last executing test programs: 2m45.334383318s ago: executing program 1 (id=2604): socket$kcm(0x29, 0x5, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000003dc0)=[{{0x0, 0xfffffffffffffd9f, &(0x7f0000000940)=[{&(0x7f0000000100)='r', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000000)="f3", 0x1}], 0x1}}], 0x2, 0x20004841) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x4001}, 0xfea3) socket$inet6(0xa, 0x2, 0x3) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0xffffffb9, &(0x7f0000000280)={&(0x7f00000000c0)=@ipv6_getaddr={0x18, 0x16, 0x3c2be10bca706f15, 0x0, 0xffffffff, {0xa, 0x0, 0x10}}, 0x18}, 0x1, 0x0, 0x0, 0x44000}, 0x0) 2m44.890180585s ago: executing program 1 (id=2608): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000001000000000000000000000085000000870000001801000020786c2500000000002020207b1af8ff00000000bfa108000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095"], &(0x7f0000000180)='syzkaller\x00'}, 0x90) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x6c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x2c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2=0xe0000001}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x2}]}, 0x6c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x6c, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x2c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}]}, 0x6c}}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000340)=@framed={{0x18, 0x2, 0x0, 0x0, 0x5}, [@call={0x85, 0x0, 0x0, 0xcd}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) r4 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r4, &(0x7f00000000c0)={0x1d, r5}, 0x10) sendmsg$can_bcm(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="0100"/16, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x48}}, 0x0) sendmsg$can_bcm(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)={0x1, 0x0, 0xc063, {}, {}, {}, 0x1, @can={{0x2}, 0x23, 0x3, 0x0, 0x0, "ae771958a0cb06cc"}}, 0x48}}, 0x20000000) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.net/syz0\x00', 0x200002, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x0, 0xe, 0x0, &(0x7f0000000600)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000980)=@ipv6_getaddr={0x18, 0x16, 0x1}, 0x18}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x2) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r7) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r7, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, r8, 0x10, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x6, 0x6a}}}}, ["", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x8001}, 0x40) r9 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r9, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000180)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2}}) ioctl$sock_kcm_SIOCKCMATTACH(r9, 0x89e0, &(0x7f00000002c0)={r7, r3}) 2m44.483041324s ago: executing program 1 (id=2612): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket(0x1d, 0x2, 0x6) setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(r2, 0x6a, 0x4, 0x20000000, 0x4) r3 = socket(0x400000000010, 0x3, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="08010000100001002dbd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0221000000000000140003006e657464657673696d300000", @ANYRES32=0x0, @ANYBLOB="cc001680c80001800c000500ff0f00000008000014000a0004000000000000000400000000000000100006"], 0x108}}, 0x24040800) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) (rerun: 32) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x4}}]}, 0x38}}, 0x0) 2m44.13850509s ago: executing program 1 (id=2617): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_inet_SIOCSIFNETMASK(r1, 0x891c, &(0x7f0000000440)={'tunl0\x00', {0x2, 0x4e22, @rand_addr=0x64010100}}) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000001a40)=[{&(0x7f0000000000)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0}], 0x1, 0x0) (async) r4 = socket(0x2, 0x80805, 0x0) r5 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r4, 0x84, 0x17, &(0x7f0000000780)=ANY=[@ANYRES32=r6], 0x12) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_PUBL_GET(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x14, r8, 0xf13}, 0x14}}, 0x0) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000ec0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="0100800000000000000005000000180001801400020074756e6c3000000000000000000000000500070005"], 0x34}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a20000000180a05000000000000000000020000000900020073797a30000000002c000800180a01210000000000000000020000040c00054000000000000000020900010073797a3000000000140000001100010000000000000000000100000a"], 0x74}}, 0x0) (async) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="640000000203000000000000000000000000000005000500000000000900020073797a3000000000100003006269746d61703a706f7274001c00078006000540000000000600044000000000080008000200000005000100070000000500040000000000"], 0x64}}, 0x0) (async) socket$netlink(0x10, 0x3, 0x5) 2m43.837511982s ago: executing program 1 (id=2619): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) (async) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r2, @ANYRES64=r3], 0x44}}, 0x2000800) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) (async, rerun: 64) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) (async, rerun: 64) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) (async) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x84, &(0x7f00000000c0)={r6, @in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}, 0xfffffffd, 0x79b}, &(0x7f00000001c0)=0x9c) (async) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async, rerun: 32) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ac0), r8) sendmsg$IEEE802154_LLSEC_SETPARAMS(r8, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000300)=ANY=[@ANYBLOB="20000053b42d930090d700de779f51cc8d7e8bae53e5e8245eef0a006c8baed8749ba27e9549b4b86279266d8db0de9a9433a22972f4c604f1189cd2bf59c4b97d208a18056f33cfc26e99cd981a9b67251081cc91eb50174066349b742340e293022a59053512c21d595e26f477b788daf4144f15681bceb0c9a84a5f93acea3d736a2b6ccf52576e40ada928d334e7818dd2d7", @ANYRESDEC=0x0, @ANYBLOB="050000000000000000002200f2ff090001007770616e3100"], 0x20}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="180300000000000000000000000000808510000006000000180000000000000000000000000000006600020000000000180000000000000000000000000000009500000000000000870300000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x94) r9 = openat$cgroup_procs(r7, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r3, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x20, 0x140f, 0x1, 0x70bd2c, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x10000000}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x4004084}, 0x4004) (async) preadv(r9, &(0x7f0000002880)=[{&(0x7f00000000c0)=""/91, 0x5b}], 0x1, 0xa2e1, 0xc) (async) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r10, 0x84, 0x6c, &(0x7f0000001cc0), &(0x7f0000001d00)=0x8) (async) bind$inet(r0, 0x0, 0x0) (async) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x4c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x48104}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bond={{0x9}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0xf4}, @IFLA_BOND_MODE={0x5, 0x1, 0x5}, @IFLA_BOND_ACTIVE_SLAVE={0x8}]}}}]}, 0x4c}}, 0x0) (async, rerun: 32) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000003c0)='cubic', 0xb) (async, rerun: 32) setsockopt$sock_int(r0, 0x1, 0x3e, &(0x7f00000000c0), 0x4) 2m43.680575738s ago: executing program 1 (id=2622): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = socket(0x2a, 0x2, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x78, 0x24, 0xf0b, 0x70bd2a, 0x2001, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x5, 0xd}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0xff, 0xec2, 0x5, 0x2, 0x400}, 0x10000, 0x1, 0x7ff, 0x6, 0xe, 0x14, 0x1f, 0x1b, 0x6, 0x2, {0x6, 0x19d, 0xa9, 0x8, 0x7743, 0xfd1}}}}]}, 0x78}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x40000) sendmsg$nl_route_sched(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000014c0)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r2, {0xe, 0x7}, {}, {0x5, 0xffff}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0x7, 0x8}}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x24004804}, 0x4000) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) r4 = openat$cgroup_type(r0, &(0x7f0000000100), 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x2, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000000000000000000000028f8a2"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x51}, 0x90) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1400000026000100000000000000000006"], 0x14}], 0x1}, 0x0) sendfile(r4, r4, 0x0, 0x6) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_MCAST_LEAVE_GROUP(r7, 0x0, 0x2d, &(0x7f0000000280)={0x7, {{0x2, 0x4e24, @multicast2}}}, 0x88) sendmsg$nl_generic(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x448b1}, 0x0) 2m38.28031619s ago: executing program 2 (id=2665): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@dellink={0x34, 0x11, 0x1, 0x70bd27, 0x25dfdc00, {0x0, 0x0, 0x0, 0x0, 0x70402, 0x4222a}, [@IFLA_IFNAME={0x14, 0x3, 'veth0_virt_wifi\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x24000000) 2m37.729010889s ago: executing program 2 (id=2672): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xb, &(0x7f0000000340)=@framed={{}, [@printk={@p, {}, {}, {}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x5}, {}, {0x85, 0x0, 0x0, 0x60}}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f00000004c0)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c, 0x0, 0x0, &(0x7f0000000180)=[@pktinfo={{0x20, 0x29, 0x32, {@mcast1}}}], 0x20}}], 0x1, 0x8000) 2m37.614666674s ago: executing program 2 (id=2674): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800140000fcffff0800090000000000080011000000000008000e00800000000800", @ANYRES64=r0], 0x5c}, 0x1, 0x0, 0x0, 0xc840}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000780)=ANY=[@ANYRES32=r2, @ANYRES32=0x0, @ANYRESDEC=r0], 0x3c}}, 0x0) 2m37.421628279s ago: executing program 2 (id=2675): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$XFS_IOC_PATH_TO_HANDLE(r1, 0xc0385869, &(0x7f0000000300)={r1, &(0x7f0000000100)='/dev/virtual_nci\x00', 0x28003, &(0x7f0000000200)={@_ha_fsid={[0x1ff, 0x6]}, {0x9, 0x291, 0xff, 0x1}}, 0x5, &(0x7f0000000240), &(0x7f00000002c0)=0x80}) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f0000000340)) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x2, @loopback}], 0x1c) sendto$inet6(r0, &(0x7f00000001c0)="794dfe824bc50900000000000000a02020", 0x11, 0x800, &(0x7f0000000140)={0xa, 0x4e21, 0x5, @loopback, 0xfffffffb}, 0x1c) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_route_sched(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001500)=@newtaction={0x18, 0x31, 0x829, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) 2m36.337503165s ago: executing program 2 (id=2689): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000073313700000000008510000002000000850000007600000095000810000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x3, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x7fff}}]}, 0x38}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x1, 0x3}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) r5 = socket(0x10, 0x803, 0x0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000000)={0x0, @broadcast, @empty}, &(0x7f00000000c0)=0xc) sendmsg$xdp(r5, &(0x7f0000000300)={&(0x7f0000000200)={0x2c, 0x8, r6, 0x24}, 0x10, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x24040000}, 0x4000000) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffb, {0x0, 0x0, 0x0, r8, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x6, 0x6, 0xd21, 0x101, 0x6, 0x5, 0xbd, 0x100, 0x4}}}}]}, 0x58}}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), r4) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) socket(0x400000000010, 0x3, 0x0) (async) socket$unix(0x1, 0x2, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000073313700000000008510000002000000850000007600000095000810000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) (async) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x3, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x7fff}}]}, 0x38}}, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x1, 0x3}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) (async) socket(0x10, 0x803, 0x0) (async) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000000)={0x0, @broadcast, @empty}, &(0x7f00000000c0)=0xc) (async) sendmsg$xdp(r5, &(0x7f0000000300)={&(0x7f0000000200)={0x2c, 0x8, r6, 0x24}, 0x10, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x24040000}, 0x4000000) (async) socket$unix(0x1, 0x5, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffb, {0x0, 0x0, 0x0, r8, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x6, 0x6, 0xd21, 0x101, 0x6, 0x5, 0xbd, 0x100, 0x4}}}}]}, 0x58}}, 0x0) (async) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), r4) (async) 2m35.988518938s ago: executing program 2 (id=2693): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELTABLE={0x28, 0x2, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELTABLE={0x8c, 0x2, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x3}, [@NFTA_TABLE_USERDATA={0x69, 0x6, "e62807258a6d38caf4cb1d7a776a7a05e57912414e63207c5e61d47bb4016b21bd5593b033b0968722f2f0f4818a1a13fbb43e79d0ae674d071c0164df9d3701cc15211300766b6ebe326ada9e49cca5c2a074e0e46e35eabfb48a4cd2cd8379a97e705b01"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWSET={0x1c, 0x9, 0xa, 0x3, 0x0, 0x0, {0xa, 0x0, 0x2}, [@NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x2}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xf8}, 0x1, 0x0, 0x0, 0x2000c814}, 0x4000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000004000ffff0900010073797a30000000000900020073797a3100000000140003800800014000000000"], 0x138}, 0x1, 0x0, 0x0, 0x20040855}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd0002800800"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)={0x14, 0x26, 0x1, 0xf0bd23, 0x25dfdbfd, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x204c84c}, 0x20040000) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELTABLE={0x28, 0x2, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELTABLE={0x8c, 0x2, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x3}, [@NFTA_TABLE_USERDATA={0x69, 0x6, "e62807258a6d38caf4cb1d7a776a7a05e57912414e63207c5e61d47bb4016b21bd5593b033b0968722f2f0f4818a1a13fbb43e79d0ae674d071c0164df9d3701cc15211300766b6ebe326ada9e49cca5c2a074e0e46e35eabfb48a4cd2cd8379a97e705b01"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWSET={0x1c, 0x9, 0xa, 0x3, 0x0, 0x0, {0xa, 0x0, 0x2}, [@NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x2}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xf8}, 0x1, 0x0, 0x0, 0x2000c814}, 0x4000) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000004000ffff0900010073797a30000000000900020073797a3100000000140003800800014000000000"], 0x138}, 0x1, 0x0, 0x0, 0x20040855}, 0x0) (async) socket$kcm(0x10, 0x2, 0x10) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd0002800800"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)={0x14, 0x26, 0x1, 0xf0bd23, 0x25dfdbfd, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x204c84c}, 0x20040000) (async) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) (async) 2m28.541193469s ago: executing program 32 (id=2622): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = socket(0x2a, 0x2, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x78, 0x24, 0xf0b, 0x70bd2a, 0x2001, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x5, 0xd}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0xff, 0xec2, 0x5, 0x2, 0x400}, 0x10000, 0x1, 0x7ff, 0x6, 0xe, 0x14, 0x1f, 0x1b, 0x6, 0x2, {0x6, 0x19d, 0xa9, 0x8, 0x7743, 0xfd1}}}}]}, 0x78}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x40000) sendmsg$nl_route_sched(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000014c0)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r2, {0xe, 0x7}, {}, {0x5, 0xffff}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0x7, 0x8}}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x24004804}, 0x4000) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) r4 = openat$cgroup_type(r0, &(0x7f0000000100), 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x2, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000000000000000000000028f8a2"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x51}, 0x90) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1400000026000100000000000000000006"], 0x14}], 0x1}, 0x0) sendfile(r4, r4, 0x0, 0x6) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_MCAST_LEAVE_GROUP(r7, 0x0, 0x2d, &(0x7f0000000280)={0x7, {{0x2, 0x4e24, @multicast2}}}, 0x88) sendmsg$nl_generic(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x448b1}, 0x0) 2m20.918231972s ago: executing program 33 (id=2693): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELTABLE={0x28, 0x2, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELTABLE={0x8c, 0x2, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x3}, [@NFTA_TABLE_USERDATA={0x69, 0x6, "e62807258a6d38caf4cb1d7a776a7a05e57912414e63207c5e61d47bb4016b21bd5593b033b0968722f2f0f4818a1a13fbb43e79d0ae674d071c0164df9d3701cc15211300766b6ebe326ada9e49cca5c2a074e0e46e35eabfb48a4cd2cd8379a97e705b01"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWSET={0x1c, 0x9, 0xa, 0x3, 0x0, 0x0, {0xa, 0x0, 0x2}, [@NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x2}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xf8}, 0x1, 0x0, 0x0, 0x2000c814}, 0x4000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000004000ffff0900010073797a30000000000900020073797a3100000000140003800800014000000000"], 0x138}, 0x1, 0x0, 0x0, 0x20040855}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd0002800800"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)={0x14, 0x26, 0x1, 0xf0bd23, 0x25dfdbfd, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x204c84c}, 0x20040000) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELTABLE={0x28, 0x2, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELTABLE={0x8c, 0x2, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x3}, [@NFTA_TABLE_USERDATA={0x69, 0x6, "e62807258a6d38caf4cb1d7a776a7a05e57912414e63207c5e61d47bb4016b21bd5593b033b0968722f2f0f4818a1a13fbb43e79d0ae674d071c0164df9d3701cc15211300766b6ebe326ada9e49cca5c2a074e0e46e35eabfb48a4cd2cd8379a97e705b01"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWSET={0x1c, 0x9, 0xa, 0x3, 0x0, 0x0, {0xa, 0x0, 0x2}, [@NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x2}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xf8}, 0x1, 0x0, 0x0, 0x2000c814}, 0x4000) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000004000ffff0900010073797a30000000000900020073797a3100000000140003800800014000000000"], 0x138}, 0x1, 0x0, 0x0, 0x20040855}, 0x0) (async) socket$kcm(0x10, 0x2, 0x10) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd0002800800"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)={0x14, 0x26, 0x1, 0xf0bd23, 0x25dfdbfd, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x204c84c}, 0x20040000) (async) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) (async) 3.768589524s ago: executing program 4 (id=3770): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) connect$inet6(r2, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000010024bd7000fc0ddf2500000000", @ANYRES32=0x0, @ANYBLOB="1b0b04000300000008001b"], 0x28}, 0x1, 0x0, 0x0, 0x68010}, 0x0) write$tun(0xffffffffffffffff, &(0x7f00000013c0)=ANY=[@ANYBLOB="03000500030019000c0066644cfb00103a000000ff02000000000000000000000000000186009078000002"], 0x42) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000080)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9, 0x0, 0x1, 0x2, 0x8001, 0xd626}, 0x20) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_NEWRULE={0x18c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_EXPRESSIONS={0x168, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_DUP_SREG_DEV={0x8}]}}}, {0xf4, 0x1, 0x0, 0x1, @target={{0xb}, @val={0xe4, 0x2, 0x0, 0x1, [@NFTA_TARGET_NAME={0xd, 0x1, 'CLASSIFY\x00'}, @NFTA_TARGET_INFO={0x19, 0x3, "9ebce05c3c7281ca24202aa5719f6d25cdb1b9a398"}, @NFTA_TARGET_INFO={0xab, 0x3, "31595efd38dab5260a92a9f78b87b5a0891b453b4477f4861d4155eb79f4a10942c80e88af31f19916d401fd11ea039a49ffcc258baa16a3d8226b4a68292f22afc82b8a4a2c075a69129d9291ef45791267a14e9386a728492a64a1a41fc80eaa6dae062140a67cd87030fad3cb3f14af0e49ff8e6581c2b549a8d6e40f044445f90bbf64425f42d851cacac99232f40881cf36f4f78af913d574fb3c35e7ff8c2b9d88f9191d"}, @NFTA_TARGET_REV={0x8}]}}}, {0xc, 0x1, 0x0, 0x1, @log={{0x8}, @void}}, {0x1c, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_QUEUE_SREG_QNUM={0x8, 0x4, 0x1, 0x0, 0x3}]}}}, {0x10, 0x1, 0x0, 0x1, @limit={{0xa}, @void}}, {0x10, 0x1, 0x0, 0x1, @limit={{0xa}, @void}}]}, @NFTA_RULE_EXPRESSIONS={0x4}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x1b4}, 0x1, 0x0, 0x0, 0x4000091}, 0x24000000) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@local, @multicast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "3000bb", 0x8, 0x2b, 0x0, @private2, @local, {[], {0x0, 0x0, 0x8}}}}}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x1c, 0x2, 0x3, 0x801, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFQA_CFG_CMD={0x8, 0x1, {0x4, 0x0, 0x1}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24048000}, 0x20004000) recvmmsg(r0, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x0, 0x0) r6 = accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000000)) ioctl$FS_IOC_SETFLAGS(r6, 0x40086602, &(0x7f0000000040)=0x1000) r7 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$SIOCGSTAMP(r2, 0x8906, &(0x7f0000000340)) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x0, 0x0, 0x8000}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1d, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r8}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x39}}]}, &(0x7f0000000180)='syzkaller\x00', 0x4, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2b}, 0x94) setsockopt$CAN_RAW_FD_FRAMES(r7, 0x65, 0x5, &(0x7f0000000140), 0x4) 3.263346726s ago: executing program 4 (id=3776): r0 = socket(0x10, 0x3, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000001c0)="5c00000026006bab9a3fe3d86e17aa31106b876c1d0000007ea60864160af36504001a0038001d004231a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb4b64f69853362ac3407173ec", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4004080) recvmsg$kcm(r1, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x2) recvmsg$kcm(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x4000) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x7101}) recvmsg$kcm(r1, &(0x7f0000000dc0)={0x0, 0x0, 0x0}, 0x100) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40008) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000780)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514240cc008001900030002000600090000800000005883c64d251e638294ff0051f60a84c9f4d4938037e7000000000000000000d1c566a000000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x98010) r5 = socket(0x10, 0x3, 0x4) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000ac0)=@newqdisc={0x5c, 0x15, 0xf0b, 0x0, 0x0, {0x2}, [@TCA_STAB={0x38, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}}, {0x16, 0x2, [0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x3, 0x0]}}]}]}, 0x5c}}, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), r3) sendmsg$IPVS_CMD_SET_SERVICE(r3, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x34, r8, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x5}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5d}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x4) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x305001, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f00000003c0)={'bond_slave_1\x00', 0x4000}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r9, 0x0, 0x22, 0x0, &(0x7f00000006c0)="f6f4e9a1d78ad62ceef1884366a578bb3fb7dbfc", 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000700)="0102", 0x0}, 0x50) sendmsg$NL80211_CMD_DEL_KEY(r3, &(0x7f0000000440)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xc1002}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010028bd7000fedbdf250c00000008000300", @ANYRES32=r7, @ANYBLOB="020000000500020002000000"], 0x28}, 0x1, 0x0, 0x0, 0x20000004}, 0x80) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000480)) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x4001}, 0xfea3) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="17f9ffff5500230d00400000000000000f00e41a", @ANYRES32=r0], 0x18}, 0x1, 0x0, 0x0, 0x4000040}, 0x0) 3.159483935s ago: executing program 5 (id=3778): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000215000/0x1000)=nil, 0x1000, 0x0, 0x6011, r0, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x13, r0, 0xd1383000) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000039c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffffe8}, 0x48) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'tunl0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f00000002c0)={'ip6_vti0\x00', 0x0, 0x4, 0xad, 0x1, 0x5, 0x20, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @remote, 0x40, 0x0, 0x8, 0x7}}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000440)={0x0, @loopback, @empty}, &(0x7f0000000480)=0xc) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000540)={'erspan0\x00', &(0x7f00000004c0)={'sit0\x00', 0x0, 0x7800, 0x7, 0x3, 0x1, {{0xe, 0x4, 0x0, 0x36, 0x38, 0x67, 0x0, 0x4, 0x2f, 0x0, @multicast2, @remote, {[@generic={0x0, 0x5, "67cee9"}, @timestamp_prespec={0x44, 0x1c, 0x96, 0x3, 0x6, [{@broadcast, 0x6}, {@broadcast, 0xb}, {@remote, 0xbf}]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000006c0)={'gretap0\x00', &(0x7f0000000580)={'tunl0\x00', 0x0, 0x7800, 0x8000, 0x4fe, 0x6, {{0x39, 0x4, 0x1, 0x1e, 0xe4, 0x66, 0x0, 0x4d, 0x2f, 0x0, @remote, @remote, {[@ssrr={0x89, 0xf, 0xb9, [@broadcast, @broadcast, @local]}, @lsrr={0x83, 0x23, 0xb5, [@multicast1, @loopback, @private=0xa010100, @multicast2, @dev={0xac, 0x14, 0x14, 0x40}, @private=0xa010100, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote]}, @generic={0x7, 