last executing test programs: 35.924940513s ago: executing program 2 (id=8787): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='percpu_alloc_percpu\x00', r1}, 0x10) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r2, 0x8954, &(0x7f0000000380)={{0x2, 0x0, @multicast1}, {0x0, @link_local}, 0x44, {0x2, 0x4e24, @broadcast}}) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f0000000240)={0x0, @in6={{0xa, 0x4e23, 0x7, @mcast2, 0x81}}}, &(0x7f00000001c0)=0x84) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x33}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) 35.792696027s ago: executing program 2 (id=8791): syz_emit_ethernet(0x3e, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000286dd6018232500088800fe8000000000000000000000000000bbfe8000000000000000000000000000aa0000010100000008"], 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x2}, 0x94) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) nanosleep(&(0x7f0000000380)={r2, r3+60000000}, &(0x7f0000000400)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000003c0)='sys_enter\x00', r1}, 0x18) nanosleep(&(0x7f0000000bc0)={0x0, 0x3938700}, 0x0) r4 = socket$isdn(0x22, 0x3, 0x24) getsockopt$IP_SET_OP_GET_FNAME(r4, 0x1, 0x53, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x34, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x4}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x2c, 0x5, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2000}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0xa8}}, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x5000009, 0x10012, r5, 0x0) r7 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r7, &(0x7f0000000100)={0xa, 0x4e20, 0xfffffffe, @empty}, 0x1c) setsockopt$inet6_udp_int(r7, 0x11, 0x66, &(0x7f0000000080)=0xa40, 0x4) r8 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r9 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) setsockopt$inet6_udp_encap(r7, 0x11, 0x64, &(0x7f0000000000)=0x2, 0x4) write$tun(r8, &(0x7f0000000280)=ANY=[@ANYBLOB="0a000000bbbbbbbbbbbbaaaaaaaaaabb86dd6d002000031011ff00000000000100070000000000000000ff0200000000000000000000000000014f194e20"], 0xfdef) r10 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r10, 0x89f2, &(0x7f0000000080)={'sit0\x00', &(0x7f00000001c0)={'ip_vti0\x00', 0x0, 0x8000, 0x8, 0x8, 0x1, {{0x10, 0x4, 0x1, 0x23, 0x40, 0x67, 0x0, 0x6, 0x2f, 0x0, @local, @multicast1, {[@timestamp_prespec={0x44, 0x14, 0xe0, 0x3, 0x6, [{@dev={0xac, 0x14, 0x14, 0x12}, 0x7}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x80000000}]}, @lsrr={0x83, 0x3, 0x8b}, @ra={0x94, 0x4}, @rr={0x7, 0xf, 0x5d, [@remote, @local, @initdev={0xac, 0x1e, 0x0, 0x0}]}]}}}}}) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_DEL_KEY(r12, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x11900088}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x30, r13, 0x300, 0x70bd2b, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x1}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x1}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}]}, 0x30}}, 0x24000000) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000140)={'syztnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', r11, 0x29, 0x2, 0x9, 0x3, 0x24, @loopback, @dev={0xfe, 0x80, '\x00', 0x3a}, 0x7, 0x80, 0x7fffffff, 0x1}}) 35.303352103s ago: executing program 0 (id=8804): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa0}, 0x1, 0x0, 0x0, 0x24000850}, 0x40) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002f40)=ANY=[@ANYBLOB="40000000210a010900000000000000000a0000010900020073797a31000000000900010073797a31"], 0x40}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r0, 0x89f9, &(0x7f0000000100)={'sit0\x00', &(0x7f00000000c0)={@private0, @empty, 0x20, 0x19}}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)={0x1b, 0x0, 0x0, 0xffffffd8, 0x0, r3, 0xcf, '\x00', 0x0, r4, 0x5, 0x3}, 0x50) 35.203210861s ago: executing program 0 (id=8806): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000002000000851000000600000018020000", @ANYRES32, @ANYBLOB="00000000000000006600020000000000180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222}, 0x78) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000540), &(0x7f0000000080), 0x619, r1}, 0x38) r2 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000140)=0x1c, 0x40000) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_PIM(r3, 0x0, 0xcf, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x15, 0x301, 0x0, 0x0, {0xc}}, 0x14}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET(r5, &(0x7f0000000600)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000005c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="840000000107050000000000000000000a0000020c00024000000000000000010c00064000000000000000092c0007800800014000000c13080001400000000008000240000000ff080002400000000608000240000008060c00064000000900000000060c00024000000000000000040c000640000000ecff0000070800054000000000"], 0x84}, 0x1, 0x0, 0x0, 0x8090}, 0x0) syz_emit_ethernet(0x8e, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaa1acd1f78800d86dd608a37f200587300fe80000b0000000000000000000000bbfe8000000000000000000000000000aa00000000", @ANYRES8=r4], 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000180)={@loopback, @broadcast, 0x0}, &(0x7f00000001c0)=0xc) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f00000006c0)={0x1, {{0xa, 0x4e24, 0x264, @loopback, 0x9}}}, 0x88) sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a841800000e0a01010000000000000000030000000900020073797a31000000000900010073797a30000000000900020073797a32000000000900010073797a31000000000900010073797a300000000028180380680700800c0004400000000000000005700202803c0002800800034000000003080003400000000208000180000000000900020073797a31000000000900020073797a320000000008000180fffffffeb4000100dd0531ebb73f2dddee2302b62c754fe32844ed83961255bea147177ced6e2023eaf22ac9f6d7ebd5ddccf947990bb3eed9f9a166243983f9bf6eda0213b927c9a0b335feda8cd584ec47b059c6432c6019c5c1c11f61627e00e507eff25d00ce9836b8f95bf6c6d17296073ea831ba6777db871ed382d40f5108ddb36c3e5c8d462d6f9b429e1455bd6f486c9ba9cf9bb212fa9dcd361d022b8fb82ad1c609ddc7fa8bb607b81737121db2589b8a656d340002800900020073797a3000000000080001800000000008000180ffffffff08000340000000020900020073797a30000000001a000100ddf82203ddcc8906863442e1abaaa326c715489cf08a00001700010022d4c0941c2025742cda6487f1ecc74ab1b44a00550001001e478d892a64b571a7b8e99e2fff041fcc65a07adf8dcaca0fd7f7f20694e8dd343da3897f2fe89490c303590694dc76f3133e6ea32c5771bbea26959e53f70da815cc13871766ef8cb07e29ff66c07720000000b900010076619caa43b061cd8ac96707f9b718d63b95a0730e24d9d888dd1ea4668cc7d6cab557d61f2d93ccbdc726e96ec90f51272023676a7c45869eecca0e45c0a26ec7447c432a67b0c5af65825a64f2ae8cedaf6eb3b3524d5b49a369df8760a21ee497fd693a0a070f5b96fd19f7be95fb1e31c991530e2794f0c0669573f563bf7eaa8919a46aa9edbf0eb1769a61546fc5162f671fa88b5f7299df96e12e61860f300134c85703a3187d62507d6c0d0dbe106daa69000000700102801800028008000180ffffffff0900020073797a3000000000ef000100d3c0f649888e460bfe40c51a5ebe9a48bef8389705b977ccd047dc41922d2418139a039acf3faf4cd5f2ba368ace9365db93a66eecea568975c963e016cba3e582c09435da2bc461b53ce5c6b05f6f47488f4d08c63ffcc1601863d466caea83dc2076d26391a74a9daad5b57a69186a4c8480303d07a5004e490e2ac8916125454bdc6120aa20a52b54cdfafaec341e69d62a8fd96b2ecb777931903e568a23f38aaf6779a251f9ab53d666060196c70065446608c56126de68c102ae8e9144b466e09ef65ff47825e989b814ac0a507c9c04ba1cc709a21580a2f6d2a90ca520b273de375217a5f35af3002c00028008000180fffffffb080003400000000308000180fffffffd080003400000000208000180ffffffff3600010093dc53c233a38c43e16f9a7819e41e205df6da5f1d1eecfb764c4f7ac2a6730bb6bc2af0a9f0abe0db7add74c6281eb75f02000040010a802800028008000340000000030900020073797a310000000008000180fffffffd08000340000000014c0001005de03ef2fdcf88fb3d2eaa7487ad250be5d03582d59278fa036761484d6fdd05f966080be1f913b84334376977e3191ce6b82d22ba2f6be28aeca7b12c352429637175d20d87dece3800028008000340000000020900020073797a30000000000800034000000003080003400000000108000180fffffffe08000180fffffffb72000100e6bd0e776c604c52acd13243619f5712f72fbc0dffc83cb1948ea5311c0224aff62cd12f41b04a544f1a049426a301e0f3b22f7bc3b26ac0aa269554450f307945a0d9953ac271ccae3ad3bd4fb765c25d43ca591bd3498dae2b83399b9b5c080457dc114ebd51f09a6fae0c8e0a00001c000280080003400000000408000180fffffffd08000180fffffffe64010a80540002800900020073797a30000000000900020073797a31000000000900020073797a31000000000900020073797a31000000000900020073797a300000000008000180ffffffff0900020073797a31000000001b00010059643fee3b844cf1cba084d6247921c54e2dbfc8bd4531009f0001009fda3495bec2361d3f8d946995501f8bb070bc1dfd63102311d9172cefe652fcc409b0a38e1e74dc4b1593cf46c78b196a9ccf48d6ed5f29a8fa2778d2b3e0a8d5e2d1470284696f1ac9a25020f0b9cc9e71fd49501f579e009950a1bda2c11465fe9cbdfafe32a54477ee5bb9ca1d753fdcde491112a2c8cffd9d3de00b879c67a36b8845e245cd2f385cc78b7f9d929fc18b1288922bae677097000c00028008000340000000014300010004fd01e9848cdd8dc8f5116980a79a013573c86cfac266fd777423782364de444a263659c03baf8b0e9798b754a7eb00469981e6c2968cd5ba4269e7bea12f00d40006400cfa16d686550ca64eb33e4931262a0593a1c0f2ad9327a680d3474d01f76e87b770ae857c094cae6b9f27ff874fb8d53d0f3b565357c8ced1918e711f821aa1c2e81dab7e0b8d75e39ffe372803c5941c7cc35917c896e9dff12c047d72fc582f888c69a9096288552af952aece0ad6c4c633462bd58610a1ab1c3b7654cf132b34fdd2262b69c8ebae108d72b1fadac72c5a4bdfd4c34dfc3210b961e46a7c26642ef6cc30e7e6eedb90a6af362c8f5a22c6eb90a23d78dd22b39f644488f5cda443245ed9e50bb338d5a7d44442501c0000800c00044000000000000000010c00054000000000000000090c0000800800034000000003941000809010018004100100958971b393bf0a758a4eaefa75725e72e5b38e82442d68d6d3f08ed92a7d1dcddae51eaa4ec31f19e15fd5b3538a47482963e62bf5ce605a0767928d89a182a284ae3b32cdbd00e549f6760830f078b267711d74afef3b9bb289ed981edd8835bad24573285c63d2dfe4edf1b6199827998fc044393baf539fe5a7fa7bc45d3f9606973485fdec9c5af4023ffe0e2b88a9a61f43359523d1fe331e76851eb099cf59e3372baffd4d37c5e0fcdf68aca4073b149a1cb1d10989ffe3285d0e41d418c1e9fc49e8499c143fee6318e64a37e287fa6ce42eeb638efb6243577f2703c1f0c1f71d7791fdac99df8e135970c99596ee62144622aef0d77ee6e0a5225ccfb05746125b3bb8d257b64251359d94010851dead562607ecfe71271dd951a3bd0beae8427fddf4e56b88452ed1691e137366046de54ff5d423c8bc71f5b97830f9ce8680963df90a1361a9640ff68e48d362797bffe42bebdc9736fbde849f59e84465c2b1e6a92269fa9b1e9ae6d5e425716c72afac1ba71df32947097160f66b204fb658bdcaf462cec5a6f9cfebb479a5966cae01b1307671c69816d6c27189974b48b2071f292ebcabdf2f2712212584dd89da7e0824fc8c14430a3e33b5a9e631d59306a11db434e0fa8339aa9c0470fa8abc994477db6c48aff8ba0d85dfb90a26461255dfb460913924b00feaafcc519dcdaebe8c07bba579a3fbae4172b8a102788baba4bd7cc10a3e7e076782e92cede69f7e09f9909105edb18123e5a89d8443b4e90d68ca70b18efb81d9a2a0cf4f91c4063c03b2f1e2403404ee2a6977cf9f4e230a2ce0576c8ec06ccd8d879ce5aba19f9fe3e3efacf7db8c18b986f63986746e799ad60ca859506953e86a89922b88ba99b04324193b67c1ba02cfc03092c98e7a7dd047b38f519ac4dd96151e16b3c43187f05766299b5499f0ac73546c934aa8a67fa1b610c83e338ffe473b834eb9a916c6da896864e1e56798ac39edad5eec12ed432edb32d7c376ed206c85e6a686c5afafa558c2d0b03439f5f77658f439791b6a56db8064b4a422ef9f49171089fe2be5afe9bd7f69cde7f8019b1ae5846d049b0e264803e9560dd553d38214aa88e6d9cf4c1297c9517f33143782b3bdf75ca9784f2594081d528ccb70a742e470ac21f0d992bd729a99be46e08e719f1c92c64a5309c99adc8d7dbdf24e3efb8813c0fd8eea901d24d499f8216474f7552634254a8bdd956a97344c5f8d616ceac1f3e6fafd0e743dd0ad086f1f6d2522f572f5825a7b3420063ca680889db24339423d6d088194926416ac5c10bdd8933154675db8e428fc69287238977f2740dc7a7f3ab0222778f4c0f8222d7023a3b2e575703d480656d30b5be608557be03b354c9f3c2942e3c6a478294fdb09548a55a97543774a56caa5a3f928896aaa3fb3802d9ef2ed4bf06aa1a769413e46aa0b14d7fcdfa4edab71d280a33ee2108147a64c59feacd087e2695a74a0c8de69e15c09f6af9c394b09f0ae7cfa8f29400ca1335daa73c22879d3dec687f74402e546a0e97c6d3eec378bf59f1b795bc20b6a46024b3c537e8ff6489df2fc77491eff7c9651130651c17f989f6e6d87e72c21d6cbafc33d071b7801499bca375b7382e27bd6b0150c1f3ecc755c71d714d8b22a8748a69d98d6dcf5a492c9929aa6d0fed9d50f1b2f49c24efbafa1bb82dd4c43ead09daff2a3aee7a71019fe4c85d4d0a4030a920186eb81dcc72167c8cb21dd31f74bd617049e257482d24c27eec59e3a0107d9f9e4bb2cee8063f9acf07f45c9dd67f6ca1e113744d12fe94cf6c4496cd181ec922ceeef6112580520347378b8e1463c99e45e80de9051d054b023d9241c749af0f3675001fb65778e0e391fd9a7e3d52e438049a2b574aa9497e72298114f95b2c8c2eaef4f862229b1cf0420524a5436eed3a6da23887df7d031b249eba24929d263795d477ae251196a12145fa2933a65f9024c5c65ca305f7b466ad4cc16cad38b20442d0c76594b4d159fed714ad35300cc3e1579039d5f2cbcf32224331b55c82a339f1adc539834ba8ef6fae3b5276a27c3f305c7f0a827d8217f3a34e33e033b4813fbdbf2337fd1de1940db3f0af50bee01e916d9be4e7b5866185112be8426c226c50c8e645bcd1fce936befa640cbe9c614944e134e3729f2d9d11e3c57a9b66b110c63cc31746b934a75ac8b4e1b6085b50aeb96a4b0c1bf381a47f5cb66d659708c05a04f600266003a3eff1db72c0a4fefcd38837d9723fead7ad23ca9d20c60b45e15c48514865d400054702c2b2d96302d3d88cbe3c440f5c6096e77e5bd340ac59d1d8bb1f5bc2a2b922cd8192526e4c3ad2361c1b098ee9d2a1375fddb86a6d7d193d9f1de97f58f9db152a73b720e5c9fec36920c2b5e815f48a0e8b7713b0f07a52e072f75a3c2129e651d301764fb5215ca0ca2fd4ba534c00a95307aecf4127ef387e4bc42505c3f4cd7124b574e7415fba88f2e4dfb7ed66b6760d9fdef8ce8d5c4fe03b028eeb328b88cb960b25e6235a32fe9c2b4b2f43c7a8b8297729a573808c6a1cb74cc23febad0695e91389cd57876254cfb980c2ae281ec7dd60c73d5a70c964f1ee61a40e9a8a5977bcb3e89610940fa1ff9950c378f03fbe04c7d4d5bff1ac8cc8c09807a01f6adaa225e30579572ef6cee44d13e8433b664a0b641ac2a01d9da24894c07368d88bae97641a82590ac1d93e32dd37e9db5f2fdcdfd08a586c7311d73b62b71861b3dbef32beb407449bd5288a0a22d5e9cbf2ba30c89dd61614c550523c47034680c40baef1aaa789f75268bfbad9812687e6565292aaf3537b19f370c67fafbaa4c7059e9c754fa8615dc7c847ae489a4a39b89b5e819d902a1fc4b1481e063775c1c48dbf7e8321f06f019e7c8d3690cf9e719f12c9d129fea1fd9b72f8053723f9a7378b742fb850a77086c12b5ab5b91110a7beeb9516556f1a3fb2ccc98c63b2488cc3cc05ea80ea30cdc66aeb533fcd7985e57f5742fa060c57fd34c24510f2e84a63f34d139052435c0ec8c0d5a79db97cac4a20a1e7bba0aa457f48e1e4d09517801e44449cfa68b5fa677c29329094979a8a860ce153b4a0f37236d6aed757a65210653009a6ec745c28c25e430024407b14881749d2d7eb4ce385d8bda48f787d1c9d3276abbcceae0f87bfa0629cc6be4d6d4a432a1fea421d47cd616a1c626dac29dd261c41434e8eda0d27ce0494ac75f498a24c72e23bfecf2e5438fd21cc214775b61e99c33ccf21c737f024a500b6d8bf531a4563717df37645f0eb2259329e9b8d4ab296ee8aa6c4785bd8dfb5d74854ce24ac4e07e5d0df9d0a70cb20a1d064de42d5c0b5b06c9885224fa4ccb3f708697c2cbc468200f68925f0c3b8d41b829e2959d400a56e397ec66678c6de00045052822f09055ea9f9216b10f41e9ee05b687e5ec264372642bc0dff8849734632fe9e674084c0f3d5e6793ab83e8a380c8ab48829f3b1f4db76bc2d5643bcf1f8ca4ee4247b939cf078f329c9d2338ed63e1ffbc3802eec22c9089a3b1d2a3ad4cf408d4206d8135e37c6b74917582f23815cfd222be896ed3e49ececb608acff0d47a40a66f08de91700b358b3ba806dcac68d0511e88b211e79c5cf92475c4b0670d60a4005b28b339f164fa840c011bbca004d02a48b6c9c438dcd4c8619a570bb79069e455b9b7dea6554f58fb9b285ece3ec40701b0955a5df4cce420a7492f42deecbf7d26a49b00f135fd5f7677b1a99498d22d084fab5039d9a0e0a349bb4dcdc05dc8223260df1fcf69660bbd0e9434a53cb17bb09c91a0c9934f45f75a8212b8be09ae89b38d1bb9e34043063bc64d23be800c14f7c6eba1f71844e08d2a1bcec48c2e7c3b12020a3574d443c264dace5513b3ab9e5af73ea742b3a86d8656b1c7213ccb7d098a88f51b7354d854ae4ce300ab3f2df5141df244982e832406f5902977e44e49bfd51e61243db81a3dcdcb5439e0d578bd7d0cb046345b603708afa962fa086e6d25cc4ce07f7c51ee591ffb615280a5d63bcf293fa21a60c1d84c005f578feb129e729bc35f6c40a07e0ab6d19901286eb598e21f6257828e2ab7ed453f67762009443f8191e5630ed00832fc29eeec0b5fc1f3901bcee8c174cf368c1601d1e463c258b44e722a36772da44edfc05b3c9354b5485581ef1392b2368223bc4f9cbdcfe033725365de1882475cd283ff585b2969d705d2002f6d3226126b2132532c5921fad97ecd3471b15b7995e3c87fe20a7b7afd66b2f530b8f4a6c95dae9be02dadf83b8e59ac9a232b4cfcaa768d22bd594b5d3a4d5dfa5b205f12d3d979fdc0720c447605c44214dde0e2a723aefba53eedc82cfa61f6079b5bc8137215e1b6fa132733189939f771d6f384ac1f40c97a98d58750725bdb54dedebef4374bbec1615471ed838062bbd443f65eb77229418b97daace60f87e84842a536b4aa5d9fbfcccb28d4acb36afe2cdcc46f447e08f0e99f46070f2c31e6361a53e7906cc20e4dbbd2b8ecbc85ff514edda6adc45cafc00603931acce65c2c8615aa958fefdea723bfb31b9362cbdc81b11b81de772962b431519d95a9ebf8d2753556baa0e189af6798019a3a75bebc5a0cf30dfc6ab6274b8d923ad48dd9740397e949153989919b5832e234a5425afd772f3072a453bea0126ba4d1b5008ac62f70620160862387701b7b683556d8be7a701604539a6e92d488cf435a1cf4a92ee46f7982b02d07c8b60aba47fa230ab0bd2369a280ae8ac9605a333d54fd0f35155b3dce7129369c555c86940cd4d211298f57efe47978e213a9daa0228db634d5d34d7f43b1177ab264c1c81ebb62b4c15aa4d41a2c023183561664069a49e93c905f886d3a8da0260a8d8366dcf18eb6b9ab6529ae7dab05ed1cdd8f3c617c194887bb1b00a6829dd19e805d55f5ca4378ae52352ab2ea6b08d9a23353a1ba60c05f090fc5c2025ad092d2dae4ded5f6494bbbaf7271db683727517790a1bdcf4cc24bdde05ec2bb3788b34e34b197eb9e916bbb78a52d0b6864586292f7bb470f63e5f8b89cb895b200a33900e22159da3a06338753f5a3418ed457892cebd39210ded168a30486e448d83ee4748c3960ea76e963233881aab083a4a9bfebde6a1ca431da5a24ec8ca730e8ca8a32f26ea79a09be8630f876bc9967e54dcfd29b9c9b66ea3dbaf7f18abc47463bb1d914c116ab3e130e814dbf8adb90d1436abb6ecc0832c63c28f42c0ae9b2b989b3b6293410bdace97c7be96b415a133d4d781bffd61632fd0ec1c15fd4eef3d3a65ad41f96c8e7b60a851ae12593099f28e3377a1e5efe5e9ed506057ef7c2e63969b048a856cdd12e8bb6c8ed2ecb6e41b8589876812b5d98ee3778a055364e822cfb8351e174798fa193b53a63df4726db7d398f7a2cc0c16e3441d914ad7899bf39c699290a3a4e3e9ef975ae3539dbf9bbc3b69a1f548fdeb74c90b19520f9d0fdc7061df5353e5a72224d417c5dd54f99730884bb551ab64ff3dea120ee1b500e6f63d1edc6c9bd41a7baaefafb94f3cf2dbd902ea1ac61ab1272255fbee5d7ee3709f8bfc58a3a4ba6b1f075202153977244b207c9193c95b9ade5408e66d35eee7a92fc26975c328107f9e7cee5f0849b5e465a0245020ff53f136c3ccca46800794ff945a6e861e4ed8a23c9a7f3da17d1ad43991acb4e389c8747caf9ccb752a7208f81b4b43a0da0c8e1fe7799f11d8335f7f3dcbc0e1ca5debc8128ec350001004ab4cbc7b501d24f9609e81784f864114a2d21f10a2f2e23bfd42db364416597c99a1167947bcf0d39f9c9498c5c2c640a000000500002800900020073797a30000000000800034000000004080003400000000308000340000000030900020073797a32000000000900020073797a3000000000080003400000000108000180000000050900010073797a3000000000140000001100010000000000000000000000000a"], 0x18ac}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000680)={&(0x7f0000000640)='contention_begin\x00', r0, 0x0, 0xe}, 0x18) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000007800)={0x0, 0x0, &(0x7f00000077c0)={&(0x7f0000006580)={0x14, 0x36, 0x51eb40323bf4c37b, 0x70bd2d, 0x25dfdbfd, {0x3}}, 0x14}}, 0x4000) ioctl$sock_inet6_SIOCDELRT(r2, 0x890c, &(0x7f0000000200)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, 0xeb15, 0x3, 0x7, 0x800, 0x7, 0x2a0081, r6}) 35.132178755s ago: executing program 4 (id=8808): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) nanosleep(&(0x7f00000000c0)={0x77359400}, 0x0) (async) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes-generic)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000480)="b19ccccf84f531d9ec214627c11430c1", 0x20) (async) r2 = accept$alg(r1, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f00000009c0)=[{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)="3f5e978e345482212cf7cd37be", 0xd}, {&(0x7f0000000000)="ece600", 0xfffffe5a}], 0x2, &(0x7f0000000640)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x20000000}], 0x1, 0x24000040) (async, rerun: 64) r3 = socket$kcm(0x10, 0x2, 0x0) (rerun: 64) sendmsg$inet(r3, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) (async) recvmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000004140)=[{&(0x7f0000000240)=""/212, 0xd4}], 0x1}, 0x0) (async, rerun: 32) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000040)={0x10, 0x12, 0x1}, 0x10}], 0x1}, 0x0) (rerun: 32) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c030000160001000000000000000000fc010000000000000000000000000000fe88000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac141400000000000000000000000000000000006c000000ac14140000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000025bd7000000000000000000000000000000000000300000006"], 0x34c}}, 0x0) (async) socket$inet_udplite(0x2, 0x2, 0x88) (async, rerun: 32) r5 = socket$unix(0x1, 0x1, 0x0) (async, rerun: 32) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000280)={'syzkaller0\x00', 0x7101}) r7 = socket(0x400000000010, 0x3, 0x0) (async) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000800)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0x5}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) (async) sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000640)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r9, {0x0, 0x7}, {}, {0x8, 0x5}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x4, 0xffffff00, 0x6, 0xc34, 0x7}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) (async) socket$kcm(0x11, 0x3, 0x0) (async, rerun: 32) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) (rerun: 32) close(r10) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (rerun: 64) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) 35.022143935s ago: executing program 0 (id=8809): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x14, 0x15, 0x1, 0xfffffffc, 0x0, {0xe}}, 0x14}, 0x1, 0x0, 0x0, 0x4800}, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r2, &(0x7f0000000000)={{0x6, @netrom={0xbb, 0xbb, 0x2, 0xbb, 0xbb, 0x0, 0x0}}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast]}, 0x48) ioctl$PPPIOCSACTIVE(r1, 0x40107446, &(0x7f0000000080)={0x2, &(0x7f00000000c0)=[{0x40, 0x8, 0xfe, 0x9}, {0x6, 0x0, 0x0, 0x8eb6}]}) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000540)={0x78, 0x7, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x58, 0x4, 0x0, 0x1, [{0x54, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_META_SREG={0xffffffffffffff6c}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0xb}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x12}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x15}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x4}]}}}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x48055}, 0x1000c080) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x8}, &(0x7f00000002c0)=0x18) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@newlink={0x60, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_ID={0x8, 0x1, 0xffffff}]}}}, @IFLA_PHYS_PORT_ID={0x24, 0x22, "681c4134f8710f0cc53cbd5f1083b76ef53447d040eeeb1a6dd2da9da49f0242"}]}, 0x60}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r4) sendmsg$ETHTOOL_MSG_DEBUG_SET(r4, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c000280"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) write$ppp(r1, &(0x7f0000000440)='\x00\x00', 0x2) 34.936096409s ago: executing program 4 (id=8811): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYRESDEC], 0xd8}, 0x1, 0x0, 0x0, 0x4004850}, 0x40) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x0, @private2}]}, &(0x7f0000000180)=0x10) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000000)={r2, @in={{0x2, 0x0, @empty}}, 0x27c0}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f00000001c0)={r2, @in6={{0xa, 0x4e20, 0xffffffff, @private2, 0xffffffff}}, 0x0, 0x1}, 0x90) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r5 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r4, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002"], 0x44}}, 0x0) r6 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x8, 0x3, 0x328, 0x190, 0xffffffff, 0xffffffff, 0x190, 0xffffffff, 0x258, 0xffffffff, 0xffffffff, 0x258, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@loopback, @private0, [0xff, 0x0, 0xff000000], [0x0, 0x0, 0x0, 0xff000000], 'wlan0\x00', 'veth0_to_team\x00', {0xff}, {}, 0x2c, 0xc7, 0x6, 0x61}, 0x0, 0x168, 0x190, 0x0, {}, [@common=@ah={{0x30}, {[0x4d6, 0x4d6], 0x8, 0xe, 0x2}}, @common=@srh1={{0x90}, {0x3a, 0x2, 0xf, 0x0, 0x9, @private1, @ipv4={'\x00', '\xff\xff', @remote}, @dev={0xfe, 0x80, '\x00', 0xd}, [0xffffffff, 0xffffff00, 0xffffffff, 0xff000000], [0xff000000, 0xff, 0xffffff00, 0xff], [0xffffffff, 0xffffffff, 0x0, 0xffffff00], 0x13a8, 0x1e8}}]}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x2, 0x4, 0x6}}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x36}}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0xa8, 0xc8}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x388) socket(0x1e, 0x80000, 0x9) 34.864842294s ago: executing program 2 (id=8814): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$FS_IOC_GETFSSYSFSPATH(r0, 0x80811501, &(0x7f0000000180)={0x80}) r1 = socket(0xa, 0x3, 0x4) getsockopt$IP6T_SO_GET_REVISION_MATCH(r1, 0x29, 0x44, &(0x7f0000000140)={'IDLETIMER\x00'}, &(0x7f0000000280)=0x1e) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x2c, r3, 0x5, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}]]}, 0x2c}, 0x1, 0x0, 0x0, 0x40080}, 0x0) r5 = socket(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="21000000000000002800128008000100687372001c00028008000100", @ANYRES32=r7, @ANYBLOB='\x00'/12, @ANYRES32=r8, @ANYBLOB="0500070001000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=@newtaction={0x70, 0x30, 0xb, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_skbedit={0x58, 0x1, 0x0, 0x0, {{0xc}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_MARK={0x8, 0x3}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xe, 0x8}}, @TCA_SKBEDIT_PARMS={0x18}]}, {0x4}, {0xc, 0xa}, {0xc, 0x9, {0xf5}}}}]}]}, 0x70}}, 0x0) 34.791892305s ago: executing program 4 (id=8815): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f00000007c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000140)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000ffdbdf25010000000c00040002000000000000000c00060001000000000000000c00020007000000000000000c00080001000000000000001c0007"], 0x60}}, 0x4080) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000940), r0) sendmsg$NFC_CMD_FW_DOWNLOAD(r2, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x24, r3, 0x10, 0x70bd26, 0x25dfdbfe, {}, [@NFC_ATTR_FIRMWARE_NAME={0x8, 0x14, 'nbd\x00'}, @NFC_ATTR_FIRMWARE_NAME={0x6, 0x14, '.