last executing test programs: 5m35.570424365s ago: executing program 2 (id=3388): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000640)=ANY=[@ANYBLOB="f8000000160001000000000000000000fe8000000000000000000000000000bb"], 0xf8}}, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000300)='syzkaller\x00'}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000040)={r1, 0xe0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r3 = socket$inet_icmp(0x2, 0x2, 0x1) bind$inet(r3, &(0x7f0000000b80)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0xff}}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f000009f580), r4) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r4) r8 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r8, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@bridge_delneigh={0x28, 0x1e, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r10, 0x0, 0x2}, [@NDA_LLADDR={0xa}]}, 0x28}}, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r4, &(0x7f0000000a80)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000740)=ANY=[@ANYBLOB="cc020000", @ANYRES16=r7, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="0800030000000000080003000300000014000200767863616e3100000000000000000000140002007767310000000000000000000000000008000100", @ANYRES32=r6, @ANYBLOB="2000018008000300020000001400020076657468305f746f5f7465616d00000070000180140002006873723000000000000000000000000008000100", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32=r2, @ANYBLOB="0800030002000046716d6498aba19f00140002007369743000040000000081000000004477eae6b3d50f1e080000000000000000", @ANYRES32=r10, @ANYBLOB="0800030002000000"], 0x2cc}, 0x1, 0x0, 0x0, 0x20000840}, 0x0) sendmsg$BATADV_CMD_GET_DAT_CACHE(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="030300f8ffffffffffff0500000008000300", @ANYRES32=r6], 0x1c}}, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000ab9ff0), 0x10) 5m35.45182885s ago: executing program 2 (id=3389): syz_genetlink_get_family_id$tipc2(&(0x7f0000000380), 0xffffffffffffffff) r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000001c0)={'bond0\x00', &(0x7f00000002c0)=@ethtool_cmd={0x26, 0x10000100, 0xffffffff, 0x401, 0x0, 0x5, 0x4, 0x0, 0xb, 0xff, 0x0, 0x8000001f, 0x2, 0x47, 0x0, 0xfffffffd}}) (async, rerun: 64) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x4}}}, @IFLA_OPERSTATE={0x5, 0x10, 0x9}]}, 0x3c}}, 0x0) (async, rerun: 64) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='pids.events\x00', 0x0, 0x0) sendmsg$NL80211_CMD_STOP_NAN(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x0, 0x300, 0x70bd28, 0x25dfdbfb, {{}, {@void, @void}}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x44) 5m35.000404211s ago: executing program 2 (id=3394): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010000100000000000000000004000000", @ANYRES32=0x0, @ANYBLOB="000000000001000014001680100001800c000400feffffff0400000008001b"], 0x3c}}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$AUTOFS_IOC_READY(r3, 0x9360, 0xfffffffffffffff8) close(r2) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x7, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000000000000000000000000007c000000008000009500000000000000db3ffc0f8747c0"], &(0x7f00000005c0)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x1}, 0x94) close(r6) r7 = socket$unix(0x1, 0x1, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x3, 0x6361, 0x5, 0xfffffffd, 0xfffffff3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0xc04c001}, 0x20000804) sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r9, {0x0, 0x19}, {0xb, 0xb}, {0xd, 0x7}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_LOW_RATE_THRESHOLD={0x8, 0xb, 0x1}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x24000050}, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="640000004ec6"}) r10 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) r11 = socket$netlink(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r11, 0x10e, 0x8, &(0x7f0000000400)=0x140, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r11) ioctl$sock_bt_bnep_BNEPGETCONNINFO(r10, 0x800442d3, &(0x7f0000000140)={0x42, 0x3ff, 0x7, @local, 'wg2\x00'}) 5m34.508338923s ago: executing program 2 (id=3397): r0 = socket$nl_generic(0x10, 0x3, 0x10) listen(0xffffffffffffffff, 0x4) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r4], 0x1c}}, 0x4008054) (async) write$nci(r1, &(0x7f00000004c0)=@NCI_OP_NFCEE_DISCOVER_NTF={0x2, 0x1, 0x3, 0x0, 0x4, {0x1, 0x0, "d7ec"}}, 0x7) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x59, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r6, 0x0, 0x48a, &(0x7f0000000040)={0x0, 0xfffeffff}, 0xc) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a300000000040000000160a01000000000000000000010000000900010073797a30000000000900020073797a3000000000140003800800024000000000080001400000000040000000180a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000140003800800024000000009080001400001"], 0xc8}}, 0x0) (async) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r8, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x50) (async) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) (async) r9 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r9, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x70bd26, 0x0, {0xa}, [@RTA_DST={0x8, 0x1, @private=0xa010102}]}, 0x24}}, 0x0) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_SET(r0, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001540)={&(0x7f0000000040)={0x28, r10, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0xfd96}]}]}, 0x28}}, 0x0) 5m33.961980656s ago: executing program 2 (id=3401): r0 = socket$rds(0x15, 0x5, 0x0) connect$rds(r0, &(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0xa) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket(0x200000000000011, 0x3, 0x0) (async) r3 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FILTER(r3, 0x65, 0x1, &(0x7f0000000100)=[{}], &(0x7f0000000180)=0x8) r4 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MIF(r4, 0x29, 0xca, 0x0, 0x4c) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) sendmsg$can_raw(r4, &(0x7f00000002c0)={&(0x7f0000000140)={0x1d, r5}, 0x10, &(0x7f0000000280)={&(0x7f0000000200)=@canfd={{0x1, 0x1, 0x1, 0x1}, 0x3c, 0x3, 0x0, 0x0, "d90987505cadd3fd5680f214a81a7c72cd6bcaec729e8cc75f0ddcda91421ead68204d19040a608b9d69c0c6bb52d5f9c7b761aec2573a888e8aa74c5f813abd"}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000005500e502000000000000000007000000", @ANYRES32=r6, @ANYBLOB="20000100", @ANYRES32=r6], 0x38}}, 0x0) recvfrom$unix(r2, &(0x7f0000000300), 0x0, 0x2, &(0x7f0000000340)=@abs={0x1, 0x0, 0x4e21}, 0x6e) 5m33.029268055s ago: executing program 2 (id=3413): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$caif_seqpacket(0x25, 0x5, 0x1) setsockopt$CAIFSO_REQ_PARAM(r1, 0x116, 0x80, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)={0x14, 0x26, 0x9, 0x80004, 0x80, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x4c010}, 0x4000000) 4m53.656546306s ago: executing program 32 (id=3413): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$caif_seqpacket(0x25, 0x5, 0x1) setsockopt$CAIFSO_REQ_PARAM(r1, 0x116, 0x80, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)={0x14, 0x26, 0x9, 0x80004, 0x80, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x4c010}, 0x4000000) 2m30.742468293s ago: executing program 0 (id=5066): ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000000)={0xffffffffffffffff, 0x7f, 0x3, 0x4}) ioctl$SIOCGETSGCNT(r0, 0x89e1, &(0x7f0000000040)={@remote, @dev={0xac, 0x14, 0x14, 0x3c}}) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000080)={0x0, 0x7}, &(0x7f00000000c0)=0x8) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TESTMODE(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x74, r2, 0x800, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x8, 0x41}}}}, [@NL80211_ATTR_TESTDATA={0x4a, 0x45, "e9bfbaf96ffb8d3fffed86c6f2053a432316fc0255b32e6f3ecaa6f5d54578bdf4a7ac0be1ef6605f68e50489af0f39a47913f112a8ac7e04d67cc5f2b664f17bf71f0f3478b"}]}, 0x74}, 0x1, 0x0, 0x0, 0x840}, 0x2000c000) recvfrom$unix(r0, &(0x7f00000002c0)=""/207, 0xcf, 0x10062, &(0x7f00000003c0)=@file={0x1, './file0\x00'}, 0x6e) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r0, &(0x7f0000000500)={&(0x7f0000000440), 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x34, r2, 0x100, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x4, 0x15}}}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0x34}}, 0x80c0) getsockname$unix(r0, &(0x7f0000000540), &(0x7f00000005c0)=0x6e) syz_emit_ethernet(0x43, &(0x7f0000000600)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x11}, @void, {@mpls_mc={0x8848, {[{0x2}, {0x8, 0x0, 0x1}, {0x6}, {0x639}, {0x9, 0x0, 0x1}], @llc={@llc={0x42, 0x7e, "ad", "bdee0488d862cc3d44a79189686e0cbf6294c84de5e95f98977918c053d2"}}}}}}, &(0x7f0000000680)={0x1, 0x1, [0x8a9, 0xfdb, 0x87d, 0x5dc]}) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f00000006c0), &(0x7f0000000700)=0x14) syz_genetlink_get_family_id$tipc(&(0x7f0000000740), r0) getsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, &(0x7f0000000780)=0x800, &(0x7f00000007c0)=0x2) sendmsg$IPVS_CMD_DEL_SERVICE(r0, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x7c, 0x0, 0x400, 0x70bd29, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x60}, @IPVS_CMD_ATTR_DEST={0x48, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@broadcast}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x800}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_WEIGHT={0x8}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x80000001}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}]}, 0x7c}, 0x1, 0x0, 0x0, 0x40}, 0xc081) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000940)=0x5, 0x4) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000980)={r1, 0x1ff}, 0x8) setsockopt$MRT_FLUSH(r0, 0x0, 0xd4, &(0x7f00000009c0)=0xe, 0x4) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r0, 0x4058587a, &(0x7f0000000bc0)={{r0, &(0x7f0000000a00)='%[\x00', 0x15c481, &(0x7f0000000a40)={@_ha_fsid, {0x9, 0x4, 0xffffff7f, 0x4}}, 0x401, &(0x7f0000000a80), &(0x7f0000000ac0)=0xa65}, {[0x5, 0x7, 0x73580ebe, 0xff]}, 0x1, 0x99, &(0x7f0000000b00)=""/153}) write$tcp_congestion(r4, &(0x7f0000000c40)='hybla\x00', 0x6) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000cc0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000e80)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000d00)={0x108, r2, 0x300, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0xfffffffc, 0x3e}}}}, [@NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_MESH_SETUP={0x94, 0x70, [@NL80211_MESH_SETUP_IE={0x70, 0x3, "c0d436d39fb871be1d97349b1e9aaca9150b3bc0ced182270966989cd4d7aa58a8b7e3088b2b510038c18f842e9ce70ceec3392444d50baa1cd3d08987e7526180e066776c5845bdc5fe8b2333ce82606deb9939ca7cba9a963faa82bcf82352e2e4a6429ec08f992b855eb0"}, @NL80211_MESH_SETUP_USERSPACE_AMPE={0x4}, @NL80211_MESH_SETUP_USERSPACE_MPM={0x4}, @NL80211_MESH_SETUP_ENABLE_VENDOR_SYNC={0x5, 0x6, 0x1}, @NL80211_MESH_SETUP_AUTH_PROTOCOL={0x5, 0x8, 0x2}, @NL80211_MESH_SETUP_ENABLE_VENDOR_SYNC={0x5, 0x6, 0x1}]}, @NL80211_ATTR_BSS_BASIC_RATES={0x7, 0x24, [{0x30, 0x1}, {0x1b, 0x1}, {0x6c}]}, @NL80211_ATTR_MESH_SETUP={0x40, 0x70, [@NL80211_MESH_SETUP_ENABLE_VENDOR_PATH_SEL={0x5}, @NL80211_MESH_SETUP_USERSPACE_AUTH={0x4}, @NL80211_MESH_SETUP_AUTH_PROTOCOL={0x5, 0x8, 0xe}, @NL80211_MESH_SETUP_USERSPACE_MPM={0x4}, @NL80211_MESH_SETUP_USERSPACE_AMPE={0x4}, @NL80211_MESH_SETUP_ENABLE_VENDOR_PATH_SEL={0x5}, @NL80211_MESH_SETUP_ENABLE_VENDOR_PATH_SEL={0x5}, @NL80211_MESH_SETUP_AUTH_PROTOCOL={0x5}, @NL80211_MESH_SETUP_ENABLE_VENDOR_PATH_SEL={0x5}]}]}, 0x108}, 0x1, 0x0, 0x0, 0x40040d0}, 0x4040) write$tun(r0, &(0x7f0000000ec0)={@val={0x0, 0x1a}, @void, @ipv6=@generic={0x0, 0x6, "3193db", 0x1068, 0x2c, 0x1, @empty, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, {[@hopopts={0xff, 0xb, '\x00', [@jumbo={0xc2, 0x4, 0xffffffff}, @enc_lim={0x4, 0x1, 0x81}, @calipso={0x7, 0x38, {0x0, 0xc, 0x7f, 0x6, [0x9, 0x2, 0xd, 0x9, 0x0, 0x5]}}, @ra={0x5, 0x2, 0x2}, @hao={0xc9, 0x10, @loopback}, @enc_lim]}], "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"}}}, 0x1094) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r4, 0x400c6615, &(0x7f0000001f80)={0x0, @aes128}) ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0xc0385869, &(0x7f00000020c0)={0xffffffffffffffff, &(0x7f0000001fc0)='[-}\x00', 0xc0000, &(0x7f0000002000)={@_ha_fsid={[0xffff, 0x7]}, {0x5, 0x2, 0xffffffff, 0x3}}, 0x8, &(0x7f0000002040)={@_ha_fsid}, &(0x7f0000002080)}) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r6, 0x84, 0x23, &(0x7f0000002100)={r1, 0x2}, 0x8) ioctl$TUNDETACHFILTER(r6, 0x401054d6, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r6, 0x6611) ioctl$TUNGETVNETHDRSZ(r4, 0x800454d7, &(0x7f0000002140)) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) accept4$llc(r4, &(0x7f0000002180)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f00000021c0)=0x10, 0x0) 2m30.527303997s ago: executing program 0 (id=5069): r0 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000100)={{0x2, 0x4e22, @empty}, {0x304, @multicast}, 0x5a, {0x2, 0x4e25, @private=0xa010101}}) 2m30.282332614s ago: executing program 0 (id=5073): r0 = syz_init_net_socket$llc(0x1a, 0x3, 0x0) sendto(r0, 0x0, 0x0, 0x0, &(0x7f0000000980)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x4e64, @broadcast}, 0x3, 0x3, 0x4001, 0x2}}, 0x80) 2m30.131684944s ago: executing program 0 (id=5074): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) (async) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r2 = accept4$netrom(r1, &(0x7f0000000240)={{0x3, @default}, [@rose, @null, @remote, @null, @rose, @bcast, @rose, @null]}, &(0x7f00000002c0)=0x48, 0x0) (async) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, &(0x7f0000000080)="441f0803000000e8c94ef56491ee", 0xe) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000014c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r3, 0xfeffff, 0xe80, 0x3f000002, &(0x7f0000000700)="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", 0x0, 0xf0, 0x0, 0xf0, 0xffffff0c}, 0x40) (async, rerun: 64) writev(0xffffffffffffffff, &(0x7f0000000b80)=[{&(0x7f0000000840)="a9", 0x1}], 0x1) (async, rerun: 64) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0x6, 0x4, 0xfff, 0x9, 0x0, 0xffffffffffffffff, 0x7}, 0x50) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x2000}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000080850000008200000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) (async) r8 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0xa, 0x9, 0x8, 0x2}, 0x48) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000711221000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x6, &(0x7f0000000180)=@framed={{0x18, 0x2}, [@map_fd={0x18, 0x3, 0x1, 0x0, r8}, @call={0x85, 0x0, 0x0, 0x26}]}, &(0x7f0000000000)='GPL\x00'}, 0x90) (async) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xc, 0xe, &(0x7f0000001700)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000001c0), 0xfffffedf, 0x10, &(0x7f0000000040), 0x0, 0x0, 0xffffffffffffffff, 0xd}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r9, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) getsockopt$bt_hci(r7, 0x84, 0x7d, &(0x7f0000000840)=""/4127, &(0x7f0000000000)=0x101f) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000400)={'syztnl1\x00', &(0x7f0000000380)={'syztnl1\x00', 0x0, 0x20, 0x10, 0x6, 0x0, {{0x9, 0x4, 0x1, 0x2, 0x24, 0x4, 0x0, 0x6, 0x2f, 0x0, @loopback, @multicast1, {[@end, @noop, @timestamp_addr={0x44, 0xc, 0x8c, 0x1, 0x4, [{@dev={0xac, 0x14, 0x14, 0x28}, 0x7}]}]}}}}}) r11 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000580)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x44, 0x44, 0x4, [@float={0xe, 0x0, 0x0, 0x10, 0x1c}, @var={0x2, 0x0, 0x0, 0xe, 0x2, 0x1}, @fwd={0x6}, @const={0xa}, @var={0x9, 0x0, 0x0, 0xe, 0x4}]}, {0x0, [0x61, 0x30]}}, &(0x7f00000004c0)=""/111, 0x60, 0x6f, 0x420f, 0x3ff, 0x10000, @value=r6}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x6, 0x3, 0xfffffff7, 0xf, 0x2208, r5, 0x8, '\x00', r10, r11, 0x5, 0x3, 0x4}, 0x50) (async, rerun: 64) ioctl$int_in(r2, 0x5421, &(0x7f0000000340)=0xfa36) (rerun: 64) pipe(&(0x7f0000000040)={0xffffffffffffffff}) ioctl$sock_inet_sctp_SIOCINQ(r12, 0x5761, 0x0) (async, rerun: 32) bind$unix(r12, &(0x7f0000000700)=@abs={0x0, 0x0, 0x4e23}, 0x6e) (rerun: 32) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)=ANY=[@ANYBLOB="48000000100005ff00000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r13, @ANYRESHEX=r1], 0x48}}, 0x0) (async) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async, rerun: 32) ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, &(0x7f0000002240)={0x0, 0x3, 0x5, 0x1}) (async, rerun: 32) ioctl$BTRFS_IOC_BALANCE_V2(r9, 0xc4009420, &(0x7f0000002640)={0x10, 0x8, {0x5, @struct={0x7, 0x3}, 0x0, 0x8, 0x7, 0x5, 0x8001, 0x7, 0x0, @struct={0x8, 0xfd7}, 0x90000000, 0x9, [0x0, 0x4, 0x2, 0x0, 0xe, 0x8000000000000000]}, {0x8001, @usage=0x9, 0x0, 0x4, 0x6, 0x80, 0x3, 0xff, 0x86, @struct={0x7, 0x6}, 0x2, 0x1a, [0x5, 0x9, 0x4, 0xffffffffffffffff, 0x6, 0x4ec]}, {0x5, @usage=0x76c, 0x0, 0xd, 0x3, 0x9, 0x1, 0x5, 0x4, @struct={0x0, 0x2}, 0x6, 0x3, [0xfffffffffffffffa, 0x6, 0xffff, 0xffffffff, 0x5, 0x9]}, {0x0, 0x3, 0x9}}) 2m29.907890408s ago: executing program 0 (id=5077): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xfc, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27}, 0x48) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_LP_INTERVAL={0x8}, @IFLA_BOND_MIN_LINKS={0x8}]}}}]}, 0x44}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x3, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x2, 0x4, 0x0, 0x1, 0x8f}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1e}, 