0x11, "9a9f25bb4e59699ef8e1fd61def28b"}, @timestamp_prespec={0x44, 0x34, 0x36, 0x3, 0xb, [{@private=0xa010100, 0x6e48fce}, {@local, 0x80000001}, {@private=0xa010100, 0x2}, {@multicast2, 0xfffff000}, {@dev={0xac, 0x14, 0x14, 0x26}, 0x9}, {@loopback, 0x8001}]}, @timestamp={0x44, 0x20, 0x65, 0x0, 0xa, [0x4, 0x1, 0x1, 0x7f, 0x2, 0x7, 0x7]}, @timestamp_prespec={0x44, 0x14, 0x8f, 0x3, 0xc, [{@empty, 0x8}, {@local, 0x8001}]}, @noop, @ssrr={0x89, 0x1f, 0x87, [@multicast2, @private=0xa010100, @local, @rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x1b}, @broadcast, @local]}, @ra={0x94, 0x4}]}}}}}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000700)={@private0, 0x0}, &(0x7f0000000740)=0x14) sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000009c0)={&(0x7f0000000a40)=ANY=[@ANYBLOB="18020000", @ANYRES16=0x0, @ANYBLOB="00022cbd7000fedbdf250700000060000180140002007369743000000000000000000000000014000200726f7365300000000000000000000000080003000300000008000100", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=r4, @ANYBLOB="91e54bd3485ebb0314000200766574682f65305f6d616376746170000000080001f2", @ANYRES32=r5, @ANYBLOB="28000180140002007665746831000000000000000000000008000300020000000800030002000000880001800800030001000000140002006d61637365633000000000000000000014000200697036746e6c300000000000000000001400020069705f767469300000000000000000001400020076657468315f6d616376746170000000140002006272696467655f736c6176655f300000080003000200000008000100", @ANYRES32=r6, @ANYBLOB="08000300010000000c000180080003000300000070000180140002007767310000000000000000000000000008000100", @ANYRES32=r7, @ANYBLOB="140002007465616d3000000000000000000000001400020076657468315f766c616e00000000000008000300000000000800030002000000080003000200000008000100", @ANYRES32=r8, @ANYBLOB="080003000100000030000180080003000200000008000300050000001400020076657468305f766c616e00000000000008000100", @ANYRES32=0x0, @ANYBLOB="4800018014000200766c616e3100000000000000000000001400020076657468315f766c616e00000000000008000100", @ANYRES32=r9, @ANYBLOB="14000200766c616e3100"/20], 0x218}, 0x1, 0x0, 0x0, 0x20008000}, 0x20000801) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_PAUSE_SET(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x4010}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r2, 0x18000000000002a0, 0x38, 0x0, &(0x7f0000000140)="b9ff0300600d698cff9e14f086dd", 0x0, 0x63, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x48) setsockopt$llc_int(r1, 0x10c, 0x3, &(0x7f0000000040), 0x4) connect$llc(r1, &(0x7f0000000000)={0x1a, 0x0, 0x1, 0x1, 0x0, 0x0, @remote}, 0x10) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@ipv6_newnexthop={0x34, 0x68, 0x1, 0x0, 0x0, {}, [@NHA_ENCAP={0x14, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x10, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, @LWTUNNEL_IP_OPT_VXLAN_GBP={0x8, 0x1, 0xffffffff}}}}, @NHA_OIF={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x14}, 0x0) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0x3, 0x28011, r12, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x7000000, 0x6e073, 0xffffffffffffffff, 0x100000000) 2.830074989s ago: executing program 0 (id=3780): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) splice(r2, 0x0, r1, 0x0, 0x10000008ebc, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000001640)=[0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0xc87) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$inet_sctp(0x2, 0x5, 0x84) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000280)={0x3}, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000009c0)={0x20, 0x1e, 0xa01, 0x0, 0x0, {0x7}, [@typed={0x8, 0x26, 0x0, 0x0, @u32}, @nested={0x4, 0x44}]}, 0x20}}, 0x0) getsockopt$inet_sctp_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f00000002c0), &(0x7f0000000400)=0x8) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x25dddbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xffff}, {0xffff, 0xffff}, {0x1, 0xd}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newtfilter={0x58, 0x2c, 0x725, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r7, {0x0, 0x8}, {}, {0xa}}, [@filter_kind_options=@f_flower={{0xb}, {0x28, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x24, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x1c, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x2}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_HWID={0x5, 0x4, 0x2}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_DIR={0x5, 0x3, 0x1}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x4}]}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x220008e8}, 0x804) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x0, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', r7, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x19}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r8, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = socket(0x2b, 0x80801, 0x1) setsockopt$inet6_mtu(r10, 0x11e, 0x17, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000000)={'bridge0\x00', @broadcast}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r9, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) r11 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_WANTACK(r11, 0x0, 0x0, &(0x7f0000000080)=0x1, 0x4) openat$cgroup_ro(r0, 0x0, 0x0, 0x0) 2.777024879s ago: executing program 3 (id=3781): r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000000), &(0x7f0000000100)=0x8) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={0xffffffffffffffff, &(0x7f0000000640)="b4", &(0x7f0000000180)=@udp=r1}, 0x20) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x10, 0x3}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x4, 0x3, 0x0, 0x1}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x51}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newqdisc={0x178, 0x24, 0xd0f, 0x200003, 0x0, {0x60, 0x0, 0x0, r5, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x148, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x100, 0x4, 0x400, 0x0, 0x81, 0x101, 0x7, 0xc40, 0x7fffffff, 0xfffffffd, 0x20, 0xb, 0xff, 0x6, 0xca11, 0x6}}, @TCA_GRED_STAB={0x104, 0x2, "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"}, @TCA_GRED_LIMIT={0x8, 0x5, 0xae}]}}]}, 0x178}, 0x1, 0x0, 0x0, 0x240400d0}, 0x24008004) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f0000000040)=0x4c80, 0x4) sendmmsg$unix(r2, &(0x7f00000029c0)=[{{&(0x7f0000000600)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000000c00)=[@cred={{0x1c, 0x1, 0x51}}], 0x20, 0x20000010}}], 0x1, 0x3400c0c4) close(r1) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x1403, 0x1, 0x70bd2a, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'bond0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000800) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r0, 0x0, 0x24004080) 2.764022201s ago: executing program 5 (id=3783): r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x40000) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x25dfdc00, {0x0, 0x0, 0x0, r1, {0x5, 0xfff3}, {0x0, 0xffe0}, {0xe, 0x7}}, [@filter_kind_options=@f_fw={{0x7}, {0x18, 0x2, [@TCA_FW_INDEV={0x14, 0x3, 'veth0_to_batadv\x00'}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x4) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x3, 0x0, 0x0, 0x51792e7248df3904}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GENEVE_UDP_ZERO_CSUM6_RX={0x5}, @IFLA_GENEVE_COLLECT_METADATA={0x4, 0xe}]}}}]}, 0x40}}, 0x0) (async) bind$pptp(r0, &(0x7f0000000000)={0x18, 0x2, {0x0, @multicast2}}, 0x1e) (async) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000200)=0x439a, 0x4) (async) sendto$inet6(0xffffffffffffffff, 0x0, 0xff00, 0x0, &(0x7f0000000180)={0xa, 0x4e20, 0xffffffff, @loopback, 0xbf}, 0x1c) 2.603241484s ago: executing program 4 (id=3784): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="5400000010001b"], 0x54}}, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000040)="0ce0996e3d57e89c62ab6e293cd3b0f926da2d612c9ab082d2fdecdc97778a0a8a6014266c0f51", 0x27) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0x7, &(0x7f0000000140)={0xe4c3, 0x7fffffff, 0x0, 0x5}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$TIPC_NL_MEDIA_SET(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r3, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r7, {0xc, 0xe}, {0x10, 0xfff1}, {0x0, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x24041080) 2.520874488s ago: executing program 5 (id=3785): socket$can_raw(0x1d, 0x3, 0x1) (async) r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000d, 0x4008031, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000d, 0x4008031, 0xffffffffffffffff, 0x0) getsockopt$inet6_mtu(r1, 0x29, 0x17, 0x0, &(0x7f0000000540)) accept(r0, 0x0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @random="429e82211cf8", @void, {@ipv6={0x86dd, @generic={0xa, 0x6, "7abd6a", 0x0, 0x67, 0x1, @private0, @mcast2}}}}, 0x0) 2.384482695s ago: executing program 3 (id=3786): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a300000000040000000030a01080000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a300000000070000000060a010400000000000000000100000008000b40000000000900010073797a30000000004800048020000180070001007274000014000280080001400000000d080002400000000124000180090001006d6574610000000014000280080001400000001008000240000000051400"], 0xf8}}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000710447000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) (async) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) syz_emit_ethernet(0xe, &(0x7f0000000300)=ANY=[@ANYBLOB="b19098e83376c049b920e11b15d648f99a3bce8c0ecb"], 0x0) (async) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000280)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xff, 0x0, 0x5, 0x200, 0x2, 0x8, 0x8000, 0x3, 0x3b8}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) (async) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x49, 0x1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r7, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r7}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) (async) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) r8 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2c, 0x2, {0x0, 0x0, 0x0, r9, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29d}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x8, 0x80000001, 0x7}, 0x1d}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x4894}, 0x2) (async) r10 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r10, 0x107, 0xf, &(0x7f0000000600), 0x56) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a310000000058000000060a010400000000000000000100000008000b0000000000300004802c000180090001007866726d000000001c0002800500030000000000080001400000000c08000240000000030900010073797a3000000000140000001100010000000000000000000000000a"], 0xcc}}, 0x0) (async) sendmsg$kcm(r10, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r9, 0x42}, 0x80, &(0x7f0000000440)=[{&(0x7f00000001c0)="27030200dc0f14000e0000000024c1020000ff1107c2fb7fe0406e52534b4f6b3d327db412f40000000000000000", 0x2e}], 0x1}, 0x4005) (async) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000000)={0x0, 0xfffffffffffffca2, &(0x7f0000000440)={&(0x7f0000000640)=ANY=[@ANYBLOB="00000000550010002dbd7000fddbdf2507000000", @ANYRES32=r2, @ANYBLOB="00000100b90b9394439647a6e4367d2cc97d55240c569838cff289d86ffe3413e913fe6d48c4c428bcdc85bb1f61e76b347eafafec1b3d51b86f1ad17d53fff2a2aaa2e6bb65b09e543a135933393cae088b4f6bb5cf8268db1f40122cbb347a55e37e28c71d585e0fa644", @ANYRES32=r2, @ANYBLOB="01000300ff01000000000000000000000000000196dd0000"], 0x60}, 0x1, 0x0, 0x0, 0x240608d1}, 0x0) 2.359665118s ago: executing program 6 (id=3787): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r1, 0x28, 0x0, &(0x7f0000000340)=0x3, 0x8) close(r0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYRES8, @ANYBLOB="648c0700000000000000030478ee91213f0aeb4a21b313a96fcc5a5f5038504841dcf363b5", @ANYRES32=r1], 0x70}, 0x1, 0x0, 0x0, 0x4805}, 0x40) 2.03964106s ago: executing program 4 (id=3788): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000580)={@val={0x0, 0x86dd}, @val={0x0, 0x0, 0x11, 0x800}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "ec9700", 0xf98, 0x2c, 0x0, @local, @mcast2, {[@dstopts={0x67}], @pkt_toobig={0x2, 0x0, 0x0, 0x800, {0xf, 0x6, "111363", 0x3ff, 0x0, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @loopback, [@routing={0x3c, 0x10, 0x0, 0xa3, 0x0, [@private1={0xfc, 0x1, '\x00', 0x1}, @local, @private2, @empty, @remote, @loopback, @remote, @private1={0xfc, 0x1, '\x00', 0x4}]}, @hopopts={0x3a, 0x1d8, '\x00', [@generic={0x2, 0xebf, "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"}]}], "ab0924172f9c2a1d"}}}}}}, 0xfce) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000001, 0x12, r2, 0x0) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000000)={0x0, 0x4}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r2, 0x84, 0x5, &(0x7f0000000240)={r3, @in={{0x2, 0x4e24, @broadcast}}}, 0x84) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r2, 0xf507, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000800000000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 1.985320796s ago: executing program 6 (id=3789): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000000, 0x12, r1, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_RELOAD_REGDB(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)={0x14, r2, 0x1, 0x70bd29, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x40000) sendmsg$NL80211_CMD_SET_KEY(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x38, r2, 0x706, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_KEY_SEQ={0xd, 0xa, "5a52b7b5300630c378"}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x2000) r4 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r4, &(0x7f0000001400)={0x0, 0x0, &(0x7f00000013c0)={&(0x7f0000000100)={0x4c, 0x12, 0x1, 0x70bd2b, 0x25dfdbfb, {0x15, 0x2, 0x7, 0xe, {0x4e20, 0x4e22, [0x6, 0x8, 0x2a44, 0x3], [0x2, 0x8, 0x4, 0x3], 0x0, [0x1000, 0x6]}, 0xeea0, 0x1183}}, 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1100}, [@IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_LINK_STATE={0xc, 0x5, {0x62, 0x1ff}}]}]}, @IFLA_GROUP={0x8}]}, 0x3c}}, 0x0) 1.92053526s ago: executing program 3 (id=3790): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000600)=0x9, 0x4) socket$inet_sctp(0x2, 0x1, 0x84) (async) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000600)=0x9, 0x4) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x26}}, @in={0x2, 0x4e21, @local}], 0x20) listen(r1, 0x7) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x26}}], 0x10) (async) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x26}}], 0x10) socket$inet_sctp(0x2, 0x5, 0x84) (async) r2 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$EBT_SO_SET_COUNTERS(r2, 0x0, 0x81, &(0x7f0000000080)={'filter\x00', 0x0, 0x0, 0x0, [0x7266da2e, 0xd4, 0x1, 0x9, 0x99, 0x7e26], 0x1, 0x0, 0x0, [{}]}, 0x88) ioctl$FIDEDUPERANGE(r1, 0xc0189436, &(0x7f0000000040)=ANY=[@ANYBLOB="030000000000000005000000000000000400000000000000", @ANYRES32=r1, @ANYBLOB="000000fdde00"/28, @ANYRES32, @ANYBLOB="00000000faffffffffffffff00"/28, @ANYRES32=r2, @ANYBLOB="00000000f6ffffffffffffff00"/28, @ANYRES32=r0, @ANYBLOB='\x00'/28]) listen(r0, 0x7) 1.808856847s ago: executing program 6 (id=3791): r0 = socket$rds(0x15, 0x5, 0x0) recvmmsg(r0, &(0x7f00000005c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x10001, 0x0) r1 = socket$kcm(0x29, 0x2, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f00000000c0)=@framed={{}, [@ldst={0x1, 0x2, 0x4, 0x2, 0x1, 0x16}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, &(0x7f00000003c0)={r1}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x6, &(0x7f0000000000)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x8, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r2}, 0x94) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x1b, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000300)={0xa, 0x4e22, 0x2, @loopback, 0x5}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000000)=@gcm_128={{0x304}, "e73385148bc8751d", "20cd59bea8489daa054fa8a1bb9ce4bb", "5dd60e4e", "a3803667cf09fe61"}, 0x28) r4 = socket$can_raw(0x1d, 0x3, 0x1) r5 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) bind$can_raw(r4, &(0x7f00000000c0)={0x1d, r6}, 0x10) sendmsg$inet(r3, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="e400000000000000000000000700000094040000865400000003051005c3e45b3e088e6f722b0df22b3c00126eacb1ceb7f260dab33486c73af20b59020788c2fdffc9060c47629611bad4427b49310104076002042a03051106b63d39a9a516678325f283800b5d83237b00000000ac1414aaac1414bbe0000002ffffffff00000000ac14142de0000002890327440c7b302e7dc6a00000000807174bac1414aae00000027f0000017f000001ac1e10018317eaac1e0101ac1414aaffffffff64010101e0000001831b0b640101017f00000164010102ffffffffac1414aae0000001000000000014000000000000001a01000001"], 0x100}, 0x8000) socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0}]}]}, 0x58}}, 0x0) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r10) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f00000001c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_BSS(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x1c, r11, 0x1, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r12}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) sendmsg$NL80211_CMD_LEAVE_MESH(r7, &(0x7f0000000580)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000500)={&(0x7f0000000340)={0x28, r9, 0x1, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r12}, @val={0xc, 0x99, {0xfffffffc, 0x4}}}}, ["", ""]}, 0x28}}, 0x4000) r13 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r13, 0x0, 0x80, &(0x7f0000001d80)=@broute={'broute\x00', 0x20, 0x4, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000c0], 0x11, 0x0, &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x41, '\x00', 0x2, 0xfffffffffffffffe}, {0x0, '\x00', 0x4, 0xfffffffffffffffe}]}, 0x108) 1.73277062s ago: executing program 0 (id=3792): socket$inet6(0x10, 0x3, 0x0) (async) r0 = socket$inet6(0x10, 0x3, 0x0) socket(0x2d, 0x2, 0x0) (async) r1 = socket(0x2d, 0x2, 0x0) bind$inet(r1, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) (async) bind$alg(r3, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10) accept$alg(r3, 0x0, 0x0) (async) r4 = accept$alg(r3, 0x0, 0x0) sendmmsg$alg(r4, &(0x7f0000001140)=[{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000000)="f51cd12150816a2ba4e93c70d3ab9251d011a119c0a0bd", 0x17}, {&(0x7f0000000040)="2321fd251640680e0722dcaec284fae45fd5c283cf1e6d3b3b46f5a735d1f8a711b14865707257c158e9896d6e557bcc1920", 0x32}, {&(0x7f00000000c0)="f1a9ad35b3c771d20c8ea152002a996f8c88bff86701c572467ace190c1da1c009582d76f18b3625117011524ad108dd524159b94751ab47cc11603d5cca6d554b49a98ce552f6dc0c2a01655dfff2a25398d3bbf8e56a3fd9adab0c7cf8a4d04e9c4a6b5e69864481d1e0c219af659b40615364169058b44f717f790262b7b5ebd274811ad58a44c5ffa35a38c569fe06f9180cd0267aea3b493f05798af2dfda0e9580895e1ff02e94afed108d57d4ade0b7c74a69c5cf7cdb98f8422ebef7f66e554f9c8b", 0xc6}, {&(0x7f00000022c0)="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", 0xef1}], 0x4, 0x0, 0x0, 0x400c080}], 0x1, 0x8080) (async) sendmmsg$alg(r4, &(0x7f0000001140)=[{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000000)="f51cd12150816a2ba4e93c70d3ab9251d011a119c0a0bd", 0x17}, {&(0x7f0000000040)="2321fd251640680e0722dcaec284fae45fd5c283cf1e6d3b3b46f5a735d1f8a711b14865707257c158e9896d6e557bcc1920", 0x32}, {&(0x7f00000000c0)="f1a9ad35b3c771d20c8ea152002a996f8c88bff86701c572467ace190c1da1c009582d76f18b3625117011524ad108dd524159b94751ab47cc11603d5cca6d554b49a98ce552f6dc0c2a01655dfff2a25398d3bbf8e56a3fd9adab0c7cf8a4d04e9c4a6b5e69864481d1e0c219af659b40615364169058b44f717f790262b7b5ebd274811ad58a44c5ffa35a38c569fe06f9180cd0267aea3b493f05798af2dfda0e9580895e1ff02e94afed108d57d4ade0b7c74a69c5cf7cdb98f8422ebef7f66e554f9c8b", 0xc6}, {&(0x7f00000022c0)="ccd14d667a379245ad18210cb3811662cb41bda64c221f5f63940ed5484fbf6549b540935a8c38ecf7df4ab5089365e6108ad6619cd32997b49d57c62c2fd744254689a2a959d26c0478baa9da5d908117af89ee2b42ae2025f6311003dd31feb466264a7eb16aaf4b5e4164cc2360d494fe5551c4802172ec1a128154cb8bae8a5a8b598bb9bf66c61cca42df91fee89ab2dd65ea553acb6a5f3f6e1fd790b803bed568f99a152da6a470a1efcbdfa5f7ac7d97d135d040bc5b472953e62971399b839fa7c7d999e5d60a69dabd13dfdf65ad1a1e59f626dfe0b1157b419085419615c24028c345f119768f4cdd8ca38a2ab30e9f8b14ea8c8462d8c60a4266746013d9686021635525000df85433d401fcfbd663ac0f2ac0e780603fbcb42ba8f8d5ae708821b05b0d6d6693cfd16321f35675fd7edea3ccc75f56a45e201d416ff563daa2eb1fb385bea847975b7c2d61b75d4e3caba37da6927a4a9873d0b33bd087144283172e2d190dbec6612be3143be9ce4dd0d7eb86a5370b01f5587ca5af9db734f2793345039befc220067aa37b01a651ab6914fbd092b4b29e8c89ecb308ff5ae1c28a63c64133921e0a871dcaf309b9a36e5a1d96fbd714dc50b749f64fa0ae87119975a299d59ab23ad277f74e0cfd13224372bc5d5fb7ca3ee044c3ac0cc1ac8ffa9ad89680bb1b3e304d120e661177608f5d78e016905e5e844c4363733acc753df19bf2307a59b4e5ee6375911d4cf3d8d63fd5983d1933785b35c03f61b30843cdb8a7db2af7fe6aae7260a150623046dc97cc8583fe65120f04e4cdd12bbf5a9312c81c74dafbb63ab22422d1985a75022249535e7a274e7bc83195e18158bb9fb245fc60fa3e1270e11daa33a1e7ac3d03615d7e2babe023a79675073ac7b7353cadca71e805e353064c71e1cca6168b0b30cbc707454d0445245b79bdafe1cea5aaf04433b63c13dbdf4bad7a07b9bb73ca1e6591d270ae6849a57369eecc9b81621f38e8704e0c9bbbcfc221732bacf6f76461493d955dd08308cc63d93e0db49cef5d9f64f0beaaae02468c17ee3909f86e10731efc06b60ca97c3e1e05ffff67abf636550b01e31498447a88d1851befd95aec934f688d0a3d6ab731cae33f1a92ac1cf89825765319368892e9f5e233e86caf39958070b2886496544abc6ce3a91227888fc61da370e2bcb744bd6bd8d35eda4e5bc9141a844335ee8075101b9d86337b2449512bdea50c423f3c00f201b18ca337e71f52a5cce3fdf419a396312fe14c9f3799a41454aa078e178ce00cea8e2974d8b6e1ee5d00802cd53353c7264335a704629460061c3b557449ef426315e7f10d9bef22cec5a935d2c93290809074e6ac973697754b557571d28d6314906516fda952efc23b55b82f48e6b98468c4e0105f77d4b33578d50ea0684e8eea2950a4c7aa08e309177ab57a3d8b8c1afb3cc7f9c0c64cea993b9bfbd67b8846ed9f025084c31f5514fe741ef0898b94bf0a47b79907508dfaa487409fd15ceafc3d5cd28314c6c6832dc28b62ef03abe087a78fd7c4ffc425b1c29c82740871abd5d32991de3c58f9a8dfb09c532d12bf3cbf3fa538d0370dc5c04ba958b6b9abd7590a918d91ad4f0ff8e3db1df9aff751a947c0a308fd29da8be6291a2f94f45ca31b66763f13059aa0e0a854e6e6456427fdd8b387b776834f1e87b1424e92b06f36f875e25ed8da07ba45503da12757d32a4622c4b571e6383427b0bb2b71978e420d3dd13c038bb11f9dfe4c1a73b81d491b33bc6952e0c45f13adc0cab5c92635baf1926217477bb990ad8244263d2c84125782ebc2d3ee7f99a21c5f8ba9a4109e332f3bb735bdfd1a0f64f995f93abd2046e59381c0f46b8252d3c82a1cdbcabf666b2acc0859242ffc71c0dbbbe80ad4caa1deb4bc36bafa726222a7e63eb43854021ec925b12a4779aa5d7cadb9e7c2d559c5297fc3ce89f640c06228cac97d10ef0201f104dbdd5575af52d14eac24c816239645f12ccb48cd334578c15bd025395d47e6466f8f3c42b824ba79478c4832f757c20679b3062e35420f7841811ce87638eb946abc0de4bd72dc029b149d81249e14dafabcf6dce1d80e7726d01206c1aa8b8acf65569108caa831325761e8d9cb1a17922b888d758f4c6efe3878343c96271417273af1f571ba2bba95c00dceb78b906afcf3c2693534d91ba6e11d2c21949c2010193290463841dba7137f85b129074a612f9fc90f93a38cace2813a4cb009da2507ba97a93b7c529f739ce400dba8c272bee79b117f829213b8d3b9596a377345878d5e5f6fe0fe7a853e9c59642088a6d0c097fc7efe3dabe12b6ec39e9db458158affcaa9df64d1ce9eeaa78931a4ad3a3f72edafa4d1c1ea8f995058d1541bcff3adbbed07991fd0e95f0f0a82c9e498aded8df7e40b25c8a12c9f3773a2cce019ee72014f1e7a5253f63bf8363dc373c79095cbe69428a64bd13396f7b618b5a6d332815637c9d910309c3671b3e995ea85646ec497a99675ee746bfabfe6126fd2dab64947b1c030aabfe5469bc9698883a6e1f1232f771fe6a9bf46d6ba3a94e9c1085e1f3e6b968e1259c8c4d0cb44a428d47b4e19795082106349a549ad4912812ddcbfbf684bd41a10101c88e6d17060cf70374332d6b32c7b95386ff4020dd93d0494ea96a4968c47e9d01562e6180703807e32aac1f6d117623b970ac95591373b1e839175ac2eb80a20062bdeb51ca5749fca3df86af200ad61a11efb1a2dd5ba789b63c844568613cbc77ef29b94f9a13fed22eeb384c035ca428ef5299b46dfa6e07f8ecbab6306fc990ca07b163ccbcc2e6a5555e740d3149238221a61e3780a5c3fc9e11625c3c3fee5e9eb4bf4dd265c03365716e2a501f02c4d0e3fddb550e0dc8ecdb17ae4adc61548b1e152f8ca639a366896535002a9ae27fa60a87c06c1b19cbefa84ba02cc971b6df8382f2f32442d40199c282e1a62d30f4c5907d2b002521b9c28f6752ed623d85ff02c1537f4a5e1fb2f28375679dc432b8c8a05f851008d3fbde6912c325d3842b259ab7507c2c52a2968f9e948f22c5149df2792b12f721fd962c36a36d4d9e835c3e80005cbc15c38932f27c1c387f098f713136621f9469ac2201f88ba0d9aaf67cd316e1c22ae8dfa595254dc510a74f71bc42cbe4818a548db9a0326f2a899838a870ced516949185f11230b6a25f6a09d9acd54fcde19e4804fd2ab10c905b53af5ecd81a3ae779de93f293a4d8538dfdf64662456298ab89999e19db0623e9db1981082e04241db18ee003bab33171721db6907160cd901375703ebdc6463ca5ac0c82d055f23ad2b7736b4def4e70f8084275c9768b5012c405e7387d11f1b06926f0c68697e8dd879da9fd8ea838ddd5689e64c741caf1a1dffc82241cb0b97d1837a94d8593a1ccc11c1e41a0d297160c95d41ef3ed39c52eec1b00cc98f8a1e23440d6697eab71b3495606c5f483514cd9e6d26d541b15f932235760d03b45e91a4e75dbd332142296934b9f445163d505a869985d0fbb396de4548af32ac58522905f7ae0dfe66458b72ae4b7071cfdb81c0a73691f8aefd9271099966bda933846fc8c7a859f4aecd8e5837e509ebe302ea14eb2415c858d279d7a927a20e5fae7059763ee188fc8b421e5c9c95aa74db4910a20b6bd2f5c1af77ffda0dd720b77b234e1224c988b9fa13f5199e476ee98f518b639b7a15fb641cd75cdfc3e9a8bab1c8c413e111427163262d28df7f3a1416b45aff2d04f8b5087739c780bd034b71744739fc9da5c2aa022716a19d6312d07876038e72e145770d004dc434daf714722089b993e3975079e49fbf4fdd168ccdeac81958ca84732da2c77f62ed515fba5ab95f13c5dafe166c88c46775a0b5c6dff64725ad846a44aba58259b2fd1d2914757ae65be2d34b285dcf4f84269c13e4a15ba3d41ededccb80ce7bf15549ea390e04e76c9c008ada9d1fc8d7ee1bfac9a0e595787884c51afbfbae0debb9ba7059538d6979c959557a6df2d128d4e72fef13e82704ea57051d648f9b6fdaa6932dac99a8111981c986d326eea9196b431f5f7a855a456794785bd9129806ff6492b4a453709cfca6c135f84fc2457a625df58ec1a4bff0e7c549525f8c55e1dd38ff68a02bcc1f99053087d3101482ab9e4de86a1a36646cf7dedea2b2467da3fd3a3351e63c768d847520cc33ac25ae60e83d1bb4b67b8076febba846851a9664a2a931a518010b094165bf516dfec468b9273607a5f9ae4e0c3efc4df9efd39c181919b79183c61c6eefaba23bf0b577544c9668ac52d53681035cfabe76cb0fe5f114407e1711e05e6cd9282a9bab8891371cd2a9043f393ec4a0259b5f2c1bca5eda226cc9eb485c4634a7619ab633f031c2b228fbf5addc96f8c8d6d2d59624af6ac5405ac8c4f8e64042a66c9f421b3f0aa1ba704f62ba5786b760c1c537be2cf8ed922a61805b5eb327733b152ceb872e3b29c49eb510e468a938745bfb4a70d0e0015c86824a14ab702e615da02eb118281b961d7035f802f66e36b7752707d27e0f5ff2a456c86e043daa191e1325a77ebd9946417e1ddb8e0c60399f822aae7eead3945fe638dfcf0ad009c3699b5e3a2c41c88bb654a130c5b538c0f65ef9e019dd105feb7f51ccc67fe3520f095e80b491d19a4149e6c0246c7a7f0b47d3f6e290e284765e19e9c8994ee458a075977e10de81533bbe28d27544faac57121ae9159cf390a46555ec6b55733177d33477186f7d921f4351c08610311a4c1495fd4159c4fd50bd84eccb84313a08ce39921beb9730ea3b8a3cdf6aa42987db1b2c951d6f3b9235a2b22a62badd36957da2ad265d3e693a7ce1f38468ba5500e7947f3efca7f21d4d8068637fd36175bb470679eb01e5847616c18efa49c6d221b9e51ce09724911c61a15606efac5227d5a3d85e7d69506503a23cddc266a6446b545a8c39bde020f87ece3f2e43df6e6fc2a8edb245b535b0d819092c19c71a59c556f9139974c5b3715376b96069205476c4ff3e8e31984a6a7d2d9560ef9b07422646bb1d7d82f5c2cd52ac16fc8a627307e1302e94aef45f0de19d8a558d98891a2fe7028d2c17a6edfe11e26eb8049753a9329cf26f45c0076d8c5b2f74c83d24de5d4db17f5285fd647db0b4c0f8c287dac85a5b7c0bb7cb6a225e593c50b40c39f40a026625d8580beb466a841f5bce5c23ebb7d0f1de363d09b75902479de582936300ac17a837849a8d0739e39a1d0b9390cae41055fe881f4e36c6160fcb62d152282ad2b613aa3954788c91f947d7482ddc01de36e90423e889e442472423ad3090d39018df2854e0a1c008fa197b60a26718a5546a18afff33e0baf", 