, 0x800, 0x6, 0x9, 0x843, 0x5, 0xff, 0x1, 0xde66, 0x3, 0xb, 0x7, 0x5, 0x2]}]}, @TCA_RSVP_PINFO={0x20, 0x4, {{0x7, 0x2a4e, 0x6}, {0xff, 0x6, 0xbb}, 0xff, 0xa, 0xb}}]}}, @f_rsvp6={{0xa}, {0x14fc, 0x2, [@TCA_RSVP_CLASSID={0x8, 0x1, {0xfff3, 0x3}}, @TCA_RSVP_ACT={0x14bc, 0x6, [@m_xt={0x134, 0x8, 0x0, 0x0, {{0x7}, {0x28, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'raw\x00'}]}, {0xe5, 0x6, "67c102b5eafa00c32e372853937bfa3343e8e77211fb2e1f9846a82cd3574cc8ebb955dbccd8a2c289f03394aea923fcf046e2b0793a312112ff6b2c6549906a91a37229ff14195ae5f7080f31cb52b3b81c644fe8be88f27c496f61676c6ee104a0f7d82010be2dc3f4f36d1687b6f318f5d8b280820a31858840c05ff6d8a7604929854df6d30b51e655aefd059c2099c189e6983aeaaeab3ec2cfa30abb468e7de56697c2b007fb0f025d1a8ee49bf0f625cd1ff97d767fb513c0b6fdce907b3ff2d45b3a051fc50026edd07c101eef500eba3f6d6186529f9d16049b395c63"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x5}}}}, @m_simple={0x70, 0x11, 0x0, 0x0, {{0xb}, {0x34, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0xa, 0x3, 'wlan0\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x6, 0x2, 0x0, 0x6, 0x5}}, @TCA_DEF_DATA={0xa, 0x3, 'wlan0\x00'}]}, {0x14, 0x6, "7ca2216e2275f59e6552995fd5118217"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3}}}}, @m_vlan={0xe0, 0x5, 0x0, 0x0, {{0x9}, {0x24, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x1b3}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x7de}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xdae}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x37a}]}, {0x91, 0x6, "c7f4b437a926b407bdd898f047b330fb7ce3aa579fbb85e4d863462202d97cd4ca8808b2f3d22cecd76b0cf0c3a3f7412138834bb59efa725b25b33e039af7950f8d3e7b16981d9d3a9e028e33da4ef27ac28bf02f410e9dcae17a39de10619f92716f7a245e2ed309c09301b21d8f08f9c29b21feca7bffd91d420ab1413be7718921d713fe1e6428a3df4011"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_tunnel_key={0x13c, 0x14, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e22}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @multicast2}}]}, {0xee, 0x6, "8e5df0a019b63e8c2e11b14c1e63e1560f68f623268d398c76080fdf4afcd5716915433fa208b2ab358d52de1f26907472b8d07545de91a097a7fc285b21a68a2b54ff96f8a9ae747725efe9fa320e93d37bbd8ae3c92c345e05148be8ff8b9a3375155db903c4cff4dd97cf3689e7d638bbfc42bdee29b1463557df3148365d279a82a135c43f3bd65df4d8dc19d5cb3205c3970174b7558f16b352276c48b4d96ec6de1ccd07d1e3902fe79217321dbacc0e935caf6c3894db85888dbd117062b2fdb8a7b57c341b058f01eb13b4f9bc792f70c843aa0387f82d61bf455b81b06be3db52ae7b177c5b"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_tunnel_key={0x1034, 0x19, 0x0, 0x0, {{0xf}, {0x4}, {0x1004, 0x6, "b74303dc619dd36457835d5db9150730ad39809bdcd14752a45d84d8b73d41267b3e160399187dc44925f0a1dc32c34dcff22f94a9a7545030a8462810924e2d35d811eac7d0efd6fd6b491809f60a535a19c4cbf20df84383415e181b4b6b09873e0d2a0c16da6eea65e5731b927c776f3752419f307bd55baf0a6809ba044d3429599fbc051a3f75a0b1dad3cfe071fe1305c9b23248b62c9016f1c2d15f4a63cda468c303a4562e0e9d50ff47db8fca2796c71bf11b55c396865ba9aaa6530ba319699cdce3a38955b92c76dd04cb0b1f761ee0ad3a58d79bd743f6522abff3b85a7f8c6e3c0482fdce1efdf338e3419e41820bfc0b0b00b1bcb44869d8225907535830b63f6d6b2f427471f6495294458e3229b30a3e349b9807912aec3086dff11f3ce1bfa2c2a12d090998335d07ab84c1328d546753a71691bb9371507be1a47bb20d88aa60999e694e9dccdba33ee8f134c4a5604012ae88bb11a9b688e76ba3ea189e6cb53b12d45ef9dc0ca02f3b36852ebc649a3f647b6bc541f1ee95273b3cd13e0ea8d66c954cd3e638ac393ee487bb90b572ebb60e93d693af65dcaad4ff3b1a1eeee88c58afb1fb1190992583990b3a017ec9903f85c3871666281b6ea335c7e687c9591d5c1d61fbe322576c910925987df81c984843e4d6af9b4e5db1f8e05712a4a96a9fa6bf6353ce3de30d497fad6735fb87c6b2706cff462d426d1eb104c779e02d7d8c13dba95135b5187511c11dd6121ec61f7261cff08b1b6db60fa53c5a4ee1800ee1bd197d498747424558493dbee12fb478811c4ab74e681c866464ed3718ae776c1eff1ee9f42d230ac8d68085addd04ca831ea61a498e0729fde49e70689ec24156f008824775326a42ca3a14c911a020584ab632d44e02f3068a8be141ae2f1211e41e2ad0e290226fb6efff7d279b001c11bd2306b576928d20bb03bf059e2aedc82aa79ce2f77e9d604d01a7a31bba82509ec3329a737a2466633cacd2023bf74eb86aba9f1e0a2296913163d7606a95253dc11372ac489a382fd2ef6828b5e3e9b4640190f9ae0ce828966c3cfff02230f83600e6b1a0aebb0586fbcfa1423b94950d49348873749b4dd589d723df1f7fc3bad291fc199b16d70388fccbeb7e81460e6bc9a70fe740139d4534aaced47573fdd5f68447c856175bbbd46798ba1f5dccc24a7427871521a180818699c526537719aa6c9176f819f5f6a427575ec8add844fd98465d987ca501928bf3c836e128bf2934d52ce3f8431d6244fe2803cf786462a26a47ada11c9cd41f7f8ef38899dddd6b3a820955584e1af476a35bf9af58ca5ad7d2a0ce43bfd0ae55b2d534ce92b4806434d973215fa180275ab18bd5486157d81464cbdea87113f32a8c75f4a68bde2db3f803267e36be9916cf632149ce0261bb85ef3d66c5fbd81bbf9489643caa189df57481451d371181bb567ccf0c20b31e784c440cbe56b8a864af04b17efb6efa3df46b31a6381fc241d6304cdbb694969332704bcce1a29a19d0a3bf64a9ff228cea7d3debf30e22a3b3560a1f7531aefe529f216e45d497004ca039e1fc78ef01f54e1e0c956243175b09908ebc2eaf4c0a37bc161689274e54c846fb0d3d82b7e75e251073480c457f696f016f8c1e69a2d973d1dbc51a72bb1de180e906ce34e5bacb13403e7faddc7dc701e83411028e033652e577954a76433d5ff357bb701136e282120545bb587b43c41fc32e6eed3c3300c2d87111e460234b555e62a0450c8dd78425d748b646d737ad4de3a2f7804e1936dbabd4f369d7c06090817689ae4205f0e9a04567306c5cbb4879eaf61c2560d7ba61207e88174386451a81b4f8160efa4d0660cf6aa3cf891d058c6f57439211ce45ff03e9a2f82451cdc56621d87482c48b4f7ed134b912b6e74b2256ba3ddc153e1ad9b33dbcc024ecb3844d6ec3b080682c0e96d4c15570133dd67f2542ecb5e207d12d9a8ca75744865093348701950a6d5dbf91ee0af57e95542c92d0de48be8042555ff34937e336c55eaedb6a95e4783e7d6855a8701cefd6653c52ad0664d225f52834925f2c2af785a75eaa43404323ba41d6a551f0381612c96d75da3b26e318a5779a4ba726b20b9f78feeadb418948c3c6b59c0b04bce1e0ac56121860e294244272305739fb469b4390da37a5834b343198323150ba487ff15aa3bfd413f9e5edc0f021ec0c55bea587326cecf5c7ea6e1b9ba9e5605d692a0225da7c5475f682fd3c1608b3ed8e022c289da8214cb8a559dfd7bc03cde7d44d9d831fd9e30eded1afab5ccc6774f14e5dd09597a9bf5e6fdf9c38f8900cc47b58e51831bf14cf3050ae08a908265e62aff7b8371d0951203eeb77f79b6015299caeda111c233bed2c816813921785de00eb71d74d75d425f83535d5e7ccf3b001953119785f64ce9771123df572d1b5f11dbfdbb584e46241ab3662b49cbde7d192940b6ab54f132808d7963b233cb68120bb8f53191404b8b5490025dd7b3d195d975e6bc9accd83d1f1be88f521ead5bff5ddaa950d768332e63c319880ba2625aee9c1aa288954a342879cca91f69f5e185056be04b0ef5e0f293f56807df943504d19123fcc7e3beff1ee35ed4fda6d91c32bada4cfe0de0e890107c4ded8fd9012f90d1836da55616b46d2d8beeee2ea50453fc9264a99a178f1c84bacaf7e4f1eaeec46a48a6051310f9f061282b8b482d48f9eed35dc1e5fec9a382ca8affaa2da152ea2ed045199cf10e2d9b5ec2dac45d636f1d577a3becdcff39a1d1bc525140a36f911acba8243aa7c74192da4c8ed3ab4d5e2d4479163385e8797f8efed76412b3ca7c8fbca963b9d52f23eef549d58c04492bd5d03290c028574016311ee47634be8ee7aa8ae00471022919c14c7c0711ce972a756fadaa3274fa8e5ea05de276ca2ae2a6be39043c4fb6949682a975079798cb955500a406b32c64230f5ce58505716111ac8b7546b593bcd9810dfc7dcd882f8d1d19a8c00683a5025e76d1fd4271ada542444979f157d80db462aa54b672b10a9ea372c7b7dc2f6e4363200ba4837a5f73696507d189c7416081c08e14e6fc1ae9b39a22becfe0c2a79568cda033e900cedefc760c950d0475a7f6f0e7aaa071f81a45e7f5dd5c511ba24a8e69c31430b32bf1d516bb3b26ee5737a15954aa44b8f0825d459315e63ddbd6a0584ea7d4fb8c19b0d7e50300df7c8626a271fbf972aac653a01cd500c78d846ecc6fad1f01aaeeb0270e6d8b086c36c5b811ec46274a1b048a654aa14742b8e088dfcb09dc9cc8f94450f849a6fea416918d910de07a17814569074b31e7aab79825123f5788dc0c18bed56964a0ad21105a11636f743f56ec8f0993862bcad4badc94180c7f38561c05d18fabaf4e4a2070d560beda4ffbdc5c36642866eb4f9efaab2ac747b2eccda95134da33ae2f0195760e54db71449c168e98d2948e9861c3d60afe389897c997dc138d71d266db911c79213b2cd9f5d5a63c95473b64a64db154ef159624c6247260a50844bf37f3da935d37e6bcdcfbbd1605b2b170476e77cb3eb951ba78c0eb433f27baaa0e2a34a6aeaf0ed43bc78f20b22256b506e79b88ea80d861b262f7995e3afc91b636ab99fbf0e49091e350bedbbbdbd7e073ca1070cf116ca764a1c984e290170ddd58d13d52753268d34fcfadc9b26e83114a3a71aa5f46a5346e5120cdebf3d36df544d027a1235c3eefe45ddad56bb00804ac5373e541700650561f8d3d997be55203b5a6a1bd40aa5481ed9e260865132783a9c3068fb260e2c91d9d7e82e86a80002b7b4e761931dc6091bfc8a3a062a71299ca2226e848e01f96df124c209140f324a6f89f1b7e9a3a9a5f6f14d879365ebd7ab52e21cde35a9f4fabe1e757485ff861ed5df0f582c5c3d513e932a2535e0cb23fc836943d1da7d630d6573389517ed8dc107a699382d8a7e55aede72af3859b250b7938dc04d8b9233e5fa76983a32068ce3f1eb4134ba8b95664da775ec5edd5fb5bcd0a4f16035d252c8ac88301032c670fbd5aef956b82e865b5b2546d57035d177be41f4c23e054e08f1acce5480dff637a3535deb52cb853808cf6ffbed7d821b9c9f85094909d8d9c4e2be67e887fa6caa79798c87dc67936ff2e908eaff60e38e40b7081a4c7960621180dc1445bf8c9bc24a0b85506a80aa9d78907776734ee9b31013ee0d90dc1d60696d9210eb5e1ec763b61a3cd18b4a95d625cfd1494fd0e35d9d8999f85ade9f5390d76817a58320bc18a9f3adc82721fa7bb4ebaf7522a6cf96204157eb8a0b8397e06dbeec53d1fb2266ea2aa2d3e779a0770a5a8568d1104ab0ec0fbfa504c3eb2651ae11f75714c141dc97c00fc48a949552ee2b17f691b8057e15a4f7dc486bcaaa2f708d31ff1d78394839456073c52bd9527eb008a17400591029a5c50f36c2b3f14a6ac9641a2d8e74c7c07f54dbda9c0526b139360cb46e2ef0f1a78f7e45f69cb8278a5a43c6c711147accefb07db2fd458943c8a28ef8ba3c2182c8115b118d95e0891c522e037d8d040a2c26d07e980571adce29cbc3874ad5f7a0f3a2ad3a624d2e91bd69a90d1126e398a7c1aa1050647fc0378fb1fb27ac86f04140a4dcef97eebc40fe10eb2bd3183b83f9d28f26d214fa9401d87a56c82ad8ae62157ecc3b2cc1cb215b48815cb3a825ba4ef24ded4c3eec4628f33fb10532e92a69c243281177073cfe73a22591db6e3d096e8c47a04c0e7f5f510c450f4aa869746247577333e2f799a83ad9d7a86b674e14734267ae632addac80cf5c4d01873380ecb6dd931fcaaf3782d9de1fc1877a477f0ab754f64e1288ea60fbb25b68bd8df167e5f3c1a21bbbd665dd066cdefab36c5c18eb8f151990bd9caadc2176edaed2f3829981d014531561675838462d884bd6d44b5b587d0b6f39d25eac05c7b63c58cf9820f450fb901a44f38d7125c8d602d338dac64182d2f3e54a812ebc16bbcadd0c4813f6456a1a968eda41a1886a2f4ef6d78c78714d3c54f44fc9b85e2be81d207fe56c5824f441ba5025d66468804b3fb0d8b23766e2c6203a36a6ad10145103592918b43ed4882b02bb74b8922786ae01a1355952427921b2d755aff2ad03b9f6022d28782d3f8aff9318ea84ed260953244f8433465c6f88d9253a67443d89144d5580806849fdc50be1b9e8bdc728440cd96fdd869cc94513358b3ed61e7896d3e6d398aeea8f47ae57e8a4e7f99ef940b7bfb2b2ae48d0170d6a409d5c3563c95e53d61d0f6f08fac96b5edb94f79adae13df9db719e1aec3877f2153bef79e9cc45ccee8eae38490bed68758fdc4d8e2341ec37aac338840dddef605c16fea2d756fc9ee295c7342c019fff92809b40ce3366ede2a8eaebce3668f44ca125da0a057557687bc5ce61bed0d9b746eb436cb72d1b94355cfd5f38b2971109a95ae6c35d497b6de2e447f71190d488920b253f61c4c4c96ca697634f80e4c7ad128c602d6b7dfd1a85677c8107a798bace7c84f0a305eeed1512e526b0aff22bae6cd0e1e7ee8229d7cb7228b4832ad03d419432869b33282ece25e2f935ce64427f7c956e620b074f81c2d2df232df8f524f219a7f993f8bc109e40171bdc9593e9f2998a5b1ab01e2b80ada84cbf604075df22336b11f63c7ab5223c6eb4c249116316d7fa32259434b781aa6a313d8c72b7a5c7a1ea17f6d6fc544d69517e6949f9a6ca3d17a133377a39084bec2c173395f2a67a040cb4e2fef522"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_gact={0xc4, 0x9, 0x0, 0x0, {{0x9}, {0x88, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x1, 0x71d, 0x5}}, @TCA_GACT_PARMS={0x18, 0x2, {0x8, 0x3, 0x7, 0x81, 0xf7}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x1adb, 0x5}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x16a5, 0x10000000}}, @TCA_GACT_PARMS={0x18, 0x2, {0x7, 0x6, 0x2, 0x0, 0x200}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x236f, 0x4}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0xea, 0x20000000}}, @TCA_GACT_PARMS={0x18, 0x2, {0xfffffffd, 0x7f, 0x10000000, 0x2, 0x7}}]}, {0x11, 0x6, "2eae9d7818953eaeb58a6a09b3"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}, @TCA_RSVP_DST={0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, @TCA_RSVP_PINFO={0x20, 0x4, {{0x4, 0x3, 0x400000}, {0xd5b, 0x0, 0x9}, 0x4a49d130e37df186, 0x0, 0x9}}]}}]}, 0x2a68}, 0x1, 0x0, 0x0, 0x8}, 0x4810) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000740)=@newlink={0x4c, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x6}, @IFLA_BR_VLAN_STATS_ENABLED={0x5, 0x29, 0x1}]}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) 4.358712431s ago: executing program 3 (id=4360): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x18, 0x10, 0x3}, @TCA_FQ_FLOW_MAX_RATE={0x13, 0x2}, @TCA_FQ_FLOW_PLIMIT]}}]}, 0x48}}, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x18, 0x10, 0x3}, @TCA_FQ_FLOW_MAX_RATE={0x13, 0x2}, @TCA_FQ_FLOW_PLIMIT]}}]}, 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_GROUP_ADDR={0xa, 0x14, @remote}, @IFLA_BR_AGEING_TIME={0x8, 0x9}]}}}]}, 0x48}}, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x4, 0x0, 0x0) (async) setsockopt$inet6_tcp_int(r0, 0x6, 0x4, 0x0, 0x0) 3.450151185s ago: executing program 3 (id=4362): sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000940)=[{{&(0x7f00000004c0)={0xa, 0x4e1d, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x0) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f00000005c0)=ANY=[@ANYBLOB="9feb010018000000000000007c0000007c00000002000000000000000000020e0000000000000000000000000600000d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c00000000000000000000000900000000000000000000000900000000000000000000000902000000000024ae758ec6e157d0ebebbbad115ea480a5c90dc047e78120623b8b783d5e0ed90f6aec2d54511b886abe24f87850ee23f02b7c5a521cdd77762e69285c86956a1facf7fde5e4241500511aa21a626c673097ba93a27cd6a479bc70f6735824889ec5a5223064857868848a15ce37c8407b5ddfb31f70c8be525d34c685a741ea58cfb839659cce055670f39b342ae78c835b19a1c778aed0d0fadd2001cc4b729968c7eb36905589337c7e22ea9656b454aed26841ab24b55a5c7f032c521e9c9fb22a535c1cb8bd4065dae1c6bf4ad6eb1f034de279c8e5"], 0x0, 0x96}, 0x20) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8, 0x12, 0xfffffffc}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20048811}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0xc0}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000020000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f00000001c0)={0x0, 0x6, 0x0, 0xa}, 0x10}, 0x94) socket$inet_sctp(0x2, 0x1, 0x84) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000480)='ns/uts\x00') mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3032, 0xffffffffffffffff, 0xa0bd6000) writev(0xffffffffffffffff, 0x0, 0x0) r5 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) write$tcp_congestion(r5, 0x0, 0x0) accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000000040), &(0x7f00000000c0)=0x60, 0x80000) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000400)) r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r7) ioctl$IOCTL_GET_NCIDEV_IDX(r6, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r9], 0x1c}}, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000005140)) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c00000002"], 0x5c}}, 0x0) 3.060088521s ago: executing program 6 (id=4364): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r4 = accept4(r1, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_INITMSG(r4, 0x84, 0x2, &(0x7f00000000c0), &(0x7f0000000100)=0x8) recvfrom$inet(r4, &(0x7f0000000480)=""/231, 0xe7, 0x1, 0x0, 0x0) sendmsg$alg(r4, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x890}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r5, &(0x7f0000000240)={@val={0x3, 0x800}, @val={0x1, 0x0, 0x2, 0x0, 0x14}, @ipv4=@icmp={{0x6, 0x4, 0x0, 0x0, 0x34, 0x1400, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local, {[@timestamp_prespec={0x44, 0x4, 0x46, 0x3, 0x3}]}}, @dest_unreach={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @local, @loopback}}}}, 0x42) sendmsg$nl_route_sched_retired(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000580)=@delqdisc={0xd8, 0x25, 0x800, 0x70bd2d, 0x25dfdafe, {0x0, 0x0, 0x0, 0x0, {0xd}, {0x7, 0x9}, {0xd, 0xffe0}}, [@q_dsmark={{0xb}, {0x20, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x8}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x30}]}}, @q_dsmark={{0xb}, {0x18, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x15}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}]}}, @q_dsmark={{0xb}, {0x20, 0x2, [@TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x9d}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0xbadc}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x3}]}}, @q_dsmark={{0xb}, {0x4}}, @q_dsmark={{0xb}, {0xc, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x20}]}}, @q_dsmark={{0xb}, {0x4}}]}, 0xd8}, 0x1, 0x0, 0x0, 0x4008044}, 0x0) recvmmsg(r4, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000300)=""/223, 0xdf}], 0x1}, 0x101}], 0x1, 0x60, 0x0) connect$can_j1939(r4, &(0x7f0000000080)={0x1d, r2, 0x1, {0x2, 0xf0, 0x2}, 0xff}, 0x18) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x2, 0x1}}, {0x4}}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 2.774914343s ago: executing program 3 (id=4367): socket$pppl2tp(0x18, 0x1, 0x1) (async) socket$pppl2tp(0x18, 0x1, 0x1) sendmsg$TIPC_CMD_GET_NODES(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000003c0)={0x1c, 0x0, 0x4, 0x70bd2b, 0x25dfdbfd}, 0x1c}, 0x1, 0x0, 0x0, 0x43}, 0x4008085) r0 = socket(0x1f, 0x5, 0x2000000) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x13, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000090000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000000000008500000073000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x10, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000000000000000000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x80) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x10, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000000000000000000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x80) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x14}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x81}]}]}, @NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xc0}, 0x1, 0x0, 0x0, 0x4000854}, 0x40) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0x3, 0x2) (async) r4 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) (async) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000003c0)={0x0, {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x4a24, @broadcast}, {0x2, 0x4e21, @empty}, 0x244, 0x0, 0x0, 0x0, 0x2008, 0x0, 0x200001, 0x1ff, 0x9}) write$tun(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="080000fa"], 0xdc) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001780)=ANY=[@ANYBLOB="4400000040000100fcff0700040000000100000004004880200001801c00108015000880a831985351cb3d4a57729361f10318be720000400c0002000000000000000000"], 0x44}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5", 0x4) getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x44, &(0x7f00000000c0)={'NETMAP\x00'}, &(0x7f0000000140)=0x1e) (async) getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x44, &(0x7f00000000c0)={'NETMAP\x00'}, &(0x7f0000000140)=0x1e) r7 = accept4(r6, 0x0, 0x0, 0x80800) sendmsg$NL80211_CMD_NEW_STATION(r7, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000001480)=ANY=[], 0x58}, 0x1, 0x0, 0x0, 0x20000081}, 0x4000) (async) sendmsg$NL80211_CMD_NEW_STATION(r7, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000001480)=ANY=[], 0x58}, 0x1, 0x0, 0x0, 0x20000081}, 0x4000) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r8, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) (async) bind$inet6(r8, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) sendto$inet6(r8, 0x0, 0x0, 0x24010045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x3}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r8, 0x6, 0xd, &(0x7f0000000000)='cdg', 0x3) shutdown(r8, 0x1) socket$nl_generic(0x10, 0x3, 0x10) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000880)={0x14, 0x41, 0x119, 0x0, 0x0, {0x1f, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) (async) sendmsg$nl_generic(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000880)={0x14, 0x41, 0x119, 0x0, 0x0, {0x1f, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) 2.456465906s ago: executing program 2 (id=4371): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000020500000a3c000000090a010400000000000000000a0000040900010073797a3100000000080005400000002b090002007379"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000200)=0x1, 0x4) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000400)={'wg2\x00', 0x0}) bind$xdp(r1, &(0x7f0000000100)={0x2c, 0xa, r4}, 0x10) bind$xdp(r0, &(0x7f0000000180)={0x2c, 0x1, r3, 0x80000, r1}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002800500190084"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r5 = socket$igmp(0x2, 0x3, 0x2) getsockopt$inet_mtu(r5, 0x0, 0xa, &(0x7f0000000080), &(0x7f00000000c0)=0x1) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={r6, &(0x7f0000000080), 0x0}, 0x20) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2.265794081s ago: executing program 5 (id=4372): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$pppl2tp(0x18, 0x1, 0x1) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)={0x34, 0x40, 0x4, 0x7fffc, 0x4, {0x1}, [@nested={0x4, 0x48}, @nested={0x10, 0x1, 0x0, 0x1, [@nested={0xc, 0x18, 0x0, 0x1, [@nested={0x4, 0x7}, @nested={0x4, 0x8}]}]}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x34}, 0x1, 0x0, 0x0, 0x4044801}, 0x4008094) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f00000024c0)=@raw={'raw\x00', 0x8, 0x3, 0xc98, 0x908, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0xbc8, 0xffffffff, 0xffffffff, 0xbc8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x0, 0x0, 0x4}, 0x0, 0x8e0, 0x908, 0x0, {}, [@common=@unspec=@u32={{0x7e0}, {[{[{0xd8800000, 0x1}, {0xec, 0x2}, {0x6, 0x3}, {0x80}, {0x6, 0x2}, {0x10000, 0x2}, {0xd}, {0x2}, {0x4, 0x3}, {0x1, 0x1}, {0x4}], [{0x9, 0xfffffffb}, {0x7, 0x7}, {0x2, 0x80000000}, {0x9, 0x1}, {0x799, 0x8001}, {0x0, 0x2}, {0xc2, 0x5}, {0x8, 0x1000}, {0x40, 0x9}, {0xff, 0x81}, {0x636, 0x6}], 0x6}, {[{0x8, 0x2}, {0xe000}, {0xb8b4, 0x1}, {0x3c5f9b87, 0x3}, {0x3, 0x1}, {}, {0x29b5, 0x2}, {0x54a2f77, 0x3}, {0x3, 0x3}, {0x1000, 0x2}, {0x1, 0x2}], [{0x6, 0x5}, {0x5, 0x7}, {0x2, 0x3}, {0x80000000, 0x2}, {0xee84, 0x8000}, {0x9, 0x9}, {0x3800000, 0x3}, {0x800, 0x9}, {0xfffffffa, 0x1}, {0x0, 0x2}, {0x7, 0x7}], 0x4, 0x3}, {[{0x286f, 0x1}, {0x554b, 0x3}, {0x0, 0x3}, {0x6, 0x3}, {0x5}, {0x9, 0x1}, {0x6000000, 0x3}, {0x400, 0x3}, {0x9, 0x2}, {0x8001, 0x2}, {0xc5bf}], [{0x6, 0x7f}, {0x5, 0xfffffff9}, {0x7, 0x8}, {0xb, 0x3}, {0x8, 0x9}, {0x2}, {0x7}, {0x7, 0x1000}, {0xfff, 0x2e4}, {0x0, 0x400}, {0x0, 0x8}], 0xb, 0x4}, {[{0x5, 0x2}, {0x2, 0x1}, {0x6, 0x3}, {0xfffffffc, 0x1}, {0x4, 0x3}, {0x10001}, {0xca0, 0x2}, {0x10, 0x1}, {0x8, 0x1}, {0x6796, 0x3}, {0x8, 0x1}], [{0x6, 0x6}, {0x1, 0x7}, {0x5, 0x9}, {0xffff, 0x2}, {0xc, 0x5}, {0x51a3, 0x3}, {0x8, 0x5}, {0xfffffff7, 0x9}, {0xd0, 0x1}, {0xfffffff8, 0x8}, {0x7656, 0x2}], 0x7}, {[{0x2, 0x2}, {0x10001}, {0x4eb}, {0x10000, 0x3}, {0x2, 0x2}, {0x3}, {0x81}, {0x4, 0x1}, {0x10001, 0x2}, {0x9, 0x3}, {0x1, 0x2}], [{0x4}, {0x0, 0x400}, {0xd9a8, 0x7}, {0x1000, 0x8f8}, {0x3, 0x10001}, {0x2745, 0x7c67}, {0x6, 0x80}, {0xfffffff9, 0x2}, {0xffff, 0x2}, {0x1000, 0x9}, {0x3, 0x2}], 0x3, 0x4}, {[{0xabb918, 0x1}, {0x3, 0x1}, {0x8, 0x2}, {0x9, 0x1}, {0x2}, {0x9, 0x1}, {0x80000000, 0x3}, {0x1, 0x2}, {0x0, 0xc49aafde8229cbf1}, {0x4, 0x1}, {0x3, 0x2}], [{0x8b, 0x9}, {0x6, 0x553}, {0x1, 0xe0}, {0x3, 0x4ad}, {0x0, 0x10001}, {0x1, 0x2}, {0xd1, 0x100}, {0x6, 0x7641}, {0x2, 0xfffffffc}, {0x2, 0x4}, {0x9, 0x2}], 0x1, 0x1}, {[{0x8015, 0x3}, {0x3, 0x1}, {0x1, 0x2}, {0x0, 0x2}, {0x37b, 0x3}, {0x5}, {0x2, 0x3}, {0x1, 0x2}, {0x7f, 0x2}, {0x6, 0x2}, {0xfffffff6, 0x2}], [{0x9, 0x7}, {0x8, 0x7}, {0x6, 0x4}, {0x800, 0x80000001}, {0x0, 0x10000}, {0x2, 0x3b58}, {0x4ca7ea08, 0x8001}, {0x0, 0xa9b}, {0x1ff, 0x4000}, {0x5, 0x2}, {0x8, 0x4}], 0xa, 0xb}, {[{0x10001, 0x3}, {0x3}, {0xc, 0x1}, {0x7a, 0x3}, {0x6, 0x1}, {0x80000001, 0x3}, {0x4, 0x2}, {0xa}, {0x401, 0x1}, {0x9}, {0xfffffffe, 0x2}], [{0x200, 0x1}, {0x8, 0x1aaa}, {0x706, 0x9}, {0x9, 0x2}, {0x4, 0x7}, {0x5, 0x9}, {0x3}, {0x5, 0xbf789c5e}, {0x8, 0x3}, {0x7, 0x10001}, {0x1}], 0xa, 0x1}, {[{0xc2}, {0x5, 0x1}, {0x7cd72bba}, {0x8, 0x2}, {0x400}, {0x7ff, 0x3}, {0x10001}, {0xe1a}, {0x9, 0x3}, {0xfffffffc, 0x3}, {0x9}], [{0x10, 0x4}, {0x1, 0x10000}, {0xbf9, 0x6}, {0x4}, {0x101, 0x8}, {0x100, 0x4}, {0x0, 0xb6e}, {0x7f, 0x8}, {0x9, 0x7}, {0x800, 0x92a}, {0xd, 0x2}], 0x9, 0x2}, {[{0x8, 0x3}, {0x80000002}, {0x8, 0x3}, {0x4, 0x2}, {0x1, 0x3}, {0x4}, {0x4, 0x1}, {0x1, 0x3}, {0xc, 0x3}, {0x101, 0x2}, {0x1}], [{0x4, 