0x90) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r2) sendmsg$IEEE802154_LLSEC_DEL_KEY(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x3c, r3, 0x533, 0x70bd28, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x4}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0202}}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc081}, 0x4000) sendmsg$IEEE802154_START_REQ(r1, &(0x7f0000000fc0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000140)={0x4c, r3, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x11}, @IEEE802154_ATTR_BCN_ORD={0x5, 0x17, 0xfb}, @IEEE802154_ATTR_BAT_EXT={0x5, 0x1a, 0x2}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa2}, @IEEE802154_ATTR_SF_ORD={0x5, 0x18, 0x5}, @IEEE802154_ATTR_COORD_REALIGN={0x5, 0x1b, 0x5}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x13}]}, 0x4c}}, 0x40) 2m27.912125096s ago: executing program 0 (id=5079): r0 = socket$igmp6(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000000)={{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x2000}, 0x5c) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x20, 0x4, &(0x7f0000000900)=ANY=[@ANYBLOB="18000000010000000000000000000000791200000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$kcm(0xa, 0x922000000001, 0x11) sendmsg$kcm(r2, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x6, @mcast1, 0x3, 0xffffffff}, 0x80, 0x0}, 0x20008060) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x14, 0x26, 0x301, 0x70bd24, 0x25dfdbfd, {0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x4004004}, 0x4000) 2m12.823676258s ago: executing program 33 (id=5079): r0 = socket$igmp6(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000000)={{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x2000}, 0x5c) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x20, 0x4, &(0x7f0000000900)=ANY=[@ANYBLOB="18000000010000000000000000000000791200000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$kcm(0xa, 0x922000000001, 0x11) sendmsg$kcm(r2, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x6, @mcast1, 0x3, 0xffffffff}, 0x80, 0x0}, 0x20008060) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x14, 0x26, 0x301, 0x70bd24, 0x25dfdbfd, {0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x4004004}, 0x4000) 16.745652862s ago: executing program 5 (id=6528): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) (async) sendto$inet6(r0, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e24, 0x10, @mcast2}, 0x1c) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_SET_SERVICE(r1, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x60, 0x0, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x9}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x2}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}]}, 0x60}, 0x1, 0x0, 0x0, 0x20040004}, 0x40085) (async, rerun: 64) r2 = socket(0x15, 0x5, 0x0) (rerun: 64) connect$l2tp6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x40007, 0x200004}, 0x20) (async) setsockopt$inet_udp_int(r2, 0x11, 0x67, &(0x7f0000000040)=0x1, 0x4) (async, rerun: 32) sendmmsg$inet6(r0, &(0x7f0000000a80)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000580)='B', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000600)="ac", 0x1}], 0xfe}}], 0x2, 0x404c444) (rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="b700000081130000bfa30000000000000703000000feffff720af0fff8ffffff71a4f0ff0000000071106500000000001d300500000000004704000001ed00000f030000000000001d44020000000000620a00fe040400007203000000000000b500f7ff000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a8641aa05a1336b3b4c4becea710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fe51bef7af9aa0d7d600c095199fe3380d28e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51bf900000000000000d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343cccc953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93020000000000000080e69db384ac7eeedcf2ba3a9508f9d6aba582a896a9f1e096df6ecea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00e10000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d490cba8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e1461173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b583cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f006694d461b76a58d88cf0f520310a1e80dc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6032399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c00000000000000f59dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ed1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef67cf0216e2d81e6127bd9d7fab28800eaab2355992f8ce4cd38add4b272c0bee4076ca4847ffa691cf78fb7ec212bad3bef29f577ea7159b7f3025b3d977ff7c9102"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xb, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) 16.475344932s ago: executing program 5 (id=6532): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) (async) listen(r2, 0x10040) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) (async, rerun: 32) syz_emit_ethernet(0x36, &(0x7f00000004c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x32}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x67, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010001, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2, 0x0, 0x0, 0x10}}}}}}, 0x0) (async, rerun: 32) syz_emit_ethernet(0x38, &(0x7f0000000a00)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x32}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x2a, 0x67, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010001, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x4}, {"9f01"}}}}}}, 0x0) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000001000010700000000200000000a0000000c0002006e6c3830323131"], 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async, rerun: 32) recvmmsg(r4, &(0x7f0000001440)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000011c0)=""/70, 0x46}, {&(0x7f00000000c0)=""/43, 0x21}, {&(0x7f0000003c80)=""/4106, 0x104d}, {&(0x7f00000015c0)=""/4096, 0x1000}], 0x4}, 0x1801}], 0x1, 0x10020, 0x0) (rerun: 32) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r0, &(0x7f0000000140)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000240)={&(0x7f00000000c0)={0x28, r3, 0x2, 0x3ff, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x634, 0x1}}}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x108b}]}, 0x28}}, 0x10) (async, rerun: 64) ioctl$XFS_IOC_AG_GEOMETRY(r0, 0xc080583d, &(0x7f0000000180)={0xa1, 0xad, 0x62f8, 0x9c9, 0xd8fc, 0x80, 0x80000000, 0x400}) (async, rerun: 64) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000006c0)={0x2c8, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x160, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x15c, 0x3, 0x0, 0x1, [{0x4}, {0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '&\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, 'mk\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ethtool\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1400}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ethtool\x00'}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'sit0\x00'}]}, {0xf4, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'sit0\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '--{\'\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x509}, @ETHTOOL_A_BITSET_BIT_NAME={0xc1, 0x2, '\x13\x19\xae\xd9\xe7\xfc\xcb9\x16\xbf\xf9\f\xb5\x83\xf59e\xef\xdd\x9f\x98\x06\x8dRLTuQ\xc8\xc4\x1alB N\xe5==\x0e\xe0\x1d\r\xcf\x15q\x13R\x91\xaf\xd2\xe0q\xd1\x0f\x9d\x18\xbf\x9f\xbc\x88\xef\x86\x9c}\x05\xd0\xe7\x93\xd9\xb5\xe8\x95\xd9\x99\x19\xd80\xd5\xe4\xd9\x02b\xe3\xe3\"\x1d\x81\xde\x19n3\x1c\xfc\x1drP\x96\x17\xbda\x1bW\xd7Ia\xe5$qW\x84\xec\xef7\xe1\x7f\x9d\xdcj\x1e\xc8\xde\xa4\f\bZ)\xa9[I\x1b\r\xf8Fs\x7fJ\x92\x8e\xd6\xca9^\xf7n\n\xf6V\xaf}_\x04>\x16\xfc,\xc0B\x1avK\x8c\x82\x15\x83\xccX\xb0\xa1F\x1enK\x8d\xe3e\x8a\xcf\xe8\xb6\x8d\v\xd8\x95\x12G\xe8_\xc1\x7f'}]}]}]}, @ETHTOOL_A_FEATURES_WANTED={0x154, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xffffff81}, @ETHTOOL_A_BITSET_VALUE={0x48, 0x4, "9b154a51aec8ddc2d6d580b24fcde27a7387eb66430c33fd21af7dd5d43aa1244437f7e9e67cd7501dbe34608a5db6f4d2e1b47d3c3f0682e324e765de84835f0afa795a"}, @ETHTOOL_A_BITSET_VALUE={0xed, 0x4, "f79377dcd148027cd496f742bafbb6ee2ac6f69771df1d15bda1116fd74fd4ec44f3bbe605585f1cca22b597c9ba92e3a35888822934b9971dbb5dfa7a76c653f8abb52b5ef8bf3694270282501873637113e17f67d180cbe83e447a58294a5aa4b79c2f077b773c10e1854f2f4b2558f98e8b5642aef6489609dca0259461381480e40f90a553376b914c21327e600451e8899df288806d44ac40d34884517b681f3767eb11ee5bceff6eb0ffbc29395a6fe13408f1f4a90c474f8a170c0d701ada3cb9084ad50f8553a386cabdedb15ae5620a607f07fa2ec17d001a1d77a87c71a51cf482556c37"}, @ETHTOOL_A_BITSET_VALUE={0xe, 0x4, "30e75686f7f66f581b3d"}]}]}, 0x2c8}}, 0x0) 16.340147254s ago: executing program 5 (id=6533): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c000000140021010000000000000000233f00fd", @ANYRES32=0x0, @ANYBLOB="1400020020010000000000000000796c00000000"], 0x2c}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) r2 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_AUTH_KEY(r2, 0x84, 0x17, &(0x7f00000010c0)={0x0, 0x2, 0x4, "5b5157dc"}, 0xc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x44) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000630100e75dcbba009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmmsg$inet_sctp(0xffffffffffffffff, 0x0, 0x0, 0x8000) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001d40)=@base={0x12, 0x6, 0x4, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r4, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r3}, 0x20) r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f0000000340)={0x0, 0x26, "1465def59b3b957d1d651ddd14779ec51d4f0c5e350e2f83f367fb8e1edb7a72ae3084021d5c"}, &(0x7f0000000380)=0x2e) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f00000003c0)={r7, 0x7b8a}, &(0x7f0000000400)=0xc) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r8) ioctl$IOCTL_GET_NCIDEV_IDX(r6, 0x0, &(0x7f00000000c0)) sendmsg$NFC_CMD_DEV_UP(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYRES16, @ANYRES64=r6, @ANYRES32=r7, @ANYRES16=r5], 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x840) write$nci(r6, &(0x7f0000000440)=ANY=[@ANYBLOB="40051069"], 0x32) bind$inet(0xffffffffffffffff, 0x0, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r10, @ANYBLOB="010000000000ffdbdf2505000000080002000570"], 0x1c}, 0x1, 0x0, 0x0, 0x20040011}, 0x20004080) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000100)={0x2c, r10, 0x0, 0x70bd2d, 0x25dfdbfd}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x801) r11 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(r11, &(0x7f0000000140)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYRESHEX=r11], 0x14}}, 0x22040004) ioctl$sock_SIOCINQ(r11, 0x541b, &(0x7f0000000040)) ioctl$XFS_IOC_COMMIT_RANGE(0xffffffffffffffff, 0x40585883, &(0x7f0000000240)={r11, 0x0, 0xfffffffffffffff8, 0x10001, 0x9, 0xf, [0x9, 0x4, 0x1fc0000000000000, 0x40, 0x1, 0x7a8a]}) 16.154291414s ago: executing program 5 (id=6534): r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtaction={0x16c, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x158, 0x1, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x20}, @TCA_SAMPLE_PARMS={0x18}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x20}]}, {0x4}, {0xb}, {0xc, 0x4}}}, @m_xt={0x58, 0x17, 0x0, 0x0, {{0x7}, {0x14, 0x2, 0x0, 0x1, [@TCA_IPT_INDEX={0x8, 0x3, 0x90b}, @TCA_IPT_HOOK={0x8, 0x2, 0x4}]}, {0x1f, 0x6, "f62f5842d5a9b8e8524ed558e3b65cc1fc86a749027b865caa0a1c"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_skbmod={0xa4, 0x1c, 0x0, 0x0, {{0xb}, {0x10, 0x2, 0x0, 0x1, [@TCA_SKBMOD_SMAC={0xa, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}}]}, {0x6a, 0x6, "2b45b9197ecf7bcbd6d5d0b89e829e9d769f0a6fcdf2f493491fd74e2215c1ff57261a537b40d82cf2a7e591517e2575dfd2d9175e10cab5f40f0e8cd5d063c0ec791f379873f196923734be8ec74e54b7c9aee8b3ba3986a11dc9d804cd96293f161fe9ffc4"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1}}}}]}]}, 0x16c}}, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtaction={0x16c, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x158, 0x1, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x20}, @TCA_SAMPLE_PARMS={0x18}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x20}]}, {0x4}, {0xb}, {0xc, 0x4}}}, @m_xt={0x58, 0x17, 0x0, 0x0, {{0x7}, {0x14, 0x2, 0x0, 0x1, [@TCA_IPT_INDEX={0x8, 0x3, 0x90b}, @TCA_IPT_HOOK={0x8, 0x2, 0x4}]}, {0x1f, 0x6, "f62f5842d5a9b8e8524ed558e3b65cc1fc86a749027b865caa0a1c"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_skbmod={0xa4, 0x1c, 0x0, 0x0, {{0xb}, {0x10, 0x2, 0x0, 0x1, [@TCA_SKBMOD_SMAC={0xa, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}}]}, {0x6a, 0x6, "2b45b9197ecf7bcbd6d5d0b89e829e9d769f0a6fcdf2f493491fd74e2215c1ff57261a537b40d82cf2a7e591517e2575dfd2d9175e10cab5f40f0e8cd5d063c0ec791f379873f196923734be8ec74e54b7c9aee8b3ba3986a11dc9d804cd96293f161fe9ffc4"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1}}}}]}]}, 0x16c}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x7, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="620ac4ff000000007110b0000000000095"], &(0x7f0000000480)='GPL\x00'}, 0x90) 13.336156397s ago: executing program 5 (id=6536): bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000580)={'veth0_to_team\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000004c0)={r0, r2, 0x25, 0x0, @void}, 0x10) (async) r3 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000140)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x4, 0x2, 0x1}}) (async) r4 = socket$netlink(0x10, 0x3, 0x15) writev(r4, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) (rerun: 64) sendmsg$NL80211_CMD_SET_STATION(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x5c, r6, 0x1, 0x0, 0x3, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STA_EXT_CAPABILITY={0x31, 0xac, "421cc925b00842bffedb292a2b0271c4c5cb61fc535fddf2502b6fccf768253efcbc1c86d648227b0884bbd4c7"}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$NL80211_CMD_GET_MPP(r4, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x44, r6, 0x200, 0x70bd2d, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x48) 13.211923772s ago: executing program 5 (id=6540): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_XFRM_SPNUM={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_XFRM_SPNUM={0x8, 0x4, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xd4}}, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000005c0)={0x0}, &(0x7f0000000600)=0xc) syz_open_procfs$namespace(r2, &(0x7f0000000640)='ns/mnt\x00') setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x4e20, 0x0, @mcast1}}}, &(0x7f0000000580)=0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000480)={r3, @in={{0x2, 0x4e21, @multicast2}}, [0x3, 0x9, 0x1, 0xd00, 0x101, 0x9, 0x8ad1, 0x4, 0xf54c, 0xfffffffffffffffd, 0xbaa, 0x5, 0x5, 0x5, 0x6ac3]}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) r5 = bpf$PROG_LOAD(0x23, &(0x7f00000003c0)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x468, 0x0, 0xffffffff, 0xffffffff, 0x120, 0xffffffff, 0x398, 0xffffffff, 0xffffffff, 0x398, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [0x0, 0x0, 0xffffffff], [], 'macvlan0\x00', 'erspan0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xc}}, @common=@inet=@ecn={{0x28}, {0x1, 0x10, 0x2, 0x4}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x2}}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @broadcast}, [0x0, 0x0, 0x0, 0xffffffff], [0x0, 0xffffffff, 0xff], 'erspan0\x00', 'gre0\x00', {}, {}, 0x0, 0x7, 0x5}, 0x0, 0x258, 0x278, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0xaf53, 0x5, 0x4, 0x0, 0x7, 0x3ff}}}, @common=@inet=@policy={{0x158}, {[{@ipv4=@multicast1, [0x0, 0x0, 0xff000000], @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0xffffffff, 0x0, 0xff000000, 0xffffffff], 0x4d5, 0x3500, 0x3a, 0x0, 0x13, 0xd}, {@ipv4=@local, [0xff000000, 0xff000000, 0xff], @ipv6=@private1, [0x100000100, 0xffffff00, 0xffffffff, 0xffffffff], 0x4d6, 0x3507, 0xf6, 0x1, 0x6, 0x1b}, {@ipv6=@rand_addr=' \x01\x00', [0xffffff, 0xff, 0xffffffff], @ipv4=@local, [0x0, 0xffffffff, 0xff, 0xffffffff], 0x4d3, 0x3502, 0x6c, 0x1, 0xd, 0x15}, {@ipv4=@multicast2, [0xff000000, 0xff000000, 0xffffffff, 0xffffffff], @ipv4=@dev={0xac, 0x14, 0x14, 0xf}, [0x0, 0x0, 0xff000000], 0x4d6, 0x0, 0x6, 0x1, 0x6, 0xafcf8a57df96f1de}], 0x1}}]}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x4c8) ioctl$BTRFS_IOC_SET_FEATURES(r5, 0x40309439, &(0x7f0000000680)={0x1, 0x1, 0x14}) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r0, &(0x7f0000000a40)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000200)="db", 0x1}], 0x1}}], 0x1, 0x40040) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000004780)=[{&(0x7f0000000380)="cdca", 0x2}], 0x1}}, {{0x0, 0x0, &(0x7f0000006100)=[{&(0x7f0000005d40)='}.', 0x2}], 0x1}}], 0x2, 0x4044044) 3.015591854s ago: executing program 4 (id=6599): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000980)=@security={'security\x00', 0xe, 0x4, 0x448, 0xffffffff, 0x278, 0x20, 0x118, 0xffffffff, 0xffffffff, 0x378, 0x378, 0x378, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xd8, 0x118, 0x0, {}, [@common=@frag={{0x30}, {[0x8, 0x1ff], 0x3, 0x10, 0x1}}]}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0xa067, 0x8, 0x80000001, 0x1ff, 0x0, 0x52, 0x0, 0x5]}}}, {{@uncond, 0x0, 0x118, 0x160, 0x0, {}, [@common=@icmp6={{0x28}, {0x11, "4dd4", 0x1}}, @common=@hbh={{0x48}, {0x6043, 0x2, 0x1, [0x2, 0x4, 0x4f, 0x0, 0x3, 0x5, 0x7ff, 0x1, 0x6, 0x401, 0x9, 0x7, 0x3ff, 0x3, 0x0, 0x800], 0x3}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x7, 'syz1\x00', {0xfffffffffffffffe}}}}, {{@uncond, 0x0, 0xd0, 0x100, 