0xef1}], 0x4, 0x0, 0x0, 0x400c080}], 0x1, 0x8080) recvmmsg(r4, &(0x7f0000003c80)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1}, 0xffffff0b}], 0x1, 0x2001, 0x0) (async) recvmmsg(r4, &(0x7f0000003c80)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1}, 0xffffff0b}], 0x1, 0x2001, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="30000000100001006c4789ec390bca4900000000", @ANYRES32=0x0, @ANYBLOB="211000000300000008001b0000000000080040"], 0x30}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r9 = socket$netlink(0x10, 0x3, 0x8000000004) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x2, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x8, 0x2}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x8c, 0x2c, 0xd27, 0x70bd28, 0x25dfdc00, {0x0, 0x0, 0x0, r8, {0x0, 0x4}, {}, {0xfff2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x2, 0x2, 0xfffffffffffffffd, 0x100000a, 0x8}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x2}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendto$inet6(r0, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) (async) sendto$inet6(r0, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007240)=[{{0x0, 0x0, &(0x7f0000001380)=[{&(0x7f00000012c0)="1ce02c7a", 0x4}], 0x1}}], 0x1, 0x1c000) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_IGNORE_DF={0x5, 0x13, 0x1}, @IFLA_GRE_PMTUDISC={0x5}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x48}}, 0x0) r12 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmmsg$inet(r12, &(0x7f0000000c40)=[{{&(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x23, 0x0}}], 0x1e1730a30afb6559, 0x8014) sendmsg$DEVLINK_CMD_RATE_DEL(r10, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000880)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0b160000000000000a004a0000000800a800000000000e0001006e657464657673696d0000000f0002006e657464657673696d300000"], 0x3c}}, 0x0) (async) sendmsg$DEVLINK_CMD_RATE_DEL(r10, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000880)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0b160000000000000a004a0000000800a800000000000e0001006e657464657673696d0000000f0002006e657464657673696d300000"], 0x3c}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000002180)={'ip6gre0\x00', &(0x7f0000002100)={'ip6tnl0\x00', 0x0, 0x2f, 0xff, 0x7, 0xdbf1, 0x1d, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private0, 0x10, 0x7800, 0x2, 0x10}}) sendmmsg$inet(r10, &(0x7f0000002200)=[{{&(0x7f00000000c0)={0x2, 0x4e21, @private=0xa010100}, 0x10, &(0x7f00000020c0)=[{&(0x7f0000000f40)="78c2eef213eef379133175dfa9dcf59e833df6ac2cbc15746e0bda0a38fc5485fa0446dc83dd9df4e7252a35ba7860dfa1294bf7858250628dab1c75c425a7f416d34f653eb7c54c4b009823bfc252bbf6f455a49e6711c045de66bccf1287e67d1d5e696b9778bbe21d3dd22ed2e5499887a35d602ab75a9c6eb8e0ad0a78266f8b34ddd372c53ba85236d52fc37462be48c95bbf1ddfd1c2ef085fe037770c13e44742d61935c01457587d55f5573120be31ac5c8db9be48170a5ea0dd2a3e8a759fe5c122a8f08e713b61301c0b10fe79d6fbffb75f51448f6cf42c0963bdc3d8c58a38710704c808729de95ab2a9abb26648005d97246a31e06ac766885ae2ef055ee37d654b6f4b1ab8c4e338245d572c56a1b317679a5cd16a132b78d0efdc1e3ab4cf8752d3a093d630fba94f46f55b054126932a5e2100903ba45812f7cb97aba6edc9df4157fca88b274f51b3c4df994e4da5ea1e7da11af105fb41021372f02994bf22e9f6296822b2a55851c2e0a990d821525e1678c00ac03e324abc85bdde675c5c40429d36f2ac4b26b2733f0e66df5e4de9a7813ef74284ae737a9bae2f8267ea62c0eb2bf54bcd1bfc81b861bf5c6b59e2d7d0b94f3303d1db3daf9be95b7e5c9ed2e4c8956ce72852e01a88e1a4b6e9c20c3f2ec1b8ea277c6e8b80adbcf4002b0a27b8cd5036a9dd151b67707c663a94a8b4c24b3f4159cc05ac18da7ddf54547d419935b05af55e646cf775a8a3e90ea24d118a5dc7f1b403cfa45237ab525ab1e9cdc7028e6ae584221305292d8851c92669a4305e872b685a3bb16941bd79c42933202fcf7e2be1f8743aea9fc4d68f43a2c01b73c814a2b7f28841c6b91c935d4bf6e6a37e7ff8bf9ead3e082e2ec30061647738a05c979e64872dcd0877894b32386ba0e05c96b40b402ec9ea085cb7615c99a162f901d97dc62b2ba94d81cb41004afd7aa3c91e3a154142acc8c97cba3d7d314a385bea23f837174e7720aafe8b347c9c597f9a10c6a1b51aca56b291d20e9356b487beedfaa6df5e3cf9e26ff2351aa86f45ca4a9d8c8db6ef346a08ef445d4a8e2458f181a53d7a92ec2509b7a2716217feb109a6933c286c5fdce17660efe56afe492d191d98325b4a037e2e956ec56b8afece5cb188efe2c7a615d62bc05142ab0e5a840d2df591c4660fc457d9093a92b15b98498dabee592ff19aa889b16e313fdbf29f360f0ff0480785f83fd12040f858a69fa96115edfe70766eb7925b9e33746e3491dccec19a315d0dc77e96b89de08a1b582b2a781a86d7907d98abf3415af9090d0a4104044389aceb5426d99a28cb6b154a27ef9bbc46fb8bff8e15ba48ced5632ca3f1319f6ce3d6830d19057bfc198a7665efe0b5bfc966c759df3d787722fef55c678da43e1e3445c9f39524cc58f4c906be37d9b176e48e220bf3f9cc0576f076da5f5f53bc5f5acb4685174eedff1f5262a6753dbb744d9fc7999b6424f0dafa5028714d5d8941c584862bd2cf075a3f9b78c53618bceb34f60aac8a50b2b4fa0a7f73660dd49d675e137fd7ea48c29e4586b24f06b0a60fe6ab8bd9789de2292ff265a1f59de816da28b483958944b15d01d2654deaf3d4efe54b9052f20412ffbac67205d89c167eb1399e9bbce3a5f42b3e61bb95f3e6f1f34e49cbd8d1f053ab3ab6a60fa879a3677b4598cde39a84a7c45efd75fff6ddcc236a922531de843a91a3ea7a0af84eb46786d70392f0a3539617a483331bab7d8ca9c9220100b02219205fa9c35d0dea7da7410c065214c9ea3edf802d46a3715c4ff802414ad2003723aff187584146093b0fb23fb9f2959ddd850798b5b66a7e4e663c7640fc6131a9b957cecd3ad85f3d1a3eba31ace1fb80e0b33dc8837281d2b22e4454210a6bfb51c02c30fe40a8381706a1e864126fb8c35762c2bf5094241565dbafc34f3e55c068c8a4c1f0511f15a00941051169c590da08e7600841d21cc7e48eb5db2f67d413557dd3bd41fc1841d5cbb81491f132571b4725d83547cb904ea70c04ef963bc5cf85974c8c97d777c62a1f4446e240587dd9b87e5a1a7ba8ddd3e28c2dbd9dce953fef3673c313f33a1fdcf5b1005a7cd6a92bc3229c18b4d2548ad5b0a4df221aebb88b08a701f54d7a1a37f9aa9df755b69e68e387b44c4d0b575752972934a707e1cb3cc765422a31e58e4733afaf7f9c128915df9f3b5531eb920180b30814b2ba316698d9dca16520b220fb1081b1ad0ab34f823b109b22bf512019b4257d315ea83fdac67b35038bfbbce1dfdfe23724f80dadaf087c7c48c4662c181e22a948d69e822435b73e55398cf9c90e08903e5d55760ff09a5a69775ec64fd29f8d6e8bdb10d977067f077b114724bf474c887f4791afcd3cdf4b2c7b9ec5cfbe795aa4b0208f8e2e932ebe53f647e1d4b63123260435b9a0f51d84e63b80296e58016d02efa3c05a3bd5b4f27aa791a285243ac6c5b5170639daa267b7d8f693545a6561be58fb5ac77fc9376b39d2090bdf06d5d380d3e5a02654ee9fb94570f81e1aad7c5597e6d2b31bb54f0c282a85d30435cfec9720af6c773131aebaa7cd517910ece3312bf98481a9a604e623c02f47da2fbbdadc52883ad27fa5d3debe97885a918e4263afebaa8fff9ae26c21a2baf837dc08c50703c31f6bd36637247d2e331d5fefc16f11e6a1eb33b0d3d813c62504be9b75b49f87e2465197db43689e9a6fb4ca22463c65f73f7a8d9a23ffef5d8d3e1ecb28897376620850f0468c30b75f9750b6a0f2bae43ff628927dc9efc9c5866a3df2e36c13145f0f8596a682423ca43ffaa606864a77158810ce61423f1eb7884f0f17041cc68efd0f75426637df078be3bf4e6b94990ef43eb92d90ac2d4fa6a366cb6f5f72300958a0586c9eac4a46fe04e56c362ef7371f287778342824336bc85fe1d9531da26819bc46c749c327b6fda41e778cae8463d390741528a1b585b6ce342689c91ed2db4c37efdc240855f78a81e47076fa8a7d267b0f0fdddc4eba073d41b93341e94decdf825d7a063aab964af6cf1a52034aad930ed259b420ad02136755f348638e0a795ffee160019567c082f3c70245e6f7b820d68050ece1985c7fab64f8bef8cc3ec923087321562445545542ea87143e9ade676714cdfe6558e6fc5d18d1da536871eefa3ea9922c7065dd2268a0c4f3fbf8522d3f99641d654d9949b5157f593c531996be07568a284c4085d54997f48af7e6ac436a2eebca0a5a69cd6d995ddeb13cbb7e3ad1251f65a65404bf8ac47e70d465eb3c1b88cca7b658669020957968d8e87f6e407d515c81e5bf278d54820b7d60c96191a00bd54f8241d9be38f2326e24fb7d057f069f605bd22ab1e2210b6faf09a97b4b78209eb6e7f2a997d3f764a7c3af01d6bd8c4ee15ec7bc5122af6ef59ab6a622c87ba589c12055c3be80f10485aea52facba6b3b160992d6e4a81ad9beb289d0394027c7a6c0dc6e5149ae19e300d88c285c198ed01961b3c476a62cce7b241a44b127bc7a0f054371b83d562984dfe506441aad31f1e4a1786c308970f349190eb6b775feab09628d6bad1d4f86d6ca14a4c826e3d9156eb7ca913761e791c9018b5490761bd6c8acea8f3763e45ce9d0090082fb4a378827a437a7f8711e3d3933c5b6da9a660c07ba1513609143a2d243bd3f6834f163d4981f60378f85459917ea7ff4346af38b6212084489b0fc34a5e443c1fb074fe51f8115c8614874de78d069b473821d80ce56b6ad0e8ee782a718d6d50f6922ccfc1c97128c0ee2af10aaf04a788303196b7296ac985ac49954292aed95b1c9d9e721a7893b7cd95535838a0df255cac6c0cd222eb53c0ab4aab7215223e7577d60268b679d0815cde1905b771e05413521f0ad6679116f1113cb7ac0c4bc98514411f277d687f34c5b376310c0fb5d00764d908a065a099c027eb9bae4a2c18264ebfe0a311e3249c009c0e5dca55438dad20558b80bd71e57ce3f188b5a71a61452a3046149b5d0cc661853d69ea0fa159e76508b9d8ea316552d569e8e61055ae755adc5afa9f06c8c7254e88e2eb6ed2ede688e1aae92d99dbfc98c29f5ea720f567372757a078e0fb2b15a59e50021da0050998768da85cdd5293e37008e543342f3c9965b8f39ff7e66f6a4e38aa4e59b0653095f3f31f56917d7cc060e96cc3bf73d38659ae9d76b03accda3fb480b1c248ebb8279b59155b4bed476d6366fd7cba900b52b52609e14fbbbbb4fe207ea3a6974c5a21bc3ee23346f28f0a4178b630c9bd9ebb69d8d9b15887b18434896a01c0633adb8974e6ca396df061a4f0b4314d6944ac4c9247a9652f40b317dcffee2bd468e634edad9479069cade07a1807dd250884614484e1dcecb29e36a7b28e44750f9eb79980a3777160c2b9f0e6999a5ac455a8b53d95f001bcdb27737db838fc34db893704b6a5745f8482490c5f9581b39e76a14dba054d5df79a9723ad05c458307100bfce9e3808938c8d3716fd7c09b9f3ba7708f4b3ebaa36894d3366c699e4c7868b35859797caa051d2a8b99a37729b0ea9e82cb5868219f10c5a7396d0b7f2d98670afbb3c37d5dd47e6d039afb491f46c937dc54442ced1de55a91825c432935ad7e1d87b76b791a77484c24d64c0c0d66a6378993623ac323bdd1352e15e08b224cdf61623aead2d21df65b683043a541c16d5da0d33d7dc17f1e8a3e01e51b4861eed05532bde46d07f88b271ebec6f9df88c58bba8c6d1a92ece36354c1d40d0bb620103bd6e252afd793ac314e8a580595778d5abc2a15c3a341aec41445387c21837fb9b18268f9b6d8845779784cf1be8f20cb4d7d49d1d077720827829f3511faea311daed483852c11ea2064e19b89de9628ae195f0efe7bd6f1cc9245fef15098a2f8165a82df5cd52bbfcd5041871067ab896dac44392c7d15e87976c777b5cb777712833a2240fc1b31dff3c0f0fbd49d7eae6d05d5dd1fc91e488500376aa9786ee0e67cb521bc5cc28f2b5261a82c9d077f6e81a88b55ccb624e533ac461f609e32005c236c1f0581e437f0f0dbaa6e560f618da07011fa86f8631538439310aa0827c1354add9ea0fa17041c3eb25d1cf74ee1cc9ba6eb0de1fa6807796aa246ef7ab66cd79a00e25cea9586cf6359d276ff58e2854b4380bb2deee49c92dd66ff3eeb58ed0578e98edc8a702cb5fd88b065263f453bd23252c0dc5b886e276ccefa1b2159bd865075a06e013bde55ad46921bd37e188b822a9c58b19609363717b204bb43d66245a5f24619bf0310d9d49ae9462d15689b0b37a88780588c3b4e6704607313e729c419cb9d572f74eab1e2df7fa5480d262ec8d7417a339d71ef1d45c5717c5b708ed8d03ff20e120d421652e5546d34c475e885ccdd5331ba310b072420b405b655a6b08c1567be7063da3aca2fec4c9ee8ef32a3b3580842d47d65279cb930404f2f406a7d70802d9063b844918d06d44d78358bd4a92c7794409a05a2e8b2f8738831f29bdba5656aac4cec9aec7a8b05a9c9f7e8094e2ba493f5b44bb58fe8c17d9a4b856fcf5b277f5d7597efeb9431efcb5bc65e72e1f5b75db16763fa982b3248a2e643fa948760e6ff85ae7e5b5e81578e1176b437fff56aae7faf6615da2f31cf3ff0c6604cdb55466907eaa87d2114ca9978b49241cd50c2ca858ee1e8fdf638a74ba6098420377cd27c3a69c9f92bc587894d23be34670c9190687107c952b5d8a2e2b6d0fe1bc19c6249edb68cca", 0x1000}, {&(0x7f0000001f40)="072867c5f6afbb7f2d0215b770953388dc9f66764534a2369d7f2d1c1e66578ddfd0f49efc7bc64a1d2b91a8df2e7851d6b6b0d953424665d878c55066aa14f6df60140c18da00ed509600a0daddb871b1ace615e8255a6e9ed6dea7357711fb7ad766c6d0b80b9f6d5fc3f59aa4a156605e8d313365c5463c874cd6b5dedf951ad782e9b4a753358fe6ab350c090e237b692fd7", 0x94}, {&(0x7f0000002000)="5271dc93943ac20c898ae90f3eccbe9a8590db46f30826f26b482b3658d8effac32f2242c914cd611c57c59e3734434ce1f178840792407f960065f7670d95fe9db7e1a1c5587fa6ceb87404a041913a59cdb00a37fa67", 0x57}, {&(0x7f0000002080)="93b6da08e6241c12930d607be8bf0ed9f969d5b95f97ffa7eee0fca68925e96ddbc3510c23c4231a393abd3ef0eec0c42b066bd6b948", 0x36}], 0x4, &(0x7f00000021c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r13, @loopback, @remote}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x139}}], 0x38}}], 0x1, 0x4000000) (async) sendmmsg$inet(r10, &(0x7f0000002200)=[{{&(0x7f00000000c0)={0x2, 0x4e21, @private=0xa010100}, 0x10, &(0x7f00000020c0)=[{&(0x7f0000000f40)="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", 0x1000}, {&(0x7f0000001f40)="072867c5f6afbb7f2d0215b770953388dc9f66764534a2369d7f2d1c1e66578ddfd0f49efc7bc64a1d2b91a8df2e7851d6b6b0d953424665d878c55066aa14f6df60140c18da00ed509600a0daddb871b1ace615e8255a6e9ed6dea7357711fb7ad766c6d0b80b9f6d5fc3f59aa4a156605e8d313365c5463c874cd6b5dedf951ad782e9b4a753358fe6ab350c090e237b692fd7", 0x94}, {&(0x7f0000002000)="5271dc93943ac20c898ae90f3eccbe9a8590db46f30826f26b482b3658d8effac32f2242c914cd611c57c59e3734434ce1f178840792407f960065f7670d95fe9db7e1a1c5587fa6ceb87404a041913a59cdb00a37fa67", 0x57}, {&(0x7f0000002080)="93b6da08e6241c12930d607be8bf0ed9f969d5b95f97ffa7eee0fca68925e96ddbc3510c23c4231a393abd3ef0eec0c42b066bd6b948", 0x36}], 0x4, &(0x7f00000021c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r13, @loopback, @remote}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x139}}], 0x38}}], 0x1, 0x4000000) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)={0x10c, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x6}, {0x6, 0x16, 0x2}, {0x5, 0x12, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x1}, {0x6, 0x16, 0x7}, {0x5}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x3}, {0x6, 0x16, 0xe0a}, {0x5}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x4}, {0x6, 0x16, 0xef4}, {0x5, 0x12, 0x1}}]}, 0x10c}, 0x1, 0x0, 0x0, 0x10}, 0x4004881) 1.665345027s ago: executing program 3 (id=3793): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$OCFS2_IOC_UNRESVSP64(r0, 0x4030582b, &(0x7f0000000080)={0x1, 0x0, 0x5, 0x2, 0xacc4, 0x200}) socket$netlink(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f00003fa000/0x3000)=nil, 0x3000, 0xb635773f05ebbee3, 0x10, r2, 0x215eb000) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r1, 0xc0096616, 0x0) r3 = socket(0x14, 0x2, 0x4) accept4$unix(r3, 0x0, 0x0, 0x80000) recvmmsg(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, 0x0}, 0xfffffffd}], 0x1, 0x40000100, 0x0) ioctl$SIOCGSTAMPNS(r0, 0x8907, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x2400c1, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r5 = socket$kcm(0x2, 0x5, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6(0xa, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$packet(0x11, 0x3, 0x300) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_route(0x10, 0x3, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x50000000000000, 0x3}, 0x0, &(0x7f00000002c0)={0x3fc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x7fffffff}, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001900)=ANY=[@ANYBLOB="240000001e000100000000000000000007000000", @ANYRES32=0x0, @ANYBLOB="000000000600050003"], 0x24}, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendmsg$inet(r5, &(0x7f0000000080)={&(0x7f0000001280)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000011c0)=[{&(0x7f00000012c0)='#', 0x1}], 0x1}, 0x0) setsockopt$sock_attach_bpf(r5, 0x1, 0x7, &(0x7f0000000180), 0x43) socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000040)={'bond_slave_0\x00'}) write$tun(r4, &(0x7f00000004c0)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001"], 0xfdef) socket$inet_icmp_raw(0x2, 0x3, 0x1) 1.515132961s ago: executing program 4 (id=3794): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="ac0000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c00028005000100000000000800074000000002180006801400040020010000000000000000000000000001"], 0xac}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)={0x98, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x4}]}, 0x98}}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42, 0x0) close(r2) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000002780)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)={0x30, 0x40, 0x1, 0x7fffc, 0x4, {0x1}, [@nested={0x4, 0x48}, @nested={0xc, 0x1, 0x0, 0x1, [@nested={0x8, 0x10, 0x0, 0x1, [@nested={0x4, 0x10}]}]}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x30}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080), 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x7, 0x4, 0x18, 0x28e, 0x14}, 0x50) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @broadcast}) write$cgroup_devices(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="1b23000d"], 0xffdd) 1.044593329s ago: executing program 6 (id=3795): r0 = socket$l2tp6(0xa, 0x2, 0x73) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001d40)=@base={0x12, 0x4, 0x4, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r2}, &(0x7f0000000040), &(0x7f0000000140)=r1}, 0x20) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x0, 0xf}, {0x0, 0x0, 0x0, 0x81}]}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000fcffffff00000000000000008500000036000000180100006420002500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000001800000850000000600000095"], &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f90786401010000000000248065"], 0x0) r4 = socket(0x400000000010, 0x3, 0x0) write(r4, &(0x7f0000000040)="3a03000019002551075c0165ff0ffc02802000030004000500e1000c0400070080000300", 0x33a) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x5, 0xb90, 0x0, &(0x7f0000000140)="259a00f271a76d1708fff74588a8", 0x0, 0xd11, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r2}, &(0x7f0000000580)=0x2, &(0x7f00000005c0)=r1}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r2, &(0x7f0000000040)}, 0x20) sendmsg$inet6(r0, &(0x7f0000000040)={&(0x7f0000000000)={0xa, 0x0, 0x2, @empty}, 0x6a, 0x0, 0x0, &(0x7f0000002200)=[@rthdr_2292={{0x28, 0x29, 0x39, {0x2, 0x2, 0x2, 0x1, 0x0, [@mcast1]}}}, @rthdrdstopts={{0x18}}], 0x40}, 0x0) 1.043047236s ago: executing program 0 (id=3796): r0 = socket$inet(0x2, 0x80001, 0x84) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000012c0)=@broute={'broute\x00', 0x20, 0x4, 0x12e, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000004c0], 0x0, 0x0, &(0x7f00000004c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{0x3, 0x48, 0x9100, 'veth0_macvtap\x00', 'bond0\x00', 'pimreg\x00', 'gre0\x00', @broadcast, [0x0, 0xff, 0x0, 0xff, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, [0x0, 0xff, 0x0, 0x0, 0xff], 0x6e, 0x6e, 0x9e, [], [], @common=@STANDARD={'\x00', 0x8, {0xfffffffffffffffc}}}]}, {0x0, '\x00', 0x2, 0xffffffffffffffff}, {0x0, '\x00', 0x3, 0xfffffffffffffffc}]}, 0x1a6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x2, &(0x7f0000000200)=ANY=[@ANYBLOB="85000000b800000095"], &(0x7f00000008c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x90) 862.892743ms ago: executing program 0 (id=3797): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(anubis)\x00'}, 0x58) setsockopt$ALG_SET_AEAD_AUTHSIZE(r1, 0x117, 0x5, 0x0, 0x8) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_STATUS(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r5, 0x1, 0x70bd2a, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x44000}, 0x810) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_WASH={0x8}]}}]}, 0x3c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910000000000000cb041818000100009500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0xe4, '\x00', 0x0, @fallback=0x2}, 0x94) 782.252738ms ago: executing program 5 (id=3798): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-aes-aesni\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x148, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffe, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}, {0x16}}, [@qdisc_kind_options=@q_red={{0x8}, {0x11c, 0x2, [@TCA_RED_PARMS={0x14, 0x1, {0x3f26, 0x7, 0x81, 0x5, 0xb, 0x14, 0xd}}, @TCA_RED_STAB={0x104, 0x2, "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"}]}}]}, 0x148}}, 0x0) (async) accept4(r0, 0x0, 0x0, 0x0) (async) ioctl$EXT4_IOC_SETFSUUID(r0, 0x4008662c, &(0x7f0000000280)={0x0, 0x0, "6a52da911373200a5831cb8de5841ded"}) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) socketpair$unix(0x1, 0x1, 0x0, 0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r4, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x4}) r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r6) getsockopt$sock_timeval(r3, 0x1, 0x43, &(0x7f0000000180), &(0x7f0000000240)=0x10) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r8], 0x1c}}, 0x4008054) (async) r9 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NET_DM_CMD_STOP(r6, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r9, 0x800, 0x70bd28, 0x25dfdbfe, {}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x24004050}, 0x40400c4) (async) r10 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r10, &(0x7f00000001c0), 0x10) (async) close(0x3) ioctl$sock_netdev_private(r3, 0x8914, &(0x7f0000000000)) 336.562852ms ago: executing program 3 (id=3799): r0 = socket(0x1e, 0x4, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c0000001700090025bd7000fddbdf25060000000800010003"], 0x1c}, 0x1, 0x0, 0x0, 0x4008083}, 0x4000080) recvmmsg(r1, &(0x7f0000000640)=[{{&(0x7f0000000140)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, &(0x7f0000000300)=[{&(0x7f00000001c0)=""/126, 0x7e}, {&(0x7f0000000240)=""/150, 0x96}], 0x2}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000400)=""/130, 0x82}, {&(0x7f00000004c0)=""/237, 0xed}], 0x2, &(0x7f0000000600)=""/20, 0x14}, 0x100}], 0x2, 0x40, &(0x7f00000006c0)={0x0, 0x989680}) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0x5cfbfd5de8ec89eb, &(0x7f0000000100)=0x6, 0x4) recvmmsg(r2, &(0x7f0000009e00)=[{{0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f00000007c0)=""/51, 0x33}], 0x1}, 0x8}], 0x1, 0x20, 0x0) sendmsg$tipc(r0, &(0x7f0000000100)={&(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x3, {0x1, 0x1, 0x2}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x8008001}, 0x4800) 328.333247ms ago: executing program 6 (id=3800): syz_emit_ethernet(0x75, &(0x7f00000004c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a37f2", 0x3f, 0x2c, 0x0, @remote, @local, {[], {{0x3a00, 0x5, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}, {"899d69b656f69e286684e9ddfe852fdcd13aa8e9d402bc12ad199e2813aa7f26702e188b648bcbc0b8d67e"}}}}}}}, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x6, &(0x7f0000000000)=0x101, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000200)}, 0x20) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000280)={0x2, 0x4, 0x8, 0x1, 0x80, r2, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2, 0x5}, 0x50) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='cpuacct.stat\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0xd, 0x13, &(0x7f0000000300)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x11, 0xa8}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @map_idx={0x18, 0x3, 0x5, 0x0, 0xf}, @alu={0x4, 0x1, 0x3, 0x0, 0x3, 0xfffffffffffffff8, 0x8}, @map_val={0x18, 0x8, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x6}, @initr0={0x18, 0x0, 0x0, 0x0, 0x200}], {0x95, 0x0, 0xc00}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xbc, &(0x7f000000cf3d)=""/188, 0x41000, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, r4}, 0x94) getsockopt$inet6_opts(r1, 0x29, 0x37, 0x0, &(0x7f0000000040)) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000000080)={0x0, 0x3c, "577752cfd3e03afc668b8589381b1372cfdaec9f1d76870d92d4db0787580fcfb004c49e174a2979c7943a002da8ebce6d812e9a33de5b43af84ff3a"}, &(0x7f0000000100)=0x44) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000140)={r5, 0xc, 0x6, 0xfffffffb}, &(0x7f0000000180)=0x10) shutdown(r0, 0x20) 298.66304ms ago: executing program 0 (id=3801): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) openat$cgroup_int(r0, &(0x7f0000000100)='cgroup.max.descendants\x00', 0x2, 0x0) openat$cgroup_procs(r0, &(0x7f0000000000)='tasks\x00', 0x2, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r2 = openat$cgroup_devices(r1, &(0x7f00000002c0)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB='b ', @ANYRESDEC], 0x8) 249.442906ms ago: executing program 5 (id=3802): ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) r1 = socket(0x10, 0x2, 0x0) write(r1, &(0x7f0000000000)="240000001e005f80004000000000000002000000000000000000080008000100000000ff", 0x24) bind$rxrpc(r1, &(0x7f0000000100)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, 0x7fffffff}}, 0x24) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000006800010000000000fddbdf25020000000000000006000700040000000c000880050004000100000008000600f200000008000500", @ANYRESDEC=r0], 0x3c}, 0x1, 0x0, 0x0, 0x4000407}, 0x0) 247.856243ms ago: executing program 4 (id=3803): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000040000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000530000008500000005000000bca90000000000003509000000d44a6be5000d0000000000b702000000000000739af0ff00000000c509040004100000c3aaf0fff1000000bf8600000000000007080000f8ffffffbfa400000000000007060000f0ffffffb70200000800000018220000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9800000000000056080000000000008500000007000000b70000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000680)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x800001, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x384e}, @TCA_FQ_CE_THRESHOLD={0x8, 0xc, 0x3}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r8, 0x0, 0x0, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r7, 0x1, 0xd8, 0x6, @remote}, 0x14) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xd, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r9], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r10, 0x0, 