\''}]}, 0x24}, 0x1, 0x0, 0x0, 0x4044011}, 0x4008048) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000a80), r0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000ac0)=0x0) sendmsg$NFC_CMD_LLC_SET_PARAMS(r2, &(0x7f0000000b80)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x14ecf29aa4524f66}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x2c, r5, 0x100, 0x70bd29, 0x25dfdbff, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}, @NFC_ATTR_LLC_PARAM_LTO={0x5}, @NFC_ATTR_LLC_PARAM_RW={0x5, 0x10, 0xb}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x1) r7 = accept$inet(0xffffffffffffffff, &(0x7f0000000880)={0x2, 0x0, @broadcast}, &(0x7f00000008c0)=0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000840)={@fallback=r7, 0xf, 0x1, 0x0, &(0x7f0000000700)=[0x0], 0x1, 0x0, &(0x7f0000000740)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000780)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000800)=[0x0, 0x0, 0x0, 0x0]}, 0x40) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x24, r4, 0x1, 0xfffffffe, 0x0, {}, [@NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffff}]}, 0x24}}, 0x20000000) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000680)=[{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000340)="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", 0xfd}, {&(0x7f00000000c0)="bcbf375b425070dc479ea70b54e5b66e6d4bab07017193a33a5b02100d1fc47c3c650e70bada718594b2f370e2843b7f8d3ef210be6c94ef85e81522568f53af7a3b8ea0f4195fb1df9bf0355870df02588c2185e8c276226adb04a1ba2033086bf011b12b445027222144d75578", 0x6e}, {&(0x7f0000000000)="f7931f38f7d2df611803bd1512ba31ce414f68419458df7b6840e35fa355b51ed550a4d9ccb0b1ca4bfde81a4beaca46228ee2dc4a1984ed", 0x38}, {&(0x7f00000004c0)="19acd6149438320f5a4690a7e6290e5988c6a53b97c19f309842240b65ac7469a3cd917263dd66fdb0d5c1c6e7904dce61a028fca5e92b812fe67968738af06d9e725b28bebf28aea4df0cc0ead182eababd2161e51467852bee388b75d763a45d5ca4143fdd00153067df94564ecc3aea0b1bcffe9aaa04f9b59c8c40614cfc6beeb573bdc8a7b42ffa298fa7621c34b551f53f9c561efca81bf3557b5facc79feecf4c3b6362b1dfd7075fc36adcf315906d1b0b6ac4f3dea12c0acb9c9f665e600fd5454eb847be4088442ad585b11c", 0xd1}, {&(0x7f00000001c0)="a8f3637f2935142dec8ae02c0b2941af4207fab02cc059a8a9104c9b950ad83cd48d867953b0a8e79f7ed2b33cbdefd02e1cbb067a431ba499a82c66cad4f4fe30b52650e8704e9ea0afb0ffdaa7a055247d00678b8aca9fc017df8f64275b046530afd8a27c89c993059d33cc", 0x6d}], 0x5, 0x0, 0x0, 0x800}, {0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000005c0)="a3f3db54bea6f974270bcd5f75d2ed1a359467a47fb6ec66c99bba67873b3ab7f0dfb5588588b6c048fd66e63c4a688c881194798c9722619fc8198824909eaa83a1c33e525ded724fb67028251652df290161dd73faa5c7a0df93431eef83209b151b29695c8b0b72bea5024fb44efe6a7630d9cbffdb67b771c56472446665ceacad8522dd4b3a54bf73222fc61df61e46673557", 0x95}], 0x1}], 0x2, 0x10) 34.791239385s ago: executing program 0 (id=8816): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000000f40)=ANY=[@ANYBLOB="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", @ANYRES8], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000001, 0x11, r2, 0x4000) setsockopt$sock_attach_bpf(r1, 0x1, 0x54, &(0x7f0000000080), 0x4) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r3) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)={0x14, r7, 0x1, 0x70bd28, 0x25dfdbfb}, 0x14}}, 0x4040) sendmsg$TIPC_NL_NET_GET(r5, &(0x7f0000000580)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)={0x38, r7, 0x101, 0x70bd2c, 0x25dfdbfb, {}, [@TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x40}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7fffffff}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f00000000c0)) ioctl$sock_inet6_tcp_SIOCATMARK(r4, 0x8905, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000140)={'wpan3\x00', 0x0}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xc, 0x8031, 0xffffffffffffffff, 0x0) r9 = socket$nl_rdma(0x10, 0x3, 0x14) socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r9, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="200000000514210601000000000000000215fcff6c34f84fc62e2cb4cbba9637f4bc1eed9616489455cc5c6709140c7f4ff592215fe710eff883f42c7244c02f7b79a6aee0648893cf4d38d137963cae056aad88bf91d0d3dd69e6fab6a70362"], 0x20}}, 0x0) r10 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$EBT_SO_GET_INFO(r10, 0x0, 0x80, &(0x7f0000000000)={'nat\x00', 0x0, 0x0, 0x0, [0xfff, 0x10000, 0x9, 0x9, 0x4]}, &(0x7f0000000100)=0x78) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$bt_hci(r11, 0x0, 0x31, 0x0, &(0x7f00000000c0)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0007000000000000b702000040420f00b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r3, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES32=r11, @ANYBLOB="010025bd7000fbdbdf251e00000008000300", @ANYRES32=r8, @ANYBLOB="50002f800c0002"], 0x6c}, 0x1, 0x0, 0x0, 0x20040814}, 0x4880) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000004c0)="06e0fffe007ebabec41177fb86dd", 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 34.706777977s ago: executing program 4 (id=8819): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x14, 0x0, 0x7, 0x201}, 0x14}, 0x1, 0x0, 0x0, 0x4800}, 0x0) sendmsg$NL80211_CMD_START_SCHED_SCAN(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x40081}, 0x40009) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmmsg$inet(r2, &(0x7f0000000c40)=[{{&(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10, 0x0}}], 0x1, 0x8014) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000f80), r3) sendmsg$NL802154_CMD_SET_TX_POWER(r3, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000001080)={0x1c, r4, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40008810}, 0x400c800) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000000)) 34.60059029s ago: executing program 2 (id=8820): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000200)={0x4c, r2, 0x400, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x800}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40004}, 0x4) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x6c, r1, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x6, @loopback}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x0, @private0, 0xe}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x6c}}, 0x0) 34.526313858s ago: executing program 4 (id=8821): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="05000000010000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) (async) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) (async, rerun: 32) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=@newtfilter={0x74, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r4, {0x0, 0xfff2}, {}, {0xa, 0x6}}, [@filter_kind_options=@f_flower={{0xb}, {0x44, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x8, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x4}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x38, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x34, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x9}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x18, 0x3, 0x5}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0xfff2}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x3}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x8001}]}]}]}}]}, 0x74}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) (async, rerun: 32) recvmsg$can_bcm(r2, &(0x7f0000000200)={&(0x7f0000000080)=@sco, 0x80, &(0x7f0000000140)=[{&(0x7f0000000300)=""/241, 0xf1}, {&(0x7f0000000100)=""/46, 0x2e}], 0x2, &(0x7f0000000680)=""/4096, 0x1000}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000500)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a9646", 0x14, 0x4, 0x0, @empty, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 34.45325322s ago: executing program 2 (id=8822): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x7c, 0xd6, 0x2, [@var, @func_proto={0x0, 0x6, 0x0, 0xd, 0x0, [{}, {}, {}, {}, {}, {}]}, @func, @volatile, @volatile, @volatile={0x0, 0x0, 0x0, 0x9, 0x2}]}}, 0x0, 0x96}, 0x20) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a}}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x2, 0x0, 0x0, 0x1d6225b, 0x0, 0x0, 0x14}, 0x90) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000180)={'syztnl0\x00', &(0x7f00000000c0)={'syztnl1\x00', 0x0, 0x14, 0x6, 0xf9, 0x2, 0x1, @empty, @dev={0xfe, 0x80, '\x00', 0x20}, 0x7800, 0x8, 0x3ff, 0x7}}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0x3, &(0x7f0000000040)=@raw=[@generic={0x7, 0x1, 0x6, 0x7f, 0x1}, @cb_func={0x18, 0x6, 0x4, 0x0, 0x3}], &(0x7f0000000080)='syzkaller\x00', 0x7, 0x89, &(0x7f0000000340)=""/137, 0x41100, 0x0, '\x00', r1, 0x25, r0, 0x8, &(0x7f00000001c0)={0x5, 0x5}, 0x8, 0x10, &(0x7f0000000240)={0x4, 0xe, 0x0, 0x7}, 0x10, 0x0, 0x0, 0x7, 0x0, &(0x7f00000005c0)=[{0x2, 0x4, 0x1, 0x7}, {0x2, 0x1, 0xc}, {0x0, 0x2, 0x6, 0xa}, {0x1, 0x3, 0xc, 0xc}, {0x0, 0x3, 0xf, 0x6}, {0x5, 0x5, 0x3}, {0x3, 0x4, 0x0, 0x8}], 0x10, 0x4}, 0x94) 34.294248876s ago: executing program 2 (id=8823): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx\x00'}, 0x58) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map, r1, 0x26, 0x7}, 0x10) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r2 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000000400)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg$unix(r2, &(0x7f0000001c00)={0x0, 0x0, &(0x7f0000001bc0)=[{&(0x7f0000001940)=""/216, 0xd8}], 0x1}, 0x2) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18020000200000000000000000000000850000004100000095000000000000004be98911ed5a3cf4451d51e400827eef4df9eb3fd52b8f0a456c3a6cfd127868ad3fe3f9a9b946c97f9fc091e4c3f4b0a0d7ed298717a480c48868562f04005972b6a5265519fee4cb1b8b93f0b164770fd40c7a8060ce72beff7cda177e28a1a97b2c8c56a3f15b2f7a9b7ae2cf52d08555d3c3315e95095217bff8c9441a45fd00000000000000979ed4e35d21d13d428af521c553b9420385390207dc1634aee0244045e5c380e6090329d37b29a56c16d5c7bee160b91246bd2c205047bd92581165c774b1fd46072c161f1d33e6d5c1a5db7a714e3ed5468408f279bd9f98ec3c5ffd79cd37810f03000000b65d147fa05253a600adfb03775847b220369339529d434f3190c81c3dd501a780cfaaaa916c8a33ee4b52d18e160428893f33d206d3a7195e7f69c831099bdc940000aa2c2e61509bf6c58b100000000000000000000000005e3210346531c1eb14fbec6eb35d6f3e3853512c6bf186bd8b75d17aeeaa07"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x70) sendmsg(r0, &(0x7f0000001380)={&(0x7f00000011c0)=@in6={0xa, 0x4e21, 0x3, @local, 0xffff}, 0x80, &(0x7f0000001300)=[{&(0x7f0000001240)="4396f5f65d4f002d49d5f8579a9d4fe8459337efbca80bb75d87c635e68348178f26f7b76bb5f07946b27030c09466484b24205de864782cef4be4fe38ad399e94a9a2c6c92819738431f67f2eca531d0ac3bf3c480321366d77ba44f4b440e3e01a7c10c895bdc2fd630dd6973fe6f68c2dd1ec2df0d9a9bde9685c6b63aaf6f478ea469aa4ed49bd12021839", 0x8d}, {&(0x7f0000000100)="7929aed5223b818a16c48946e843f32e44376d37f393fe568887add4e14d8264e54493a1d5ad60ce56911f79d8e382b92e9f0fe12cd3b14bbc", 0x39}], 0x2, &(0x7f0000001340)}, 0xc801) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r5, r4, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xd81, &(0x7f0000000400)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x29, 0xd73, 0x65, 0x0, 0x9, 0x6, 0x0, @loopback, @multicast1}, {{0x4e24, 0x4e24, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0x4, 0xffc0, 0x0, 0x4}, {"04be987697f802f50736788d8a3c2f9fc5b22fff489b81932336bffee2cb1a49ff55f7567dc7782cae6dd8a4cde1f300b4c20ad70442408db435a73a68bc176fe7db5b09f57e475da74db49532f7dd5b8e0ec159106653824ee2b1ca2892b6f1fc00ce6bcd27e1b005fc7ad13c0fcf2babeee4dee9562739a66a20497764d73c349170bd683362e77062d33966d26184cb403195fdf3ce5091eaf4c6c41c1cf7fa6e814eae7442c92f3120d38d833e09fecd73739b7c7886e706f5695a983dba63f5bf844fc72b861a4b420792b84e1a084b2ba7bf86f2fa3970e7c4af53919f1f9e7aef3d9a6a11ec5f274094c1621f2149cb5b8821757f76860732a3fad474d58eb05da0b238c9f214a38b565c6ce43358ad408a4a2f89bc475fa90ae576347ee1733db67150673806098bcae34981a5bcc060864f7f5ee7ecef5d071e09dfb3c047675751ea73adcf518f95d7eb5d81252079f1b91991a3c161b1e46301f9db240ae00a26e102f309f1e1048e56a7de8efd319d5b854879929c0dc435388112c340ba020619ea515eebddb9c53bba0d7d68b5597f51a7d6b6857eff6daf2a718909f97ff8be510a690f3b3876c975ca0f8bdcaadd8a6707177f4a63ffa81ede545be8f90b61c680cc259972ca3d6de2ef990cad97d029216aad1651cb9ea4c3b8a1a5509f16726e64470ec6176369979e5fb3af2ded41666ab3bd1869f9f6e2556879e2611f6dc01ec5afa6cce089d7bc57e5fb9503dfd3f033d0c9d2609a474d6077702cafe4938f2e7fc96a023a89766105a94a85b005a4aca5eb3efdd428b78b35bcb8d2bc34fea193336811bc93f66271e8a55784915ee11fd1d092f01b199cb772f4af20c81b4feced1402c7ab0a23527b8cba0439b307d3ac1fd856fdd6e47bf9168734b652376aefb835ec431c9a45fc4393cd20f9985499d035239669865e33a1ddf9f48a4bb875ddc93e3933e21a60d37b0c33bb3437cdef67c575987b58048c8d8f6482e8bb59322a540cc333453e21440831a1169cfe490771ff53ad023f107e418cf5a414e8b34f69e5f44d9e991ef0a85c632a0c2ae30e5ed819ed0d27f2f71d73873d41415773f8c356c803f65be80774b6881f47e387447e9641a7ac261b1d2b16f8c58817ec69e572f51ffe6327e9547a54ded25b0a22d904669ea0135c71102de541674d5e1f1df4131457313749423b31448e08dce74b44530223216f4a9835e9387c3db5c548c9592601a17e6b6827c45ad1644881a91f48d9c4ccf4f30a423ed1b6f5a17d12bd376acb78756f21a5af3e88f898e9ad8b84f297e7b6419d71892e2b852db649b6e378174d3280ba563c301b77d6a4624413ec4141d66f16249d38c52496465373ca19b38ad40722008fadf092b43d184d7d354b570c96671c7ecf62390414ee6708068291b755f71173a48298ddc1f2efeecd975770fa126b9e6283f358d96d63f697eab25aff34f2d1a140e975524c1f3ec20f582268d39950faea84516a3418a2ef3f7d4f3d88d92c499026bcb021861845bf15d6964d9c881af536c5a2c038b816cc8d55c2dbc4ebfdaa61444174866ef675769ef86707ead7106f91b3a3a22a4e982601423acc05b30bdcd8fc13a841ca53b18511fb97a68ec4d39ed1f80a24f2244a7cf997b7e82910b4cac9359ef3f3239e35a96ec239e3a69ab52cdf0ffc6d97ee6b479f7f905affbd7649d0e56e556cc66efa9b0a422a441d3e82ae86968f79fc460f221ef84a579e7b941d37eec32f3bbe8a59596b7e66267ef859b3937a79df252c900071189f975d9a7e75c53ba75f8aace043c9e9824bd617f4d50a4fa01364a3b646a36c52eab9ce72e8bcfa237841be811dae2bd36b3e81157f657de354605309e9364e43f1f650bde11be2ffbebfdb332ced14fce090a2a56f25b264afbd33fa77a8b3fe04949dbbae46e008c4abc84919052c541d5908973d8a64515e7e13afef2732bb98b3104ae44ad775b3442c5932928dcbf845bd6f08c83f2e7a9ad98c4f7579e9cef677d65ea9c40680bb8d277cf84f776fd4e8be49b34a245ae777e59f06c8eb8382007033121f8f0638047c89b80d98b583bf12290c70f6eb32d6215f64138e8c9fe7a1f7605b5b6def515261f0af3ff81c8e5154a2ba3ca5abe0300898f477fe0f2b83dea52a622f20c39e192f9d9ecd4ea65162eddd88dadf45021c74e46159ef395b07c24b9177827bc7537f6991e8310c413c017084f87f63bf11cb9fbd88a857cf93b5b1d5efebc86f88b998884806e4b8c5e89d73b713b7eda6d16facdaa18291933cbd09d4aad09f98da2ba756dd0201b146319263c3dfbb1bba4516c970a528d6ff9abc73c751acffea12b60c02e728edd38954c4f1cc05857b23b387a86744884d87540411e775156a6bafaf70b7b08e7575525b429751127aa3b0bbb0496f2c3f28c1c3534e7fcf7617377c3725a29b82aa46904972d1823cc3e970b1966853f35f217cfd2e6ec8ee28e72d5e97f2c6e984a5d86787093a8a01640ac2512c4448c658714e19a26aec3e8f2c2aef3b804c3d18cd77c0432f742e5a14171e8cbfb75aa4f7d47a4f4446b8029fdb9ebff2973b47d786a499c09dd7070c7c4e44300031ac4383d8bd2b9031c63c80020a620d2e90fb1c7bc8e1a05830e6e385597d0190fcfd63f4fab79053bb83f195589ce3ddd06e77601642052c1660254febbeac6aa9d42245fd69478eb0544b85248d53e2ee1dc6d13be34e2e04ad5dbfc943cfd34814a024f9f29a780343294dd7693ab23612370b5e1ec8686f444c2c65f66e7e3afd248cb1573ecec109c44886fa9091873fd7023ea70232afea8c810aed72f75e8abca2a5630f07bb2f2e219f309322dabb55897de341d8f7dda535f69b8bef0461658e030289027038f3819bdf8f6d213fe933b8a932d7c2112c9b224da0db4451d2f449fb3c0ce3ded32a479830ae45d6cdf6dab358d545a2877d961f4df2a83729d905896fddcf239bcea2e7ea3cd65723b4e1551f082fd56804e0b08c6f5eb1beba95f77e3e267e8c34e7475b8a6adc4265116f9bf1acaabc4d9d1ae8745452e93fb396ac9715476c678cec2f30622837e156c808041659ac1a18d93e28d2dae53659f47bd6760a921585b1e1428a5ccb8ecbca624753a4c6bbe113274486e0e2d6a4384a70bf4c464edeab2700e1fddde0a86b9d549731aeec1e86944d054e91830228b9b93eb2d2b56ede77c7bb4f57c1282186c38e639772a9edb7e726eba3ca9ee84ef187689555c36b11dd4b47f8b7a07da539be208162adda085031748e68032fc16954f937cf36a4f8e66b8dc4a37685be267d95753b7d3bf8512a42053bbec9db4002a4397a4380a3f3cb10be3213908bd3e89275c713ebad43ae2570c61ecd94af345ac5a3842ceea53dd57102ea0926d9523d9d19f49fa1ff813f5791aa57289e9188497c3f3456304cdaf782ff516db3a49195b1978c1edb73e601f50de7facf40975bb77c2608cf23ef55ae17fa4dacbc598fec938642dd40ed50c6455b1e1dca443a1f57c4f0f7b2fe41f819aa6560d0e49c310c8a16d1d50343db49effa4ea9e2b7d37a7168836acc1fcc665056bd669b719cf93eb1bfdb5c7350b4c2998a07b8b16edce49feef95df701e96750be35d495fa4c32ea4bdb70d3a90fdf4c67438269085c3e6c8f900877cc1006617054e17a41bda89b567128306906858c7a55acb6156b115dd20d80cc821fffa1d31ea8d93015ce6fa754319ec2349d93fb0cdb1310a7a259ce829759296f50a456c061f6e8f0250832f60fcabbfd26160ab72667e4b2244de7d64f353144032d6d411905df9b8c27ff6775b3fc0c6f2e3cd73f60389882c8f533969ae24a2cef2aa4a89b3c6708966681e2a9eba69538732b498e7633ee10acba82536135e14ccac88792d83a403944499b3ef58ec5417aa83d4b281e3cbb79f90ce59aa452f410a755fccfacb89a3b5d500278c1e227ccc8f8b1f64eda803b1ba6eb3e1b160aec2ecd749281032826cfdb349b3a33d70f0a7b2373a67433cc49b9507c15ac33e399f26f878ef08b71de218b79f4c9bfa0232797e91f346f57a6c8e9588a8d491bdeec1e600223f884beb04b6b6a6ef0293bb3fd9d9c27acbbee4de83e40dad7511c8e3dc1ebb0f38a4311005d5830b9f94ff7312c8ce90b73bfbab24040bc4c93a02d61e520aa76782adb8bf3fb204330127a9348603f80f20f25a7c78d974316cf4d07732445c5761ba45cb8afdedb24846a4c206855aed33bf3e494f4cc6e8bb1c8638216d5ed92eb1114feb95d80de521203d10d9070851f401e3d46fb79e50c3eeee3b43c172e5ffb02f2819e2134a8020c79f5b588be2ab3fe1a730e8ee32658e4447d90b8c0296b6c309a3934d53169eccc5672fbdb2410d44d469f93a7f4a6ac30febc4508d08c949a6b0ffaddc650c5e9f9f774f63efdeef2c94b87253c94c39027d1f34bb41a199d1b231750d48f5bfb44a211f2e2b5b234d2bb2d25fed0ae49cf8673872bc2f6f71d8c411ad48596990057408392badd1063baa10edaca39eed5283f7d9bf024b9c6cd36a23f5642cdf67e7d83f8f75eabf39cf462d8ecaba917d0e6d423ade8dc6420934ff1e35dae167d14480e74cdcc0854359c857a523d457188a5e305aee2ba0ad726b119ad15a763bcc4e121435901e6cbc1f757f29f5e3490d7fbd33d2bad743850256c7686657c324bc5f9dd4c1f70c8c6dd433e74828b1b0aa1d49ea4b0ab82b92db4cf17328d3c72437dcda211e603fd5dc341270c8fb64477620563128719"}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x3, &(0x7f0000000580)=@framed={{0x18, 0x2}}, &(0x7f00000005c0)='GPL\x00'}, 0x94) 34.042338469s ago: executing program 32 (id=8823): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx\x00'}, 0x58) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map, r1, 0x26, 0x7}, 0x10) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r2 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000000400)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg$unix(r2, &(0x7f0000001c00)={0x0, 0x0, &(0x7f0000001bc0)=[{&(0x7f0000001940)=""/216, 0xd8}], 0x1}, 0x2) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x70) sendmsg(r0, &(0x7f0000001380)={&(0x7f00000011c0)=@in6={0xa, 0x4e21, 0x3, @local, 0xffff}, 0x80, &(0x7f0000001300)=[{&(0x7f0000001240)="4396f5f65d4f002d49d5f8579a9d4fe8459337efbca80bb75d87c635e68348178f26f7b76bb5f07946b27030c09466484b24205de864782cef4be4fe38ad399e94a9a2c6c92819738431f67f2eca531d0ac3bf3c480321366d77ba44f4b440e3e01a7c10c895bdc2fd630dd6973fe6f68c2dd1ec2df0d9a9bde9685c6b63aaf6f478ea469aa4ed49bd12021839", 0x8d}, {&(0x7f0000000100)="7929aed5223b818a16c48946e843f32e44376d37f393fe568887add4e14d8264e54493a1d5ad60ce56911f79d8e382b92e9f0fe12cd3b14bbc", 0x39}], 0x2, &(0x7f0000001340)}, 0xc801) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r5, r4, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xd81, &(0x7f0000000400)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x29, 0xd73, 0x65, 0x0, 0x9, 0x6, 0x0, @loopback, @multicast1}, {{0x4e24, 0x4e24, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0x4, 0xffc0, 0x0, 0x4}, {"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"}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x3, &(0x7f0000000580)=@framed={{0x18, 0x2}}, &(0x7f00000005c0)='GPL\x00'}, 0x94) 34.034192786s ago: executing program 4 (id=8825): r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000000)={0x28, 0x0, 0x0, @my=0x1}, 0x10) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f000000a440)=0x20, 0x4) r1 = socket$inet_udp(0x2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0) setsockopt$inet_int(r1, 0x0, 0x22, &(0x7f0000000000)=0x1, 0x4) 33.932077099s ago: executing program 33 (id=8825): r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000000)={0x28, 0x0, 0x0, @my=0x1}, 0x10) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f000000a440)=0x20, 0x4) r1 = socket$inet_udp(0x2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0) setsockopt$inet_int(r1, 0x0, 0x22, &(0x7f0000000000)=0x1, 0x4) 33.922406197s ago: executing program 0 (id=8826): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)={0x20, 0x140e, 0x11, 0x70bd2c, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_RES_PDN={0x8, 0x3c, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f00000006c0)=@updsa={0x154, 0x1a, 0x1, 0x10000000, 0x0, {{@in6=@private1, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x6c}, @in6=@private2, {0x2, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, {}, {}, 0x70bd2d, 0x0, 0x2}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @encap={0x1c, 0x4, {0x3, 0x4e20, 0x4e22, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}]}, 0x154}}, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000740), r3) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) (async) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r5, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) (async) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r6, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback, 0x2}, 0x1c) (async) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000000c0), 0x4) (async) r7 = socket$inet6(0x10, 0x2, 0x4) sendto$inet6(r7, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x0, 0x0, 0x0) (async) sendmsg$DEVLINK_CMD_SB_GET(r3, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000002540)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="f7c7ced72c81ee29023f2a"], 0x14}, 0x1, 0x0, 0x0, 0x81}, 0x4000010) sendmsg$DEVLINK_CMD_SB_GET(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="18010000ef2d622caa6a472b87704c06005ef5edaf34a2baec5237f7757b27e59395107a629221157d8edfa025f658c077a9433668f3333c955178f7afc0c9f6f510e81ba009c56bef8b6144496929646fbee296bb10f844de2cf320b3c5188ce5e87b6bd5759f67c8f6ed0dfafd0d4c838ee1a4c5004d9479777e25de827303ba1a4f2607bcfc2e8f99d95368d4eb77b957152380ff33375d319c7ea4f7d4c8ddc701000000af893504f501830d5205f5077c7d35f30000000000000000000000000000b28c83b8bcd2cc2ca28fa7f2ea6dc5", @ANYRES16=r4, @ANYBLOB="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"], 0x118}, 0x1, 0x0, 0x0, 0x8000}, 0x20048010) 33.519191205s ago: executing program 0 (id=8828): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x2c, &(0x7f0000000040)=[@in6={0xa, 0x0, 0x0, @mcast1}, @in={0x2, 0x4e24, @private=0xa010101}]}, &(0x7f0000000180)=0x10) r2 = socket$inet(0x2, 0x1, 0x100) listen(r2, 0x9) listen(r2, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000001c0)={r1, @in={{0x2, 0x4e24, @empty}}, 0x100000, 0x5, 0x0, 0x3, 0x2d, 0xfffffffc}, 0x9c) 33.518494064s ago: executing program 34 (id=8828): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x2c, &(0x7f0000000040)=[@in6={0xa, 0x0, 0x0, @mcast1}, @in={0x2, 0x4e24, @private=0xa010101}]}, &(0x7f0000000180)=0x10) r2 = socket$inet(0x2, 0x1, 0x100) listen(r2, 0x9) listen(r2, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000001c0)={r1, @in={{0x2, 0x4e24, @empty}}, 0x100000, 0x5, 0x0, 0x3, 0x2d, 0xfffffffc}, 0x9c) 7.201016082s ago: executing program 1 (id=9161): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200), 0x806000) ioctl$FS_IOC_RESVSP(r1, 0x40305829, &(0x7f0000000380)={0x0, 0x0, 0x1bd, 0x9ffffd}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000003, 0x12, r1, 0x0) (async) r3 = socket(0x10, 0x2, 0x0) recvmmsg(r3, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) (async) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0x28, r4, 0x1, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1a}]}]}, 0x28}}, 0x80) 6.792668694s ago: executing program 1 (id=9166): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r0, 0x0, 0x14, 0x0, 0x0) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) socket$inet_mptcp(0x2, 0x1, 0x106) r1 = socket(0x8, 0x3, 0x0) ioctl$IMGETCOUNT(r1, 0x618e, 0x0) 3.399434707s ago: executing program 6 (id=9190): r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {0x0, 0x4}, {0xffff, 0xb}, {0xf, 0xffe0}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x240040e0}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) bind$alg(r3, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(seed-generic)\x00'}, 0x58) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000280)={@cgroup, 0xffffffffffffffff, 0x10}, 0x20) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r5) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) bind$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r7, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r7, 0x541b, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNSETTXFILTER(r8, 0x400454d1, &(0x7f0000000380)=ANY=[@ANYBLOB="0000090030daadd40925aaaaaa7f00bbbbbbbbbbbbbbaaaaaaaaaabbaaaaaaaaaad0f68cd678aa31aaaaaaaaaabbaaaaaaaaaabbedffffffffff"]) 2.712262843s ago: executing program 6 (id=9201): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000240)={'geneve0\x00', &(0x7f0000000200)=@ethtool_rxfh={0x46, 0x4, 0x400, 0x1, 0x6, "f7b6fe"}}) r5 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$inet6_group_source_req(r5, 0x29, 0x2e, &(0x7f00000001c0)={0x0, {{0xa, 0x0, 0xdb, @mcast1={0xff, 0xf}}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108) setsockopt$inet6_group_source_req(r5, 0x29, 0x2f, &(0x7f00000001c0)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0xf}}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108) r6 = syz_init_net_socket$x25(0x3, 0x5, 0x3) ioctl$SIOCX25SFACILITIES(r6, 0x89e3, &(0x7f0000000180)) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x48, 0x32, 0x1, 0xfffffffd, 0x25dfdbfb, {0x0, 0x0, 0x11}, [{0x34, 0x1, [@m_police={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x3, {0x1}}, {0xc}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x8800}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="5512f916dc42849915b235d27ac85d26fd527ecd2380b3797a456e948a8366816be4c99a0abce0923a4aca030f1dbc1ab02daa3ec26edd37d0d7fea90c1b147bcaad5e8b555ae5d82bec351d8b289259d35706", @ANYRES16=r2, @ANYBLOB="010080000000000000000800000008000300", @ANYRES32=r1, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x2000c000) 2.638208567s ago: executing program 1 (id=9202): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) (async) sendmmsg(r1, &(0x7f0000000700)=[{{0x0, 0x0, 0x0}}], 0x1, 0x9200000000000000) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_RX(r2, 0x11a, 0x2, &(0x7f0000000000)=@ccm_128={{0x303}, "b00b7190737d53af", "f2d9e40befacec7359e151657d645442", "19bb6210", "691cfc1d79415a46"}, 0x28) (async) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@newlink={0x48, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x5}, @IFLA_BR_GROUP_ADDR={0xa, 0x14, @link_local}]}}}]}, 0x48}}, 0x0) 2.568816608s ago: executing program 6 (id=9204): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, 0x0, 0x0) r1 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPCONNADD(r1, 0x400442c8, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000900)=ANY=[], 0x8c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) write$cgroup_devices(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRESDEC], 0x9) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x40938, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x68010}, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) (async) connect$bt_l2cap(r0, 0x0, 0x0) (async) syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) (async) ioctl$sock_bt_bnep_BNEPCONNADD(r1, 0x400442c8, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000900)=ANY=[], 0x8c}}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) (async) write$cgroup_devices(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRESDEC], 0x9) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) (async) socket$netlink(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x40938, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x68010}, 0x0) (async) 1.31702539s ago: executing program 6 (id=9207): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x4e22, @remote}]}, &(0x7f0000000180)=0x10) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$sock_timeval(r2, 0x1, 0x14, &(0x7f0000000040)={0x0, 0x2710}, 0x10) read(r2, &(0x7f0000000100)=""/41, 0x29) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$sock_linger(r4, 0x1, 0xd, &(0x7f0000000340)={0x1}, 0x8) r5 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r5) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x10, 0x4, &(0x7f0000000480)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x94) write$cgroup_subtree(r5, &(0x7f0000000540)=ANY=[@ANYBLOB="00000004000000000000000000"], 0x17) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r7 = openat$cgroup_devices(r6, &(0x7f00000001c0)='devices.deny\x00', 0x2, 0x0) r8 = socket$inet_sctp(0x2, 0x5, 0x84) sendmmsg$inet(r8, &(0x7f0000002180)=[{{&(0x7f0000000080)={0x2, 0x4e20, @private=0xa010102}, 0x10, &(0x7f00000001c0)=[{&(0x7f00000000c0)="99", 0x1}], 0x1}}], 0x1, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r8, 0x84, 0x1c, &(0x7f0000000180), &(0x7f0000000280)=0x4) write$cgroup_devices(r7, &(0x7f0000000000)=ANY=[@ANYBLOB="62242a3a8fe339a9"], 0x8) close(r4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000017c0)={r5, 0x0, 0x1000, 0xf0, &(0x7f00000005c0)="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", &(0x7f00000015c0)=""/240, 0x466, 0x0, 0xbc, 0xf, &(0x7f00000016c0)="7f4eebfc8a1f9c8de7923f1207739e83ce39f1220b0a4ba3f4087ebb6f95cb2f58c38274e9b71eeb014586d2efb083cd2884565e254a6e6a41806310e98d305e67d4b8a0c6687e545fa5d56b7a4bacf4f634e653df23eb22f8da0b24eb62fcdb1e80c632135cc2e512cd379c34255863d40e01e895c3523efce836002c6ffb07df63e4acf107c5d895c59b6cedd556e3af742fcc52aa299480e0c2000d77b44054ef19a5154530e499abad46508cc0ac25d12e204f419064608dbaf0", &(0x7f0000001780)="c3bcfa97fe4b3ad6c8f9be4f0dac52", 0x7, 0x0, 0x101}, 0x50) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r4, 0x400c6615, &(0x7f0000000580)={0x0, @aes128}) r9 = socket$pppl2tp(0x18, 0x1, 0x1) getsockopt(r9, 0x1, 0x29, 0x0, &(0x7f0000000080)) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000001840)=@nat={'nat\x00', 0x670, 0x5, 0x550, 0x228, 0x3e8, 0xffffffff, 0x3e8, 0x228, 0x4b8, 0x4b8, 0xffffffff, 0x4b8, 0x4b8, 0x5, 0x0, {[{{@ip={@rand_addr=0x64010104, @local, 0xff0000ff, 0xffffff00, 'veth1_to_bridge\x00', 'ip6erspan0\x00', {}, {0xff}, 0x16}, 0x0, 0x1f0, 0x228, 0x48, {}, [@common=@unspec=@string={{0xc0}, {0x5, 0xc, 'fsm\x00', "4801d3e4c6b2bfd892aa7400051624fa86999b13d39b99407a9b7abe75a728baa18da576811985de44110b8602025e1298ea55f1c5087ab16f67b18ca90ac68f0b3d6a068f727f7d23fa5fad26a59a5da2651212bdf9d29248ae63e2349b2470915eea2c39ade5129ff26b6fe772493180cfda2cdd49412e9469d85abdb467ba", 0x79, 0x2, {0x1}}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@dev={0xfe, 0x80, '\x00', 0x10}, [0xffffff00, 0xffffffff, 0x0, 0xff000000], @ipv4=@dev={0xac, 0x14, 0x14, 0x29}, [0x0, 0xffffff00, 0xffffffff, 0xffffffff], @ipv6=@local, [0xff000000, 0xff, 0x0, 0xff], @ipv4=@broadcast, [0xffffffff, 0x0, 0xff], 0x7, 0x1, 0x5c, 0x4e1c, 0x4e22, 0x4e24, 0x4e24, 0x814, 0x20c0}, 0x80, 0x2}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0xae, {0xf, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id=0x65, @port=0x4e24}}}}, {{@ip={@loopback, @multicast1, 0xff000000, 0x0, 'ip6_vti0\x00', 'netpci0\x00', {0x17e}, {0xff}, 0x6c, 0x2, 0x2}, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xfffc, 0xd, 0x1}, {0x0, 0x4, 0x3}, 0x1000, 0x100}}}, {{@ip={@multicast2, @broadcast, 0xff, 0x0, 'virt_wifi0\x00', 'batadv_slave_1\x00', {}, {}, 0x0, 0x0, 0x4}, 0x0, 0xe8, 0x120, 0x0, {}, [@common=@ttl={{0x28}, {0x3, 0x3}}, @common=@osf={{0x50}, {'syz0\x00', 0x0, 0x8, 0x0, 0x1}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x2, @loopback, @empty, @icmp_id=0x68, @port=0x4e22}}}}, {{@uncond, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@icmp={{0x28}, {0x4, "1542", 0x1}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @remote, @dev={0xac, 0x14, 0x14, 0x29}, @icmp_id, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0xfffffefc) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)=ANY=[@ANYRES16=r3], 0x20}], 0x1, 0x0, 0x0, 0x84}, 0x44845) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xf, &(0x7f0000001f40)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3c2a, 0x0, 0x0, 0x0, 