0x0, {}, [@common=@hl={{0x28}, {0x2, 0x3}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x3, 0x4, 0x2}, {0x1, 0x4, 0x5}, 0x6f17, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4a8) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000001100), 0xffffffffffffffff) sendmsg$FOU_CMD_GET(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000001280)={&(0x7f0000000000)={0x38, r2, 0x0, 0x70bd29, 0x0, {}, [@FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @local}, @FOU_ATTR_TYPE={0x5, 0x4, 0x3}]}, 0x38}}, 0x0) (async) r3 = socket(0x2a, 0x2, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f00000001c0)={0x0, 0x4}, &(0x7f00000005c0)=0x8) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_emit_ethernet(0x6a, &(0x7f00000002c0)={@broadcast, @multicast, @val={@void, {0x8100, 0x0, 0x0, 0x4}}, {@ipv6={0x86dd, @icmpv6={0x7, 0x6, "c172f5", 0x30, 0x3a, 0xff, @ipv4={'\x00', '\xff\xff', @local}, @local, {[], @param_prob={0x4, 0x2, 0x0, 0xffbf, {0x5, 0x6, "54d03a", 0x400, 0x88, 0x1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00'}}}}}}}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @sched_cls=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r5, 0x0, 0xe80, 0xe80, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r6 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000000c0), 0xffffffffffffffff) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r7}, 0xc) (async) ioctl$sock_SIOCBRDELBR(r0, 0x89a1, &(0x7f0000000200)='dvmrp1\x00') (async) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r4, &(0x7f0000000400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000180)={&(0x7f0000000500)={0x88, r6, 0xf30, 0x70bd29, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast2}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x43}}, @NLBL_UNLABEL_A_SECCTX={0x2b, 0x7, 'system_u:object_r:crond_unit_file_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}, @NLBL_UNLABEL_A_SECCTX={0x24, 0x7, 'system_u:object_r:net_conf_t:s0\x00'}]}, 0x88}}, 0x40004) 2.820441535s ago: executing program 1 (id=6601): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2, 0x12, 0xf7, 0x3, 0x2, 0x0, 0x70bd29, 0x1}, 0x10}}, 0x4084) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c00000010003df600"/20, @ANYRES32=0x0, @ANYBLOB="000000e8ff07000014000300000000000000000000000000000000001800128008000100707070000c00028008000100", @ANYRES32=r2], 0x4c}}, 0x0) 2.634949231s ago: executing program 3 (id=6602): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000001000)=ANY=[@ANYRESHEX=r0, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000ffff00000000000000006c000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000480001007467723136302d67656e65726963000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000480003"], 0x180}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000001180)=@nat={'nat\x00', 0x1b, 0x5, 0x360, 0x308, 0x1e8, 0xffffffff, 0x1e8, 0x0, 0x420, 0x420, 0xffffffff, 0x420, 0x420, 0x5, 0x0, {[{{@uncond, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x2, @rand_addr=0x64010100, @multicast2, @port=0x4e22, @icmp_id=0x66}}}}, {{@ip={@broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xffffff00, 0xff000000, 'macvtap0\x00', 'team0\x00', {}, {}, 0xc, 0x6}, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x1, @private=0xa010100, @remote, @gre_key=0x100, @gre_key=0xf0}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0xc, @multicast2, @rand_addr=0x64010102, @gre_key=0x80, @gre_key=0x8}}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @empty, 0x100, 0xd, [0x32, 0x30, 0x3c, 0x9, 0x2c, 0x9, 0xb, 0x4, 0x1a, 0x36, 0x3f, 0x20, 0x2e, 0x2b, 0x1, 0x1b], 0x0, 0x400, 0x3}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c0) r2 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000240)={'syztnl2\x00', &(0x7f0000000140)={'ip6_vti0\x00', 0x0, 0x2f, 0xf, 0x8, 0x0, 0x7, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast2, 0x8, 0x40, 0x7, 0x7}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000400)={'syztnl0\x00', &(0x7f0000000380)={'syztnl1\x00', 0x0, 0x4, 0xb, 0x7, 0x3, 0x12, @mcast2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x24}}, 0xff4e, 0x80, 0x9, 0x1}}) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xa}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xfffffffe, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x40a4) sendmsg$nl_route_sched(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x7fffe, {0x0, 0x0, 0x0, r8, {0x0, 0xffe0}, {0xb, 0xb}, {0x2, 0xb}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x6, 0x80b, 0x9, 0x1, 0xc}, 0xb, 0x1, 0x8000032, 0x5, 0x9, 0x7, 0x9, 0x7, 0xfd, 0x7, {0xffff1c72, 0x23, 0x3, 0x8, 0x9, 0x7583}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x44040}, 0x8000) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000500)={'team0\x00', 0x0}) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000540)={0x0, @remote, @private}, &(0x7f0000000580)=0xc) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000840)={&(0x7f00000005c0)={0x25c, r2, 0x300, 0x70bd2a, 0x25dfdbfe, {}, [{{0x8, 0x1, r3}, {0x1a8, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x23c6424f}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x970}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xa}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r5}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r8}}}]}}, {{0x8, 0x1, r9}, {0x90, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2e7}}, {0x8, 0x6, r10}}}]}}]}, 0x25c}, 0x1, 0x0, 0x0, 0x4000015}, 0x8f0) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x7, 0x4, 0x8, 0x2}, 0x48) bpf$MAP_LOOKUP_ELEM(0x4, &(0x7f0000000080)={r11, &(0x7f0000000300), 0x0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f00000002c0)=ANY=[@ANYBLOB="050000000000000071117700000000008510000002000000850000005600000095000000000000009500a50500000000eefd02f7e4c7ef6bfd6b7e160d5a59898098d03978903a3ecb0443b5069f63b76ffe38996114079c34e953ab2fc1f800c7ff9cdad0b490700b4586082326cabc459587bf937e83c29ff4e4a47e30f1b31c886030af93d6bfa6aa21216810d61d6e970aa4c96e0f77e00ff165"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x94) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000000)={0x3ff, 0x3, 0x8, 0x8, 0xffff, 0x10}) 2.568754779s ago: executing program 4 (id=6603): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="1100000004000000040000000200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00'], 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={r0, &(0x7f0000000000)="f4", &(0x7f00000000c0)=""/85}, 0x20) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket(0xb, 0x3, 0x0) ioctl$sock_ifreq(r2, 0x89f2, &(0x7f0000000040)={'bond0\x00', @ifru_names='bond_slave_1\x00'}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000300)=@gcm_128={{0x303}, "7c80690ea8c8123e", "f92dafad9e3b473a1eaac151fe41ea97", "00000100", "74aff2072572aca8"}, 0xfe64) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, 0x0, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="200000003e00090b000000000008000003"], 0x20}}, 0x0) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f0000000240)=0xcd2, 0x4) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYRES16=r2], 0x7c}}, 0x0) r5 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) setsockopt$ax25_int(r5, 0x101, 0x1, 0x0, 0x0) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) r7 = socket$inet6(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000000)=@ipv4_newaddr={0x28, 0x14, 0x509, 0x70bd27, 0x25dfdbfb, {0x2, 0x1f, 0x0, 0xfe, r9}, [@IFA_LOCAL={0x8, 0x2, @multicast1}, @IFA_RT_PRIORITY={0x8, 0x9, 0x107}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040014}, 0x0) sendto$inet6(r7, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) socket$kcm(0x29, 0x5, 0x0) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f0000000600)=ANY=[@ANYBLOB="e8000000", @ANYRES16=r6, @ANYBLOB="10062bbd7000fedbdf25060000006c000180140002006c6f000000000000000000000000000014000200766c616e30000000000000000000000008000300010000001400020065727370616e30000000000000000000140002006e6574706369300000000000000000000800030000000000080003000500000050000180080003000000000014000200766c81a115ce2874ab5dcf616e31000000000000000000000014000200776c616e3000000000000000000000001400020070696d72656731000000000000000000080003000200000018000180140002007465616d3000"/235], 0xe8}, 0x1, 0x0, 0x0, 0x84}, 0x24020000) r10 = socket$alg(0x26, 0x5, 0x0) bind$alg(r10, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(sm3)\x00'}, 0x58) 2.41587925s ago: executing program 1 (id=6604): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xc, &(0x7f0000000240)=@assoc_value, &(0x7f0000000080)=0x8) (async) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r3, 0x84, 0x6d, &(0x7f0000000000)={r4}, &(0x7f00000002c0)=0x8) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f0000000280)={r4, 0x7, 0x6, [0x24, 0x2ba, 0xb, 0x0, 0xfffb, 0xffff]}, 0x14) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000000c0)={0x0, @rand_addr, @multicast1}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=@setlink={0x28, 0x13, 0x100, 0x4000, 0x25dfdbff, {0x0, 0x0, 0x0, r5}, [@IFLA_TXQLEN={0x8, 0xd, 0xfffffffa}]}, 0x28}, 0x1, 0x0, 0x0, 0x8001}, 0x24000040) (async) sendmsg$nl_route(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=@setlink={0x28, 0x13, 0x100, 0x4000, 0x25dfdbff, {0x0, 0x0, 0x0, r5}, [@IFLA_TXQLEN={0x8, 0xd, 0xfffffffa}]}, 0x28}, 0x1, 0x0, 0x0, 0x8001}, 0x24000040) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'erspan0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=@newqdisc={0x24, 0x25, 0x4ee4e6a52ff56541, 0x1, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x3}}}, 0x24}, 0x1, 0x0, 0x0, 0xc000}, 0x0) 2.223487037s ago: executing program 3 (id=6605): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$netrom(r0, &(0x7f0000000080)={{0x3, @bcast}, [@bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000005c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x10}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xac}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2c, 0xd, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ANNOUNCE(r3, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x2c, r4, 0x400, 0x70bd25, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x380000}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4004}, 0x4) 2.205051073s ago: executing program 1 (id=6606): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto]}, {0x0, [0x0, 0x0]}}, 0x0, 0x34}, 0x28) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000000000000010000000100000000500000004000000160000eb0200007a0000000000000098be"], 0x0, 0x2d}, 0x20) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000000)={r2, 0x4}, 0x8) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}]}, &(0x7f0000000180)=0x10) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000200)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f00000000c0)={r5, @in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, &(0x7f00000001c0)=0x9c) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0x3, 0x28011, r6, 0x0) mmap(&(0x7f0000867000/0x2000)=nil, 0x2000, 0x0, 0x11, r6, 0x1000) r7 = socket$inet_udp(0x2, 0x2, 0x0) r8 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$6lowpan_control(r8, &(0x7f0000000040)='connect aa:aa:aa:aa:aa:11 0', 0xb) setsockopt$inet_int(r7, 0x0, 0x17, &(0x7f0000000000)=0xfffffffd, 0x4) setsockopt$inet_int(r7, 0x0, 0x17, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYRES64=r0], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f00000000c0)={0xa, 0x1}, 0x8}, 0x94) r9 = socket$kcm(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000007b80), r10) sendmsg$NLBL_MGMT_C_ADDDEF(r10, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000007c40)={&(0x7f0000007bc0)={0x34, r11, 0xa5c59466aaff822d, 0x70bd2d, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @remote}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010101}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x48805}, 0x64040) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r9, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0x5}}) 1.936436288s ago: executing program 3 (id=6607): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x8001}, 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SIOCGSTAMPNS(r1, 0x8907, &(0x7f0000000000)) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'macvtap0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="340000001000050025bd7000fadbdf2500000000", @ANYRES32=r5, @ANYBLOB="00000000010400000a0001"], 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x4000) close(r2) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d10300001400000011000134dec15ac6905a5aff1987efacf6a22e7f615ece7a83fb15f912b40a756aa8758be4a50d229f212ebc7a4eaa42a11c08989d0ed825ff2f9d4a08444418eebb5f1bc8f7c8603c908768a573fda03fb4c6412690cb9fd2539efdd13680b0645557f9c879a4c40eaa2b9bea2ed26b0211ca9ebcb7c51091223a7dfb1609c10906d3b446c69a1c59fc886abc31fe39832588b1f0a265d406981913ac71f05d7ae737244edfd05778174cdd8f305b76b7adcffead8f06696be436775fff071456d3d447bcba1c3b808e47a12dd599228b064849737b10eee2268b1a05ac36a4b3fd6ddee3311f6eeb12621a3cdc9b813f1f0d664246a3f7437bae5ad86b7b7d59bd273001854a9bb19c8fb6ba286a68399eea21f73ddb28c2d045e291d8c311263e4b611f6798ea5a351d6e7b5cb8d024bb37fbf0b8798e134bc493193d08cb791852c525b4f5ba6338b009438155914b13b4b930212eb614dd77acee887cbafc3e4215f13034f53885952f7d206636bc5e495f734a1c4eee8d784e1aace2625588"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c00018006000100d1a3a700080003400000000114000000110001"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000055) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1400000010007b0000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000780)=ANY=[@ANYBLOB="e904a20000000180c200000e08"], 0x0) 1.659674267s ago: executing program 4 (id=6608): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r1 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r0, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x1}}, 0x40) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x8, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000200)={r2, &(0x7f0000000080), &(0x7f0000000000)=""/10, 0x2}, 0x20) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x601}], 0x1}, 0x9fc) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000680)={r1, 0x58, &(0x7f0000000600)}, 0x10) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x41071, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x19, 0x4, 0x4, 0x7ff, 0x0, 0xffffffffffffffff, 0x7f}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000004340)={0x6, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000540)={r4, 0x8, 0x25, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff27, 0x0, 0x0}, 0x19) r5 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4) 1.658482788s ago: executing program 3 (id=6609): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x7, [@struct={0x10, 0x2, 0x0, 0x4, 0x0, 0xc959, [{0x9, 0x3, 0x4}, {0x3, 0x0, 0x5}]}]}, {0x0, [0x0, 0x5f, 0x61, 0x61, 0x0]}}, &(0x7f0000000140)=""/10, 0x43, 0xa, 0x1, 0x0, 0x10000}, 0x28) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r0}, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1b, 0x5, &(0x7f0000000080)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x79, 0x10, 0xa2}, [@btf_id={0x18, 0x6, 0x3, 0x0, 0x3}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x41100, 0x0, '\x00', 0x0, @fallback, r0, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x2, 0x1}, 0x10}, 0x94) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000280)={0x1b, 0x0, 0x0, 0x6, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0, 0x3, 0x1}, 0x50) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, &(0x7f0000000400)={r0, &(0x7f0000000300)='GPL\x00', 0x10000, &(0x7f0000000340)={@_ha_fsid={[0xa93, 0xfff]}, {0x1, 0x6, 0x6, 0xe}}, 0x9, &(0x7f0000000380), &(0x7f00000003c0)=0x5}) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', 0x0}) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f0000000300)={r6, 0x1, 0x6, @remote}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000305000000000000000000cf0000", @ANYRES32=0x0, @ANYBLOB="03000000000000002000128008000100677265001400028008000600ac14142e08000700e000030a08000a00", @ANYRES32], 0x48}, 0x1, 0x0, 0x0, 0x24040000}, 0x2000800) sendmmsg(r7, &(0x7f0000000000), 0x4000000000001f2, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{0x1, 0xffffffffffffffff}, &(0x7f0000000480), &(0x7f00000004c0)=r1}, 0x20) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000740)={'batadv_slave_0\x00', 0x0}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000008c0)=@bpf_ext={0x1c, 0x30, &(0x7f0000000540)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xc5, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@cb_func={0x18, 0x9, 0x4, 0x0, 0xfffffffffffffffd}, @alu={0x4, 0x1, 0xa, 0xa, 0x8, 0x2, 0x4}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}, @func={0x85, 0x0, 0x1, 0x0, 0x8}, @btf_id={0x18, 0x2, 0x3, 0x0, 0x2}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r8}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000006c0)='syzkaller\x00', 0x6, 0x32, &(0x7f0000000700)=""/50, 0x40f00, 0x0, '\x00', r9, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000780)={0x4, 0x1}, 0x8, 0x10, &(0x7f00000007c0)={0x2, 0x5, 0xcd8, 0x3}, 0x10, 0x1ed56, r1, 0x9, 0x0, &(0x7f0000000800)=[{0x4, 0x2, 0xf, 0x2}, {0x0, 0x3, 0x10, 0x2}, {0x0, 0x2, 0x0, 0x4}, {0x3, 0x3, 0xa, 0x7}, {0x3, 0x3, 0x0, 0x6}, {0x0, 0x3, 0x0, 0x7}, {0x5, 0x1, 0xf}, {0x0, 0x4, 0x9, 0x1}, {0x0, 0x1, 0x9, 0x1}], 0x10, 0x8}, 0x94) 1.57362877s ago: executing program 6 (id=6610): ioctl$XFS_IOC_START_COMMIT(0xffffffffffffffff, 0x80585882, &(0x7f0000000040)={0xffffffffffffffff}) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000100)=0x401, 