0x3}, {0x0, 0x8}, {0xffffe5cb, 0x1}, {0x7f, 0x2}, {0x40, 0xffffffff}, {0x2, 0x7}, {0x7fff, 0x6}, {0x0, 0x8}, {0xffffff2e, 0x7ff}, {0x90, 0xa}, {0x3, 0x7}], 0x6, 0x2}, {[{0x1ff}, {0x5, 0x2}, {0x10001, 0x1}, {0x2, 0x2}, {0xff, 0x1}, {0x1, 0x1}, {0x800, 0x3}, {0x80000001, 0x2}, {0x1ef6, 0x2}, {0x1, 0x2}, {0xba, 0x3}], [{0x18d, 0x5}, {0x0, 0x2}, {0xdf91, 0x1}, {0x3, 0x6}, {0x4, 0x7ff}, {0xa64, 0x101}, {0x7, 0x4}, {0x401, 0x2}, {0x7ff}, {0x0, 0xd4}, {0xef}], 0x2, 0x7}], 0xfe}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x80}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0xc4, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff, 0x40}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0xffffffffffffffff, 0x0, 0x41, 0x0, 0x2, 0x1004, 0x6, 0x3}}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x8000, 0x16a, 0x1, 'syz1\x00', 'syz0\x00', {0x80000001}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0xcf8) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) write$tun(0xffffffffffffffff, &(0x7f0000000540)={@void, @val={0x3, 0x80, 0x9, 0x7, 0x3, 0x7}, @x25={0x0, 0xf8, 0xf7, "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"}}, 0x107) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="050000000000000000000689b262cd2c02146100000008000300", @ANYRES32=r4, @ANYBLOB="0800050002000000"], 0x24}}, 0x0) ioctl$VFAT_IOCTL_READDIR_SHORT(r1, 0x82307202, &(0x7f0000000300)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x24, r3, 0x5, 0xfffffffc, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x78b}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x101) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r6, 0x1, 0x45, &(0x7f0000000000), 0x4) ioctl$SIOCSIFHWADDR(r5, 0x8b04, &(0x7f0000000000)={'wlan1\x00', @random="020000000100"}) 2.195918676s ago: executing program 6 (id=4373): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_udp(0xa, 0x2, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet(0x2, 0x4000000000000001, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0xc, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000000c0)=@ipv6_getaddr={0x18, 0x16, 0x1, 0x0, 0xfffffffc, {0xa, 0x0, 0x0, 0xfe}}, 0x18}}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x9, 0x2, 0x56d, 0x2}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0xf, &(0x7f00000002c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {0x85, 0x0, 0x0, 0x16}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r3, 0x3e8, 0xf, 0x0, &(0x7f0000000000)="c1df07000000d30a298ee68886dd87", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) r6 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8}, {0x18, 0x2, [@TCA_RED_PARMS={0x14}]}}]}, 0x44}}, 0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(r1, 0x29, 0x2d, &(0x7f0000000140)={0x7, {{0xa, 0x4e20, 0x2b9, @rand_addr=' \x01\x00', 0x3}}}, 0x88) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000006c0)="2e00000010008188e6b62aa73f72cc9f0ba1f848140000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x80) 2.086829316s ago: executing program 5 (id=4374): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0xd, 0x9, &(0x7f0000000680)=ANY=[@ANYBLOB="1808000000000000000000000000000085100000050000008500000088000000a70000000000000018000000000000000000000000000000950000000000000081ffffff00000000"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x34}, 0x90) (async) r0 = epoll_create1(0x80000) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TYPE(r1, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000980)={0x38, 0xd, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x38}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000240)={'batadv_slave_1\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x0, &(0x7f0000000140), &(0x7f0000000180)='syzkaller\x00', 0x8b, 0x62, &(0x7f00000001c0)=""/98, 0x41000, 0x48, '\x00', r2, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x1, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f00000002c0)=[0x1], &(0x7f0000000300)=[{0x4, 0x3, 0xd, 0x4}, {0x4, 0x1, 0xa}], 0x10, 0x80}, 0x94) r3 = socket$inet_sctp(0x2, 0x1, 0x84) (async) r4 = epoll_create1(0x80000) (async) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r3, &(0x7f0000000080)) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000500)) ppoll(&(0x7f0000000040)=[{r0, 0x504}], 0x1, &(0x7f00000000c0)={0x0, 0x3938700}, &(0x7f0000000100)={[0xbdb]}, 0x8) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r3, &(0x7f0000000000)={0x40000000}) (async) r6 = socket(0x11, 0xa, 0x0) bind$packet(r6, 0x0, 0x0) close(r4) r7 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) ioctl$SIOCAX25ADDUID(r7, 0x89e1, 0x0) 2.002143719s ago: executing program 3 (id=4375): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(0x3) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0xfff7fffc, @ipv4={'\x00', '\xff\xff', @dev}, 0xffffdaf0}, 0x1c) setsockopt$inet_opts(r1, 0x0, 0x4, 0x0, 0x0) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000580)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000540)={&(0x7f0000000200)={0x20c, 0x0, 0x202, 0x70bd2a, 0x25dfdbff, {}, [@TIPC_NLA_SOCK={0x14c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x8001}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9626}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x43da}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xfec}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x100}]}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x10000}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2273}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xffffff7f}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}]}, @TIPC_NLA_SOCK_CON={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x800}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x40}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x274}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x86}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7fffffff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x240}]}, @TIPC_NLA_SOCK_CON={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x80}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7fff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x66}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7ff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}]}]}, @TIPC_NLA_NET={0x20, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x17}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x80000001}]}, @TIPC_NLA_NODE={0x8c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x3b, 0x3, "338c427603cc43038c65ebbf1bf0c226f71c24ff4a65acd71d519a3a2d918a11657ee0389497fd834a8c0866ebab7a953231fd3de2f187"}, @TIPC_NLA_NODE_KEY={0x4a, 0x4, {'gcm(aes)\x00', 0x22, "3af125d5955a712598d3029f6493d9a5d07077d6ec727f35ff7dc057f1004dbb7c36"}}]}]}, 0x20c}, 0x1, 0x0, 0x0, 0x4840}, 0x40) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000000b00010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000f40)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800) sendmsg$NFT_BATCH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000740)={{0x14}, [@NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x801, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x54}, 0x1, 0x0, 0x0, 0x28008000}, 0x20000800) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f00000022c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r4, 0x0, 0x99, 0xfe, &(0x7f0000000ac0)="cb1c445b7d4c0b24676c6c71ae37efcedaf40242309766deb4e793f90000000000000000dbc856cbc664650634231454ca2d8034c4ca29e0d99c3b6615e91835a600c08f989af45438a5274dbe310aad92ae545b1c961e5f3762a51fe4c736edec6fce2b97aee2aaaf698e328774c653a1601d622d012bda2709b826cb3060ea266f3fcddf279b5ba181b515b3c4b8a91f27daf9fa353f330f", &(0x7f0000000980)=""/254, 0x2f00, 0x0, 0x162, 0x194, &(0x7f0000000bc0)="ffc4438e5c3081d0e133e812196ec0ed923733aa8b5aba32c8650e7a66d6136853773dfbc6226be13039e230d511f1ac50cc7811aac0400e4c833fedf842ae2918e6fddb550729246fcf4c0a01bc64989ea3985fb362751a83991bd56e761379caa64f6148893ff25f38d5e06bd695bbf9ca709a9960e0e6b054d5e2239bcb7c0fb2ac66dc4c8f534e439ff20ccaf0d48a98c19c92a3b437a699350f49606d21a403f8c112c46fea5486bf367a854b0f6c1e563b656e4794f6793a08bb3656c391643f6df71d0255054368a938d38503d064da82d5dbf395ad47ed3932669168d324ed0f5a23a861499042ddc7d02b6c0772128257702bfe6df0430000ea85da062cdc823b9d218fbd668dafc1f66583f3e6f3f0e1e88db8bf0fe34c9c229373c79df4b8c2437fdd229e0c275d55b258a9cc2bb87e3aeb1335b870570f8113e68d86e215f96610ae21b2a7d5b51b1d2f8b6393cd7a75907980356ba235b3220be385", &(0x7f00000007c0)="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", 0x2, 0x0, 0x10000}, 0x50) 2.001711182s ago: executing program 2 (id=4376): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x2, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="850000001b000000040000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @mcast2, 0x40}, 0x1c) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f0000000340)={@val={0xa}, @void, @eth={@multicast, @remote, @void, {@ipv6={0x86dd, @udp={0xd, 0x6, '\x00 \x00', 0x10, 0x11, 0xff, @empty, @mcast2, {[], {0x4f19, 0x4e20, 0x10, 0x0, @gue={{0x2, 0x0, 0x3, 0x5, 0x100}}}}}}}}}, 0x4a) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a44000000060a0904000000000000000002000000180043474cefcc2ef73fa696950480140001800a00010072616e67650000000400028009b591db75606cce0803aef5b173797a3200000000140000001100010000000000000000000000000a000000000000001d118dfab35f0a2fb6d9781da34b447d81c107da716945f552df89a1"], 0x6c}}, 0x0) 1.975354408s ago: executing program 7 (id=4377): sendmsg$NL80211_CMD_DEL_KEY(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x5c, 0x0, 0x400, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0xc63, 0xd}}}}, [@NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "d56c653a70"}, @NL80211_ATTR_KEY_SEQ={0x14, 0xa, "6b1aa1711edf835f4e091c55b983a8cf"}, @NL80211_ATTR_KEY_SEQ={0x4}, @NL80211_ATTR_KEY={0xc, 0x50, 0x0, 0x1, [@NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}]}, @NL80211_ATTR_KEY_DEFAULT={0x4}]}, 0x5c}, 0x1, 0x0, 0x0, 0x48000}, 0x4004) (async) r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'netdevsim0\x00', 0x0}) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000300000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffd62}, 0x94) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REQ_SET_REG(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="10002cbd7000fbdbdf251b0000000800f49c38d1000200000007002100626200000000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x4040080}, 0x20000090) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000080)="30a0", 0x2}], 0x1}, 0x4040001) (async) recvmsg$unix(r4, &(0x7f00000038c0)={0x0, 0x0, 0x0}, 0x1) (async) recvmsg$unix(r4, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000500)=""/116, 0x74}], 0x1}, 0x2) (async) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000037c0)=@bpf_ext={0x1c, 0xf, &(0x7f00000008c0)=ANY=[@ANYBLOB="1800000003000000000000000400000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000c603004000000000a000000083000000bf0900000000000055090100009d00000095000000000000000600000000000000b7020000020000008500000085000000b7000000000000009500000000000000"], &(0x7f0000001340)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41000, 0x4e, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xf0c3, r2}, 0x94) (async, rerun: 64) r7 = socket$inet_udplite(0x2, 0x2, 0x88) (rerun: 64) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r9 = socket(0x10, 0x80002, 0x0) getsockopt$inet_sctp_SCTP_STATUS(r7, 0x84, 0xe, &(0x7f0000000600)={0x0, 0x3, 0x40, 0x9, 0x9, 0x14, 0x6, 0x3, {0x0, @in6={{0xa, 0x4e24, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4}}, 0x0, 0x10001, 0x6, 0x200, 0x21}}, &(0x7f0000000240)=0xb0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r9, 0x84, 0x13, &(0x7f0000000480)={r10, 0x6}, &(0x7f00000004c0)=0x8) (async) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32=r8, @ANYBLOB, @ANYRES32=r9], 0x44}}, 0x2000800) (async) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r2, r8, 0x25, 0x1, @void}, 0x10) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000200)=ANY=[@ANYRESOCT=r6], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc9, &(0x7f0000000080)=""/201, 0x0, 0x8, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000700)={0x0, 0x7}, 0x10}, 0x94) (async) r11 = socket$alg(0x26, 0x5, 0x0) (async) bind$alg(r9, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-neon\x00'}, 0x58) setsockopt$ALG_SET_KEY(r11, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r12 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet_sctp(r12, &(0x7f0000002f80)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002e80)=ANY=[@ANYBLOB="20000000000000008400000002000000040002900200000000000000", @ANYRES32=0x0], 0x20}, 0x851) (async) r13 = accept4(r11, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r13, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0) (async, rerun: 64) recvmmsg(r13, &(0x7f0000002180)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000500)=""/254, 0xfe}, {&(0x7f00000000c0)=""/50, 0x32}], 0x2}, 0x3f}], 0x2, 0x60, 0x0) (async, rerun: 64) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r14, 0x8946, &(0x7f0000000080)={'dummy0\x00', &(0x7f0000000000)=@ethtool_sfeatures={0x3b, 0x2, [{0x80001}, {0xfbfffffa, 0xa23e}]}}) 1.750761671s ago: executing program 5 (id=4378): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'geneve1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=@newlink={0x2c, 0x10, 0x403, 0x70bd2b, 0x0, {0x0, 0x0, 0x4, 0x0, 0x300}, [@IFLA_IFALIASn={0x4}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x2c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'geneve1\x00'}) (async) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=@newlink={0x2c, 0x10, 0x403, 0x70bd2b, 0x0, {0x0, 0x0, 0x4, 0x0, 0x300}, [@IFLA_IFALIASn={0x4}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x2c}}, 0x0) (async) 1.645585197s ago: executing program 7 (id=4379): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x91}]}, 0x44}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MON_SET(r3, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000480)={0x114, 0x0, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@TIPC_NLA_NET={0x20, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x5}, @TIPC_NLA_NET_ID={0x8}]}, @TIPC_NLA_SOCK={0x40, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x2}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xbb}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}]}, @TIPC_NLA_NET={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x28000}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}]}, @TIPC_NLA_MON={0x3c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x64940e31}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xffff8518}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xbb7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xc}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x200}]}, @TIPC_NLA_SOCK={0x50, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8}]}, @TIPC_NLA_SOCK_CON={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xd}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffffe370}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7fff}, @TIPC_NLA_CON_FLAG={0x8}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x114}, 0x1, 0x0, 0x0, 0x10}, 0x800) 1.546492287s ago: executing program 5 (id=4380): r0 = socket(0x10, 0x3, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000300)="d8000000180081054e81f782db4cb904021d080406037c09e8fe55a10a0015400200142603600e122f00160006000400a8000600200005400700027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1, 0x0, 0x0, 0x4a0f0000}, 0x0) (async) sendmmsg(r0, &(0x7f0000000000), 0x0, 0x16) 1.423602199s ago: executing program 6 (id=4381): r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x3261e) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2000001, 0x12, r1, 0x0) getsockopt$ax25_int(r0, 0x101, 0xc, 0x0, &(0x7f0000000080)) r2 = socket(0x40000000015, 0x5, 0x0) bind$inet(r2, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendmsg(r2, &(0x7f0000000200)={&(0x7f0000000040)=@in={0x2, 0x0, @rand_addr=0x64010100}, 0x80, 0x0, 0x0, &(0x7f0000019580)=ANY=[@ANYBLOB="1000000000000000040000000000000010000000000000001401000007"], 0x20}, 0x0) 1.197415787s ago: executing program 7 (id=4382): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x802001, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x2c, 0x40, 0x1, 0x7fffc, 0x4, {0x1}, [@typed={0x4, 0x119}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x30, 0x0, 0x0, @fd=r1}]}, @typed={0x8, 0x2, 0x0, 0x0, @fd=r1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x31, &(0x7f0000000200), 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) listen(r3, 0xbabc) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r3, 0x84, 0x1e, &(0x7f00000002c0)=0x400, 0x4) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r3, 0x84, 0x1e, &(0x7f0000000000), 0x4) (async) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r3, 0x84, 0x1e, &(0x7f0000000000), 0x4) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f00000003c0)=0x800001, 0x4) (async) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f00000003c0)=0x800001, 0x4) bind$inet6(r2, &(0x7f0000000380)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r2, 0x0) listen(r0, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0x6, &(0x7f0000000040), &(0x7f0000000080)=0x4) (async) getsockopt$inet6_tcp_int(r0, 0x6, 0x6, &(0x7f0000000040), &(0x7f0000000080)=0x4) socket$alg(0x26, 0x5, 0x0) (async) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) accept4(r4, 0x0, 0x0, 0x800) (async) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3", 0x8}, {0x0}], 0x2}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{0x1}, &(0x7f0000000240), &(0x7f0000000300)}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{0x1, 0xffffffffffffffff}, &(0x7f0000000240), &(0x7f0000000300)}, 0x20) r7 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000040)={0x8604}, 0x10) (async) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000040)={0x8604}, 0x10) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000001a006da800000000000000001c000040"], 0x1c}}, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000540)={r6, &(0x7f0000000400)="b2e7b35c8c1bbe47318e4a1dfb3e6d81483564294d5ad5ecfbea4474e8078be36c99da97909aa9c7013350a53aeddf84254b8c9cd95d8e066a1dd5d62bbdea0d2b5453e00e180a9307ef5835a01bcf7ec3d9812f36613a52c0b69440942aba410c068329ab0800369ce5af236e2c50b9", &(0x7f0000000480)=@tcp6=r7, 0x1}, 0x20) close(0x3) 1.196923745s ago: executing program 6 (id=4383): r0 = socket$qrtr(0x2a, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000b80)=@newtaction={0xa8, 0x30, 0x1, 0x0, 0x0, {}, [{0x94, 0x1, [@m_tunnel_key={0x60, 0x1, 0x0, 0x0, {{0xf}, {0x30, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0x30, 0x2, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa8}}, 0x0) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x60, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x6}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x60}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019f000000000000000002000000000000000800010001000000040004"], 0x24}, 0x1, 0x0, 0x0, 0x4005}, 0x0) sendmmsg(r3, &(0x7f0000000000), 0x4000000000001f2, 0x0) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={0x0, @l2={0x1f, 0x7f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x903d}, @nl=@kern={0x10, 0x0, 0x0, 0x800}, @isdn={0x22, 0x8, 0xcb, 0xe, 0xe}, 0x8004, 0x0, 0x0, 0x0, 0xc9f, &(0x7f00000000c0)='veth1_to_bridge\x00', 0x2, 0x10, 0xf}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f00000003c0)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@delchain={0x24, 0x5f, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0x5, 0x2}, {0x1, 0xe}}}, 0x24}}, 0x0) r6 = socket$qrtr(0x2a, 0x2, 0x0) bind$qrtr(r6, &(0x7f0000002240)={0x2a, 0x0, 0x4001}, 0xc) r7 = socket$inet6(0xa, 0x1, 0x84) setsockopt$inet6_int(r7, 0x29, 0x1a, &(0x7f0000000080)=0x2, 0x4) sendto$inet6(r7, &(0x7f00000002c0)='\x00', 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r7, 0x84, 0x6d, &(0x7f0000002280)=""/4086, &(0x7f0000000040)=0xff6) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000002180)={'batadv_slave_0\x00'}) r8 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000500)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="280000001d000100000000000400000007000000", @ANYRES32=r10, @ANYBLOB="800002000a0002"], 0x28}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000003280), r8) sendmsg$inet(r7, &(0x7f0000002200)={&(0x7f00000021c0)={0x2, 0x4e27, @multicast2}, 0x10, &(0x7f00000032c0), 0x0, &(0x7f00000021c0)}, 0x44800) 1.125004184s ago: executing program 5 (id=4384): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'nr0\x00', 0x6132}) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20f42, 0x0) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000140)={'nr0\x00', 0x6132}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'nr0\x00', 0x6132}) (async) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) r4 = socket(0x40000000015, 0x5, 0x0) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}}, 0x1c) (async) getsockopt$sock_buf(r4, 0x1, 0x1c, 0x0, &(0x7f00000001c0)=0xff1a) socket$netlink(0x10, 0x3, 0x8000000004) (async) r5 = socket$inet_tcp(0x2, 0x1, 0x0) (async) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000040)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x1f4, 0xe, 0x0, &(0x7f00000002c0)="ff412f66b083dcc1010b3efc8864", 0x0, 0x300, 0x300, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x4}, 0x50) (async) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r5, 0x1, 0x49, &(0x7f0000000040)=r7, 0x4) writev(r0, &(0x7f0000000340)=[{&(0x7f0000000000)="7d97701dec8cb731dc9eeb209132358c600ce0c25a8d72c5ddd0b898e0f88f3890bfda2284508f19c927dd80084c5b927fb955a114958b61", 0x38}, {&(0x7f00000001c0)="080c13682193733a9bf6cceae36f24156d6b936d6906c241910d8353dbc04cfa24ab034f8b784b96c9b2c752364406743919f59f21bb8345f6acc0f96d6150a4f5cff54e3c8216532da5860716325f87982fa846478afbbf256255a6fdce55a04880575cf033d714c4666e8e93703e0fd3a1571311fef39007b48df9fbf9b662687d4163beed98", 0x87}, {&(0x7f0000000280)="501ed49929ca9e564f2990966ccec6a1a4d2e4c0805cfe35cda51738ea4a26fb5be1a63a146ee9f70f7773cd03e567136c89186fbf4de25e93b8f5bc7492b29ef6c59d03082380324987c774e9d010882c2fcc66cf738dcca2b2b916c104f4254c7fc794b068f4e0915d6eddb22b2e35b897e4ef493433bbcfcab0bf4657ae6c37afafe31df4229ece8c540e7046a1cf58aca2b7f201ba000775fac25cf20fffe693654aec4d", 0xa6}], 0x3) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f00000000c0)={'syz_tun\x00', 0x400}) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0xfe3a) 1.013449743s ago: executing program 7 (id=4385): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r2}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) 930.253939ms ago: executing program 2 (id=4386): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x57) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x702, 0xe, 0x700, &(0x7f0000000540)="e460334470b8d480eb00c15286dd", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x4c, 0x4, 0x0, 0x1, [{0x48, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_CT_DREG={0x8}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x10}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xf}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x16}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x17}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xa0}, 0x1, 0x0, 0x0, 0x80}, 0x0) 929.595827ms ago: executing program 3 (id=4387): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'macvlan0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x80005, {0x0, 0x0, 0x0, 0x0, {}, {0x9, 0xb}, {0x4, 0x8}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x9f8b8a2ee701f9b2}, 0x24008004) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x4c, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x4c}}, 0x2) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)={0x5c, 0x9, 0x6, 0x801, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private0}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0xe1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x88}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e1e}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r6, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x34, 