0xdf2}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000400)={r1, @in6={{0xa, 0x4e21, 0x4, @empty, 0x9}}, 0x4, 0x4, 0x624e, 0xa, 0x55, 0x4000007f}, 0x9c) 1.256260185s ago: executing program 1 (id=9208): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f0000000100), 0x3) setsockopt$inet6_tcp_int(r4, 0x11a, 0x3, 0x0, 0x0) r5 = openat$cgroup_int(r3, &(0x7f0000000040)='hugetlb.1GB.rsvd.failcnt\x00', 0x2, 0x0) preadv(r5, &(0x7f0000001200)=[{&(0x7f0000000100)=""/4096, 0x1000}], 0x1, 0x0, 0x0) splice(r5, 0x0, r2, 0x0, 0xf3a, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x3, 0x1c, &(0x7f0000001840)=@ringbuf={{0x18, 0x6}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@snprintf={{}, {0x5, 0x3, 0x3, 0xa, 0x9}, {0x5}, {0x3, 0x3, 0x3, 0xa, 0xa}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {}, {0x15, 0x0, 0x0, 0x76}}], {{}, {0x5}, {0x28}}}, &(0x7f00000003c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x90) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) (async) pipe(&(0x7f0000000340)) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) (async) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) (async) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f0000000100), 0x3) (async) setsockopt$inet6_tcp_int(r4, 0x11a, 0x3, 0x0, 0x0) (async) openat$cgroup_int(r3, &(0x7f0000000040)='hugetlb.1GB.rsvd.failcnt\x00', 0x2, 0x0) (async) preadv(r5, &(0x7f0000001200)=[{&(0x7f0000000100)=""/4096, 0x1000}], 0x1, 0x0, 0x0) (async) splice(r5, 0x0, r2, 0x0, 0xf3a, 0x4) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x3, 0x1c, &(0x7f0000001840)=@ringbuf={{0x18, 0x6}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@snprintf={{}, {0x5, 0x3, 0x3, 0xa, 0x9}, {0x5}, {0x3, 0x3, 0x3, 0xa, 0xa}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {}, {0x15, 0x0, 0x0, 0x76}}], {{}, {0x5}, {0x28}}}, &(0x7f00000003c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x90) (async) 1.185481259s ago: executing program 5 (id=9210): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x3}, 0x90) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) ioctl(r1, 0x8b1a, &(0x7f0000000040)) r2 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000001440)=ANY=[@ANYBLOB="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"], 0xfce) 1.085429438s ago: executing program 1 (id=9212): socket(0x10, 0x3, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) 1.032819904s ago: executing program 7 (id=9213): sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001240)=ANY=[@ANYBLOB="a800000000010104000000000000000002000000240001801400018008000100e000000108000200ac1e01010c00028005000100000009002400028014000180080001000000010008000200ac1e00010c0002800500010000000000440010800800014000000006080003400000002b080003400000000808000240000000400800014000000000fb0001400000000708000140000044f10800034000000003080007"], 0xa8}}, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x200880, 0x0) ioctl$RFKILL_IOC_MAX_SIZE(r0, 0x2, &(0x7f0000000100)=0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x7, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000046000200000000000700000000000000050001000000000085100000faffffff95cab426b4124a21caa32d0adb64debb414a3a6fbf4351d08d067e268b2aa6b355354013327cb0e6d3575e037821a37b5801a875"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xde}, 0x94) 956.345928ms ago: executing program 1 (id=9214): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000440), 0x10) listen(r1, 0x6d5) r2 = accept(r1, &(0x7f0000000340)=@rc={0x1f, @none}, &(0x7f0000000400)=0x80) recvfrom$rose(r2, &(0x7f0000000c40)=""/76, 0x4c, 0x2, &(0x7f0000000480)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, 0x1, [@null, @default, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x40) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000100)={0x28, 0x0, 0x0, @hyper}, 0x10) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r2, 0x84, 0x12, &(0x7f0000000cc0), &(0x7f0000000d00)=0x4) r5 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="2800000014001901000000000000000228"], 0x28}}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x25dddbfd, {0x0, 0x0, 0x0, r9, {0x0, 0xffff}, {0xffff, 0xffff}, {0x1, 0xd}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) pread64(r6, &(0x7f0000000600)=""/244, 0xf4, 0x6) ioctl$F2FS_IOC_GET_FEATURES(0xffffffffffffffff, 0x8004f50c, &(0x7f0000000580)) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000700)=@newtfilter={0x51c, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r9, {0x0, 0x8}, {}, {0xa}}, [@filter_kind_options=@f_bpf={{0x8}, {0x4f0, 0x2, [@TCA_BPF_POLICE={0x4b8, 0x2, [@TCA_POLICE_AVRATE={0x8, 0x4, 0x8}, @TCA_POLICE_TBF={0x3c, 0x1, {0x800, 0x6, 0x8, 0x3, 0x1ff, {0x8, 0x2, 0x37, 0x9, 0xb17, 0x80000001}, {0x6, 0x1, 0x1, 0x4, 0xdc0, 0x40}, 0x4, 0x8, 0x8}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xf4, 0xbe, 0x703, 0x2, 0x5, 0x1, 0x5, 0x5, 0x3, 0x3, 0x5, 0x2, 0xf, 0x0, 0xfff, 0x3, 0x3ff, 0x7, 0xfffffe01, 0x10001, 0x6, 0x101, 0x4, 0x1c26, 0x24d, 0x6, 0x3e8, 0xffffffff, 0xdf, 0x10000, 0x1ff, 0x4, 0x4, 0x7, 0x9, 0xf06, 0x8, 0x40, 0x1, 0x6, 0x9, 0x57, 0x6, 0x0, 0x2000000, 0x1, 0x1, 0x6, 0xffffffe0, 0xffffffff, 0xffff, 0x3, 0x4000000, 0x0, 0x2, 0x1fe, 0x8498, 0x3, 0x401, 0x8, 0x4, 0x7fff, 0xd, 0x0, 0x4, 0xfffffffe, 0xdc000000, 0x401, 0xb6e, 0x9, 0x8000, 0x8, 0x80000000, 0x4, 0x9, 0x600000, 0x7, 0x5, 0x7, 0x0, 0x3, 0x4, 0x8, 0xffffffff, 0x6, 0x6, 0x6, 0x9, 0x8, 0x9, 0xa, 0x7ff, 0x9, 0x4, 0x6, 0x1, 0xf, 0x3, 0x6, 0x8, 0x2, 0x6, 0x8, 0x6, 0x311b, 0x40, 0xd18, 0x1d, 0x192e, 0x7, 0xfde, 0x2e4, 0x2, 0x0, 0x8, 0x1, 0x0, 0x6, 0x3, 0x8, 0x6f04, 0x2, 0x7, 0x3, 0x66, 0x200, 0x5, 0xc, 0x1, 0x0, 0x6, 0x6c6e, 0x2, 0xb09, 0x9, 0x18eb, 0x203, 0xfffeffff, 0x2, 0x0, 0xfffffffc, 0xa, 0xffffffe8, 0x7, 0x100, 0x80, 0x1, 0x3, 0xc8b, 0x3, 0x2, 0x1, 0x9, 0x8, 0x3, 0x3, 0xc, 0x1f26916, 0x7, 0x1, 0x6, 0x6, 0x651e, 0x7fff, 0x101, 0x3, 0xa0, 0x1, 0xfffffffc, 0xf, 0x2, 0x878, 0x8, 0x9, 0x9, 0x4, 0xaa460000, 0x7, 0x7, 0x0, 0xa7, 0xe, 0x3, 0x9, 0x5, 0x6, 0xfff, 0x3f40, 0x81, 0x2, 0xfffffffd, 0xff9, 0x800, 0x1, 0x3, 0x6, 0x6, 0x8, 0x6, 0x8, 0xfffffffa, 0x9, 0xffff4f61, 0x5, 0x4, 0xff, 0x3, 0x81, 0x8, 0x2b2, 0x3, 0x7, 0x100, 0x6, 0x6d, 0x3, 0x4, 0x7, 0x3, 0x5, 0x2ebacb1e, 0x9, 0x1, 0x8, 0x2, 0x9, 0x3c, 0xb, 0xe77d, 0x0, 0x265, 0x1, 0x9, 0x1cdc, 0x863f, 0x9, 0x9, 0x100, 0xd, 0x3, 0x101, 0x1, 0xa, 0x5, 0x4, 0x6, 0x9, 0x2, 0x7, 0x6, 0x5, 0x1, 0x5, 0x0, 0x3, 0x1000000]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0x20000000, 0x8000, 0x101, 0x5, {0x6, 0x2, 0x8, 0x6, 0x3c, 0xd1}, {0x26, 0x2, 0x469b, 0xe, 0x8, 0x3}, 0x659, 0xffffffff, 0xcfe0}}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x9}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x8000000000000001}, @TCA_POLICE_RESULT={0x8, 0x5, 0x83}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x2}, @TCA_POLICE_RESULT={0x8, 0x5, 0x80000000}]}, @TCA_BPF_FD={0x8}, @TCA_BPF_CLASSID={0x8, 0x3, {0xffe0, 0x9}}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x3}, @TCA_BPF_OPS={{0x6, 0x4, 0x2}, {0x14, 0x5, [{0x8, 0x0, 0x6, 0x4}, {0x8, 0x1f, 0x4, 0x6}]}}]}}]}, 0x51c}, 0x1, 0x0, 0x0, 0x260008e8}, 0x804) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x6, 0x4, &(0x7f0000000d40)=ANY=[@ANYBLOB="1800000002000000000000000010000066001800000000009500000000000000b2f90e7cff5dfd8960d2d611b8cf2618f8f92827ecc0cc8a0c9c475013afe40219778ab04eaa426af99fa932690d17003544"], &(0x7f0000000000)='GPL\x00', 0x3}, 0x94) r10 = accept4$packet(r7, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000280)=0x14, 0x80800) r11 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r13 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r13, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@newqdisc={0x8c, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r12, {0x0, 0xf}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xc, 0x1, 0x0, 0x4], 0x0, [0x5, 0x6, 0x2, 0x0, 0x8, 0x0, 0x9, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x8001]}}]}}]}, 0x8c}}, 0x0) setsockopt$packet_add_memb(r10, 0x107, 0x1, &(0x7f00000002c0)={r9, 0x1, 0x6, @broadcast}, 0x10) 955.160178ms ago: executing program 3 (id=9215): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001e00)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r2, 0x18000000000002a0, 0x160, 0x0, &(0x7f0000000380)="b9e403c6630d698cb8a00b04339c", 0x0, 0x7ec, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=@newlink={0x40, 0x10, 0x401, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x40000}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xfffffffffffffea5, 0x2, 0x0, 0x1, [@IFLA_BR_MULTI_BOOLOPT={0xc, 0x2e, {0x3, 0x3}}]}}}]}, 0x40}}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) bpf$PROG_LOAD(0x15, &(0x7f0000000480)={0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x79, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x90) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00'}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) close(0x3) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="10000000040000000800000002"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000200)={'lo\x00', 0x0}) ioctl$TUNGETDEVNETNS(r0, 0x54e3, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$nl_route(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv4_newaddr={0x20, 0x14, 0x503, 0x0, 0x0, {0x2, 0x18, 0x0, 0x0, r8}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) r9 = socket$inet_tcp(0x2, 0x1, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) setsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, 0x0) sendmsg$nl_route(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@ipv4_newaddr={0x20, 0x14, 0x503, 0x800000, 0x25dfdbff, {0x2, 0x1f, 0x20, 0x0, r12}, [@IFA_LOCAL={0x8, 0x2, @loopback}]}, 0x20}, 0x1, 0x0, 0x0, 0xc090}, 0x20008840) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f00000001c0)={0x0, 0x1}, &(0x7f0000000240)=0x8) ioctl$sock_inet_SIOCSIFADDR(r9, 0x8916, &(0x7f0000000180)={'lo\x00', {0x2, 0x4e21, @empty=0x7f000000}}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r5}, &(0x7f0000000080), &(0x7f0000000240)=r6}, 0x20) write$tun(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="1c00000e01000b00000014"], 0x36) 954.591699ms ago: executing program 5 (id=9216): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0xa2ec8b013dc0bd73, &(0x7f0000002580)=[{&(0x7f0000000180)={0x14, 0x13, 0x1, 0x0, 0x0, "", [@typed={0x5}]}, 0x14}], 0x1}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=@newlink={0x54, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, 0x0, 0x300}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x5, 0x1}, @IFLA_BR_NF_CALL_IP6TABLES={0x5, 0x25, 0x1}, @IFLA_BR_NF_CALL_IP6TABLES={0x5}]}}}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x8044) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r3, &(0x7f0000000240)=[{&(0x7f00000000c0)="6dd3403ec9c826f56189fb0c6a1002117696cfd7084e1678380770558aba4b3f5b88118f709b50bfad31a66f0aff8883d12d40625164b7d326fcc6f193d128cd6c3ecc"}, {&(0x7f0000000140)="5a29ab02dc835f848614f44e33664ff94a326ed7ac6bd1ae2838ade4379fefd9aef255af0d0a504d1ac58232f6470aabfc71057ea359d3e1ea3ca2da4ada7d583087cf176ae639ed82863cd18d3963908660b131208a0f099e2154f7e0ec4ea06cacf6591008c3bf56a0b1d5dce69d822e4250260bd9d96232ba0b22073b7f178e29bea4f9dbee7feb36c1c746f336c4b76de70bea5963764a7cd10dec4823bd00d9602bcf822fa7fc56a9bfd22b9a44f79f15f1b0db5e593dae3a08b1de382346367109fe9a2a79885d5cf9319d7a736cc9a1c8c3182169"}], 0x127d) write$cgroup_devices(r3, &(0x7f0000000100)={'b', ' *:* ', 'rwm\x00'}, 0xa) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newtaction={0x50, 0x30, 0x48b, 0x70bd26, 0x40000000, {}, [{0x3c, 0x1, [@m_ctinfo={0x44, 0xd, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x9}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc}}}]}]}, 0x50}}, 0x481d5) sendmsg$nl_generic(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="340000003e0007010000000000000000017c00000400fc800c0001800600060065580000080002"], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCBRDELBR(r4, 0x89a2, &(0x7f0000000200)='bridge0\x00') 947.423909ms ago: executing program 7 (id=9217): syz_emit_ethernet(0x5a, &(0x7f0000000140)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0xe, 0x4, 0x0, 0x0, 0x4c, 0x0, 0x0, 0xd9, 0x6, 0x0, @private=0xa210104, @local, {[@timestamp={0x44, 0x24, 0x27, 0x0, 0x4, [0x0, 0xec8, 0x5, 0xe3, 0x5d, 0x2, 0x4, 0x4]}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x80}}}}}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r0, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r1, &(0x7f0000000380)={0x1f, 0x1, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x15) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r2, 0x0, 0x2, &(0x7f0000000000), 0x10) 798.742972ms ago: executing program 7 (id=9218): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000000c0)='neigh_create\x00', r0}, 0x18) r1 = socket(0x8000000010, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000001c0)={'gretap0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x20, 0x8000, 0x4, 0x100, {{0x19, 0x4, 0x0, 0x19, 0x64, 0x68, 0x0, 0x9, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x10}, @dev={0xac, 0x14, 0x14, 0xf}, {[@lsrr={0x83, 0x13, 0xb2, [@private=0xa010101, @remote, @empty, @dev={0xac, 0x14, 0x14, 0x1b}]}, @cipso={0x86, 0x1b, 0xffffffffffffffff, [{0x0, 0x5, "709238"}, {0x7, 0x5, "0218ea"}, {0x0, 0xb, "3c94a96c2f9bb2e12a"}]}, @ssrr={0x89, 0xb, 0xaf, [@initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0xf}]}, @rr={0x7, 0x7, 0x6f, [@loopback]}, @generic={0x83, 0xd, "69578af87df8a5a73325a2"}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000480)={'tunl0\x00', &(0x7f00000003c0)={'syztnl2\x00', 0x0, 0x8, 0x20, 0xad86, 0x2, {{0x23, 0x4, 0x2, 0x2, 0x8c, 0x64, 0x0, 0x1, 0x4, 0x0, @private=0xa010100, @multicast1, {[@ssrr={0x89, 0x7, 0xcc, [@multicast2]}, @cipso={0x86, 0x40, 0x0, [{0x2, 0x4, "f0fe"}, {0x7, 0x6, "19170154"}, {0x2, 0x6, "5e396aba"}, {0x5, 0x12, "84e8824523e0f3d1e1fe560aa8f6bf5e"}, {0x6, 0x6, "c599d5dd"}, {0x1, 0x2}, {0x0, 0x5, "1fe707"}, {0x1, 0xb, "3f42d74e2cf8d1e2d7"}]}, @timestamp_addr={0x44, 0xc, 0xe7, 0x1, 0x5, [{@rand_addr=0x64010100}]}, @ssrr={0x89, 0x23, 0x89, [@broadcast, @empty, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @dev={0xac, 0x14, 0x14, 0x23}, @dev={0xac, 0x14, 0x14, 0x3b}, @private=0xa010102]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000580)={'syztnl1\x00', &(0x7f00000004c0)={'syztnl1\x00', 0x0, 0x7, 0x7800, 0xd7, 0x7fff, {{0x24, 0x4, 0x3, 0x8, 0x90, 0x64, 0x0, 0x5, 0x29, 0x0, @remote, @private=0xa010100, {[@timestamp_prespec={0x44, 0x44, 0xf1, 0x3, 0xb, [{@local, 0xa299}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x5}, {@multicast2, 0x5}, {@broadcast, 0x9}, {@empty, 0x7}, {@private=0xa010101, 0xe2}, {@dev={0xac, 0x14, 0x14, 0x33}}, {@empty}]}, @timestamp_addr={0x44, 0x14, 0x4b, 0x1, 0x3, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1}, {@empty, 0x8}]}, @timestamp={0x44, 0x14, 0x73, 0x0, 0x1, [0x8, 0x2, 0x7, 0x0]}, @cipso={0x86, 0xe, 0x0, [{0x1, 0x8, "428d1e34cbec"}]}]}}}}}) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'pimreg0\x00', 0x0}) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0x3, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140)={r7, r6, 0x25, 0x0, @val=@netfilter={0x1, 0x0, 0x7}}, 0x20) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000640)={'syztnl2\x00', &(0x7f00000005c0)={'syztnl1\x00', 0x0, 0x4, 0x6, 0x5, 0x7, 0x21, @remote, @empty, 0x8, 0x8, 0x800}}) r9 = socket(0x10, 0x3, 0x0) r10 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0xf0b, 0xfffffffe, 0x25dfdbff, {0x0, 0x0, 0x0, r11, {}, {0xffff, 0xffff}, {0xb, 0x9}}, [@qdisc_kind_options=@q_pie={{0x8}, {0xc, 0x2, [@TCA_PIE_ALPHA={0x8, 0x4, 0x20}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2004c084}, 0xd0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000680)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_TSINFO_GET(r1, &(0x7f0000000840)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000800)={&(0x7f00000006c0)={0x134, 0x0, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}]}]}, 0x134}}, 0x40) write(r1, &(0x7f00000002c0)="fc0000001c000704ab5b2509b86803000aab087a0400000001481193210001c0f0030584050060100000000000039815fa2c53c28648000000b9d95662537a00bc000c00f0ff7f0000b400600033d44000040560916a0033f436313012dafd5a32e273fc83ab82d710f74cec184406f90d435ef8b29d3ef3d92c94170e5bba2e177312e081bea05d3a021e8ca062914a46ccfc510bb73c9455cdc8363ae4f5df77bc4cfd6239ec2a0f0d1bcae5fa0f5f9dcdd51af51af8502943283f4bb102b2b8f5566791cf190201ded815b2ccd243f395ed94e0ad91bd6433802e0784f2013cd1890058a10000c880ac801fe4af000049f0d4796f0000090548de", 0xfc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000000c0)='neigh_create\x00', r0}, 0x18) (async) socket(0x8000000010, 0x2, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000001c0)={'gretap0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x20, 0x8000, 0x4, 0x100, {{0x19, 0x4, 0x0, 0x19, 0x64, 0x68, 0x0, 0x9, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x10}, @dev={0xac, 0x14, 0x14, 0xf}, {[@lsrr={0x83, 0x13, 0xb2, [@private=0xa010101, @remote, @empty, @dev={0xac, 0x14, 0x14, 0x1b}]}, @cipso={0x86, 0x1b, 0xffffffffffffffff, [{0x0, 0x5, "709238"}, {0x7, 0x5, "0218ea"}, {0x0, 0xb, "3c94a96c2f9bb2e12a"}]}, @ssrr={0x89, 0xb, 0xaf, [@initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0xf}]}, @rr={0x7, 0x7, 0x6f, [@loopback]}, @generic={0x83, 0xd, "69578af87df8a5a73325a2"}]}}}}}) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000480)={'tunl0\x00', &(0x7f00000003c0)={'syztnl2\x00', 0x0, 0x8, 0x20, 0xad86, 0x2, {{0x23, 0x4, 0x2, 0x2, 0x8c, 0x64, 0x0, 0x1, 0x4, 0x0, @private=0xa010100, @multicast1, {[@ssrr={0x89, 0x7, 0xcc, [@multicast2]}, @cipso={0x86, 0x40, 0x0, [{0x2, 0x4, "f0fe"}, {0x7, 0x6, "19170154"}, {0x2, 0x6, "5e396aba"}, {0x5, 0x12, "84e8824523e0f3d1e1fe560aa8f6bf5e"}, {0x6, 0x6, "c599d5dd"}, {0x1, 0x2}, {0x0, 0x5, "1fe707"}, {0x1, 0xb, "3f42d74e2cf8d1e2d7"}]}, @timestamp_addr={0x44, 0xc, 0xe7, 0x1, 0x5, [{@rand_addr=0x64010100}]}, @ssrr={0x89, 0x23, 0x89, [@broadcast, @empty, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @dev={0xac, 0x14, 0x14, 0x23}, @dev={0xac, 0x14, 0x14, 0x3b}, @private=0xa010102]}]}}}}}) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000580)={'syztnl1\x00', &(0x7f00000004c0)={'syztnl1\x00', 0x0, 0x7, 0x7800, 0xd7, 0x7fff, {{0x24, 0x4, 0x3, 0x8, 0x90, 0x64, 0x0, 0x5, 0x29, 0x0, @remote, @private=0xa010100, {[@timestamp_prespec={0x44, 0x44, 0xf1, 0x3, 0xb, [{@local, 0xa299}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x5}, {@multicast2, 0x5}, {@broadcast, 0x9}, {@empty, 0x7}, {@private=0xa010101, 0xe2}, {@dev={0xac, 0x14, 0x14, 0x33}}, {@empty}]}, @timestamp_addr={0x44, 0x14, 0x4b, 0x1, 0x3, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1}, {@empty, 0x8}]}, @timestamp={0x44, 0x14, 0x73, 0x0, 0x1, [0x8, 0x2, 0x7, 0x0]}, @cipso={0x86, 0xe, 0x0, [{0x1, 0x8, "428d1e34cbec"}]}]}}}}}) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'pimreg0\x00'}) (async) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0x3, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140)={r7, r6, 0x25, 0x0, @val=@netfilter={0x1, 0x0, 0x7}}, 0x20) (async) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000640)={'syztnl2\x00', &(0x7f00000005c0)={'syztnl1\x00', 0x0, 0x4, 0x6, 0x5, 0x7, 0x21, @remote, @empty, 0x8, 0x8, 0x800}}) (async) socket(0x10, 0x3, 0x0) (async) socket$packet(0x11, 0x2, 0x300) (async) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) (async) sendmsg$nl_route_sched(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0xf0b, 0xfffffffe, 0x25dfdbff, {0x0, 0x0, 0x0, r11, {}, {0xffff, 0xffff}, {0xb, 0x9}}, [@qdisc_kind_options=@q_pie={{0x8}, {0xc, 0x2, [@TCA_PIE_ALPHA={0x8, 0x4, 0x20}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2004c084}, 0xd0) (async) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000680)) (async) sendmsg$ETHTOOL_MSG_TSINFO_GET(r1, &(0x7f0000000840)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000800)={&(0x7f00000006c0)={0x134, 0x0, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}]}]}, 0x134}}, 0x40) (async) write(r1, &(0x7f00000002c0)="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", 0xfc) (async) 698.650211ms ago: executing program 3 (id=9219): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000006000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc3c0000000c0a01010000000f000000000a0000060900020073797a31000000000900010073797a3100000000100003800c000080080003400000000214000000110001"], 0xa0}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)={{0x14, 0x10, 0x1, 0x0, 0x8400, {0x7}}, [@NFT_MSG_DELSETELEM={0x3c, 0xe, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x64}, 0x1, 0x0, 0x0, 0x8080}, 0x400c040) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0xa, 0x9, 0x8, 0x2}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x6, &(0x7f0000000180)=@framed={{0x18, 0x2}, [@map_fd={0x18, 0x3, 0x1, 0x0, r1}, @call={0x85, 0x0, 0x0, 0x26}]}, &(0x7f0000000000)='GPL\x00'}, 0x90) 694.231843ms ago: executing program 5 (id=9220): r0 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r1, &(0x7f00000003c0)={0x0, 0x10, &(0x7f0000000200)={&(0x7f0000000180)={0x28, r0, 0x1, 0x0, 0x0, {{}, {}, {0xc, 0x14, 'broadcast-link\x00'}}}, 0x28}}, 0x0) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r3, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4096, 0x1e67}, {&(0x7f00000000c0)=""/250, 0x4}], 0x2, 0x0, 0xd64}}], 0x300, 0x34000, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=ANY=[@ANYBLOB="18000000", @ANYRES16=r2, @ANYBLOB="a787000000ff000000000b00000404000180"], 0x18}}, 0x0) 552.320703ms ago: executing program 3 (id=9221): pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCRSSL2CALL(r1, 0x89e2, &(0x7f0000000040)=@default) r2 = socket$pptp(0x18, 0x1, 0x2) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000280)={@cgroup=r0, 0x8, 0x0, 0x3, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0x0, &(0x7f00000001c0)=[0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) write(r2, &(0x7f0000000100)="99b6ba6c26cde85677cbcc9e7a7a999adb5ddf3a3653ad4a533eee7a9afb6b3e374c58ad560796279d0f6696e8ed7f1b48b8fc34d23971ec72df8844e7ee43047964fbac0bc78490e9f3bf69ac09ac577e075075a889e9a1e6be851069a47b664aa4c0a22deab0273a46995262265a7a161c6ff431a96d78", 0x78) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSGCAUSE(r1, 0x89e0, &(0x7f0000000080)) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)={0xc8, 0x2c, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0xb5, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0xfac0b}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @loopback}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682"]}]}, 0xc8}], 0x1, 0x0, 0x0, 0x1}, 0x0) socket$rds(0x15, 0x5, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8923, &(0x7f00000000c0)={'lo\x00', @broadcast}) ioctl$sock_rose_SIOCRSCLRRT(r3, 0x89e4) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r0, 0x8947, &(0x7f0000000300)={'gre0\x00', @ifru_ivalue=0x4}) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x38, r7, 0x601, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x24, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x13, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x5}]}]}]}, 0x38}}, 0x0) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000500)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000004c0)={&(0x7f00000007c0)={0x1e4, r7, 0x20, 0x70bd2a, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x10c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @local}}, {0x14, 0x2, @in={0x2, 0x4e22, @empty}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x80000001}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xb221}, @TIPC_NLA_BEARER_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x53a5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x280}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0xffffffff, @local}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x952c, @private0, 0x7}}}}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc313}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'geneve1\x00'}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xefb}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x10001}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7fff}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7f}]}, @TIPC_NLA_MEDIA={0x40, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x66d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}]}, @TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x40000000}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x10000}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}]}]}, 0x1e4}, 0x1, 0x0, 0x0, 0x8000}, 0x40) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e21, 0x7, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1}, 0x1c) r8 = syz_init_net_socket$ax25(0x3, 0x2, 0xc4) getsockopt$ax25_int(r8, 0x101, 0x4, &(0x7f0000001640), &(0x7f0000001680)=0x4) 485.655023ms ago: executing program 5 (id=9222): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES16=r3, @ANYRES8=r0, @ANYRESOCT=r3], 0x1c}}, 0x0) write$nci(r0, &(0x7f0000000500)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x6, @b={0x9, 0x3, 0x1, 0x7, {0x9f, "9e9623cb523ae92ef0e57e150e35b7d020ed9abd6680b24dacdfa74fe866aab3ca986657fdf290e4d9ce665e95e1d540445d40a18c97ffa6684398c2baff8d0537fb9e88caf27978b7d2d84d5b8b1543b4369b563cc64aa9ad7fb2cae6e129fb1cd87741c8c6feee546c984719243a262a18656f4f9578abb122c340794d829a5d312ff25804d288eb0a06901517f94206702501ffca5d56d431c199fd23ff"}, 0x2}}, 0xa8) 404.923216ms ago: executing program 7 (id=9223): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'macvlan0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r1, @ANYBLOB="00001700000000001c0037800b0001206970768a616e08000c0002800600010000000000050027"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000140)={0x1c, 0x2, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) 381.730178ms ago: executing program 3 (id=9224): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'tunl0\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000004c0)={r1, 0x3, 0x6, @remote}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x6, &(0x7f00000002c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000000000000000000000f7ffffbe0000000000000095"], &(0x7f0000000000)='GPL\x00', 0x8}, 0x94) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) recvfrom$x25(r3, &(0x7f00000000c0)=""/69, 0x45, 0x100, &(0x7f0000000040)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x3}}, 0x12) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000000)={r1, 0x1, 0x6, @random="790c7edd3d8d"}, 0x10) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@getchain={0x24, 0x11, 0x1, 0x0, 0x2000001, {0x0, 0x0, 0x0, r1, {0x7}, {0xd, 0xc}, {0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20048054) socket$packet(0x11, 0x3, 0x300) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'tunl0\x00'}) (async) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000004c0)={r1, 0x3, 0x6, @remote}, 0x10) (async) socket$nl_route(0x10, 0x3, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x6, &(0x7f00000002c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000000000000000000000f7ffffbe0000000000000095"], &(0x7f0000000000)='GPL\x00', 0x8}, 0x94) (async) syz_init_net_socket$x25(0x9, 0x5, 0x0) (async) recvfrom$x25(r3, &(0x7f00000000c0)=""/69, 0x45, 0x100, &(0x7f0000000040)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x3}}, 0x12) (async) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000000)={r1, 0x1, 0x6, @random="790c7edd3d8d"}, 0x10) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@getchain={0x24, 0x11, 0x1, 0x0, 0x2000001, {0x0, 0x0, 0x0, r1, {0x7}, {0xd, 0xc}, {0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20048054) (async) 326.273709ms ago: executing program 7 (id=9225): unshare(0x22020600) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x7fff, 0x7}, 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000080)={r0, 0x0, 0x0, 0x4}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000710447000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) 276.920084ms ago: executing program 5 (id=9226): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000140)=@nat={'nat\x00', 0x670, 0x5, 0x350, 0x150, 0x210, 0xfeffffff, 0x150, 0x210, 0x2b8, 0x2b8, 0xffffffff, 0x2b8, 0x2b8, 0x5, 0x0, {[{{@ip={@loopback, @broadcast, 0x0, 0x0, 'pim6reg0\x00', 'vlan1\x00'}, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x13, @rand_addr, @empty, @port, @icmp_id}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @broadcast, @loopback}}}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@ttl={{0x28}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, 0x0, 0x0, 'batadv_slave_1\x00', 'xfrm0\x00'}, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @rand_addr, @remote}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3b0) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x4e24, 0x0, 'sh\x00', 0x3d, 0xfc, 0xf}, 0x2c) 275.096654ms ago: executing program 6 (id=9227): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001400128009000100626f6e640000000004000280080003"], 0x3c}}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x1c1341, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) socket$alg(0x26, 0x5, 0x0) (async) socket$alg(0x26, 