0x4) (async) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x97ffffffffffffff) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x11, 0x4, 0x4, 0x9}, 0x50) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0xd, 0x2, 0x4, 0x3, 0x0, r2, 0xfffffffe}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r4}, &(0x7f0000000840), &(0x7f0000000880)=r3}, 0x20) (async) sendmsg$IPCTNL_MSG_EXP_GET(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB="240000000102010100000000000000000a0000050e000600736e6d715f74726170000000"], 0x24}, 0x1, 0x0, 0x0, 0x40080}, 0x40000) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f00000021c0)=ANY=[@ANYBLOB="b700000060000000bca3000000000000240300001afeffff620af0fff8ffffff69a4f0ff000000001f030000000000002e0a0200000000002604fdffffff000a61147900000000001d430000000000007a0a00fe0000001f6114040000000000b503f7fff80000009500000000000000033bc065b78111c6dfa041b63af4a3912435f1a864a7aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19b0161e91a7168e5181554a090f300020000fe275daf51efd601b6bf01c8e8b1fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e65440000000000000000028610643a98d9ec21ead2ed51b104d4d91af25b845b9f7d08d123deda88c658d42ecbf28bf7076c15b463bebc72f526dd70252e79166d858fcd0e06dd31af9612fa402d0b11008e59a5923906f88b53987ad1714e72ba3a54f0c33d39000d06a59ff616236fd9aa58f0177184b6a89adaf17b0a6041bdef728f5089048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10076443d643649393bf52d2105bd901128c7e0ec82701c8204a1deeed4155617572652db036dc2869f478341d02d0f5ad94b081fcd507acb4b9c67382f13d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdbb9893a5de817101ab062cd54e67051d355d84ce97bb0c6b6a595e487a2cc47c0efbb2d71cde2c10f0bc6980fe78683ac5c0c31032599dd273863be9261eee52216d009f4c52048ef8c126aeef5f510a8f1aded94a129e4aec6e8d9ab06faffc3a15d91c2ea3e2e04cfe031b287539d0540059fe6c7fe7cd8697502c7596566d674e425da5e7f009602a9f61d3804b3e0a1053abdc31282dfb15eb6841bb64a1b3045024a982f3c48153baae244e7bf573eac34b781337ad5901a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44022a579dfc0229cc0dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc48899b212c55318294270a1ad10c80fef7c24d47afcc829ba0f85da6d888f18ea40ab959f6074ab2a40d85d1501783a7ab51380d7b4ead35a385e0b4a26b702396df7e0c1e02b88c114f244a9bf93f04bf072f0861f5c0b000000000000eedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba3401e6a52acb1188883ad2a3b1832371fe5bc621426d1ed01b389708165b9cdbae2ed9dc7358f0ebadde0b727f27feeb7464dcc536cbae2f5c7d951680f6f2f9a6a8346962a350845ffa0d82884f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010ae20e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d648532869d701723fedcbada1ee7baa19faf67256b56a41fd355b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201efeb6dc5f6a9037d2283c42efc54fa84323afc4c10eff462c8843187f1dd48ef0900000000000000ff0f4000000000f00700e89a56fe8e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538c6ee6ba65893ff1f908ba7554ba583ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738612e4fee18a22da19fcdb4c1011e32f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427180d61542c2571f983e96635600000554f327a3535e7c7542799493c31ac05a7b57f03ca91a033a2a30ca99e969d6fd09dc28ebc15edb4d91675767999d146aef7799738b292fd64bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a794963342aece449a0d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2869291b7d12096833d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ecab5d232f89fe0120f64c62e8e3ed8bcb45202c204bbec8d722824c0ebca8db1ea4a05e41f6016ab5bbe4fe7ff5d785d0128171c90d9900ca2532b0f9d01c4b45294fbba468df3e1b393cb4e62e753b4172ba7ac1f2b51c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068c5adfcb0d7fd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a881192292ffff5392ab3d1311b82432662806add87047f601fa888400000000000000000000000000006acc19808d7cf29bc974b0ea92499a41b9b9a7c2bca311a28ee4952f2d325a56397c78f12205db653a536f0100e0eda300a43a13bd1b9f3322405d1efd78e578dc6b3fb84f3738a4b6caa800000087efa51c5d95ecba4e50e529d1e8c89600e809dc3d0a2f65579e23457949a50f2d0455cf799b3746979f99f6a1527f004f37e84fb478199dc1020f4beb98b8074bf7df8b5e783637daf121f175a81cffff4ac55a4385e9a617aa6c8e10d4202c5afeb06e2f9115558ea12f92d7ae633d44086b3f03b20d54abc46271a30f1240de52536941242d23896ab74a3c6670fdc49c14f34fc4eadd6db8d80eba439772bf60a1db18c472dafc5569adc282928d2a1ffe29f1a57d3f18f4edaeb5d37918e6fddcd821da67a0785585a4443440dc65600e64a6a274000000000000000000000000000000000000000000000009dd14b38f2f4426d7cf5075047c31f6ce6adddfe3ac649c0643c8bfbeb14ba1fd7a485aa893915cf81e29aaf375e904bbe52691a4120260ffcd8f1d04166d291ebcef893e1b9ccb6797d0646fe0e7274434f28efb43e06e64f0698caca42f4e6018a455736c940000002b13dac4a90faa109f0e87cc94e3efb649692456463ca74aa6ad4bf50c1acb3928143be1c1023a375e528285544d0064b98646f3109e9a4942ce42c6e7ec84b664f6c2770803f10baa804a707f0a1fcbfc309381aeba191950bae71f37f1eb7ceeffb3c0547ac6571603adbfde4c8b5f8d7f4b854441613633b48865b65bdc415e1e0dcf672d68cf4cebf04f4bc1eebf560a26d3b332240d450fdb0a9a69f432e277f3a0386eb2bd1305c821c64757f786b79fef54dbe64c67d73934bc80b2133fb3c04cc7ea48bf97a6243c9f95dcbddecf45f008f1822c7868e1ff5a3cff5d6b6898335792749df7b1f51e91f8c1c3b1b93b33aaa3fab69cef08a9f6f6cf39dea3d878b2ed42545421970cc426e644332bc956d1c6adefdf0ede2c5c94aa632646ae225accdf031f611d01622921f1b922a5ac887cca3136133dce8d9f5f4da7bed2ea5d94362200000000000000000000f296b0c1484e5f781ad26bff696b05ff0a5e2270e07e18b04273bd4075ea38ab463bfa6a0d213c3ffad44d2a376def42e41e9fc3167a257e040fa7cf32c221aaac6cfdeb33c27500001a0000000000000000000017350000c11ae694b0f7a4f9c2f6790044a357e785af6e153d5f1ea460af92c7cbbd6295afe740f5e154346d483e0d10522a7a945b93fb705b95b6aae27a8fab1e6984c8bdc12360627137ab6737b68ab08acb29a74dc36b51209cfbc87f61182bbeb2772e9d5a1ffc477179be481ffe46a4ce86be0b1f8eee42a611a3d44ca450b14586ed63dd92005c79e4a8ab8a94f0b74903580ac987fd637c80d6c7d0de4614195e40d797c0348dd70f36a220e8b3710fb5358c27e90793bcb9ee6319342c4b239ca8cbc6fc83d32e6eb62ad92e43991f2447be9c2a1ae1119eafb901a43d57e885116d19aa152bfb89f8d0b2516f80120a1cddff771657f3d0288ec3899f1e3ba0151c4037148fb479de703fd52b6573349c28d1b107d859b4961324c17756dde99de1924a1d2b7095d34a55060f47f4407d89acf9f285b20c2e6b3d0491d0d3591b0d94713332b6b79c8297117b0d14eff64e0aca8a4b4aa773d8fba1217e9519952419bb9dd998d0ec870ff00b6d556018602738fbc6cec89d6dd13cf55b96f6fe9a137d2d6a56ad78e52c23541320d8579c5ab42bc261a781fd14126c146a0aac4221839a4b9bbf61e4bba695a41e2109eba8e40c370267cc51ffadbd15cafc97a4d3edfdcb9b5729307c6bdaf7b69325fb05fa8a9869de01fdee477d71bf3e36d1d9019edfa27aae24b632f251df210c86a18fae731ecb8b0d48357378caf2b6789509b1bacfd4fa812fc341875cfa5e798bbf59770000000000000000c8a594ea3c3347962d9113b1fecdfad5a8da641053f02e49456f5d21674521e67a5b18ea451eccf69dd6af928d2d68da9304a296c22fdcea26498d26229110b1aade386b113045033a6188d56e675564d8cb8d5b40114b0f5bf15dd64c9ece60b8588ee8777d0ea8f4713b2584e6c7d90f9e93348e17723ba9ab8ae790f74cc41ae5795d35f3cec40dff485d2802c08611454d9ea784a205bcc07ec26f906f3cf45bb37014ab6f22af6213618e242b283ea9d3f0677ee598072ec06f7170009d92bb7eddd12c378dfd3e74ec056ee83eef666423d934fc5908c9ff98715218a5964f1e00000000426ac9588e27aefe307f49662990ee823568bbc2f89596ced7c6c52d76b8096f1848410843b93fd404f535be474f456778b5ef85abb8fc2336abd5ea64a6efea8a5aca0015499b88ae780a7bae4df603bd3c72808cf300440b1b638a6640f7de8d0d82f386c4dd317e11c1e89fac1fa9bceb50fad686ffbb5f7d79565271add99821c3601653bf6d4091ce8e0af3ab3a82a2735abb21d675d21f0a65caeb3213db39c9d55a35c1d588a732ee0b3d3a09c7786bc50b014802027d1da4a2a0fde4672d8dccd9fa000000000000697d1f90ddf1f320292d9fa4d81dc97f9fd7088d29edb2473b5284227936edf9f00b6deddc45841b6c54cd3741c95fe628f31ae0bf7619817735688fa26ce52c368e5ac02bdd46f10eae05da628e8d"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x5}, 0x8, 0x10, &(0x7f00000000c0), 0x10}, 0x94) 1.506439498s ago: executing program 4 (id=6611): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="e80000006c00010029bd7000fcdbdf2500000000", @ANYRES32, @ANYBLOB="001000008000000008000f002000000014003500726f7365300000000000000000000000a40034801400350070696d367265673000000020000000001400350076"], 0xe8}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="6400000010000305160000001dc76dcd00000000", @ANYRES32=0x0, @ANYBLOB="00000000000000004400128009000100626f6e6400000000340002800500010004000000050016000000000008001c000000000005000c00000000000a001a"], 0xc3}, 0x1, 0x100000000000000}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="6400000010000305160000001dc76dcd00000000", @ANYRES32=0x0, @ANYBLOB="00000000000000004400128009000100626f6e6400000000340002800500010004000000050016000000000008001c000000000005000c00000000000a001a"], 0xc3}, 0x1, 0x100000000000000}, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) accept4(r1, 0x0, 0x0, 0x0) (async) r2 = accept4(r1, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000680), r2) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000680), r2) sendmsg$alg(r2, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000cc0)=[{&(0x7f0000000880)="99", 0x1}], 0x1, 0x0, 0x0, 0x8890}, 0x1) 1.374166403s ago: executing program 6 (id=6612): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r1, 0x6, 0x4, 0x0, &(0x7f0000001640)) setsockopt$sock_int(r0, 0x1, 0x1, &(0x7f00000002c0)=0x5f53, 0x4) getsockopt$inet6_int(r0, 0x29, 0x10, &(0x7f0000000000), &(0x7f0000000040)=0x4) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet6(0xa, 0x3, 0x7) setsockopt$sock_int(r3, 0x1, 0x35, &(0x7f0000000040)=0x1, 0x4) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000180), r2) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000001740)={0x0, 0x6, &(0x7f0000001700)={&(0x7f0000000440)={0x30, r4, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0xc, 0x4, 0x0, 0x1, [{0x4}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_DOI={0x8}]}, 0x30}}, 0x0) bind$inet6(r0, 0x0, 0x0) 1.276104704s ago: executing program 1 (id=6613): r0 = socket$inet_udplite(0x2, 0x2, 0x88) socket$inet6_udplite(0xa, 0x2, 0x88) (async, rerun: 32) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'bridge0\x00', &(0x7f0000000380)=@ethtool_regs={0x4, 0x0, 0x50, "86bd932787872660f4460188c2a626a89d202ad99b3b09592e6ad130e93cc6cf6e568e08ea8a0555c749be51c5f6e1ec39ae4c58860c262d83898c4127b38abd8f245efc522a0f5eea950dc1e7b633f4"}}) (async, rerun: 32) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000000) (async) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r1, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x4}) (async) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) (async) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) r5 = socket(0x10, 0x3, 0x0) (async, rerun: 32) r6 = socket$packet(0x11, 0x3, 0x300) (rerun: 32) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000016c0)=@newqdisc={0x154, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0x3}, {0xffff, 0xffff}, {0xfff3, 0xd}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x124, 0x2, [@TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x8000, 0x4, 0x7, 0x1d, 0x17, 0x9}}]}}]}, 0x154}, 0x1, 0x0, 0x0, 0x10}, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r8], 0x1c}}, 0x840) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) (async) write$nci(r2, &(0x7f0000000380)=@NCI_OP_RF_INTF_ACTIVATED_NTF={0x1, 0x1, 0x3, 0x5, 0x9, @b={0x7f, 0x1, 0x6, 0x1, 0x1, 0xf, 0x1, {0x2, "24b3"}, 0x1, 0x7, 0x6, 0x1}}, 0x12) ioctl$XFS_IOC_GETPARENTS(0xffffffffffffffff, 0xc028583e, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_netdev_private(r1, 0x89f4, &(0x7f0000000000)) r9 = socket$isdn(0x22, 0x3, 0x11) syz_emit_ethernet(0x2e, &(0x7f00000004c0)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x3, 0x0, 0x20, 0x0, 0x0, 0x0, 0x2f, 0x0, @rand_addr, @broadcast}, {0x0, 0x883e, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x7, 0x0, @void}}}}}}}, 0x0) (async, rerun: 64) ioctl$sock_inet_SIOCSIFADDR(r9, 0x8916, &(0x7f0000000340)={'erspan0\x00', {0x2, 0x4e20, @local}}) (async, rerun: 64) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x4001, 0x3, 0x2b8, 0x148, 0x0, 0x148, 0x0, 0x148, 0x220, 0x240, 0x240, 0x220, 0x240, 0x7fffffe, 0x0, {[{{@ip={@loopback, @local, 0x0, 0x0, 'ip6gretap0\x00', 'nicvf0\x00', {}, {}, 0x88, 0x3, 0x10}, 0x0, 0xe8, 0x148, 0x0, {}, [@common=@inet=@multiport={{0x50}, {0x2, 0xa, [0x4e21, 0x4e20, 0x4e23, 0x4e20, 0x4e22, 0x4e22, 0x4e22, 0x4e22, 0x4e23, 0x4e20, 0x4e22, 0x4e24, 0x4e22, 0xb07, 0x4e20], [0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0xfe]}}, @inet=@rpfilter={{0x28}, {0x2}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0x85d, 0xf, [0x10, 0x32, 0x1e, 0x32, 0x202b, 0x25, 0x3f, 0x2e, 0x19, 0x22, 0x2c, 0x3d, 0x7, 0x3f, 0x1e, 0x31], 0x0, 0x2, 0x2}}}, {{@ip={@rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xff, 0x0, 'wg0\x00', 'lo\x00', {0xff}, {}, 0x2e, 0x3, 0x1}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0xfff, 0x7e, 0x1c, 'netbios-ns\x00', 'syz0\x00', {0x3}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x318) 1.264481005s ago: executing program 6 (id=6614): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x439, 0x70bd26, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_LINK_NETNSID={0x8, 0x25, 0xffffffff}]}, 0x9a}}, 0x0) r1 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000540)=@newqdisc={0x3c, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r2, {0x0, 0xa}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0xc, 0x2, [@TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x3}]}}]}, 0x3c}}, 0x0) 1.095976551s ago: executing program 4 (id=6615): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vxcan0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000000c0)={'wg2\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01002dbd70000000000010000000180001801400020076657468315f746f5f626f6e6400000005000e"], 0x34}, 0x1, 0x0, 0x0, 0x20040804}, 0x4044890) (async, rerun: 64) bind$inet(r5, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) (rerun: 64) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @empty}, 0x10) (async) sendto$inet(r5, &(0x7f0000000240)="eeacd1590a1b7c1800116f0e1c50d349646202606b1af541010001003a6ba290e7f9ab7d54bcf4266995d23517390e1c6ee325f819a8ee6f31d3598dc7e86c14417361c619662c730a92ce6509ffffff7f9d858257717c343c44060e8a6ff69a7de0f400000000496efc367cd7f8228b", 0xfffffffffffffcc4, 0x40841, 0x0, 0xffffffffffffff32) (async) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000380)='htcp', 0x4) recvfrom$inet(r5, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) (async) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r4, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0xfffffff9}, @TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5, 0xb, 0x11}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) (async) r8 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) setsockopt$packet_add_memb(r8, 0x107, 0x1, &(0x7f00000001c0)={r9, 0x1, 0x6, @local}, 0x10) setsockopt$packet_drop_memb(r8, 0x107, 0x2, &(0x7f0000000040)={r9, 0x1, 0x6, @local}, 0x10) (async) r10 = socket$netlink(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000080)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newqdisc={0x3c, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r12, {0x0, 0x8}, {0xffff, 0xffff}, {0x0, 0x5}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x0, 0xfffffff7}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80d1}, 0x34008098) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000001c0)={'ip6tnl0\x00', &(0x7f0000000100)={'ip6_vti0\x00', r1, 0x29, 0xf5, 0x80, 0x7f, 0x2, @private1, @private0={0xfc, 0x0, '\x00', 0x1}, 0x700, 0x8000, 0xe, 0x7f}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newtaction={0x17d8, 0x30, 0x48b, 0x70bd26, 0x40000000, {}, [{0x3c, 0x1, [@m_ctinfo={0x38, 0xd, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x6}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc}}}]}, {0x1690, 0x1, [@m_mirred={0x13c, 0x1d, 0x0, 0x0, {{0xb}, {0x64, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0xfffffffb, 0x4, 0x10, 0x3}, 0x4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x3, 0x4, 0x6, 0x0, 0x9}, 0x2, r1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x3, 0x9c4, 0x8, 0x0, 0x5}, 0x5, r2}}]}, {0xae, 0x6, "0ec8d69e298728aecb8c434e2282175d2e322fdea057bd295dc859cd7ba560fafd527f2fad0a501cbc62427968e0bb41af685a39ae03ded1377ec6a01a2332f3e0e0a5461c0809dea41012d2965b193ba675631fd42298fced636013460921de140b5f04ee01500594df1f7f3b8af1758b733de77e54dc8b3c4f526b20c6040b64a2afe67b9ba1cfd82e0425cf40eb0f1144a4dacf690e529f9cec73858fe99496221897f8f2bfff28d5"}, {0xc}, {0xc, 0x8, {0x2}}}}, @m_mpls={0x106c, 0xf, 0x0, 0x0, {{0x9}, {0x40, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x4, 0x8, 0x8, 0x3, 0x81}, 0x2}}, @TCA_MPLS_BOS={0x5}, @TCA_MPLS_TTL={0x5, 0x7, 0x3}, @TCA_MPLS_TTL={0x5, 0x7, 0x6}, @TCA_MPLS_TC={0x5, 0x6, 0x1}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1}}}}, @m_ctinfo={0x90, 0x4, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0x81, 0x0, 0x0, 0x3, 0xa22}}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x5}]}, {0x44, 0x6, "b33ad764b84b61d3f8c304b75cc36c2031083c284e8119f5eaa6c93474b19382798bf87262bc3a51a95de3e3f05caa7e139699af33c3193d151d32790c83b676"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_nat={0xb8, 0xf, 0x0, 0x0, {{0x8}, {0x54, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x4, 0x4, 0x8, 0x1, 0x5}, @rand_addr=0x64010102, @remote, 0xffffffff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x4, 0x3, 0x3, 0xfffffffb}, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xff}}]}, {0x3f, 0x6, "c75e15064653de0f2f4dac170de5f3e31d367e6f85ca810758a85962c00c33a5ccb8e1f3b6c7d518aee801601a381c43f76efe5353b49f53c25e0b"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_gact={0xfc, 0xe, 0x0, 0x0, {{0x9}, {0x88, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x1ff, 0x5, 0x8, 0x7fff, 