0x0, 0x0, 0x0}, 0x94) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r11, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x801, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, [@IFLA_GROUP={0x8}, @IFLA_AF_SPEC={0x18, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x2, 0x0, 0x1, {0x4}}, @AF_INET6={0xc, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x3}]}]}]}, 0x40}}, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) socket(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010080030900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a310000000094000000060a010400000000000000000100000008000b40000000006c000480340001800b000100657874686472000024000280080001400000000c08000340000000b108000440000000220500020007000000340001800c0001"], 0x108}}, 0x0) r13 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000380)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r13, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r14, @ANYBLOB="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"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4) 80.08523ms ago: executing program 5 (id=3804): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x644800, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000020000000000000002000084ffffffff000000000300000000000000000000000200000000000000000000000000000a030000000000000000000002"], 0x0, 0x56}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x1a, 0x4, 0x0, 0x1, 0x8000, 0x1, 0xffffffff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, @value=r1}, 0x50) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000040)=0xe) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f00000002c0)='freezer.self_freezing\x00', 0x0, 0x0) preadv(r3, &(0x7f00000000c0)=[{&(0x7f0000000300)=""/144, 0x90}], 0x1, 0x0, 0x0) r4 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x74, &(0x7f0000000500)={r5, 0x20, 0x30, 0x1, 0x4}, &(0x7f00000005c0)=0x18) setsockopt$inet_sctp_SCTP_AUTH_KEY(r3, 0x84, 0x17, &(0x7f00000003c0)={r5, 0x9, 0x5c, "028c57f794e604f09dd46ab700c17b90924d7fe28948d83f6d1ad73140dfdc9d98d80aefd96fca673e8d9de00be634fa0bb412b37ad6f0b6ecb61d6ed784bc0e0ffa5f4a5d39e366a17fd36baade09e7eec6a4d4e2222a642535b35f"}, 0x64) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000280)={r3, &(0x7f0000000080)="f858ded779273cef1bac8afd0b3f0c7376a84ffa049d573aa92a8dd55dff6a759c202bba4372a999f429345f20568905053cfc13e4fa7b8a02d967ca00e0c307920aa332377c032015924a34434756f58c8ed1b260c62df91ec4e387bef7af4b9d7d6968079d717e2b2b7cd498964cf9787f00de3a768437ec6adc339662ae156cf6302040a817ebd66a5b645ef285d38c26e63bb516e5b1ca3e8371951fb029f7054165f2246b33fe6d9025f216ffe3776e89a6154e90bdd5d5c3432b01b176c6ad33f046218ac05c1a4cdaba878229f7dd81212695efca02d862f1652ca7d6e6d7b0079b3b8cad93d874", &(0x7f0000000180)=""/226, 0x4}, 0x20) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xe, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r6}, {}, {0x85, 0x0, 0x0, 0x8c}}]}, &(0x7f0000001840)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 63.88305ms ago: executing program 0 (id=3805): socket$nl_netfilter(0x10, 0x3, 0xc) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@RTM_DELMDB={0x38, 0x55, 0x1, 0x0, 0x1, {0x7, r3}, [@MDBA_SET_ENTRY={0x20, 0x1, {r3, 0x0, 0x0, 0x0, {@ip4=@empty, 0x800}}}]}, 0x38}}, 0x0) sendmsg$IPCTNL_MSG_EXP_DELETE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x24, 0x2, 0x2, 0x201, 0x0, 0x0, {0x1, 0x0, 0x5}, [@CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x84}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0xffffff9f}]}, 0x24}, 0x1, 0x0, 0x0, 0x44}, 0x4) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f0000000200)={0x158, 0x0, 0x2, 0x301, 0x0, 0x0, {0xa, 0x0, 0x7}, [@CTA_EXPECT_MASK={0x70, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1}, {0x14, 0x4, @loopback}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x14, 0x4, @remote}}}]}, @CTA_EXPECT_HELP_NAME={0xa, 0x6, 'H.245\x00'}, @CTA_EXPECT_NAT={0xc, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}]}, @CTA_EXPECT_HELP_NAME={0xf, 0x6, 'sane-20000\x00'}, @CTA_EXPECT_FN={0x8, 0xb, 'sip\x00'}, @CTA_EXPECT_NAT={0x78, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x4}, @CTA_EXPECT_NAT_TUPLE={0x68, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x82}}]}, @CTA_EXPECT_NAT_DIR={0x8}]}, @CTA_EXPECT_HELP_NAME={0xf, 0x6, 'netbios-ns\x00'}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x1}, @CTA_EXPECT_HELP_NAME={0x9, 0x6, 'snmp\x00'}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x1}]}, 0x158}, 0x1, 0x0, 0x0, 0x4000}, 0x4040004) 1.369056ms ago: executing program 6 (id=3806): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newqdisc={0x6e, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r2, {0x10}, {0x2, 0x8}, {0x0, 0x10}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x6}]}, 0x2c}}, 0x20008010) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000180)={'syztnl1\x00', &(0x7f0000000100)={'syztnl1\x00', r2, 0x2f, 0x1c, 0x0, 0x3, 0x60, @private2, @mcast1, 0x8, 0x80, 0xffffffff, 0x8001}}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0xd, 0xfff2}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_QUANTUM={0x8, 0x3, 0xcf0}]}}]}, 0x38}}, 0x0) 0s ago: executing program 3 (id=3807): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007111b100000000008510000002000000850000000500000095003300000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) kernel console output (not intermixed with test programs): T14311] vcan0 (unregistering): left allmulticast mode [ 316.837010][T14361] sctp: [Deprecated]: syz.4.2024 (pid 14361) Use of struct sctp_assoc_value in delayed_ack socket option. [ 316.837010][T14361] Use struct sctp_sack_info instead [ 317.121983][T14376] __nla_validate_parse: 13 callbacks suppressed [ 317.122007][T14376] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2028'. [ 317.213270][T14375] veth0: entered promiscuous mode [ 317.253872][T14375] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2027'. [ 317.274244][T14387] syzkaller0: entered promiscuous mode [ 317.296383][T14387] syzkaller0: entered allmulticast mode [ 317.318526][T14373] veth0: left promiscuous mode [ 317.642164][T14398] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2034'. [ 317.817740][T14410] netlink: 232 bytes leftover after parsing attributes in process `syz.3.2038'. [ 317.832641][T14411] xt_ecn: cannot match TCP bits for non-tcp packets [ 317.842100][T14410] netlink: 232 bytes leftover after parsing attributes in process `syz.3.2038'. [ 318.170464][T14433] netlink: 'syz.2.2040': attribute type 5 has an invalid length. [ 318.494538][T14445] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2048'. [ 318.597195][T14445] bond9: entered promiscuous mode [ 318.617820][T14445] bond9: entered allmulticast mode [ 318.676064][T14460] netlink: 277 bytes leftover after parsing attributes in process `syz.4.2050'. [ 319.024327][T14478] bond0: entered promiscuous mode [ 319.082037][T14478] batadv0: entered promiscuous mode [ 319.127399][T14478] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 319.154635][T14478] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 319.167864][T14478] bond0: left promiscuous mode [ 319.184992][T14478] batadv0: left promiscuous mode [ 319.227105][T14491] netlink: 'syz.1.2058': attribute type 1 has an invalid length. [ 319.292455][T14491] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2058'. [ 319.525759][T14501] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2064'. [ 319.541886][T14500] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 319.566293][T14500] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 319.581815][T14501] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2064'. [ 319.640792][T14501] netlink: 'syz.2.2064': attribute type 14 has an invalid length. [ 319.649929][T14501] netlink: 'syz.2.2064': attribute type 13 has an invalid length. [ 319.981290][T14507] syzkaller0: entered promiscuous mode [ 319.997684][T14507] syzkaller0: entered allmulticast mode [ 320.027768][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 320.041141][ T1318] aoe: packet could not be sent on ipvlan1. consider increasing tx_queue_len [ 320.314221][T14529] tunl0: Caught tx_queue_len zero misconfig [ 320.355143][T14530] syzkaller0: entered promiscuous mode [ 320.372160][T14530] syzkaller0: entered allmulticast mode [ 321.335512][T14553] syzkaller0: entered promiscuous mode [ 321.341756][T14553] syzkaller0: entered allmulticast mode [ 324.299892][T14597] netlink: 'syz.0.2087': attribute type 1 has an invalid length. [ 324.369309][T14606] __nla_validate_parse: 4 callbacks suppressed [ 324.369334][T14606] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2090'. [ 324.394897][T14608] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2091'. [ 324.419370][T14610] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2087'. [ 324.441779][T14612] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2091'. [ 324.464274][T14610] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2087'. [ 324.534447][T14597] bond10: entered promiscuous mode [ 324.542327][T14597] 8021q: adding VLAN 0 to HW filter on device bond10 [ 324.557190][T14611] ip_vti0: entered promiscuous mode [ 324.764908][T14627] netlink: 9 bytes leftover after parsing attributes in process `syz.1.2095'. [ 324.802058][T14627] 0: renamed from hsr0 [ 324.836255][T14627] 0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 324.863007][T14627] 0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 324.878038][T14627] 0: entered allmulticast mode [ 324.883336][T14627] hsr_slave_0: entered allmulticast mode [ 324.891045][T14627] hsr_slave_1: entered allmulticast mode [ 324.900139][T14627] A link change request failed with some changes committed already. Interface c0 may have been left with an inconsistent configuration, please check. [ 324.942055][T14632] syzkaller0: entered promiscuous mode [ 324.947761][T14632] syzkaller0: entered allmulticast mode [ 324.964648][T14632] netlink: 'syz.0.2096': attribute type 3 has an invalid length. [ 325.216785][T14648] netlink: zone id is out of range [ 325.227750][T14648] netlink: zone id is out of range [ 325.245158][T14648] netlink: zone id is out of range [ 325.264263][T14648] netlink: zone id is out of range [ 325.277924][T14648] netlink: zone id is out of range [ 325.298789][T14650] netlink: 'syz.0.2100': attribute type 2 has an invalid length. [ 325.327792][T14648] netlink: zone id is out of range [ 325.339538][T14648] netlink: zone id is out of range [ 325.378226][T14648] netlink: zone id is out of range [ 325.418812][T14648] netlink: zone id is out of range [ 325.438708][T14648] netlink: zone id is out of range [ 325.693591][T14669] netlink: 1204 bytes leftover after parsing attributes in process `syz.3.2105'. [ 325.764361][T14670] netlink: 148 bytes leftover after parsing attributes in process `syz.3.2105'. [ 325.848127][T14672] netlink: 'syz.0.2106': attribute type 1 has an invalid length. [ 326.104811][T14678] bond11: (slave geneve4): making interface the new active one [ 326.136914][T14678] bond11: (slave geneve4): Enslaving as an active interface with an up link [ 326.149647][ T13] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 20004 - 0 [ 326.174056][T14691] netlink: 80 bytes leftover after parsing attributes in process `syz.2.2109'. [ 326.198272][ T13] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 20004 - 0 [ 326.225651][ T13] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 20004 - 0 [ 326.264754][ T13] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 20004 - 0 [ 327.089848][T14736] netlink: 'syz.0.2122': attribute type 1 has an invalid length. [ 327.401483][T14758] netlink: 'syz.2.2126': attribute type 1 has an invalid length. [ 327.478055][T14747] veth9: entered allmulticast mode [ 327.553399][T14758] 8021q: adding VLAN 0 to HW filter on device bond8 [ 327.650369][T14770] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2130'. [ 327.737793][T14766] bond8: (slave ip6gretap2): making interface the new active one [ 327.779538][T14766] bond8: (slave ip6gretap2): Enslaving as an active interface with an up link [ 327.817034][T14772] tipc: MTU too low for tipc bearer [ 327.912066][T14785] netlink: 'syz.1.2132': attribute type 1 has an invalid length. [ 328.067085][T14791] netem: change failed [ 328.199565][T14793] netlink: 'syz.3.2136': attribute type 10 has an invalid length. [ 328.222477][T14793] syz_tun: entered promiscuous mode [ 328.244242][T14793] syz_tun: entered allmulticast mode [ 328.818107][T14826] netlink: 'syz.4.2145': attribute type 21 has an invalid length. [ 328.836076][T14826] netlink: 'syz.4.2145': attribute type 6 has an invalid length. [ 329.376624][T14853] x_tables: duplicate underflow at hook 2 [ 329.473277][T14861] __nla_validate_parse: 2 callbacks suppressed [ 329.473326][T14861] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2155'. [ 329.529149][T14861] netlink: 176 bytes leftover after parsing attributes in process `syz.2.2155'. [ 329.562733][T14861] netlink: 'syz.2.2155': attribute type 5 has an invalid length. [ 329.837873][T14878] netlink: 'syz.1.2158': attribute type 1 has an invalid length. [ 329.906756][T14881] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2158'. [ 329.973015][T14878] bond13: entered promiscuous mode [ 329.983974][T14881] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2158'. [ 330.001684][T14878] 8021q: adding VLAN 0 to HW filter on device bond13 [ 330.039936][T14878] bond13: (slave bridge7): making interface the new active one [ 330.048202][T14878] bridge7: entered promiscuous mode [ 330.058611][T14878] bond13: (slave bridge7): Enslaving as an active interface with an up link [ 330.965299][T14920] syzkaller0: entered promiscuous mode [ 330.978625][T14920] syzkaller0: entered allmulticast mode [ 331.631701][T14948] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2174'. [ 331.692916][T14948] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2174'. [ 331.937158][T14961] netlink: 'syz.4.2176': attribute type 23 has an invalid length. [ 332.263638][T14976] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2181'. [ 332.476830][T14983] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2183'. [ 332.599239][T14991] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2183'. [ 332.638440][T14993] xt_ecn: cannot match TCP bits for non-tcp packets [ 332.710483][T14993] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2185'. [ 332.732503][T14987] net_ratelimit: 4 callbacks suppressed [ 332.732553][T14987] openvswitch: netlink: Unexpected mask (mask=200240, allowed=10048) [ 332.998205][T15007] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 333.154945][T15011] netlink: 'syz.2.2189': attribute type 10 has an invalid length. [ 333.178682][T15011] team0: entered allmulticast mode [ 333.192183][T15011] bridge0: port 1(team0) entered blocking state [ 333.208086][T15011] bridge0: port 1(team0) entered disabled state [ 333.235951][T15011] team0: entered promiscuous mode [ 333.877510][T15043] bond10: option fail_over_mac: invalid value (16) [ 333.891903][T15043] bond10 (unregistering): Released all slaves [ 334.655969][T15082] syzkaller0: entered promiscuous mode [ 334.677695][T15082] syzkaller0: entered allmulticast mode [ 334.713613][T15081] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 334.767402][T15082] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 334.944181][T15094] netlink: 'syz.0.2208': attribute type 1 has an invalid length. [ 335.011984][T15093] __nla_validate_parse: 6 callbacks suppressed [ 335.012009][T15093] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2208'. [ 335.129273][T15094] 8021q: adding VLAN 0 to HW filter on device bond13 [ 335.433193][T15122] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2215'. [ 335.665069][T15139] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2221'. [ 335.774601][T15145] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2223'. [ 336.084048][T15157] netlink: 'syz.0.2228': attribute type 2 has an invalid length. [ 336.112506][T15161] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2229'. [ 336.123627][T15157] netlink: 'syz.0.2228': attribute type 2 has an invalid length. [ 336.234970][T15166] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2230'. [ 337.105869][T15197] netlink: 'syz.1.2239': attribute type 14 has an invalid length. [ 337.169732][T15204] netlink: 'syz.3.2241': attribute type 10 has an invalid length. [ 337.207104][T15203] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2241'. [ 337.233866][T15197] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2239'. [ 337.791728][T15226] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2247'. [ 337.873727][T15230] netlink: 'syz.0.2247': attribute type 13 has an invalid length. [ 338.239006][T15247] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2251'. [ 339.293214][T15299] netlink: 'syz.0.2265': attribute type 62 has an invalid length. [ 339.332163][T15301] netlink: 'syz.2.2266': attribute type 1 has an invalid length. [ 339.376354][T15307] IPVS: Unknown mcast interface: vcan0 [ 339.580052][T15312] netlink: 'syz.3.2269': attribute type 5 has an invalid length. [ 339.852908][T15328] netlink: 'syz.2.2274': attribute type 64 has an invalid length. [ 340.088966][T15341] __nla_validate_parse: 13 callbacks suppressed [ 340.088991][T15341] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2278'. [ 340.126880][T15341] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2278'. [ 340.203471][T15347] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2280'. [ 340.235405][T15347] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2280'. [ 340.308143][T15350] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2281'. [ 340.452865][T15363] netlink: 'syz.2.2283': attribute type 9 has an invalid length. [ 340.508248][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 340.630042][T15367] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2286'. [ 341.218900][T15393] tipc: Enabling of bearer rejected, failed to enable media [ 341.337754][T15405] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2297'. [ 341.398259][T15406] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2296'. [ 341.467852][T15411] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2298'. [ 341.484450][T15406] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2296'. [ 341.571887][T15414] rdma_rxe: rxe_newlink: failed to add vxcan1 [ 342.145984][T15446] netlink: 'syz.0.2306': attribute type 8 has an invalid length. [ 342.332284][T15457] syzkaller0: entered promiscuous mode [ 342.358544][T15457] syzkaller0: entered allmulticast mode [ 342.421000][T15460] netlink: 'syz.0.2310': attribute type 12 has an invalid length. [ 342.747559][T15476] : left promiscuous mode [ 342.998955][T15482] netlink: 'syz.3.2316': attribute type 12 has an invalid length. [ 343.019471][T15482] netlink: 'syz.3.2316': attribute type 29 has an invalid length. [ 343.040584][T15482] netlink: 'syz.3.2316': attribute type 1 has an invalid length. [ 343.058819][T15482] netlink: 'syz.3.2316': attribute type 2 has an invalid length. [ 343.592891][T15525] netlink: 'syz.2.2323': attribute type 10 has an invalid length. [ 345.310637][T15605] __nla_validate_parse: 7 callbacks suppressed [ 345.310662][T15605] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2342'. [ 345.429673][T15615] syzkaller0: entered promiscuous mode [ 345.444470][T15615] syzkaller0: entered allmulticast mode [ 345.483593][T15622] netlink: 'syz.2.2346': attribute type 11 has an invalid length. [ 345.503602][T15622] netlink: 'syz.2.2346': attribute type 11 has an invalid length. [ 345.532014][T15622] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2346'. [ 345.557551][T15624] netlink: 'syz.2.2346': attribute type 1 has an invalid length. [ 345.604869][T15615] bond_slave_0: entered allmulticast mode [ 345.655971][T15627] xt_ecn: cannot match TCP bits for non-tcp packets [ 345.679692][T15630] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 345.779191][T15624] 8021q: adding VLAN 0 to HW filter on device bond10 [ 346.125851][T15624] bond10: (slave gretap2): making interface the new active one [ 346.186902][T15624] bond10: (slave gretap2): Enslaving as an active interface with an up link [ 346.647945][T15670] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 346.850709][T15683] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2361'. [ 346.960562][T15683] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 347.154288][T15693] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2363'. [ 347.256707][T15699] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2364'. [ 347.287598][T15698] bond15: option arp_interval: mode dependency failed, not supported in mode balance-tlb(5) [ 347.326235][T15698] bond15 (unregistering): Released all slaves [ 348.063678][T15741] netlink: 207952 bytes leftover after parsing attributes in process `syz.4.2376'. [ 348.105458][T15746] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2377'. [ 348.148161][T15746] netlink: 'syz.1.2377': attribute type 46 has an invalid length. [ 348.367918][T15756] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 351.530809][T15753] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2379'. [ 351.948234][T15803] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2387'. [ 352.029393][T15812] netlink: 'syz.3.2389': attribute type 21 has an invalid length. [ 352.038705][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 352.114281][T15812] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2389'. [ 352.295790][T15810] bond6: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 352.338287][T15810] bond6 (unregistering): Released all slaves [ 352.660963][ T1154] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 352.672914][T15838] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2393'. [ 352.683538][ T5762] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 352.700538][ T5755] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 352.808774][T15849] Cannot find set identified by id 65534 to match [ 353.300575][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 353.872712][T15904] team0: No ports can be present during mode change [ 353.882097][T15908] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2408'. [ 353.893713][T15903] syzkaller1: entered promiscuous mode [ 353.899591][T15903] syzkaller1: entered allmulticast mode [ 353.907730][T15908] openvswitch: netlink: IPv4 tun info is not correct [ 353.938548][T15908] xt_l2tp: invalid flags combination: 8 [ 354.019497][T15915] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2409'. [ 354.203642][T15926] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2412'. [ 354.594986][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 355.205883][T15972] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2423'. [ 355.358377][T15972] netlink: 'syz.4.2423': attribute type 1 has an invalid length. [ 355.390003][T15979] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 355.404276][T15972] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2423'. [ 355.675569][T15993] IPv6: sit3: Disabled Multicast RS [ 355.790570][ T5755] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 355.843461][T16003] netlink: 'syz.4.2429': attribute type 11 has an invalid length. [ 355.853587][T15999] netlink: 81 bytes leftover after parsing attributes in process `syz.3.2430'. [ 355.864562][T10144] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 356.036667][T16012] netlink: 'syz.2.2433': attribute type 1 has an invalid length. [ 356.136096][T16012] bond11: entered promiscuous mode [ 356.142635][T16012] 8021q: adding VLAN 0 to HW filter on device bond11 [ 356.348541][T16012] bond11: (slave bridge7): making interface the new active one [ 356.370764][T16012] bridge7: entered promiscuous mode [ 356.407925][T16012] bond11: (slave bridge7): Enslaving as an active interface with an up link [ 356.456010][T16033] macvlan0: entered promiscuous mode [ 356.630681][T16040] __nla_validate_parse: 1 callbacks suppressed [ 356.630708][T16040] netlink: 212348 bytes leftover after parsing attributes in process `syz.4.2437'. [ 356.688335][T16041] nbd: must specify a size in bytes for the device [ 356.722975][T16040] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2437'. [ 356.766958][T16040] xt_bpf: check failed: parse error [ 356.786775][T16040] netlink: 216 bytes leftover after parsing attributes in process `syz.4.2437'. [ 356.803921][T16040] netlink: 'syz.4.2437': attribute type 2 has an invalid length. [ 356.823510][T16040] netlink: 'syz.4.2437': attribute type 1 has an invalid length. [ 356.978709][T16054] syzkaller0: entered promiscuous mode [ 357.015332][T16054] syzkaller0: entered allmulticast mode [ 357.073274][T16061] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2442'. [ 357.128897][T16067] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2445'. [ 357.156858][ C0] net_ratelimit: 4 callbacks suppressed [ 357.156884][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 357.174747][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 357.185616][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 357.197642][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 357.206034][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 357.214368][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 357.222727][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 357.231060][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 357.239352][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 357.247721][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 357.357816][T16067] xfrm1: entered promiscuous mode [ 357.369269][T16067] xfrm1: entered allmulticast mode [ 358.269443][T16097] netlink: 'syz.0.2451': attribute type 1 has an invalid length. [ 358.347715][T16108] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2454'. [ 358.846269][T16128] netlink: 294 bytes leftover after parsing attributes in process `syz.2.2458'. [ 359.252818][T16139] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2460'. [ 359.474875][T16144] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2462'. [ 361.145429][T16226] siw: device registration error -23 [ 361.171651][T16221] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 361.716945][T16256] hsr0: entered allmulticast mode [ 