0x5, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000005c0), 0x20000, 0x0) close(r2) (async) close(r2) openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x183081, 0x0) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x183081, 0x0) close(r3) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000280)={'nr0\x00', @link_local}) ioctl$SIOCSIFHWADDR(r2, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r4) socketpair(0x1, 0x3, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random='\x00\a\x00\x00\v\x00'}) (async) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random='\x00\a\x00\x00\v\x00'}) socket$igmp(0x2, 0x3, 0x2) (async) r5 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r5, 0x0, 0x5, &(0x7f0000000240)={@local, @dev={0xac, 0x14, 0x14, 0x28}, 0xfffe, "66c5aff8a7eb3af1f6cec2e7420000008c84aea31700", 0x3, 0x0, 0x80, 0x4f04}, 0x3c) setsockopt$MRT_ADD_MFC(r5, 0x0, 0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x3, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x80}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1e}, 0x90) sendmsg$nl_route(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)=@ipv4_newaddr={0xac, 0x14, 0x800, 0x70bd27, 0x25dfdbfc, {0x2, 0x64, 0x40}, [@IFA_LABEL={0x14, 0x3, 'netpci0\x00'}, @IFA_CACHEINFO={0x14, 0x6, {0x3, 0x8, 0xd, 0x1000}}, @IFA_BROADCAST={0x8, 0x4, @private=0xa010100}, @IFA_CACHEINFO={0x14, 0x6, {0x8000, 0x17e, 0xe, 0xff}}, @IFA_LABEL={0x14, 0x3, 'pim6reg0\x00'}, @IFA_LABEL={0x14, 0x3, 'ip6gre0\x00'}, @IFA_LABEL={0x14, 0x3, 'ipvlan1\x00'}, @IFA_LABEL={0x14, 0x3, 'ip6tnl0\x00'}]}, 0xac}, 0x1, 0x0, 0x0, 0x20002000}, 0x0) 182.59661ms ago: executing program 3 (id=9228): r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IP_VS_SO_SET_TIMEOUT(r0, 0x0, 0x8, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f0000000080)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x13}, [@ldst={0x4, 0x0, 0x4, 0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2}, 0x48) 174.829924ms ago: executing program 5 (id=9229): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=ANY=[@ANYRESDEC=r0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="01000000000000000000000000000000000000000000000000000000000000000056d70082b800a9890080000000000000929500000900000000000000ffffff0000000000000000b0acb9010000000000000000040000000000000000000000000400000000000000000000000000000a00100001"], 0xc4}}, 0x4c050) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[], 0x78}}, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000060a0b0400000000000000000200000054000480500001800a000100696e6e65720000004000028008000240000000840800034000000007080004400000000f08000140000000000c0005800c0001007061796c6f6164000c00028008000240000000050900010073797a30000000000900020073797a3200"], 0xa8}}, 0x0) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000040)={0xa}, 0x8) sendmsg$NFT_BATCH(r3, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000100)={&(0x7f0000000a40)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELCHAIN={0x19c, 0x5, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_FLAGS={0x8}, @NFTA_CHAIN_HOOK={0x58, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'macvtap0\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_HOOK_DEV={0x14, 0x3, 'batadv_slave_0\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x5700291e}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth1_to_bond\x00'}]}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x4}, @NFTA_CHAIN_USERDATA={0x103, 0xc, "a63c02d9d4fe57a2b2a41950a71b27c23f80289fd5965614781d485efdd9259149b2a65db469ab13973faac119fae410f06084c2c3ba35e0ccde3717aac0bcd51ae38c31e2050c03afefaf2326ec111875b91affd79dfaa213c42e50bc15a94219c7dde44d4600459d69d6e685e52dedb96a3343c4c1b31137b3e8067888b8989e71796742c498c0a35ca9974cb46ad629a0cfd1d94b138a6558360746a1c8793e3e3b0343ba338c71bf56724926c55d21b10c379eb02614a997e7009efec6af65bc525b9f4032f9acb952449e8fe42bb49faac3fbc67dbfdd4d082815c91d19eac0370fbb04c59bd68b4dfee237a457758870c1d4acd4ccae3df215d130b3"}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x201, 0x0, 0x0, {}, @NFT_OBJECT_TUNNEL=@NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}}, @NFT_MSG_DELSETELEM={0x1564, 0xe, 0xa, 0x301, 0x0, 0x0, {0x5, 0x0, 0x7}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1548, 0x3, 0x0, 0x1, [{0x864, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0x158, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x7d, 0x1, "3b0c42a038887ff349997ac7b053ba1ae709977659ef2a845f1011a2066cf4776d1c3cfbed5ceeb5da2bb017d7bb5f09d47f5a2a061045271ac9c782b6d1268caf7e605e2e440cd1c2e1d24f02cb96573126954e37ed092152450df5ab4e2c0fd902fd5a809395c3def2f273831a9ce94339c7f7e7f530961a"}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VALUE={0x31, 0x1, "4dcc50e4f882fc3ef07240a96609fc43ebdacb1c7ee4ee51baff59cbb4deb3b90a6bb53bf5195d90524c9cedd8"}, @NFTA_DATA_VALUE={0x26, 0x1, "1968f3c41316513e3a6d780f393c379a85b587dc3d3e14b95a5587c37ea1576a3e15"}, @NFTA_DATA_VERDICT={0x5c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}]}, @NFTA_SET_ELEM_KEY_END={0xf8, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VALUE={0xc2, 0x1, "a0b13bbd58775444f0b910026934e1bc67a1c9f401d4f77a36a8880c42af892d5cb5b1211d143ee73bcefff1d65ccbf8cda7bb5f50437192fc7cb781dd64d72e3a6ebfbf6c0bcf4f1a04f2da6ee61910447f2aa4ff2617636f5edb334536130823a54838472e94ffa8f0a445c403261f29d690c0f1a91bdc4f9eb04490f14b639c3dc7ac6877e6551215ad1758b4e122662217bafc37fe184492d5e56553ddd7743f47fb8e5c5c2fdaecfae779047c83869df7616105cacfc8e9b5cf5cab"}, @NFTA_DATA_VALUE={0x24, 0x1, "312217705aa5b12ca4c948347e2fb6f349107e26639df65383bb25947c639a6d"}]}, @NFTA_SET_ELEM_KEY_END={0x2b0, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x50, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VALUE={0x87, 0x1, "0f5598c6738c2ef1857d251cbd7e887e64be5d89d1e02f6e856b94540ea4f9d8706d4affcf1935451f1e8228ff7fbaac264d50cda7c950aff166de0f2f2f24c595c2e07b2b8fe4146f55e30f70d09461e0e9769b9206921ab1e24290b71ed247eb43eb487bfe2237ac3a5064864c1cf79a41d0c557a6fd44e0708332d55a79db13c93e"}, @NFTA_DATA_VALUE={0x65, 0x1, "3a5702cd1741bfe92579071cf998aa24268232c6533b80631fb9c77de303b6ac8e68f32be49633ae40da34683d157a1c40e13bc57ae1faf2765f847f6005ffcba2eac383c62a457528b9fc62919887e0b5a5ae5df8454fee70a394bf441ba82b30"}, @NFTA_DATA_VALUE={0xfd, 0x1, "5cf1ca2bdb619ed00b2b6a7b198133a24d02345ee61418b792f3ac1119dfd6485f771a24a8ef270f0871b16640d7e2ac5715b95505e09ed01fc128eccc63e8ea91816fb333b1d69de6e91284fcf7faf055af59937d30f7ad65a288fc236d175f9394b4b7d8f688b1bc2bb43353e26291dd976b54006a34cd8871a2af9c866dec4bdd1e592f940e67b7d7df4f8b9eb08b55767516fc6aae20ea28a8ca61695921cbb70e02b70df3f906f1fa48abe9f4915e996a0af8675d35e8ebd2eaaaada94e951136117c5f056ad8c448642a29fcdbc584253f88461489b9643b6f9721a9bbe7ed5dd988fbe38b9dc3044cc94e96f32e2bf816a734ab65fd"}, @NFTA_DATA_VALUE={0x6c, 0x1, "a0f49f9c485d07789ad8e224bcaebdcfc69752444ee600f61b33a5997b1dfe050f86b03eb535be70c8012558763f24dd22bb823846b3a89c3c2d2ba186e0ed6f3a1aca407bffd5ab7858da945c9e34e3b03a5ca31323d4880a72a5f002732edd2a0129e87dade71a"}]}, @NFTA_SET_ELEM_EXPR={0xc, 0x7, 0x0, 0x1, @nat={{0x8}, @void}}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x7e}, @NFTA_SET_ELEM_EXPR={0x34, 0x7, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0xc9}, @NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x6e}, @NFTA_PAYLOAD_CSUM_FLAGS={0x8, 0x8, 0x1, 0x0, 0x1}]}}}, @NFTA_SET_ELEM_EXPRESSIONS={0xf4, 0xb, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @dynset={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_DYNSET_SREG_KEY={0x8, 0x4, 0x1, 0x0, 0xf}]}}}, {0x58, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_SYNPROXY_MSS={0x6, 0x1, 0x1, 0x0, 0x8}, @NFTA_SYNPROXY_WSCALE={0x5, 0x2, 0x2}, @NFTA_SYNPROXY_FLAGS={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_SYNPROXY_MSS={0x6, 0x1, 0x1, 0x0, 0x7f}, @NFTA_SYNPROXY_MSS={0x6, 0x1, 0x1, 0x0, 0xfffd}, @NFTA_SYNPROXY_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_SYNPROXY_WSCALE={0x5, 0x2, 0xfc}, @NFTA_SYNPROXY_MSS={0x6, 0x1, 0x1, 0x0, 0x6}]}}}, {0x10, 0x1, 0x0, 0x1, @redir={{0xa}, @void}}, {0x40, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0x15}, @NFTA_CT_DIRECTION={0x5, 0x3, 0x1}, @NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0x11}, @NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0x11}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_CT_SREG={0x8}]}}}, {0x14, 0x1, 0x0, 0x1, @notrack={{0xc}, @val={0x4}}}, {0xc, 0x1, 0x0, 0x1, @dup={{0x8}, @void}}, {0xc, 0x1, 0x0, 0x1, @osf={{0x8}, @void}}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_KEY={0x208, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x39, 0x1, "a0863339c14dd8fb804310c55b4511e5c38298630b2f1a4dde8e031d534d7bd1276be529356745580a80bbda170f76684072b0da89"}, @NFTA_DATA_VALUE={0x88, 0x1, "78b46d61d3760d92ad46e794a6751ea208f87b2332c87592285951a1523236c03d71ba589b6c1983b32c7b6d76c7bb5e69164ad45b8adef7bfe37931cb97e971a500799c20b6022cb110f2a0863577988478809ebae0e5e3c0bdb9f9c75b006f38b12ad45d987f438a27cf83b12cb7c8aaab74e8c731fd4705bc0738b556b9cd872691d5"}, @NFTA_DATA_VALUE={0x72, 0x1, "806cddd83acf583e0789b757dc6aebbe8d028ea0d17a01ebec901a4dd3d61503abb3a8431c20682975b9cea1821c858ffbc84b58d20fbea8c7f8eeba4c02dc6ce628537465079a3229b4f337ca6eb0e6a86707da1bf1e3e6a436389aefdebfa81218277dc0d676d02fad4222628b"}, @NFTA_DATA_VERDICT={0x5c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0x6d, 0x1, "ed0b38a9cf8310e370c0124056489a343d4d4ba997967d9680720fa94e897d5c3e0587276e16e53e8c51c5409cbb38537641b2579a68ae533dac2365d5b769b587df6462311ec55ede978f1c286b8153ce371a92de6bfb7f39ed1b2e4d3d00813d3e102801f94b3ffa"}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x8}]}, {0x198, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0xe0, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @last={{0x9}, @void}}, {0x20, 0x1, 0x0, 0x1, @byteorder={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_BYTEORDER_SREG={0x8, 0x1, 0x1, 0x0, 0x2}]}}}, {0xc, 0x1, 0x0, 0x1, @cmp={{0x8}, @void}}, {0x20, 0x1, 0x0, 0x1, @dup={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x9}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xc}]}}}, {0x10, 0x1, 0x0, 0x1, @socket={{0xb}, @void}}, {0x10, 0x1, 0x0, 0x1, @numgen={{0xb}, @void}}, {0x18, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @void}}, {0x24, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0x3c}, @NFTA_INNER_NUM={0x8}]}}}, {0x14, 0x1, 0x0, 0x1, @synproxy={{0xd}, @void}}, {0x10, 0x1, 0x0, 0x1, @socket={{0xb}, @void}}]}, @NFTA_SET_ELEM_DATA={0x88, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x60, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}]}, @NFTA_SET_ELEM_EXPR={0x2c, 0x7, 0x0, 0x1, @quota={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_QUOTA_CONSUMED={0xc, 0x4, 0x1, 0x0, 0x6}, @NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x10}]}}}]}, {0x71c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_KEY_END={0x478, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0xeb, 0x1, "acb5688b4766ea65476bbe79aeed0467222c903cbb646e699e6922ea57f54bfe5d726f80c514fbbf13691b0aba2614a58e231dc9ea280aa22e43b7fdfc663dbe562c3d33af113915e8f55881c165efc72d937f892693616b310c9c7c86d084d2ba799de8d5ed130b35ab78e5e8ff206ce6bd7bba96d0846e69468389cdef1300ffcc296fcbed455b1d5b9093d830f9c985a0a480c0021571a2067ac11e2c4836e6ee486de5c7394df805aa6228ba6728301600e7e3efc43db40bc79759fd869ec2792396bce8da3e67e9dfd3dbf5eb3ff3e409f1adfc3d44511287f7021929ce91ccb4590a1685"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VALUE={0x89, 0x1, "90adb8c956f52c25a872e0546e748398b2eba68037bab9d32374b7ce7cdc53a9cd25d3756ad3e9037997ce6622b9c98d7c22679c544695ee1da21e1cc7db6f718c32d180d45cfb4f5f8594601d386a29c5f149758d7bc9a0f39d392f799292f1beaea684a67cf0b516daaa35be5b8fe93e1981922d99bc1840a6b16f36f1b86b2cb8685242"}, @NFTA_DATA_VALUE={0xbc, 0x1, "36957b72c96fef9ee58d1a5c554cb15156223e4bf3413b99803335adfdf5cb931d0e9f33da71190714cec17d4fe0ad9a883ca5567f5ed42326f4d3efc265d4d9cb4577406bf11a1e62c1fff8a745228ea4797598672d4039dc0e8e709f2d3415c3a736e3f9fa91ef919b9654cbbec59f3b0d7db9bbe9700691285edd9270a2ba45be797f9868a56e1d6779728cf502358cc5e20df4547c62b9c33978c4371bcd61929584e4fc89b02b86341925eb603c351ac7e1c211d6cf"}, @NFTA_DATA_VALUE={0x5f, 0x1, "4368e44e9b54a2ca746d82028165790d6a11463abeb2c41171a7b100d5e2b4053a08f7a827809758e0db37c162e15e1eb544cd201550dbe79b8bf013f3aeb8d8530fcc79f018cc10badb851c2c8bce4807c56f3492e1b087c51bdc"}, @NFTA_DATA_VALUE={0x39, 0x1, "a7aad8e3a43bba6fcf190a59c80f6926d72f99946fb7ad2b93a5fda4af915a1558136e24a577eb45919ee08aa47430ce1a5c541367"}, @NFTA_DATA_VALUE={0xd5, 0x1, "8dec3d02627e1f3751a69130b3e1dd5dce908610d03b9084c5622b2fe17f38ff805e8d19b7cb499d353720e41a8606780c4da2d025ae82dc177605372b1e92b424614dcb5deb155fa0d8f93348616baa7135b608882e555895aeadb28d566585914b9f5a610138db24c2ee1f5684ee5371498baadf5f4e93d020e450833dc3782fa70decedbe7fbbbd5665b0b7f2de6bbaa90628bc0885d4fcd04dbc2c55450aaa655bf6ec1b6787eaa3ccfe4f38e037a8e1cc5af670d7a7e862a4ffe23bb0e2177ceb54dd67e2a89ebba7a1d03aa957e3"}, @NFTA_DATA_VALUE={0x24, 0x1, "3c6ad562e961f37695fa0edfe9145c968a297eaed02fbdc03fb9bcef370b848f"}, @NFTA_DATA_VERDICT={0x5c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}]}, @NFTA_SET_ELEM_USERDATA={0x20, 0x6, 0x1, 0x0, "abe11271b518e37ee021f61d9b1a58e0ccd76d58dc7923cf51bb3322"}, @NFTA_SET_ELEM_KEY_END={0x5c, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x5}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_KEY={0x1ac, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5b, 0x1, "9ce23d6edc1a35ac28d387dda0704dffd8ddf3f3a90d2a5393c7ad2c946ba0db87a621057edcff81900644066171ef59059d5e6e7eeace09ee7939b6318938b91c4b823e8ba1213325aed09aee68be8abeda1d73596776"}, @NFTA_DATA_VALUE={0xf0, 0x1, "b5c5c7e52c61ba9bd3d3dedce601353e17a1b4a85055c89e3787fafb36d9243ac2e6f3427d1b274e9987694f4b7630c906935a2ed3dd6dc5c22ab3bc6bfd5af157cc0c27bc8a880a92a51c6f116e9092e1dbaf5630dc6dd9557c7714e5df5ff8c013840b28edf52841c09f62c17009190abf5a9909a35f3ed25019b09569674fa703b5813c577995bacc8bb31e80e7e1c2f283c6bcbbcb7d79c858eb9d01d8fd611834d6073ed38facf7f1d2b73afb5964a7604a1278387cbb034909bf5eb05b4e417dbd991cacaf994536d822cdd3bd669bf4735ba8c637fbd2e78740de0be338b5fa3179ff8c50b8da22c2"}, @NFTA_DATA_VALUE={0x5b, 0x1, "02ed315e8e0a11f2c5206fde893bc2adf5800dd49a4398a12a0038332ef783abcd086007ca884e497dcfcfe01fb8a637f84189e2019445a7e1fc60c2d12c40fd5318b2783637b184a5b525d6b2bf7345357920ceb7c9ce"}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_USERDATA={0x56, 0x6, 0x1, 0x0, "c3c109418dd980fa1b6a9a50fb6dc72976649ef19847a712a3a226f5c140d1740862b6bdfddbc8e9e6e12cb37583c62f8f8e843be6c4d213044ad1ec99fd5e74d2c98f6773907c730edb5fe804ee035c07ce"}]}, {0x42c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0x4a, 0x6, 0x1, 0x0, "86796b7205338de0fff7fd87a76cf9ffebf092a94f322b866a39b6c1979d9d8e4d0a1e44dd8c0fd6a2eac65ef2a6cd265c3539b27f8d40c183988246d413e1222b8c509e2671"}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_KEY={0xac, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x50, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0x57, 0x1, "86c0c41a7dfd03109793281e408f57688a0e0d4800669b1f568fa58e60a29df042c218989ccf13eba5c30cfeb17160d5cbbc826af896e4a311e88e6bfb71b201332ea5cf7d400f0090e2488959424aef3941b6"}]}, @NFTA_SET_ELEM_DATA={0x4c, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}]}, @NFTA_SET_ELEM_KEY={0xb8, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x98, 0x1, "edbae1b97719daf407e3c4ead090ab8fbe83adb9e1b96389f2d9af020a6b2b429980f99b7aab1b20f6ba38488ff9285a4f6c3e215abb065d631cf5ac89c7daf758a8cc3a057f20ef20af17eca5c458bf81212e348cd18e1bf09d81786f571b621fb97a46a232b6942d4819c684112432f1100cb267e84afd29fb14ca1e0519320ffb87c7727d10e531d6c1c06a908f9cb80590f4"}, @NFTA_DATA_VALUE={0x1c, 0x1, "f4d8dd716dd0627bbfcf94109ccea75751a6926dc0979ce9"}]}, @NFTA_SET_ELEM_KEY={0x1d8, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VALUE={0x9c, 0x1, "32aecbb32330c67b56fd3ec8e90e2cfd8c9c3ebd77707b5b03ffdbc0754548c9767bb71de1cf65cfc5d3fee3e994b6f9638db85166fde78c6601bf2b8b64b2d8537cb58d7937033c0c31918818c9be518c4ee07e3187f86a9fd44b75fd30bda299612c3e7b1cd927524df3e58d54bbf14df6c545deb44d45300f6964d8a30d6df93ef4f579b49bfaa9487f20db59f8ea512a500105b0189e"}, @NFTA_DATA_VALUE={0x87, 0x1, "54e2217de63f37a565370c6b0a7da64b13ea37d13bd2e6b6ad66b10883484e45f11164d944adf65c3ef463529eef27419862acc7a0c4b361854313f323bf0c29b1932f93baa03deda2d68bf84ebd80ea4a871f1f79239bf4ad979dff6a1518c351c3f767eca709e71d231e157dbb7cf15cd83dc10e6d5014738893ee990ddbd4b4f00a"}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x1bb7ede14e16978}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_EXPR={0x28, 0x7, 0x0, 0x1, @connlimit={{0xe}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0xfffffff9}]}}}, @NFTA_SET_ELEM_EXPR={0x14, 0x7, 0x0, 0x1, @byteorder={{0xe}, @void}}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x1748}, 0x1, 0x0, 0x0, 0x44884}, 0x20000804) shutdown(r1, 0x0) syz_emit_ethernet(0x46, &(0x7f00000009c0)={@link_local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x10, 0x3a, 0xff, @dev, @mcast2, {[], @ndisc_ra}}}}}, 0x0) 105.075952ms ago: executing program 7 (id=9230): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000000)={@in6={{0xa, 0x0, 0x9, @loopback}}, 0x0, 0x0, 0x46, 0x0, "2431d0edd9b36cb74d7df7671eacf04be3b08353efa3641776f56c7556fd3713097bd0072577bc6fefb4cdc9e94e420b0ea4fbc5b07a32056eff5e6c42784b46ddab72b1b8fc87f208ad6db80d8dfe25"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000001c0)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, "aeb81d8ee3a82d67eea9e5bdf2247481041a5b9cddbc936efc471c56ae3d5f6945d296a285858a891a3b4e7bff572ef69992da867f406182d70f47773434b8349435f2ad628d62a3b45bb98872fb1900"}, 0xd8) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000800), r1) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="eb7a2bbd7000fcdbdf252100000009001f00706879310000000005002000000000000c0005000000000000000000"], 0x34}, 0x1, 0x0, 0x0, 0x4000010}, 0x40882) sendmmsg$inet6(r0, &(0x7f0000000040)=[{{&(0x7f00000001c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x7fe}, 0x1c, 0x0}}], 0x1, 0x20048000) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec0012100001400a0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af9219a1e18c488e827c1bbec", 0x89}], 0x1}, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) accept4$nfc_llcp(0xffffffffffffffff, 0x0, 0x0, 0x800) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="2c00000015000100000000000000000002000000", @ANYRES32, @ANYBLOB="1400030076657468315f746f5fb0e7e13ed58465"], 0x2c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b703000000090001db020a000000000007000000000000009500000000000a6682f0a61b01e4c027d252f602901b7cbbd5b9097bb8334a5541cf9e345af317e35f0ad53d857708f974879196ac07622b10548ccd2028eaf7610ae297a58e413b22d81494fcb1dbd1e9cb784c590ddd06ee929a27a5dedf301650960d8ae1cf339f6bda65bf6594c2839dcea6e419c9b8b7d17b9e49f392c857ccb0a3f64a59a87332ffa41c17b82700789b163bbc8507f171b46d2c569e75810e60a06b6f69ef41ca39a200"/212], &(0x7f0000003ff6)='GPL\x00', 0x4, 0x2, &(0x7f000000cf3d)=""/195}, 0x23) r5 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r5, &(0x7f0000000000)={&(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c, 0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="280000000000000029000000050000000002020100000000fe8000000000000000000000000000bb0591dc126d2cd3a9af7d585f185c37b3cf8af6067763cf7acca5af7da6aae90cf92f0d169c84ebee5f341f226b8ca1541ae635de0f350b80ff3b0207f603389235fa22efa067dbead84c39095561ac4776e7c2a78465c8e0a67f2dde3b2803d9d4fc27cf0240d85741a65b1c82c1d870bae7"], 0x28}, 0x0) r6 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec0012100001400a0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af9219a1e18c488e827c1bbec", 0x89}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x2, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="850000009a000000040000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x12, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$nl_netfilter(0x10, 0x3, 0xc) 43.955373ms ago: executing program 6 (id=9231): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x58, 0x10, 0xffffff1f, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4408}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE6={0x14, 0x7, @loopback}, @IFLA_GENEVE_TTL={0x5, 0x3, 0xa}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r3 = syz_genetlink_get_family_id$smc(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$SMC_PNETID_ADD(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r3, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MIIMON={0x8, 0x3, 0xffffffe1}]}}}]}, 0x3c}}, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) socket(0x10, 0x803, 0x0) (async) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x58, 0x10, 0xffffff1f, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4408}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE6={0x14, 0x7, @loopback}, @IFLA_GENEVE_TTL={0x5, 0x3, 0xa}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) syz_genetlink_get_family_id$smc(&(0x7f0000000100), 0xffffffffffffffff) (async) sendmsg$SMC_PNETID_ADD(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r3, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MIIMON={0x8, 0x3, 0xffffffe1}]}}}]}, 0x3c}}, 0x0) (async) 0s ago: executing program 3 (id=9232): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$SIOCNRDECOBS(r1, 0x89e2) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={0x0, 0x4}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000000c0)={r2, @in={{0x2, 0x4e21, @private=0xa010100}}, 0x1, 0x401, 0x100, 0x10000, 0x20, 0x8000, 0x4}, &(0x7f00000001c0)=0x9c) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000c704800100001cf308800b00010067656e650000ff5997df3a0c0002800100090001"], 0x3c}, 0x1, 0x2}, 0x0) r6 = socket(0x10, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYRES32=r1, @ANYRES32=r7, @ANYBLOB="0200000000008000800012000800010076746936740002"], 0xa0}}, 0x408c1) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000280)={'ip6tnl0\x00', &(0x7f0000000300)={'ip6gre0\x00', 0x0, 0x4, 0x9, 0x8, 0xffffab32, 0x44, @private1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x10, 0x8, 0x40000000, 0xd5ec}}) getsockname$packet(0xffffffffffffffff, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000003c0)=0x14) r10 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r10, 0x65, 0x1, &(0x7f0000000200)=[{{0x2, 0x1, 0x0, 0x1}, {0x2, 0x1, 0x1}}, {{0x2, 0x1}, {0x1, 0x0, 0x0, 0x1}}], 0x10) bind$can_raw(r10, &(0x7f0000000040), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r10, 0x8933, &(0x7f0000000180)={'vxcan1\x00', 0x0}) bind$can_raw(r10, &(0x7f0000000000)={0x1d, r11}, 0x10) r12 = socket$nl_route(0x10, 0x3, 0x0) r13 = socket$nl_route(0x10, 0x3, 0x0) r14 = socket(0x10, 0x803, 0x0) bind$netlink(r14, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r14, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r13, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="44007d201a0811ff0400000000000000", @ANYRES32=r15, @ANYBLOB="46000400000000002400128009000100626f6e64000000001400028005000100040000000500150001000000"], 0x44}, 0x1, 0x0, 0x0, 0x40040}, 0x0) sendmsg$nl_route(r12, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[], 0x30}}, 0x4001) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4}, 0x58, &(0x7f0000000500)={&(0x7f0000000840)=ANY=[@ANYBLOB="24010000", @ANYRES16=0x0, @ANYBLOB="180f29bd7000fddbdf250d0000004800018008000100", @ANYRES32=r5, @ANYBLOB="08000100", @ANYRES32=r7, @ANYBLOB="08000300000000000800030001000000080003000000000008000300010000001400020070696d367265673100000000000000003c00018014000200677265746170300000000000000000d5f100b0b03e020076657468315f746f5f62617461647600fd056391", @ANYRES32=r8, @ANYBLOB="08000300000000003c000180140002006e657464657673696d30000000000000140002006272696467655f736c6176655f31000008000100", @ANYRES32=r9, @ANYBLOB="08000300020000004400018008000100", @ANYRES32=r5, @ANYBLOB="14000200627269646765300000000000000000001400020067656e6576653000000000000000000008000100", @ANYRES32=r11, @ANYBLOB="c4000300173a18bde10311fa8dc94a2b", @ANYRES32=r15, @ANYBLOB="b8a9cd4c71"], 0x124}, 0x1, 0x0, 0x0, 0x4041}, 0x2000000) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, 0x0, 0x0) r16 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r16, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000040000701fcffffff00000100017c0000040042800c0001800600060065580000100002800c000380080009"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) kernel console output (not intermixed with test programs): ss `syz.1.7229'. [ 553.323137][T30679] bond0: entered promiscuous mode [ 553.331626][T30679] bridge_slave_1: entered promiscuous mode [ 553.342898][T30679] bond0: left promiscuous mode [ 553.348533][T30679] bridge_slave_1: left promiscuous mode [ 553.352283][T30681] IPVS: dh: SCTP 172.20.20.187:0 - no destination available [ 553.419643][T30684] bond8: Unable to set down delay as MII monitoring is disabled [ 553.445465][T30684] bond8 (unregistering): Released all slaves [ 553.703179][T30700] Cannot find add_set index 1 as target [ 553.704629][T30701] delete_channel: no stack [ 553.736032][T30706] netlink: 'syz.2.7236': attribute type 1 has an invalid length. [ 554.039306][T30725] ipt_REJECT: TCP_RESET invalid for non-tcp [ 554.093407][T30732] syzkaller1: entered promiscuous mode [ 554.106933][T30732] syzkaller1: entered allmulticast mode [ 554.138644][T30733] IPVS: ip_vs_add_dest(): server weight less than zero [ 554.343607][T30748] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7248'. [ 554.415093][T30748] vxcan1 speed is unknown, defaulting to 1000 [ 554.527338][T30752] nbd6: detected capacity change from 0 to 127 [ 554.536238][T30753] netlink: 64 bytes leftover after parsing attributes in process `syz.3.7250'. [ 554.558163][T30753] block nbd0: reconnected socket [ 554.620003][ T50] bridge_slave_1: left allmulticast mode [ 554.626680][ T50] bridge_slave_1: left promiscuous mode [ 554.632724][ T50] bridge0: port 2(bridge_slave_1) entered disabled state [ 554.645219][ T50] bridge_slave_0: left allmulticast mode [ 554.652838][ T50] bridge_slave_0: left promiscuous mode [ 554.659624][ T50] bridge0: port 1(bridge_slave_0) entered disabled state [ 554.679273][ T50] veth7: left allmulticast mode [ 554.684274][ T50] veth7: left promiscuous mode [ 554.699876][ T50] bridge1: port 1(veth7) entered disabled state [ 554.833767][ T50] bond5 (unregistering): (slave ip6gretap1): Releasing backup interface [ 554.851447][ T50] ip6gretap1 (unregistering): left allmulticast mode [ 555.074976][ T50] bond4 (unregistering): (slave gretap2): Releasing active interface [ 555.204300][ T52] block nbd6: Receive control failed (result -32) [ 555.205095][ T5830] block nbd0: Receive control failed (result -32) [ 555.278087][ T50] bond3 (unregistering): (slave bridge2): Releasing backup interface [ 555.286368][ T50] bridge2 (unregistering): left promiscuous mode [ 555.597942][ T50] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 555.607634][ T50] bond0 (unregistering): Released all slaves [ 555.620658][ T50] bond1 (unregistering): Released all slaves [ 555.634074][ T50] bond2 (unregistering): Released all slaves [ 555.756378][ T50] bond3 (unregistering): Released all slaves [ 555.768777][ T50] bond4 (unregistering): Released all slaves [ 555.784249][ T50] bond5 (unregistering): Released all slaves [ 555.912667][ T50] bond6 (unregistering): Released all slaves [ 555.926291][ T50] bond7 (unregistering): Released all slaves [ 555.938616][ T50] bond8 (unregistering): Released all slaves [ 555.957046][T30756] lo speed is unknown, defaulting to 1000 [ 556.019234][T30756] lo speed is unknown, defaulting to 1000 [ 556.054988][T30786] netlink: 'syz.4.7257': attribute type 1 has an invalid length. [ 556.066898][T30787] netlink: 'syz.4.7257': attribute type 1 has an invalid length. [ 556.075315][T30756] lo speed is unknown, defaulting to 1000 [ 556.264281][ T50] tipc: Disabling bearer [ 556.282810][ T50] tipc: Disabling bearer [ 556.328076][ T50] tipc: Left network mode [ 556.494389][T30808] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7262'. [ 556.515148][T30808] netlink: 10 bytes leftover after parsing attributes in process `syz.1.7262'. [ 556.553492][T30809] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7262'. [ 556.598038][T30809] netlink: 10 bytes leftover after parsing attributes in process `syz.1.7262'. [ 556.751344][T30808] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7262'. [ 556.756324][T30756] infiniband sz1: set active [ 556.774707][T30756] infiniband sz1: added lo [ 556.798818][T30756] sz1: rxe_create_cq: returned err = -12 [ 556.804646][T30756] infiniband sz1: Couldn't create ib_mad CQ [ 556.824842][ T48] lo speed is unknown, defaulting to 1000 [ 556.862886][T30756] infiniband sz1: Couldn't open port 1 [ 557.006445][T30824] SET target dimension over the limit! [ 557.091649][T30825] SET target dimension over the limit! [ 557.193768][T30756] RDS/IB: sz1: added [ 557.215010][T30756] smc: adding ib device sz1 with port count 1 [ 557.225898][T30756] smc: ib device sz1 port 1 has no pnetid [ 557.305093][T11586] lo speed is unknown, defaulting to 1000 [ 557.328168][T30756] lo speed is unknown, defaulting to 1000 [ 557.659190][T30836] syzkaller1: entered promiscuous mode [ 557.679201][T30836] syzkaller1: entered allmulticast mode [ 