0x16a7}}, @TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x1, 0x6, 0x3c, 0xa}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x3c, 0x5}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0xc9}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x1537, 0x20000000}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x2495, 0x2}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0xb33, 0xffffffffffffffff}}, @TCA_GACT_PARMS={0x18, 0x2, {0x2, 0x9, 0x1, 0xff, 0x600}}]}, {0x4a, 0x6, "c54c975334e71f9753d3dca5e3bc86300e7e91f0b7059d036d81fb16f770359994c847b9e2a59966b419b6862b4986187f935f7e6a56e296dd95a7a614677dcc2b7da6ae1245"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_connmark={0xc8, 0x18, 0x0, 0x0, {{0xd}, {0x90, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x9, 0x9a4, 0x8, 0x1, 0xac}, 0x9}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xfffffffa, 0x234, 0x4, 0x0, 0x4}, 0x4}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xfffffffb, 0x3, 0x0, 0x7, 0x3}, 0x1}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1, 0x7, 0x20000000, 0xa, 0xde}, 0x6}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x7, 0x3, 0x10000000, 0x1, 0x80000000}, 0x4}}]}, {0xa, 0x6, "26f3b701a562"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_ife={0x108, 0x2, 0x0, 0x0, {{0x8}, {0x74, 0x2, 0x0, 0x1, [@TCA_IFE_SMAC={0xa, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2d}}, @TCA_IFE_PARMS={0x1c, 0x1, {{0xc0000000, 0xb3, 0x7, 0x8, 0x8}}}, @TCA_IFE_DMAC={0xa, 0x3, @multicast}, @TCA_IFE_SMAC={0xa, 0x4, @remote}, @TCA_IFE_SMAC={0xa, 0x4, @broadcast}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x3, 0x2, 0x10000000, 0x1, 0x30d}}}, @TCA_IFE_TYPE={0x6, 0x5, 0x200}]}, {0x6e, 0x6, "f3ef94c44a37021e1ecd8fd4b3b2f023cf013fd8b80e909fcab7b7b82addd7ca9e14a543b8c8c5f72561f3e3742818f784576eae4d13084d27dedb9b39b08138bba9f200bb33b45cd391bbb046491c713472da7260cec71126ba23792da4e26c3da7ca03d042e75eec3e"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_skbmod={0xd0, 0x1, 0x0, 0x0, {{0xb}, {0x10, 0x2, 0x0, 0x1, [@TCA_SKBMOD_DMAC={0xa, 0x3, @random="858a82943097"}]}, {0x98, 0x6, "25499556aefbca325965a247521d0462a405a597c6a4490fc31b75b314bb1749f3699b68d51faa638130aab92459bee8d6730e6d84ca678bb3e13ad8195259b40a6ba25e886c3f6ff804bdaa59630217bf920b942059aaa675e37e650576ca9840078a6a6a2180cff77ff94e7fd474ab28623a8cad0772e1dbeb5ca28415b35553e37f133d8eea5acd24a756a1329688c4d28f0f"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2}}}}]}, {0xf8, 0x1, [@m_mirred={0xf4, 0x1d, 0x0, 0x0, {{0xb}, {0xc4, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x2, 0x7, 0x30, 0x5}, 0x1, r1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x4, 0x8e, 0x7, 0x7fffffff, 0x4}, 0x4, r4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x8000, 0xffffff37, 0x20000000, 0x2, 0x5}, 0x2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x7fff, 0xfffffe01, 0x1, 0x2, 0x1}, 0x3, r9}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x2, 0xfffffff9, 0x5b2300b7c18e1618, 0x5, 0x7}, 0x2, r12}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x3, 0x2, 0xffffffffffffffff, 0x100, 0x1}, 0x3, r13}}]}, {0x6, 0x6, 'QQ'}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}, 0x17d8}}, 0x200481d5) (async, rerun: 32) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="340000003e0007010000000000000000017c00000400fc800c0001800600060065580000080002"], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) (rerun: 32) 1.095244809s ago: executing program 3 (id=6616): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bf8200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r1, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) listen(r1, 0xfff) (async) r2 = accept4(r1, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_STATUS(r2, 0x84, 0xe, &(0x7f0000000400)={0x0, 0x473, 0x1c000, 0x81, 0x81, 0xff07, 0x8, 0x8, {0x0, @in6={{0xa, 0x4e22, 0x587, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xfff}}, 0x2000, 0xff, 0x1, 0x8, 0x401}}, &(0x7f0000000280)=0xb0) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x7, 0x4, 0x8, 0x3ff, 0x0, 0x1}, 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r4}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r3, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) 1.094656405s ago: executing program 1 (id=6617): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, 0x0, 0x0) (async) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) (async, rerun: 32) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000180)={0x0, 0x3, 0x8000, 0xd, 0x800, 0x401, 0x61d, 0x8000, {0x0, @in6={{0xa, 0x4e23, 0x4, @mcast2, 0xa}}, 0x0, 0x12, 0x3, 0xfffffff7}}, &(0x7f0000000240)=0xb0) (rerun: 32) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000800)={r3, 0xd86}, &(0x7f0000000840)=0x8) (async) r4 = openat$cgroup_ro(r1, &(0x7f0000000380)='blkio.bfq.avg_queue_size\x00', 0x0, 0x0) preadv(r4, &(0x7f0000000140)=[{&(0x7f0000000280)=""/241, 0xf1}], 0x1, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=@newtfilter={0x43c, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, 0x0, {0x5}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_basic={{0xa}, {0x40c, 0x2, [@TCA_BASIC_POLICE={0x408, 0x4, [@TCA_POLICE_RATE={0x404, 0x2, [0x3, 0x8, 0x62, 0x2, 0x0, 0xc, 0x2, 0x7fff, 0x0, 0xffffff70, 0x19, 0xffffffa9, 0x2, 0x7, 0x80000001, 0x7, 0x3, 0x36, 0xc, 0x6, 0x6, 0x5d0bef1f, 0x400, 0x1, 0x837, 0xffffffff, 0x9fec, 0x401, 0x68, 0x9, 0xdd64, 0x1, 0x4, 0x8001, 0xfffffffe, 0x2, 0x0, 0x200, 0xfff, 0xfffffff1, 0x7, 0x4, 0xf, 0x7, 0x7469, 0xb, 0x2, 0x200, 0xff32, 0x6, 0xca, 0x4ec1, 0x1, 0x9, 0x80, 0x0, 0x10000, 0x0, 0xb4, 0x7, 0x6, 0x0, 0x0, 0x8156b2a, 0x2, 0xd5c, 0x4, 0xa0, 0x2, 0x7, 0x4, 0x0, 0x81, 0xff, 0x2, 0xe6b, 0x9, 0xa, 0xc8c, 0x1, 0xd2a, 0x6, 0xf4e, 0x9, 0x3a0, 0x3, 0x10000, 0x7ff, 0x44, 0x1, 0x2, 0x800, 0x3, 0x8, 0x0, 0x8e5e00, 0x922e, 0x0, 0x8, 0x3, 0xf, 0x4, 0x2, 0x2c000, 0x80, 0x5, 0x7, 0x2, 0x5, 0x0, 0x9, 0x6, 0x0, 0x3365, 0x1, 0x5, 0xffffffff, 0x1000, 0x0, 0x4, 0x0, 0x1, 0x2, 0x81, 0x111, 0x2, 0x5c20, 0x7f, 0x0, 0xe, 0xfffffffb, 0x6, 0x391, 0x0, 0x0, 0x3, 0x9, 0xc95d90e, 0xff, 0x2, 0x7, 0x7fffffff, 0xc7, 0x4, 0x7, 0x0, 0x9, 0xffffffff, 0x9, 0x1, 0x4, 0x3, 0x7, 0xfffffff9, 0x10, 0x2, 0xfff, 0x2, 0x6, 0x8b4, 0x600000, 0x1, 0x6, 0x0, 0x10000, 0x0, 0x3, 0x5, 0x0, 0x1000, 0x6, 0x9, 0x0, 0x1, 0x81, 0x2, 0xffff6c4b, 0x800, 0x7, 0x5, 0x7fff, 0x8, 0xffffffff, 0x9, 0x6, 0x0, 0x40, 0x67e1, 0x80000000, 0x2, 0x603c, 0x4, 0x4, 0x0, 0xfffffff8, 0x7, 0x3, 0x10, 0x400, 0xfffffe00, 0x1, 0x3, 0x0, 0xffff, 0x4, 0x6, 0x8, 0x0, 0x400, 0x1, 0x8a, 0x10, 0x2, 0x0, 0xfffffffd, 0x3, 0x7, 0x616, 0x2, 0x2, 0xd1, 0x2, 0xfffffffc, 0x8, 0xe, 0x800, 0x1, 0x4, 0xd87, 0x80000001, 0x48e0, 0x8, 0x9, 0x40, 0x400, 0x5, 0x2, 0x4e1b, 0x1, 0x1000, 0x8, 0x4, 0x3, 0x0, 0x2, 0x9, 0x2, 0x3, 0x10001, 0xffff, 0x4d, 0xd, 0x8, 0x2, 0x2, 0x8]}]}]}}]}, 0x43c}}, 0x4000) r5 = socket$inet(0x2, 0x4000000805, 0x0) sendmmsg(r5, &(0x7f0000000e40)=[{{&(0x7f0000000000)=@l2tp={0x2, 0x0, @local, 0x400}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000100)="ae10355a3319", 0x6}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="100000000000000084"], 0x10}}], 0x2, 0x0) 992.095863ms ago: executing program 6 (id=6618): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x8607}, 0x10) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f00000001c0)={'filter\x00', 0x5, 0x4, 0x3f0, 0x308, 0x0, 0x308, 0x220, 0x308, 0x308, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @private, @empty}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @local, @private}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) sendmsg$nl_generic(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="200000001600010a0000000000000000dd93"], 0x20}, 0x1, 0x0, 0x0, 0xc000}, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0xb, 0x1010, r0, 0x9d0b1000) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vxcan1\x00'}) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x78, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0xffffffffffffff62, 0x1, @loopback}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_SEQ_ADJ_ORIG={0x14, 0xf, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8}, @CTA_SEQADJ_OFFSET_BEFORE={0x8}]}]}, 0x78}}, 0x2004c840) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) getpid() sendmsg$nl_generic(r3, &(0x7f0000000840)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000800)={&(0x7f0000000700)={0xdc, 0x24, 0x20, 0x70bd29, 0x25dfdbfb, {0x1e}, [@typed={0x8, 0x4b, 0x0, 0x0, @uid=0xee01}, @typed={0xb, 0x93, 0x0, 0x0, @str='filter\x00'}, @typed={0x8, 0xef, 0x0, 0x0, @ipv4=@broadcast}, @typed={0xc, 0x147, 0x0, 0x0, @str='nl80211\x00'}, @typed={0x8, 0x117, 0x0, 0x0, @ipv4=@rand_addr=0x64010100}, @typed={0xc, 0x14c, 0x0, 0x0, @u64=0x3}, @generic="7b732a1189b71d5faeba5d88dad02e8f27aabe01670b3f5cd65b6cbe8c178ea10a4f3e1bb85ee4abf8f9f44b9f1d09a1ec6a3a49b0af3aa4970405ef4c5b305a9a5a40988215dbcde227130af5ddbb56044799493008807a418c9f4aec6f8a38b9b422c0dc8ff47cd3ca1bd81b7d7a6ef9357c9c9a8adbb812647a44876e37ac9a33981f67ef40b5cfecca"]}, 0xdc}, 0x1, 0x0, 0x0, 0x20004010}, 0x10) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x34, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x80}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xd}, @NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000680)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)=@ipv6_newnexthop={0x18, 0x68, 0x200, 0x70bd2c, 0x25dfdbff, {0xa, 0x0, 0x0, 0x0, 0x30}}, 0x18}, 0x1, 0x0, 0x0, 0x1}, 0x20000000) mmap(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x0, 0x12, r3, 0x11eac000) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r3, 0x2000) ioctl$XFS_IOC_FSGEOMETRY_V4(r1, 0x8070587c, &(0x7f0000000880)) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, &(0x7f0000000100)=0x8, 0x4) 865.121056ms ago: executing program 1 (id=6619): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x96) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000007b8a00fe0000000087080000000000007b8af0ff00000000bda100000000000027000000f8ffffffbfa400000000000007040000f0ffffffb70200000200000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000008000000850000004900000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="7638300c000000000000e9000000", 0x0, 0x2f000000, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000000040)={0x1d, r4, 0x8000000000000003, {0x0, 0xf0}}, 0x18) recvfrom$inet(r3, 0x0, 0x0, 0x40, 0x0, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x140, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3505, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @XFRMA_IF_ID={0x8, 0x1f, 0x2}]}, 0x140}, 0x1, 0x0, 0x0, 0x8801}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="3801000018000100feffffff0001000000000000000000000000ffffe0000002fc0100000000000000000000000000010001071c4e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c000000ac14142500000000000000000000000000000000000000009201000000000000a39b000000000000ffff0000000000001c250800000000000500000000000000fcffffffffffffff0000000000000000ffffffffffffffff00000000000000001f00000000000000fefffffffffffffffafffffffcffffff00000000800000000035000002"], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) 760.200166ms ago: executing program 4 (id=6620): socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) close(0x4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0xc, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x3e8, 0xf, 0x0, &(0x7f0000000000)="c1df07000000d30a298ee68886dd87", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) r2 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r2, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @rand_addr=0x64010100}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000100)="a6", 0x1}, {0x0}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x106) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) ioctl$OCFS2_IOC_UNRESVSP64(r2, 0x4030582b, &(0x7f0000000380)={0x0, 0x0, 0xfffffffffffffffc, 0x8, 0xfffff000, 0x8000}) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000004c0)={0x58, 0x12, 0x0, 0x70bd26, 0x25dfdbfc, {0x8, 0x6, 0xa, 0x1, {0x4e24, 0x4e23, [0xfffffff8, 0x3, 0x6], [0x400, 0x9, 0x8, 0x9], 0x0, [0x1, 0x3]}, 0x4, 0xb}, [@INET_DIAG_REQ_BYTECODE={0x9, 0x1, "f102dcf29e"}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x6, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1000}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}]}, &(0x7f0000000080)='syzkaller\x00', 0x3, 0x27, &(0x7f0000000000)=""/114}, 0xa8) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r5, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000011c0)=ANY=[@ANYBLOB="14f400000d06014200"/20], 0x14}}, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000400)={{r4, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f00000003c0)='%pI4 \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r6, 0xffffffffffffffff}, 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000007c0)={r3, 0xe0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, &(0x7f0000000080)=[0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x1c, &(0x7f0000000200)=[{}, {}], 0x10, 0x10, &(0x7f0000000240), &(0x7f0000000280), 0x8, 0x90, 0x8, 0x8, &(0x7f00000002c0)}}, 0x10) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x10, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000ffff0b867b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r7, @ANYBLOB="0000000000000000b705000008e5ffff84000000a500000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x58, '\x00', r8, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r9, 0x0, 0xe, 0x48000000, &(0x7f0000000300)="40f0538ef047b21fb60068305500", 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r10 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r10, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10, 0x0}, 0x3000c085) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r10, 0x1, 0x3e, &(0x7f0000000100)=r11, 0x4) sendmsg$inet(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001540)=[{&(0x7f0000000540)="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", 0x501}], 0x1}, 0x4000) 689.581938ms ago: executing program 6 (id=6621): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha512)\x00'}, 0x58) unshare(0x22020600) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="180700001000000000000049099ab168b400000000009500"], &(0x7f0000000040)='GPL\x00', 0x2, 0x92, &(0x7f0000000240)=""/146}, 0x94) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) unshare(0x20000) mmap(&(0x7f00006b7000/0x14000)=nil, 0x14000, 0x4, 0x1010, r3, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r4 = accept$alg(r1, 0x0, 0x0) sendmmsg$alg(r4, &(0x7f0000004780)=[{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)="32a4", 0x2}], 0x1, 0x0, 0x0, 0x4800}], 0x1, 0x80) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=ANY=[@ANYBLOB="c400000019000105000000000000000000000000000000000000000000000001e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffffffffffff0000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000000000000000000010003000000000c001c00", @ANYRES32=0x0, @ANYBLOB="efffffb06eb757de10a8b9c50559d321b1e6d21191babb9db2bf9ee812e56e039cbc36f02ea9cf9c29c247487867bb7628da2569a681159104867b4bd2c96b79815cf0f09373ddcdb785ffc6cc9d05a6393334ced0123c0f81e54a7331ed0cfacc2ff4205ac4daa4000000000000000000000000627a590fb9a6ef95f44fded9d3f88372d71ffdd99b389dfca63e2046a5028e0b205dac28582480a30c7c62cd8fd52963f29d8f8b90996829d24278e603"], 0xc4}}, 0x0) sendmmsg(r0, &(0x7f0000000c80)=[{{&(0x7f0000000000)=@l2tp={0x2, 0x0, @remote}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000080)=']', 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[], 0x10}}], 0x2, 0x0) r6 = socket(0x2b, 0x80801, 0x1) getsockopt$EBT_SO_GET_INFO(r6, 0x0, 0x80, &(0x7f0000000140)={'broute\x00', 0x0, 0x0, 0x0, [0x8, 0x401, 0x7, 0x10000003, 0x1000000004, 0x100000001]}, &(0x7f0000000080)=0x25) ioctl$sock_qrtr_SIOCGIFADDR(r6, 0x8915, &(0x7f00000000c0)={'wg1\x00'}) socket(0x2, 0x80805, 0x0) (async) socket$alg(0x26, 0x5, 0x0) (async) bind$alg(r1, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha512)\x00'}, 0x58) (async) unshare(0x22020600) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="180700001000000000000049099ab168b400000000009500"], &(0x7f0000000040)='GPL\x00', 0x2, 0x92, &(0x7f0000000240)=""/146}, 0x94) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async) write$cgroup_subtree(r2, &(0x7f0000000080)=ANY=[], 0x10448) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) unshare(0x20000) (async) mmap(&(0x7f00006b7000/0x14000)=nil, 0x14000, 0x4, 0x1010, r3, 0x0) (async) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) (async) accept$alg(r1, 0x0, 0x0) (async) sendmmsg$alg(r4, &(0x7f0000004780)=[{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)="32a4", 0x2}], 0x1, 0x0, 0x0, 0x4800}], 0x1, 0x80) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) sendmsg$nl_xfrm(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=ANY=[@ANYBLOB="c400000019000105000000000000000000000000000000000000000000000001e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffffffffffff0000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000000000000000000010003000000000c001c00", @ANYRES32=0x0, @ANYBLOB="efffffb06eb757de10a8b9c50559d321b1e6d21191babb9db2bf9ee812e56e039cbc36f02ea9cf9c29c247487867bb7628da2569a681159104867b4bd2c96b79815cf0f09373ddcdb785ffc6cc9d05a6393334ced0123c0f81e54a7331ed0cfacc2ff4205ac4daa4000000000000000000000000627a590fb9a6ef95f44fded9d3f88372d71ffdd99b389dfca63e2046a5028e0b205dac28582480a30c7c62cd8fd52963f29d8f8b90996829d24278e603"], 0xc4}}, 0x0) (async) sendmmsg(r0, &(0x7f0000000c80)=[{{&(0x7f0000000000)=@l2tp={0x2, 0x0, @remote}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000080)=']', 