361.728228][T16258] netlink: 'syz.0.2495': attribute type 1 has an invalid length. [ 361.736925][T16256] hsr_slave_0: entered allmulticast mode [ 361.743353][T16256] hsr_slave_1: entered allmulticast mode [ 361.754965][T16259] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2494'. [ 361.767348][T16255] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2494'. [ 361.778830][T16258] tipc: Enabling of bearer rejected, failed to enable media [ 361.807527][T16255] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2494'. [ 362.026048][T16273] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2498'. [ 362.126012][T16273] team1: entered promiscuous mode [ 362.157142][T16273] team1: entered allmulticast mode [ 362.462501][T16299] bond15: entered promiscuous mode [ 362.476740][T16298] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2503'. [ 362.551223][T16307] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2503'. [ 362.669690][T16317] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2503'. [ 363.037956][T16328] net_ratelimit: 21 callbacks suppressed [ 363.037998][T16328] openvswitch: netlink: Duplicate key (type 2). [ 363.106126][T16328] openvswitch: netlink: Duplicate key (type 2). [ 363.220395][T16342] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2511'. [ 363.260998][T16343] netlink: 'syz.4.2512': attribute type 9 has an invalid length. [ 363.293538][T16342] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2511'. [ 363.541216][ T1154] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 363.593321][T16350] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2513'. [ 363.714708][T16356] netlink: 'syz.1.2515': attribute type 11 has an invalid length. [ 363.816490][T16359] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 364.192092][T16371] syzkaller0: entered promiscuous mode [ 364.200465][T16371] syzkaller0: entered allmulticast mode [ 364.530064][T16388] openvswitch: netlink: IPv4 tun info is not correct [ 364.791326][T16401] : renamed from bond_slave_0 [ 364.900986][ T5762] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 365.297053][T16429] IPv6: Can't replace route, no match found [ 365.321153][ T36] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 365.347301][ T36] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 365.359518][ T29] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 365.463687][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 365.472115][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 365.483570][ T5762] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 365.698853][T16446] netlink: 'syz.3.2538': attribute type 7 has an invalid length. [ 365.725339][T16450] xt_NFQUEUE: number of total queues is 0 [ 365.742946][T16446] netlink: 'syz.3.2538': attribute type 7 has an invalid length. [ 365.771892][T16446] netlink: 'syz.3.2538': attribute type 7 has an invalid length. [ 365.817934][T16446] netlink: 'syz.3.2538': attribute type 7 has an invalid length. [ 365.842713][T16446] netlink: 'syz.3.2538': attribute type 7 has an invalid length. [ 365.871631][T16446] netlink: 'syz.3.2538': attribute type 7 has an invalid length. [ 365.914123][T16446] netlink: 'syz.3.2538': attribute type 7 has an invalid length. [ 365.958040][T16446] netlink: 'syz.3.2538': attribute type 7 has an invalid length. [ 366.005460][T16446] netlink: 'syz.3.2538': attribute type 7 has an invalid length. [ 366.105785][ T5762] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 366.180590][ T29] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 366.266197][ T29] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 366.302818][T16477] xt_bpf: check failed: parse error [ 366.677266][T16485] bond14: (slave bridge8): Enslaving as a backup interface with an up link [ 366.767301][T16489] macvlan2: entered promiscuous mode [ 366.779449][T16489] macvlan2: entered allmulticast mode [ 366.796584][T16489] bond14: entered promiscuous mode [ 366.802914][T16489] bridge8: entered promiscuous mode [ 366.809466][T16489] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 366.818873][T16489] bond14: left promiscuous mode [ 366.824737][T16489] bridge8: left promiscuous mode [ 367.026072][T16505] syzkaller0: entered promiscuous mode [ 367.056276][T16505] syzkaller0: entered allmulticast mode [ 367.251908][T16523] __nla_validate_parse: 71 callbacks suppressed [ 367.251935][T16523] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2554'. [ 368.494288][T16579] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2565'. [ 368.661756][T16474] net_ratelimit: 1 callbacks suppressed [ 368.661783][T16474] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 369.154929][ T5755] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 369.781972][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 371.369190][T16611] validate_nla: 59 callbacks suppressed [ 371.369228][T16611] netlink: 'syz.2.2572': attribute type 2 has an invalid length. [ 371.789353][T16640] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2579'. [ 371.985614][T16656] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2582'. [ 372.034992][T16656] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2582'. [ 372.040138][T16652] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2580'. [ 372.083878][T16656] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2582'. [ 372.093561][T16656] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2582'. [ 372.144743][T16652] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2580'. [ 372.388698][T16668] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2583'. [ 372.431331][T16669] batadv1: entered allmulticast mode [ 372.818875][T16688] netlink: 'syz.0.2589': attribute type 1 has an invalid length. [ 373.050387][T16688] 8021q: adding VLAN 0 to HW filter on device bond16 [ 373.158740][T16688] macvlan3: entered promiscuous mode [ 373.195577][T16688] macvlan3: entered allmulticast mode [ 373.214748][T16688] bond16: entered promiscuous mode [ 373.238003][T16688] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 373.293469][T16688] bond16: left promiscuous mode [ 373.326661][T16705] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2593'. [ 373.348623][T16706] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2593'. [ 373.363160][T16713] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2594'. [ 373.408307][T16688] macvlan3: entered promiscuous mode [ 373.417829][T16714] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2595'. [ 373.430932][T16709] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 373.439537][T16688] macvlan3: entered allmulticast mode [ 373.454964][T16688] bond16: entered promiscuous mode [ 373.485134][T16688] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 373.710028][T16688] bond16: left promiscuous mode [ 373.902643][T16732] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2600'. [ 373.948689][T16732] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2600'. [ 374.176799][T16747] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2602'. [ 374.592959][T16764] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not filter [ 374.685810][T16760] bond17 (unregistering): Released all slaves [ 374.751415][T16770] netlink: 144 bytes leftover after parsing attributes in process `syz.3.2609'. [ 374.961736][T16780] lo speed is unknown, defaulting to 1000 [ 375.051745][T16780] lo speed is unknown, defaulting to 1000 [ 375.083208][T16780] lo speed is unknown, defaulting to 1000 [ 375.114430][T16784] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2612'. [ 375.141413][T16784] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 375.394116][T16798] netlink: 'syz.2.2616': attribute type 1 has an invalid length. [ 375.437725][T16798] netlink: 'syz.2.2616': attribute type 1 has an invalid length. [ 375.766644][T16780] infiniband sz1: set down [ 375.772289][ T7305] lo speed is unknown, defaulting to 1000 [ 375.804918][T16780] infiniband sz1: added lo [ 375.831192][T16780] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 375.834726][T16780] infiniband sz1: Couldn't open port 1 [ 375.893667][T16780] smbdirect: ib_dev[sz1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 375.911335][T16780] smbdirect: ib_dev[sz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 375.928814][T16780] smbdirect: ib_dev[sz1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 376.000975][T16780] RDS/IB: sz1: added [ 376.031468][T16780] smc: adding ib device sz1 with port count 1 [ 376.041196][T16828] tipc: Enabling of bearer rejected, media not registered [ 376.052480][T16780] smc: ib device sz1 port 1 has no pnetid [ 376.079691][ T5762] lo speed is unknown, defaulting to 1000 [ 376.089371][T16780] lo speed is unknown, defaulting to 1000 [ 376.213360][T16836] vlan1: entered promiscuous mode [ 376.228770][T16836] bridge0: entered promiscuous mode [ 376.627210][T16858] netlink: 'syz.2.2630': attribute type 1 has an invalid length. [ 376.685623][T16864] netlink: 'syz.4.2631': attribute type 1 has an invalid length. [ 376.837530][T16780] lo speed is unknown, defaulting to 1000 [ 377.010726][T16780] lo speed is unknown, defaulting to 1000 [ 377.174963][T16780] lo speed is unknown, defaulting to 1000 [ 377.341647][T16780] lo speed is unknown, defaulting to 1000 [ 377.548106][T16872] __nla_validate_parse: 149 callbacks suppressed [ 377.548130][T16872] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2633'. [ 377.642360][T16861] smc: removing ib device sz1 [ 377.854512][T16861] smbdirect: ib_dev[sz1] removed [ 377.977963][T16872] macvtap0: entered promiscuous mode [ 378.003310][T16872] macvtap0: entered allmulticast mode [ 378.147078][T16893] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 378.269524][T16897] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2639'. [ 379.112886][T16928] netlink: 'syz.3.2646': attribute type 1 has an invalid length. [ 379.540451][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 380.055993][T16957] netlink: 'syz.3.2653': attribute type 1 has an invalid length. [ 380.222205][T16957] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 380.377142][T16965] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2654'. [ 380.523231][T16971] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2655'. [ 380.639305][T16977] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 380.686728][T16977] netlink: 256 bytes leftover after parsing attributes in process `syz.2.2655'. [ 380.697866][T16980] netlink: 'syz.3.2659': attribute type 1 has an invalid length. [ 380.730101][T16980] netlink: 'syz.3.2659': attribute type 2 has an invalid length. [ 380.752297][T16987] netlink: 'syz.3.2659': attribute type 1 has an invalid length. [ 380.775860][T16987] netlink: 'syz.3.2659': attribute type 2 has an invalid length. [ 381.025343][T17000] netlink: 84 bytes leftover after parsing attributes in process `syz.4.2663'. [ 381.371640][T17018] netlink: 'syz.0.2667': attribute type 1 has an invalid length. [ 381.467378][ T1318] aoe: packet could not be sent on ipvlan1. consider increasing tx_queue_len [ 381.600074][T17031] netlink: 'syz.0.2670': attribute type 1 has an invalid length. [ 381.688938][T17031] bond17: entered promiscuous mode [ 381.694845][T17031] 8021q: adding VLAN 0 to HW filter on device bond17 [ 381.847638][T17035] bond7 (unregistering): Released all slaves [ 381.909197][T17045] netlink: 11 bytes leftover after parsing attributes in process `syz.0.2673'. [ 381.920840][T17045] netlink: 11 bytes leftover after parsing attributes in process `syz.0.2673'. [ 382.415067][T17073] netlink: 168 bytes leftover after parsing attributes in process `syz.0.2679'. [ 382.539854][T17078] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2680'. [ 382.587080][T17083] netlink: 'syz.4.2683': attribute type 1 has an invalid length. [ 382.595765][T17085] netlink: 'syz.4.2683': attribute type 1 has an invalid length. [ 382.651068][T17083] 8021q: adding VLAN 0 to HW filter on device bond7 [ 382.718654][T17087] bond7: (slave geneve3): making interface the new active one [ 382.776775][T17087] bond7: (slave geneve3): Enslaving as an active interface with an up link [ 382.904632][T17095] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2685'. [ 382.944125][T17095] openvswitch: netlink: Flow key attr not present in new flow. [ 383.218557][T17103] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2687'. [ 383.604312][T17136] netlink: 212328 bytes leftover after parsing attributes in process `syz.2.2693'. [ 383.657356][T17139] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2696'. [ 384.182132][T17166] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2704'. [ 384.279315][T17170] netlink: 'syz.0.2702': attribute type 21 has an invalid length. [ 384.594812][T17185] netlink: 'syz.0.2707': attribute type 4 has an invalid length. [ 384.667327][T17192] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2708'. [ 384.684097][T17192] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2708'. [ 384.695458][T17192] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2708'. [ 384.709302][T17192] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 384.727104][T17192] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2708'. [ 384.938821][T17200] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 384.960177][T17200] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 384.979497][T17200] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 384.994320][T17200] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 385.098237][T17206] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2714'. [ 385.122700][T17202] syzkaller0: entered promiscuous mode [ 385.150489][T17202] syzkaller0: entered allmulticast mode [ 385.242809][T17204] tipc: Enabled bearer , priority 0 [ 385.272979][T17204] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 40 [ 385.307208][T17201] tipc: Resetting bearer [ 385.378521][T17201] tipc: Disabling bearer [ 385.720652][T17228] team0: Device gtp1 is up. Set it down before adding it as a team port [ 385.744283][T17233] veth1_to_team: entered promiscuous mode [ 385.750796][T17233] veth1_to_team: left promiscuous mode [ 385.758449][T17233] veth1_to_team: entered promiscuous mode [ 385.765062][T17233] veth1_to_team: left promiscuous mode [ 385.845871][T17236] netlink: 'syz.4.2722': attribute type 1 has an invalid length. [ 385.962889][T17244] lo: left promiscuous mode [ 385.967763][T17244] tunl0: left promiscuous mode [ 385.973365][T17244] gre0: left promiscuous mode [ 385.980145][T17244] gretap0: left promiscuous mode [ 385.995356][T17244] erspan0: left promiscuous mode [ 386.010658][T17244] ip_vti0: left promiscuous mode [ 386.031517][T17244] syz_tun: left promiscuous mode [ 386.129805][T17244] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 386.145483][T17244] gretap1: left promiscuous mode [ 386.155845][T17244] bond2: left promiscuous mode [ 386.161830][T17244] ip6gre1: left promiscuous mode [ 386.169375][T17244] sit2: left promiscuous mode [ 386.388055][T17265] netlink: 'syz.0.2730': attribute type 1 has an invalid length. [ 386.408035][T17265] netlink: 'syz.0.2730': attribute type 3 has an invalid length. [ 386.655163][T17279] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 387.736014][T17327] netlink: 'syz.4.2749': attribute type 1 has an invalid length. [ 387.768660][T17327] 8021q: adding VLAN 0 to HW filter on device bond8 [ 388.104307][T17338] syzkaller0: entered allmulticast mode [ 388.121678][T17340] IPVS: ip_vs_add_dest(): server weight less than zero [ 388.133640][T17340] __nla_validate_parse: 6 callbacks suppressed [ 388.133657][T17340] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2754'. [ 388.203073][T17340] vet: renamed from veth0_vlan (while UP) [ 388.256988][T17344] netlink: 'syz.4.2755': attribute type 1 has an invalid length. [ 388.265917][T17344] netlink: 'syz.4.2755': attribute type 1 has an invalid length. [ 388.424300][T17348] bond6: option arp_all_targets: invalid value (18446744073709373998) [ 388.435709][T17348] bond6 (unregistering): Released all slaves [ 388.728460][T17360] bond0: Caught tx_queue_len zero misconfig [ 388.909077][T17375] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2762'. [ 388.988650][T17380] netlink: 210576 bytes leftover after parsing attributes in process `syz.0.2765'. [ 389.186957][T17385] netlink: 'syz.4.2767': attribute type 1 has an invalid length. [ 389.197329][T17385] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2767'. [ 389.225623][T17385] netlink: 'syz.4.2767': attribute type 1 has an invalid length. [ 389.226186][ T12] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 389.234126][T17385] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2767'. [ 389.269497][ T12] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 389.283529][ T12] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 389.294957][ T12] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 389.382886][T17395] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2769'. [ 389.404606][T17396] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2769'. [ 389.455719][T17399] bond9: entered promiscuous mode [ 389.461103][T17399] bond9: entered allmulticast mode [ 389.565008][T17406] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 389.758221][T17416] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2775'. [ 389.867894][T17421] tc_dump_action: action bad kind [ 389.873836][T17421] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2776'. [ 389.911877][T17423] netlink: 'syz.3.2777': attribute type 2 has an invalid length. [ 389.919667][T17423] netlink: 100 bytes leftover after parsing attributes in process `syz.3.2777'. [ 390.059244][T17430] openvswitch: netlink: IP tunnel dst address not specified [ 390.345434][T17446] openvswitch: netlink: Unexpected mask (mask=c0, allowed=10048) [ 390.398324][T17443] vlan3: entered allmulticast mode [ 390.403852][T17443] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 391.109801][T17486] netlink: 'syz.4.2795': attribute type 10 has an invalid length. [ 391.327599][T17494] netlink: 'syz.4.2799': attribute type 5 has an invalid length. [ 391.337506][T17494] netlink: 'syz.4.2799': attribute type 1 has an invalid length. [ 391.523359][T17502] openvswitch: netlink: IP tunnel dst address not specified [ 391.636571][ T4949] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 391.656199][ T4949] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 391.672067][ T4949] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 391.683948][ T4949] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 391.693933][ T4949] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 391.775022][ T5637] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 391.784034][ T5637] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 391.807372][ T5637] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 391.822290][ T5637] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 391.835248][ T5637] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 392.254939][T17529] netlink: 'syz.0.2804': attribute type 1 has an invalid length. [ 392.409125][T17528] tipc: Enabled bearer , priority 0 [ 392.475559][T17533] syzkaller0: entered promiscuous mode [ 392.483903][T17533] syzkaller0: entered allmulticast mode [ 392.542719][T17527] tipc: Resetting bearer [ 393.945893][ T4949] Bluetooth: hci5: command tx timeout [ 394.781211][T17527] tipc: Disabling bearer [ 394.795342][ T5755] tipc: Node number set to 2886997039 [ 394.853862][T17505] vxcan1 speed is unknown, defaulting to 1000 [ 395.026585][T17556] __nla_validate_parse: 8 callbacks suppressed [ 395.026612][T17556] netlink: 232 bytes leftover after parsing attributes in process `syz.4.2811'. [ 395.132980][T17561] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2812'. [ 395.149674][T17562] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2812'. [ 395.503481][T17505] xfrm0 speed is unknown, defaulting to 1000 [ 395.717289][T17582] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2818'. [ 395.754396][T17584] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2818'. [ 396.021879][ T4949] Bluetooth: hci5: command tx timeout [ 396.469298][ T4949] block nbd1: Receive control failed (result -32) [ 396.506584][T17612] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2823'. [ 396.547854][T17612] netlink: 180 bytes leftover after parsing attributes in process `syz.3.2823'. [ 396.769215][T17624] IPVS: length: 207 != 8 [ 397.006185][T17632] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2826'. [ 397.039926][T17505] bridge0: port 1(bridge_slave_0) entered blocking state [ 397.065113][T17505] bridge0: port 1(bridge_slave_0) entered disabled state [ 397.086763][T17505] bridge_slave_0: entered allmulticast mode [ 397.108211][T17505] bridge_slave_0: entered promiscuous mode [ 397.143326][T17505] bridge0: port 2(bridge_slave_1) entered blocking state [ 397.168761][T17505] bridge0: port 2(bridge_slave_1) entered disabled state [ 397.194270][T17505] bridge_slave_1: entered allmulticast mode [ 397.212699][T17505] bridge_slave_1: entered promiscuous mode [ 397.375009][T17505] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 397.427286][T17505] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 397.460519][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 397.533867][T17505] team0: Port device team_slave_0 added [ 397.543780][T17505] team0: Port device team_slave_1 added [ 397.606725][T17505] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 397.619610][T17505] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 397.650897][T17505] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 397.705556][T17505] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 397.726851][T17505] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 397.762150][T17505] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 397.784619][T17659] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 397.841853][ T7305] IPVS: starting estimator thread 0... [ 397.846609][T17505] hsr_slave_0: entered promiscuous mode [ 397.856025][T17505] hsr_slave_1: entered promiscuous mode [ 397.865989][T17505] debugfs: 'hsr0' already exists in 'hsr' [ 397.872370][T17505] Cannot create hsr debugfs directory [ 397.960588][T17661] IPVS: using max 32 ests per chain, 76800 per kthread [ 398.100339][ T4949] Bluetooth: hci5: command tx timeout [ 398.234797][T17672] netlink: 256 bytes leftover after parsing attributes in process `syz.4.2836'. [ 398.805245][T17505] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 398.837524][T17505] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 398.862740][T17505] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 398.906909][T17505] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 398.933654][T17505] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 398.982039][T17505] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 398.999019][T17505] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 399.036289][T17505] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 399.202289][T17712] syzkaller0: entered promiscuous mode [ 399.230092][T17712] syzkaller0: entered allmulticast mode [ 399.259100][T17715] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2845'. [ 399.336628][ T5637] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 399.354774][ T5637] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 399.365567][ T5637] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 399.380009][ T5637] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 399.394902][ T5637] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 399.438501][T17725] bridge0: port 2(bridge_slave_1) entered blocking state [ 399.445827][T17725] bridge0: port 2(bridge_slave_1) entered listening state [ 399.453457][T17725] bridge0: port 1(bridge_slave_0) entered blocking state [ 399.460725][T17725] bridge0: port 1(bridge_slave_0) entered listening state [ 399.536903][T17725] bridge0: entered promiscuous mode [ 399.560738][T17725] bridge0: entered allmulticast mode [ 399.683078][T17716] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 399.754729][T17505] 8021q: adding VLAN 0 to HW filter on device bond0 [ 399.819661][T17505] 8021q: adding VLAN 0 to HW filter on device team0 [ 400.181517][ T5637] Bluetooth: hci5: command tx timeout [ 400.248794][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 400.256113][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 400.332504][T10140] bridge0: port 2(bridge_slave_1) entered blocking state [ 400.339846][T10140] bridge0: port 2(bridge_slave_1) entered forwarding state [ 400.781841][T17717] vxcan1 speed is unknown, defaulting to 1000 [ 400.903014][T17763] __nla_validate_parse: 3 callbacks suppressed [ 400.903038][T17763] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2854'. [ 400.964827][T17769] IPVS: Unknown mcast interface: vcan0 [ 401.461502][ T5637] Bluetooth: hci6: command tx timeout [ 402.932955][T17717] xfrm0 speed is unknown, defaulting to 1000 [ 403.013552][T17796] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 403.542116][ T5637] Bluetooth: hci6: command tx timeout [ 403.764510][T17505] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 404.369625][T17858] bond6: Removing last ns target with arp_interval on [ 404.849685][T17876] netlink: 144 bytes leftover after parsing attributes in process `syz.4.2868'. [ 405.287849][T17505] veth0_vlan: entered promiscuous mode [ 405.323126][T17505] veth1_vlan: entered promiscuous mode [ 405.516814][T17505] veth0_macvtap: entered promiscuous mode [ 405.550782][T17906] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2873'. [ 405.564020][T17906] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2873'. [ 405.622041][ T5637] Bluetooth: hci6: command tx timeout [ 405.666358][T17505] veth1_macvtap: entered promiscuous mode [ 405.764118][T17717] bridge0: port 1(bridge_slave_0) entered blocking state [ 405.771813][T17717] bridge0: port 1(bridge_slave_0) entered disabled state [ 405.779246][T17717] bridge_slave_0: entered allmulticast mode [ 405.790664][T17717] bridge_slave_0: entered promiscuous mode [ 405.808118][T17717] bridge0: port 2(bridge_slave_1) entered blocking state [ 405.820138][T17717] bridge0: port 2(bridge_slave_1) entered disabled state [ 405.828695][T17717] bridge_slave_1: entered allmulticast mode [ 405.839176][T17717] bridge_slave_1: entered