0x1, 0x2, 0x102, 0x0, 0x0, {0x4, 0x0, 0x6}, [@CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x3}, @CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x2}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0xfd3}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="480000001000030401f80000000000000000eb00", @ANYRES32=0x0, @ANYBLOB="a5fdad880000000008000a00", @ANYRES32, @ANYBLOB="200012800b00010067656e6576650000100002"], 0x48}}, 0x0) sendmsg$IPSET_CMD_LIST(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)=ANY=[@ANYBLOB='\\\x00\x00\x00\n'], 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="5800000000000000030900020073797a3100000000050001000700ffe6050005000a0000000c000780080008480000002711000300686173683a69702c6d080000000000000500040000000000192cdbd6f4555b66f7d1"], 0x58}}, 0x0) socket$netlink(0x10, 0x3, 0x15) sendmsg$nl_route_sched(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x8c, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r2, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd], 0x0, [0x5, 0x4, 0x2, 0x0, 0x8, 0x0, 0x9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3], [0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}]}}]}, 0x8c}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r7) 722.248977ms ago: executing program 2 (id=4388): r0 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x4c, &(0x7f0000000000), 0x4) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000003c0)="89000000120081ae08060cdc030ec0007f03e3f7fffe000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120c000200040000000400446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x2000) ioctl$TUNSETNOCSUM(r4, 0xff06, 0x0) setsockopt$MRT6_DEL_MFC(r0, 0x29, 0xcd, 0x0, 0x5c) 557.63111ms ago: executing program 2 (id=4389): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = socket(0x1d, 0x2, 0x6) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x6a, 0x3, 0x0, &(0x7f0000000000)=0xfffffffffffffd68) r2 = socket(0x2a, 0x2, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_ASSOCIATE(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x1c, r5, 0x1, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r6}, @void}}}, 0x1c}}, 0xc00) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_CQM(r1, &(0x7f00000004c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000540)={0x12c, r5, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x19}]}, @NL80211_ATTR_CQM={0x4}, @NL80211_ATTR_CQM={0x80, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x5}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x3}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x2c}, @NL80211_ATTR_CQM_RSSI_THOLD={0x1c, 0x1, [0xe, 0x3, 0x7ba, 0x5, 0x0, 0x1]}, @NL80211_ATTR_CQM_RSSI_THOLD={0x20, 0x1, [0x8, 0x1, 0x409, 0x8, 0x6, 0x0, 0x40]}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x1}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x363}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x1ab}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0xe826}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x3ff}]}, @NL80211_ATTR_CQM={0x3c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0xe}, @NL80211_ATTR_CQM_RSSI_THOLD={0x28, 0x1, [0x3, 0xb, 0x5, 0x9, 0x8, 0x8, 0x0, 0x0, 0x2]}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0xffff}]}, @NL80211_ATTR_CQM={0x44, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x7a4}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x7ff}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x5}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x29}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x4ce}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x7}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x4}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x18}]}]}, 0x12c}, 0x1, 0x0, 0x0, 0x20000801}, 0x40000) sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x78, 0x24, 0xf0b, 0x70bd2a, 0x2001, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x5, 0xd}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0xff, 0xec2, 0x5, 0x2, 0x400}, 0x10000, 0x1, 0x7ff, 0x6, 0xe, 0x14, 0x1f, 0x1b, 0x6, 0x2, {0x6, 0x19d, 0xa9, 0x8, 0x7743, 0xfd1}}}}]}, 0x78}}, 0x0) r8 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r8, 0x11b, 0x4, &(0x7f0000000500)={0x0}, 0x20) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendto$unix(r2, &(0x7f0000000380)="bbb8de2366269606b3817502fa371020b871a2706758ae2b0cac24cef8cea27f69a74ea224663853bcb441f5f864a37b25c85a61f111995b7bf15b4bb2d9a305f7ffcdd5bbe1c9bb0c3120db403b18191405b452391c8116091e40f77e232d34ff187e8cdbf09ec5e674a3db6d7a0da2e4e937df28653cc61c1c8815cb0fa585b7dd479b192c9da713da5402b7e053e49df577e6b91618d6b9ba83e02a462f788cb1daa69f83bef14551317608fbddb60184c4aa4735880cac5d", 0xba, 0x4000880, &(0x7f0000000440)=@abs={0x1, 0x0, 0x4e22}, 0x6e) sendmsg$nl_route_sched(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000014c0)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r3, {0xe, 0x7}, {}, {0x5, 0xffff}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0x7, 0x8}}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x24004804}, 0x4000) r9 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r9, &(0x7f00000002c0), 0x40000000000009f, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000680)={'veth1_to_hsr\x00'}) r10 = openat$ppp(0xffffffffffffff9c, &(0x7f00000006c0), 0x6c0, 0x0) ioctl$PPPIOCATTCHAN(r10, 0x40047438, &(0x7f0000000700)=0x3) 397.707173ms ago: executing program 7 (id=4390): r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000480)=@mangle={'mangle\x00', 0x44, 0x6, 0x408, 0x98, 0x98, 0x168, 0x0, 0x168, 0x370, 0x370, 0x370, 0x370, 0x370, 0x6, 0x0, {[{{@ip={@multicast1, @dev={0xac, 0x14, 0x14, 0x13}, 0xff, 0xff000000, 'pim6reg1\x00', 'bridge_slave_0\x00', {}, {0xff}, 0x88, 0x3}, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x298}}, {{@ip={@private=0xa010100, @local, 0x0, 0xff, 'vcan0\x00', 'veth0_virt_wifi\x00', {}, {0xff}}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [], 0x1}, {0x0, [0x6, 0x0, 0x0, 0x2, 0x4]}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0xff, 0xff, 'dvmrp0\x00', 'veth1_virt_wifi\x00', {}, {0xff}, 0x11, 0x2}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@private=0xa010102, @multicast1, 0x0, 0xffffff00, 'syzkaller0\x00', 'bond0\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@remote, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00', {}, {}, 0x0, 0x0, 0x40}, 0x0, 0xb0, 0xd8, 0x0, {}, [@common=@set={{0x40}, {{0x3, [0x0, 0x0, 0x2, 0x4, 0x3, 0x3]}}}]}, @ECN={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x468) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000300)="c99bfa0018", 0x5) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f0000000600)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000002"], 0x110) setsockopt$inet_group_source_req(r2, 0x0, 0x2c, &(0x7f00000006c0)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @empty}}}, 0x108) setsockopt$inet_group_source_req(r2, 0x0, 0x2c, &(0x7f00000004c0)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @private}}}, 0x108) r3 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000005000)=ANY=[], 0x1198}, 0x1, 0x0, 0x0, 0x40}, 0x880) recvfrom$inet(r3, &(0x7f0000000000)=""/4084, 0x1198, 0x2102, 0x0, 0x0) ioctl$FICLONE(r2, 0x40049409, r1) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r4) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x30, r5, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}]}]}, 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000100)={'erspan0\x00', &(0x7f0000000040)=@ethtool_wolinfo={0x4b, 0x7, 0x1ff, "fac16a590b17"}}) ioctl$PPPIOCSACTIVE(r6, 0x40107446, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0x400, 0x7, 0x1}, {0x100, 0x4, 0x81, 0xf46}]}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000001040)={'sit0\x00', &(0x7f0000001000)={'gre0\x00', 0x0, 0x0, 0x1, 0x6, 0x8eb7, {{0x7, 0x4, 0x1, 0x17, 0x1c, 0x64, 0x0, 0x0, 0x2f, 0x0, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@timestamp={0x44, 0x8, 0x3e, 0x0, 0x5, [0xd9b1]}]}}}}}) 206.004824ms ago: executing program 6 (id=4391): r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x12, &(0x7f0000000080)=@framed={{0x18, 0x5}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @printk={@x={0x18, 0x0}, {0x3, 0x3, 0x3, 0xa, 0x0}, {0x7, 0x1, 0xc, 0x1, 0x5}, {0x7, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffe00}, {}, {}, {0x85, 0x0, 0x0, 0x2d}}]}, &(0x7f0000000000)='GPL\x00'}, 0x90) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=ANY=[], 0x38}}, 0x0) r4 = socket(0x11, 0x3, 0x0) ioctl$sock_inet_SIOCSIFBRDADDR(r4, 0x891a, &(0x7f0000000080)={'hsr0\x00', {0x2, 0x4e24, @empty}}) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000340)=@filter={'filter\x00', 0x42, 0x4, 0x2c8, 0xffffffff, 0x198, 0x198, 0x0, 0xffffffff, 0xffffffff, 0x230, 0x230, 0x230, 0xffffffff, 0x4, 0x0, {[{{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffff00, 0x0, 'syz_tun\x00', 'syzkaller1\x00', {}, {}, 0x6, 0x1, 0x4c}, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}, {{@ip={@multicast2, @remote, 0x0, 0x0, 'veth1_macvtap\x00', 'tunl0\x00'}, 0x0, 0xa0, 0x100, 0x0, {0x60010000}, [@common=@ah={{0x30}, {[0x1]}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @empty, 0x0, 0x9, [0x16, 0x0, 0x0, 0x0, 0x1c, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x100]}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x3, 0x3d}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x328) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r6) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_NOACK_MAP(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x24, r7, 0x1, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0xfffa}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x40) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x20, r9, 0x6a98047402e98331, 0x0, 0x0, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x841}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x13, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="660a00000000000061115c0000000000850000000200080095000000000000fbf1c74133a06565c2c78d"], &(0x7f0000000000)='GPL\x00'}, 0x80) r10 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) close(r10) connect$netrom(r1, &(0x7f0000000000)={{0x6, @default}, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @null]}, 0x48) close(r1) 114.187256ms ago: executing program 5 (id=4392): bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="b7e4ff00000000007910a800000000001d0a000000000000950000000000000078b2e21da31dac04ec04b84e22310185271bdc8126b02479fb2314023fb55a2dc0be7b81f47cba52f890647e4620920081839dce308061e57513d38bf70d4983778a4243268c391667786c"], &(0x7f00000002c0)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x2a) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x58}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_SEND_PRIO(r2, 0x6b, 0x3, 0x0, &(0x7f0000000040)) ioctl$FS_IOC_MEASURE_VERITY(r2, 0xc0046686, &(0x7f0000000000)={0x3, 0x14, "e0da92a101aa4ede2f4aadc5bfa38306ce3fee16"}) 50.440505ms ago: executing program 3 (id=4393): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) (async) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="180000005200010000000000000000001c000000040008"], 0x18}}, 0x0) (async) bpf$TOKEN_CREATE(0x24, &(0x7f0000000100)={0x0, r1}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0xa, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000dd0a00001f00000073013b00000000009500000000000000"], &(0x7f0000000140)='syzkaller\x00', 0x5, 0xc7, &(0x7f0000000300)=""/199, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2}, 0x10}, 0x94) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)={0x71c, r2, 0x5, 0x4, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x68, 0xe, {{{}, {}, @broadcast, @broadcast, @random="7806ef12e7f5", {0x0, 0xffd}}, 0x0, @random=0x4, 0x0, @void, @void, @void, @val={0x4, 0x6, {0x2b, 0x9, 0x7ff, 0x3}}, @void, @val={0x5, 0x2b, {0x7, 0xf7, 0xcc, "6f2f774e7a296f59eb8cf76c6b63f02158e686c11769ca228a3d591be5955a3b3fb1293b5de2a482"}}, @val={0x25, 0x3, {0x1, 0x78, 0x2}}, @void, @val={0x3c, 0x4, {0x0, 0x7, 0x3c, 0x2}}, @void, @void, @void, @void}}, @NL80211_ATTR_PROBE_RESP={0x686, 0x91, "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"}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x71c}, 0x1, 0x0, 0x0, 0xc2}, 0x0) 43.081571ms ago: executing program 7 (id=4394): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={&(0x7f0000000080), 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=@delchain={0x58, 0x65, 0x200, 0x70bd2d, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {0x8, 0x7}, {0x6, 0xd}, {0x1, 0xf}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_MASK={0x8, 0x5, 0x17}]}}, @TCA_CHAIN={0x8, 0xb, 0xc82}, @TCA_CHAIN={0x8, 0xb, 0x80000000}, @TCA_CHAIN={0x8, 0xb, 0x4}, @TCA_CHAIN={0x8, 0xb, 0x7}]}, 0x58}, 0x1, 0x0, 0x0, 0x880}, 0x4) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=@can_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@CGW_DST_IF={0x8, 0xa, r4}, @CGW_SRC_IF={0x8, 0x9, r4}]}, 0x24}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x21b4b}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x3b}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) 0s ago: executing program 2 (id=4395): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000100), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x27, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7}, {}, {}, [@map_idx_val={0x18, 0x0, 0x6, 0x0, 0xf}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @map_idx={0x18, 0x7, 0x5, 0x0, 0x7}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x4}, @exit, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @ringbuf_query, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xc27c}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000000c0)='GPL\x00', 0x8000, 0x0, 0x0, 0x41000, 0x40, '\x00', r2, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x4, 0x3}, 0x8, 0x10, &(0x7f0000000180)={0x5, 0xa, 0x7, 0x140}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6c2c}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='afs_file_error\x00', r3, 0x0, 0x7fffffff}, 0x18) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={0x58, r1, 0x1, 0x0, 0x25dfdc01, {}, [{{0x8, 0x1, r2}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}]}}]}, 0x58}}, 0x40000) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$team(&(0x7f0000000100), 0xffffffffffffffff) (async) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x27, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7}, {}, {}, [@map_idx_val={0x18, 0x0, 0x6, 0x0, 0xf}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @map_idx={0x18, 0x7, 0x5, 0x0, 0x7}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x4}, @exit, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @ringbuf_query, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xc27c}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000000c0)='GPL\x00', 0x8000, 0x0, 0x0, 0x41000, 0x40, '\x00', r2, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x4, 0x3}, 0x8, 0x10, &(0x7f0000000180)={0x5, 0xa, 0x7, 0x140}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6c2c}, 0x94) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='afs_file_error\x00', r3, 0x0, 0x7fffffff}, 0x18) (async) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={0x58, r1, 0x1, 0x0, 0x25dfdc01, {}, [{{0x8, 0x1, r2}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}]}}]}, 0x58}}, 0x40000) (async) kernel console output (not intermixed with test programs): 00000000000 [ 349.398967][T14561] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 349.398979][T14561] R13: 00007fcd23de6038 R14: 00007fcd23de5fa0 R15: 00007ffcc6a8d5e8 [ 349.399015][T14561] [ 349.719386][T14570] set match dimension is over the limit! [ 349.731737][T14570] set match dimension is over the limit! [ 349.764064][T14569] __nla_validate_parse: 14 callbacks suppressed [ 349.764085][T14569] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2387'. [ 349.780501][T14569] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2387'. [ 349.859467][T14575] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2388'. [ 349.977260][T14582] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2389'. [ 350.118002][T14589] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2391'. [ 350.245688][T14575] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2388'. [ 350.263488][ C1] vcan0: j1939_tp_rxtimer: 0xffff888057dddc00: rx timeout, send abort [ 350.287127][T14595] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2392'. [ 350.328643][T14597] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2393'. [ 350.362799][T14593] 8021q: adding VLAN 0 to HW filter on device bond4 [ 350.475702][T14600] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2394'. [ 350.531650][T14603] sctp: [Deprecated]: syz.6.2396 (pid 14603) Use of int in maxseg socket option. [ 350.531650][T14603] Use struct sctp_assoc_value instead [ 350.566650][T14609] netlink: 36 bytes leftover after parsing attributes in process `syz.7.2397'. [ 351.469175][T14666] SET target dimension over the limit! [ 351.501575][T14668] syzkaller1: entered promiscuous mode [ 351.507323][T14668] syzkaller1: entered allmulticast mode [ 351.554334][T14680] validate_nla: 2 callbacks suppressed [ 351.554442][T14680] netlink: 'syz.6.2418': attribute type 1 has an invalid length. [ 351.555979][T14672] bond0: entered promiscuous mode [ 351.573972][T14672] bond_slave_0: entered promiscuous mode [ 351.580357][T14672] bond_slave_1: entered promiscuous mode [ 351.589781][T14672] bond0: left promiscuous mode [ 351.594615][T14672] bond_slave_0: left promiscuous mode [ 351.601023][T14672] bond_slave_1: left promiscuous mode [ 351.682613][T14682] bond2: (slave veth3): Enslaving as an active interface with a down link [ 351.703960][T14680] 8021q: adding VLAN 0 to HW filter on device bond2 [ 351.741692][T12296] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 351.751087][T12296] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 351.771040][T12296] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 351.789460][T12296] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 352.140339][T14709] bond5: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 352.161272][T14709] bond5 (unregistering): Released all slaves [ 352.462154][T14724] batadv_slave_0: entered promiscuous mode [ 352.479315][T14727] bridge_slave_1: left allmulticast mode [ 352.487461][T14727] bridge_slave_1: left promiscuous mode [ 352.497667][T14727] bridge0: port 2(bridge_slave_1) entered disabled state [ 352.529169][T14727] bridge_slave_0: left allmulticast mode [ 352.540525][T14727] bridge_slave_0: left promiscuous mode [ 352.546620][T14727] bridge0: port 1(bridge_slave_0) entered disabled state [ 352.625644][T14724] batadv_slave_0: left promiscuous mode [ 352.731539][ T12] net_ratelimit: 29 callbacks suppressed [ 352.731561][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 352.750637][ T5828] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 352.768374][ T130] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 352.788057][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 353.277145][T14784] netlink: 'syz.5.2449': attribute type 24 has an invalid length. [ 353.541469][T14805] tunl0: entered promiscuous mode [ 353.561342][T14805] netlink: 'syz.5.2452': attribute type 3 has an invalid length. [ 353.666884][T14811] netlink: 'syz.3.2453': attribute type 1 has an invalid length. [ 353.789706][ T7989] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 353.797831][T14811] 8021q: adding VLAN 0 to HW filter on device bond8 [ 353.913321][ T3485] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 353.937541][ T3485] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 354.120624][T14837] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 354.159552][T14842] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 354.455261][T14855] syzkaller0: entered promiscuous mode [ 354.461147][T14855] syzkaller0: entered allmulticast mode [ 354.508431][T14856] 0: reclassify loop, rule prio 0, protocol 800 [ 354.518387][ T5889] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 354.559315][T14855] 8021q: VLANs not supported on vxcan1 [ 354.607331][T14861] : (slave bond_slave_0): Releasing backup interface [ 354.624101][T14864] netlink: 'syz.2.2463': attribute type 21 has an invalid length. [ 354.632890][T14864] IPv6: NLM_F_CREATE should be specified when creating new route [ 354.634032][T14861] : (slave bond_slave_1): Releasing backup interface [ 354.676784][T14861] team_slave_0: left promiscuous mode [ 354.705697][T14861] team0: Port device team_slave_0 removed [ 354.715568][T14861] team_slave_1: left promiscuous mode [ 354.760335][T14861] team0: Port device team_slave_1 removed [ 354.801107][T14861] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 354.828995][T14861] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 354.865973][T14861] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 354.896518][T14882] __nla_validate_parse: 22 callbacks suppressed [ 354.896541][T14882] netlink: 11 bytes leftover after parsing attributes in process `syz.3.2462'. [ 354.916630][ T7989] lo speed is unknown, defaulting to 1000 [ 354.976859][T14858] smc: net device team0 applied user defined pnetid SYZ2 [ 355.012693][ T7981] !yz!: Port: 1 Link DOWN [ 355.165081][T14890] IPVS: set_ctl: invalid protocol: 59 0.0.0.0:20002 [ 355.364057][T14902] netlink: 'syz.7.2470': attribute type 6 has an invalid length. [ 355.493749][T14907] netlink: 'syz.3.2474': attribute type 29 has an invalid length. [ 355.515915][T14909] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2473'. [ 355.526066][T14907] netlink: 'syz.3.2474': attribute type 29 has an invalid length. [ 355.538017][T14909] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2473'. [ 355.547162][T14909] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2473'. [ 355.560796][T14907] netlink: 500 bytes leftover after parsing attributes in process `syz.3.2474'. [ 355.571852][T14907] unsupported nla_type 58 [ 355.587980][T14914] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2476'. [ 355.626209][T14916] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2477'. [ 355.638836][T14914] syzkaller1: entered promiscuous mode [ 355.644376][T14914] syzkaller1: entered allmulticast mode [ 355.692293][T14918] netlink: 'syz.7.2475': attribute type 9 has an invalid length. [ 356.023593][T14928] tipc: Enabled bearer , priority 0 [ 356.148743][T14928] tipc: Disabling bearer [ 356.739538][T14968] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2494'. [ 356.752162][T14968] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2494'. [ 357.279949][T14990] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2501'. [ 357.690719][T15012] bridge0: port 2(bridge_slave_1) entered disabled state [ 357.698251][T15012] bridge0: port 1(bridge_slave_0) entered disabled state [ 357.763108][T15012] IPVS: ip_vs_add_dest(): server weight less than zero [ 357.777899][ T7981] IPVS: starting estimator thread 0... [ 357.867955][T15020] IPVS: using max 26 ests per chain, 62400 per kthread [ 357.900120][T15027] ieee802154 phy1 wpan1: encryption failed: -22 [ 357.949909][ T7981] net_ratelimit: 15 callbacks suppressed [ 357.949930][ T7981] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 358.224450][T15040] gre1: entered promiscuous mode [ 358.235973][T15040] gre1: entered allmulticast mode [ 358.520872][T12316] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 358.538041][T12316] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 358.637204][T15067] bond11: option arp_interval: mode dependency failed, not supported in mode balance-tlb(5) [ 358.651015][T15072] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 358.668468][T15067] bond11 (unregistering): Released all slaves [ 358.988200][ T5828] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 359.207405][T15103] syzkaller0: entered promiscuous mode [ 359.230717][T15103] syzkaller0: entered allmulticast mode [ 359.307459][T15109] sctp: [Deprecated]: syz.6.2544 (pid 15109) Use of struct sctp_assoc_value in delayed_ack socket option. [ 