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[], 0x10}}], 0x2, 0x0) (async) socket(0x2b, 0x80801, 0x1) (async) getsockopt$EBT_SO_GET_INFO(r6, 0x0, 0x80, &(0x7f0000000140)={'broute\x00', 0x0, 0x0, 0x0, [0x8, 0x401, 0x7, 0x10000003, 0x1000000004, 0x100000001]}, &(0x7f0000000080)=0x25) (async) ioctl$sock_qrtr_SIOCGIFADDR(r6, 0x8915, &(0x7f00000000c0)={'wg1\x00'}) (async) 145.033442ms ago: executing program 3 (id=6622): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000d00), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000d40)={0x1c, r2, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008114}, 0x4040800) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r5) getsockname$packet(r5, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x40) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001000010500000000fbdbdf2500000000", @ANYRES32=r6, @ANYBLOB="016000000000000c240012800900010069706970000000001400028008000100", @ANYRES32=r6], 0x44}, 0x1, 0x0, 0x0, 0x4000800}, 0x40848c0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="3c0000001000010400000000fedbdf2500000000", @ANYRES32=r6, @ANYBLOB="1b2e010001a0ff001c0012800910010069706970000000000c000280080003007f000001f849ca3a61e2928524b336e891c2db18a595"], 0x3c}}, 0xc004) r7 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000fc0)=@raw={'raw\x00', 0x3c1, 0x3, 0x310, 0x0, 0x111, 0x4b4, 0x130, 0xd4feffff, 0x240, 0x20a, 0x278, 0x240, 0x278, 0x3, 0x0, {[{{@ipv6={@remote, @empty, [0x0, 0xffffff00], [], 'nicvf0\x00', 'team_slave_0\x00', {}, {}, 0x6, 0xfe}, 0x0, 0x108, 0x130, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[0x0, 0x1], [0x0, 0x1], 0x8, 0x0, 0x80, 0xe}}, @common=@ah={{0x30}, {[0x4d3, 0x4d5], 0xc, 0x6, 0x1}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xf7ff}}}, {{@ipv6={@loopback, @mcast2, [0x0, 0x0, 0x0, 0xffffffff], [], 'veth1_to_hsr\x00', 'pim6reg1\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x370) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000700)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000000000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000ed0759cb47cd90df41fa7a40c72a22dcc53a83731c39b01fceb7"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r8, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x90) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x8, 0x1, 0x80, r3, 0x7, '\x00', r6, r8, 0x2, 0x0, 0x4}, 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002900000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000009800000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r9, 0x0, 0xe, 0x0, &(0x7f0000000300)="14fd54ab72df97e6256c00000000", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0xfffe}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xf}]}, @NFT_MSG_NEWSETELEM={0x84, 0xc, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x58, 0x3, 0x0, 0x1, [{0x54, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x48, 0xb, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_QUOTA_BYTES={0xc}]}}}, {0x10, 0x1, 0x0, 0x1, @counter={{0xc}, @void}}, {0x14, 0x1, 0x0, 0x1, @range={{0xa}, @val={0x4}}}]}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0x108}}, 0x0) 0s ago: executing program 6 (id=6623): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x4c, 0x2, 0x6, 0x101, 0x0, 0x0, {0xc}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x60000}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x4c}}, 0x0) kernel console output (not intermixed with test programs): 563] bond0: entered promiscuous mode [ 604.643185][T24563] bond_slave_0: entered promiscuous mode [ 604.649280][T24563] ÿ: entered promiscuous mode [ 604.658460][T24563] team0: entered promiscuous mode [ 604.664026][T24563] team_slave_0: entered promiscuous mode [ 604.670820][T24563] team_slave_1: entered promiscuous mode [ 604.680357][T24563] nlmon0: entered promiscuous mode [ 604.689225][T24563] caif0: entered promiscuous mode [ 604.695623][T24563] batadv0: entered promiscuous mode [ 604.704222][T24563] vxcan0: entered promiscuous mode [ 604.713720][T24563] –: entered promiscuous mode [ 604.720617][T24563] veth0: entered promiscuous mode [ 604.729013][T24563] veth1: entered promiscuous mode [ 604.737354][T24563] wg0: entered promiscuous mode [ 604.745591][T24563] wg2: entered promiscuous mode [ 604.754083][T24563] veth0_to_bridge: entered promiscuous mode [ 604.766251][T24563] veth1_to_bridge: entered promiscuous mode [ 604.779060][T24563] veth0_to_bond: entered promiscuous mode [ 604.788465][T24563] veth1_to_bond: entered promiscuous mode [ 604.798975][T24563] veth0_to_team: entered promiscuous mode [ 604.811028][T24563] veth1_to_team: entered promiscuous mode [ 604.823055][T24563] veth0_to_batadv: entered promiscuous mode [ 604.833620][T24563] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 604.841684][T24563] batadv_slave_0: entered promiscuous mode [ 604.852001][T24563] veth1_to_batadv: entered promiscuous mode [ 604.861217][T24563] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 604.868670][T24563] batadv_slave_1: entered promiscuous mode [ 604.879141][T24563] xfrm0: entered promiscuous mode [ 604.886782][T24563] veth0_to_hsr: entered promiscuous mode [ 604.894580][T24563] hsr_slave_0: entered promiscuous mode [ 604.902852][T24563] veth1_to_hsr: entered promiscuous mode [ 604.914840][T24563] veth1_virt_wifi: entered promiscuous mode [ 604.924274][T24563] veth0_virt_wifi: entered promiscuous mode [ 604.935654][T24563] virt_wifi0: entered promiscuous mode [ 604.952841][T24563] vlan0: entered promiscuous mode [ 604.958169][T24563] vlan1: entered promiscuous mode [ 604.964959][T24563] macvlan0: entered promiscuous mode [ 604.974623][T24563] macvlan1: entered promiscuous mode [ 604.982556][T24563] ipvlan0: entered promiscuous mode [ 604.988177][T24563] ipvlan1: entered promiscuous mode [ 604.998863][T24563] veth1_macvtap: entered promiscuous mode [ 605.012405][T24563] tipc: Resetting bearer [ 605.019485][T24563] macvtap0: entered promiscuous mode [ 605.028750][T24563] macsec0: entered promiscuous mode [ 605.036255][T24563] geneve0: entered promiscuous mode [ 605.044611][T24563] geneve1: entered promiscuous mode [ 605.056023][T24563] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 605.066612][T24563] netdevsim netdevsim5 netdevsim1: entered promiscuous mode [ 605.077212][T24563] netdevsim netdevsim5 netdevsim2: entered promiscuous mode [ 605.087436][T24563] netdevsim netdevsim5 netdevsim3: entered promiscuous mode [ 605.099145][T24563] mac80211_hwsim hwsim55 wlan1: entered promiscuous mode [ 605.106731][T24563] mac80211_hwsim hwsim56 wlan2: entered promiscuous mode [ 605.114297][T24563] xfrm1: left allmulticast mode [ 605.120624][T24563] vlan2: left allmulticast mode [ 605.125563][T24563] hsr_slave_1: left allmulticast mode [ 605.132398][T24563] bond1: entered promiscuous mode [ 605.137632][T24563] mac80211_hwsim hwsim55 pimreg: entered promiscuous mode [ 605.145335][T24563] bond2: entered promiscuous mode [ 605.151277][T24563] mac80211_hwsim hwsim61 wlan3: entered promiscuous mode [ 605.158507][T24563] virt_wifi0.0: entered promiscuous mode [ 605.164800][T24563] ;: entered promiscuous mode [ 605.170573][T24563] bridge1: entered promiscuous mode [ 605.175994][T24563] bridge2: entered promiscuous mode [ 605.182182][T24563] ´: entered promiscuous mode [ 605.190127][T24563] bridge3: entered promiscuous mode [ 605.197422][T24563] ipip0: entered promiscuous mode [ 605.204647][T24563] nicvf0: entered promiscuous mode [ 605.210573][T24563] bond3: entered promiscuous mode [ 605.215664][T24563] geneve2: entered promiscuous mode [ 605.224796][T24563] macsec1: entered promiscuous mode [ 605.268230][T24575] syzkaller0: Caught tx_queue_len zero misconfig [ 605.421450][T24579] netlink: 'syz.0.4952': attribute type 1 has an invalid length. [ 605.458180][ T8037] netdevsim netdevsim5 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 605.468516][ T8037] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 605.499665][ T8037] netdevsim netdevsim5 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 605.522137][ T8037] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 605.542425][ T8037] netdevsim netdevsim5 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 605.563051][ T8037] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 605.578702][ T8037] netdevsim netdevsim5 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 605.587953][ T8037] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 605.993789][T24627] bond9 (unregistering): Released all slaves [ 606.017671][T24630] netlink: 'syz.0.4967': attribute type 4 has an invalid length. [ 606.096840][T24627] IPVS: length: 203 != 8 [ 606.265814][T24644] netlink: 'syz.5.4974': attribute type 1 has an invalid length. [ 606.277444][T24644] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 606.668111][T24665] bond14: Unable to set down delay as MII monitoring is disabled [ 606.678081][T24665] bond14 (unregistering): Released all slaves [ 607.125150][T24715] bond0 (unregistering): Released all slaves [ 607.581101][T24741] openvswitch: netlink: Missing key (keys=40, expected=80) [ 607.640349][T24741] sctp: [Deprecated]: syz.5.5002 (pid 24741) Use of int in max_burst socket option deprecated. [ 607.640349][T24741] Use struct sctp_assoc_value instead [ 608.238073][T24780] netlink: 'syz.1.5014': attribute type 12 has an invalid length. [ 608.321916][T24783] bond14: (slave bond_slave_1): Device is not our slave [ 608.331634][T24783] bond14: option active_slave: invalid value (bond_slave_1) [ 608.341981][T24783] bond14 (unregistering): Released all slaves [ 608.388687][T24788] pimreg3: entered allmulticast mode [ 608.553568][T24790] netlink: 'syz.5.5017': attribute type 1 has an invalid length. [ 608.637616][T24792] netlink: 'syz.0.5018': attribute type 2 has an invalid length. [ 608.821861][T24796] openvswitch: netlink: ufid size 17 bytes exceeds the range (1, 16) [ 608.822724][T24797] __nla_validate_parse: 46 callbacks suppressed [ 608.822767][T24797] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5019'. [ 608.830054][T24796] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 608.830231][T24796] openvswitch: netlink: ufid size 17 bytes exceeds the range (1, 16) [ 608.892700][T24796] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 609.010924][T24804] netlink: 'syz.5.5020': attribute type 51 has an invalid length. [ 609.031057][T24807] netlink: 'syz.1.5022': attribute type 51 has an invalid length. [ 609.194192][T24812] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5024'. [ 609.421073][T24829] netlink: 640 bytes leftover after parsing attributes in process `syz.3.5030'. [ 609.440601][T24829] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 609.937261][T24866] openvswitch: netlink: IP tunnel dst address not specified [ 609.996043][T24871] netlink: 'syz.4.5043': attribute type 1 has an invalid length. [ 610.009879][T24871] netlink: 236 bytes leftover after parsing attributes in process `syz.4.5043'. [ 610.219129][T24876] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5045'. [ 610.254267][T24882] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5048'. [ 610.337746][T24893] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5050'. [ 610.357114][T24893] tipc: Disabling bearer [ 610.386834][T24896] netlink: 'syz.5.5049': attribute type 1 has an invalid length. [ 610.444961][T24901] bridge6: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 610.651845][T24913] netlink: get zone limit has 8 unknown bytes [ 610.674534][T24913] netlink: get zone limit has 8 unknown bytes [ 610.804633][T24926] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5059'. [ 610.867006][T24925] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5059'. [ 611.154272][T24946] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5064'. [ 611.194781][T24948] netlink: 'syz.3.5067': attribute type 16 has an invalid length. [ 611.215944][T24948] netlink: 'syz.3.5067': attribute type 17 has an invalid length. [ 611.224830][T24948] lo: left promiscuous mode [ 611.234906][T24948] tunl0: left promiscuous mode [ 611.252204][T24948] gre0: left promiscuous mode [ 611.315751][T24948] gretap0: left promiscuous mode [ 611.332562][T24948] erspan0: left promiscuous mode [ 611.340912][T24952] netlink: 'syz.5.5068': attribute type 1 has an invalid length. [ 611.348760][T24952] netlink: 'syz.5.5068': attribute type 1 has an invalid length. [ 611.367033][T24948] ip_vti0: left promiscuous mode [ 611.386125][T24952] netlink: 'syz.5.5068': attribute type 8 has an invalid length. [ 611.421034][T24948] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 611.526455][T24952] bond4 (unregistering): Released all slaves [ 611.575457][T24970] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 611.767776][T24964] syzkaller0: entered promiscuous mode [ 611.773613][T24964] syzkaller0: entered allmulticast mode [ 611.850782][T24986] netlink: 'syz.1.5076': attribute type 21 has an invalid length. [ 613.799428][T24992] workqueue: Failed to create a rescuer kthread for wq "bond14": -EINTR [ 613.855109][T24996] __nla_validate_parse: 3 callbacks suppressed [ 613.855131][T24996] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5078'. [ 614.024919][T25005] SET target dimension over the limit! [ 614.843489][T25050] netlink: 1204 bytes leftover after parsing attributes in process `syz.3.5093'. [ 614.871046][T25050] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5093'. [ 614.905556][T25050] bond0: entered promiscuous mode [ 614.923953][T25050] bond_slave_0: entered promiscuous mode [ 614.935691][T25050] bond_slave_1: entered promiscuous mode [ 614.950118][T25050] mac80211_hwsim hwsim52 wlan1: entered promiscuous mode [ 614.970292][T25050] bridge0: entered promiscuous mode [ 614.989183][T25056] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5096'. [ 614.998730][T25050] bond0: left promiscuous mode [ 615.014985][T25050] bond_slave_0: left promiscuous mode [ 615.021794][T25050] bond_slave_1: left promiscuous mode [ 615.027592][T25050] mac80211_hwsim hwsim52 wlan1: left promiscuous mode [ 615.035259][T25050] bridge0: left promiscuous mode [ 615.058955][T25061] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5098'. [ 615.068327][T25061] netlink: 40 bytes leftover after parsing attributes in process `syz.5.5098'. [ 615.081376][T25059] netlink: 'syz.4.5097': attribute type 15 has an invalid length. [ 615.267259][T25073] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5102'. [ 615.722583][T25101] veth0_virt_wifi: Caught tx_queue_len zero misconfig [ 615.865821][T25107] syzkaller0: entered promiscuous mode [ 615.872189][T25107] syzkaller0: entered allmulticast mode [ 615.883545][T25109] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5110'. [ 618.019031][T25124] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR [ 618.136872][T25145] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 618.271830][T25156] netlink: 216 bytes leftover after parsing attributes in process `syz.5.5119'. [ 618.310756][T25157] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5118'. [ 618.354697][T25160] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 618.476392][T25169] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20016 [ 619.553442][T25214] openvswitch: netlink: IP tunnel dst address not specified [ 619.698258][T25219] netlink: 'syz.3.5137': attribute type 1 has an invalid length. [ 619.719202][T25221] netlink: 'syz.5.5138': attribute type 1 has an invalid length. [ 619.784691][T25221] 8021q: adding VLAN 0 to HW filter on device bond4 [ 619.821612][T25224] bond4: (slave gretap1): making interface the new active one [ 619.830979][T25224] bond4: (slave gretap1): Enslaving as an active interface with an up link [ 619.889330][T25221] bond4: (slave gretap2): Enslaving as an active interface with an up link [ 619.918510][T25221] macvlan2: entered promiscuous mode [ 619.941420][T25221] macvlan2: entered allmulticast mode [ 619.950429][T25221] bond4: entered promiscuous mode [ 619.958871][T25232] __nla_validate_parse: 9 callbacks suppressed [ 619.958891][T25232] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5141'. [ 619.973336][T25221] gretap1: entered promiscuous mode [ 619.988179][T25221] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 619.995976][T25221] bond4: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 620.012889][T25221] bond4: left promiscuous mode [ 620.017714][T25221] gretap1: left promiscuous mode [ 620.043697][ T1149] bond0: (slave wlan1): link status definitely down, disabling slave [ 620.145630][T25235] PKCS7: Unknown OID: [4] (bad) [ 620.173832][T25235] PKCS7: Only support pkcs7_signedData type [ 620.327423][T25239] netlink: 'syz.5.5144': attribute type 17 has an invalid length. [ 620.336104][T25239] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5144'. [ 620.345488][T25239] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5144'. [ 620.568625][T25251] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5149'. [ 620.615439][T25254] syzkaller0: entered promiscuous mode [ 620.629767][T25254] syzkaller0: entered allmulticast mode [ 620.652388][T25254] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5148'. [ 620.668193][T25254] bond0: entered promiscuous mode [ 620.679790][T25254] bond_slave_0: entered promiscuous mode [ 620.685722][T25254] bond_slave_1: entered promiscuous mode [ 620.709839][T25254] bond0: left promiscuous mode [ 620.714801][T25254] bond_slave_0: left promiscuous mode [ 620.730142][T25254] bond_slave_1: left promiscuous mode [ 620.768928][T25256] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5150'. [ 621.035325][T25260] syzkaller0: entered promiscuous mode [ 621.041131][T25260] syzkaller0: entered allmulticast mode [ 