promiscuous mode [ 405.868269][T17505] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 405.942994][T17505] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 405.959993][T17717] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 406.019489][T17920] netlink: 207952 bytes leftover after parsing attributes in process `syz.4.2875'. [ 406.058379][T17717] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 406.135148][ T1168] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 406.139331][T17923] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2875'. [ 406.179545][ T1168] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 406.241020][T17917] netlink: 207952 bytes leftover after parsing attributes in process `syz.4.2875'. [ 406.305865][T17717] team0: Port device team_slave_0 added [ 406.321619][ T1168] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 406.365372][T17717] team0: Port device team_slave_1 added [ 406.461364][ T1168] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 406.577840][T17717] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 406.602045][T17717] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 406.676031][T17717] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 406.849912][T17717] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 406.882532][T17717] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 406.951085][T17717] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 407.039890][T17958] netlink: 'syz.3.2880': attribute type 13 has an invalid length. [ 407.179977][T17958] gretap0: refused to change device tx_queue_len [ 407.203889][T17958] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 407.376705][T17717] hsr_slave_0: entered promiscuous mode [ 407.403588][T17717] hsr_slave_1: entered promiscuous mode [ 407.419843][T17717] debugfs: 'hsr0' already exists in 'hsr' [ 407.432629][T17717] Cannot create hsr debugfs directory [ 407.662435][T17975] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.2885'. [ 407.679954][T17975] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2885'. [ 407.699468][T10144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 407.708364][ T5637] Bluetooth: hci6: command tx timeout [ 407.730016][T10144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 407.754048][T17969] syzkaller0: entered promiscuous mode [ 407.768048][T17969] syzkaller0: entered allmulticast mode [ 407.783954][T17972] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.2883'. [ 407.945951][T10144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 407.972067][T10144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 408.267090][T17987] xt_l2tp: v2 sid > 0xffff: 1114112 [ 408.409028][T17991] bond10: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 408.429267][T17991] bond10: (slave lo): Enslaving as an active interface with an up link [ 408.467246][T17991] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 408.485834][T17996] netlink: 'syz.0.2892': attribute type 1 has an invalid length. [ 408.503415][T17998] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2891'. [ 408.532861][T17999] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2794'. [ 408.602411][T18003] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2892'. [ 408.662685][T17996] 8021q: adding VLAN 0 to HW filter on device bond18 [ 408.694869][T18000] bond18: (slave gretap2): making interface the new active one [ 408.734886][T18000] bond18: (slave gretap2): Enslaving as an active interface with an up link [ 409.098128][T17717] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 409.122573][T17717] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 409.145324][T17717] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 409.171878][T17717] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 409.207977][T17717] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 409.238682][T17717] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 409.264266][T17717] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 409.278560][T17717] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 409.315751][T18035] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2902'. [ 409.357045][T18035] ipvlan2: entered allmulticast mode [ 409.362672][T18035] syz_tun: entered allmulticast mode [ 409.546818][T18047] lo speed is unknown, defaulting to 1000 [ 409.562208][T18047] lo speed is unknown, defaulting to 1000 [ 409.647283][T18047] lo speed is unknown, defaulting to 1000 [ 409.670237][T17717] 8021q: adding VLAN 0 to HW filter on device bond0 [ 409.679791][T18047] smbdirect: ib_dev[sy2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 409.722462][T18047] smbdirect: ib_dev[sy2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 409.752246][T18047] smbdirect: ib_dev[sy2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 409.796451][T17717] 8021q: adding VLAN 0 to HW filter on device team0 [ 409.808945][T18047] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 409.830315][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 409.837620][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 409.864225][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 409.871600][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 409.934460][T18047] infiniband sy2: RDMA CMA: cma_listen_on_dev, error -98 [ 410.098885][T18047] lo speed is unknown, defaulting to 1000 [ 410.149702][T18047] lo speed is unknown, defaulting to 1000 [ 410.182397][T18047] lo speed is unknown, defaulting to 1000 [ 410.267913][T18047] lo speed is unknown, defaulting to 1000 [ 410.319812][T18047] lo speed is unknown, defaulting to 1000 [ 410.345629][T18047] lo speed is unknown, defaulting to 1000 [ 410.414884][T18047] lo speed is unknown, defaulting to 1000 [ 410.642812][T18090] rdma_op ffff8880568231f0 conn xmit_rdma 0000000000000000 [ 411.388630][ T29] IPVS: starting estimator thread 0... [ 411.400159][T18129] __nla_validate_parse: 3 callbacks suppressed [ 411.420011][T18127] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2925'. [ 411.433028][T18129] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2923'. [ 411.449819][T18127] block nbd2: Unsupported socket: should be TCP or UNIX. [ 411.511529][T18128] IPVS: using max 27 ests per chain, 64800 per kthread [ 411.629095][T17717] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 412.259550][T18143] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2926'. [ 412.546899][T18152] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2930'. [ 412.573264][T18152] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2930'. [ 412.584815][T17717] veth0_vlan: entered promiscuous mode [ 412.654732][T17717] veth1_vlan: entered promiscuous mode [ 412.800870][T18160] netlink: 'syz.0.2931': attribute type 2 has an invalid length. [ 412.819680][T17717] veth0_macvtap: entered promiscuous mode [ 412.873342][T17717] veth1_macvtap: entered promiscuous mode [ 412.879413][T18159] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2929'. [ 412.960104][T18159] syzkaller1: entered promiscuous mode [ 412.976473][T18159] syzkaller1: entered allmulticast mode [ 413.020671][T18159] syzkaller1: left promiscuous mode [ 413.075424][T17717] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 413.122631][T17717] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 413.161855][T10148] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 413.200151][T10148] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 413.237994][T10148] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 413.259684][T10148] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 413.543337][T18172] netlink: 212048 bytes leftover after parsing attributes in process `syz.0.2934'. [ 413.575802][T18175] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2935'. [ 413.581819][ T1168] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 413.626433][ T1168] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 413.688072][ T1168] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 413.697807][ T1168] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 414.504332][ T4949] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 414.523953][ T4949] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 414.534299][ T4949] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 414.546728][ T4949] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 414.555289][ T4949] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 414.755213][ C0] bridge0: port 1(bridge_slave_0) entered learning state [ 414.764268][ C0] bridge0: port 2(bridge_slave_1) entered learning state [ 415.182668][T18216] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2942'. [ 415.273805][T18197] vxcan1 speed is unknown, defaulting to 1000 [ 415.679926][T18232] netlink: 52 bytes leftover after parsing attributes in process `syz.5.2946'. [ 415.843432][T18197] xfrm0 speed is unknown, defaulting to 1000 [ 415.944044][T18243] openvswitch: netlink: Flow actions attr not present in new flow. [ 416.283707][T18259] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048) [ 416.337316][T18259] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048) [ 416.365347][T18259] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048) [ 416.575595][T18197] lo speed is unknown, defaulting to 1000 [ 416.584160][ T4949] Bluetooth: hci7: command tx timeout [ 416.791412][T18276] Cannot find add_set index 0 as target [ 416.807148][T18282] netlink: 'syz.5.2962': attribute type 9 has an invalid length. [ 417.104654][T18292] netlink: 'syz.6.2968': attribute type 32 has an invalid length. [ 417.644492][T18323] netlink: 'syz.0.2971': attribute type 1 has an invalid length. [ 417.678479][T18323] __nla_validate_parse: 1 callbacks suppressed [ 417.678504][T18323] netlink: 96 bytes leftover after parsing attributes in process `syz.0.2971'. [ 417.718462][T18323] netlink: 1 bytes leftover after parsing attributes in process `syz.0.2971'. [ 417.770106][T18323] netlink: 'syz.0.2971': attribute type 1 has an invalid length. [ 417.793808][T18323] netlink: 'syz.0.2971': attribute type 8 has an invalid length. [ 417.816729][T18323] netlink: 582 bytes leftover after parsing attributes in process `syz.0.2971'. [ 417.853608][T18197] bridge0: port 1(bridge_slave_0) entered blocking state [ 417.883951][T18197] bridge0: port 1(bridge_slave_0) entered disabled state [ 417.914168][T18197] bridge_slave_0: entered allmulticast mode [ 417.943286][T18197] bridge_slave_0: entered promiscuous mode [ 418.127061][T18339] IPVS: set_ctl: invalid protocol: 50 172.30.1.1:20003 [ 418.143611][T18328] syzkaller0: entered promiscuous mode [ 418.161569][T18328] syzkaller0: entered allmulticast mode [ 418.174928][T18197] bridge0: port 2(bridge_slave_1) entered blocking state [ 418.205561][T18197] bridge0: port 2(bridge_slave_1) entered disabled state [ 418.232193][T18197] bridge_slave_1: entered allmulticast mode [ 418.256629][T18197] bridge_slave_1: entered promiscuous mode [ 418.643827][T18358] netlink: 'syz.3.2976': attribute type 1 has an invalid length. [ 418.660017][T18358] netlink: 96 bytes leftover after parsing attributes in process `syz.3.2976'. [ 418.670876][ T4949] Bluetooth: hci7: command tx timeout [ 418.689904][T18358] netlink: 1 bytes leftover after parsing attributes in process `syz.3.2976'. [ 418.701214][T18358] netlink: 658 bytes leftover after parsing attributes in process `syz.3.2976'. [ 420.756223][ T4949] Bluetooth: hci7: command tx timeout [ 421.652110][T18197] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 421.728115][T18197] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 421.938028][T18391] netlink: 'syz.6.2983': attribute type 12 has an invalid length. [ 421.960340][T18396] netlink: 248 bytes leftover after parsing attributes in process `syz.6.2983'. [ 421.979417][T18391] netlink: 'syz.6.2983': attribute type 29 has an invalid length. [ 421.991675][T18391] netlink: 148 bytes leftover after parsing attributes in process `syz.6.2983'. [ 422.004937][T18197] team0: Port device team_slave_0 added [ 422.018506][T18197] team0: Port device team_slave_1 added [ 422.060102][T18197] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 422.067545][T18197] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 422.094722][T18197] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 422.108441][T18197] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 422.115701][T18197] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 422.142892][T18197] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 422.197934][T18405] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2984'. [ 422.519614][T18405] macvtap1: entered promiscuous mode [ 422.549432][T18405] vlan0: entered promiscuous mode [ 422.562549][T18405] macvtap1: entered allmulticast mode [ 422.577627][T18405] vlan0: entered allmulticast mode [ 422.598474][T18405] veth0_vlan: entered allmulticast mode [ 422.773004][T18427] netlink: 'syz.3.2991': attribute type 27 has an invalid length. [ 422.823333][ T4949] Bluetooth: hci7: command tx timeout [ 422.944756][T18197] hsr_slave_0: entered promiscuous mode [ 422.953041][T18197] hsr_slave_1: entered promiscuous mode [ 422.964162][T18197] debugfs: 'hsr0' already exists in 'hsr' [ 422.976478][T18197] Cannot create hsr debugfs directory [ 423.460089][T18460] netlink: 'syz.6.2999': attribute type 1 has an invalid length. [ 423.515899][T18456] 8021q: adding VLAN 0 to HW filter on device bond1 [ 423.577905][T18456] bridge0: port 3(bond1) entered blocking state [ 423.606831][T18456] bridge0: port 3(bond1) entered disabled state [ 423.636095][T18456] bond1: entered allmulticast mode [ 423.671811][T18456] bond1: entered promiscuous mode [ 423.687117][T18456] bridge0: port 3(bond1) entered blocking state [ 423.693642][T18456] bridge0: port 3(bond1) entered forwarding state [ 423.757786][T18460] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 423.795242][ T1154] bridge0: port 3(bond1) entered disabled state [ 424.042582][T18478] mac80211_hwsim hwsim35 wlan0: entered promiscuous mode [ 424.083996][T18488] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3004'. [ 424.107400][T18492] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3005'. [ 424.126930][T18492] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3005'. [ 424.372211][T18505] netlink: 'syz.3.3009': attribute type 3 has an invalid length. [ 424.393953][T18197] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 424.402539][T18505] netlink: 'syz.3.3009': attribute type 3 has an invalid length. [ 424.424794][T18197] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 424.461797][T18505] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3009'. [ 424.545350][T18512] netlink: 'syz.0.3011': attribute type 64 has an invalid length. [ 424.568120][T18498] veth0_to_bridge: entered promiscuous mode [ 424.619911][T18499] veth0_to_bridge: left promiscuous mode [ 424.672844][T18516] x_tables: duplicate underflow at hook 1 [ 424.736557][T18197] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 424.751555][T18197] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 424.815630][T18521] netlink: 'syz.3.3015': attribute type 12 has an invalid length. [ 424.909486][T18526] sctp: [Deprecated]: syz.0.3016 (pid 18526) Use of int in max_burst socket option deprecated. [ 424.909486][T18526] Use struct sctp_assoc_value instead [ 424.942065][T18527] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3017'. [ 425.003587][T18197] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 425.015902][T18197] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 425.106771][T18527] macsec2: entered promiscuous mode [ 425.116446][T18527] macsec2: entered allmulticast mode [ 425.137077][T18527] bridge0: port 3(macsec2) entered blocking state [ 425.167652][T18527] bridge0: port 3(macsec2) entered disabled state [ 425.410523][T18546] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3022'. [ 425.420072][T18546] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3022'. [ 425.486776][T18547] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3022'. [ 425.511182][T18197] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 425.524900][T18197] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 425.645717][T18552] netlink: 'syz.3.3024': attribute type 2 has an invalid length. [ 425.655387][T18552] netlink: 100 bytes leftover after parsing attributes in process `syz.3.3024'. [ 426.597752][T18562] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3027'. [ 428.945543][T18590] can: request_module (can-proto-5) failed. [ 428.966716][T18197] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 429.016181][T18197] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 429.121596][T18601] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3037'. [ 429.137123][T18590] netlink: 'syz.3.3034': attribute type 12 has an invalid length. [ 429.157903][T18590] netlink: 'syz.3.3034': attribute type 29 has an invalid length. [ 429.179303][T18590] netlink: 148 bytes leftover after parsing attributes in process `syz.3.3034'. [ 429.211861][T18197] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 429.281476][T18197] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 429.301664][T18197] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 429.331614][T18197] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 429.343784][T18197] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 429.376262][T18197] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 429.711609][T18622] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3042'. [ 429.760144][T18627] syzkaller0: entered promiscuous mode [ 429.786055][T18627] syzkaller0: entered allmulticast mode [ 429.849294][T18633] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3045'. [ 430.100463][ C0] bridge0: port 2(bridge_slave_1) entered forwarding state [ 430.107834][ C0] bridge0: topology change detected, propagating [ 430.114979][ C0] bridge0: port 1(bridge_slave_0) entered forwarding state [ 430.122318][ C0] bridge0: topology change detected, propagating [ 430.298118][T18197] 8021q: adding VLAN 0 to HW filter on device bond0 [ 430.477637][T18197] 8021q: adding VLAN 0 to HW filter on device team0 [ 430.527794][T10148] bridge0: port 1(bridge_slave_0) entered blocking state [ 430.535121][T10148] bridge0: port 1(bridge_slave_0) entered forwarding state [ 430.578046][T18658] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3051'. [ 430.600346][T18658] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3051'. [ 430.658676][T10134] bridge0: port 2(bridge_slave_1) entered blocking state [ 430.665957][T10134] bridge0: port 2(bridge_slave_1) entered forwarding state [ 431.933327][T18717] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3060'. [ 431.971900][T18717] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3060'. [ 432.330118][T18698] batadv0: entered promiscuous mode [ 432.342292][T18698] macsec1: entered promiscuous mode [ 432.356829][T18698] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 432.375784][T18698] batadv0: left promiscuous mode [ 432.408527][T18728] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3063'. [ 432.436085][T18728] netlink: 13 bytes leftover after parsing attributes in process `syz.3.3063'. [ 432.448426][T18197] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 432.521987][T18728] veth3: entered promiscuous mode [ 432.536056][T18733] netlink: 'syz.5.3064': attribute type 7 has an invalid length. [ 432.654808][ T36] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 432.665181][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 432.707679][ T36] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 432.719088][ T36] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 432.745983][ T36] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 433.388382][T18197] veth0_vlan: entered promiscuous mode [ 433.445075][T18197] veth1_vlan: entered promiscuous mode [ 433.557246][T18197] veth0_macvtap: entered promiscuous mode [ 433.665469][T18197] veth1_macvtap: entered promiscuous mode [ 433.706749][T18197] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 433.719531][T18787] netlink: 'syz.6.3074': attribute type 12 has an invalid length. [ 433.728375][T18787] netlink: 'syz.6.3074': attribute type 29 has an invalid length. [ 433.737457][T18787] netlink: 'syz.6.3074': attribute type 1 has an invalid length. [ 433.746990][T18787] netlink: 'syz.6.3074': attribute type 12 has an invalid length. [ 433.755318][T18787] netlink: 'syz.6.3074': attribute type 29 has an invalid length. [ 433.763900][T18787] netlink: 'syz.6.3074': attribute type 1 has an invalid length. [ 433.787925][T18197] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 433.815514][ T1168] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 433.824526][ T1168] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 433.835467][T18787] syzkaller0: entered promiscuous mode [ 433.841418][T18787] syzkaller0: entered allmulticast mode [ 433.850081][ T1168] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 433.861705][ T1168] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 436.155273][T18764] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 436.315487][T16473] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 436.354131][T16473] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 436.495928][ T1168] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 436.538776][ T1168] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 436.593192][T18802] syzkaller0: entered promiscuous mode [ 436.632367][T18802] syzkaller0: entered allmulticast mode [ 437.799674][ T5637] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 437.814250][ T5637] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 437.822998][ T5637] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 437.833855][ T5637] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 437.848143][ T5637] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 438.339540][T18854] __nla_validate_parse: 67 callbacks suppressed [ 438.339568][T18854] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3093'. [ 438.615243][ T36] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 439.015218][ T36] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 439.036635][ T36] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 439.356551][ T36] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 439.423617][ T36] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 439.549938][T18908] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3101'. [ 439.818793][ T36] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 439.837303][ T36] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 439.855020][T18920] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3104'. [ 439.881228][T18920] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3104'. [ 439.891830][T18920] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3104'. [ 439.911271][T18920] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3104'. [ 439.936965][T18837] vxcan1 speed is unknown, defaulting to 1000 [ 439.944737][ T4949] Bluetooth: hci4: command tx timeout [ 440.633390][T18939] syzkaller0: entered promiscuous mode [ 440.652205][T18939] syzkaller0: entered allmulticast mode [ 440.686732][T10134] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 440.806799][T10144] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 441.007433][T18837] xfrm0 speed is unknown, defaulting to 1000 [ 441.019959][T10134] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 441.036094][T18950] workqueue: name exceeds WQ_NAME_LEN. Truncating to: Ku crK:̥B| [ 441.146227][T18948] syzkaller0: entered promiscuous mode [ 441.174100][T18948] syzkaller0: entered allmulticast mode [ 441.319165][T16473] netdevsim netdevsim3 eth4: set [1, 0] type 2 family 0 port 6081 - 0 [ 441.732445][ T36] bridge_slave_1: left allmulticast mode [ 441.754996][ T36] bridge_slave_1: left promiscuous mode [ 441.788078][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 441.877009][ T36] bridge_slave_0: left allmulticast mode [ 441.901416][ T36] bridge_slave_0: left promiscuous mode [ 441.916124][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 442.020770][ T4949] Bluetooth: hci4: command tx timeout [ 442.051143][ T36] pimreg: left allmulticast mode [ 442.100053][T18994] netlink: 212348 bytes leftover after parsing attributes in process `syz.5.3118'. [ 442.139275][T18993] netlink: 212348 bytes leftover after parsing attributes in process `syz.5.3118'. [ 442.485592][ T36] bond2 (unregistering): (slave ip6gre1): Releasing backup interface [ 442.519837][ T36] bond5 (unregistering): (slave ip6gretap1): Releasing active interface [ 442.907414][ T1318] aoe: packet could not be sent on ipvlan1. consider increasing tx_queue_len [ 442.938655][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 442.948568][ T36] bond_slave_0: left allmulticast mode [ 442.959996][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 442.969773][ T36] bond_slave_1: left allmulticast mode [ 442.979166][ T36] bond0 (unregistering): Released all slaves [ 442.992991][ T36] bond1 (unregistering): Released all slaves [ 443.010791][ T36] bond2 (unregistering): Released all slaves [ 443.028312][ T36] bond3 (unregistering): Released all slaves [ 443.054306][ T36] bond4 (unregistering): Released all slaves [ 443.075832][ T36] bond5 (unregistering): Released all slaves [ 443.095605][ T36] bond6 (unregistering): Released all slaves [ 443.135216][T18837] lo speed is unknown, defaulting to 1000 [ 443.269171][ T5294] 8021q: adding VLAN 0 to HW filter on device eth1 [ 443.463326][T19007] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3122'. [ 443.631149][T19012] IPv6: NLM_F_CREATE should be specified when creating new route [ 443.678600][T19012] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3123'. [ 443.733013][ T36] tipc: Left network mode [ 444.026826][T19020] netlink: 'syz.5.3126': attribute type 5 has an invalid length. [ 444.100953][ T4949] Bluetooth: hci4: command tx timeout [ 444.528147][T19037] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3130'. [ 444.699080][T19048] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3133'. [ 444.870041][T19053] netlink: 32 bytes leftover after parsing attributes in process `syz.6.3135'. [ 445.393714][T19072] netlink: 'syz.5.3139': attribute type 10 has