359.307459][T15109] Use struct sctp_sack_info instead [ 359.432915][T15118] netlink: 'syz.5.2546': attribute type 1 has an invalid length. [ 359.532204][T15126] netlink: 'syz.3.2549': attribute type 1 has an invalid length. [ 359.613653][T15126] bond9: (slave bridge0): making interface the new active one [ 359.622575][T15126] bond9: (slave bridge0): Enslaving as an active interface with an up link [ 359.668503][T12317] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 359.677176][T12317] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 359.719645][T15135] netlink: 'syz.6.2552': attribute type 1 has an invalid length. [ 359.913921][T15150] netlink: 'syz.3.2558': attribute type 3 has an invalid length. [ 360.031040][ T7981] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 360.055677][T15161] __nla_validate_parse: 10 callbacks suppressed [ 360.055699][T15161] netlink: 40 bytes leftover after parsing attributes in process `syz.7.2557'. [ 360.133416][T15165] xt_l2tp: v2 doesn't support IP mode [ 360.170380][T15168] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 360.182237][T15168] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 360.197602][T15168] gretap1: entered promiscuous mode [ 360.206190][T15168] gretap1: entered allmulticast mode [ 360.282261][ T5917] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 360.434087][T15187] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2569'. [ 360.592806][ T5917] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 360.650792][T15199] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2573'. [ 360.660507][T15197] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2572'. [ 360.687603][T15200] netlink: 212360 bytes leftover after parsing attributes in process `syz.5.2571'. [ 360.697980][T15199] veth15: entered allmulticast mode [ 360.915771][T15211] netlink: 'syz.2.2575': attribute type 61 has an invalid length. [ 361.262535][T15230] IPVS: ip_vs_edit_dest(): server weight less than zero [ 361.474339][T15244] IPv6: NLM_F_CREATE should be specified when creating new route [ 361.514169][T15251] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2588'. [ 361.694401][T15260] netlink: 'syz.6.2589': attribute type 18 has an invalid length. [ 361.982293][T15278] netlink: 'syz.7.2595': attribute type 2 has an invalid length. [ 362.007282][T15278] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2595'. [ 362.136292][T15288] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 362.293929][T15299] netlink: 84 bytes leftover after parsing attributes in process `syz.3.2602'. [ 362.627414][T15324] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 362.764408][T15330] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2608'. [ 362.868039][T15332] netlink: 108 bytes leftover after parsing attributes in process `syz.2.2613'. [ 362.940746][T15340] tls_set_device_offload_rx: netdev not found [ 362.968672][T15341] net_ratelimit: 14 callbacks suppressed [ 362.968697][T15341] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 362.995290][T15332] netlink: set zone limit has 4 unknown bytes [ 363.109995][ T1166] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 363.130197][ T1166] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 363.148320][ T7981] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 363.374029][T15363] IPVS: set_ctl: invalid protocol: 50 172.20.20.187:20001 [ 363.631976][ T5917] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 363.653792][T15372] veth3: entered promiscuous mode [ 363.683235][T15372] veth3: entered allmulticast mode [ 363.908549][T15380] ieee802154 phy1 wpan1: encryption failed: -22 [ 364.189209][ T7981] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 364.245023][T15403] netlink: 'syz.5.2636': attribute type 1 has an invalid length. [ 364.258054][ T1166] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 364.271582][ T1166] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 364.567004][T15415] v: renamed from caif0 [ 364.569477][T15426] netlink: 'syz.6.2641': attribute type 1 has an invalid length. [ 364.675086][T15426] 8021q: adding VLAN 0 to HW filter on device bond3 [ 364.735115][T15432] 8021q: adding VLAN 0 to HW filter on device bond3 [ 364.742627][T15432] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 364.756970][T15432] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 364.796168][T15433] netlink: 'syz.7.2644': attribute type 12 has an invalid length. [ 364.821438][T15440] veth5: entered promiscuous mode [ 364.835630][T15440] bond3: (slave veth5): Enslaving as an active interface with a down link [ 364.858510][T15426] vlan2: entered allmulticast mode [ 364.863952][T15426] bond3: entered allmulticast mode [ 364.902873][T15444] xt_hashlimit: size too large, truncated to 1048576 [ 364.956600][T15429] netlink: 'syz.2.2643': attribute type 29 has an invalid length. [ 364.972144][T15434] netlink: 'syz.2.2643': attribute type 29 has an invalid length. [ 364.981690][T15441] netlink: 'syz.2.2643': attribute type 29 has an invalid length. [ 365.007085][T15441] netlink: 'syz.2.2643': attribute type 29 has an invalid length. [ 365.019723][T15441] netlink: 'syz.2.2643': attribute type 29 has an invalid length. [ 365.028975][T15441] netlink: 'syz.2.2643': attribute type 29 has an invalid length. [ 365.037548][T15441] netlink: 'syz.2.2643': attribute type 29 has an invalid length. [ 365.232793][ T7989] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 365.637193][T15487] 8021q: adding VLAN 0 to HW filter on device bond0 [ 365.651779][T15487] bond0: (slave gre0): The slave device specified does not support setting the MAC address [ 365.681618][T15489] __nla_validate_parse: 39 callbacks suppressed [ 365.681642][T15489] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2659'. [ 365.692857][T15487] bond0: (slave gre0): Error -95 calling set_mac_address [ 366.164238][T15514] netlink: 256 bytes leftover after parsing attributes in process `syz.6.2665'. [ 366.248691][T15521] netlink: 36 bytes leftover after parsing attributes in process `syz.7.2666'. [ 366.276135][T15514] netlink: 460 bytes leftover after parsing attributes in process `syz.6.2665'. [ 366.378682][T15528] bond_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 366.466036][T12317] tipc: Subscription rejected, illegal request [ 366.804105][T15552] Cannot find add_set index 2 as target [ 366.813359][T15553] Cannot find add_set index 2 as target [ 366.828713][T15557] netlink: 'syz.3.2677': attribute type 2 has an invalid length. [ 366.874012][T15557] 9: entered promiscuous mode [ 366.974957][T15568] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2680'. [ 367.447737][T15599] x_tables: ip6_tables: NETMAP.0 target: invalid size 40 (kernel) != (user) 0 [ 367.747599][T15607] bond4: Unable to set up delay as MII monitoring is disabled [ 367.830493][T15607] bond4 (unregistering): Released all slaves [ 368.154707][T15641] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2696'. [ 368.187922][ C1] net_ratelimit: 12 callbacks suppressed [ 368.187973][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 368.208172][T15645] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2697'. [ 368.254071][T15645] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2697'. [ 368.275182][T15645] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 368.357413][ T7989] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 368.371081][T15645] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 368.522596][T15653] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2699'. [ 368.864652][T15686] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2702'. [ 368.874333][T15686] bridge0: port 2(bridge_slave_1) entered blocking state [ 368.881642][T15686] bridge0: port 2(bridge_slave_1) entered forwarding state [ 368.889325][T15686] bridge0: port 1(bridge_slave_0) entered blocking state [ 368.896639][T15686] bridge0: port 1(bridge_slave_0) entered forwarding state [ 369.161639][T15699] syzkaller0: entered promiscuous mode [ 369.167177][T15699] syzkaller0: entered allmulticast mode [ 369.188913][T15699] syzkaller0: mtu less than device minimum [ 369.950038][T15724] smc: removing net device team0 with user defined pnetid SYZ2 [ 369.963782][T15724] team0 (unregistering): Port device team_slave_0 removed [ 369.977329][T15724] team0 (unregistering): Port device team_slave_1 removed [ 370.014594][T15735] validate_nla: 3 callbacks suppressed [ 370.014620][T15735] netlink: 'syz.3.2721': attribute type 29 has an invalid length. [ 370.130827][T15726] xt_socket: unknown flags 0x50 [ 370.345367][T15736] bond0 (unregistering): Released all slaves [ 370.452219][T15757] macvtap1: entered promiscuous mode [ 370.457723][T15757] macvtap1: entered allmulticast mode [ 370.463287][T15757] veth1_vlan: entered allmulticast mode [ 370.538118][T15757] macvtap2: entered promiscuous mode [ 370.550589][T15757] macvtap2: entered allmulticast mode [ 370.813515][T15784] __nla_validate_parse: 6 callbacks suppressed [ 370.813535][T15784] netlink: 40 bytes leftover after parsing attributes in process `syz.7.2735'. [ 371.013775][T15801] netlink: 52 bytes leftover after parsing attributes in process `syz.6.2740'. [ 371.045095][T15801] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2740'. [ 371.097199][T15804] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2740'. [ 371.198900][ T30] audit: type=1800 audit(1768815698.300:6): pid=15813 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2742" name="memory.events" dev="tmpfs" ino=858 res=0 errno=0 [ 371.230281][T15814] netlink: 212288 bytes leftover after parsing attributes in process `syz.7.2743'. [ 371.241548][ T30] audit: type=1804 audit(1768815698.310:7): pid=15813 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.2742" name="/newroot/165/memory.events" dev="tmpfs" ino=858 res=1 errno=0 [ 371.321146][T15817] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2744'. [ 371.330356][T15817] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2744'. [ 371.407187][T15822] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2746'. [ 371.417437][T15821] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2746'. [ 371.527570][T15824] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2747'. [ 371.616960][T15837] vcan0: tx drop: invalid da for name 0x0000000000000011 [ 372.108774][T15853] syzkaller0: entered promiscuous mode [ 372.117912][T15853] syzkaller0: entered allmulticast mode [ 374.443925][T15843] lo speed is unknown, defaulting to 1000 [ 374.463035][T15866] vlan2: entered allmulticast mode [ 374.477861][T15866] hsr0: entered allmulticast mode [ 374.487613][T15866] hsr_slave_0: entered allmulticast mode [ 374.507395][T15866] hsr_slave_1: entered allmulticast mode [ 374.725967][T15894] tipc: Enabled bearer , priority 0 [ 374.767621][T15890] tipc: Enabling of bearer rejected, already enabled [ 374.805765][T15894] syzkaller0: entered promiscuous mode [ 374.835018][T15894] syzkaller0: entered allmulticast mode [ 374.872753][T15890] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 374.948138][T15900] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 375.029552][T15894] tipc: Resetting bearer [ 375.107169][T15889] tipc: Resetting bearer [ 375.155903][T15889] tipc: Disabling bearer [ 375.542432][T15930] syzkaller0: entered promiscuous mode [ 375.563464][T15930] syzkaller0: entered allmulticast mode [ 376.038853][T15949] Bluetooth: MGMT ver 1.23 [ 376.043386][T15949] Bluetooth: hci1: too big key_count value 32778 [ 376.054514][T15949] __nla_validate_parse: 5 callbacks suppressed [ 376.054536][T15949] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2778'. [ 376.090239][T15952] Cannot find add_set index 65532 as target [ 376.701776][T15980] 8021q: VLANs not supported on ip6_vti0 [ 377.032369][T15995] netlink: 108 bytes leftover after parsing attributes in process `syz.7.2792'. [ 377.208211][T16001] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2793'. [ 377.468704][T16013] netlink: 'syz.2.2797': attribute type 3 has an invalid length. [ 377.477119][T16013] netlink: 'syz.2.2797': attribute type 3 has an invalid length. [ 377.583652][T16021] openvswitch: netlink: EtherType 0 is less than min 600 [ 377.729739][T16033] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2803'. [ 378.163804][T16055] netlink: 'syz.3.2809': attribute type 10 has an invalid length. [ 378.193042][T16055] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2809'. [ 378.218404][T16055] dummy0: entered promiscuous mode [ 378.224925][T16055] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 378.379301][T16064] xt_CT: You must specify a L4 protocol and not use inversions on it [ 378.398308][T16027] lo speed is unknown, defaulting to 1000 [ 378.423557][T16063] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2812'. [ 378.650862][T16079] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2816'. [ 378.789880][T16081] dvmrp0: entered allmulticast mode [ 378.836367][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.991648][T16096] netlink: 27 bytes leftover after parsing attributes in process `syz.7.2821'. [ 379.239197][T16109] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2824'. [ 379.329681][T16109] bond4: Invalid ad_actor_system MAC address. [ 379.335914][T16109] bond4: option ad_actor_system: invalid value (1) [ 379.372851][T16109] bond4 (unregistering): Released all slaves [ 379.452751][T16115] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2826'. [ 379.831704][T16133] IPVS: set_ctl: invalid protocol: 60 0.0.0.0:20003 [ 380.003278][T16142] netlink: 'syz.6.2833': attribute type 10 has an invalid length. [ 380.016635][T16142] 8021q: adding VLAN 0 to HW filter on device team0 [ 380.027457][T16142] bond0: (slave team0): Enslaving as an active interface with an up link [ 380.514829][T16172] netlink: 'syz.5.2842': attribute type 1 has an invalid length. [ 380.524045][T16175] netlink: 'syz.7.2840': attribute type 2 has an invalid length. [ 380.742102][T16193] openvswitch: netlink: Message has 592 unknown bytes. [ 380.756394][T16193] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 380.864927][T16195] xt_hashlimit: invalid interval [ 381.113870][T16218] __nla_validate_parse: 36 callbacks suppressed [ 381.113893][T16218] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2853'. [ 381.228727][T16223] sctp: [Deprecated]: syz.3.2849 (pid 16223) Use of struct sctp_assoc_value in delayed_ack socket option. [ 381.228727][T16223] Use struct sctp_sack_info instead [ 381.301975][T16227] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2855'. [ 382.105623][T16269] sctp: [Deprecated]: syz.5.2867 (pid 16269) Use of int in max_burst socket option deprecated. [ 382.105623][T16269] Use struct sctp_assoc_value instead [ 382.140371][T16274] syz_tun: entered allmulticast mode [ 382.372507][T16284] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2871'. [ 382.405071][T16289] netlink: 212368 bytes leftover after parsing attributes in process `syz.7.2872'. [ 382.417939][T16284] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2871'. [ 382.451163][T16284] netlink: 'syz.5.2871': attribute type 14 has an invalid length. [ 382.468366][T16284] netlink: 'syz.5.2871': attribute type 13 has an invalid length. [ 382.715188][T16302] netlink: 'syz.3.2876': attribute type 32 has an invalid length. [ 382.756219][T16304] openvswitch: netlink: Unexpected mask (mask=840, allowed=10048) [ 382.855685][T16266] syz_tun: left allmulticast mode [ 382.987469][T16315] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2882'. [ 383.010752][T16315] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 383.092337][T16322] macvtap1: entered allmulticast mode [ 383.132597][T16322] veth0_macvtap: entered allmulticast mode [ 383.416651][T16345] netlink: 'syz.7.2891': attribute type 62 has an invalid length. [ 383.693155][T16355] macvtap2: entered promiscuous mode [ 383.715768][T16355] macvtap2: entered allmulticast mode [ 383.736707][T16355] veth1_vlan: entered allmulticast mode [ 383.814989][T16360] syzkaller0: entered promiscuous mode [ 383.842053][T16360] syzkaller0: entered allmulticast mode [ 384.039635][ T5838] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 384.050119][ T5838] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 384.060581][ T5838] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 384.060745][T16369] netlink: 'syz.7.2897': attribute type 21 has an invalid length. [ 384.070470][ T5838] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 384.085907][ T5838] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 384.106107][T16369] netlink: 152 bytes leftover after parsing attributes in process `syz.7.2897'. [ 384.119858][ T5829] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 384.127424][ T5829] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 384.135445][ T5829] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 384.143680][ T5829] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 384.151828][ T5829] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 384.177371][T16369] netlink: 'syz.7.2897': attribute type 3 has an invalid length. [ 384.249797][T16369] netlink: 64 bytes leftover after parsing attributes in process `syz.7.2897'. [ 384.347133][T16369] nbd: couldn't find a device at index 0 [ 384.389068][T16369] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2897'. [ 384.426894][T16369] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2897'. [ 384.651989][T16367] lo speed is unknown, defaulting to 1000 [ 385.009476][T12302] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 385.022706][T12302] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 385.198742][T16406] bridge_slave_1: entered promiscuous mode [ 385.230213][ T5828] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 385.259695][T12302] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 385.284540][T12302] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 385.336252][T16419] netlink: 'syz.3.2910': attribute type 2 has an invalid length. [ 385.377193][T16424] netlink: 'syz.5.2915': attribute type 13 has an invalid length. [ 385.396899][T12302] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 385.421896][T12302] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 385.590252][T12302] netdevsim netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 385.590265][T16431] ieee802154 phy1 wpan1: encryption failed: -22 [ 385.606846][T12302] netdevsim netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 385.658479][T16429] macvtap3: entered promiscuous mode [ 385.664295][T16429] macvtap3: entered allmulticast mode [ 385.719372][T16424] macvtap4: entered promiscuous mode [ 385.725095][T16424] macvtap4: entered allmulticast mode [ 386.158380][T16463] __nla_validate_parse: 15 callbacks suppressed [ 386.158402][T16463] netlink: 7064 bytes leftover after parsing attributes in process `syz.6.2924'. [ 386.189835][ T5829] Bluetooth: hci5: command tx timeout [ 386.204074][T16463] openvswitch: netlink: Missing key (keys=40, expected=100) [ 386.269423][ T7981] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 386.404809][T16478] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2929'. [ 386.419379][T16478] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2929'. [ 386.419590][T16480] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2929'. [ 386.444318][T16480] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2929'. [ 386.498802][T12302] bond3 (unregistering): (slave ip6gretap1): Releasing active interface [ 386.753852][T12302] dvmrp1 (unregistering): left allmulticast mode [ 386.777416][T12302] dvmrp6 (unregistering): left allmulticast mode [ 386.798631][T12302] bond6 (unregistering): (slave geneve2): Releasing active interface [ 387.127724][T12302] bond0 (unregistering): Released all slaves [ 387.249181][T12302] bond1 (unregistering): Released all slaves [ 387.262672][T12302] bond2 (unregistering): Released all slaves [ 387.276198][T12302] bond3 (unregistering): Released all slaves [ 387.290497][T12302] bond4 (unregistering): Released all slaves [ 387.417683][T12302] bond5 (unregistering): Released all slaves [ 387.529969][T12302] bond6 (unregistering): Released all slaves [ 387.543228][T12302] bond7 (unregistering): Released all slaves [ 387.556549][T12302] bond8 (unregistering): Released all slaves [ 387.698446][T12302] bond9 (unregistering): Released all slaves [ 387.712221][T12302] bond10 (unregistering): Released all slaves [ 387.805133][T16367] chnl_net:caif_netlink_parms(): no params data found [ 387.926742][T12302] : left promiscuous mode [ 387.929363][T16492] IPVS: set_ctl: invalid protocol: 8 172.30.1.7:20000 [ 388.082821][T12302] tipc: Disabling bearer [ 388.100650][T12302] tipc: Left network mode [ 388.269886][ T5829] Bluetooth: hci5: command tx timeout [ 388.401276][T16514] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2935'. [ 388.478259][T16514] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2935'. [ 388.520722][T16367] bridge0: port 1(bridge_slave_0) entered blocking state [ 388.552407][T16367] bridge0: port 1(bridge_slave_0) entered disabled state [ 388.561064][T16367] bridge_slave_0: entered allmulticast mode [ 388.583487][T16367] bridge_slave_0: entered promiscuous mode [ 388.595225][T16469] lo speed is unknown, defaulting to 1000 [ 388.647037][T16527] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2940'. [ 388.703599][T16367] bridge0: port 2(bridge_slave_1) entered blocking state [ 388.718202][T16367] bridge0: port 2(bridge_slave_1) entered disabled state [ 388.741347][T16367] bridge_slave_1: entered allmulticast mode [ 388.763315][T16367] bridge_slave_1: entered promiscuous mode [ 388.911247][T16538] mac80211_hwsim hwsim33 syzkaller0: entered promiscuous mode [ 388.928524][T16538] mac80211_hwsim hwsim33 syzkaller0: entered allmulticast mode [ 388.967469][T16367] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 389.103822][T16367] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 389.261130][T16551] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2945'. [ 389.270271][T16551] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2945'. [ 389.332845][T16367] team0: Port device team_slave_0 added [ 389.351123][T16367] team0: Port device team_slave_1 added [ 389.492835][T16367] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 389.504985][T16367] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 389.561188][T16367] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 389.598463][T16367] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 389.605550][T16367] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 389.673274][T16367] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 389.885908][T16573] xt_ipcomp: unknown flags 1D [ 390.188371][T16367] hsr_slave_0: entered promiscuous mode [ 390.209821][T16367] hsr_slave_1: entered promiscuous mode [ 390.250599][T16367] debugfs: 'hsr0' already exists in 'hsr' [ 390.256421][T16367] Cannot create hsr debugfs directory [ 390.348164][ T5829] Bluetooth: hci5: command tx timeout [ 390.776851][T12302] hsr_slave_1: left promiscuous mode [ 390.822925][T12302] veth1_vlan: left allmulticast mode [ 390.829580][T12302] veth1_macvtap: left promiscuous mode [ 390.835185][T12302] veth0_macvtap: left promiscuous mode [ 390.852286][T12302] veth1_vlan: left promiscuous mode [ 390.857864][T12302] veth0_vlan: left promiscuous mode [ 390.862289][T16604] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 391.944290][T16615] __nla_validate_parse: 1 callbacks suppressed [ 391.944312][T16615] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2959'. [ 392.405389][T12302] IPVS: stop unused estimator thread 0... [ 392.417608][T16632] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2962'. [ 392.427879][ T5829] Bluetooth: hci5: command tx timeout [ 392.442261][T16632] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2962'. [ 392.509042][T16642] netlink: 212348 bytes leftover after parsing attributes in process `syz.3.2965'. [ 392.532553][T16642] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2965'. [ 392.563375][T16642] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2965'. [ 392.744111][T16367] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 392.774274][T16367] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 