557.938653][T30756] lo speed is unknown, defaulting to 1000 [ 558.369102][T30870] __nla_validate_parse: 2 callbacks suppressed [ 558.369119][T30870] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7280'. [ 558.386752][T30756] lo speed is unknown, defaulting to 1000 [ 558.854836][T30756] lo speed is unknown, defaulting to 1000 [ 558.870808][T30899] dvmrp0: entered allmulticast mode [ 558.876631][T30902] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7292'. [ 558.893477][T30904] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7286'. [ 558.990950][T30907] netlink: 340 bytes leftover after parsing attributes in process `syz.1.7293'. [ 559.082569][T30910] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7293'. [ 559.095133][T30910] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7293'. [ 559.144128][T30910] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7293'. [ 559.271466][T30915] sctp: [Deprecated]: syz.0.7296 (pid 30915) Use of int in max_burst socket option deprecated. [ 559.271466][T30915] Use struct sctp_assoc_value instead [ 559.424728][T30756] lo speed is unknown, defaulting to 1000 [ 559.931432][T30934] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 559.953411][T30938] openvswitch: netlink: IP tunnel dst address not specified [ 559.982600][T30937] tipc: New replicast peer: fc00:0000:0000:0000:0000:0000:0000:0000 [ 560.004338][T30937] tipc: Enabled bearer , priority 10 [ 560.011436][T30756] lo speed is unknown, defaulting to 1000 [ 560.318822][T30954] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 560.552589][T30756] lo speed is unknown, defaulting to 1000 [ 560.637913][T30964] netlink: 80 bytes leftover after parsing attributes in process `syz.0.7312'. [ 560.780336][T30970] IPVS: ip_vs_edit_dest(): server weight less than zero [ 560.872953][T30756] lo speed is unknown, defaulting to 1000 [ 561.079308][T30982] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 561.354834][T30756] lo speed is unknown, defaulting to 1000 [ 561.372558][T30998] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7323'. [ 561.485121][T30998] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7323'. [ 561.639788][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 561.788495][T31015] netlink: 'syz.1.7329': attribute type 10 has an invalid length. [ 561.790568][T30756] lo speed is unknown, defaulting to 1000 [ 561.854218][T31015] team0: Port device geneve0 added [ 561.892100][T31017] ipt_REJECT: TCP_RESET invalid for non-tcp [ 561.912522][T31020] !: renamed from bond_slave_0 (while UP) [ 562.150405][T30756] lo speed is unknown, defaulting to 1000 [ 562.259307][T31039] tipc: Invalid UDP bearer configuration [ 562.259361][T31039] tipc: Enabling of bearer rejected, failed to enable media [ 562.302881][T31040] mac80211_hwsim hwsim48 : renamed from wlan1 [ 562.460746][T31045] netlink: 'syz.2.7339': attribute type 21 has an invalid length. [ 562.490859][T31045] netlink: 'syz.2.7339': attribute type 5 has an invalid length. [ 562.653862][T31048] syzkaller1: entered allmulticast mode [ 562.736510][T31056] tipc: Failed to remove unknown binding: 66,1,1/2886997007:3891769835/3891769837 [ 562.803221][T31060] netlink: 'syz.0.7345': attribute type 13 has an invalid length. [ 562.812597][T31055] tipc: Failed to remove unknown binding: 66,1,1/2886997007:3891769835/3891769837 [ 562.823944][T31055] tipc: Failed to remove unknown binding: 66,1,1/2886997007:3891769835/3891769837 [ 562.920678][ T1302] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 563.049124][T31064] tipc: Enabled bearer , priority 0 [ 563.169867][T31064] tipc: Disabling bearer [ 563.409005][ T50] hsr_slave_0: left promiscuous mode [ 563.436730][ T50] hsr_slave_1: left promiscuous mode [ 564.284788][T31093] wg1: entered promiscuous mode [ 564.290634][T31093] wg1: entered allmulticast mode [ 564.300998][T31099] __nla_validate_parse: 6 callbacks suppressed [ 564.301016][T31099] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7358'. [ 564.323663][T31100] smc: net device ip6gre0 erased user defined pnetid SYZ1 [ 564.462056][T31110] netlink: 'syz.1.7360': attribute type 5 has an invalid length. [ 564.686911][T31122] syzkaller1: entered promiscuous mode [ 564.692429][T31122] syzkaller1: entered allmulticast mode [ 564.942147][ T50] IPVS: stop unused estimator thread 0... [ 565.191712][T31151] vxcan1 speed is unknown, defaulting to 1000 [ 565.614271][T31151] lo speed is unknown, defaulting to 1000 [ 565.863638][T31192] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7385'. [ 566.057620][T31203] IPVS: set_ctl: invalid protocol: 58 172.30.0.5:20002 [ 566.117314][T31208] netlink: 'syz.3.7390': attribute type 1 has an invalid length. [ 566.242264][T31219] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7390'. [ 566.318625][T31223] netlink: 44 bytes leftover after parsing attributes in process `syz.3.7390'. [ 566.424827][T31229] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7393'. [ 566.437905][T31229] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7393'. [ 566.451937][T31229] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7393'. [ 566.767584][ T48] IPVS: starting estimator thread 0... [ 566.855501][T31246] IPVS: using max 31 ests per chain, 74400 per kthread [ 566.911686][T31249] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7401'. [ 566.956808][T31249] netlink: 'syz.1.7401': attribute type 7 has an invalid length. [ 566.964590][T31249] netlink: 'syz.1.7401': attribute type 8 has an invalid length. [ 566.974209][T31254] netlink: 52 bytes leftover after parsing attributes in process `syz.0.7402'. [ 566.977292][T31249] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7401'. [ 567.224722][T31275] xt_CT: You must specify a L4 protocol and not use inversions on it [ 567.238448][T31275] xt_CT: You must specify a L4 protocol and not use inversions on it [ 567.362357][T31282] openvswitch: netlink: Flow key attr not present in new flow. [ 567.402139][T31286] netlink: 'syz.3.7413': attribute type 30 has an invalid length. [ 567.808098][T31313] netlink: 'syz.1.7423': attribute type 4 has an invalid length. [ 567.850062][T31315] netlink: 'syz.4.7424': attribute type 12 has an invalid length. [ 567.878351][T31313] netlink: 'syz.1.7423': attribute type 4 has an invalid length. [ 567.881946][T31318] netlink: 'syz.3.7426': attribute type 1 has an invalid length. [ 567.920739][T31315] bond5: option primary_reselect: invalid value (255) [ 567.930815][T31315] bond5 (unregistering): Released all slaves [ 568.170595][T31331] vxcan1 speed is unknown, defaulting to 1000 [ 568.317080][T31342] 8021q: VLANs not supported on ip_vti0 [ 568.758422][T31331] lo speed is unknown, defaulting to 1000 [ 569.232292][T31392] tipc: Enabled bearer , priority 0 [ 569.271672][T31392] syzkaller0: entered promiscuous mode [ 569.283253][T31392] syzkaller0: entered allmulticast mode [ 569.308080][T31392] tipc: Resetting bearer [ 569.357269][T31390] tipc: Resetting bearer [ 569.375244][T31410] netlink: 'syz.1.7452': attribute type 1 has an invalid length. [ 569.384125][T31390] tipc: Disabling bearer [ 569.391670][T31410] __nla_validate_parse: 12 callbacks suppressed [ 569.391687][T31410] netlink: 64 bytes leftover after parsing attributes in process `syz.1.7452'. [ 569.624418][T31418] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7456'. [ 569.709407][T31421] netlink: 'syz.4.7455': attribute type 83 has an invalid length. [ 569.801297][T31419] netlink: 'syz.4.7455': attribute type 9 has an invalid length. [ 569.813263][T31419] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7455'. [ 569.949039][T31425] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7458'. [ 570.207058][T31432] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7457'. [ 570.384842][T31438] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7460'. [ 571.747503][T31428] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 571.789940][T31431] bond5: (slave gretap1): making interface the new active one [ 571.823482][T31431] bond5: (slave gretap1): Enslaving as an active interface with an up link [ 571.835881][T31432] 8021q: adding VLAN 0 to HW filter on device bond5 [ 571.880227][T31450] tipc: Enabling of bearer rejected, failed to enable media [ 571.933361][T31454] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7464'. [ 572.004163][T31454] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7464'. [ 572.021166][T31455] bond0: (slave macvlan2): Error -98 calling set_mac_address [ 572.047753][T31461] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 572.199510][T31466] 8021q: VLANs not supported on ipvlan1 [ 572.286490][T31469] validate_nla: 1 callbacks suppressed [ 572.286510][T31469] netlink: 'syz.3.7470': attribute type 1 has an invalid length. [ 572.380600][T31469] 8021q: adding VLAN 0 to HW filter on device bond6 [ 572.391016][T31476] netlink: 36 bytes leftover after parsing attributes in process `syz.2.7474'. [ 572.412823][T31484] bond6: (slave gretap2): making interface the new active one [ 572.422457][T31484] bond6: (slave gretap2): Enslaving as an active interface with an up link [ 572.581042][T31490] netlink: 48 bytes leftover after parsing attributes in process `syz.1.7476'. [ 572.616522][T31496] netlink: 'syz.2.7477': attribute type 1 has an invalid length. [ 572.630367][T31495] netlink: 'syz.2.7477': attribute type 1 has an invalid length. [ 572.771019][T31500] bond9: (slave gretap1): making interface the new active one [ 572.799871][T31500] bond9: (slave gretap1): Enslaving as an active interface with an up link [ 572.960664][T31525] openvswitch: netlink: VXLAN extension 30 out of range max 1 [ 573.318333][T31552] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 573.354097][T11851] lo speed is unknown, defaulting to 1000 [ 573.356411][T31550] tipc: Enabled bearer , priority 0 [ 573.388213][T31556] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 573.389908][T31550] syzkaller0: entered allmulticast mode [ 573.491912][T31550] tipc: Resetting bearer [ 573.533069][T31549] tipc: Resetting bearer [ 573.687509][T31549] tipc: Disabling bearer [ 574.269773][T31599] bond5: option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 574.410064][T31599] bond5 (unregistering): Released all slaves [ 574.974862][T31644] syzkaller0: entered promiscuous mode [ 574.984727][T31644] syzkaller0: entered allmulticast mode [ 575.002747][T31646] __nla_validate_parse: 3 callbacks suppressed [ 575.002764][T31646] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7522'. [ 575.036476][T31647] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7522'. [ 575.055907][T31647] netlink: 'syz.3.7522': attribute type 5 has an invalid length. [ 575.060987][T31642] netlink: 100 bytes leftover after parsing attributes in process `syz.1.7520'. [ 575.071443][T31646] netlink: 'syz.3.7522': attribute type 5 has an invalid length. [ 575.097463][T31647] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7522'. [ 575.125892][T31646] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7522'. [ 575.143343][T31648] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7521'. [ 575.228658][T31656] netlink: 60 bytes leftover after parsing attributes in process `syz.1.7526'. [ 575.502798][T31675] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7533'. [ 575.512189][T31675] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7533'. [ 575.726967][T31688] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7539'. [ 624.358834][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 624.365622][ T1302] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 631.539692][T31703] __nla_validate_parse: 1 callbacks suppressed [ 631.539713][T31703] netlink: 36 bytes leftover after parsing attributes in process `syz.0.7541'. [ 631.842436][T31724] netlink: 40 bytes leftover after parsing attributes in process `syz.2.7553'. [ 631.864851][T31721] FAULT_INJECTION: forcing a failure. [ 631.864851][T31721] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 631.894764][T31721] CPU: 1 UID: 0 PID: 31721 Comm: syz.1.7551 Not tainted syzkaller #0 PREEMPT(full) [ 631.894792][T31721] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 631.894803][T31721] Call Trace: [ 631.894810][T31721] [ 631.894819][T31721] dump_stack_lvl+0x189/0x250 [ 631.894855][T31721] ? __pfx____ratelimit+0x10/0x10 [ 631.894881][T31721] ? __pfx_dump_stack_lvl+0x10/0x10 [ 631.894899][T31721] ? __pfx__printk+0x10/0x10 [ 631.894918][T31721] ? __might_fault+0xb0/0x130 [ 631.894946][T31721] should_fail_ex+0x414/0x560 [ 631.894971][T31721] _copy_from_user+0x2d/0xb0 [ 631.895001][T31721] ___sys_sendmsg+0x158/0x2a0 [ 631.895027][T31721] ? __pfx____sys_sendmsg+0x10/0x10 [ 631.895055][T31721] ? rcu_read_lock_any_held+0xb3/0x120 [ 631.895101][T31721] ? __fget_files+0x2a/0x420 [ 631.895116][T31721] ? __fget_files+0x3a0/0x420 [ 631.895139][T31721] __x64_sys_sendmsg+0x19b/0x260 [ 631.895170][T31721] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 631.895204][T31721] ? __pfx_ksys_write+0x10/0x10 [ 631.895225][T31721] ? do_syscall_64+0xbe/0xf80 [ 631.895247][T31721] do_syscall_64+0xfa/0xf80 [ 631.895267][T31721] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 631.895283][T31721] ? clear_bhb_loop+0x60/0xb0 [ 631.895300][T31721] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 631.895316][T31721] RIP: 0033:0x7f15b578f749 [ 631.895428][T31721] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 631.895445][T31721] RSP: 002b:00007f15b6564038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 631.895463][T31721] RAX: ffffffffffffffda RBX: 00007f15b59e5fa0 RCX: 00007f15b578f749 [ 631.895474][T31721] RDX: 0000000004041080 RSI: 0000200000006040 RDI: 0000000000000004 [ 631.895494][T31721] RBP: 00007f15b6564090 R08: 0000000000000000 R09: 0000000000000000 [ 631.895521][T31721] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 631.895531][T31721] R13: 00007f15b59e6038 R14: 00007f15b59e5fa0 R15: 00007ffd400d6db8 [ 631.895666][T31721] [ 632.241024][T31747] netlink: 'syz.2.7557': attribute type 4 has an invalid length. [ 632.344390][T31752] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.7559'. [ 632.427353][T31755] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7560'. [ 632.778089][T31773] bond7: option min_links: invalid value (18446744073709551614) [ 632.787205][T31773] bond7: option min_links: allowed values 0 - 2147483647 [ 632.806089][T31773] bond7 (unregistering): Released all slaves [ 633.222934][T31814] sctp: [Deprecated]: syz.4.7581 (pid 31814) Use of struct sctp_assoc_value in delayed_ack socket option. [ 633.222934][T31814] Use struct sctp_sack_info instead [ 633.241344][T11581] IPVS: starting estimator thread 0... [ 633.346392][T31815] IPVS: using max 36 ests per chain, 86400 per kthread [ 633.373432][T31824] bond7: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 633.388721][T31824] bond7 (unregistering): Released all slaves [ 633.422512][T31834] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7586'. [ 633.543714][T31834] bond5: (slave syz_tun): Enslaving as an active interface with an up link [ 633.559480][T31842] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7588'. [ 635.083167][T31874] netlink: 72 bytes leftover after parsing attributes in process `syz.1.7598'. [ 636.466271][T31878] bond5: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 636.486049][T31878] bond5: (slave lo): Enslaving as a backup interface with an up link [ 636.499156][T31878] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 636.595095][T31887] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7602'. [ 636.707847][T31898] netlink: 6040 bytes leftover after parsing attributes in process `syz.1.7605'. [ 636.818031][T31906] netlink: 'syz.0.7608': attribute type 2 has an invalid length. [ 636.877129][T31901] netlink: 220 bytes leftover after parsing attributes in process `syz.4.7606'. [ 637.352480][T31924] bond6: option lp_interval: invalid value (0) [ 637.361567][T31924] bond6: option lp_interval: allowed values 1 - 2147483647 [ 637.383180][T31924] bond6 (unregistering): Released all slaves [ 637.385316][T31936] netlink: 'syz.0.7616': attribute type 83 has an invalid length. [ 637.418466][T31929] gtp0: entered promiscuous mode [ 637.423747][T31929] gtp0: entered allmulticast mode [ 637.430345][T31938] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7614'. [ 637.531609][T31948] netlink: 'syz.2.7618': attribute type 1 has an invalid length. [ 637.542361][T31948] netlink: 'syz.2.7618': attribute type 4 has an invalid length. [ 637.550437][T31948] netlink: 9491 bytes leftover after parsing attributes in process `syz.2.7618'. [ 637.558304][T31935] bond8: entered promiscuous mode [ 637.576099][T31935] bond8: entered allmulticast mode [ 637.582967][T31935] 8021q: adding VLAN 0 to HW filter on device bond8 [ 637.602108][T31950] openvswitch: netlink: Missing key (keys=40, expected=100) [ 637.610558][T31950] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7619'. [ 637.757124][T31955] netlink: 180380 bytes leftover after parsing attributes in process `syz.0.7620'. [ 637.809479][T31958] xt_ipcomp: unknown flags 1D [ 637.864952][T31960] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7621'. [ 637.867338][T31963] IPVS: length: 239 != 24 [ 637.908989][T31960] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7621'. [ 637.995637][T31960] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7621'. [ 638.104936][T31986] netlink: 'syz.2.7628': attribute type 19 has an invalid length. [ 638.120578][T31986] netlink: 'syz.2.7628': attribute type 19 has an invalid length. [ 638.339706][T31999] x_tables: duplicate underflow at hook 1 [ 638.354869][T31998] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 638.508106][T32010] netlink: 'syz.4.7637': attribute type 21 has an invalid length. [ 638.731620][T32025] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 638.779156][T32028] netlink: 'syz.2.7643': attribute type 10 has an invalid length. [ 638.779156][T32031] netlink: 'syz.2.7643': attribute type 10 has an invalid length. [ 638.831276][T32028] dummy0: entered promiscuous mode [ 638.847591][T32028] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 638.947909][T32030] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 639.003848][T32044] netlink: 'syz.4.7648': attribute type 1 has an invalid length. [ 639.010612][T32049] netlink: 'syz.1.7649': attribute type 1 has an invalid length. [ 639.065916][T32049] 8021q: adding VLAN 0 to HW filter on device bond9 [ 639.100931][T32044] bond6: entered promiscuous mode [ 639.120618][T32044] 8021q: adding VLAN 0 to HW filter on device bond6 [ 639.186219][T32044] bond6: (slave bridge5): making interface the new active one [ 639.193870][T32044] bridge5: entered promiscuous mode [ 639.207735][T32044] bridge5: left promiscuous mode [ 639.289458][T32072] xt_hashlimit: overflow, try lower: 18446744073709551613/4 [ 639.382212][T32075] xt_hashlimit: size too large, truncated to 1048576 [ 639.772142][T32103] bond10: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 639.792959][T32103] bond10 (unregistering): Released all slaves [ 640.121452][T32128] veth5: entered promiscuous mode [ 640.136553][T32130] bond0: Error: Cannot enslave bond to itself. [ 640.330613][T32138] bond6 (unregistering): Released all slaves [ 640.475209][T32148] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 640.540117][T32148] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 640.970701][T32182] syzkaller0: entered promiscuous mode [ 640.981363][T32182] syzkaller0: entered allmulticast mode [ 641.076182][T32186] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 641.330401][T32198] 8021q: adding VLAN 0 to HW filter on device ipvlan3 [ 641.361457][T32198] bond0: (slave ipvlan3): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 641.506681][T32202] 8021q: adding VLAN 0 to HW filter on device bond10 [ 641.565154][T32204] macvlan2: entered promiscuous mode [ 641.596922][T32204] macvlan2: entered allmulticast mode [ 641.617385][T32204] bond10: entered allmulticast mode [ 641.631601][T32204] bond10: entered promiscuous mode [ 641.634269][T32226] __nla_validate_parse: 26 callbacks suppressed [ 641.634290][T32226] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7704'. [ 641.639878][T32204] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 641.664460][T32204] team0: Port device macvlan2 added [ 641.768061][T32230] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7705'. [ 641.786379][T32230] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7705'. [ 641.803671][T32230] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7705'. [ 641.851138][T32238] xt_NFQUEUE: number of queues (27568) out of range (got 68779) [ 641.860884][T32230] tipc: Enabled bearer , priority 0 [ 641.907697][T32230] syzkaller0: entered promiscuous mode [ 641.913303][T32230] syzkaller0: entered allmulticast mode [ 641.942570][T32230] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 641.978508][T32230] tipc: Resetting bearer [ 641.998910][T32229] tipc: Resetting bearer [ 642.020169][T32229] tipc: Disabling bearer [ 642.167867][T32252] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7712'. [ 642.218679][T32255] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7713'. [ 642.281578][T32264] openvswitch: netlink: Invalid MD length 60718 for MD type 0 [ 642.294421][T32264] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 642.432025][T32270] netlink: 32 bytes leftover after parsing attributes in process `syz.1.7720'. [ 642.464517][T32275] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7721'. [ 642.480424][T32275] x_tables: duplicate underflow at hook 1 [ 642.486995][T32275] netlink: 88 bytes leftover after parsing attributes in process `syz.2.7721'. [ 642.500957][T32275] netem: invalid attributes len -24 [ 642.507926][T32275] netem: change failed [ 642.525614][T32272] netlink: 60 bytes leftover after parsing attributes in process `syz.0.7718'. [ 642.668694][T32286] dvmrp6: entered allmulticast mode [ 642.819690][T32298] syzkaller0: entered promiscuous mode [ 642.831668][T32298] syzkaller0: entered allmulticast mode [ 643.031708][T32313] xt_hashlimit: overflow, try lower: 18446744073709551613/4 [ 643.039853][T32312] xt_hashlimit: overflow, try lower: 18446744073709551613/4 [ 644.167039][T32368] validate_nla: 13 callbacks suppressed [ 644.167057][T32368] netlink: 'syz.1.7748': attribute type 5 has an invalid length. [ 644.193528][T32367] x_tables: unsorted entry at hook 1 [ 644.383893][T32380] netlink: 'syz.3.7751': attribute type 1 has an invalid length. [ 644.406191][T32384] netlink: 'syz.1.7752': attribute type 2 has an invalid length. [ 644.447299][T32388] bond9: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 644.460454][T32388] bond9: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 644.471249][T32388] bond9: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 644.508070][T32384] veth1_to_hsr: entered allmulticast mode [ 644.586304][T32392] netlink: 'syz.1.7752': attribute type 10 has an invalid length. [ 644.633735][T32392] team0: Port device dummy0 added [ 644.683399][T32401] bridge0: entered allmulticast mode [ 644.839191][ C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 645.027092][T32420] netlink: 'syz.4.7764': attribute type 1 has an invalid length. [ 645.625050][T32454] netlink: 'syz.4.7776': attribute type 11 has an invalid length. [ 645.634712][T32455] netlink: 'syz.4.7776': attribute type 11 has an invalid length. [ 645.982318][T32477] netlink: 'syz.0.7782': attribute type 7 has an invalid length. [ 646.384145][T32504] bridge_slave_0: default FDB implementation only supports local addresses [ 646.399982][T32504] bridge_slave_0: default FDB implementation only supports local addresses [ 646.468861][T32510] geneve2: entered promiscuous mode [ 646.529870][T32516] geneve2: entered promiscuous mode [ 646.665937][T32526] __nla_validate_parse: 29 callbacks suppressed [ 646.665956][T32526] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7801'. [ 646.691524][T32527] netlink: 165 bytes leftover after parsing attributes in process `syz.4.7799'. [ 646.718135][T32534] netlink: 44 bytes leftover after parsing attributes in process `syz.3.7801'. [ 646.739916][T32534] netlink: 21 bytes leftover after parsing attributes in process `syz.3.7801'. [ 646.769838][T32534] netlink: 21 bytes leftover after parsing attributes in process `syz.3.7801'. [ 646.853107][T32541] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 647.088860][T32554] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7808'. [ 647.164351][T32554] netlink: 'syz.1.7808': attribute type 7 has an invalid length. [ 647.189366][T32554] netlink: 'syz.1.7808': attribute type 8 has an invalid length. [ 647.211767][T32554] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7808'. [ 647.302884][ T30] audit: type=1107 audit(1764947003.316:9): pid=32568 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 647.406348][T32575] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7814'. [ 647.408549][T32572] bond7: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 647.545783][T32582] netlink: 'syz.1.7816': attribute type 10 has an invalid length. [ 647.556346][T32579] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7813'. [ 647.566740][T32572] bond7 (unregistering): Released all slaves [ 647.577515][T32579] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7813'. [ 647.627929][T32582] bond0: (slave ): Opening slave failed [ 647.810894][T32595] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 648.007196][T32610] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 648.028992][T32600] openvswitch: netlink: Missing valid actions attribute. [ 648.037553][T32600] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 648.225235][T32620] tipc: Enabled bearer , priority 0 [ 648.244626][T32620] syzkaller0: entered promiscuous mode [ 648.266303][T32620] syzkaller0: entered allmulticast mode [ 648.288712][T32624] netlink: 'syz.1.7829': attribute type 1 has an invalid length. [ 648.295104][T32625] xt_CT: You must specify a L4 protocol and not use inversions on it [ 648.326149][T32620] tipc: Resetting bearer [ 648.341722][T32616] tipc: Resetting bearer [ 648.385561][T32616] tipc: Disabling bearer [ 648.454911][T32627] bridge0: port 2(bridge_slave_1) entered disabled state [ 648.462742][T32627] bridge0: port 1(bridge_slave_0) entered disabled state [ 648.542616][T32627] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 648.557545][T32627] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 648.677228][ T24] lo speed is unknown, defaulting to 1000 [ 648.692506][ T24] sz1: Port: 1 Link DOWN [ 648.705049][T32630] team_slave_0: entered promiscuous mode [ 648.711315][T32630] team_slave_1: entered promiscuous mode [ 648.717136][T32630] geneve0: entered promiscuous mode [ 648.736050][T32630] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 648.743905][T32630] team0: Device macvtap1 is already an upper device of the team interface [ 648.769458][T32630] team_slave_0: left promiscuous mode [ 648.775098][T32630] team_slave_1: left promiscuous mode [ 648.780890][T32630] geneve0: left promiscuous mode [ 648.900209][T30144] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 648.913193][T30144] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 648.926754][T11851] lo speed is unknown, defaulting to 1000 [ 648.934836][T30144] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 648.956634][T30144] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 648.987414][T30144] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 649.026762][T30144] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 649.048613][T30144] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 649.090161][T30144] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 650.230068][T32733] syzkaller0: entered promiscuous mode [ 650.258867][T32733] syzkaller0: entered allmulticast mode [ 650.433295][T32749] 8021q: VLANs not supported on gre0 [ 650.948055][ T312] syzkaller0: entered promiscuous mode [ 650.959424][ T312] syzkaller0: entered allmulticast mode [ 650.964440][ T316] openvswitch: netlink: Unknown key attributes 2 [ 651.231420][ T331] validate_nla: 2 callbacks suppressed [ 651.231439][ T331] netlink: 'syz.2.7884': attribute type 1 has an invalid length. [ 651.247769][ T331] NCSI netlink: No device for ifindex 0 [ 651.271560][ T331] netlink: 'syz.2.7884': attribute type 1 has an invalid length. [ 651.292924][ T331] NCSI netlink: No device for ifindex 0 [ 651.383630][ T340] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 651.532922][ T351] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 651.728043][ T369] netem: unknown loss type 0 [ 651.736744][ T369] netem: change failed [ 651.747798][ T365] syzkaller0: entered promiscuous mode [ 651.774556][ T365] syzkaller0: entered allmulticast mode [ 651.781686][ T372] __nla_validate_parse: 16 callbacks suppressed [ 651.781703][ T372] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7895'. [ 651.945384][ T384] netlink: 'syz.3.7901': attribute type 11 has an invalid length. [ 651.969134][ T384] netlink: 199788 bytes leftover after parsing attributes in process `syz.3.7901'. [ 652.152076][ T393] veth0: entered promiscuous mode [ 652.163182][ T393] veth0: left promiscuous mode [ 652.318570][ T402] syzkaller1: entered