an invalid length. [ 445.433028][T19072] netlink: 224 bytes leftover after parsing attributes in process `syz.5.3139'. [ 445.644159][T19089] netlink: 48 bytes leftover after parsing attributes in process `syz.5.3143'. [ 445.976838][ T5294] 8021q: adding VLAN 0 to HW filter on device eth2 [ 446.095055][T19104] netlink: 'syz.4.3145': attribute type 15 has an invalid length. [ 446.149525][T18837] bridge0: port 1(bridge_slave_0) entered blocking state [ 446.158776][T18837] bridge0: port 1(bridge_slave_0) entered disabled state [ 446.168898][T18837] bridge_slave_0: entered allmulticast mode [ 446.180915][ T4949] Bluetooth: hci4: command tx timeout [ 446.202718][T18837] bridge_slave_0: entered promiscuous mode [ 446.230511][T18837] bridge0: port 2(bridge_slave_1) entered blocking state [ 446.252674][T18837] bridge0: port 2(bridge_slave_1) entered disabled state [ 446.286667][T18837] bridge_slave_1: entered allmulticast mode [ 446.320783][T18837] bridge_slave_1: entered promiscuous mode [ 446.615461][T18837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 446.652722][T18837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 446.809817][T19127] netlink: 256 bytes leftover after parsing attributes in process `syz.0.3152'. [ 446.842271][T19127] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3152'. [ 447.007987][T19133] netlink: 'syz.5.3153': attribute type 2 has an invalid length. [ 447.046146][T19133] netlink: 'syz.5.3153': attribute type 2 has an invalid length. [ 447.069545][T18837] team0: Port device team_slave_0 added [ 447.111809][T18837] team0: Port device team_slave_1 added [ 447.180903][T19136] x_tables: duplicate underflow at hook 2 [ 447.284688][T19144] x_tables: duplicate underflow at hook 1 [ 447.312764][T19147] openvswitch: netlink: IPv4 tun info is not correct [ 447.613330][ T36] hsr_slave_0: left promiscuous mode [ 447.626645][ T36] hsr_slave_1: left promiscuous mode [ 447.665340][ T36] veth1_macvtap: left promiscuous mode [ 447.672531][ T36] veth0_macvtap: left promiscuous mode [ 447.678391][ T36] veth1_vlan: left promiscuous mode [ 448.428314][ T36] team0 (unregistering): Port device team_slave_1 removed [ 448.458830][ T36] team0 (unregistering): Port device team_slave_0 removed [ 448.644344][T18837] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 448.659697][T18837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 448.733454][ T1168] smbdirect: ib_dev[sy2] removed [ 448.735106][T18837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 448.819958][T19166] gretap3: entered promiscuous mode [ 448.853200][T19166] batman_adv: batadv0: Adding interface: gretap3 [ 448.859721][T19166] batman_adv: batadv0: The MTU of interface gretap3 is too small (1462) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1532. [ 448.891556][T19166] batman_adv: batadv0: Not using interface gretap3 (retrying later): interface not active [ 448.916215][ T5294] 8021q: adding VLAN 0 to HW filter on device eth3 [ 448.966447][T18837] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 449.006335][T18837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 449.107306][T18837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 449.453293][T19198] netlink: 'syz.0.3163': attribute type 1 has an invalid length. [ 449.574814][T18837] hsr_slave_0: entered promiscuous mode [ 449.586291][T18837] hsr_slave_1: entered promiscuous mode [ 449.594081][T18837] debugfs: 'hsr0' already exists in 'hsr' [ 449.600585][T18837] Cannot create hsr debugfs directory [ 450.646856][T19224] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 450.654546][T19224] IPv6: NLM_F_CREATE should be set when creating new route [ 450.667986][T19224] IPv6: NLM_F_CREATE should be set when creating new route [ 450.964934][T19221] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3170'. [ 451.001102][T19221] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3170'. [ 451.166316][ T36] IPVS: stop unused estimator thread 0... [ 451.628727][T19250] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3177'. [ 451.797893][T18837] netdevsim netdevsim3 eth4 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 451.906208][T19260] netlink: 'syz.6.3180': attribute type 15 has an invalid length. [ 452.113231][T19267] netlink: 808 bytes leftover after parsing attributes in process `syz.5.3181'. [ 452.183696][T18837] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 452.486191][T18837] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 452.559905][T19285] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 452.699820][T19290] netlink: 76 bytes leftover after parsing attributes in process `syz.0.3188'. [ 452.839676][T18837] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 452.936943][T19292] bridge1: entered promiscuous mode [ 452.942635][T19292] bridge1: entered allmulticast mode [ 452.956650][T19297] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3190'. [ 453.909770][T19351] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3200'. [ 453.921303][T19351] netlink: 'syz.0.3200': attribute type 1 has an invalid length. [ 453.929212][T19351] netlink: 'syz.0.3200': attribute type 2 has an invalid length. [ 454.161622][T19357] netlink: 'syz.0.3202': attribute type 1 has an invalid length. [ 454.161622][T19358] netlink: 'syz.0.3202': attribute type 1 has an invalid length. [ 454.234582][T19358] bond19: (slave bridge8): making interface the new active one [ 454.247370][T19358] bond19: (slave bridge8): Enslaving as an active interface with an up link [ 454.285527][T19363] bond19: (slave bridge9): Enslaving as an active interface with a down link [ 454.319496][T19358] bond19: (slave gretap4): Enslaving as an active interface with an up link [ 454.342783][T19357] macvlan3: entered promiscuous mode [ 454.348196][T19357] macvlan3: entered allmulticast mode [ 454.357944][T19357] bond19: entered promiscuous mode [ 454.365476][T19357] bridge8: entered promiscuous mode [ 454.372988][T19357] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 454.382262][T19357] bond19: (slave macvlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 454.399019][T19357] bond19: left promiscuous mode [ 454.404213][T19357] bridge8: left promiscuous mode [ 456.133067][T19316] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 456.170773][T18837] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 456.218494][T18837] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 456.253715][T18837] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 456.297990][T18837] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 456.307683][T18837] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 456.332784][T18837] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 456.343881][T18837] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 456.386166][T18837] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 456.488632][T19432] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3207'. [ 456.515993][T19432] netlink: 'syz.0.3207': attribute type 16 has an invalid length. [ 456.533741][T19432] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3207'. [ 456.570679][T19432] veth0_macvtap: entered allmulticast mode [ 456.758942][T19440] netlink: 212344 bytes leftover after parsing attributes in process `syz.0.3210'. [ 456.813390][T18837] 8021q: adding VLAN 0 to HW filter on device bond0 [ 456.866905][T19443] syz.4.3211 (19443) used obsolete PPPIOCDETACH ioctl [ 456.917353][T18837] 8021q: adding VLAN 0 to HW filter on device team0 [ 456.979005][T10142] bridge0: port 1(bridge_slave_0) entered blocking state [ 456.986300][T10142] bridge0: port 1(bridge_slave_0) entered forwarding state [ 457.048489][T16473] bridge0: port 2(bridge_slave_1) entered blocking state [ 457.055850][T16473] bridge0: port 2(bridge_slave_1) entered forwarding state [ 457.392602][T19456] lo: entered promiscuous mode [ 457.420044][T19456] tunl0: entered promiscuous mode [ 457.457770][T19456] gre0: entered promiscuous mode [ 457.517706][T19456] gretap0: entered promiscuous mode [ 457.540070][T19456] erspan0: entered promiscuous mode [ 457.558940][T19456] ip_vti0: entered promiscuous mode [ 457.601432][T19466] IPVS: length: 225 != 24 [ 457.658006][T19469] netlink: 'syz.4.3219': attribute type 4 has an invalid length. [ 457.682621][ T7305] IPVS: starting estimator thread 0... [ 457.780487][T19472] IPVS: using max 29 ests per chain, 69600 per kthread [ 458.049991][T19484] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 458.318846][T19499] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3226'. [ 458.365345][T19499] netlink: 120 bytes leftover after parsing attributes in process `syz.4.3226'. [ 458.385288][T19499] netlink: 'syz.4.3226': attribute type 1 has an invalid length. [ 458.427720][T19499] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3226'. [ 458.558431][T19511] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3227'. [ 458.609282][T19511] IPv6: NLM_F_CREATE should be specified when creating new route [ 458.842684][T18837] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 459.182526][T18837] veth0_vlan: entered promiscuous mode [ 459.219813][T18837] veth1_vlan: entered promiscuous mode [ 459.328657][T18837] veth0_macvtap: entered promiscuous mode [ 459.360042][T19540] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3236'. [ 459.386940][T18837] veth1_macvtap: entered promiscuous mode [ 459.436128][T18837] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 459.464359][T18837] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 459.497813][T16473] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 459.517718][T16473] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 459.551711][T16473] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 459.631967][T16473] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 459.936083][T19543] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 459.996582][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 460.018111][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 460.202389][ T1154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 460.211220][ T1154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 460.337598][T19576] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3245'. [ 460.689669][T19581] syzkaller0: entered promiscuous mode [ 460.715912][T19581] syzkaller0: entered allmulticast mode [ 461.237020][ T5637] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 461.253552][ T5637] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 461.269484][ T5637] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 461.283741][ T5637] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 461.295930][ T5637] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 461.693933][T19603] netlink: 'syz.5.3251': attribute type 1 has an invalid length. [ 461.802792][T19592] syzkaller1: entered promiscuous mode [ 461.810071][T19592] syzkaller1: entered allmulticast mode [ 462.274861][T19624] smc: ib device syz2 ibport 2 applied user defined pnetid SYZ2 [ 462.276721][T19627] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 463.391585][ T4949] Bluetooth: hci2: command tx timeout [ 465.469881][ T4949] Bluetooth: hci2: command tx timeout [ 467.014093][T19596] vxcan1 speed is unknown, defaulting to 1000 [ 467.231293][T19675] netlink: 'syz.3.3269': attribute type 1 has an invalid length. [ 467.541690][ T4949] Bluetooth: hci2: command tx timeout [ 467.769347][T19698] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3273'. [ 467.802521][T19596] xfrm0 speed is unknown, defaulting to 1000 [ 468.833447][T19741] openvswitch: netlink: IPv4 tun info is not correct [ 468.921886][T19741] bond0: (slave bond_slave_1): Error: Device is in use and cannot be enslaved [ 469.190967][T19758] netlink: 212368 bytes leftover after parsing attributes in process `syz.6.3287'. [ 469.605312][T19596] bridge0: port 1(bridge_slave_0) entered blocking state [ 469.631173][ T4949] Bluetooth: hci2: command tx timeout [ 469.640465][T19596] bridge0: port 1(bridge_slave_0) entered disabled state [ 469.675618][T19596] bridge_slave_0: entered allmulticast mode [ 469.697279][T19596] bridge_slave_0: entered promiscuous mode [ 469.735429][T19596] bridge0: port 2(bridge_slave_1) entered blocking state [ 469.761154][T19596] bridge0: port 2(bridge_slave_1) entered disabled state [ 469.770845][T19596] bridge_slave_1: entered allmulticast mode [ 469.787867][T19596] bridge_slave_1: entered promiscuous mode [ 470.014329][T19596] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 470.059700][T19596] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 470.120495][T19596] team0: Port device team_slave_0 added [ 470.136233][T19596] team0: Port device team_slave_1 added [ 470.212137][T19596] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 470.219488][T19596] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 470.264410][T19596] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 470.311348][T19596] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 470.326537][T19596] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 470.363429][T19596] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 470.533400][T19798] netlink: 56 bytes leftover after parsing attributes in process `syz.6.3297'. [ 470.685973][T19596] hsr_slave_0: entered promiscuous mode [ 470.770551][T19596] hsr_slave_1: entered promiscuous mode [ 470.778611][T19596] debugfs: 'hsr0' already exists in 'hsr' [ 470.840822][T19596] Cannot create hsr debugfs directory [ 471.266492][T19821] netlink: 1 bytes leftover after parsing attributes in process `syz.6.3303'. [ 471.322045][T19823] xt_cluster: node mask cannot exceed total number of nodes [ 471.330098][T19827] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3304'. [ 471.551923][T19821] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3303'. [ 471.555787][T19835] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3302'. [ 471.592192][T19821] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 471.774398][T19821] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 471.907681][T19596] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 471.940224][T19596] netdevsim netdevsim0 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 472.236884][T19596] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 472.397146][T19596] netdevsim netdevsim0 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 472.425248][T19852] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3308'. [ 472.597771][T19596] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 472.608995][T19596] netdevsim netdevsim0 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 472.677499][T19854] syzkaller1: entered promiscuous mode [ 472.714954][T19854] syzkaller1: entered allmulticast mode [ 472.809865][T19596] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 472.846256][T19596] netdevsim netdevsim0 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 473.046729][T19867] openvswitch: netlink: Flow key attribute not present in set flow. [ 473.098885][T19870] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3314'. [ 473.281532][T19875] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3315'. [ 473.322012][T19879] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3317'. [ 473.957948][T19596] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 473.984688][T19596] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 474.042020][T19596] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 474.077375][T19596] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 474.105281][T19596] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 474.131629][T19596] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 474.152008][T19596] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 474.217031][T19596] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 474.586267][T19596] 8021q: adding VLAN 0 to HW filter on device bond0 [ 474.634545][T19937] xt_CT: You must specify a L4 protocol and not use inversions on it [ 474.668503][T19596] 8021q: adding VLAN 0 to HW filter on device team0 [ 474.761925][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 474.769192][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 474.823781][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 474.831040][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 474.924656][T19951] netlink: 'syz.4.3340': attribute type 83 has an invalid length. [ 475.012376][T19956] netlink: 'syz.5.3342': attribute type 1 has an invalid length. [ 475.120560][T19956] 8021q: adding VLAN 0 to HW filter on device bond1 [ 475.171421][T19960] vlan1: entered allmulticast mode [ 475.176606][T19960] bond1: entered allmulticast mode [ 475.264040][T19956] bond1: (slave geneve2): making interface the new active one [ 475.277650][T19956] geneve2: entered allmulticast mode [ 475.293418][T19956] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 475.346416][T19969] syzkaller0: entered promiscuous mode [ 475.353805][T19969] syzkaller0: entered allmulticast mode [ 476.036312][T19596] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 476.135570][T19596] veth0_vlan: entered promiscuous mode [ 476.149193][T19596] veth1_vlan: entered promiscuous mode [ 476.186760][T19596] veth0_macvtap: entered promiscuous mode [ 476.199641][T19596] veth1_macvtap: entered promiscuous mode [ 476.220027][T19596] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 476.237112][T19596] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 476.257898][T10144] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 476.268921][T10144] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 476.281991][T10144] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 476.292545][T10144] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 478.145372][T19970] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 478.383800][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 478.425841][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 478.542620][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 478.571052][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 478.947249][T20037] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3359'. [ 479.010750][T20038] netlink: 'syz.5.3360': attribute type 9 has an invalid length. [ 479.155673][T20052] netlink: 'syz.6.3361': attribute type 6 has an invalid length. [ 479.489763][T20064] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3366'. [ 479.586694][T20070] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3366'. [ 479.632933][T20072] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3370'. [ 479.689567][T20072] netlink: 'syz.4.3370': attribute type 1 has an invalid length. [ 479.728264][T20072] netlink: 'syz.4.3370': attribute type 2 has an invalid length. [ 479.834922][T20079] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3372'. [ 480.084534][T20093] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3376'. [ 480.123568][T20093] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3376'. [ 480.167513][T20099] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3379'. [ 480.277496][T20113] openvswitch: netlink: IPv4 tun info is not correct [ 480.347371][T20116] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3381'. [ 480.433118][T20120] netlink: 'syz.5.3379': attribute type 1 has an invalid length. [ 480.452913][T20120] netlink: 'syz.5.3379': attribute type 11 has an invalid length. [ 480.472229][T20120] netlink: 224 bytes leftover after parsing attributes in process `syz.5.3379'. [ 480.967487][T20136] lo: entered allmulticast mode [ 480.975772][T20136] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 481.049376][ T36] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 481.058657][ T36] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 481.070743][ T5732] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 481.472168][ T5732] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 481.791777][ T5732] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 483.105308][T20099] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 483.412310][T20151] netlink: 'syz.0.3388': attribute type 21 has an invalid length. [ 483.877121][T20178] openvswitch: netlink: Missing key (keys=40, expected=80) [ 484.120391][T20188] __nla_validate_parse: 4 callbacks suppressed [ 484.120490][T20188] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3400'. [ 484.178373][T20188] ipvlan2: entered allmulticast mode [ 484.194253][T20188] syz_tun: entered allmulticast mode [ 484.240921][T20200] netlink: 14 bytes leftover after parsing attributes in process `syz.4.3403'. [ 484.369067][T20200] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 484.441593][T20200] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 484.472904][T20200] bond0 (unregistering): Released all slaves [ 484.492867][T20195] netlink: 'syz.3.3402': attribute type 4 has an invalid length. [ 484.543667][T20205] openvswitch: netlink: Tunnel attr 78 out of range max 16 [ 484.579760][T20191] syzkaller0: entered promiscuous mode [ 484.586781][T20191] syzkaller0: entered allmulticast mode [ 485.035525][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805a23e400: rx timeout, send abort [ 485.390525][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 485.533179][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805a23d800: rx timeout, send abort [ 485.559530][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805a23e400: abort rx timeout. Force session deactivation [ 485.592610][ C1] vcan0: j1939_xtp_rx_rts_session_active: 0xffff88805a23d800: connection exists (fe ff). last cmd: 20 [ 485.847282][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805a23c400: rx timeout, send abort [ 486.357756][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805a23c400: abort rx timeout. Force session deactivation [ 488.229627][T20253] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3412'. [ 488.303205][T20253] bridge0: port 2(bridge_slave_1) entered disabled state [ 488.313770][T20253] bridge0: port 1(bridge_slave_0) entered disabled state [ 488.393900][T20256] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3413'. [ 488.730491][T20282] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 488.737864][T20282] IPv6: NLM_F_CREATE should be set when creating new route [ 488.745232][T20282] IPv6: NLM_F_CREATE should be set when creating new route [ 488.834829][T20282] syzkaller0: entered promiscuous mode [ 488.863109][T20282] syzkaller0: entered allmulticast mode [ 488.980965][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 489.225195][T20296] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3427'. [ 489.241246][T20297] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3428'. [ 489.326063][T20299] netlink: 48 bytes leftover after parsing attributes in process `syz.5.3429'. [ 489.464836][T20306] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3431'. [ 489.523753][T20306] netlink: 'syz.6.3431': attribute type 1 has an invalid length. [ 489.548662][T20309] netlink: 'syz.3.3432': attribute type 1 has an invalid length. [ 489.557156][T20306] netlink: 'syz.6.3431': attribute type 1 has an invalid length. [ 489.581813][T20309] netlink: 244 bytes leftover after parsing attributes in process `syz.3.3432'. [ 489.614215][T20306] netlink: 'syz.6.3431': attribute type 2 has an invalid length. [ 489.662072][T20306] netlink: 68 bytes leftover after parsing attributes in process `syz.6.3431'. [ 489.943704][ T5755] IPVS: starting estimator thread 0... [ 490.062477][T20324] IPVS: using max 28 ests per chain, 67200 per kthread [ 490.319900][T20337] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3441'. [ 490.440621][T20335] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3438'. [ 490.458940][T20335] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3438'. [ 492.351700][T20402] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3459'. [ 492.430207][T20406] netlink: 'syz.6.3461': attribute type 1 has an invalid length. [ 492.455318][T20404] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 492.468466][T20406] netlink: 'syz.6.3461': attribute type 1 has an invalid length. [ 492.706160][T20406] 8021q: adding VLAN 0 to HW filter on device bond2 [ 493.227001][T20440] netlink: 'syz.6.3469': attribute type 1 has an invalid length. [ 493.355167][T20440] 8021q: adding VLAN 0 to HW filter on device bond3 [ 493.411372][T20442] bond3: (slave gretap1): making interface the new active one [ 493.444092][T20442] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 493.565651][T20447] tipc: Failed to remove unknown binding: 66,1,1/0:2105396843/2105396845 [ 493.896248][T20462] netlink: 'syz.6.3476': attribute type 1 has an invalid length. [ 494.036726][T20462] 8021q: adding VLAN 0 to HW filter on device bond4 [ 494.161533][T20465] bond4: (slave geneve3): making interface the new active one [ 494.184904][T20465] bond4: (slave geneve3): Enslaving as an active interface with an up link [ 494.244459][T10134] netdevsim netdevsim6 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 494.268486][T10134] netdevsim netdevsim6 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 494.300675][T10134] netdevsim netdevsim6 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 494.316531][T10134] netdevsim netdevsim6 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 494.637364][T20482] vcan1: entered promiscuous mode [ 494.659786][T20482] vcan1: entered allmulticast mode [ 494.740515][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 494.902197][T20279] Set syz1 is full, maxelem 65536 reached [ 495.490975][T20510] netlink: 'syz.5.3487': attribute type 21 has an invalid length. [ 495.513679][T20504] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 495.532819][T20510] __nla_validate_parse: 9 callbacks suppressed [ 495.532876][T20510] netlink: 128 bytes leftover after parsing attributes in process `syz.5.3487'. [ 495.570549][T20510] netlink: 3 bytes leftover after parsing attributes in process `syz.5.3487'. [ 495.659848][T20510] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3487'. [ 495.966885][T20527] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3492'. [ 495.990675][T20523] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 496.016307][T20530] netlink: 44 bytes leftover after parsing attributes in process `syz.5.3491'. [ 496.039928][T20530] netlink: 