392.798257][T16367] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 392.816763][T16655] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2969'. [ 392.836696][T16655] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2969'. [ 392.837914][T16654] vlan2: entered promiscuous mode [ 392.852827][T16654] bridge0: entered promiscuous mode [ 392.860072][T16367] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 392.894776][T16655] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2969'. [ 392.923144][T16655] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2969'. [ 392.940941][T16663] netlink: 'syz.7.2971': attribute type 21 has an invalid length. [ 392.941346][T16657] syzkaller1: entered allmulticast mode [ 393.233113][T16367] 8021q: adding VLAN 0 to HW filter on device bond0 [ 393.287170][T16367] 8021q: adding VLAN 0 to HW filter on device team0 [ 393.325654][T12296] bridge0: port 1(bridge_slave_0) entered blocking state [ 393.333016][T12296] bridge0: port 1(bridge_slave_0) entered forwarding state [ 393.379888][T12320] bridge0: port 2(bridge_slave_1) entered blocking state [ 393.387327][T12320] bridge0: port 2(bridge_slave_1) entered forwarding state [ 393.784059][T16367] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 393.856998][T16367] veth0_vlan: entered promiscuous mode [ 393.882171][T16367] veth1_vlan: entered promiscuous mode [ 393.914243][T16713] netlink: 'syz.5.2985': attribute type 29 has an invalid length. [ 393.943893][T16367] veth0_macvtap: entered promiscuous mode [ 393.961793][T16367] veth1_macvtap: entered promiscuous mode [ 393.992755][T16367] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 394.014306][T16367] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 394.037683][T12320] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 394.051282][T12320] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 394.065658][T12320] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 394.076912][T12320] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 394.238188][T12318] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 394.265600][T12318] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 394.366198][T12308] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 394.387414][T12308] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 394.923988][T16755] netlink: 'syz.2.2998': attribute type 16 has an invalid length. [ 394.947973][T16755] netlink: 'syz.2.2998': attribute type 17 has an invalid length. [ 395.110179][T16755] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 395.295911][T16770] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 395.303720][T16770] IPv6: NLM_F_CREATE should be set when creating new route [ 395.311266][T16770] IPv6: NLM_F_CREATE should be set when creating new route [ 395.420621][T16770] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 395.443780][ T5838] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 395.455096][ T5838] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 395.465476][ T5838] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 395.475521][ T5838] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 395.483568][ T5838] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 395.708557][T16780] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 395.885796][T16780] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 395.910001][T16774] lo speed is unknown, defaulting to 1000 [ 396.002516][T16790] bond1: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 396.031146][T16790] bond1 (unregistering): Released all slaves [ 396.151090][T16780] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 396.445867][T16813] netlink: 'syz.5.3014': attribute type 26 has an invalid length. [ 396.479104][T16813] netlink: 'syz.5.3014': attribute type 26 has an invalid length. [ 396.520100][T12320] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 396.606781][T12320] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 396.634480][T16816] pim6reg: entered allmulticast mode [ 396.646288][T16816] pim6reg: left allmulticast mode [ 396.682336][ T396] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 396.768465][ T396] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 396.949192][T16828] netlink: 'syz.6.3018': attribute type 1 has an invalid length. [ 396.968337][T16828] __nla_validate_parse: 11 callbacks suppressed [ 396.968363][T16828] netlink: 224 bytes leftover after parsing attributes in process `syz.6.3018'. [ 397.047630][T16774] chnl_net:caif_netlink_parms(): no params data found [ 397.181802][T16842] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3022'. [ 397.391923][T16774] bridge0: port 1(bridge_slave_0) entered blocking state [ 397.409001][T16774] bridge0: port 1(bridge_slave_0) entered disabled state [ 397.419966][T16774] bridge_slave_0: entered allmulticast mode [ 397.429089][T16774] bridge_slave_0: entered promiscuous mode [ 397.446058][T16774] bridge0: port 2(bridge_slave_1) entered blocking state [ 397.464613][T16774] bridge0: port 2(bridge_slave_1) entered disabled state [ 397.484984][T16774] bridge_slave_1: entered allmulticast mode [ 397.502769][T16774] bridge_slave_1: entered promiscuous mode [ 397.552788][ T5829] Bluetooth: hci2: command tx timeout [ 397.654866][T16876] netlink: 'syz.6.3031': attribute type 1 has an invalid length. [ 397.684854][T16774] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 397.710580][T16774] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 397.808936][T16885] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3032'. [ 397.853399][T16885] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3032'. [ 397.925829][T16885] bridge_slave_1: left allmulticast mode [ 397.931791][T16885] bridge_slave_1: left promiscuous mode [ 397.945608][T16885] bridge0: port 2(bridge_slave_1) entered disabled state [ 397.970650][T16885] bridge_slave_0: left allmulticast mode [ 397.997144][T16885] bridge_slave_0: left promiscuous mode [ 398.003974][T16885] bridge0: port 1(bridge_slave_0) entered disabled state [ 398.049422][T16897] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3035'. [ 398.157497][T16774] team0: Port device team_slave_0 added [ 398.176403][T16899] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3036'. [ 398.186539][T16774] team0: Port device team_slave_1 added [ 398.285758][T16774] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 398.309179][T16774] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 398.342440][T16774] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 398.358413][T16774] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 398.365797][T16774] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 398.400232][T16774] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 398.505444][T16913] bond1: option packets_per_slave: mode dependency failed, not supported in mode active-backup(1) [ 398.527158][T16913] bond1 (unregistering): Released all slaves [ 398.733346][T16774] hsr_slave_0: entered promiscuous mode [ 398.743081][T16774] hsr_slave_1: entered promiscuous mode [ 398.750969][T16774] debugfs: 'hsr0' already exists in 'hsr' [ 398.759130][T16774] Cannot create hsr debugfs directory [ 398.789973][T16927] netlink: 'syz.5.3043': attribute type 4 has an invalid length. [ 398.797971][T16927] netlink: 17 bytes leftover after parsing attributes in process `syz.5.3043'. [ 398.984201][T16946] nftables ruleset with unbound set [ 399.201826][T16774] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 399.222942][T16774] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 399.235211][T16774] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 399.357320][T16774] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 399.368263][T16774] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 399.388641][T16774] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 399.562075][T16774] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 399.607343][T16774] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 399.628344][ T5829] Bluetooth: hci2: command tx timeout [ 399.637947][T16774] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 399.800212][T16774] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 399.813924][T16774] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 399.825785][T16774] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 399.850150][T16991] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3060'. [ 399.859722][T16991] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3060'. [ 399.871247][T16991] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3060'. [ 400.089367][T16997] lo: Caught tx_queue_len zero misconfig [ 400.271137][T17007] vxcan2: entered promiscuous mode [ 400.321218][T16774] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 400.339292][T16774] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 400.340467][T17008] ieee802154 phy1 wpan1: encryption failed: -22 [ 400.372384][T16774] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 400.398089][T16774] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 400.593798][T16774] 8021q: adding VLAN 0 to HW filter on device bond0 [ 400.644822][T16774] 8021q: adding VLAN 0 to HW filter on device team0 [ 400.679140][T12318] bridge0: port 1(bridge_slave_0) entered blocking state [ 400.686340][T12318] bridge0: port 1(bridge_slave_0) entered forwarding state [ 400.700886][T17037] sch_tbf: burst 1885 is lower than device lo mtu (65550) ! [ 400.716346][T17033] netlink: 'syz.2.3071': attribute type 11 has an invalid length. [ 400.745283][T12318] bridge0: port 2(bridge_slave_1) entered blocking state [ 400.752540][T12318] bridge0: port 2(bridge_slave_1) entered forwarding state [ 401.030561][T17048] netlink: 'syz.5.3078': attribute type 6 has an invalid length. [ 401.213637][T16774] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 401.331110][T16774] veth0_vlan: entered promiscuous mode [ 401.364518][T16774] veth1_vlan: entered promiscuous mode [ 401.416051][T17063] netlink: 'syz.5.3082': attribute type 12 has an invalid length. [ 401.467466][T16774] veth0_macvtap: entered promiscuous mode [ 401.492794][T16774] veth1_macvtap: entered promiscuous mode [ 401.545888][T16774] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 401.581017][T16774] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 401.623547][ T396] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 401.664930][ T396] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 401.702918][ T396] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 401.708130][ T5829] Bluetooth: hci2: command tx timeout [ 401.778641][ T396] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 401.798245][T17080] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 401.963306][T12320] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 401.977980][T12320] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 402.083528][T12320] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 402.104563][T12320] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 402.332168][T17114] netlink: 'syz.3.2995': attribute type 3 has an invalid length. [ 402.345674][T17113] ieee802154 phy1 wpan1: encryption failed: -90 [ 402.348758][T17114] __nla_validate_parse: 8 callbacks suppressed [ 402.348789][T17114] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2995'. [ 402.476044][T17121] netlink: 'syz.3.3101': attribute type 7 has an invalid length. [ 402.532689][T17121] veth0: entered promiscuous mode [ 402.560882][T17119] veth0: left promiscuous mode [ 402.725162][T17134] openvswitch: netlink: Missing valid actions attribute. [ 402.752013][T17134] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 402.797263][T17134] netlink: 'syz.3.3105': attribute type 2 has an invalid length. [ 402.812488][T17134] netlink: 'syz.3.3105': attribute type 11 has an invalid length. [ 402.827338][T17134] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3105'. [ 403.249279][T17168] netlink: 68 bytes leftover after parsing attributes in process `syz.6.3115'. [ 403.791542][ T5829] Bluetooth: hci2: command tx timeout [ 403.959267][T17205] ipvlan2: entered promiscuous mode [ 403.982965][T17205] netlink: 'syz.6.3126': attribute type 10 has an invalid length. [ 404.002648][T17205] syz_tun: entered promiscuous mode [ 404.040178][T17216] netlink: 'syz.6.3126': attribute type 10 has an invalid length. [ 404.049343][T17205] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 404.100896][T17218] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3126'. [ 404.139050][T17216] team0: Device bond0 is already an upper device of the team interface [ 404.217367][T17217] IPVS: set_ctl: invalid protocol: 103 172.20.20.187:20001 [ 404.329365][T17222] bond1: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 404.376753][T17222] bond1 (unregistering): Released all slaves [ 404.601740][T17245] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3137'. [ 404.818118][T17264] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3141'. [ 405.019322][T17268] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.3143'. [ 405.055955][T17272] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.3143'. [ 405.153892][T17224] lec:lec_atm_close: lec0: Shut down! [ 405.213498][T17281] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3147'. [ 405.234234][T17284] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3149'. [ 405.621077][T17289] netlink: 'syz.3.3150': attribute type 21 has an invalid length. [ 405.764125][T17289] bond1: option lacp_rate: mode dependency failed, not supported in mode broadcast(3) [ 405.805266][T17289] bond1 (unregistering): Released all slaves [ 405.826644][T17320] gre0: entered promiscuous mode [ 405.832059][T17320] gre0: entered allmulticast mode [ 406.013759][T17334] netlink: zone id is out of range [ 406.023125][T17334] netlink: zone id is out of range [ 406.044268][T17334] netlink: zone id is out of range [ 406.054407][T17334] netlink: get zone limit has 4 unknown bytes [ 406.117079][T17341] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 406.196094][T17346] ipt_rpfilter: unknown options [ 406.202918][T17347] ipt_rpfilter: unknown options [ 406.336092][T17349] : renamed from bond0 (while UP) [ 406.526907][T17363] netlink: 'syz.3.3171': attribute type 5 has an invalid length. [ 406.742443][T17377] netlink: 'syz.2.3174': attribute type 142 has an invalid length. [ 407.302745][T17405] netlink: 'syz.3.3182': attribute type 11 has an invalid length. [ 407.464421][T17419] __nla_validate_parse: 8 callbacks suppressed [ 407.464443][T17419] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3185'. [ 407.487061][T17419] IPv6: sit1: Disabled Multicast RS [ 407.641973][T17424] syzkaller0: entered promiscuous mode [ 407.649252][T17424] syzkaller0: entered allmulticast mode [ 408.047015][T17430] syzkaller0: entered promiscuous mode [ 408.070901][T17430] syzkaller0: entered allmulticast mode [ 408.117428][T17443] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3193'. [ 408.381347][T17461] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3195'. [ 408.426085][T17461] geneve3: entered promiscuous mode [ 409.073969][T17470] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3199'. [ 409.228983][T17475] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3199'. [ 410.394491][T17472] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 410.411999][T17476] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 410.671970][T17487] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3202'. [ 410.704856][T17500] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3206'. [ 411.135524][T17517] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3209'. [ 411.326135][T17523] netlink: 44 bytes leftover after parsing attributes in process `syz.6.3211'. [ 411.343474][T17523] netlink: 21 bytes leftover after parsing attributes in process `syz.6.3211'. [ 411.433289][T17528] netlink: 'syz.3.3213': attribute type 3 has an invalid length. [ 411.755914][T17547] netlink: 'syz.2.3220': attribute type 1 has an invalid length. [ 412.146952][T17565] hsr0: Caught tx_queue_len zero misconfig [ 412.343270][T17571] siw: device registration error -23 [ 412.353769][T17572] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 412.512117][T17579] netlink: 'syz.6.3231': attribute type 4 has an invalid length. [ 412.690755][T17584] __nla_validate_parse: 7 callbacks suppressed [ 412.690779][T17584] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3233'. [ 412.731113][T17584] netlink: 152 bytes leftover after parsing attributes in process `syz.6.3233'. [ 412.954146][T17593] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3237'. [ 413.259076][T17605] netlink: 'syz.3.3240': attribute type 58 has an invalid length. [ 413.267468][T17605] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3240'. [ 413.340960][T17598] bond4: Unable to set down delay as MII monitoring is disabled [ 413.379281][T17598] bond4 (unregistering): Released all slaves [ 413.456808][T17608] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3241'. [ 413.740344][T17591] Can't find ip_set type [ 413.967241][T17624] netlink: 212348 bytes leftover after parsing attributes in process `syz.5.3245'. [ 414.251344][T17641] netlink: 'syz.5.3249': attribute type 12 has an invalid length. [ 414.750529][T17660] netlink: 180 bytes leftover after parsing attributes in process `syz.5.3255'. [ 414.784501][T17663] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3256'. [ 414.814472][T17663] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3256'. [ 414.837859][T17663] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3256'. [ 415.308770][T17684] netlink: 'syz.5.3261': attribute type 3 has an invalid length. [ 415.338043][T17684] netlink: 'syz.5.3261': attribute type 3 has an invalid length. [ 415.637415][T17693] syzkaller0: entered promiscuous mode [ 415.643340][T17693] syzkaller0: entered allmulticast mode [ 416.450642][T17486] Set syz1 is full, maxelem 65536 reached [ 418.355827][T17728] netlink: 'syz.5.3272': attribute type 1 has an invalid length. [ 418.380515][T17727] veth1_macvtap: left promiscuous mode [ 418.433192][T17722] IPv4: Oversized IP packet from 127.202.26.0 [ 418.479727][T17734] tipc: Started in network mode [ 418.484677][T17734] tipc: Node identity a2ae12ab67b1, cluster identity 4711 [ 418.493881][T17734] tipc: Enabled bearer , priority 0 [ 418.518848][T17731] dvmrp0: left allmulticast mode [ 418.527601][T17731] netdevsim netdevsim7 netdevsim0: left allmulticast mode [ 418.707169][T17725] syzkaller0: entered promiscuous mode [ 418.713157][T17725] syzkaller0: entered allmulticast mode [ 418.725894][T17725] tipc: Resetting bearer [ 418.805911][T17724] tipc: Resetting bearer [ 418.862824][T17757] netlink: 'syz.6.3282': attribute type 21 has an invalid length. [ 418.882955][T17757] netlink: 'syz.6.3282': attribute type 22 has an invalid length. [ 418.898017][T17757] netlink: 'syz.6.3282': attribute type 23 has an invalid length. [ 418.906296][T17757] netlink: 'syz.6.3282': attribute type 25 has an invalid length. [ 418.918488][T17757] __nla_validate_parse: 1 callbacks suppressed [ 418.918511][T17757] netlink: 96 bytes leftover after parsing attributes in process `syz.6.3282'. [ 419.188379][T17767] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3282'. [ 420.800265][T17724] tipc: Disabling bearer [ 420.871246][ T5917] tipc: Node number set to 3307147947 [ 420.982577][T17776] netlink: 'syz.3.3285': attribute type 1 has an invalid length. [ 421.141351][T17782] bond1: (slave geneve2): making interface the new active one [ 421.180075][T17793] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3286'. [ 421.221384][T17782] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 421.239923][T12308] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 421.249577][T12308] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 421.268257][T17788] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 421.328448][T12308] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 421.369440][T17798] gre0: entered promiscuous mode [ 421.396022][T12308] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 421.429221][T17804] netlink: 'syz.7.3290': attribute type 9 has an invalid length. [ 421.672191][T17822] dummy0: Caught tx_queue_len zero misconfig [ 421.874277][T17828] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 421.881547][T17833] netlink: 'syz.5.3301': attribute type 4 has an invalid length. [ 422.223256][T17852] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3303'. [ 422.273477][T17857] netlink: 156 bytes leftover after parsing attributes in process `syz.5.3306'. [ 422.300780][T17857] netlink: 156 bytes leftover after parsing attributes in process `syz.5.3306'. [ 422.337361][T17857] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3306'. [ 422.438042][T17865] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3308'. [ 422.609529][T17867] syzkaller0: entered promiscuous mode [ 422.615247][T17867] syzkaller0: entered allmulticast mode [ 422.648166][T17881] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3312'. [ 422.833121][T17903] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3317'. [ 423.232920][T17926] vlan3: entered promiscuous mode [ 423.239981][T17926] vlan3: entered allmulticast mode [ 423.245161][T17926] hsr_slave_1: entered allmulticast mode [ 423.579841][T17942] openvswitch: netlink: IP tunnel dst address not specified [ 423.941184][T17964] syzkaller0: entered promiscuous mode [ 423.952253][T17964] syzkaller0: entered allmulticast mode [ 424.174702][T17967] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3334'. [ 424.199662][T17967] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3334'. [ 424.386513][T17984] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3341'. [ 424.658895][T17989] netlink: 112 bytes leftover after parsing attributes in process `syz.5.3343'. [ 424.825122][T17996] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3346'. [ 424.881376][T18002] vcan0: tx drop: invalid da for name 0xfffffffffffffffe [ 424.909071][ C1] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 424.912752][T18001] vcan0: tx drop: invalid da for name 0xfffffffffffffffe [ 425.130544][T18015] veth1_macvtap: left promiscuous mode [ 425.167221][T18020] sctp: [Deprecated]: syz.5.3355 (pid 18020) Use of int in maxseg socket option. [ 425.167221][T18020] Use struct sctp_assoc_value instead [ 425.305425][T18025] tipc: Enabling of bearer rejected, media not registered [ 425.419972][T18035] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3360'. [ 425.652145][T18055] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 425.832832][T18071] tipc: Enabling of bearer rejected, failed to enable media [ 426.323108][T18096] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3379'. [ 426.393790][T18096] netlink: 'syz.3.3379': attribute type 1 has an invalid length. [ 426.892674][T18125] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3386'. [ 426.904237][T18125] netlink: 65047 bytes leftover after parsing attributes in process `syz.7.3386'. [ 427.015888][T18128] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3387'. [ 427.208549][T18140] netlink: 'syz.2.3391': attribute type 1 has an invalid length. [ 427.323785][T18146] bond2 (unregistering): Released all slaves [ 427.454967][T18156] xt_cgroup: invalid path, errno=-2 [ 427.552954][T18163] netlink: 'syz.3.3397': attribute type 8 has an invalid length. [ 428.254183][T18210] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 428.311755][T18217] netlink: 'syz.5.3414': attribute type 1 has an invalid length. [ 428.661912][T18234] netlink: 'syz.5.3418': attribute type 1 has an invalid length. [ 429.015823][T18249] syzkaller1: entered promiscuous mode [ 429.032809][T18249] syzkaller1: entered allmulticast mode [ 429.121275][T18256] mac80211_hwsim hwsim33 syzkaller0: left promiscuous mode [ 429.137645][T18256] mac80211_hwsim hwsim33 syzkaller0: left allmulticast mode [ 429.302509][T18280] x_tables: duplicate underflow at hook 1 [ 429.342895][T18280] __nla_validate_parse: 19 callbacks suppressed [ 429.342920][T18280] netlink: 44 bytes leftover after parsing attributes in process `syz.7.3433'. [ 429.373164][T18280] netlink: 43 bytes leftover after parsing attributes in process `syz.7.3433'. [ 429.403356][T18280] netlink: 