promiscuous mode [ 652.324093][ T402] syzkaller1: entered allmulticast mode [ 652.467575][ T406] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7910'. [ 652.481834][ T406] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7910'. [ 652.491667][ T406] netlink: 'syz.2.7910': attribute type 20 has an invalid length. [ 652.541155][ T7557] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 652.541280][ T406] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7910'. [ 652.556155][ T7557] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 652.573877][ T7557] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 652.583388][ T406] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7910'. [ 652.603213][ T406] netlink: 'syz.2.7910': attribute type 20 has an invalid length. [ 652.613771][ T7557] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 652.623849][ T420] veth0_to_bond: entered allmulticast mode [ 652.808861][ T431] netlink: 'syz.0.7917': attribute type 1 has an invalid length. [ 652.817943][ T431] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7917'. [ 652.844425][ T432] netlink: 'syz.0.7917': attribute type 1 has an invalid length. [ 652.856869][ T432] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7917'. [ 652.907332][ T435] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7918'. [ 652.963636][ T440] syzkaller0: entered promiscuous mode [ 652.988625][ T440] syzkaller0: entered allmulticast mode [ 653.086022][ T446] sit0: entered promiscuous mode [ 653.103072][ T446] netlink: 'syz.2.7923': attribute type 1 has an invalid length. [ 653.130193][ T446] netlink: 1 bytes leftover after parsing attributes in process `syz.2.7923'. [ 653.219941][ T454] netlink: 'syz.3.7926': attribute type 1 has an invalid length. [ 653.295835][ T455] veth0_to_bond: left allmulticast mode [ 653.320529][ T455] bond2: (slave veth0_to_bond): Releasing active interface [ 653.417174][ T468] syzkaller0: entered promiscuous mode [ 653.425869][ T468] syzkaller0: entered allmulticast mode [ 653.935531][ T492] vcan0: tx drop: invalid sa for name 0xffffffffffffffff [ 654.033064][ T505] vlan3: entered promiscuous mode [ 654.047017][ T505] vlan3: entered allmulticast mode [ 654.052178][ T505] hsr_slave_1: entered allmulticast mode [ 654.401872][ T528] netlink: 'syz.0.7950': attribute type 3 has an invalid length. [ 654.609867][ T542] netlink: 'syz.4.7954': attribute type 8 has an invalid length. [ 655.371000][ T575] bond7: option miimon: invalid value (18446744073709551585) [ 655.419908][ T575] bond7: option miimon: allowed values 0 - 2147483647 [ 655.441270][ T575] bond7 (unregistering): Released all slaves [ 655.493203][ T601] openvswitch: netlink: Flow actions attr not present in new flow. [ 655.510733][ T595] ipvlan3: entered promiscuous mode [ 655.718985][ T614] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 655.790248][ T614] veth1_macvtap: left promiscuous mode [ 655.798832][ T614] team0: Device veth1_macvtap failed to register rx_handler [ 656.065478][ T633] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 656.320987][ T641] bond10: entered allmulticast mode [ 656.387387][ T641] ip6gretap1: entered allmulticast mode [ 656.438772][ T641] bond10: (slave ip6gretap1): Enslaving as an active interface with an up link [ 656.768270][ T672] netlink: 'syz.0.7995': attribute type 11 has an invalid length. [ 656.806982][ T672] netlink: 'syz.0.7995': attribute type 11 has an invalid length. [ 656.815273][ T672] __nla_validate_parse: 15 callbacks suppressed [ 656.815291][ T672] netlink: 224 bytes leftover after parsing attributes in process `syz.0.7995'. [ 656.901905][ T677] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7997'. [ 656.984841][ T680] netlink: 32 bytes leftover after parsing attributes in process `syz.4.7999'. [ 657.069390][ T689] validate_nla: 2 callbacks suppressed [ 657.069411][ T689] netlink: 'syz.0.8003': attribute type 1 has an invalid length. [ 657.109680][ T689] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8003'. [ 657.619943][ T726] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 657.698032][ T731] nbd4: detected capacity change from 0 to 63 [ 657.698946][ T726] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 657.720245][ T738] block nbd4: NBD_DISCONNECT [ 657.733787][ T738] block nbd4: Disconnected due to user request. [ 657.742722][ T738] block nbd4: shutting down sockets [ 657.869335][ T726] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 657.941339][ T751] netlink: 100 bytes leftover after parsing attributes in process `syz.0.8017'. [ 658.041931][ T755] netlink: 52 bytes leftover after parsing attributes in process `syz.2.8019'. [ 658.059062][ T726] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 658.271786][ T3517] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 658.308118][ T3517] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 658.372714][ T775] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 658.399492][T17124] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 658.423437][ T783] netlink: 'syz.3.8026': attribute type 2 has an invalid length. [ 658.469884][ T3505] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 658.617454][ T794] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8028'. [ 658.654197][ T794] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8028'. [ 658.667025][ T794] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8028'. [ 658.677199][ T794] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8028'. [ 658.947569][ T811] dvmrp0: left allmulticast mode [ 659.112268][ T826] bridge_slave_0: default FDB implementation only supports local addresses [ 659.132889][ T826] bridge_slave_0: default FDB implementation only supports local addresses [ 659.259911][ T839] netlink: 'syz.3.8047': attribute type 9 has an invalid length. [ 685.799385][ T1302] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 705.853623][ T867] __nla_validate_parse: 64 callbacks suppressed [ 705.853644][ T867] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8055'. [ 705.890404][ T867] netlink: 'syz.2.8055': attribute type 2 has an invalid length. [ 705.923631][ T872] tipc: Enabled bearer , priority 13 [ 706.074620][ T886] netlink: 'syz.4.8059': attribute type 2 has an invalid length. [ 706.085006][ T888] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 706.095725][ T886] netlink: 244 bytes leftover after parsing attributes in process `syz.4.8059'. [ 706.131013][ T892] netlink: 256 bytes leftover after parsing attributes in process `syz.0.8062'. [ 706.375012][ T915] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8066'. [ 706.416678][ T916] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8068'. [ 706.434073][ T916] tipc: Invalid UDP bearer configuration [ 706.434133][ T916] tipc: Enabling of bearer rejected, failed to enable media [ 706.528353][ T930] sctp: [Deprecated]: syz.1.8068 (pid 930) Use of int in maxseg socket option. [ 706.528353][ T930] Use struct sctp_assoc_value instead [ 706.540888][ T928] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8072'. [ 706.613602][ T928] tipc: Enabling of bearer rejected, media not registered [ 706.780555][ T933] 8021q: adding VLAN 0 to HW filter on device bond0 [ 706.802396][ T933] bond0: (slave caif0): The slave device specified does not support setting the MAC address [ 706.814006][ T933] bond0: (slave caif0): Error -95 calling set_mac_address [ 706.850040][ T933] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8073'. [ 706.893722][ T948] netlink: zone id is out of range [ 706.911574][ T948] netlink: del zone limit has 4 unknown bytes [ 707.023350][ T964] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8082'. [ 707.033578][ T967] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 707.112596][ T964] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 707.133797][T11851] tipc: Node number set to 3688235715 [ 707.156940][ T980] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 707.306786][ T990] xt_ipcomp: unknown flags 1D [ 707.696161][ T1012] netlink: 'syz.4.8089': attribute type 1 has an invalid length. [ 707.746052][ T1012] netlink: 224 bytes leftover after parsing attributes in process `syz.4.8089'. [ 707.757315][ T1012] workqueue: Failed to create a rescuer kthread for wq "phy7": -EINTR [ 707.856336][ T1026] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8093'. [ 708.297188][ T1070] netlink: 'syz.1.8100': attribute type 2 has an invalid length. [ 708.305069][ T1047] A link change request failed with some changes committed already. Interface veth0_to_bridge may have been left with an inconsistent configuration, please check. [ 708.368517][ T1075] netlink: 'syz.3.8103': attribute type 10 has an invalid length. [ 708.440831][ T1076] netlink: 'syz.3.8103': attribute type 10 has an invalid length. [ 708.452792][ T1068] syzkaller0: entered promiscuous mode [ 708.461270][ T1068] syzkaller0: entered allmulticast mode [ 710.731157][ T1129] tipc: Enabled bearer , priority 0 [ 710.753708][ T1129] syzkaller0: entered promiscuous mode [ 710.785960][ T1129] syzkaller0: entered allmulticast mode [ 710.817454][ T1129] tipc: Resetting bearer [ 710.859452][ T1125] tipc: Resetting bearer [ 710.930662][ T1125] tipc: Disabling bearer [ 710.969074][ T1151] __nla_validate_parse: 8 callbacks suppressed [ 710.969093][ T1151] netlink: 36 bytes leftover after parsing attributes in process `syz.0.8122'. [ 711.050723][ T1157] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8127'. [ 711.277729][ T1175] netlink: 'syz.4.8133': attribute type 1 has an invalid length. [ 711.306646][ T1175] netlink: 'syz.4.8133': attribute type 1 has an invalid length. [ 711.316812][ T1180] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8133'. [ 711.347817][ T1179] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8134'. [ 711.372709][ T1182] netlink: 1 bytes leftover after parsing attributes in process `syz.0.8135'. [ 711.394423][ T1179] geneve2: entered promiscuous mode [ 711.573999][ T1194] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8140'. [ 711.629428][ T1196] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 711.884385][ T1217] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8149'. [ 711.978289][ T1217] syzkaller0: entered promiscuous mode [ 711.985320][ T1217] syzkaller0: entered allmulticast mode [ 711.995976][ T1227] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8151'. [ 712.026099][ T1223] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 712.071371][ T1217] netlink: 36 bytes leftover after parsing attributes in process `syz.4.8149'. [ 712.161274][ T1237] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8154'. [ 712.263444][ T1245] sctp: [Deprecated]: syz.3.8156 (pid 1245) Use of int in maxseg socket option. [ 712.263444][ T1245] Use struct sctp_assoc_value instead [ 713.977387][ T1237] workqueue: Failed to create a rescuer kthread for wq "bond10": -EINTR [ 714.071989][ T1255] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 714.790766][ T1310] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 715.018847][ T1331] netem: incorrect ge model size [ 715.033041][ T1331] netem: change failed [ 715.463686][ T1371] netlink: 'syz.4.8189': attribute type 12 has an invalid length. [ 715.490703][ T1371] netlink: 'syz.4.8189': attribute type 29 has an invalid length. [ 715.501659][ T1364] netlink: 'syz.3.8187': attribute type 1 has an invalid length. [ 715.735272][ T1394] openvswitch: netlink: Message has 8 unknown bytes. [ 715.772029][ T1397] netlink: 'syz.1.8194': attribute type 21 has an invalid length. [ 715.822281][ T1399] netlink: 'syz.2.8197': attribute type 1 has an invalid length. [ 715.988168][ T1419] __nla_validate_parse: 7 callbacks suppressed [ 715.988186][ T1419] netlink: 56 bytes leftover after parsing attributes in process `syz.2.8202'. [ 716.011034][ T1419] netlink: 56 bytes leftover after parsing attributes in process `syz.2.8202'. [ 716.036485][ T1424] netlink: 'syz.3.8200': attribute type 11 has an invalid length. [ 716.081438][ T1428] ip6t_REJECT: ECHOREPLY is not supported [ 716.147918][ T1431] netlink: 'syz.4.8205': attribute type 10 has an invalid length. [ 716.256447][ T1435] netlink: 'syz.2.8207': attribute type 29 has an invalid length. [ 716.732623][ T1460] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8216'. [ 716.761051][ T1460] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8216'. [ 716.807427][ T1460] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8216'. [ 716.820629][ T1460] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8216'. [ 716.933264][ T1475] bridge6: entered promiscuous mode [ 716.987122][ T1475] bridge6: entered allmulticast mode [ 717.037114][ T1475] team0: Port device bridge6 added [ 717.042752][ T1480] bridge0: port 1(team0) entered blocking state [ 717.061539][ T1480] bridge0: port 1(team0) entered disabled state [ 717.071321][ T1480] team0: entered allmulticast mode [ 717.102315][ T1480] geneve0: entered allmulticast mode [ 717.126932][ T1480] dummy0: entered allmulticast mode [ 717.151570][ T1480] team0: entered promiscuous mode [ 717.158213][ T1480] geneve0: entered promiscuous mode [ 717.174174][ T1480] dummy0: entered promiscuous mode [ 717.181640][ T1480] bridge0: port 1(team0) entered blocking state [ 717.188098][ T1480] bridge0: port 1(team0) entered forwarding state [ 717.239226][ T1494] veth7: entered allmulticast mode [ 717.287755][ T1501] tipc: Failed to remove unknown binding: 66,1,1/1:4180622161/4180622163 [ 717.382406][ T1508] SET target dimension over the limit! [ 717.562566][ T1522] netlink: 60 bytes leftover after parsing attributes in process `syz.0.8233'. [ 717.604142][ T1521] netlink: 32 bytes leftover after parsing attributes in process `syz.2.8235'. [ 717.982600][ T1545] syzkaller1: entered promiscuous mode [ 717.988975][ T1545] syzkaller1: entered allmulticast mode [ 718.052884][ T1551] vxcan1 speed is unknown, defaulting to 1000 [ 718.054927][ T1548] netlink: 'syz.2.8243': attribute type 11 has an invalid length. [ 718.070979][ T1548] netlink: 'syz.2.8243': attribute type 11 has an invalid length. [ 718.079323][ T1548] netlink: 224 bytes leftover after parsing attributes in process `syz.2.8243'. [ 718.124863][ T1547] netlink: 'syz.2.8243': attribute type 11 has an invalid length. [ 718.133559][ T1547] netlink: 'syz.2.8243': attribute type 11 has an invalid length. [ 718.152613][ T1547] netlink: 224 bytes leftover after parsing attributes in process `syz.2.8243'. [ 718.354642][ T1551] lo speed is unknown, defaulting to 1000 [ 718.455296][ T1558] netlink: 'syz.4.8247': attribute type 142 has an invalid length. [ 718.680301][ T1571] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 718.694944][ T1574] x_tables: duplicate underflow at hook 1 [ 718.977492][ T1588] veth0: entered promiscuous mode [ 719.010622][ T1596] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 719.028615][ T1587] veth0: left promiscuous mode [ 719.108665][ T1600] netlink: 'syz.1.8257': attribute type 1 has an invalid length. [ 719.283046][ T1616] vlan2: entered promiscuous mode [ 719.305905][ T1616] bridge0: entered promiscuous mode [ 719.413363][ T1609] 8021q: adding VLAN 0 to HW filter on device bond11 [ 719.434440][ T1627] netlink: 'syz.0.8263': attribute type 1 has an invalid length. [ 719.486841][ T1609] bond10: (slave bond11): making interface the new active one [ 719.548106][ T1609] bond10: (slave bond11): Enslaving as an active interface with an up link [ 719.606295][ T1613] bond10: (slave ipvlan4): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 719.634601][ T1635] netlink: 'syz.2.8264': attribute type 12 has an invalid length. [ 719.645103][ T1635] netlink: 'syz.2.8264': attribute type 11 has an invalid length. [ 719.653650][ T1613] bond10: (slave ipvlan4): The slave device specified does not support setting the MAC address [ 719.730810][ T1629] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 719.876598][ T1645] netlink: 'syz.0.8268': attribute type 15 has an invalid length. [ 720.212442][ T1667] syzkaller0: entered promiscuous mode [ 720.236574][ T1667] syzkaller0: entered allmulticast mode [ 720.250785][ T1671] netlink: 'syz.3.8278': attribute type 1 has an invalid length. [ 720.608637][ T1697] syzkaller0: entered promiscuous mode [ 720.614244][ T1697] syzkaller0: entered allmulticast mode [ 720.929354][ T1721] tc_dump_action: action bad kind [ 721.026946][ T1733] netlink: 'syz.4.8294': attribute type 1 has an invalid length. [ 721.068104][ T1733] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 721.171113][ T1745] netlink: 'syz.1.8296': attribute type 3 has an invalid length. [ 721.327763][ T1749] netlink: 'syz.4.8298': attribute type 14 has an invalid length. [ 721.769470][ T1782] 8021q: adding VLAN 0 to HW filter on device bond7 [ 721.821228][ T1786] bond7: (slave veth11): Enslaving as an active interface with a down link [ 722.004735][ T1807] __nla_validate_parse: 13 callbacks suppressed [ 722.004754][ T1807] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8313'. [ 722.113773][ T1800] syzkaller0: entered promiscuous mode [ 722.121158][ T1800] syzkaller0: entered allmulticast mode [ 722.178222][ T1800] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8312'. [ 723.942504][ T1812] syzkaller1: entered promiscuous mode [ 723.949813][ T1812] syzkaller1: entered allmulticast mode [ 724.183205][ T1841] validate_nla: 2 callbacks suppressed [ 724.183225][ T1841] netlink: 'syz.3.8323': attribute type 1 has an invalid length. [ 724.203217][ T1842] netlink: 20 bytes leftover after parsing attributes in process `syz.4.8322'. [ 724.215770][ T1841] netlink: 228 bytes leftover after parsing attributes in process `syz.3.8323'. [ 724.259163][ T1842] rdma_rxe: rxe_newlink: failed to add ip6_vti0 [ 724.480348][ T1846] netlink: 36 bytes leftover after parsing attributes in process `syz.0.8325'. [ 724.509031][ T1847] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8326'. [ 724.718824][ T1856] x_tables: duplicate underflow at hook 2 [ 724.752653][ T1860] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8329'. [ 724.856430][ T1865] sctp: [Deprecated]: syz.4.8331 (pid 1865) Use of int in maxseg socket option. [ 724.856430][ T1865] Use struct sctp_assoc_value instead [ 724.888264][ T1866] sctp: [Deprecated]: syz.4.8331 (pid 1866) Use of int in maxseg socket option. [ 724.888264][ T1866] Use struct sctp_assoc_value instead [ 724.960701][ T1870] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8332'. [ 725.001602][ T1872] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 725.048911][ T1876] netlink: 76 bytes leftover after parsing attributes in process `syz.4.8333'. [ 725.067014][ T1870] : entered promiscuous mode [ 725.310220][ T1895] netlink: 56 bytes leftover after parsing attributes in process `syz.2.8341'. [ 725.590676][ T1910] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 725.699158][ T1914] vxcan1 speed is unknown, defaulting to 1000 [ 725.838424][ T1926] vlan3: entered promiscuous mode [ 725.844084][ T1926] vlan3: entered allmulticast mode [ 726.069044][ T1914] lo speed is unknown, defaulting to 1000 [ 726.469940][T17125] tipc: Subscription rejected, illegal request [ 727.000510][ T1984] sctp: [Deprecated]: syz.4.8367 (pid 1984) Use of struct sctp_assoc_value in delayed_ack socket option. [ 727.000510][ T1984] Use struct sctp_sack_info instead [ 727.041279][ T1984] sctp: [Deprecated]: syz.4.8367 (pid 1984) Use of struct sctp_assoc_value in delayed_ack socket option. [ 727.041279][ T1984] Use struct sctp_sack_info instead [ 727.419083][ T2004] __nla_validate_parse: 11 callbacks suppressed [ 727.419104][ T2004] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8373'. [ 727.666261][ T2014] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 727.686648][ T2015] netlink: 44 bytes leftover after parsing attributes in process `syz.1.8377'. [ 727.712617][ T2015] netlink: 35 bytes leftover after parsing attributes in process `syz.1.8377'. [ 727.721342][ T2007] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8373'. [ 727.752638][ T2015] netlink: 'syz.1.8377': attribute type 5 has an invalid length. [ 727.769140][ T2014] openvswitch: netlink: Message has 8 unknown bytes. [ 727.793401][ T2015] netlink: 'syz.1.8377': attribute type 6 has an invalid length. [ 727.813664][ T2015] netlink: 35 bytes leftover after parsing attributes in process `syz.1.8377'. [ 728.129523][ T2044] netlink: 96 bytes leftover after parsing attributes in process `syz.2.8386'. [ 728.176938][ T2044] vlan2: entered allmulticast mode [ 728.192536][ T2044] gretap0: entered allmulticast mode [ 728.324668][ T2058] netlink: 20 bytes leftover after parsing attributes in process `syz.3.8393'. [ 728.399557][ T2065] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8395'. [ 728.459129][ T2069] openvswitch: netlink: Actions may not be safe on all matching packets [ 728.571997][ T2081] netlink: 18 bytes leftover after parsing attributes in process `syz.0.8400'. [ 728.745041][ T2090] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 728.944862][ T2105] netlink: 'syz.4.8406': attribute type 10 has an invalid length. [ 728.964589][ T2108] netlink: 32 bytes leftover after parsing attributes in process `syz.2.8408'. [ 729.073698][ T2119] netlink: 'syz.4.8410': attribute type 7 has an invalid length. [ 729.092435][ T2108] SET target dimension over the limit! [ 729.151678][ T2129] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 729.218046][ T2138] openvswitch: netlink: nsh attr 0 has unexpected len 116 expected 0 [ 729.254507][ T2138] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 729.279350][ T2136] dvmrp0: entered allmulticast mode [ 729.331148][ T2145] Bluetooth: MGMT ver 1.23 [ 729.352222][ T2142] vxcan1 speed is unknown, defaulting to 1000 [ 729.619876][ T2154] tipc: Enabled bearer , priority 0 [ 729.652851][ T2154] bridge0: entered promiscuous mode [ 729.660039][ T2154] bridge0: entered allmulticast mode [ 729.691453][ T2154] tipc: Resetting bearer [ 729.724571][ T2153] tipc: Disabling bearer [ 729.829316][ T2142] lo speed is unknown, defaulting to 1000 [ 730.191704][ T2174] bridge6: entered promiscuous mode [ 730.197903][ T2174] bridge6: entered allmulticast mode [ 731.379016][ T2214] netlink: 'syz.0.8436': attribute type 1 has an invalid length. [ 732.494168][ T2269] __nla_validate_parse: 15 callbacks suppressed [ 732.494186][ T2269] netlink: 44 bytes leftover after parsing attributes in process `syz.1.8454'. [ 732.542345][ T2274] netlink: 20 bytes leftover after parsing attributes in process `syz.4.8457'. [ 732.557118][ T2277] netlink: 'syz.2.8455': attribute type 2 has an invalid length. [ 732.626322][ T2280] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 732.672988][ T2280] openvswitch: netlink: push_nsh: missing base or metadata attributes [ 732.688569][ T2289] netlink: 36 bytes leftover after parsing attributes in process `syz.4.8460'. [ 732.709909][ T2280] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 732.836211][ T2297] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8463'. [ 732.869684][ T2297] netlink: 60 bytes leftover after parsing attributes in process `syz.1.8463'. [ 733.115091][ T2312] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8468'. [ 733.139780][ T2317] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8470'. [ 733.296917][ T2321] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8471'. [ 733.329418][ T2323] erspan0: entered allmulticast mode [ 733.554275][ T2335] netlink: 64 bytes leftover after parsing attributes in process `syz.1.8474'. [ 733.638975][ T2339] netlink: 48 bytes leftover after parsing attributes in process `syz.3.8478'. [ 733.668370][ T2338] vxcan1: tx address claim with dest, not broadcast [ 733.767862][ T2345] sock: sock_timestamping_bind_phc: sock not bind to device [ 734.132183][ T2360] netlink: 'syz.0.8485': attribute type 10 has an invalid length. [ 734.160966][ T2360] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 734.181966][ T2364] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 734.216421][ T2364] mac80211_hwsim hwsim56 syzkaller0: entered promiscuous mode [ 734.223948][ T2364] mac80211_hwsim hwsim56 syzkaller0: entered allmulticast mode [ 734.241320][ T2370] sctp: [Deprecated]: syz.2.8489 (pid 2370) Use of struct sctp_assoc_value in delayed_ack socket option. [ 734.241320][ T2370] Use struct sctp_sack_info instead [ 734.262649][ T2369] bridge0: port 3(ipvlan2) entered blocking state [ 734.271817][ T2369] bridge0: port 3(ipvlan2) entered disabled state [ 734.275773][ T2368] sctp: [Deprecated]: syz.2.8489 (pid 2368) Use of struct sctp_assoc_value in delayed_ack socket option. [ 734.275773][ T2368] Use struct sctp_sack_info instead [ 734.297314][ T2369] ipvlan2: entered allmulticast mode [ 734.307223][ T2369] ipvlan2: left allmulticast mode [ 734.335149][ T2365] veth0_macvtap: left promiscuous mode [ 734.733035][ T2394] syzkaller0: entered promiscuous mode [ 734.745316][ T2394] syzkaller0: entered allmulticast mode [ 734.829686][ T2410] openvswitch: netlink: IP tunnel dst address not specified [ 734.944157][ T2417] vlan0: entered promiscuous mode [ 734.957482][ T2417] vlan0: entered allmulticast mode [ 734.967430][ T2417] veth0_vlan: entered allmulticast mode [ 735.241828][ T2424] bond6: option mode: invalid value (133) [ 735.269148][ T2424] bond6 (unregistering): Released all slaves [ 735.331426][ T2439] bridge0: port 3(vlan4) entered blocking state [ 735.338055][ T2439] bridge0: port 3(vlan4) entered disabled state [ 735.344700][ T2439] vlan4: entered allmulticast mode [ 735.387569][ T2439] vlan4: left allmulticast mode [ 735.508772][ T2444] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 735.637735][ T2454] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 735.858242][ T2477] veth0: entered promiscuous mode [ 735.871746][ T2477] veth0: left promiscuous mode [ 736.004621][ T2486] netlink: 'syz.3.8525': attribute type 19 has an invalid length. [ 736.029366][ T2492] netlink: 'syz.4.8526': attribute type 11 has an invalid length. [ 736.301545][ T2522] netlink: 'syz.1.8533': attribute type 21 has an invalid length. [ 736.532441][ T2534] bridge0: port 1(team0) entered disabled state [ 736.569831][ T2538] netlink: 'syz.1.8537': attribute type 16 has an invalid length. [ 736.585817][ T2538] netlink: 'syz.1.8537': attribute type 17 has an invalid length. [ 736.672678][ T2537] netlink: 'syz.3.8538': attribute type 7 has an invalid length. [ 736.686588][ T2538] lo: left promiscuous mode [ 736.693716][ T2538] gre0: left promiscuous mode [ 736.707157][ T2538] gre0: left allmulticast mode [ 736.714676][ T2538] erspan0: left allmulticast mode [ 736.747556][ T2538] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 736.778601][T29666] bridge0: port 1(team0) entered blocking state [ 736.785106][T29666] bridge0: port 1(team0) entered forwarding state [ 737.523833][ T2618] __nla_validate_parse: 15 callbacks suppressed [ 737.523852][ T2618] netlink: 376 bytes leftover after parsing attributes in process `syz.3.8556'. [ 737.851838][ T2650] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8566'. [ 738.050137][ T2666] netlink: 'syz.1.8567': attribute type 4 has an invalid length. [ 738.343423][ T2689] vxcan1 speed is unknown, defaulting to 1000 [ 738.531605][ T2709] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8579'. [ 738.593010][ T2711] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8574'. [ 738.771704][ T2689] lo speed is unknown, defaulting to 1000 [ 738.976803][ T2733] netlink: 40 bytes leftover after parsing attributes in process `syz.0.8585'. [ 739.044514][ T2739] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8589'. [ 739.489415][ T2778] sctp: [Deprecated]: syz.4.8595 (pid 2778) Use of int in maxseg socket option. [ 739.489415][ T2778] Use struct sctp_assoc_value instead [ 739.549076][ T2778] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8595'. [ 739.884219][ T2799] netlink: 5 bytes leftover after parsing attributes in process `syz.1.8600'. [ 740.424599][ T2824] netlink: 60 bytes leftover after parsing attributes in process `syz.2.8604'. [ 740.444433][ T2824] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8604'. [ 740.699089][ T2843] tipc: MTU too low for tipc bearer [ 740.722767][ T2846] xt_hashlimit: size too large, truncated to 1048576 [ 740.778665][ T2846] syz.2.8611: vmalloc error: size 10485760, failed to allocated page array size 20480, mode:0xcc2(GFP_KERNEL|__GFP_HIGHMEM), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 740.836862][ T2846] CPU: 1 UID: 0 PID: 2846 Comm: syz.2.8611 Not tainted syzkaller #0 PREEMPT(full) [ 740.836889][ T2846] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 740.836900][ T2846] Call Trace: [ 740.836908][ T2846] [ 740.836918][ T2846] dump_stack_lvl+0x189/0x250 [ 740.836949][ T2846] ? __pfx_dump_stack_lvl+0x10/0x10 [ 740.836969][ T2846] ? __pfx__printk+0x10/0x10 [ 740.836993][ T2846] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 740.837019][ T2846] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 740.837045][ T2846] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 740.837073][ T2846] warn_alloc+0x214/0x310 [ 740.837103][ T2846] ? __pfx_warn_alloc+0x10/0x10 [ 740.837134][ T2846] ? __get_vm_area_node+0x28f/0x300 [ 740.837177][ T2846] ? htable_create+0x101/0x7a0 [ 740.837204][ T2846] __vmalloc_node_range_noprof+0x690/0x12d0 [ 740.837255][ T2846] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 740.837276][ T2846] ? htable_create+0x101/0x7a0 [ 740.837300][ T2846] ? rcu_is_watching+0x15/0xb0 [ 740.837320][ T2846] ? htable_create+0x101/0x7a0 [ 740.837341][ T2846] __kvmalloc_node_noprof+0x670/0x910 [ 740.837363][ T2846] ? htable_create+0x101/0x7a0 [ 740.837382][ T2846] ? hashlimit_pernet+0x23/0x240 [ 740.837428][ T2846] ? hashlimit_pernet+0x23/0x240 [ 740.837448][ T2846] ? hashlimit_pernet+0x23/0x240 [ 740.837483][ T2846] htable_create+0x101/0x7a0 [ 740.837514][ T2846] hashlimit_mt_check_common+0x719/0xa10 [ 740.837547][ T2846] xt_check_match+0x3d1/0xab0 [ 740.837574][ T2846] ? __pfx_xt_check_match+0x10/0x10 [ 740.837599][ T2846] ? pcpu_alloc_noprof+0xf95/0x1750 [ 740.837629][ T2846] ? xt_find_match+0x1f7/0x250 [ 740.837655][ T2846] translate_table+0x1553/0x2040 [ 740.837693][ T2846] ? __pfx_translate_table+0x10/0x10 [ 740.837712][ T2846] ? __might_fault+0xb0/0x130 [ 740.837750][ T2846] ? _copy_from_user+0x94/0xb0 [ 740.837780][ T2846] do_ip6t_set_ctl+0x970/0xce0 [ 740.837800][ T2846] ? rcu_is_watching+0x15/0xb0 [ 740.837817][ T2846] ? trace_contention_end+0x39/0x100 [ 740.837835][ T2846] ? __pfx_do_ip6t_set_ctl+0x10/0x10 [ 740.837872][ T2846] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 740.837903][ T2846] ? __pfx_aa_sk_perm+0x10/0x10 [ 740.837933][ T2846] nf_setsockopt+0x26f/0x290 [ 740.837956][ T2846] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 740.837978][ T2846] do_sock_setsockopt+0x17c/0x1b0 [ 740.838005][ T2846] __x64_sys_setsockopt+0x13f/0x1b0 [ 740.838035][ T2846] do_syscall_64+0xfa/0xf80 [ 740.838058][ T2846] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 740.838080][ T2846] ? clear_bhb_loop+0x60/0xb0 [ 740.838102][ T2846] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 740.838118][ T2846] RIP: 0033:0x7fe2e4f8f749 [ 740.838134][ T2846] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 740.838148][ T2846] RSP: 002b:00007fe2e5e64038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 740.838167][ T2846] RAX: ffffffffffffffda RBX: 00007fe2e51e6090 RCX: 00007fe2e4f8f749 [ 740.838180][ T2846] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000004 [ 740.838190][ T2846] RBP: 00007fe2e5013f91 R08: 0000000000000588 R09: 0000000000000000 [ 740.838202][ T2846] R10: 00002000000014c0 R11: 0000000000000246 R12: 0000000000000000 [ 740.838213][ T2846] R13: 00007fe2e51e6128 R14: 00007fe2e51e6090 R15: 00007fff8aaac438 [ 740.838244][ T2846] [ 740.840668][ T2846] Mem-Info: [ 741.058105][ T2869] gretap0: entered promiscuous mode [ 741.077736][ T2846] active_anon:3905 inactive_anon:0 isolated_anon:0 [ 741.077736][ T2846] active_file:3399 inactive_file:40131 isolated_file:0 [ 741.077736][ T2846] unevictable:768 dirty:48 writeback:0 [ 741.077736][ T2846] slab_reclaimable:13955 slab_unreclaimable:238187 [ 741.077736][ T2846] mapped:29191 shmem:1357 pagetables:1065 [ 741.077736][ T2846] sec_pagetables:0 bounce:0 [ 741.077736][ T2846] kernel_misc_reclaimable:0 [ 741.077736][ T2846] free:1178770 free_pcp:14854 free_cma:0 [ 741.237904][ T2869] batadv_slave_1: entered promiscuous mode [ 741.249252][ T2846] Node 0 active_anon:15620kB inactive_anon:0kB active_file:13596kB inactive_file:160320kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:116764kB dirty:192kB writeback:0kB shmem:3892kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:17116kB pagetables:4140kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 741.287696][ T2846] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:120kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 741.320023][ T2869] hsr1: Slave A (gretap0) is not up; please bring it up to get a fully working HSR network [ 741.333364][ T2846] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 741.366968][ T2846] lowmem_reserve[]: 0 2504 2504 2504 2504 [ 741.372772][ T2846] Node 0 DMA32 free:798040kB boost:0kB min:34308kB low:42884kB high:51460kB reserved_highatomic:0KB free_highatomic:0KB active_anon:15520kB inactive_anon:0kB active_file:13596kB inactive_file:160320kB unevictable:1536kB writepending:192kB zspages:0kB present:3129332kB managed:2564516kB mlocked:0kB bounce:0kB free_pcp:50808kB local_pcp:25304kB free_cma:0kB [ 741.438905][ T2846] lowmem_reserve[]: 0 0 0 0 0 [ 741.443843][ T2846] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 741.495073][ T2846] lowmem_reserve[]: 0 0 0 0 0 [ 741.500022][ T2846] Node 1 Normal free:3901680kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:9984kB local_pcp:4448kB free_cma:0kB [ 741.536310][ T2846] lowmem_reserve[]: 0 0 0 0 0 [ 741.541440][ T2846] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 741.555178][ T2846] Node 0 DMA32: 357*4kB (UM) 547*8kB (UME) 360*16kB (UM) 1009*32kB (UME) 216*64kB (UME) 76*128kB (UME) 41*256kB (UME) 22*512kB (UME) 15*1024kB (UME) 9*2048kB (UME) 165*4096kB (UM) = 798796kB [ 741.576384][ T2846] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 741.620564][ T2846] Node 1 Normal: 178*4kB (UME) 57*8kB (UME) 48*16kB (UME) 205*32kB (UME) 63*64kB (UME) 14*128kB (UME) 3*256kB (UM) 5*512kB (UME) 3*1024kB (UME) 1*2048kB (E) 947*4096kB (M) = 3901680kB [ 741.643161][ T2846] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 741.676892][ T2846] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 741.686833][ T2846] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 741.698273][ T2846] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 741.707711][ T2846] 44884 total pagecache pages [ 741.712611][ T2846] 0 pages in swap cache [ 741.719310][ T2846] Free swap = 124996kB [ 741.723740][ T2846] Total swap = 124996kB [ 741.744022][ T2846] 2097051 pages RAM [ 741.748258][ T2846] 0 pages HighMem/MovableOnly [ 741.752942][ T2846] 424280 pages reserved [ 741.758340][ T2846] 0 pages cma reserved [ 741.821815][ T2905] netlink: 'syz.4.8627': attribute type 1 has an invalid length. [ 741.930382][ T2915] netlink: 'syz.3.8628': attribute type 12 has an invalid length. [ 742.031015][ T2922] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 742.052645][ T2926] sctp: [Deprecated]: syz.4.8631 (pid 2926) Use of int in maxseg socket option. [ 742.052645][ T2926] Use struct sctp_assoc_value instead [ 742.084332][ T2922] dvmrp6: entered allmulticast mode [ 742.412179][ T2949] openvswitch: netlink: Port -1 exceeds max allowable 65535 [ 742.422794][ T2949] tipc: Enabled bearer , priority 0 [ 742.440050][ T2949] mac80211_hwsim hwsim49 syzkaller0: entered promiscuous mode [ 742.475935][ T2949] mac80211_hwsim hwsim49 syzkaller0: entered allmulticast mode [ 742.495233][ T2955] netlink: 'syz.4.8643': attribute type 32 has an invalid length. [ 742.593079][ T2962] __nla_validate_parse: 7 callbacks suppressed [ 742.593099][ T2962] netlink: 64 bytes leftover after parsing attributes in process `syz.4.8645'. [ 742.638888][ T2962] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8645'. [ 742.652008][ T2974] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1514) ! [ 742.717413][ T2962] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 742.781646][ T2982] netlink: 'syz.4.8648': attribute type 10 has an invalid length. [ 742.906549][ T2992] netlink: 'syz.4.8651': attribute type 8 has an invalid length. [ 743.388738][ T3005] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 2660 [ 743.519719][ T52] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 743.532374][ T52] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 743.541432][ T52] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 743.566799][ T52] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 743.574504][ T52] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 743.597046][ T5830] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 743.606410][ T5830] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 743.613726][ T5830] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 743.641579][ T5830] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 743.649713][ T5830] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 743.831653][ T3008] vxcan1 speed is unknown, defaulting to 1000 [ 743.849758][ T3030] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8662'. [ 743.988242][ T3038] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 744.156667][ T3044] syzkaller1: entered promiscuous mode [ 744.195693][ T3044] syzkaller1: entered allmulticast mode [ 744.204528][ T3044] tipc: Enabling of bearer rejected, failed to enable media [ 744.344013][ T3008] lo speed is unknown, defaulting to 1000 [ 744.392750][ T3054] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8670'. [ 744.852657][ T3097] set match dimension is over the limit! [ 744.866638][ T3097] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8679'. [ 745.241496][ T3116] netlink: 4104 bytes leftover after parsing attributes in process `syz.2.8685'. [ 745.359410][ T3008] chnl_net:caif_netlink_parms(): no params data found [ 745.593369][ T3148] netlink: 44 bytes leftover after parsing attributes in process `syz.2.8693'. [ 745.597382][ T3146] netlink: 104 bytes leftover after parsing attributes in process `syz.3.8692'. [ 745.721028][ T5830] Bluetooth: hci2: command tx timeout [ 745.849185][ T3008] bridge0: port 1(bridge_slave_0) entered blocking state [ 745.877410][ T3008] bridge0: port 1(bridge_slave_0) entered disabled state [ 745.899112][ T3008] bridge_slave_0: entered allmulticast mode [ 745.912851][ T3008] bridge_slave_0: entered promiscuous mode [ 745.947897][ T3008] bridge0: port 2(bridge_slave_1) entered blocking state [ 745.959872][ T3008] bridge0: port 2(bridge_slave_1) entered disabled state [ 745.969131][ T3008] bridge_slave_1: entered allmulticast mode [ 745.986852][ T3008] bridge_slave_1: entered promiscuous mode [ 746.134169][ T3008] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 746.173999][ T3155] vxcan1 speed is unknown, defaulting to 1000 [ 746.180875][ T3008] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 746.252978][ T3191] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8701'. [ 747.243061][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 747.247450][ T1302] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 747.795719][ T5830] Bluetooth: hci2: command tx timeout [ 748.283067][ T3008] team0: Port device team_slave_0 added [ 748.317088][ T3155] lo speed is unknown, defaulting to 1000 [ 748.361556][ T3008] team0: Port device team_slave_1 added [ 748.460550][ T3008] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 748.485139][ T3008] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 748.544189][ T3008] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 748.570728][ T3008] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 748.578854][ T3008] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 748.606161][ T3008] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 748.687349][ T3211] netlink: 'syz.2.8709': attribute type 1 has an invalid length. [ 748.705695][ T3211] netlink: 224 bytes leftover after parsing attributes in process `syz.2.8709'. [ 748.716851][ T3211] NCSI netlink: No device for ifindex 0 [ 748.769422][ T3008] hsr_slave_0: entered promiscuous mode [ 748.780166][ T3008] hsr_slave_1: entered promiscuous mode [ 748.788749][ T3213] netlink: 40 bytes leftover after parsing attributes in process `syz.2.8710'. [ 748.789166][ T3008] debugfs: 'hsr0' already exists in 'hsr' [ 748.806318][ T3008] Cannot create hsr debugfs directory [ 749.300563][ T3227] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8714'. [ 749.421706][ T3237] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8717'. [ 749.508414][ T3008] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 749.558282][ T3237] netlink: 'syz.4.8717': attribute type 10 has an invalid length. [ 749.575642][ T3237] netlink: 40 bytes leftover after parsing attributes in process `syz.4.8717'. [ 749.584398][ T3249] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8720'. [ 749.605288][ T3237] dummy0: entered promiscuous mode [ 749.611843][ T3237] bridge0: port 3(dummy0) entered blocking state [ 749.645763][ T3237] bridge0: port 3(dummy0) entered disabled state [ 749.660061][ T3237] dummy0: entered allmulticast mode [ 749.673440][ T3237] bridge0: port 3(dummy0) entered blocking state [ 749.680974][ T3237] bridge0: port 3(dummy0) entered forwarding state [ 749.689844][ T3255] block nbd4: Unsupported socket: should be TCP or UNIX. [ 749.701656][ T3008] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 749.740646][ T3256] block nbd4: Unsupported socket: should be TCP or UNIX. [ 749.781155][ T3260] team0: Cannot enslave team device to itself [ 749.804182][ T3008] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 749.877792][ T5830] Bluetooth: hci2: command tx timeout [ 749.887793][ T3008] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 749.912401][ T3271] 8021q: VLANs not supported on ip_vti0 [ 750.174332][ T3281] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8730'. [ 750.259880][ T3008] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 750.280319][ T3289] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -12 [ 750.280411][ T3008] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 750.293830][ T3289] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -12 [ 750.312885][ T3008] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 750.333692][ T3293] netlink: 'syz.4.8732': attribute type 1 has an invalid length. [ 750.334791][ T3289] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 750.363867][ T3008] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 750.710754][ T3316] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8737'. [ 750.739445][ T3321] veth0_to_team: entered promiscuous mode [ 750.772359][ T3008] 8021q: adding VLAN 0 to HW filter on device bond0 [ 750.871361][ T3327] netlink: 'syz.3.8742': attribute type 39 has an invalid length. [ 750.891633][ T3008] 8021q: adding VLAN 0 to HW filter on device team0 [ 750.926691][ T3570] bridge0: port 1(bridge_slave_0) entered blocking state [ 750.933925][ T3570] bridge0: port 1(bridge_slave_0) entered forwarding state [ 750.991595][ T3570] bridge0: port 2(bridge_slave_1) entered blocking state [ 750.998819][ T3570] bridge0: port 2(bridge_slave_1) entered forwarding state [ 751.073646][ T3008] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 751.264139][ T3353] netlink: 340 bytes leftover after parsing attributes in process `syz.4.8749'. [ 751.397831][ T3008] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 751.508096][ T3366] netlink: 56 bytes leftover after parsing attributes in process `syz.3.8751'. [ 751.543264][ T3008] veth0_vlan: entered promiscuous mode [ 751.567420][ T3366] workqueue: Failed to create a rescuer kthread for wq "bond13": -EINTR [ 751.581662][ T3374] netlink: 'syz.0.8754': attribute type 1 has an invalid length. [ 751.590522][ T3008] veth1_vlan: entered promiscuous mode [ 751.661897][ T3375] syzkaller1: entered promiscuous mode [ 751.669773][ T3375] syzkaller1: entered allmulticast mode [ 751.742225][ T3008] veth0_macvtap: entered promiscuous mode [ 751.769300][ T3008] veth1_macvtap: entered promiscuous mode [ 751.824767][ T3008] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 751.850578][ T3008] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 751.874359][ T60] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 751.888874][ T60] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 751.901802][ T60] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 751.917996][ T60] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 751.966930][ T5830] Bluetooth: hci2: command tx timeout [ 751.997124][ T7557] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 752.004984][ T7557] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 752.038802][ T7557] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 752.047268][ T7557] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 794.625661][ T3392] __nla_validate_parse: 1 callbacks suppressed [ 794.625681][ T3392] netlink: 44 bytes leftover after parsing attributes in process `syz.3.8760'. [ 794.643753][ T3392] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8760'. [ 794.687260][ T3394] xt_hashlimit: size too large, truncated to 1048576 [ 795.120625][ T3439] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8767'. [ 795.267983][ T3455] netlink: 68 bytes leftover after parsing attributes in process `syz.2.8772'. [ 795.439678][ T3464] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8774'. [ 795.728307][ T3471] dvmrp6: entered allmulticast mode [ 795.915008][ T3477] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8778'. [ 796.062081][ T3493] sctp: [Deprecated]: syz.2.8784 (pid 3493) Use of struct sctp_assoc_value in delayed_ack socket option. [ 796.062081][ T3493] Use struct sctp_sack_info instead [ 796.093266][ T3570] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 796.095271][ T3490] 0: reclassify loop, rule prio 0, protocol 800 [ 796.120989][ T3490] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.8783'. [ 796.121244][ T3570] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 796.203814][ T3496] netlink: 'syz.0.8785': attribute type 10 has an invalid length. [ 796.218452][ T3496] batman_adv: batadv0: Adding interface: netdevsim0 [ 796.225088][ T3496] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 796.252670][ T3496] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active [ 796.413511][ T3508] tipc: Enabled bearer , priority 0 [ 796.468449][ T3508] tipc: Resetting bearer [ 796.470506][ T3513] netlink: 60 bytes leftover after parsing attributes in process `syz.0.8792'. [ 796.652781][ T3526] openvswitch: netlink: nsh attribute has 1 unknown bytes. [ 796.667474][ T3526] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 796.668180][ T3528] openvswitch: netlink: Missing valid actions attribute. [ 796.705320][ T3528] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 796.775275][ T3533] netlink: 284 bytes leftover after parsing attributes in process `syz.3.8799'. [ 796.891381][ T3546] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8803'. [ 797.631584][ T3595] tipc: Enabling of bearer rejected, already enabled [ 797.800467][ T3597] bond5: (slave syz_tun): Releasing backup interface [ 798.626312][ T52] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 798.637313][ T52] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 798.646676][ T52] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 798.654610][ T52] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 798.663708][ T52] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 798.779001][ T3622] xt_NFQUEUE: number of queues (27568) out of range (got 68779) [ 798.874458][ T3617] vxcan1 speed is unknown, defaulting to 1000 [ 799.108356][ T5830] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 799.128049][ T5830] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 799.138167][ T5830] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 799.148258][ T5830] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 799.160489][ T5830] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 799.232679][ T3634] syzkaller0: entered promiscuous mode [ 799.259300][ T3634] syzkaller0: entered allmulticast mode [ 799.358526][ T52] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 799.369914][ T52] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 799.381344][ T52] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 799.391324][ T52] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 799.399403][ T52] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 799.697578][ T3651] __nla_validate_parse: 5 callbacks suppressed [ 799.697592][ T3651] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.8839'. [ 800.767602][ T5830] Bluetooth: hci1: command tx timeout [ 801.081616][ T3617] lo speed is unknown, defaulting to 1000 [ 801.132286][ T3642] vxcan1 speed is unknown, defaulting to 1000 [ 801.237016][ T5830] Bluetooth: hci3: command tx timeout [ 801.397351][ T3660] Bluetooth: MGMT ver 1.23 [ 801.450492][ T3633] vxcan1 speed is unknown, defaulting to 1000 [ 801.462544][ T3662] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8843'. [ 801.474763][ T3662] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8843'. [ 801.484729][ T52] Bluetooth: hci4: command tx timeout [ 801.588274][ T3642] lo speed is unknown, defaulting to 1000 [ 801.846702][ T3669] netlink: 'syz.1.8845': attribute type 1 has an invalid length. [ 802.158720][ T3633] lo speed is unknown, defaulting to 1000 [ 802.366965][ T3617] chnl_net:caif_netlink_parms(): no params data found [ 802.801285][ T3617] bridge0: port 1(bridge_slave_0) entered blocking state [ 802.818874][ T3617] bridge0: port 1(bridge_slave_0) entered disabled state [ 802.827323][ T3617] bridge_slave_0: entered allmulticast mode [ 802.834551][ T3617] bridge_slave_0: entered promiscuous mode [ 802.845550][ T52] Bluetooth: hci1: command tx timeout [ 802.862026][ T3617] bridge0: port 2(bridge_slave_1) entered blocking state [ 802.869631][ T3617] bridge0: port 2(bridge_slave_1) entered disabled state [ 802.877047][ T3617] bridge_slave_1: entered allmulticast mode [ 802.884139][ T3617] bridge_slave_1: entered promiscuous mode [ 802.929430][ T3684] syzkaller1: entered promiscuous mode [ 802.935119][ T3684] syzkaller1: entered allmulticast mode [ 802.998198][ T3617] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 803.039239][ T3617] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 803.151088][ T3617] team0: Port device team_slave_0 added [ 803.184476][ T3617] team0: Port device team_slave_1 added [ 803.271417][ T3642] chnl_net:caif_netlink_parms(): no params data found [ 803.283658][ T3617] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 803.293839][ T3617] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 803.321506][ T52] Bluetooth: hci3: command tx timeout [ 803.325189][ T3617] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 803.372150][ T3617] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 803.380011][ T3617] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 803.407170][ T3617] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 803.463978][ T3633] chnl_net:caif_netlink_parms(): no params data found [ 803.477007][ T5830] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 803.486595][ T5830] Bluetooth: hci2: command 0x0401 tx timeout [ 803.557867][ T52] Bluetooth: hci4: command tx timeout [ 803.597177][ T3617] hsr_slave_0: entered promiscuous mode [ 803.604375][ T3617] hsr_slave_1: entered promiscuous mode [ 803.612765][ T3617] debugfs: 'hsr0' already exists in 'hsr' [ 803.618966][ T3617] Cannot create hsr debugfs directory [ 803.647216][ T3642] bridge0: port 1(bridge_slave_0) entered blocking state [ 803.655511][ T3642] bridge0: port 1(bridge_slave_0) entered disabled state [ 803.663040][ T3642] bridge_slave_0: entered allmulticast mode [ 803.671161][ T3642] bridge_slave_0: entered promiscuous mode [ 803.684831][ T3642] bridge0: port 2(bridge_slave_1) entered blocking state [ 803.692299][ T3642] bridge0: port 2(bridge_slave_1) entered disabled state [ 803.700390][ T3642] bridge_slave_1: entered allmulticast mode [ 803.707855][ T3642] bridge_slave_1: entered promiscuous mode [ 803.824472][ T3633] bridge0: port 1(bridge_slave_0) entered blocking state [ 803.834384][ T3633] bridge0: port 1(bridge_slave_0) entered disabled state [ 803.842540][ T3633] bridge_slave_0: entered allmulticast mode [ 803.850852][ T3633] bridge_slave_0: entered promiscuous mode [ 803.888794][ T3642] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 803.909822][ T3633] bridge0: port 2(bridge_slave_1) entered blocking state [ 803.919436][ T3633] bridge0: port 2(bridge_slave_1) entered disabled state [ 803.927705][ T3633] bridge_slave_1: entered allmulticast mode [ 803.936288][ T3633] bridge_slave_1: entered promiscuous mode [ 803.947539][ T3713] netlink: 'syz.1.8853': attribute type 6 has an invalid length. [ 803.948789][ T3642] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 803.983649][ T3710] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8853'. [ 804.069980][ T3642] team0: Port device team_slave_0 added [ 804.079333][ T3633] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 804.093111][ T3710] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8853'. [ 804.103526][ T3642] team0: Port device team_slave_1 added [ 804.112137][ T3633] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 804.272505][ T3642] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 804.293222][ T3642] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 804.321101][ T3642] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 804.338365][ T3633] team0: Port device team_slave_0 added [ 804.348045][ T3719] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 804.364319][ T3720] netlink: 40 bytes leftover after parsing attributes in process `syz.3.8854'. [ 804.387380][ T3642] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 804.394657][ T3642] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 804.422111][ T3642] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 804.464164][ T3633] team0: Port device team_slave_1 added [ 804.590666][ T3633] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 804.598654][ T3633] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 804.625066][ T3633] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 804.684874][ T3633] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 804.695397][ T3633] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 804.727512][ T3633] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 804.743698][ T3642] hsr_slave_0: entered promiscuous mode [ 804.751494][ T3642] hsr_slave_1: entered promiscuous mode [ 804.758920][ T3642] debugfs: 'hsr0' already exists in 'hsr' [ 804.764666][ T3642] Cannot create hsr debugfs directory [ 804.854644][ T3633] hsr_slave_0: entered promiscuous mode [ 804.861413][ T3633] hsr_slave_1: entered promiscuous mode [ 804.868769][ T3633] debugfs: 'hsr0' already exists in 'hsr' [ 804.874510][ T3633] Cannot create hsr debugfs directory [ 804.915578][ T52] Bluetooth: hci1: command tx timeout [ 804.954300][ T3617] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 804.982880][ T3617] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 805.019824][ T3617] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 805.054233][ T3617] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 805.127306][ T3736] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 805.357318][ T3753] netlink: 'syz.1.8864': attribute type 2 has an invalid length. [ 805.366864][ T3753] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8864'. [ 805.394964][ T3753] netlink: 'syz.1.8864': attribute type 2 has an invalid length. [ 805.406235][ T52] Bluetooth: hci3: command tx timeout [ 805.412237][ T3753] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8864'. [ 805.569979][ T3642] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 805.619121][ T3642] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 805.636419][ T52] Bluetooth: hci4: command tx timeout [ 805.661526][ T3642] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 805.681582][ T3642] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 805.789092][ T3617] 8021q: adding VLAN 0 to HW filter on device bond0 [ 805.799327][ T3633] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 805.828314][ T3633] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 805.842380][ T3633] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 805.854676][ T3633] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 805.890767][ T3617] 8021q: adding VLAN 0 to HW filter on device team0 [ 805.931057][ T3505] bridge0: port 1(bridge_slave_0) entered blocking state [ 805.938260][ T3505] bridge0: port 1(bridge_slave_0) entered forwarding state [ 805.973513][ T3505] bridge0: port 2(bridge_slave_1) entered blocking state [ 805.980757][ T3505] bridge0: port 2(bridge_slave_1) entered forwarding state [ 806.027873][ T3786] netlink: 48 bytes leftover after parsing attributes in process `syz.1.8870'. [ 806.110333][ T3642] 8021q: adding VLAN 0 to HW filter on device bond0 [ 806.174231][ T3642] 8021q: adding VLAN 0 to HW filter on device team0 [ 806.199887][ T3633] 8021q: adding VLAN 0 to HW filter on device bond0 [ 806.228890][ T142] bridge0: port 1(bridge_slave_0) entered blocking state [ 806.236151][ T142] bridge0: port 1(bridge_slave_0) entered forwarding state [ 806.267849][T17125] bridge0: port 2(bridge_slave_1) entered blocking state [ 806.275049][T17125] bridge0: port 2(bridge_slave_1) entered forwarding state [ 806.311491][ T3633] 8021q: adding VLAN 0 to HW filter on device team0 [ 806.332184][ T3570] bridge0: port 1(bridge_slave_0) entered blocking state [ 806.339361][ T3570] bridge0: port 1(bridge_slave_0) entered forwarding state [ 806.366456][T15702] bridge0: port 2(bridge_slave_1) entered blocking state [ 806.373594][T15702] bridge0: port 2(bridge_slave_1) entered forwarding state [ 806.428457][ T3617] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 806.913582][ T3642] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 806.995589][ T52] Bluetooth: hci1: command tx timeout [ 807.071710][ T3617] veth0_vlan: entered promiscuous mode [ 807.129798][ T3633] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 807.148549][ T3815] netlink: 'syz.1.8873': attribute type 30 has an invalid length. [ 807.226585][ T3617] veth1_vlan: entered promiscuous mode [ 807.350977][ T3617] veth0_macvtap: entered promiscuous mode [ 807.383738][ T3617] veth1_macvtap: entered promiscuous mode [ 807.477296][ T52] Bluetooth: hci3: command tx timeout [ 807.541386][ T3617] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 807.591124][ T3617] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 807.671175][ T142] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 807.683586][ T142] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 807.707121][ T142] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 807.727042][ T52] Bluetooth: hci4: command tx timeout [ 807.734265][ T142] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 807.830519][ T3838] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8879'. [ 807.872909][ T3633] veth0_vlan: entered promiscuous mode [ 807.890579][ T3642] veth0_vlan: entered promiscuous mode [ 807.968525][ T3642] veth1_vlan: entered promiscuous mode [ 807.980328][ T3633] veth1_vlan: entered promiscuous mode [ 807.996708][ T3845] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8881'. [ 808.008040][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 808.023256][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 808.100187][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 808.111886][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 808.197687][ T3642] veth0_macvtap: entered promiscuous mode [ 808.215992][ T3853] vxcan1: tx address claim with dlc 0 [ 808.229666][ T3633] veth0_macvtap: entered promiscuous mode [ 808.267147][ T3633] veth1_macvtap: entered promiscuous mode [ 808.294590][ T3642] veth1_macvtap: entered promiscuous mode [ 808.342279][ T3633] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 808.383521][ T3642] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 808.399150][ T3633] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 808.425260][ T3642] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 808.451105][ T36] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 808.477515][ T36] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 808.502647][ T36] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 808.527571][ T36] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 808.590151][T15702] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 808.602988][T15702] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 808.617518][T15702] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 808.668315][T15702] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 808.694303][ T1302] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 808.747948][ T3886] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8891'. [ 808.874863][ T77] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 808.902398][ T77] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 808.960234][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 808.979511][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 809.043898][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 809.057016][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 809.062677][ T3895] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8895'. [ 809.104245][ T3893] netlink: 11562 bytes leftover after parsing attributes in process `syz.3.8894'. [ 809.114445][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 809.136411][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 809.194903][ T3895] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8895'. [ 809.679636][ T3934] netlink: 164 bytes leftover after parsing attributes in process `syz.3.8902'. [ 809.849900][ T3943] netlink: 'syz.3.8907': attribute type 64 has an invalid length. [ 810.378875][ T3975] __nla_validate_parse: 8 callbacks suppressed [ 810.378892][ T3975] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8915'. [ 810.421030][ T3975] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8915'. [ 810.664101][ T3997] netlink: 28 bytes leftover after parsing attributes in process `syz.6.8924'. [ 810.670118][ T3994] sctp: [Deprecated]: syz.1.8922 (pid 3994) Use of struct sctp_assoc_value in delayed_ack socket option. [ 810.670118][ T3994] Use struct sctp_sack_info instead [ 810.677193][ T3997] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8924'. [ 810.703414][ T3997] netlink: 'syz.6.8924': attribute type 3 has an invalid length. [ 810.717643][ T3995] syzkaller0: entered promiscuous mode [ 810.723225][ T3995] syzkaller0: entered allmulticast mode [ 810.824955][ T4003] sctp: [Deprecated]: syz.5.8925 (pid 4003) Use of int in maxseg socket option. [ 810.824955][ T4003] Use struct sctp_assoc_value instead [ 811.224538][ T4029] netlink: 'syz.7.8930': attribute type 1 has an invalid length. [ 811.321895][ T4032] netlink: 'syz.6.8932': attribute type 2 has an invalid length. [ 811.336571][ T4032] netlink: 119 bytes leftover after parsing attributes in process `syz.6.8932'. [ 811.373517][ T4038] netlink: 'syz.6.8932': attribute type 1 has an invalid length. [ 811.489529][ T4049] syzkaller0: entered promiscuous mode [ 811.513488][ T4049] syzkaller0: entered allmulticast mode [ 811.526612][ T4051] x_tables: duplicate underflow at hook 2 [ 811.683883][ T4061] vcan0: tx drop: invalid sa for name 0x0040000000000000 [ 812.029398][ T4086] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8949'. [ 812.078937][ T4082] xt_hashlimit: overflow, rate too high: 0 [ 812.102106][ T4082] xt_hashlimit: overflow, rate too high: 0 [ 812.114514][ T4089] netlink: 'syz.3.8948': attribute type 9 has an invalid length. [ 812.133731][ T4082] xt_hashlimit: overflow, rate too high: 0 [ 812.144877][ T4091] netlink: 72 bytes leftover after parsing attributes in process `syz.6.8950'. [ 812.152756][ T4089] netlink: 'syz.3.8948': attribute type 6 has an invalid length. [ 812.168629][ T4082] xt_hashlimit: overflow, rate too high: 0 [ 812.180276][ T4082] xt_hashlimit: overflow, rate too high: 0 [ 812.186519][ T4093] netlink: 72 bytes leftover after parsing attributes in process `syz.6.8950'. [ 812.214617][ T4082] xt_hashlimit: overflow, rate too high: 0 [ 812.266631][ T4082] xt_hashlimit: overflow, rate too high: 0 [ 812.274003][ T4082] xt_hashlimit: overflow, rate too high: 0 [ 812.294949][ T4082] xt_hashlimit: overflow, rate too high: 0 [ 812.303889][ T4082] xt_hashlimit: overflow, rate too high: 0 [ 812.414891][ T4111] netlink: 'syz.6.8954': attribute type 1 has an invalid length. [ 812.528908][ T4117] netlink: 'syz.3.8956': attribute type 16 has an invalid length. [ 812.540965][ T4117] netlink: 20 bytes leftover after parsing attributes in process `syz.3.8956'. [ 812.579768][ T4123] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8959'. [ 813.260621][ T4161] nbd: must specify a size in bytes for the device [ 813.360053][ T4166] netlink: 'syz.6.8970': attribute type 1 has an invalid length. [ 813.383893][ T4166] netlink: 'syz.6.8970': attribute type 4 has an invalid length. [ 814.038087][ T52] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 814.044520][ T5830] Bluetooth: hci2: command 0x0401 tx timeout [ 814.108920][ T4212] netlink: 'syz.3.8986': attribute type 8 has an invalid length. [ 814.118582][ T4210] netlink: 'syz.3.8986': attribute type 8 has an invalid length. [ 814.523375][ T4237] batadv_slave_1: entered promiscuous mode [ 814.543639][ T4233] batadv_slave_1: left promiscuous mode [ 814.589179][ T4243] netlink: 'syz.3.8998': attribute type 9 has an invalid length. [ 814.663582][ T4250] tipc: Enabling of bearer rejected, failed to enable media [ 814.688280][ T30] audit: type=1107 audit(1764947170.706:10): pid=4253 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='dغOZS#3Op|#ˍ:1bÌ喊lyO4n~8y0|Jy' [ 815.023972][ T4282] netlink: 'syz.7.9011': attribute type 1 has an invalid length. [ 815.340175][ T4298] x_tables: duplicate underflow at hook 2 [ 815.477889][ T4315] __nla_validate_parse: 8 callbacks suppressed [ 815.477945][ T4315] netlink: 40 bytes leftover after parsing attributes in process `syz.1.9020'. [ 815.579511][ T4312] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 815.718882][ T4312] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 815.807654][ T4312] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 815.929196][ T4312] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 816.093230][T17125] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 816.124519][T17125] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 816.161881][T17125] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 816.222042][ T3603] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 816.242907][ T4311] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 816.293772][ T4311] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 816.397758][ T4311] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 816.415127][ T4368] netlink: 'syz.1.9036': attribute type 2 has an invalid length. [ 816.470365][ T4311] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 816.567846][ T4381] veth0_to_team: entered promiscuous mode [ 816.616966][ T4378] xt_ecn: cannot match TCP bits for non-tcp packets [ 816.934295][ T4403] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 817.328067][ T4425] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 817.343411][ T4427] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 817.681951][ T4447] 0: reclassify loop, rule prio 0, protocol 800 [ 817.892998][ T4458] netlink: 7064 bytes leftover after parsing attributes in process `syz.6.9066'. [ 817.933523][ T4458] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 817.958686][ T4465] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9068'. [ 817.986176][ T4465] netlink: 24 bytes leftover after parsing attributes in process `syz.5.9068'. [ 818.116470][T11851] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 818.159687][ T4476] netlink: 176 bytes leftover after parsing attributes in process `syz.5.9072'. [ 818.178259][ T4476] netlink: 'syz.5.9072': attribute type 1 has an invalid length. [ 818.187031][ T4476] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9072'. [ 818.189983][ T4477] netlink: 16 bytes leftover after parsing attributes in process `syz.6.9073'. [ 818.334742][ T4487] netlink: 2 bytes leftover after parsing attributes in process `syz.6.9076'. [ 818.344509][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 818.540500][ T4500] netlink: 'syz.5.9081': attribute type 10 has an invalid length. [ 818.548980][ T4500] netlink: 2 bytes leftover after parsing attributes in process `syz.5.9081'. [ 818.567858][ T4503] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 818.603801][ T4500] team0: entered promiscuous mode [ 818.620482][ T4500] team_slave_0: entered promiscuous mode [ 818.630911][ T4500] team_slave_1: entered promiscuous mode [ 818.642354][ T4500] bridge0: port 3(team0) entered blocking state [ 818.667373][ T4500] bridge0: port 3(team0) entered disabled state [ 818.679490][ T4500] team0: entered allmulticast mode [ 818.684733][ T4500] team_slave_0: entered allmulticast mode [ 818.693730][ T4500] team_slave_1: entered allmulticast mode [ 818.719111][ T4500] bridge0: port 3(team0) entered blocking state [ 818.725673][ T4500] bridge0: port 3(team0) entered forwarding state [ 818.838508][ T4519] netlink: 'syz.6.9085': attribute type 30 has an invalid length. [ 819.223552][ T4529] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 819.247956][ T4533] vxcan1 speed is unknown, defaulting to 1000 [ 819.251175][ T4539] tipc: Enabling of bearer rejected, failed to enable media [ 819.618145][ T4533] lo speed is unknown, defaulting to 1000 [ 819.699545][ T4549] netlink: 28 bytes leftover after parsing attributes in process `syz.6.9094'. [ 820.266125][ T4551] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 820.408558][ T4551] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 820.631539][ T1158] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 820.783076][ T50] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 820.816384][ T4599] openvswitch: netlink: Key type 31 is not supported [ 820.909411][ T4603] __nla_validate_parse: 2 callbacks suppressed [ 820.909428][ T4603] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9106'. [ 820.969494][ T4598] vxcan1 speed is unknown, defaulting to 1000 [ 821.035270][ T4607] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9107'. [ 821.056123][ T4603] bridge0: port 3(team0) entered disabled state [ 821.233528][ T4603] team0 (unregistering): left allmulticast mode [ 821.243192][ T4603] team_slave_0: left allmulticast mode [ 821.249364][ T4603] team_slave_1: left allmulticast mode [ 821.255756][ T4603] bridge0: port 3(team0) entered disabled state [ 821.278564][ T4603] team_slave_0: left promiscuous mode [ 821.294894][ T4603] team0 (unregistering): Port device team_slave_0 removed [ 821.304129][ T4603] team_slave_1: left promiscuous mode [ 821.319281][ T4603] team0 (unregistering): Port device team_slave_1 removed [ 821.403356][ T4607] bond0: (slave bond_slave_1): Releasing backup interface [ 821.486940][ T4598] lo speed is unknown, defaulting to 1000 [ 821.765114][ T4630] netlink: 'syz.5.9113': attribute type 11 has an invalid length. [ 821.800644][ T4632] openvswitch: netlink: Missing valid actions attribute. [ 821.811912][ T4632] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 822.164804][ T4646] veth0: entered promiscuous mode [ 822.219106][ T4653] x_tables: duplicate underflow at hook 3 [ 822.244826][ T4646] veth0: left promiscuous mode [ 822.390328][ T4661] netlink: 'syz.5.9121': attribute type 3 has an invalid length. [ 822.399474][ T4661] netlink: 766 bytes leftover after parsing attributes in process `syz.5.9121'. [ 822.654747][ T4673] x_tables: duplicate underflow at hook 1 [ 822.732172][ T4675] netlink: 'syz.7.9124': attribute type 1 has an invalid length. [ 822.812131][ T4675] 8021q: adding VLAN 0 to HW filter on device bond1 [ 822.842129][ T4675] netlink: 'syz.7.9124': attribute type 3 has an invalid length. [ 822.863825][ T4680] 8021q: adding VLAN 0 to HW filter on device bond1 [ 822.874530][ T4680] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 822.888678][ T4680] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 822.909103][ T4685] netlink: 'syz.7.9124': attribute type 16 has an invalid length. [ 822.929229][ T4685] netlink: 20 bytes leftover after parsing attributes in process `syz.7.9124'. [ 822.955927][ T4675] netlink: 28 bytes leftover after parsing attributes in process `syz.7.9124'. [ 822.972600][ T4675] netlink: 28 bytes leftover after parsing attributes in process `syz.7.9124'. [ 822.985177][ T4675] 8021q: adding VLAN 0 to HW filter on device bond1 [ 823.175492][ T4691] tipc: Started in network mode [ 823.184459][ T4691] tipc: Node identity f6fd22f035da, cluster identity 4711 [ 823.196364][ T4691] tipc: Enabled bearer , priority 0 [ 823.203445][ T4692] netlink: 104 bytes leftover after parsing attributes in process `syz.1.9127'. [ 823.213511][ T4699] netlink: 'syz.5.9129': attribute type 1 has an invalid length. [ 823.257787][ T4699] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9129'. [ 823.325824][ T4706] netlink: 'syz.6.9130': attribute type 16 has an invalid length. [ 823.334059][ T4706] netlink: 'syz.6.9130': attribute type 17 has an invalid length. [ 823.450193][ T4701] bridge0: port 1(bridge_slave_0) entered disabled state [ 823.534449][ T4701] bridge0: port 2(bridge_slave_1) entered disabled state [ 823.587580][ T4703] tipc: Disabling bearer [ 823.648161][ T4706] bridge0: port 1(bridge_slave_0) entered blocking state [ 823.655420][ T4706] bridge0: port 1(bridge_slave_0) entered forwarding state [ 823.671868][ T4706] bridge0: port 2(bridge_slave_1) entered blocking state [ 823.679052][ T4706] bridge0: port 2(bridge_slave_1) entered forwarding state [ 823.691729][ T4706] veth0_to_team: left promiscuous mode [ 823.790977][ T4729] netlink: 'syz.3.9134': attribute type 2 has an invalid length. [ 823.937701][ T4737] xt_l2tp: invalid flags combination: 8 [ 823.988455][ T4745] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9139'. [ 824.033642][ T4745] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9139'. [ 824.189668][ T4758] openvswitch: netlink: nsh attr 60 is out of range max 3 [ 824.240383][ T4758] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 824.257172][ T4758] openvswitch: netlink: nsh attr 60 is out of range max 3 [ 824.264519][ T4758] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 824.282613][ T4758] openvswitch: netlink: nsh attr 60 is out of range max 3 [ 824.293059][ T4758] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 824.298552][ T4760] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 824.314653][ T4758] openvswitch: netlink: nsh attr 60 is out of range max 3 [ 824.325113][ T4758] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 824.335202][ T4758] openvswitch: netlink: nsh attr 60 is out of range max 3 [ 824.350399][ T4758] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 824.749244][ T4795] sctp: [Deprecated]: syz.1.9154 (pid 4795) Use of struct sctp_assoc_value in delayed_ack socket option. [ 824.749244][ T4795] Use struct sctp_sack_info instead [ 825.194645][ T4829] netlink: 'syz.3.9163': attribute type 1 has an invalid length. [ 825.524578][ T4843] vxcan1 speed is unknown, defaulting to 1000 [ 825.560856][ T4849] x_tables: duplicate underflow at hook 3 [ 825.656185][ T4849] tipc: Enabled bearer , priority 0 [ 825.829900][ T4849] syzkaller0: entered promiscuous mode [ 825.848896][ T4849] syzkaller0: entered allmulticast mode [ 825.855878][ T4849] tipc: Resetting bearer [ 825.863802][ T4843] lo speed is unknown, defaulting to 1000 [ 825.865112][ T4861] 0{X: renamed from gretap0 (while UP) [ 825.881857][ T4861] 0{X: entered allmulticast mode [ 825.891080][ T4861] 1{X: renamed from 30{X (while UP) [ 826.238461][ T4880] netlink: 'syz.6.9179': attribute type 1 has an invalid length. [ 826.315260][ T4716] tipc: Resetting bearer [ 826.405091][ T4838] tipc: Resetting bearer [ 826.570241][ T4895] __nla_validate_parse: 11 callbacks suppressed [ 826.570262][ T4895] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9181'. [ 826.598121][ T5830] Bluetooth: hci4: command tx timeout [ 828.323759][ T4838] tipc: Disabling bearer [ 828.363708][ T5912] tipc: Node number set to 3274121968 [ 828.820137][ T4921] netlink: 80 bytes leftover after parsing attributes in process `syz.3.9189'. [ 828.882941][ T4923] syzkaller0: entered promiscuous mode [ 828.896211][ T4923] syzkaller0: entered allmulticast mode [ 828.962726][ T4923] tipc: Started in network mode [ 828.975612][ T4923] tipc: Node identity 4a74016b9a, cluster identity 4711 [ 828.983075][ T4923] tipc: Enabled bearer , priority 0 [ 829.081596][ T4934] netlink: 104 bytes leftover after parsing attributes in process `syz.7.9191'. [ 829.134212][ T4935] netlink: 'syz.3.9194': attribute type 13 has an invalid length. [ 829.152530][ T4938] xt_limit: Overflow, try lower: 604147548/4200216962 [ 829.173589][ T4935] macvtap0: entered allmulticast mode [ 829.186606][ T4935] macvtap0: refused to change device tx_queue_len [ 829.204030][ T4922] tipc: Resetting bearer [ 829.320924][ T4922] tipc: Disabling bearer [ 829.351869][ T4942] netlink: 24 bytes leftover after parsing attributes in process `syz.3.9196'. [ 829.493822][ T4955] netlink: 'syz.6.9201': attribute type 3 has an invalid length. [ 829.904306][ T4968] bridge0: port 2(bridge_slave_1) entered disabled state [ 829.911860][ T4968] bridge0: port 1(bridge_slave_0) entered disabled state [ 830.219356][ T4968] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 830.258490][ T4968] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 830.383147][ T4981] netlink: 12 bytes leftover after parsing attributes in process `syz.5.9205'. [ 830.841737][ T4971] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -12 [ 830.865064][ T4971] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -12 [ 830.874039][T29666] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 830.878691][ T4971] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 830.925538][T29666] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 830.945004][T29666] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 830.988249][T29666] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 831.051317][ T5000] syzkaller1: entered promiscuous mode [ 831.057414][ T5000] syzkaller1: entered allmulticast mode [ 831.066345][ T4998] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9209'. [ 831.066360][ T5001] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9209'. [ 831.273516][ T5013] netlink: 16 bytes leftover after parsing attributes in process `syz.3.9215'. [ 831.361652][ T5021] bridge2: entered promiscuous mode [ 831.369403][ T5021] bridge2: entered allmulticast mode [ 831.393417][ T5015] : entered promiscuous mode [ 831.643227][ T5027] netlink: 'syz.7.9218': attribute type 12 has an invalid length. [ 831.707896][ T5039] lok: renamed from lo [ 831.730905][ T5039] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9221'. [ 831.763282][ T5042] netlink: 'syz.7.9223': attribute type 2 has an invalid length. [ 831.828687][ T5048] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9224'. [ 831.890235][ T5050] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9224'. [ 831.954202][T11579] IPVS: starting estimator thread 0... [ 832.065773][ T5059] IPVS: using max 34 ests per chain, 81600 per kthread [ 832.213966][ T5072] [ 832.216432][ T5072] ====================================================== [ 832.217484][ T5070] netlink: 'syz.6.9231': attribute type 1 has an invalid length. [ 832.223444][ T5072] WARNING: possible circular locking dependency detected [ 832.238182][ T5072] syzkaller #0 Not tainted [ 832.242593][ T5072] ------------------------------------------------------ [ 832.249597][ T5072] syz.3.9232/5072 is trying to acquire lock: [ 832.255736][ T5072] ffffffff8f4576f8 (nr_neigh_list_lock){+...}-{3:3}, at: nr_rt_ioctl+0x390/0xd50 [ 832.264874][ T5072] [ 832.264874][ T5072] but task is already holding lock: [ 832.272227][ T5072] ffff88804c729370 (&nr_node->node_lock){+...}-{3:3}, at: nr_rt_ioctl+0x193/0xd50 [ 832.281527][ T5072] [ 832.281527][ T5072] which lock already depends on the new lock. [ 832.281527][ T5072] [ 832.291999][ T5072] [ 832.291999][ T5072] the existing dependency chain (in reverse order) is: [ 832.301027][ T5072] [ 832.301027][ T5072] -> #2 (&nr_node->node_lock){+...}-{3:3}: [ 832.309108][ T5072] _raw_spin_lock_bh+0x36/0x50 [ 832.314388][ T5072] nr_rt_device_down+0x12a/0x720 [ 832.320010][ T5072] nr_device_event+0x137/0x150 [ 832.325318][ T5072] notifier_call_chain+0x19d/0x3a0 [ 832.330953][ T5072] __dev_notify_flags+0x18d/0x2e0 [ 832.336493][ T5072] netif_change_flags+0xe8/0x1a0 [ 832.341941][ T5072] dev_change_flags+0x130/0x260 [ 832.347300][ T5072] dev_ioctl+0x7b4/0x1150 [ 832.352138][ T5072] sock_do_ioctl+0x22c/0x300 [ 832.357242][ T5072] sock_ioctl+0x576/0x790 [ 832.362085][ T5072] __se_sys_ioctl+0xfc/0x170 [ 832.367187][ T5072] do_syscall_64+0xfa/0xf80 [ 832.372205][ T5072] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 832.378608][ T5072] [ 832.378608][ T5072] -> #1 (nr_node_list_lock){+...}-{3:3}: [ 832.386447][ T5072] _raw_spin_lock_bh+0x36/0x50 [ 832.391747][ T5072] nr_rt_device_down+0xa9/0x720 [ 832.397113][ T5072] nr_device_event+0x137/0x150 [ 832.402390][ T5072] notifier_call_chain+0x19d/0x3a0 [ 832.408102][ T5072] __dev_notify_flags+0x18d/0x2e0 [ 832.413644][ T5072] netif_change_flags+0xe8/0x1a0 [ 832.419096][ T5072] dev_change_flags+0x130/0x260 [ 832.424458][ T5072] dev_ioctl+0x7b4/0x1150 [ 832.429296][ T5072] sock_do_ioctl+0x22c/0x300 [ 832.434389][ T5072] sock_ioctl+0x576/0x790 [ 832.439225][ T5072] __se_sys_ioctl+0xfc/0x170 [ 832.444326][ T5072] do_syscall_64+0xfa/0xf80 [ 832.449344][ T5072] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 832.455751][ T5072] [ 832.455751][ T5072] -> #0 (nr_neigh_list_lock){+...}-{3:3}: [ 832.463640][ T5072] __lock_acquire+0x15a6/0x2cf0 [ 832.468994][ T5072] lock_acquire+0x117/0x340 [ 832.473998][ T5072] _raw_spin_lock_bh+0x36/0x50 [ 832.479359][ T5072] nr_rt_ioctl+0x390/0xd50 [ 832.484297][ T5072] sock_do_ioctl+0xdc/0x300 [ 832.489319][ T5072] sock_ioctl+0x576/0x790 [ 832.494157][ T5072] __se_sys_ioctl+0xfc/0x170 [ 832.499252][ T5072] do_syscall_64+0xfa/0xf80 [ 832.504264][ T5072] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 832.510671][ T5072] [ 832.510671][ T5072] other info that might help us debug this: [ 832.510671][ T5072] [ 832.520984][ T5072] Chain exists of: [ 832.520984][ T5072] nr_neigh_list_lock --> nr_node_list_lock --> &nr_node->node_lock [ 832.520984][ T5072] [ 832.534807][ T5072] Possible unsafe locking scenario: [ 832.534807][ T5072] [ 832.542264][ T5072] CPU0 CPU1 [ 832.547703][ T5072] ---- ---- [ 832.553050][ T5072] lock(&nr_node->node_lock); [ 832.557804][ T5072] lock(nr_node_list_lock); [ 832.564903][ T5072] lock(&nr_node->node_lock); [ 832.572172][ T5072] lock(nr_neigh_list_lock); [ 832.576847][ T5072] [ 832.576847][ T5072] *** DEADLOCK *** [ 832.576847][ T5072] [ 832.585067][ T5072] 2 locks held by syz.3.9232/5072: [ 832.590157][ T5072] #0: ffffffff8f457758 (nr_node_list_lock){+...}-{3:3}, at: nr_rt_ioctl+0x104/0xd50 [ 832.599636][ T5072] #1: ffff88804c729370 (&nr_node->node_lock){+...}-{3:3}, at: nr_rt_ioctl+0x193/0xd50 [ 832.609291][ T5072] [ 832.609291][ T5072] stack backtrace: [ 832.615168][ T5072] CPU: 1 UID: 0 PID: 5072 Comm: syz.3.9232 Not tainted syzkaller #0 PREEMPT(full) [ 832.615201][ T5072] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 832.615218][ T5072] Call Trace: [ 832.615225][ T5072] [ 832.615231][ T5072] dump_stack_lvl+0x189/0x250 [ 832.615251][ T5072] ? __pfx_dump_stack_lvl+0x10/0x10 [ 832.615265][ T5072] ? __pfx__printk+0x10/0x10 [ 832.615281][ T5072] ? stack_trace_save+0x9c/0xe0 [ 832.615303][ T5072] print_circular_bug+0x2e2/0x300 [ 832.615321][ T5072] check_noncircular+0x12e/0x150 [ 832.615347][ T5072] __lock_acquire+0x15a6/0x2cf0 [ 832.615372][ T5072] ? nr_rt_ioctl+0x390/0xd50 [ 832.615392][ T5072] lock_acquire+0x117/0x340 [ 832.615404][ T5072] ? nr_rt_ioctl+0x390/0xd50 [ 832.615422][ T5072] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 832.615440][ T5072] ? nr_rt_ioctl+0x390/0xd50 [ 832.615455][ T5072] _raw_spin_lock_bh+0x36/0x50 [ 832.615471][ T5072] ? nr_rt_ioctl+0x390/0xd50 [ 832.615487][ T5072] nr_rt_ioctl+0x390/0xd50 [ 832.615508][ T5072] ? __pfx_nr_rt_ioctl+0x10/0x10 [ 832.615529][ T5072] ? apparmor_capable+0x137/0x1a0 [ 832.615547][ T5072] ? capable+0x89/0xe0 [ 832.615559][ T5072] ? nr_ioctl+0x1b1/0x3b0 [ 832.615575][ T5072] sock_do_ioctl+0xdc/0x300 [ 832.615592][ T5072] ? __pfx_sock_do_ioctl+0x10/0x10 [ 832.615606][ T5072] ? do_futex+0x333/0x420 [ 832.615623][ T5072] sock_ioctl+0x576/0x790 [ 832.615638][ T5072] ? __pfx_sock_ioctl+0x10/0x10 [ 832.615652][ T5072] ? __fget_files+0x3a0/0x420 [ 832.615665][ T5072] ? __fget_files+0x2a/0x420 [ 832.615677][ T5072] ? bpf_lsm_file_ioctl+0x9/0x20 [ 832.615689][ T5072] ? __pfx_sock_ioctl+0x10/0x10 [ 832.615703][ T5072] __se_sys_ioctl+0xfc/0x170 [ 832.615719][ T5072] do_syscall_64+0xfa/0xf80 [ 832.615736][ T5072] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 832.615750][ T5072] ? clear_bhb_loop+0x60/0xb0 [ 832.615764][ T5072] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 832.615777][ T5072] RIP: 0033:0x7f509e78f749 [ 832.615790][ T5072] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 832.615803][ T5072] RSP: 002b:00007f509f644038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 832.615818][ T5072] RAX: ffffffffffffffda RBX: 00007f509e9e5fa0 RCX: 00007f509e78f749 [ 832.615829][ T5072] RDX: 0000000000000000 RSI: 00000000000089e2 RDI: 0000000000000005 [ 832.615837][ T5072] RBP: 00007f509e813f91 R08: 0000000000000000 R09: 0000000000000000 [ 832.615846][ T5072] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 832.615854][ T5072] R13: 00007f509e9e6038 R14: 00007f509e9e5fa0 R15: 00007ffd93480a78 [ 832.615871][ T5072] [ 832.899063][ T5072] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9232'. [ 832.909301][ T5070] 8021q: adding VLAN 0 to HW filter on device bond2 [ 832.924934][ T5070] bond2: (slave geneve2): making interface the new active one [ 832.934582][ T5070] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 832.944193][T17124] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 832.954193][T17124] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 832.982837][ T5070] bond3: option miimon: invalid value (18446744073709551585) [ 832.991742][ T5070] bond3: option miimon: allowed values 0 - 2147483647 [ 833.003142][ T5070] bond3 (unregistering): Released all slaves [ 833.017711][T17124] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 833.026884][ T5074] pim6reg1: entered promiscuous mode [ 833.032346][ T5074] pim6reg1: entered allmulticast mode [ 833.050219][T17124] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 833.060624][ T5072] net_ratelimit: 59 callbacks suppressed [ 833.060643][ T5072] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 833.078220][ T5074] tipc: Invalid UDP bearer configuration [ 833.078257][ T5074] tipc: Enabling of bearer rejected, failed to enable media