621.054978][T25260] TC_ACT_REPEAT abuse ? [ 621.387435][T25278] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5157'. [ 621.403291][T25278] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5157'. [ 621.457780][T25278] bond5: option xmit_hash_policy: invalid value (64) [ 621.477617][T25278] bond5 (unregistering): Released all slaves [ 621.762677][T25293] openvswitch: netlink: ERSPAN option length err (len 256, max 255). [ 622.133018][T25308] netlink: 'syz.3.5166': attribute type 24 has an invalid length. [ 622.294990][T25312] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5167'. [ 622.341692][T25316] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5168'. [ 622.603211][T25328] macvlan4: entered allmulticast mode [ 622.644099][T25327] syzkaller0: entered promiscuous mode [ 622.650164][T25327] syzkaller0: entered allmulticast mode [ 622.796769][T25337] syzkaller1: entered promiscuous mode [ 622.803044][T25337] syzkaller1: entered allmulticast mode [ 623.692548][T25385] pim6reg1: entered promiscuous mode [ 623.707134][T25385] pim6reg1: entered allmulticast mode [ 623.886104][T25394] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 623.927337][T25394] bond0: entered promiscuous mode [ 623.962550][T25394] bond_slave_0: entered promiscuous mode [ 623.968490][T25394] bond_slave_1: entered promiscuous mode [ 623.997991][T25394] batadv0: entered promiscuous mode [ 624.012710][T25394] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 624.025901][T25394] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 624.031457][T25408] netlink: 'syz.5.5190': attribute type 15 has an invalid length. [ 624.053401][T25394] hsr1: entered promiscuous mode [ 624.059930][T25394] hsr1: entered allmulticast mode [ 624.065011][T25394] bond0: entered allmulticast mode [ 624.072430][T25394] bond_slave_0: entered allmulticast mode [ 624.078262][T25394] bond_slave_1: entered allmulticast mode [ 624.084750][T25394] batadv0: entered allmulticast mode [ 624.093297][T25394] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 624.106018][T25394] bond0: left promiscuous mode [ 624.111818][T25394] bond_slave_0: left promiscuous mode [ 624.117646][T25394] bond_slave_1: left promiscuous mode [ 624.125547][T25394] batadv0: left promiscuous mode [ 624.164121][T25408] netlink: 'syz.5.5190': attribute type 15 has an invalid length. [ 624.164157][T25411] lo: left promiscuous mode [ 624.178636][T25411] macvlan0: left promiscuous mode [ 624.212154][T25411] veth5: left promiscuous mode [ 624.266651][T25411] geneve3: left promiscuous mode [ 624.316987][T25411] vlan2: left promiscuous mode [ 624.323065][T25411] bond6: left promiscuous mode [ 624.329682][T25411] bridge6: left promiscuous mode [ 624.343289][T25411] vlan2: left allmulticast mode [ 624.348442][T25411] bond6: left allmulticast mode [ 624.354372][T25411] bridge6: left allmulticast mode [ 624.367767][T25414] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 624.384839][ T8050] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 256 - 0 [ 624.394901][T25418] tipc: Enabling of bearer rejected, failed to enable media [ 624.472277][ T8050] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 256 - 0 [ 624.488512][ T8050] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 256 - 0 [ 624.502413][ T8050] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 256 - 0 [ 624.575169][T25425] bond6: (slave C): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 624.594276][T25425] bond6: (slave C): Enslaving as an active interface with an up link [ 624.603129][T25425] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 625.035880][T25462] __nla_validate_parse: 43 callbacks suppressed [ 625.035902][T25462] netlink: 212360 bytes leftover after parsing attributes in process `syz.3.5205'. [ 625.367896][T25482] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5211'. [ 625.403308][T25482] bond6: entered promiscuous mode [ 625.409009][T25482] 8021q: adding VLAN 0 to HW filter on device bond6 [ 625.447114][T25487] netlink: 'syz.4.5213': attribute type 1 has an invalid length. [ 625.465072][T25482] bridge4: entered promiscuous mode [ 625.475464][T25482] bond6: (slave bridge4): Enslaving as an active interface with an up link [ 625.605038][T25491] macvlan5: entered promiscuous mode [ 625.610998][T25491] macvlan5: entered allmulticast mode [ 625.617035][T25491] bond6: (slave macvlan5): Error -98 calling set_mac_address [ 625.753342][T25506] sit0: entered promiscuous mode [ 625.764859][T25506] netlink: 'syz.3.5220': attribute type 1 has an invalid length. [ 625.773414][T25506] netlink: 1 bytes leftover after parsing attributes in process `syz.3.5220'. [ 625.788415][T25506] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 625.961998][T25516] netlink: 116 bytes leftover after parsing attributes in process `syz.1.5223'. [ 625.993326][T25514] bridge5: entered promiscuous mode [ 625.998709][T25514] bridge5: entered allmulticast mode [ 626.013193][T25514] netlink: 'syz.3.5221': attribute type 1 has an invalid length. [ 626.021769][T25514] nbd: error processing sock list [ 626.133845][T25524] netlink: 'syz.3.5225': attribute type 1 has an invalid length. [ 626.142604][T25526] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5226'. [ 626.172785][T25524] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5225'. [ 626.262054][T25524] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5225'. [ 626.271786][T25524] netlink: 44 bytes leftover after parsing attributes in process `syz.3.5225'. [ 626.419321][T25541] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5230'. [ 626.542519][T25547] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5232'. [ 626.732103][T25563] netlink: 'syz.1.5237': attribute type 2 has an invalid length. [ 626.894997][T25578] netlink: 'syz.5.5241': attribute type 83 has an invalid length. [ 627.017283][T25583] bridge_slave_1: left allmulticast mode [ 627.023670][T25583] bridge0: port 2(bridge_slave_1) entered disabled state [ 627.036993][T25583] bridge_slave_0: left allmulticast mode [ 627.045105][T25585] netlink: 'syz.4.5244': attribute type 3 has an invalid length. [ 627.051239][T25583] bridge0: port 1(bridge_slave_0) entered disabled state [ 627.077459][T25587] sctp: [Deprecated]: syz.1.5245 (pid 25587) Use of int in max_burst socket option. [ 627.077459][T25587] Use struct sctp_assoc_value instead [ 628.370334][T17769] IPVS: ip_vs_send_async error -101 [ 628.832605][T25666] Cannot find del_set index 2 as target [ 628.985492][T25678] netlink: 'syz.3.5271': attribute type 1 has an invalid length. [ 629.227270][T25693] netlink: 'syz.3.5277': attribute type 9 has an invalid length. [ 629.254488][T20627] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 629.264797][T20627] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 629.273016][T20627] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 629.281399][T20627] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 629.289764][T20627] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 629.301833][T25694] netlink: 'syz.3.5277': attribute type 9 has an invalid length. [ 629.398770][ T5844] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 629.407158][ T5844] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 629.414919][ T5844] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 629.429525][ T5844] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 629.449994][ T5844] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 629.671533][T25706] 8021q: adding VLAN 0 to HW filter on device team0 [ 629.687085][T25706] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 629.773558][T25691] lo speed is unknown, defaulting to 1000 [ 630.136585][T25738] __nla_validate_parse: 4 callbacks suppressed [ 630.136607][T25738] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5288'. [ 630.156064][T25738] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5288'. [ 630.267059][T25691] chnl_net:caif_netlink_parms(): no params data found [ 630.551900][T25691] bridge0: port 1(bridge_slave_0) entered blocking state [ 630.559363][T25691] bridge0: port 1(bridge_slave_0) entered disabled state [ 630.567109][T25691] bridge_slave_0: entered allmulticast mode [ 630.581300][T25691] bridge_slave_0: entered promiscuous mode [ 630.594811][T25691] bridge0: port 2(bridge_slave_1) entered blocking state [ 630.603533][T25691] bridge0: port 2(bridge_slave_1) entered disabled state [ 630.611227][T25691] bridge_slave_1: entered allmulticast mode [ 630.619225][T25691] bridge_slave_1: entered promiscuous mode [ 630.745404][T25691] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 630.786286][T25691] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 630.947053][T25773] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5294'. [ 630.959888][T25778] netlink: 56 bytes leftover after parsing attributes in process `syz.5.5296'. [ 630.969194][T25691] team0: Port device team_slave_0 added [ 630.987700][T25691] team0: Port device team_slave_1 added [ 631.004279][T25773] bridge_slave_1: left allmulticast mode [ 631.022093][T25773] bridge_slave_1: left promiscuous mode [ 631.031071][T25773] bridge0: port 2(bridge_slave_1) entered disabled state [ 631.067208][T25773] bond0: (slave bridge0): Releasing backup interface [ 631.187664][T25794] bond7: (slave bond_slave_1): Device is not our slave [ 631.196103][T25794] bond7: option active_slave: invalid value (bond_slave_1) [ 631.208621][T25794] bond7 (unregistering): Released all slaves [ 631.313188][T25691] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 631.324220][T25691] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 631.380059][T25691] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 631.402506][T25691] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 631.409508][T25691] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 631.451262][T25691] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 631.491436][T20627] Bluetooth: hci6: command tx timeout [ 631.533219][T25691] hsr_slave_0: entered promiscuous mode [ 631.540576][T25691] hsr_slave_1: entered promiscuous mode [ 631.547110][T25691] debugfs: 'hsr0' already exists in 'hsr' [ 631.553458][T25691] Cannot create hsr debugfs directory [ 631.565705][T25807] validate_nla: 3 callbacks suppressed [ 631.565728][T25807] netlink: 'syz.5.5303': attribute type 2 has an invalid length. [ 631.712168][T25815] sctp: [Deprecated]: syz.3.5305 (pid 25815) Use of int in max_burst socket option. [ 631.712168][T25815] Use struct sctp_assoc_value instead [ 631.743434][T25815] netlink: 212348 bytes leftover after parsing attributes in process `syz.3.5305'. [ 631.996888][T25691] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 632.034022][T25691] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 632.083514][T25829] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5310'. [ 632.096424][T25691] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 632.124122][T25691] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 632.181875][T25843] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5312'. [ 632.222650][T25843] netlink: 92 bytes leftover after parsing attributes in process `syz.5.5312'. [ 632.256496][T25839] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5311'. [ 632.296528][T25850] x_tables: duplicate underflow at hook 1 [ 632.306895][T25851] x_tables: duplicate underflow at hook 1 [ 632.422725][T25854] bridge7: entered promiscuous mode [ 632.433838][T25857] netlink: 'syz.1.5317': attribute type 1 has an invalid length. [ 632.439506][T25858] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5318'. [ 632.442079][T25854] bridge7: entered allmulticast mode [ 632.456425][T25857] netlink: 'syz.1.5317': attribute type 2 has an invalid length. [ 632.469373][T25691] 8021q: adding VLAN 0 to HW filter on device bond0 [ 632.514133][T25691] 8021q: adding VLAN 0 to HW filter on device team0 [ 632.553304][ T8043] bridge0: port 1(bridge_slave_0) entered blocking state [ 632.560557][ T8043] bridge0: port 1(bridge_slave_0) entered forwarding state [ 632.589160][ T8043] bridge0: port 2(bridge_slave_1) entered blocking state [ 632.596397][ T8043] bridge0: port 2(bridge_slave_1) entered forwarding state [ 632.662825][T25865] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048) [ 632.685397][T25862] delete_channel: no stack [ 632.872895][T25884] netlink: 'syz.1.5324': attribute type 21 has an invalid length. [ 632.904007][T25884] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 633.032276][T25691] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 633.215726][T25906] delete_channel: no stack [ 633.246489][T25907] : entered promiscuous mode [ 633.451498][T25691] veth0_vlan: entered promiscuous mode [ 633.469518][T25691] veth1_vlan: entered promiscuous mode [ 633.537339][T25691] veth0_macvtap: entered promiscuous mode [ 633.553122][T25691] veth1_macvtap: entered promiscuous mode [ 633.570144][T20627] Bluetooth: hci6: command tx timeout [ 633.586317][T25925] netlink: 'syz.3.5332': attribute type 1 has an invalid length. [ 633.603302][T25691] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 633.638230][T25691] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 633.658170][ T66] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 633.676016][ T66] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 633.686396][ T66] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 633.696983][ T66] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 633.847608][T25925] veth11: entered promiscuous mode [ 634.610014][T17769] IPVS: ip_vs_send_async error -101 [ 635.650066][T20627] Bluetooth: hci6: command tx timeout [ 635.983849][T25888] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 635.993121][T25916] netlink: 'syz.1.5331': attribute type 1 has an invalid length. [ 636.023885][T25916] netlink: 'syz.1.5331': attribute type 1 has an invalid length. [ 636.040006][T25922] __nla_validate_parse: 6 callbacks suppressed [ 636.040028][T25922] netlink: 220 bytes leftover after parsing attributes in process `syz.1.5331'. [ 636.232027][ T8043] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 636.243092][ T8043] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 636.343379][ T8037] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 636.354456][ T8037] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 636.411848][T25951] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5335'. [ 636.452998][T25951] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5335'. [ 636.481046][T25959] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5338'. [ 636.721377][T25973] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5343'. [ 636.732583][T25973] syzkaller0: entered promiscuous mode [ 636.738551][T25973] syzkaller0: entered allmulticast mode [ 636.969229][T25984] netlink: 'syz.3.5347': attribute type 1 has an invalid length. [ 637.065391][T25989] netlink: 'syz.5.5349': attribute type 51 has an invalid length. [ 637.130584][T26000] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 637.150358][T26000] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 637.438154][T26016] openvswitch: netlink: IP tunnel dst address not specified [ 637.575513][T26020] RDS: rds_bind could not find a transport for 400:0:1200:0:1030:0:ffff:ffff, load rds_tcp or rds_rdma? [ 637.639511][T26025] openvswitch: netlink: Multiple metadata blocks provided [ 637.738967][T20627] Bluetooth: hci6: command tx timeout [ 637.899468][T26040] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5364'. [ 637.916144][T26040] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5364'. [ 638.710655][T26054] syzkaller0: entered promiscuous mode [ 638.716221][T26054] syzkaller0: entered allmulticast mode [ 638.942796][T26082] skbuff: bad partial csum: csum=65535/0 headroom=64 headlen=65537 [ 639.099933][T26090] geneve2: entered allmulticast mode [ 639.212576][T26103] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5382'. [ 639.341839][T26110] netlink: 'syz.4.5384': attribute type 1 has an invalid length. [ 639.445413][T26113] netlink: 'syz.1.5385': attribute type 9 has an invalid length. [ 639.465238][T26117] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5384'. [ 639.544161][T26114] bond7: (slave veth11): Enslaving as an active interface with a down link [ 639.595843][T26117] 8021q: adding VLAN 0 to HW filter on device bond7 [ 640.077349][T26137] netlink: 'syz.4.5391': attribute type 29 has an invalid length. [ 640.134589][T26144] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5391'. [ 640.200159][T26144] netlink: 'syz.4.5391': attribute type 29 has an invalid length. [ 640.228800][T26146] ip6erspan2: entered allmulticast mode [ 640.281561][T26137] bond8: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 640.309367][T26137] bond8 (unregistering): Released all slaves [ 640.422427][T26148] netlink: 'syz.3.5395': attribute type 1 has an invalid length. [ 640.854491][T17769] IPVS: ip_vs_send_async error -101 [ 640.869202][T26193] netlink: 'syz.6.5406': attribute type 1 has an invalid length. [ 641.047332][T26208] netlink: 'syz.3.5410': attribute type 3 has an invalid length. [ 641.072504][T26204] ipt_REJECT: TCP_RESET invalid for non-tcp [ 641.105587][T26208] __nla_validate_parse: 4 callbacks suppressed [ 641.105605][T26208] netlink: 766 bytes leftover after parsing attributes in process `syz.3.5410'. [ 641.152187][T26208] netlink: 'syz.3.5410': attribute type 3 has an invalid length. [ 641.181841][T26208] netlink: 766 bytes leftover after parsing attributes in process `syz.3.5410'. [ 641.231953][T26208] netlink: 766 bytes leftover after parsing attributes in process `syz.3.5410'. [ 641.242254][T26208] netlink: 766 bytes leftover after parsing attributes in process `syz.3.5410'. [ 