'syz.7.3433': attribute type 5 has an invalid length. [ 429.432975][T18280] netlink: 43 bytes leftover after parsing attributes in process `syz.7.3433'. [ 429.458221][T18285] openvswitch: netlink: Missing key (keys=40, expected=80) [ 429.535431][T18285] netlink: 212368 bytes leftover after parsing attributes in process `syz.5.3435'. [ 429.581688][T18285] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3435'. [ 429.600689][T18285] openvswitch: netlink: Flow actions attr not present in new flow. [ 429.744529][T18296] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3439'. [ 429.931265][T18307] netlink: 76 bytes leftover after parsing attributes in process `syz.5.3444'. [ 429.943581][T18307] nbd: illegal input index -8454144 [ 430.167415][T18315] ieee802154 phy1 wpan1: encryption failed: -22 [ 430.537186][T18343] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3454'. [ 430.594119][T18343] syzkaller1: entered promiscuous mode [ 430.600375][T18343] syzkaller1: entered allmulticast mode [ 430.607372][T18343] PF_CAN: dropped non conform CAN skbuff: dev type 280, len 324 [ 430.690703][T18360] netlink: 48 bytes leftover after parsing attributes in process `syz.6.3458'. [ 430.747540][T18362] netlink: 'syz.3.3459': attribute type 15 has an invalid length. [ 430.774254][T18365] netlink: 96 bytes leftover after parsing attributes in process `syz.7.3460'. [ 430.794161][T18365] vlan3: entered allmulticast mode [ 430.800771][T18365] gretap0: entered allmulticast mode [ 430.823108][T18366] netlink: 'syz.2.3461': attribute type 1 has an invalid length. [ 431.052578][T18377] openvswitch: netlink: Missing key (keys=40, expected=80) [ 431.413057][T18395] sit2: entered promiscuous mode [ 431.433219][T18395] sit2: entered allmulticast mode [ 431.448314][T18402] netlink: 'syz.6.3473': attribute type 23 has an invalid length. [ 431.488968][T18395] netlink: 'syz.3.3470': attribute type 1 has an invalid length. [ 431.687714][T18414] netlink: 'syz.2.3476': attribute type 21 has an invalid length. [ 431.709220][T18414] IPv6: NLM_F_CREATE should be specified when creating new route [ 431.724506][T18414] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 431.731981][T18414] IPv6: NLM_F_CREATE should be set when creating new route [ 431.739324][T18414] IPv6: NLM_F_CREATE should be set when creating new route [ 431.746770][T18414] IPv6: NLM_F_CREATE should be set when creating new route [ 431.763285][T18410] bond4 (unregistering): Released all slaves [ 432.283705][T18449] netlink: 'syz.3.3486': attribute type 3 has an invalid length. [ 432.437497][T18461] netlink: 'syz.3.3489': attribute type 9 has an invalid length. [ 432.445620][T18461] netlink: 'syz.3.3489': attribute type 6 has an invalid length. [ 432.649818][T18468] bond2: option xmit_hash_policy: invalid value (64) [ 432.666167][T18468] bond2 (unregistering): Released all slaves [ 433.035040][T18490] netlink: 'syz.7.3497': attribute type 2 has an invalid length. [ 433.064900][T18490] netlink: 'syz.7.3497': attribute type 3 has an invalid length. [ 433.101155][T18494] syzkaller0: entered promiscuous mode [ 433.106790][T18494] syzkaller0: entered allmulticast mode [ 433.500576][T18521] IPVS: set_ctl: invalid protocol: 50 172.20.20.170:20003 [ 433.881855][T18536] syzkaller0: entered promiscuous mode [ 433.896263][T18536] syzkaller0: entered allmulticast mode [ 434.361826][T18568] bond6: entered promiscuous mode [ 434.367650][T18568] 8021q: adding VLAN 0 to HW filter on device bond6 [ 434.379675][T18574] __nla_validate_parse: 84 callbacks suppressed [ 434.379697][T18574] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3517'. [ 434.419452][T18574] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3517'. [ 434.541446][T18568] bond6: (slave xfrm1): refused to change device type [ 434.784318][T18599] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3523'. [ 434.843912][T18594] netlink: 'syz.6.3525': attribute type 83 has an invalid length. [ 435.166847][T18614] rdma_rxe: rxe_newlink: failed to add vxcan1 [ 435.272104][T18630] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3533'. [ 435.300536][T18630] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3533'. [ 435.330766][T18631] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3534'. [ 435.372088][T18636] netlink: 6012 bytes leftover after parsing attributes in process `syz.2.3536'. [ 435.599142][T18645] xt_TCPMSS: Only works on TCP SYN packets [ 435.965969][T18670] netlink: 65039 bytes leftover after parsing attributes in process `syz.7.3543'. [ 436.146487][T18683] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3549'. [ 436.171751][T18686] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3547'. [ 436.209101][T18686] gretap0: entered promiscuous mode [ 436.250964][T18686] gretap0: left promiscuous mode [ 436.351595][T18686] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 436.382002][T18704] netlink: 'syz.7.3552': attribute type 62 has an invalid length. [ 436.706454][T18718] netlink: 'syz.3.3558': attribute type 1 has an invalid length. [ 436.931109][T18745] IPVS: set_ctl: invalid protocol: 60 255.255.255.255:20003 [ 437.023528][T18724] netlink: 'syz.7.3560': attribute type 6 has an invalid length. [ 437.403840][T18764] veth1_macvtap: left promiscuous mode [ 437.930466][T18804] tc_dump_action: action bad kind [ 437.935782][T18805] tc_dump_action: action bad kind [ 438.025059][T18809] IPv6: sit1: Disabled Multicast RS [ 438.349622][T18826] bond0: (slave macvlan3): Error -98 calling set_mac_address [ 438.387250][T18831] netlink: 'syz.6.3584': attribute type 1 has an invalid length. [ 438.478671][T18826] geneve3: entered promiscuous mode [ 438.509088][T18826] geneve3: entered allmulticast mode [ 438.580322][T18833] bridge0: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 439.126898][T18870] x_tables: duplicate underflow at hook 1 [ 439.403342][T18882] tipc: Started in network mode [ 439.405614][T18881] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 439.408653][T18882] tipc: Node identity aaaaaaaaaa35, cluster identity 4711 [ 439.409025][T18882] tipc: Enabled bearer , priority 2 [ 439.433302][T18884] __nla_validate_parse: 16 callbacks suppressed [ 439.433326][T18884] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3603'. [ 439.675616][T18895] netlink: 76 bytes leftover after parsing attributes in process `syz.5.3608'. [ 439.690411][T18896] netlink: 76 bytes leftover after parsing attributes in process `syz.5.3608'. [ 439.758277][T18902] netlink: 256 bytes leftover after parsing attributes in process `syz.7.3610'. [ 439.770525][T18902] unsupported nlmsg_type 40 [ 439.776778][T18906] netlink: 'syz.2.3611': attribute type 23 has an invalid length. [ 439.900914][T18909] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 439.959025][T18911] netlink: 'syz.7.3613': attribute type 3 has an invalid length. [ 439.967385][T18917] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3612'. [ 440.213097][T18930] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3615'. [ 440.289288][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.408663][ T10] tipc: Node number set to 10463914 [ 440.684007][T18958] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3620'. [ 440.708654][T18960] netlink: 'syz.3.3624': attribute type 4 has an invalid length. [ 440.716775][T18960] netlink: 152 bytes leftover after parsing attributes in process `syz.3.3624'. [ 440.736401][T18960] `: renamed from bond0 (while UP) [ 440.751536][T18950] syzkaller0: entered promiscuous mode [ 440.757229][T18950] syzkaller0: entered allmulticast mode [ 441.160916][T18988] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3630'. [ 441.173436][T18990] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3632'. [ 441.443540][T18999] sctp: [Deprecated]: syz.2.3633 (pid 18999) Use of struct sctp_assoc_value in delayed_ack socket option. [ 441.443540][T18999] Use struct sctp_sack_info instead [ 441.672313][T19009] xt_recent: Unsupported userspace flags (000000b1) [ 441.698164][T19012] sit0: entered promiscuous mode [ 441.717356][T19012] netlink: 'syz.2.3636': attribute type 1 has an invalid length. [ 441.784012][T19016] netlink: 'syz.3.3637': attribute type 3 has an invalid length. [ 441.970223][T19024] netlink: 'syz.6.3638': attribute type 29 has an invalid length. [ 441.994369][T19024] netlink: 'syz.6.3638': attribute type 29 has an invalid length. [ 442.013199][T19024] netlink: 'syz.6.3638': attribute type 29 has an invalid length. [ 442.087036][T19024] netlink: 'syz.6.3638': attribute type 29 has an invalid length. [ 442.106817][T19024] netlink: 'syz.6.3638': attribute type 29 has an invalid length. [ 442.127325][T19032] netlink: 'syz.5.3641': attribute type 83 has an invalid length. [ 442.158330][T19024] netlink: 'syz.6.3638': attribute type 29 has an invalid length. [ 442.182073][T19024] netlink: 'syz.6.3638': attribute type 29 has an invalid length. [ 443.188771][T19105] xt_nfacct: accounting object `\$9ZM#mU|^c\F9YⳈ' does not exist [ 443.267002][T19108] gretap2: entered promiscuous mode [ 443.278809][T19108] gretap2: entered allmulticast mode [ 443.491304][T19126] syzkaller0: entered promiscuous mode [ 443.496849][T19126] syzkaller0: entered allmulticast mode [ 443.637674][T19132] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 443.925875][T19149] sit3: entered promiscuous mode [ 443.982950][T19149] sit3: entered allmulticast mode [ 444.033703][T19163] tipc: Started in network mode [ 444.050631][T19163] tipc: Node identity ce65a9b586d, cluster identity 4711 [ 444.076590][T19163] tipc: Enabled bearer , priority 0 [ 444.097191][T19160] syzkaller0: entered promiscuous mode [ 444.117066][T19160] syzkaller0: entered allmulticast mode [ 444.156708][T19167] veth1_macvtap: left promiscuous mode [ 444.183164][T19160] tipc: Resetting bearer [ 444.268483][T19157] tipc: Resetting bearer [ 444.315154][T19157] tipc: Disabling bearer [ 444.410737][T19185] sctp: [Deprecated]: syz.2.3686 (pid 19185) Use of int in maxseg socket option. [ 444.410737][T19185] Use struct sctp_assoc_value instead [ 444.469045][T19184] sctp: [Deprecated]: syz.2.3686 (pid 19184) Use of int in maxseg socket option. [ 444.469045][T19184] Use struct sctp_assoc_value instead [ 444.490848][T19194] __nla_validate_parse: 21 callbacks suppressed [ 444.490870][T19194] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3689'. [ 444.696078][T19201] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3691'. [ 444.745873][T19201] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 445.138974][T19230] ip6gre0: entered promiscuous mode [ 445.144397][T19230] ip6gre0: entered allmulticast mode [ 445.182114][T19233] netlink: 104 bytes leftover after parsing attributes in process `syz.5.3700'. [ 445.195402][T19235] netlink: 104 bytes leftover after parsing attributes in process `syz.5.3700'. [ 445.263034][T19238] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3701'. [ 445.358857][T19243] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input5 [ 445.392643][ C1] ip6_tunnel: ip6gretap0 xmit: Routing loop! Remote address found on this node! [ 445.533178][T19258] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3707'. [ 445.542976][T19258] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 445.643712][T19259] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3708'. [ 445.711584][T19268] SET target dimension over the limit! [ 445.880472][T19276] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 446.045496][T19297] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3717'. [ 446.076978][T19302] netlink: 211792 bytes leftover after parsing attributes in process `syz.7.3714'. [ 446.133413][T19299] lo: entered allmulticast mode [ 446.281204][T19315] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3719'. [ 446.606270][T19333] lo: left allmulticast mode [ 446.627578][T19333] gre0: left promiscuous mode [ 446.645648][T19333] gre0: left allmulticast mode [ 446.657048][T19335] xt_l2tp: wrong L2TP version: 0 [ 446.845979][T19333] sit0: left promiscuous mode [ 446.889002][T19333] ip6gre0: left promiscuous mode [ 446.902140][T19333] ip6gre0: left allmulticast mode [ 446.988185][ T5838] Bluetooth: hci2: command 0x0405 tx timeout [ 447.001427][T19333] bridge0: port 2(bridge_slave_1) entered disabled state [ 447.009345][T19333] bridge0: port 1(bridge_slave_0) entered disabled state [ 447.120730][T19363] sctp: [Deprecated]: syz.5.3737 (pid 19363) Use of int in maxseg socket option. [ 447.120730][T19363] Use struct sctp_assoc_value instead [ 447.241490][T19358] bond4 (unregistering): Released all slaves [ 447.527428][T19376] No such timeout policy "syz0" [ 447.818475][T19387] validate_nla: 5 callbacks suppressed [ 447.818497][T19387] netlink: 'syz.2.3745': attribute type 21 has an invalid length. [ 447.858329][T19387] netlink: 'syz.2.3745': attribute type 4 has an invalid length. [ 447.886548][T19387] netlink: 'syz.2.3745': attribute type 5 has an invalid length. [ 448.331049][T19420] netlink: 'syz.2.3755': attribute type 32 has an invalid length. [ 448.480925][T19420] bond0: option coupled_control: invalid value (52) [ 448.570930][T19420] bond0 (unregistering): Released all slaves [ 449.745041][ T7983] IPVS: starting estimator thread 0... [ 449.823588][T19500] __nla_validate_parse: 14 callbacks suppressed [ 449.823612][T19500] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3773'. [ 449.860094][T19499] tipc: Enabled bearer , priority 10 [ 449.877942][T19501] IPVS: using max 30 ests per chain, 72000 per kthread [ 450.060630][T19517] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3776'. [ 450.135804][T19526] netlink: 'syz.5.3778': attribute type 1 has an invalid length. [ 450.164373][T19517] macvtap1: entered promiscuous mode [ 450.170051][T19517] vlan0: entered promiscuous mode [ 450.175595][T19517] macvtap1: entered allmulticast mode [ 450.181206][T19517] vlan0: entered allmulticast mode [ 450.187066][T19517] veth0_vlan: entered allmulticast mode [ 450.263387][T19528] bond7: (slave bridge2): making interface the new active one [ 450.279572][T19528] bond7: (slave bridge2): Enslaving as an active interface with an up link [ 450.405657][T19538] xt_CT: You must specify a L4 protocol and not use inversions on it [ 450.456460][T19541] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3783'. [ 450.480469][T19545] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3785'. [ 450.490286][T19545] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 450.500980][T19545] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 450.566496][T19546] netlink: 100 bytes leftover after parsing attributes in process `syz.7.3784'. [ 450.584115][T19546] netlink: 'syz.7.3784': attribute type 11 has an invalid length. [ 450.592920][T19546] netlink: 199788 bytes leftover after parsing attributes in process `syz.7.3784'. [ 450.636362][T19554] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 450.734484][T19556] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3783'. [ 451.481529][T19550] lo speed is unknown, defaulting to 1000 [ 451.497436][T19569] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3790'. [ 451.514537][T19574] syzkaller0: entered promiscuous mode [ 451.527971][T19574] syzkaller0: entered allmulticast mode [ 452.364225][T19598] xt_ecn: cannot match TCP bits for non-tcp packets [ 452.509357][T19610] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3801'. [ 452.716637][T19613] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3804'. [ 452.877040][T19613] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap3 [ 452.903868][T19613] gretap3: default qdisc (pfifo_fast) fail, fallback to noqueue [ 452.921908][T19613] gretap3: entered promiscuous mode [ 452.927347][T19613] gretap3: entered allmulticast mode [ 453.331603][T19630] syzkaller1: entered promiscuous mode [ 453.338054][T19630] syzkaller1: entered allmulticast mode [ 453.792741][T19638] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap3 [ 453.816408][T19638] gretap3: default qdisc (pfifo_fast) fail, fallback to noqueue [ 453.883182][T19638] gretap3: entered promiscuous mode [ 453.905028][T19638] gretap3: entered allmulticast mode [ 453.924971][T19648] netlink: 'syz.6.3813': attribute type 10 has an invalid length. [ 453.967040][T19652] netlink: 'syz.7.3814': attribute type 3 has an invalid length. [ 454.404451][T19671] bond0: Caught tx_queue_len zero misconfig [ 454.845013][T19692] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 454.903810][T19696] netlink: 'syz.3.3830': attribute type 10 has an invalid length. [ 454.946085][T19696] `: (slave syz_tun): Enslaving as an active interface with an up link [ 455.180568][T19706] __nla_validate_parse: 7 callbacks suppressed [ 455.180589][T19706] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3833'. [ 455.396816][T19714] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 455.407220][T19714] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 455.429734][T19714] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 455.448532][T19714] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 455.849455][T12324] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 455.887483][T12324] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 456.302708][T19738] netlink: 'syz.5.3842': attribute type 15 has an invalid length. [ 456.311302][T19738] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3842'. [ 456.347621][T19738] netlink: 'syz.5.3842': attribute type 15 has an invalid length. [ 456.347621][ T1085] netdevsim netdevsim5 netdevsim0: set [0, 1] type 1 family 0 port 2816 - 0 [ 456.397674][ T1085] netdevsim netdevsim5 netdevsim1: set [0, 1] type 1 family 0 port 2816 - 0 [ 456.447897][T19738] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3842'. [ 456.460154][ T1085] netdevsim netdevsim5 netdevsim2: set [0, 1] type 1 family 0 port 2816 - 0 [ 456.484383][ T1085] netdevsim netdevsim5 netdevsim3: set [0, 1] type 1 family 0 port 2816 - 0 [ 456.875270][T19760] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3847'. [ 457.057222][T19763] netlink: 'syz.6.3850': attribute type 1 has an invalid length. [ 457.235675][T19774] x_tables: unsorted entry at hook 2 [ 457.313456][T19770] bond4: (slave bridge4): making interface the new active one [ 457.335387][T19770] bond4: (slave bridge4): Enslaving as an active interface with an up link [ 457.356701][T19769] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3851'. [ 457.505837][T19783] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3855'. [ 457.525309][T19783] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3855'. [ 457.537299][T19783] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3855'. [ 457.691732][T19788] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3856'. [ 457.822076][T19797] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3858'. [ 458.211212][T19817] netlink: 'syz.7.3863': attribute type 1 has an invalid length. [ 458.392019][T19541] Set syz1 is full, maxelem 65536 reached [ 461.399971][T19862] __nla_validate_parse: 5 callbacks suppressed [ 461.399993][T19862] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3874'. [ 461.452154][ T1085] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 461.480599][ T1085] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 461.512300][ T1085] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 461.543556][T19865] veth1_to_batadv: entered promiscuous mode [ 461.581360][ T1085] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 461.600643][T19867] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3875'. [ 461.799013][T19871] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3878'. [ 461.913357][T19890] netlink: 'syz.3.3883': attribute type 12 has an invalid length. [ 462.090523][T19897] netlink: 'syz.7.3886': attribute type 21 has an invalid length. [ 462.139657][T19898] syzkaller0: entered promiscuous mode [ 462.152146][T19898] syzkaller0: entered allmulticast mode [ 462.221510][T19898] netlink: 'syz.3.3887': attribute type 2 has an invalid length. [ 462.229880][T19898] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3887'. [ 462.399579][T19914] bridge0: port 2(bridge_slave_1) entered disabled state [ 462.408358][T19914] bridge0: port 1(bridge_slave_0) entered disabled state [ 462.543423][T19926] xt_l2tp: missing protocol rule (udp|l2tpip) [ 462.547677][T19923] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3894'. [ 462.561029][T19926] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3895'. [ 462.577670][T19923] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3894'. [ 462.584623][T19929] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3896'. [ 462.811812][T19945] openvswitch: netlink: IP tunnel dst address not specified [ 463.055191][T19954] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 463.346383][T19976] netlink: 144 bytes leftover after parsing attributes in process `syz.3.3906'. [ 463.768949][T20000] netlink: 168 bytes leftover after parsing attributes in process `syz.2.3912'. [ 463.886787][T20008] netlink: 'syz.3.3914': attribute type 11 has an invalid length. [ 463.955181][T20019] ip6tnl1: entered promiscuous mode [ 464.220451][T20023] 8021q: adding VLAN 0 to HW filter on device bond5 [ 464.367709][T20022] 8021q: adding VLAN 0 to HW filter on device bond5 [ 464.379479][T20022] bond5: (slave vxcan3): The slave device specified does not support setting the MAC address [ 464.394726][T20022] bond5: (slave vxcan3): Error -95 calling set_mac_address [ 464.515922][T20050] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 464.540369][T20050] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 464.574169][T20050] gretap1: entered promiscuous mode [ 464.584199][T20050] gretap1: entered allmulticast mode [ 464.726158][T20067] sit2: entered promiscuous mode [ 464.734338][T20067] sit2: entered allmulticast mode [ 464.820093][T20070] mac80211_hwsim hwsim33 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 465.898769][T20114] IPVS: set_ctl: invalid protocol: 135 172.20.20.19:20000 [ 465.943502][T20114] IPVS: set_ctl: invalid protocol: 59 224.0.0.1:20002 [ 466.184869][T20127] 8021q: adding VLAN 0 to HW filter on device bond0 [ 466.571382][T20148] IPVS: length: 239 != 24 [ 466.572314][T20157] netlink: 'syz.2.3960': attribute type 39 has an invalid length. [ 466.873799][T20175] netlink: 'syz.7.3965': attribute type 8 has an invalid length. [ 466.893466][T20173] __nla_validate_parse: 8 callbacks suppressed [ 466.893488][T20173] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3964'. [ 467.102877][T20190] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3970'. [ 467.157847][T20190] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3970'. [ 467.186833][ T1085] netdevsim netdevsim6 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 467.201029][ T1085] netdevsim netdevsim6 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 467.249025][T20196] bond0: entered promiscuous mode [ 467.254340][T20196] bond0: entered allmulticast mode [ 467.263320][T20196] 8021q: adding VLAN 0 to HW filter on device bond0 [ 467.271832][ T1085] netdevsim netdevsim6 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 467.283311][T12324] netdevsim netdevsim6 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 467.423835][T20212] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3972'. [ 467.498021][T20215] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3972'. [ 467.507036][T20215] netlink: 6 bytes leftover after parsing attributes in process `syz.3.3972'. [ 467.534064][ T5838] block nbd4: Receive control failed (result -1) [ 467.841155][T20234] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 468.144229][T20246] mac80211_hwsim hwsim33 syzkaller0: entered promiscuous mode [ 468.156503][T20246] mac80211_hwsim hwsim33 syzkaller0: entered allmulticast mode [ 468.259462][T20257] netlink: zone id is out of range [ 468.285495][T20257] netlink: zone id is out of range [ 468.299153][T20257] netlink: zone id is out of range [ 468.305569][T20257] netlink: zone id is out of range [ 468.310099][T20254] sctp: [Deprecated]: syz.3.3989 (pid 20254) Use of int in max_burst socket option. [ 468.310099][T20254] Use struct sctp_assoc_value instead [ 468.311293][T20257] netlink: zone id is out of range [ 468.333723][T20257] netlink: zone id is out of range [ 468.343607][T20260] netlink: 