13 bytes leftover after parsing attributes in process `syz.5.3491'. [ 496.069488][T20530] netlink: 44 bytes leftover after parsing attributes in process `syz.5.3491'. [ 496.095470][T20530] netlink: 13 bytes leftover after parsing attributes in process `syz.5.3491'. [ 496.123836][T20530] netlink: 44 bytes leftover after parsing attributes in process `syz.5.3491'. [ 496.134224][T20527] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 496.152935][T12833] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 496.398672][T20549] netlink: 408 bytes leftover after parsing attributes in process `syz.0.3498'. [ 496.772522][T20566] netlink: 'syz.0.3503': attribute type 2 has an invalid length. [ 497.463971][T20601] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 497.689023][T20609] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 497.910953][T20619] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 498.693406][T20672] netlink: 'syz.0.3532': attribute type 2 has an invalid length. [ 499.121716][T20698] netlink: 'syz.3.3543': attribute type 15 has an invalid length. [ 499.161653][T20700] netlink: 'syz.5.3544': attribute type 1 has an invalid length. [ 499.169765][T20705] netlink: 'syz.5.3544': attribute type 1 has an invalid length. [ 499.837166][T20733] netlink: 'syz.5.3551': attribute type 4 has an invalid length. [ 499.847629][T20734] netlink: 'syz.5.3551': attribute type 4 has an invalid length. [ 499.941155][T20736] netlink: 'syz.6.3553': attribute type 7 has an invalid length. [ 499.971846][T20736] netlink: 'syz.6.3553': attribute type 7 has an invalid length. [ 499.972732][T16474] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 500.007909][T16474] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 500.023554][T16474] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 500.037274][T16474] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 500.183447][T20713] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 500.768243][T20780] __nla_validate_parse: 14 callbacks suppressed [ 500.768269][T20780] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3562'. [ 501.324174][T20802] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3566'. [ 501.377367][T20802] openvswitch: netlink: IPv4 frag type 127 is out of range max 2 [ 501.435681][T20797] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3565'. [ 501.565023][T20813] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3567'. [ 501.642003][T20814] netlink: 'syz.5.3570': attribute type 5 has an invalid length. [ 501.941063][ T4949] Bluetooth: hci2: command tx timeout [ 502.014820][T20833] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3575'. [ 502.047489][T20833] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3575'. [ 502.372989][T20850] bond5: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 502.460688][T20850] bond5 (unregistering): Released all slaves [ 502.549696][T20862] syzkaller0: entered promiscuous mode [ 502.557416][T20862] syzkaller0: entered allmulticast mode [ 502.895379][T20881] pim6reg1: entered promiscuous mode [ 502.912472][T20881] pim6reg1: entered allmulticast mode [ 502.938984][T20882] netlink: 'syz.0.3587': attribute type 10 has an invalid length. [ 502.982583][T20882] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3587'. [ 503.001687][T20884] netlink: 212340 bytes leftover after parsing attributes in process `syz.6.3589'. [ 503.025743][T20884] openvswitch: netlink: Port 167772160 exceeds max allowable 65535 [ 503.084196][T20882] team0: Port device geneve1 added [ 503.107483][T20884] netlink: 212340 bytes leftover after parsing attributes in process `syz.6.3589'. [ 503.143028][T20884] openvswitch: netlink: Port 167772160 exceeds max allowable 65535 [ 503.433798][T20908] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3594'. [ 503.484602][T20900] IPVS: persistence engine module ip_vs_pe_ not found [ 503.633589][T20919] xt_cluster: you have exceeded the maximum number of cluster nodes (2048 > 32) [ 503.668897][T20915] bond3: option lp_interval: invalid value (0) [ 503.705648][T20915] bond3: option lp_interval: allowed values 1 - 2147483647 [ 503.771156][T20915] bond3 (unregistering): Released all slaves [ 503.828316][T20927] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 504.102110][T20939] netlink: 'syz.5.3608': attribute type 1 has an invalid length. [ 504.182608][T20939] syzkaller0: entered promiscuous mode [ 504.204539][T20939] syzkaller0: entered allmulticast mode [ 504.315827][T20954] openvswitch: netlink: VLAN attribute unexpected. [ 504.340482][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 504.358437][ T1318] aoe: packet could not be sent on ipvlan1. consider increasing tx_queue_len [ 504.671435][T20960] gretap2: entered promiscuous mode [ 504.709387][T20960] batman_adv: batadv0: Adding interface: gretap2 [ 504.740769][T20960] batman_adv: batadv0: The MTU of interface gretap2 is too small (1462) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1500. [ 504.776347][T20960] batman_adv: batadv0: Not using interface gretap2 (retrying later): interface not active [ 505.256227][T20997] netlink: 'syz.0.3620': attribute type 1 has an invalid length. [ 505.318410][T21001] netlink: 'syz.3.3623': attribute type 8 has an invalid length. [ 505.529276][T21002] bond3: (slave gretap1): making interface the new active one [ 505.548238][T21002] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 505.562903][T21001] bridge0: port 2(bridge_slave_1) entered disabled state [ 505.570777][T21001] bridge0: port 1(bridge_slave_0) entered disabled state [ 505.890618][T20987] infiniband syz0: set active [ 505.903551][T20987] infiniband syz0: added bridge_slave_1 [ 505.916191][T21019] __nla_validate_parse: 6 callbacks suppressed [ 505.916213][T21019] netlink: 576 bytes leftover after parsing attributes in process `syz.0.3628'. [ 505.924847][T20987] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 505.988403][T20987] infiniband syz0: Couldn't open port 1 [ 506.004459][T20987] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 506.020962][T20987] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 506.077409][T20987] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 506.161947][T20987] RDS/IB: syz0: added [ 506.166198][T20987] smc: adding ib device syz0 with port count 1 [ 506.173914][T20987] smc: ib device syz0 port 1 has no pnetid [ 506.197098][T21040] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3633'. [ 506.232955][T21039] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3633'. [ 506.387481][T21046] netlink: 'syz.3.3634': attribute type 1 has an invalid length. [ 506.774049][T21028] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 506.839810][T21060] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3638'. [ 507.018690][T21059] vxcan1 speed is unknown, defaulting to 1000 [ 507.086327][T21062] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3640'. [ 507.125110][T21066] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3641'. [ 507.368279][T21066] 8021q: adding VLAN 0 to HW filter on device bond1 [ 507.404269][T21074] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3643'. [ 507.440791][T21077] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3643'. [ 507.484358][T21080] pimreg: entered allmulticast mode [ 507.834997][T21090] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3646'. [ 507.997606][T21059] xfrm0 speed is unknown, defaulting to 1000 [ 512.660697][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 516.660351][ T4949] Bluetooth: hci5: command 0x0406 tx timeout [ 521.780521][ T5637] Bluetooth: hci6: command 0x0406 tx timeout [ 526.951533][T21125] syzkaller0: entered promiscuous mode [ 526.966292][T21135] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 526.975615][T21125] syzkaller0: entered allmulticast mode [ 527.208683][T21145] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3661'. [ 527.358339][T21150] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3663'. [ 527.441216][T21154] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3664'. [ 527.669530][T21163] netlink: 'syz.0.3667': attribute type 11 has an invalid length. [ 527.686838][T21163] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3667'. [ 527.748771][T21163] syzkaller0: entered promiscuous mode [ 527.756209][T21163] syzkaller0: entered allmulticast mode [ 527.767417][T21165] bridge0: port 2(bridge_slave_1) entered disabled state [ 527.775209][T21165] bridge0: port 1(bridge_slave_0) entered disabled state [ 527.949082][T21169] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3670'. [ 528.162787][T21176] ip6t_REJECT: ECHOREPLY is not supported [ 528.385070][T21189] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3679'. [ 528.474409][T21187] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 528.602321][T21195] xfrm1: entered allmulticast mode [ 528.672488][T21204] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3683'. [ 528.695290][T21201] bridge0: port 2(bridge_slave_1) entered disabled state [ 528.703146][T21201] bridge0: port 1(bridge_slave_0) entered disabled state [ 528.719916][T21203] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3684'. [ 528.794402][T21206] syzkaller1: entered promiscuous mode [ 528.808255][T21212] netlink: 'syz.4.3685': attribute type 1 has an invalid length. [ 528.816550][T21206] syzkaller1: entered allmulticast mode [ 528.924108][T21212] 8021q: adding VLAN 0 to HW filter on device bond0 [ 528.955528][T21222] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 529.047536][T21222] netlink: 'syz.5.3687': attribute type 1 has an invalid length. [ 529.131713][T21225] bond1 (unregistering): Released all slaves [ 529.584260][T21256] syzkaller0: entered promiscuous mode [ 529.599030][T21256] syzkaller0: entered allmulticast mode [ 529.708248][T21259] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3699'. [ 529.738766][T21263] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3701'. [ 529.781316][T21261] syzkaller0: entered promiscuous mode [ 529.793782][T21261] syzkaller0: entered allmulticast mode [ 529.904318][T21261] tipc: Started in network mode [ 529.927013][T21261] tipc: Node identity 964267c5460f, cluster identity 4711 [ 529.948611][T21261] tipc: Enabled bearer , priority 0 [ 529.991899][T21260] tipc: Resetting bearer [ 530.032881][T21260] tipc: Disabling bearer [ 530.093753][T21274] 0: renamed from hsr0 (while UP) [ 530.120563][T21274] 0: entered allmulticast mode [ 530.139499][T21274] hsr_slave_0: entered allmulticast mode [ 530.163352][T21274] hsr_slave_1: entered allmulticast mode [ 530.185327][T21274] A link change request failed with some changes committed already. Interface c0 may have been left with an inconsistent configuration, please check. [ 530.292480][T21286] syzkaller1: entered promiscuous mode [ 530.307990][T21286] syzkaller1: entered allmulticast mode [ 530.325560][T21296] openvswitch: netlink: IPv4 frag type 127 is out of range max 2 [ 530.408610][T21296] veth0_to_batadv: entered allmulticast mode [ 530.435405][T21296] syzkaller1: entered promiscuous mode [ 530.441875][T21296] syzkaller1: entered allmulticast mode [ 531.106980][T21332] vxcan1 speed is unknown, defaulting to 1000 [ 531.122296][T21331] vxcan1 speed is unknown, defaulting to 1000 [ 532.137576][T21353] bond5: Unable to set down delay as MII monitoring is disabled [ 532.156540][T21353] bond5 (unregistering): Released all slaves [ 532.547489][T21376] __nla_validate_parse: 23 callbacks suppressed [ 532.547532][T21376] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3729'. [ 532.687850][T21383] netlink: 64138 bytes leftover after parsing attributes in process `syz.4.3732'. [ 532.699443][T21383] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3732'. [ 532.716561][T21385] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_team, syncid = 4, id = 0 [ 532.766662][T21388] netlink: 'syz.3.3733': attribute type 20 has an invalid length. [ 532.775132][T21388] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3733'. [ 532.796949][T20760] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 532.806243][T21388] netlink: 'syz.3.3733': attribute type 20 has an invalid length. [ 532.814665][T20760] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 532.825203][T21388] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3733'. [ 532.836537][T20760] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 532.846736][T20760] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 532.874484][T21392] bridge1: entered allmulticast mode [ 533.067551][T21399] syzkaller0: entered promiscuous mode [ 533.076858][T21399] syzkaller0: entered allmulticast mode [ 533.175466][T21399] tipc: Started in network mode [ 533.184852][T21399] tipc: Node identity c2c86855a2e6, cluster identity 4711 [ 533.193033][T21399] tipc: Enabled bearer , priority 0 [ 533.209610][T21397] tipc: Resetting bearer [ 533.255885][T21397] tipc: Disabling bearer [ 533.343868][T21408] netlink: 'syz.6.3740': attribute type 1 has an invalid length. [ 533.392886][T21411] netlink: 'syz.4.3741': attribute type 12 has an invalid length. [ 533.412670][T21411] netlink: 148 bytes leftover after parsing attributes in process `syz.4.3741'. [ 533.506982][T21407] bond5: (slave veth3): Enslaving as an active interface with a down link [ 533.554513][T21408] 8021q: adding VLAN 0 to HW filter on device bond5 [ 534.309072][T21441] tipc: Can't bind to reserved service type 1 [ 534.648452][T21459] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3754'. [ 534.985734][T21476] netlink: 1024 bytes leftover after parsing attributes in process `syz.0.3758'. [ 535.165121][T21482] netlink: 'syz.4.3761': attribute type 1 has an invalid length. [ 535.176305][T21482] netlink: 'syz.4.3761': attribute type 2 has an invalid length. [ 535.626048][T21507] RDS: rds_bind could not find a transport for ::ffff:172.30.0.7, load rds_tcp or rds_rdma? [ 535.880527][ T7305] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 536.110965][ T7305] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 536.517214][T21541] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3776'. [ 536.847895][T21562] siw: device registration error -23 [ 536.952865][T21575] netlink: 52 bytes leftover after parsing attributes in process `syz.4.3784'. [ 537.140467][ T5637] Bluetooth: hci7: command 0x0406 tx timeout [ 537.825983][T21612] bridge0: port 2(bridge_slave_1) entered blocking state [ 537.833333][T21612] bridge0: port 2(bridge_slave_1) entered listening state [ 537.840922][T21612] bridge0: port 1(bridge_slave_0) entered blocking state [ 537.848214][T21612] bridge0: port 1(bridge_slave_0) entered listening state [ 538.127854][T21612] 8021q: adding VLAN 0 to HW filter on device bond1 [ 538.146698][T21612] 8021q: adding VLAN 0 to HW filter on device bond2 [ 538.183701][T21612] 8021q: adding VLAN 0 to HW filter on device bond3 [ 538.209786][T21634] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 538.471590][T21634] syzkaller0: entered promiscuous mode [ 538.492879][T21634] syzkaller0: entered allmulticast mode [ 538.509832][T21639] netlink: 'syz.6.3795': attribute type 3 has an invalid length. [ 538.522126][T21639] __nla_validate_parse: 1 callbacks suppressed [ 538.522151][T21639] netlink: 666 bytes leftover after parsing attributes in process `syz.6.3795'. [ 538.770738][T21651] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 539.465325][T21675] syzkaller0: entered promiscuous mode [ 539.545038][ T31] INFO: task syz.2.2693:17128 blocked for more than 143 seconds. [ 539.548228][T21675] syzkaller0: entered allmulticast mode [ 539.568310][ T31] Not tainted syzkaller #0 [ 539.584175][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 539.616481][ T31] task:syz.2.2693 state:D stack:27168 pid:17128 tgid:17127 ppid:5640 task_flags:0x400040 flags:0x00080002 [ 539.658386][ T31] Call Trace: [ 539.668028][ T31] [ 539.679121][ T31] __schedule+0x1821/0x5740 [ 539.697292][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 539.718614][ T31] ? __pfx___schedule+0x10/0x10 [ 539.728713][ T31] ? schedule+0x90/0x360 [ 539.736366][ T31] schedule+0x164/0x360 [ 539.745335][ T31] schedule_preempt_disabled+0x13/0x30 [ 539.758362][ T31] __mutex_lock+0x7f7/0x1550 [ 539.768937][ T31] ? __mutex_lock+0x608/0x1550 [ 539.779856][ T31] ? nfsd_nl_listener_get_doit+0x10a/0x5e0 [ 539.790544][T21675] netlink: 'syz.4.3803': attribute type 12 has an invalid length. [ 539.801314][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 539.817572][ T31] ? __nlmsg_put+0xef/0x1b0 [ 539.828650][ T31] ? genlmsg_put+0x137/0x2e0 [ 539.836279][ T31] nfsd_nl_listener_get_doit+0x10a/0x5e0 [ 539.842858][ T31] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 539.849391][ T31] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 539.855435][T21675] netlink: 'syz.4.3803': attribute type 29 has an invalid length. [ 539.860487][ T31] genl_family_rcv_msg_doit+0x22a/0x330 [ 539.880180][ T31] ? __asan_memcpy+0x40/0x70 [ 539.887871][T21675] netlink: 148 bytes leftover after parsing attributes in process `syz.4.3803'. [ 539.893944][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 539.897399][T21675] netlink: 'syz.4.3803': attribute type 1 has an invalid length. [ 539.911210][T21675] netlink: 47 bytes leftover after parsing attributes in process `syz.4.3803'. [ 539.928407][ T31] genl_rcv_msg+0x61c/0x7a0 [ 539.936351][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 539.953381][ T31] ? __pfx_nfsd_nl_listener_get_doit+0x10/0x10 [ 539.964532][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 539.973412][ T31] netlink_rcv_skb+0x232/0x4b0 [ 539.981711][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 539.989251][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 539.999849][ T31] ? down_read+0x270/0x2e0 [ 540.004555][ T31] ? genl_rcv+0xd/0x40 [ 540.008864][ T31] genl_rcv+0x28/0x40 [ 540.013228][ T31] netlink_unicast+0x75c/0x8e0 [ 540.018623][ T31] netlink_sendmsg+0x813/0xb40 [ 540.024363][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 540.029925][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 540.035235][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 540.041178][ T31] ____sys_sendmsg+0x972/0x9f0 [ 540.046093][ T31] ? __might_fault+0xaf/0x130 [ 540.052402][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 540.057808][ T31] ? import_iovec+0x73/0xa0 [ 540.062524][ T31] ___sys_sendmsg+0x2a5/0x360 [ 540.067451][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 540.073149][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 540.078433][ T31] ? futex_wait+0x2a2/0x390 [ 540.083592][ T31] ? __fget_files+0x2a/0x420 [ 540.088300][ T31] ? __fget_files+0x3a0/0x420 [ 540.093390][ T31] __x64_sys_sendmsg+0x1bd/0x2a0 [ 540.098382][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 540.104188][ T31] ? rcu_is_watching+0x15/0xb0 [ 540.109313][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 540.116111][ T31] do_syscall_64+0x174/0x580 [ 540.121711][ T31] ? trace_irq_disable+0x3b/0x140 [ 540.126826][ T31] ? clear_bhb_loop+0x40/0x90 [ 540.131699][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 540.137822][ T31] RIP: 0033:0x7fc99bf9ce59 [ 540.142836][ T31] RSP: 002b:00007fc99cec6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 540.151736][ T31] RAX: ffffffffffffffda RBX: 00007fc99c215fa0 RCX: 00007fc99bf9ce59 [ 540.159770][ T31] RDX: 0000000020040000 RSI: 0000200000000140 RDI: 0000000000000004 [ 540.168445][ T31] RBP: 00007fc99c032d6f R08: 0000000000000000 R09: 0000000000000000 [ 540.178005][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 540.197170][ T31] R13: 00007fc99c216038 R14: 00007fc99c215fa0 R15: 00007ffcac93e1f8 [ 540.205808][ T31] [ 540.209144][ T31] [ 540.209144][ T31] Showing all locks held in the system: [ 540.222610][ T31] 1 lock held by khungtaskd/31: [ 540.228747][ T31] #0: ffffffff8e95cc20 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 540.241266][ T31] 2 locks held by getty/5393: [ 540.246053][ T31] #0: ffff88803668f0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 540.256273][ T31] #1: ffffc900032332e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13a0 [ 540.281645][ T31] 2 locks held by syz.1.2622/16825: [ 540.295714][ T31] #0: ffffffff8fe38628 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 540.304912][ T31] #1: ffffffff8ec8b280 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x141/0x1670 [ 540.315589][ T31] 2 locks held by syz.2.2693/17128: [ 540.321596][ T31] #0: ffffffff8fe38628 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 540.330645][ T31] #1: ffffffff8ec8b280 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_get_doit+0x10a/0x5e0 [ 540.341526][ T31] 3 locks held by kworker/u8:32/20765: [ 540.347057][ T31] #0: ffff88801ae84140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 540.359333][ T31] #1: ffffc9000dfefc40 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 540.370875][ T31] #2: ffffffff8fdc8c00 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 540.380026][ T31] 2 locks held by syz.4.3803/21671: [ 540.385695][ T31] #0: ffffffff8fdc8c00 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 540.396715][ T31] #1: ffffffff8e962f28 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2d0/0x770 [ 540.408048][ T31] [ 540.426241][ T31] ============================================= [ 540.426241][ T31] [ 540.436808][ T31] NMI backtrace for cpu 1 [ 540.436919][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 540.436942][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 540.436955][ T31] Call Trace: [ 540.436964][ T31] [ 540.436973][ T31] dump_stack_lvl+0xe8/0x150 [ 540.437020][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 540.437061][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 540.437124][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 540.437163][ T31] sys_info+0x135/0x170 [ 540.437192][ T31] watchdog+0xfd3/0x1030 [ 540.437239][ T31] ? watchdog+0x1c9/0x1030 [ 540.437276][ T31] kthread+0x389/0x470 [ 540.437308][ T31] ? __pfx_watchdog+0x10/0x10 [ 540.437336][ T31] ? __pfx_kthread+0x10/0x10 [ 540.437363][ T31] ret_from_fork+0x514/0xb70 [ 540.437406][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 540.437432][ T31] ? __switch_to+0xc79/0x1410 [ 540.437498][ T31] ? __pfx_kthread+0x10/0x10 [ 540.437527][ T31] ret_from_fork_asm+0x1a/0x30 [ 540.437574][ T31] [ 540.437582][ T31] Sending NMI from CPU 1 to CPUs 0: [ 540.550906][ C0] NMI backtrace for cpu 0 [ 540.550929][ C0] CPU: 0 UID: 0 PID: 20759 Comm: kworker/u8:26 Not tainted syzkaller #0 PREEMPT(full) [ 540.550950][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 540.551004][ C0] Workqueue: events_unbound toggle_allocation_gate [ 540.551045][ C0] RIP: 0010:insn_get_immediate+0xada/0x1280 [ 540.551085][ C0] Code: c1 e8 03 48 b9 00 00 00 00 00 fc ff df 0f b6 04 08 84 c0 0f 85 e0 02 00 00 45 88 2f 49 bd 00 00 00 00 00 fc ff df 48 8b 3c 24 <42> 0f b6 44 2d 00 84 c0 0f 85 9d 02 00 00 8b 2f 89 ee 81 e6 00 00 [ 540.551111][ C0] RSP: 0018:ffffc9000df9f758 EFLAGS: 00000293 [ 540.551127][ C0] RAX: ffffffff8ba6b679 RBX: 1ffff92001bf3f0f RCX: ffff888056df1f00 [ 540.551141][ C0] RDX: 0000000000000000 RSI: 0000000000000001 RDI: ffffc9000df9f88c [ 540.551153][ C0] RBP: 1ffff92001bf3f11 R08: ffff888056df1f00 R09: 0000000000000003 [ 540.551166][ C0] R10: 0000000000000008 R11: 0000000000000000 R12: ffffc9000df9f87c [ 540.551178][ C0] R13: dffffc0000000000 R14: ffffc9000df9f840 R15: 0000000000000001 [ 540.551191][ C0] FS: 0000000000000000(0000) GS:ffff8881252a0000(0000) knlGS:0000000000000000 [ 540.551217][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 540.551229][ C0] CR2: 0000560867304660 CR3: 00000000537f8000 CR4: 00000000003526f0 [ 540.551246][ C0] Call Trace: [ 540.551253][ C0] [ 540.551267][ C0] ? __kmalloc_node_noprof+0x117/0x7c0 [ 540.551304][ C0] insn_decode+0x30e/0x4f0 [ 540.551321][ C0] ? __kmalloc_node_noprof+0x108/0x7c0 [ 540.551345][ C0] __jump_label_patch+0x114/0x4a0 [ 540.551383][ C0] ? __pfx___jump_label_patch+0x10/0x10 [ 540.551414][ C0] ? __kmalloc_node_noprof+0x108/0x7c0 [ 540.551437][ C0] ? __kmalloc_node_noprof+0x117/0x7c0 [ 540.551460][ C0] ? __kmalloc_node_noprof+0x10d/0x7c0 [ 540.551490][ C0] arch_jump_label_transform_queue+0x69/0x110 [ 540.551519][ C0] __jump_label_update+0x185/0x380 [ 540.551553][ C0] static_key_disable_cpuslocked+0xc5/0x1a0 [ 540.551581][ C0] static_key_disable+0x1a/0x20 [ 540.551598][ C0] toggle_allocation_gate+0x1fe/0x290 [ 540.551625][ C0] ? __pfx_toggle_allocation_gate+0x10/0x10 [ 540.551652][ C0] ? __pfx_autoremove_wake_function+0x10/0x10 [ 540.551687][ C0] ? process_scheduled_works+0xa70/0x1860 [ 540.551705][ C0] ? process_scheduled_works+0xa70/0x1860 [ 540.551723][ C0] process_scheduled_works+0xb5d/0x1860 [ 540.551757][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 540.551779][ C0] ? assign_work+0x3d5/0x5e0 [ 540.551798][ C0] worker_thread+0xa53/0xfc0 [ 540.551832][ C0] kthread+0x389/0x470 [ 540.551854][ C0] ? __pfx_worker_thread+0x10/0x10 [ 540.551870][ C0] ? __pfx_kthread+0x10/0x10 [ 540.551893][ C0] ret_from_fork+0x514/0xb70 [ 540.551918][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 540.551936][ C0] ? __switch_to+0xc79/0x1410 [ 540.551963][ C0] ? __pfx_kthread+0x10/0x10 [ 540.551985][ C0] ret_from_fork_asm+0x1a/0x30 [ 540.552018][ C0] [ 540.855921][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 540.862875][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 540.872034][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 540.882141][ T31] Call Trace: [ 540.885449][ T31] [ 540.888388][ T31] vpanic+0x56c/0xa60 [ 540.892404][ T31] ? __pfx_vpanic+0x10/0x10 [ 540.896974][ T31] ? irqentry_exit+0x218/0x8b0 [ 540.901798][ T31] panic+0xc5/0xd0 [ 540.905536][ T31] ? __pfx_panic+0x10/0x10 [ 540.909981][ T31] ? __pfx_panic+0x10/0x10 [ 540.914421][ T31] watchdog+0x102c/0x1030 [ 540.918828][ T31] ? watchdog+0x1c9/0x1030 [ 540.923290][ T31] kthread+0x389/0x470 [ 540.927376][ T31] ? __pfx_watchdog+0x10/0x10 [ 540.932074][ T31] ? __pfx_kthread+0x10/0x10 [ 540.936701][ T31] ret_from_fork+0x514/0xb70 [ 540.941315][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 540.946466][ T31] ? __switch_to+0xc79/0x1410 [ 540.951184][ T31] ? __pfx_kthread+0x10/0x10 [ 540.955809][ T31] ret_from_fork_asm+0x1a/0x30 [ 540.960617][ T31] [ 540.964575][ T31] Kernel Offset: disabled [ 540.968925][ T31] Rebooting in 86400 seconds..