'syz.5.3991': attribute type 1 has an invalid length. [ 468.344813][T20257] netlink: zone id is out of range [ 468.361960][T20257] netlink: set zone limit has 4 unknown bytes [ 468.401424][T20260] netlink: 96 bytes leftover after parsing attributes in process `syz.5.3991'. [ 468.413110][T20260] netlink: 1 bytes leftover after parsing attributes in process `syz.5.3991'. [ 468.427689][T20260] netlink: 658 bytes leftover after parsing attributes in process `syz.5.3991'. [ 468.430909][ T1085] bond2: (slave ip6gretap1): link status up again after 0 ms [ 468.448792][T20264] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3992'. [ 468.553089][T20264] geneve2: entered promiscuous mode [ 468.801113][T20282] syzkaller0: entered promiscuous mode [ 468.818102][T20282] syzkaller0: entered allmulticast mode [ 469.287465][T20304] C: renamed from team_slave_0 (while UP) [ 469.381312][T20304] netlink: 'syz.3.4003': attribute type 1 has an invalid length. [ 469.481110][T20314] veth0_to_bridge: entered promiscuous mode [ 469.538993][T20314] veth0_to_bridge: left promiscuous mode [ 469.577595][T20321] sctp: [Deprecated]: syz.6.4007 (pid 20321) Use of int in max_burst socket option deprecated. [ 469.577595][T20321] Use struct sctp_assoc_value instead [ 469.873589][T20340] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 469.905961][T20340] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 470.021157][T20348] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 470.073107][T20350] netlink: 'syz.5.4016': attribute type 1 has an invalid length. [ 470.112341][T20348] syzkaller0: entered promiscuous mode [ 470.119505][T20348] syzkaller0: entered allmulticast mode [ 470.851424][T20397] netlink: 'syz.7.4032': attribute type 1 has an invalid length. [ 471.366552][T20425] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 471.521868][T20425] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 472.035761][T20464] bridge0: entered promiscuous mode [ 472.041660][T20464] bridge0: entered allmulticast mode [ 472.216108][T20481] netlink: 'syz.2.4054': attribute type 29 has an invalid length. [ 472.229115][T20481] netlink: 'syz.2.4054': attribute type 29 has an invalid length. [ 472.248993][T20478] __nla_validate_parse: 22 callbacks suppressed [ 472.249034][T20478] netlink: 500 bytes leftover after parsing attributes in process `syz.2.4054'. [ 472.391209][T20481] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4054'. [ 472.493626][T20490] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4056'. [ 472.542032][T20492] netlink: 'syz.2.4057': attribute type 5 has an invalid length. [ 472.606054][T20494] netlink: 156 bytes leftover after parsing attributes in process `syz.2.4058'. [ 472.665732][T20498] netlink: 'syz.2.4059': attribute type 2 has an invalid length. [ 472.693935][T20498] 9: entered promiscuous mode [ 472.858127][ T1085] net_ratelimit: 33 callbacks suppressed [ 472.858151][ T1085] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 472.977968][ T60] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 473.108143][ T60] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 473.158045][T20515] netlink: 'syz.5.4065': attribute type 10 has an invalid length. [ 473.165947][T20515] netlink: 40 bytes leftover after parsing attributes in process `syz.5.4065'. [ 473.210691][T20522] netlink: 348 bytes leftover after parsing attributes in process `syz.5.4065'. [ 473.218354][T20515] dummy0: entered promiscuous mode [ 473.247687][T20515] bridge0: port 3(dummy0) entered blocking state [ 473.285449][T20515] bridge0: port 3(dummy0) entered disabled state [ 473.301885][T20515] dummy0: entered allmulticast mode [ 473.339198][ T60] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 473.470142][ T60] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 473.497400][T20539] syzkaller0: entered promiscuous mode [ 473.538254][T20539] syzkaller0: entered allmulticast mode [ 473.570032][T20539] 0: reclassify loop, rule prio 0, protocol 800 [ 473.599069][T12305] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 473.699459][T20554] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4076'. [ 473.713113][T20556] veth0_to_bridge: entered promiscuous mode [ 473.724032][T20554] netlink: 224 bytes leftover after parsing attributes in process `syz.2.4076'. [ 473.738359][ T60] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 473.749088][T20554] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4076'. [ 473.768642][T20559] netlink: 'syz.7.4078': attribute type 11 has an invalid length. [ 473.804145][T20556] SET target dimension over the limit! [ 473.834575][T20555] veth0_to_bridge: left promiscuous mode [ 473.898405][ T60] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 474.030425][ T60] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 474.404535][T20599] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4089'. [ 474.451446][T20592] bond6: entered promiscuous mode [ 474.456762][T20592] bond6: entered allmulticast mode [ 474.468363][T20592] 8021q: adding VLAN 0 to HW filter on device bond6 [ 475.210421][T20630] syzkaller0: entered promiscuous mode [ 475.225923][T20630] syzkaller0: entered allmulticast mode [ 475.411581][T20639] IPVS: length: 255 != 24 [ 475.808585][T20646] sock: sock_timestamping_bind_phc: sock not bind to device [ 476.598420][T20601] syz.7.4092 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 476.627920][T20601] CPU: 0 UID: 0 PID: 20601 Comm: syz.7.4092 Not tainted syzkaller #0 PREEMPT(full) [ 476.627951][T20601] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 476.627964][T20601] Call Trace: [ 476.627975][T20601] [ 476.627986][T20601] dump_stack_lvl+0xe8/0x150 [ 476.628019][T20601] dump_header+0xd4/0x4c0 [ 476.628044][T20601] oom_kill_process+0x263/0x800 [ 476.628068][T20601] out_of_memory+0xf0c/0x12b0 [ 476.628112][T20601] ? __pfx_out_of_memory+0x10/0x10 [ 476.628153][T20601] mem_cgroup_out_of_memory+0x145/0x240 [ 476.628191][T20601] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 476.628236][T20601] ? _raw_spin_unlock+0x28/0x50 [ 476.628254][T20601] ? memcg1_oom_prepare+0x37f/0x450 [ 476.628276][T20601] try_charge_memcg+0xde4/0x1280 [ 476.628326][T20601] ? __pfx_try_charge_memcg+0x10/0x10 [ 476.628351][T20601] ? mem_cgroup_swapin_charge_folio+0x33/0x390 [ 476.628388][T20601] charge_memcg+0x9f/0x180 [ 476.628409][T20601] ? mem_cgroup_swapin_charge_folio+0x33/0x390 [ 476.628429][T20601] mem_cgroup_swapin_charge_folio+0x262/0x390 [ 476.628453][T20601] __read_swap_cache_async+0x212/0x480 [ 476.628491][T20601] swap_cluster_readahead+0x336/0x630 [ 476.628526][T20601] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 476.628569][T20601] ? get_vma_policy+0x27c/0x3c0 [ 476.628596][T20601] swapin_readahead+0x189/0xc60 [ 476.628627][T20601] ? swap_table_get+0x1e/0x260 [ 476.628658][T20601] ? __pfx_swapin_readahead+0x10/0x10 [ 476.628686][T20601] ? swap_table_get+0x1e/0x260 [ 476.628710][T20601] ? swap_table_get+0x1e/0x260 [ 476.628732][T20601] ? swap_table_get+0x1e/0x260 [ 476.628757][T20601] ? swap_table_get+0x216/0x260 [ 476.628783][T20601] ? swap_cache_get_folio+0x51c/0x530 [ 476.628816][T20601] do_swap_page+0x837/0x5c70 [ 476.628839][T20601] ? finish_task_switch+0x162/0x940 [ 476.628873][T20601] ? __lock_acquire+0x6b6/0x2cf0 [ 476.628901][T20601] ? ___pte_offset_map+0x29/0x240 [ 476.628933][T20601] ? do_swap_page+0x17d/0x5c70 [ 476.628957][T20601] ? __pfx_do_swap_page+0x10/0x10 [ 476.628982][T20601] ? __lock_acquire+0x6b6/0x2cf0 [ 476.629001][T20601] ? __pfx_default_wake_function+0x10/0x10 [ 476.629033][T20601] ? ___pte_offset_map+0x1ae/0x240 [ 476.629063][T20601] ? pte_offset_map_rw_nolock+0xea/0x160 [ 476.629095][T20601] handle_mm_fault+0x1277/0x32b0 [ 476.629138][T20601] ? handle_mm_fault+0xdb/0x32b0 [ 476.629175][T20601] ? __pfx_handle_mm_fault+0x10/0x10 [ 476.629200][T20601] ? lock_vma_under_rcu+0x42c/0x4a0 [ 476.629229][T20601] ? preempt_schedule_notrace+0x57/0x90 [ 476.629263][T20601] ? __might_fault+0xb0/0x130 [ 476.629304][T20601] do_user_addr_fault+0xa7c/0x1380 [ 476.629344][T20601] ? rcu_is_watching+0x15/0xb0 [ 476.629369][T20601] ? trace_page_fault_user+0x84/0x1c0 [ 476.629392][T20601] exc_page_fault+0x71/0xd0 [ 476.629415][T20601] asm_exc_page_fault+0x26/0x30 [ 476.629434][T20601] RIP: 0033:0x7f9eb478f75b [ 476.629454][T20601] Code: 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 <64> 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 41 [ 476.629471][T20601] RSP: 002b:00007f9eb5635038 EFLAGS: 00010217 [ 476.629490][T20601] RAX: 000000000000000c RBX: 00007f9eb49e5fa0 RCX: ffffffffffffffa8 [ 476.629505][T20601] RDX: 0000000000000048 RSI: 0000200000000700 RDI: 0000000000000000 [ 476.629518][T20601] RBP: 00007f9eb4813f91 R08: 0000000000000000 R09: 0000000000000000 [ 476.629530][T20601] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 476.629543][T20601] R13: 00007f9eb49e6038 R14: 00007f9eb49e5fa0 R15: 00007fff79be7ea8 [ 476.629579][T20601] [ 476.629588][T20601] memory: usage 307200kB, limit 307200kB, failcnt 165 [ 476.993003][T20601] memory+swap: usage 307408kB, limit 9007199254740988kB, failcnt 0 [ 477.017936][T20601] kmem: usage 307200kB, limit 9007199254740988kB, failcnt 0 [ 477.036196][T20601] Memory cgroup stats for /syz7: [ 477.036543][T20601] cache 0 [ 477.044595][T20601] rss 0 [ 477.047697][T20601] rss_huge 0 [ 477.064826][T20601] shmem 0 [ 477.079261][T20601] mapped_file 0 [ 477.082796][T20601] dirty 0 [ 477.085769][T20601] writeback 0 [ 477.091219][T20601] workingset_refault_anon 0 [ 477.095864][T20601] workingset_refault_file 0 [ 477.114097][T20601] swap 212992 [ 477.117462][T20601] swapcached 0 [ 477.121406][T20601] pgpgin 34671 [ 477.125046][T20601] pgpgout 34671 [ 477.128839][T20601] pgfault 78017 [ 477.132427][T20601] pgmajfault 0 [ 477.136163][T20601] inactive_anon 0 [ 477.140070][T20601] active_anon 0 [ 477.143817][T20601] inactive_file 0 [ 477.148226][T20601] active_file 0 [ 477.151894][T20601] unevictable 0 [ 477.155669][T20601] hierarchical_memory_limit 314572800 [ 477.163383][T20601] hierarchical_memsw_limit 9223372036854771712 [ 477.170253][T20601] total_cache 0 [ 477.176189][T20601] total_rss 0 [ 477.179911][T20601] total_rss_huge 0 [ 477.184041][T20601] total_shmem 0 [ 477.188486][T20601] total_mapped_file 0 [ 477.192571][T20601] total_dirty 0 [ 477.196494][T20601] total_writeback 0 [ 477.202588][T20601] total_workingset_refault_anon 0 [ 477.211042][T20601] total_workingset_refault_file 0 [ 477.216362][T20601] total_swap 212992 [ 477.221870][T20601] total_swapcached 0 [ 477.226058][T20601] total_pgpgin 34671 [ 477.230714][T20601] total_pgpgout 34671 [ 477.235434][T20601] total_pgfault 78017 [ 477.242652][T20601] total_pgmajfault 0 [ 477.246799][T20601] total_inactive_anon 0 [ 477.251697][T20601] total_active_anon 0 [ 477.256166][T20601] total_inactive_file 0 [ 477.261424][T20601] total_active_file 0 [ 477.265826][T20601] total_unevictable 0 [ 477.270838][T20601] anon_cost 0 [ 477.274394][T20601] file_cost 0 [ 477.278809][T20601] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz7,task_memcg=/syz7,task=syz.7.4092,pid=20600,uid=0 [ 477.317162][T20601] Memory cgroup out of memory: Killed process 20600 (syz.7.4092) total-vm:102224kB, anon-rss:1140kB, file-rss:23272kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 479.050557][ T12] net_ratelimit: 7 callbacks suppressed [ 479.050580][ T12] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 479.222621][ T1166] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 479.347908][ T1166] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 479.449491][T20677] __nla_validate_parse: 1 callbacks suppressed [ 479.449511][T20677] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4113'. [ 479.460372][T20680] netlink: 40 bytes leftover after parsing attributes in process `syz.5.4114'. [ 479.475790][T20677] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4113'. [ 479.498242][T20681] delete_channel: no stack [ 479.499884][T20677] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4113'. [ 479.545130][T20684] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4113'. [ 479.575579][T20683] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4115'. [ 479.595851][ T1085] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 479.619824][T20691] netlink: 10 bytes leftover after parsing attributes in process `syz.5.4114'. [ 479.692228][T20697] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4119'. [ 479.747881][T12297] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 479.759875][T20700] netlink: 64138 bytes leftover after parsing attributes in process `syz.3.4120'. [ 479.771017][T20699] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 479.858834][ T1166] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 479.942687][T20707] netlink: 'syz.7.4121': attribute type 11 has an invalid length. [ 479.968117][T12297] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 479.990050][T20707] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4121'. [ 480.127945][ T12] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 480.258018][T12297] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 480.704816][T20744] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 480.842606][T20751] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 481.028046][T20724] lo speed is unknown, defaulting to 1000 [ 481.176272][T20767] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0 [ 481.282310][T20773] tipc: Started in network mode [ 481.287343][T20773] tipc: Node identity 080211000001, cluster identity 4711 [ 481.319725][T20773] tipc: Enabled bearer , priority 0 [ 481.365203][T20773] tipc: Resetting bearer [ 481.404833][T20773] tipc: Resetting bearer [ 481.600273][T20794] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 482.400994][T20816] erspan0: entered promiscuous mode [ 482.431077][T20816] gretap0: entered promiscuous mode [ 482.499070][T20816] hsr1: Slave A (erspan0) is not up; please bring it up to get a fully working HSR network [ 482.535551][T20816] hsr1: Slave B (gretap0) is not up; please bring it up to get a fully working HSR network [ 482.586476][ T7985] tipc: Node number set to 134418688 [ 482.889130][T20822] vlan6: entered allmulticast mode [ 482.900452][T20822] hsr0: entered allmulticast mode [ 482.911339][T20822] hsr_slave_0: entered allmulticast mode [ 482.943983][T20832] netlink: 'syz.7.4159': attribute type 5 has an invalid length. [ 482.975343][T20822] syz.5.4155 (20822) used greatest stack depth: 15640 bytes left [ 483.014042][ T5896] IPVS: starting estimator thread 0... [ 483.129585][T20833] IPVS: using max 24 ests per chain, 57600 per kthread [ 483.394914][T20848] netlink: 'syz.7.4165': attribute type 1 has an invalid length. [ 483.886735][T20868] bond8: Unable to set down delay as MII monitoring is disabled [ 483.921216][T20868] bond8 (unregistering): Released all slaves [ 484.017192][T20869] vlan2: entered promiscuous mode [ 484.055022][T20869] vlan2: entered allmulticast mode [ 484.068156][T20869] hsr_slave_1: entered allmulticast mode [ 484.092555][T20871] pim6reg: entered allmulticast mode [ 484.127339][T20874] pim6reg: left allmulticast mode [ 484.250724][ T1085] net_ratelimit: 23 callbacks suppressed [ 484.250746][ T1085] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 484.588998][T12318] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 484.738142][T12317] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 484.865115][T20905] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 484.892192][T20908] __nla_validate_parse: 15 callbacks suppressed [ 484.892221][T20908] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4179'. [ 484.892264][T20907] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4179'. [ 484.918141][T20908] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4179'. [ 484.918645][T12317] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 484.939389][T20907] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4179'. [ 485.047951][ T12] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 485.075318][T20904] tipc: Enabling of bearer rejected, already enabled [ 485.167908][ T12] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 485.278370][ T12] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 485.398100][ T12] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 485.443621][T20928] netlink: 32 bytes leftover after parsing attributes in process `syz.5.4184'. [ 485.475160][T20928] xt_socket: unknown flags 0xe4 [ 485.507995][ T12] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 485.519432][T20936] netlink: 'syz.3.4186': attribute type 21 has an invalid length. [ 485.618257][ T1085] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 485.769387][T20942] xt_l2tp: wrong L2TP version: 0 [ 486.019072][T20956] netlink: 64 bytes leftover after parsing attributes in process `syz.2.4193'. [ 486.048156][T20963] netlink: 64 bytes leftover after parsing attributes in process `syz.2.4193'. [ 486.048498][T20962] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4195'. [ 486.236979][T20971] Unsupported ieee802154 address type: 0 [ 486.254787][T20969] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4197'. [ 486.281211][T20976] netlink: 56 bytes leftover after parsing attributes in process `syz.2.4198'. [ 486.362985][T20976] bond1: (slave gretap0): Device is not bonding slave [ 486.374432][T20976] bond1: option active_slave: invalid value (gretap0) [ 486.405134][T20976] bond1 (unregistering): Released all slaves [ 486.445259][T20988] sctp: [Deprecated]: syz.7.4203 (pid 20988) Use of int in max_burst socket option. [ 486.445259][T20988] Use struct sctp_assoc_value instead [ 486.583848][T20992] netlink: 'syz.2.4204': attribute type 1 has an invalid length. [ 486.733941][T21005] netlink: 'syz.2.4209': attribute type 1 has an invalid length. [ 486.843220][T21006] bond1: (slave ip6gretap1): making interface the new active one [ 486.866287][T21006] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 486.875141][T21006] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 486.883509][T21006] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 487.096502][T21029] netlink: 'syz.6.4215': attribute type 1 has an invalid length. [ 487.600578][T21057] bond4: option packets_per_slave: invalid value (18446744073709551615) [ 487.631020][T21057] bond4: option packets_per_slave: allowed values 0 - 65535 [ 487.680469][T21057] bond4 (unregistering): Released all slaves [ 487.753367][T21068] netlink: 'syz.3.4228': attribute type 12 has an invalid length. [ 488.175138][T21093] ipt_REJECT: ECHOREPLY no longer supported. [ 488.236350][T21102] x_tables: duplicate underflow at hook 1 [ 488.608320][T21130] netlink: 'syz.3.4242': attribute type 10 has an invalid length. [ 488.635623][T21130] bridge0: port 3(team0) entered blocking state [ 488.676002][T21130] bridge0: port 3(team0) entered disabled state [ 488.709364][T21130] team0: entered allmulticast mode [ 488.724885][T21130] C: entered allmulticast mode [ 488.740977][T21130] team_slave_1: entered allmulticast mode [ 488.774903][T21130] team0: entered promiscuous mode [ 488.796955][T21130] C: entered promiscuous mode [ 488.813642][T21130] team_slave_1: entered promiscuous mode [ 488.830790][T21130] bridge0: port 3(team0) entered blocking state [ 488.837371][T21130] bridge0: port 3(team0) entered forwarding state [ 488.861201][T21140] block nbd7: Unsupported socket: should be TCP or UNIX. [ 489.011897][T21147] vxcan0: tx drop: invalid sa for name 0x0000000000000001 [ 489.042156][T21147] netlink: 'syz.5.4249': attribute type 2 has an invalid length. [ 489.129859][T21153] netlink: 'syz.6.4253': attribute type 6 has an invalid length. [ 489.157510][T21153] netlink: 'syz.6.4253': attribute type 6 has an invalid length. [ 489.508206][ T7037] net_ratelimit: 29 callbacks suppressed [ 489.508230][ T7037] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 489.639108][T12308] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 489.648348][T21180] netlink: 'syz.7.4263': attribute type 6 has an invalid length. [ 489.693466][T21180] dvmrp6: entered allmulticast mode [ 489.768198][T12315] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 489.863763][T21193] bond0: (slave syz_tun): Releasing backup interface [ 489.898709][T21193] bond0: (slave team0): Releasing backup interface [ 489.910028][ T7985] ip6_tunnel: ip6gretap0 xmit: Routing loop! Remote address found on this node! [ 489.971784][T21193] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 490.018545][T21191] lo: entered promiscuous mode [ 490.030976][T21191] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 490.073145][T21195] team0: Mode changed to "activebackup" [ 490.150965][T14554] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 490.271869][T21206] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 490.429389][T12315] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 490.448130][ T7985] ip6_tunnel: ip6gretap0 xmit: Routing loop! Remote address found on this node! [ 490.653622][T21228] delete_channel: no stack [ 490.709454][ T1102] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 490.852581][T21213] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 490.958811][T21259] __nla_validate_parse: 14 callbacks suppressed [ 490.958836][T21259] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4285'. [ 491.350087][T21289] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4297'. [ 491.360437][T21289] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4297'. [ 491.372003][T21289] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4297'. [ 491.382113][T21289] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4297'. [ 491.393054][T21290] netlink: 212368 bytes leftover after parsing attributes in process `syz.6.4298'. [ 491.501644][T21294] C: renamed from team_slave_0 [ 491.514903][T21294] validate_nla: 1 callbacks suppressed [ 491.514925][T21294] netlink: 'syz.6.4299': attribute type 1 has an invalid length. [ 491.520641][T21297] netlink: 'syz.7.4301': attribute type 2 has an invalid length. [ 491.536901][T21299] netlink: 'syz.7.4301': attribute type 2 has an invalid length. [ 491.570255][T21297] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4301'. [ 491.609089][T21299] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4301'. [ 491.627008][T21301] netlink: 20 bytes leftover after parsing attributes in process `syz.7.4301'. [ 491.637286][T21301] netlink: 20 bytes leftover after parsing attributes in process `syz.7.4301'. [ 491.903713][T21215] bond4 (unregistering): (slave ip6gretap1): Releasing backup interface [ 491.913798][T21215] ip6gretap1 (unregistering): left allmulticast mode [ 492.105609][T21215] bond1 (unregistering): (slave gretap1): Releasing active interface [ 492.232637][T21215] dvmrp6 (unregistering): left allmulticast mode [ 492.732698][T21215] bond9 (unregistering): (slave bridge0): Releasing active interface [ 492.891361][T21215]  (unregistering): Released all slaves [ 493.046064][T21215] bond1 (unregistering): Released all slaves [ 493.063417][T21215] bond2 (unregistering): (slave bond3): Releasing backup interface [ 493.072684][T21215] bond2 (unregistering): Released all slaves [ 493.230490][T21215] bond3 (unregistering): Released all slaves [ 493.243789][T21215] bond4 (unregistering): Released all slaves [ 493.257377][T21215] bond5 (unregistering): Released all slaves [ 493.404013][T21215] bond6 (unregistering): Released all slaves [ 493.420569][T21215] bond7 (unregistering): Released all slaves [ 493.580144][T21215] bond8 (unregistering): Released all slaves [ 493.593526][T21215] bond9 (unregistering): Released all slaves [ 493.730153][T21215] 9: left promiscuous mode [ 493.812853][T21215] tipc: Left network mode [ 494.201546][T21334] team1 (uninitialized): Failed to send options change via netlink (err -105) [ 494.299073][T21334] team1: entered promiscuous mode [ 494.308962][T21334] team1: entered allmulticast mode [ 494.614596][T12315] net_ratelimit: 9 callbacks suppressed [ 494.614619][T12315] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 494.735758][T21375] 8021q: VLANs not supported on vxcan1 [ 494.890738][T12308] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 495.061386][T21206] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 495.073964][T21399] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000 [ 495.082761][T21379] mac80211_hwsim hwsim33 syzkaller0: left promiscuous mode [ 495.097298][T21402] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000 [ 495.117551][T21379] tipc: Resetting bearer [ 495.268168][T12315] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 495.676611][T21415] syz.6.4329: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 495.694260][T21415] CPU: 0 UID: 0 PID: 21415 Comm: syz.6.4329 Not tainted syzkaller #0 PREEMPT(full) [ 495.694291][T21415] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 495.694303][T21415] Call Trace: [ 495.694312][T21415] [ 495.694320][T21415] dump_stack_lvl+0xe8/0x150 [ 495.694352][T21415] warn_alloc+0x214/0x310 [ 495.694375][T21415] ? stack_trace_save+0x9c/0xe0 [ 495.694408][T21415] ? __pfx_warn_alloc+0x10/0x10 [ 495.694437][T21415] ? kasan_save_track+0x4f/0x80 [ 495.694454][T21415] ? kasan_save_track+0x3e/0x80 [ 495.694471][T21415] ? __kasan_kmalloc+0x93/0xb0 [ 495.694490][T21415] ? __kmalloc_cache_noprof+0x3e2/0x700 [ 495.694508][T21415] ? xskq_create+0x56/0x170 [ 495.694525][T21415] ? xsk_setsockopt+0x4dc/0x8d0 [ 495.694550][T21415] ? do_sock_setsockopt+0x17c/0x1b0 [ 495.694572][T21415] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 495.694594][T21415] ? do_syscall_64+0xec/0xf80 [ 495.694619][T21415] __vmalloc_node_range_noprof+0x134/0x16a0 [ 495.694675][T21415] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 495.694702][T21415] ? __kasan_kmalloc+0x93/0xb0 [ 495.694730][T21415] vmalloc_user_noprof+0xad/0xf0 [ 495.694750][T21415] ? xskq_create+0xbf/0x170 [ 495.694768][T21415] xskq_create+0xbf/0x170 [ 495.694789][T21415] xsk_init_queue+0xb0/0x110 [ 495.694822][T21415] xsk_setsockopt+0x4dc/0x8d0 [ 495.694853][T21415] ? __pfx_xsk_setsockopt+0x10/0x10 [ 495.694881][T21415] ? __pfx_aa_sk_perm+0x10/0x10 [ 495.694919][T21415] ? aa_sock_opt_perm+0xff/0x1a0 [ 495.694946][T21415] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 495.694964][T21415] ? __pfx_xsk_setsockopt+0x10/0x10 [ 495.694992][T21415] do_sock_setsockopt+0x17c/0x1b0 [ 495.695019][T21415] __x64_sys_setsockopt+0x13f/0x1b0 [ 495.695045][T21415] do_syscall_64+0xec/0xf80 [ 495.695064][T21415] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 495.695081][T21415] ? trace_irq_disable+0x37/0x100 [ 495.695105][T21415] ? clear_bhb_loop+0x60/0xb0 [ 495.695126][T21415] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 495.695143][T21415] RIP: 0033:0x7fcd23b8f749 [ 495.695161][T21415] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 495.695187][T21415] RSP: 002b:00007fcd24a16038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 495.695208][T21415] RAX: ffffffffffffffda RBX: 00007fcd23de6180 RCX: 00007fcd23b8f749 [ 495.695221][T21415] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000006 [ 495.695232][T21415] RBP: 00007fcd23c13f91 R08: 0000000000000004 R09: 0000000000000000 [ 495.695243][T21415] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 495.695255][T21415] R13: 00007fcd23de6218 R14: 00007fcd23de6180 R15: 00007ffcc6a8d5e8 [ 495.695287][T21415] [ 495.695373][T21415] Mem-Info: [ 495.981316][T21415] active_anon:4629 inactive_anon:0 isolated_anon:0 [ 495.981316][T21415] active_file:3020 inactive_file:40036 isolated_file:0 [ 495.981316][T21415] unevictable:768 dirty:44 writeback:0 [ 495.981316][T21415] slab_reclaimable:12606 slab_unreclaimable:117039 [ 495.981316][T21415] mapped:31186 shmem:1357 pagetables:1119 [ 495.981316][T21415] sec_pagetables:0 bounce:0 [ 495.981316][T21415] kernel_misc_reclaimable:0 [ 495.981316][T21415] free:1306550 free_pcp:14363 free_cma:0 [ 496.033606][T21415] Node 0 active_anon:18516kB inactive_anon:0kB active_file:12080kB inactive_file:159940kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:124744kB dirty:176kB writeback:0kB shmem:3892kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14032kB pagetables:4340kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 496.066743][T21415] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:136kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 496.108124][T21415] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 496.187620][T21415] lowmem_reserve[]: 0 2499 2501 2501 2501 [ 496.195515][T21415] Node 0 DMA32 free:1321564kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:18948kB inactive_anon:0kB active_file:12080kB inactive_file:159940kB unevictable:1536kB writepending:176kB zspages:0kB present:3129332kB managed:2559484kB mlocked:0kB bounce:0kB free_pcp:37812kB local_pcp:19864kB free_cma:0kB [ 496.237363][T21414] syzkaller1: entered promiscuous mode [ 496.247826][T21414] syzkaller1: entered allmulticast mode [ 496.268004][T21386] lo speed is unknown, defaulting to 1000 [ 496.323155][T21415] lowmem_reserve[]: 0 0 1 1 1 [ 496.361356][T21415] Node 0 Normal free:0kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 496.459303][T21415] lowmem_reserve[]: 0 0 0 0 0 [ 496.465742][T21415] Node 1 Normal free:3889212kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:18864kB local_pcp:7568kB free_cma:0kB [ 496.504050][T21415] lowmem_reserve[]: 0 0 0 0 0 [ 496.509028][T21415] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 496.522019][T21415] Node 0 DMA32: 5011*4kB (UME) 4808*8kB (UM) 1563*16kB (UM) 285*32kB (UME) 63*64kB (UE) 88*128kB (UME) 74*256kB (UME) 74*512kB (UME) 70*1024kB (UM) 48*2048kB (UM) 241*4096kB (UM) = 1321884kB [ 496.541759][T21415] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 496.553565][T21415] Node 1 Normal: 197*4kB (UE) 61*8kB (UME) 48*16kB (UME) 88*32kB (UME) 25*64kB (UME) 6*128kB (UME) 4*256kB (UME) 4*512kB (UM) 2*1024kB (ME) 1*2048kB (E) 946*4096kB (M) = 3889212kB [ 496.578565][ T12] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 496.647584][T21415] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 496.675001][T21444] openvswitch: netlink: IP tunnel dst address not specified [ 496.705384][T21415] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 496.774810][T21415] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 496.811587][T21415] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 496.847892][T21415] 44409 total pagecache pages [ 496.852651][T21415] 0 pages in swap cache [ 496.882871][T21415] Free swap = 124996kB [ 496.887137][T21415] Total swap = 124996kB [ 496.903752][T21415] 2097051 pages RAM [ 496.910796][T21415] 0 pages HighMem/MovableOnly [ 496.915651][T21415] 425090 pages reserved [ 496.930376][T21415] 0 pages cma reserved [ 496.987142][T21446] bridge0: port 3(team0) entered disabled state [ 496.993742][T21446] bridge0: port 2(bridge_slave_1) entered disabled state [ 497.001662][T21446] bridge0: port 1(bridge_slave_0) entered disabled state [ 497.385567][T21469] __nla_validate_parse: 7 callbacks suppressed [ 497.385588][T21469] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4339'. [ 497.579214][T21479] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4340'. [ 497.628559][T21206] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 497.758561][T21210] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 497.785940][T21486] netlink: 76 bytes leftover after parsing attributes in process `syz.3.4345'. [ 498.067794][T21206] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 498.125962][T21499] workqueue: Failed to create a rescuer kthread for wq "nfc4_nci_cmd_wq": -EINTR [ 498.280546][ T12] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 498.380696][T21520] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4350'. [ 498.427663][T21215] hsr_slave_0: left promiscuous mode [ 498.471731][T21215] hsr_slave_1: left promiscuous mode [ 498.573957][T21215] veth1_vlan: left promiscuous mode [ 498.601115][T21530] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4354'. [ 498.989413][T21215] vlan1 (unregistering): left allmulticast mode [ 498.995933][T21215] veth0_vlan (unregistering): left allmulticast mode [ 499.158955][T21541] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4357'. [ 499.390293][T21547] netlink: 'syz.6.4359': attribute type 1 has an invalid length. [ 499.467052][T21210] smc: removing ib device !yz! [ 499.692215][T21552] netlink: 'syz.3.4360': attribute type 9 has an invalid length. [ 499.952979][ T1102] smc: removing ib device syz2 [ 499.962399][ T5828] lo speed is unknown, defaulting to 1000 [ 499.976832][ T5828] syz2: Port: 1 Link DOWN [ 500.239323][T21548] bond8: (slave bridge5): making interface the new active one [ 500.249551][T21548] bond8: (slave bridge5): Enslaving as an active interface with an up link [ 500.538460][T21206] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 500.571227][T21560] netlink: 'syz.3.4362': attribute type 14 has an invalid length. [ 500.593718][T21560] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4362'. [ 500.748240][T12317] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 500.758993][T21560] netlink: 'syz.3.4362': attribute type 14 has an invalid length. [ 500.816232][T21560] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4362'. [ 500.863508][T12305] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 501.089850][T21579] netlink: 'syz.7.4366': attribute type 3 has an invalid length. [ 501.126784][T21580] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4363'. [ 501.166424][T21573] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4366'. [ 501.233641][T21583] 8021q: VLANs not supported on ip6_vti0 [ 501.313249][T12317] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 501.523157][T21596] sctp: [Deprecated]: syz.7.4369 (pid 21596) Use of int in maxseg socket option. [ 501.523157][T21596] Use struct sctp_assoc_value instead [ 501.738904][ T12] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 501.850411][T12317] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 502.018328][T21213] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 502.078076][T21608] netlink: 'syz.6.4373': attribute type 10 has an invalid length. [ 502.118744][T21608] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 502.215182][T21608] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 502.503196][T21639] netlink: 'syz.5.4380': attribute type 21 has an invalid length. [ 502.534234][T21639] __nla_validate_parse: 4 callbacks suppressed [ 502.534256][T21639] netlink: 128 bytes leftover after parsing attributes in process `syz.5.4380'. [ 502.605720][T21639] netlink: 'syz.5.4380': attribute type 4 has an invalid length. [ 502.627316][T21639] netlink: 'syz.5.4380': attribute type 5 has an invalid length. [ 502.656317][T21639] netlink: 3 bytes leftover after parsing attributes in process `syz.5.4380'. [ 502.804283][T21646] openvswitch: netlink: Key type 48 is out of range max 32 [ 502.838128][T21213] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 503.000653][T21659] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4385'. [ 503.064508][T21660] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4387'. [ 503.303360][T21659] hsr_slave_1 (unregistering): left promiscuous mode [ 503.466252][T21660] geneve3: entered promiscuous mode [ 503.563244][T21672] Cannot find set identified by id 3 to match [ 503.654694][T21215] IPVS: stop unused estimator thread 0... [ 503.838098][T21210] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 503.850136][T21678] ipt_REJECT: TCP_RESET invalid for non-tcp [ 504.004262][ C1] ------------[ cut here ]------------ [ 504.009967][ C1] no supported rates for sta (null) (0xffffffff, band 1) in rate_mask 0x0 with flags 0x0 [ 504.020307][ C1] WARNING: net/mac80211/rate.c:406 at __rate_control_send_low+0x524/0x800, CPU#1: syz-executor/16774 [ 504.031427][ C1] Modules linked in: [ 504.035339][ C1] CPU: 1 UID: 0 PID: 16774 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 504.045041][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 504.055731][ C1] RIP: 0010:__rate_control_send_low+0x5bb/0x800 [ 504.062457][ C1] Code: ff 4c 8b 7c 24 08 48 8b 44 24 38 0f b6 04 28 84 c0 0f 85 d3 01 00 00 41 8b 0f 4c 89 f7 48 8b 74 24 18 44 8b 44 24 2c 45 89 e9 <67> 48 0f b9 3a 4c 8b 74 24 30 e9 81 fe ff ff 44 89 f9 80 e1 07 80 [ 504.082679][ C1] RSP: 0018:ffffc90000a08638 EFLAGS: 00010246 [ 504.089121][ C1] RAX: 0000000000000000 RBX: 0000000000000008 RCX: 0000000000000001 [ 504.097250][ C1] RDX: 00000000ffffffff RSI: 0000000000000000 RDI: ffffffff8f92ee20 [ 504.099199][T21695] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4394'. [ 504.105529][ C1] RBP: dffffc0000000000 R08: 0000000000000000 R09: 0000000000000000 [ 504.123660][ C1] R10: 0000000000000004 R11: 0000000000000100 R12: ffff888053bd9668 [ 504.131892][ C1] R13: 0000000000000000 R14: ffffffff8f92ee20 R15: ffff88802de8b1a0 [ 504.132070][T21695] macsec1: entered promiscuous mode [ 504.140386][ C1] FS: 000055558173e500(0000) GS:ffff888125f1e000(0000) knlGS:0000000000000000 [ 504.140416][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 504.140432][ C1] CR2: 00007f92d0d156c0 CR3: 0000000079450000 CR4: 00000000003526f0 [ 504.140452][ C1] Call Trace: [ 504.140462][ C1] [ 504.140490][ C1] rate_control_send_low+0x1a7/0x7b0 [ 504.140529][ C1] rate_control_get_rate+0x20b/0x5d0 [ 504.140561][ C1] ieee80211_beacon_get_finish+0x39a/0x6c0 [ 504.140597][ C1] ? __pfx_ieee80211_beacon_get_finish+0x10/0x10 [ 504.140623][ C1] ? __ieee80211_beacon_add_tim+0x1180/0x15a0 [ 504.140670][ C1] ieee80211_beacon_get_ap+0x1865/0x1f30 [ 504.140716][ C1] ? __pfx_ieee80211_beacon_get_ap+0x10/0x10 [ 504.140757][ C1] ? __ieee80211_beacon_get+0x36/0x1880 [ 504.140788][ C1] ? lock_acquire+0x107/0x340 [ 504.140810][ C1] ? __ieee80211_beacon_get+0x36/0x1880 [ 504.140844][ C1] ? __ieee80211_beacon_get+0x36/0x1880 [ 504.140870][ C1] __ieee80211_beacon_get+0x118e/0x1880 [ 504.140900][ C1] ? __ieee80211_beacon_get+0x36/0x1880 [ 504.140936][ C1] ieee80211_beacon_get_tim+0xb4/0x2b0 [ 504.148671][T21695] macsec1: entered allmulticast mode [ 504.155944][ C1] ? __pfx_ieee80211_beacon_get_tim+0x10/0x10 [ 504.166721][T21695] bridge0: port 1(macsec1) entered blocking state [ 504.171070][ C1] mac80211_hwsim_beacon_tx+0x3c5/0x870 [ 504.171145][ C1] __iterate_interfaces+0x2ab/0x590 [ 504.171170][ C1] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 504.171200][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 504.171225][ C1] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 504.171253][ C1] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 504.171281][ C1] mac80211_hwsim_beacon+0xbb/0x180 [ 504.171307][ C1] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 504.171330][ C1] __hrtimer_run_queues+0x51c/0xc30 [ 504.171377][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 504.171400][ C1] ? read_tsc+0x9/0x20 [ 504.171437][ C1] hrtimer_run_softirq+0x187/0x2b0 [ 504.171469][ C1] handle_softirqs+0x22b/0x7c0 [ 504.171494][ C1] ? __irq_exit_rcu+0x60/0x150 [ 504.171527][ C1] __irq_exit_rcu+0x60/0x150 [ 504.171549][ C1] irq_exit_rcu+0x9/0x30 [ 504.175531][T21695] bridge0: port 1(macsec1) entered disabled state [ 504.177787][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 504.177818][ C1] [ 504.177827][ C1] [ 504.177838][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 504.177860][ C1] RIP: 0010:__sanitizer_cov_trace_cmp8+0x7f/0x90 [ 504.177888][ C1] Code: c1 e1 05 4c 8d 51 28 4d 39 ca 77 1e 49 ff c0 4c 89 02 48 c7 44 0a 08 06 00 00 00 48 89 7c 0a 10 48 89 74 0a 18 48 89 44 0a 20 8c d4 9b 09 cc 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 [ 504.177904][ C1] RSP: 0018:ffffc90003547610 EFLAGS: 00000293 [ 504.177928][ C1] RAX: ffffffff8b519cc6 RBX: 0000200001000fff RCX: ffff88802a9e5b80 [ 504.177944][ C1] RDX: 0000000000000000 RSI: 0000200001000fff RDI: 0000200001000fff [ 504.177957][ C1] RBP: ffffc90003547760 R08: ffff88802a9e5b80 R09: 0000000000000004 [ 504.177971][ C1] R10: 0000000000000003 R11: 0000000000000000 R12: ffffc90003547950 [ 504.177984][ C1] R13: ffff888077234208 R14: 0000000000000001 R15: 0000200001000fff [ 504.178009][ C1] ? mas_wr_store_type+0xaa6/0x19d0 [ 504.178038][ C1] mas_wr_store_type+0xaa6/0x19d0 [ 504.178095][ C1] mas_store+0x486/0x930 [ 504.178119][ C1] ? __pfx_mas_store+0x10/0x10 [ 504.178145][ C1] ? anon_vma_name+0x7e/0x280 [ 504.488788][ C1] ? anon_vma_fork+0x99/0x500 [ 504.493621][ C1] dup_mmap+0xbc7/0x1b80 [ 504.497951][ C1] ? __pfx_dup_mmap+0x10/0x10 [ 504.502767][ C1] ? copy_mm+0x131/0x4b0 [ 504.507100][ C1] copy_mm+0x13c/0x4b0 [ 504.511268][ C1] copy_process+0x165d/0x3950 [ 504.516571][ C1] ? copy_process+0x915/0x3950 [ 504.521394][ C1] ? __pfx_copy_process+0x10/0x10 [ 504.526617][ C1] ? count_memcg_event_mm+0x21/0x260 [ 504.531956][ C1] kernel_clone+0x21e/0x820 [ 504.536480][ C1] ? __pfx_kernel_clone+0x10/0x10 [ 504.541711][ C1] __x64_sys_clone+0x18b/0x1e0 [ 504.546565][ C1] ? __pfx___x64_sys_clone+0x10/0x10 [ 504.551943][ C1] ? do_user_addr_fault+0xc85/0x1380 [ 504.557335][ C1] do_syscall_64+0xec/0xf80 [ 504.561924][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 504.568095][ C1] ? trace_irq_disable+0x37/0x100 [ 504.573187][ C1] ? clear_bhb_loop+0x60/0xb0 [ 504.577962][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 504.583991][ C1] RIP: 0033:0x7f92cff85e93 [ 504.588512][ C1] Code: 1f 84 00 00 00 00 00 64 48 8b 04 25 10 00 00 00 45 31 c0 31 d2 31 f6 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 35 89 c2 85 c0 75 2c 64 48 8b 04 25 10 00 00 [ 504.608973][ C1] RSP: 002b:00007ffefb9c03d8 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 504.617878][ C1] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f92cff85e93 [ 504.625905][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 504.634177][ C1] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000001 [ 504.642269][ C1] R10: 000055558173e7d0 R11: 0000000000000246 R12: 0000000000000000 [ 504.650524][ C1] R13: 00000000000927c0 R14: 000000000007b066 R15: 00007ffefb9c0570 [ 504.658700][ C1] [ 504.661759][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 504.669512][ C1] CPU: 1 UID: 0 PID: 16774 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 504.679370][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 504.689904][ C1] Call Trace: [ 504.693228][ C1] [ 504.696199][ C1] vpanic+0x1e0/0x670 [ 504.700235][ C1] panic+0xb9/0xc0 [ 504.704099][ C1] ? __pfx_panic+0x10/0x10 [ 504.708582][ C1] __warn+0x317/0x4b0 [ 504.712709][ C1] ? __rate_control_send_low+0x524/0x800 [ 504.718594][ C1] ? __rate_control_send_low+0x524/0x800 [ 504.724353][ C1] __report_bug+0x288/0x500 [ 504.728888][ C1] ? __rate_control_send_low+0x524/0x800 [ 504.734733][ C1] ? __pfx___report_bug+0x10/0x10 [ 504.739822][ C1] report_bug_entry+0x19a/0x290 [ 504.744860][ C1] ? __rate_control_send_low+0x5bb/0x800 [ 504.750629][ C1] ? __rate_control_send_low+0x5c0/0x800 [ 504.756293][ C1] handle_bug+0xca/0x200 [ 504.760672][ C1] exc_invalid_op+0x1a/0x50 [ 504.765377][ C1] asm_exc_invalid_op+0x1a/0x20 [ 504.770403][ C1] RIP: 0010:__rate_control_send_low+0x5bb/0x800 [ 504.776687][ C1] Code: ff 4c 8b 7c 24 08 48 8b 44 24 38 0f b6 04 28 84 c0 0f 85 d3 01 00 00 41 8b 0f 4c 89 f7 48 8b 74 24 18 44 8b 44 24 2c 45 89 e9 <67> 48 0f b9 3a 4c 8b 74 24 30 e9 81 fe ff ff 44 89 f9 80 e1 07 80 [ 504.796597][ C1] RSP: 0018:ffffc90000a08638 EFLAGS: 00010246 [ 504.802693][ C1] RAX: 0000000000000000 RBX: 0000000000000008 RCX: 0000000000000001 [ 504.810945][ C1] RDX: 00000000ffffffff RSI: 0000000000000000 RDI: ffffffff8f92ee20 [ 504.819220][ C1] RBP: dffffc0000000000 R08: 0000000000000000 R09: 0000000000000000 [ 504.827304][ C1] R10: 0000000000000004 R11: 0000000000000100 R12: ffff888053bd9668 [ 504.835290][ C1] R13: 0000000000000000 R14: ffffffff8f92ee20 R15: ffff88802de8b1a0 [ 504.843379][ C1] ? __rate_control_send_low+0x58d/0x800 [ 504.849046][ C1] rate_control_send_low+0x1a7/0x7b0 [ 504.854580][ C1] rate_control_get_rate+0x20b/0x5d0 [ 504.859980][ C1] ieee80211_beacon_get_finish+0x39a/0x6c0 [ 504.866069][ C1] ? __pfx_ieee80211_beacon_get_finish+0x10/0x10 [ 504.872411][ C1] ? __ieee80211_beacon_add_tim+0x1180/0x15a0 [ 504.878604][ C1] ieee80211_beacon_get_ap+0x1865/0x1f30 [ 504.884387][ C1] ? __pfx_ieee80211_beacon_get_ap+0x10/0x10 [ 504.890626][ C1] ? __ieee80211_beacon_get+0x36/0x1880 [ 504.896206][ C1] ? lock_acquire+0x107/0x340 [ 504.900908][ C1] ? __ieee80211_beacon_get+0x36/0x1880 [ 504.906501][ C1] ? __ieee80211_beacon_get+0x36/0x1880 [ 504.912510][ C1] __ieee80211_beacon_get+0x118e/0x1880 [ 504.918094][ C1] ? __ieee80211_beacon_get+0x36/0x1880 [ 504.924127][ C1] ieee80211_beacon_get_tim+0xb4/0x2b0 [ 504.929856][ C1] ? __pfx_ieee80211_beacon_get_tim+0x10/0x10 [ 504.935999][ C1] mac80211_hwsim_beacon_tx+0x3c5/0x870 [ 504.941941][ C1] __iterate_interfaces+0x2ab/0x590 [ 504.947243][ C1] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 504.953322][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 504.960744][ C1] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 504.967038][ C1] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 504.974298][ C1] mac80211_hwsim_beacon+0xbb/0x180 [ 504.979534][ C1] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 504.985873][ C1] __hrtimer_run_queues+0x51c/0xc30 [ 504.991187][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 504.996914][ C1] ? read_tsc+0x9/0x20 [ 505.001089][ C1] hrtimer_run_softirq+0x187/0x2b0 [ 505.006211][ C1] handle_softirqs+0x22b/0x7c0 [ 505.010988][ C1] ? __irq_exit_rcu+0x60/0x150 [ 505.015771][ C1] __irq_exit_rcu+0x60/0x150 [ 505.020378][ C1] irq_exit_rcu+0x9/0x30 [ 505.024728][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 505.030444][ C1] [ 505.033491][ C1] [ 505.036436][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 505.042435][ C1] RIP: 0010:__sanitizer_cov_trace_cmp8+0x7f/0x90 [ 505.048876][ C1] Code: c1 e1 05 4c 8d 51 28 4d 39 ca 77 1e 49 ff c0 4c 89 02 48 c7 44 0a 08 06 00 00 00 48 89 7c 0a 10 48 89 74 0a 18 48 89 44 0a 20 8c d4 9b 09 cc 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 [ 505.068684][ C1] RSP: 0018:ffffc90003547610 EFLAGS: 00000293 [ 505.074767][ C1] RAX: ffffffff8b519cc6 RBX: 0000200001000fff RCX: ffff88802a9e5b80 [ 505.082765][ C1] RDX: 0000000000000000 RSI: 0000200001000fff RDI: 0000200001000fff [ 505.091184][ C1] RBP: ffffc90003547760 R08: ffff88802a9e5b80 R09: 0000000000000004 [ 505.099164][ C1] R10: 0000000000000003 R11: 0000000000000000 R12: ffffc90003547950 [ 505.107341][ C1] R13: ffff888077234208 R14: 0000000000000001 R15: 0000200001000fff [ 505.115633][ C1] ? mas_wr_store_type+0xaa6/0x19d0 [ 505.120979][ C1] mas_wr_store_type+0xaa6/0x19d0 [ 505.126073][ C1] mas_store+0x486/0x930 [ 505.130354][ C1] ? __pfx_mas_store+0x10/0x10 [ 505.135170][ C1] ? anon_vma_name+0x7e/0x280 [ 505.139889][ C1] ? anon_vma_fork+0x99/0x500 [ 505.144624][ C1] dup_mmap+0xbc7/0x1b80 [ 505.149016][ C1] ? __pfx_dup_mmap+0x10/0x10 [ 505.153807][ C1] ? copy_mm+0x131/0x4b0 [ 505.158271][ C1] copy_mm+0x13c/0x4b0 [ 505.162387][ C1] copy_process+0x165d/0x3950 [ 505.167122][ C1] ? copy_process+0x915/0x3950 [ 505.172017][ C1] ? __pfx_copy_process+0x10/0x10 [ 505.177151][ C1] ? count_memcg_event_mm+0x21/0x260 [ 505.182455][ C1] kernel_clone+0x21e/0x820 [ 505.186978][ C1] ? __pfx_kernel_clone+0x10/0x10 [ 505.192032][ C1] __x64_sys_clone+0x18b/0x1e0 [ 505.196813][ C1] ? __pfx___x64_sys_clone+0x10/0x10 [ 505.202135][ C1] ? do_user_addr_fault+0xc85/0x1380 [ 505.207434][ C1] do_syscall_64+0xec/0xf80 [ 505.211945][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 505.218019][ C1] ? trace_irq_disable+0x37/0x100 [ 505.223170][ C1] ? clear_bhb_loop+0x60/0xb0 [ 505.227885][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 505.233794][ C1] RIP: 0033:0x7f92cff85e93 [ 505.238225][ C1] Code: 1f 84 00 00 00 00 00 64 48 8b 04 25 10 00 00 00 45 31 c0 31 d2 31 f6 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 35 89 c2 85 c0 75 2c 64 48 8b 04 25 10 00 00 [ 505.258044][ C1] RSP: 002b:00007ffefb9c03d8 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 505.266484][ C1] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f92cff85e93 [ 505.274635][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 505.282616][ C1] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000001 [ 505.290626][ C1] R10: 000055558173e7d0 R11: 0000000000000246 R12: 0000000000000000 [ 505.298630][ C1] R13: 00000000000927c0 R14: 000000000007b066 R15: 00007ffefb9c0570 [ 505.306660][ C1] [ 505.310108][ C1] Kernel Offset: disabled [ 505.314515][ C1] Rebooting in 86400 seconds..