641.255573][T26208] netlink: 766 bytes leftover after parsing attributes in process `syz.3.5410'. [ 641.265597][T26208] netlink: 766 bytes leftover after parsing attributes in process `syz.3.5410'. [ 641.275601][T26208] netlink: 766 bytes leftover after parsing attributes in process `syz.3.5410'. [ 641.304657][T26208] netlink: 766 bytes leftover after parsing attributes in process `syz.3.5410'. [ 641.315699][T26208] netlink: 766 bytes leftover after parsing attributes in process `syz.3.5410'. [ 641.337256][T26208] netlink: 766 bytes leftover after parsing attributes in process `syz.3.5410'. [ 641.653673][T26232] vlan3: entered allmulticast mode [ 641.668023][T26232] bridge0: entered allmulticast mode [ 641.689384][T26233] bridge0: port 1(erspan0) entered blocking state [ 641.698649][T26233] bridge0: port 1(erspan0) entered disabled state [ 641.714781][T26233] erspan0: entered allmulticast mode [ 641.732733][T26233] erspan0: entered promiscuous mode [ 641.739160][T26233] bridge0: port 1(erspan0) entered blocking state [ 641.745842][T26233] bridge0: port 1(erspan0) entered forwarding state [ 641.983597][T26245] macvlan2: entered allmulticast mode [ 641.989297][T26245] hsr0: entered allmulticast mode [ 642.020175][T26245] hsr_slave_0: entered allmulticast mode [ 642.026077][T26245] hsr_slave_1: entered allmulticast mode [ 642.183540][T26257] nft_compat: unsupported protocol 0 [ 642.641045][T26279] xt_NFQUEUE: number of total queues is 0 [ 642.803295][T26285] syzkaller0: entered promiscuous mode [ 642.809044][T26285] syzkaller0: entered allmulticast mode [ 642.821726][T26283] syzkaller0: entered promiscuous mode [ 642.827269][T26283] syzkaller0: entered allmulticast mode [ 643.078163][T26294] validate_nla: 63 callbacks suppressed [ 643.078186][T26294] netlink: 'syz.5.5439': attribute type 1 has an invalid length. [ 643.267661][T26294] 8021q: adding VLAN 0 to HW filter on device bond7 [ 643.404457][T26299] bond7: (slave veth7): Enslaving as an active interface with a down link [ 643.415843][T26300] veth0_to_bond: left promiscuous mode [ 643.430438][T26300] bond7: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 643.471283][T26294] bond7: (slave veth9): Enslaving as an active interface with a down link [ 643.494246][T26294] netlink: 'syz.5.5439': attribute type 1 has an invalid length. [ 643.530386][T26294] netlink: 'syz.5.5439': attribute type 2 has an invalid length. [ 643.596416][T26317] xt_policy: neither incoming nor outgoing policy selected [ 643.626231][T26318] xt_time: unknown flags 0xf4 [ 643.638931][T26320] bond4: option mode: unable to set because the bond device has slaves [ 643.656741][T26320] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 643.806555][T26328] netlink: 'syz.5.5451': attribute type 7 has an invalid length. [ 643.841156][T26328] netlink: 'syz.5.5451': attribute type 7 has an invalid length. [ 643.841740][ T8043] netdevsim netdevsim5 netdevsim0: set [0, 1] type 1 family 0 port 8472 - 0 [ 643.861000][ T8043] netdevsim netdevsim5 netdevsim1: set [0, 1] type 1 family 0 port 8472 - 0 [ 643.887901][ T8043] netdevsim netdevsim5 netdevsim2: set [0, 1] type 1 family 0 port 8472 - 0 [ 643.985787][ T8043] netdevsim netdevsim5 netdevsim3: set [0, 1] type 1 family 0 port 8472 - 0 [ 644.040981][T26335] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 644.064423][T26344] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 644.423323][T26366] netlink: 'syz.3.5461': attribute type 2 has an invalid length. [ 644.431262][T26366] netlink: 'syz.3.5461': attribute type 1 has an invalid length. [ 644.768785][T26383] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 644.776137][T26383] IPv6: NLM_F_CREATE should be set when creating new route [ 645.166441][T26396] syzkaller0: entered promiscuous mode [ 645.172686][T26396] syzkaller0: entered allmulticast mode [ 645.312278][T26398] lo speed is unknown, defaulting to 1000 [ 646.165111][T26440] tipc: Failed to remove unknown binding: 66,1,1/4269801492:1685904546/1685904548 [ 646.183148][T26442] tipc: Enabled bearer , priority 1 [ 646.211729][T26440] tipc: Failed to remove unknown binding: 66,1,1/4269801492:1685904546/1685904548 [ 646.389081][T26451] __nla_validate_parse: 80 callbacks suppressed [ 646.389102][T26451] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5488'. [ 646.425168][T26451] tipc: Enabling of bearer rejected, failed to enable media [ 646.702197][T26462] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 646.830866][T26471] netem: change failed [ 647.134061][T26491] xt_cluster: node mask cannot exceed total number of nodes [ 647.136120][T26490] xt_cgroup: xt_cgroup: no path or classid specified [ 647.201645][T26491] Cannot find del_set index 4 as target [ 647.355826][T26506] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5505'. [ 647.367701][T26507] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5504'. [ 647.368701][T26506] netlink: 20 bytes leftover after parsing attributes in process `syz.6.5505'. [ 647.380963][T26507] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5504'. [ 647.415888][T26510] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5505'. [ 647.432872][T26510] netlink: 20 bytes leftover after parsing attributes in process `syz.6.5505'. [ 647.690720][T26520] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 647.736114][T26520] netlink: 68 bytes leftover after parsing attributes in process `syz.4.5511'. [ 647.901757][T26536] netlink: 40 bytes leftover after parsing attributes in process `syz.5.5513'. [ 648.046274][T26547] veth13: entered allmulticast mode [ 648.064376][T26543] sit2: entered allmulticast mode [ 648.119379][T26556] tipc: Enabling of bearer rejected, failed to enable media [ 648.444934][T26575] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5520'. [ 649.052117][T26611] openvswitch: netlink: Message has 4 unknown bytes. [ 649.242920][T26617] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 652.410605][T26693] __nla_validate_parse: 7 callbacks suppressed [ 652.410628][T26693] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5541'. [ 652.527664][T26693] syzkaller1: entered promiscuous mode [ 652.541992][T26693] syzkaller1: entered allmulticast mode [ 652.675597][T26708] netlink: 224 bytes leftover after parsing attributes in process `syz.1.5547'. [ 652.767747][T26710] syzkaller0: entered promiscuous mode [ 652.784555][T26710] syzkaller0: entered allmulticast mode [ 652.844036][T26710] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5545'. [ 652.905534][T26722] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5549'. [ 652.974113][T26710] bond0: entered promiscuous mode [ 652.979408][T26710] bond_slave_0: entered promiscuous mode [ 652.985933][T26710] bond_slave_1: entered promiscuous mode [ 653.014782][T26710] mac80211_hwsim hwsim52 wlan1: entered promiscuous mode [ 653.041306][T26725] netlink: 'syz.4.5551': attribute type 1 has an invalid length. [ 653.049108][T26725] netlink: 224 bytes leftover after parsing attributes in process `syz.4.5551'. [ 653.068955][T26710] bond0: entered allmulticast mode [ 653.083065][T26710] bond_slave_0: entered allmulticast mode [ 653.116472][T26710] bond_slave_1: entered allmulticast mode [ 653.139382][T26710] mac80211_hwsim hwsim52 wlan1: entered allmulticast mode [ 653.215001][T26729] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5553'. [ 653.436146][ T5844] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 653.448236][ T5844] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 653.457193][ T5844] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 653.465601][ T5844] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 653.475843][ T5844] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 653.552702][T26742] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5556'. [ 653.586938][T26737] lo speed is unknown, defaulting to 1000 [ 653.791696][T26750] sch_fq: defrate 0 ignored. [ 653.802727][T26750] pim6reg1: entered promiscuous mode [ 653.808102][T26750] pim6reg1: entered allmulticast mode [ 654.244817][T26771] netlink: 146584 bytes leftover after parsing attributes in process `syz.5.5563'. [ 654.248864][T26773] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 654.508779][T26792] netlink: 44 bytes leftover after parsing attributes in process `syz.5.5568'. [ 654.547102][T26737] chnl_net:caif_netlink_parms(): no params data found [ 654.559952][T26792] netlink: 43 bytes leftover after parsing attributes in process `syz.5.5568'. [ 654.568967][T26792] netlink: 'syz.5.5568': attribute type 6 has an invalid length. [ 654.631817][T26792] netlink: 'syz.5.5568': attribute type 5 has an invalid length. [ 655.005499][T26821] netlink: 'syz.5.5574': attribute type 11 has an invalid length. [ 655.014226][T26817] netlink: 'syz.5.5574': attribute type 11 has an invalid length. [ 655.063498][T26737] bridge0: port 1(bridge_slave_0) entered blocking state [ 655.074641][T26737] bridge0: port 1(bridge_slave_0) entered disabled state [ 655.084207][T26737] bridge_slave_0: entered allmulticast mode [ 655.093477][T26737] bridge_slave_0: entered promiscuous mode [ 655.142133][T26737] bridge0: port 2(bridge_slave_1) entered blocking state [ 655.149279][T26737] bridge0: port 2(bridge_slave_1) entered disabled state [ 655.163405][T26737] bridge_slave_1: entered allmulticast mode [ 655.171646][T26737] bridge_slave_1: entered promiscuous mode [ 655.249357][T26737] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 655.322535][T26737] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 655.395828][T26737] team0: Port device team_slave_0 added [ 655.437896][T26737] team0: Port device team_slave_1 added [ 655.446721][T26844] netlink: 'syz.3.5582': attribute type 1 has an invalid length. [ 655.461618][T26842] netlink: 'syz.6.5580': attribute type 1 has an invalid length. [ 655.476609][T26844] netlink: 'syz.3.5582': attribute type 2 has an invalid length. [ 655.478824][T26842] netlink: 'syz.6.5580': attribute type 4 has an invalid length. [ 655.538864][T26737] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 655.546966][T26737] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 655.573070][ T5844] Bluetooth: hci7: command tx timeout [ 655.580434][T26737] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 655.622265][T26737] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 655.629284][T26737] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 655.682716][T26850] netlink: 'syz.3.5584': attribute type 16 has an invalid length. [ 655.707454][T26737] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 655.714483][T26849] netlink: 'syz.3.5584': attribute type 16 has an invalid length. [ 655.736121][T26850] netlink: 'syz.3.5584': attribute type 17 has an invalid length. [ 655.753418][ T8050] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 20002 - 0 [ 655.779163][T26849] sit0: left promiscuous mode [ 655.813027][T26857] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 655.837350][T26849] bond0: left promiscuous mode [ 655.850469][T26849] bond_slave_0: left promiscuous mode [ 655.856156][T26849] bond_slave_1: left promiscuous mode [ 655.872830][T26849] mac80211_hwsim hwsim52 wlan1: left promiscuous mode [ 655.889585][T26849] bond0: left allmulticast mode [ 655.909553][T26849] bond_slave_0: left allmulticast mode [ 655.915470][T26849] bond_slave_1: left allmulticast mode [ 655.921965][T26849] mac80211_hwsim hwsim52 wlan1: left allmulticast mode [ 655.934914][T26849] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 655.981743][ T8050] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 20002 - 0 [ 656.000078][T26850] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 656.066523][ T8050] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 20002 - 0 [ 656.079933][T26863] syz_tun: entered allmulticast mode [ 656.085575][ T8050] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 20002 - 0 [ 656.183506][T26737] hsr_slave_0: entered promiscuous mode [ 656.201283][T26737] hsr_slave_1: entered promiscuous mode [ 656.207835][T26737] debugfs: 'hsr0' already exists in 'hsr' [ 656.215935][T26737] Cannot create hsr debugfs directory [ 656.334046][T26861] syz_tun: left allmulticast mode [ 657.652298][ T5844] Bluetooth: hci7: command tx timeout [ 658.499808][T26897] __nla_validate_parse: 12 callbacks suppressed [ 658.499830][T26897] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5596'. [ 658.534592][T26737] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 658.547890][T26737] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 658.558770][T26737] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 658.673450][T26737] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 658.694732][T26737] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 658.714802][T26737] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 658.796686][T26737] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 658.807325][T26737] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 658.820557][T26737] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 658.887187][T26737] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 658.897815][T26737] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 658.908716][T26737] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 659.278395][T26874] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 659.303176][T26737] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 659.391695][T26737] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 659.445350][T26737] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 659.509717][T26737] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 659.730656][ T5844] Bluetooth: hci7: command tx timeout [ 659.851636][T26737] 8021q: adding VLAN 0 to HW filter on device bond0 [ 659.910421][T26737] 8021q: adding VLAN 0 to HW filter on device team0 [ 659.936116][ T8050] bridge0: port 1(bridge_slave_0) entered blocking state [ 659.943384][ T8050] bridge0: port 1(bridge_slave_0) entered forwarding state [ 659.995234][T19776] bridge0: port 2(bridge_slave_1) entered blocking state [ 660.002487][T19776] bridge0: port 2(bridge_slave_1) entered forwarding state [ 660.033263][T26938] syzkaller0: entered allmulticast mode [ 660.316291][T26952] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_rx_wq": -EINTR [ 660.444742][T26737] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 660.529339][T26737] veth0_vlan: entered promiscuous mode [ 660.561436][T26737] veth1_vlan: entered promiscuous mode [ 660.662387][T26737] veth0_macvtap: entered promiscuous mode [ 660.687215][T26737] veth1_macvtap: entered promiscuous mode [ 660.746815][T26737] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 660.777736][T26974] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 660.845202][T26737] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 660.895470][ T8050] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 660.918299][ T8050] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 660.957579][ T8050] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 660.995730][ T8050] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 661.024694][T26988] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5620'. [ 661.292145][ T66] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 661.306422][ T66] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 661.441234][ T66] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 661.464239][ T66] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 661.571872][T27010] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5627'. [ 661.587809][T27009] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 661.598487][T27011] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 661.647298][T27017] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048) [ 661.657541][T27009] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048) [ 661.811402][ T5844] Bluetooth: hci7: command tx timeout [ 661.896237][T27028] 8021q: VLANs not supported on vcan0 [ 662.085667][T27040] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5636'. [ 662.190984][T27044] validate_nla: 2 callbacks suppressed [ 662.191007][T27044] netlink: 'syz.6.5639': attribute type 1 has an invalid length. [ 662.299339][T27044] 8021q: adding VLAN 0 to HW filter on device bond1 [ 662.319159][T27044] netlink: 'syz.6.5639': attribute type 1 has an invalid length. [ 662.345180][T27051] bond1: (slave veth0_to_bond): making interface the new active one [ 662.355000][T27051] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 662.381570][T27044] netlink: 'syz.6.5639': attribute type 2 has an invalid length. [ 662.453234][T27061] sch_tbf: burst 6 is lower than device syzkaller0 mtu (1514) ! [ 662.478825][T27061] syzkaller0: entered promiscuous mode [ 662.496941][T27061] syzkaller0: entered allmulticast mode [ 662.717944][T27074] netlink: 1047 bytes leftover after parsing attributes in process `syz.6.5646'. [ 662.745460][T27074] bridge_slave_1: default FDB implementation only supports local addresses [ 662.779560][T27072] ipvlan2: entered allmulticast mode [ 662.809314][T27072] batadv_slave_1: entered allmulticast mode [ 662.822236][T27072] batman_adv: batadv0: Adding interface: ipvlan2 [ 662.828818][T27072] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 662.969723][T27072] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 662.999833][T27072] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 663.029817][T27072] batman_adv: batadv0: Interface activated: ipvlan2 [ 663.077347][T27088] macvlan0: left promiscuous mode [ 663.084690][T27088] netlink: 'syz.5.5648': attribute type 2 has an invalid length. [ 663.593605][T27108] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5658'. [ 663.752127][T27116] netlink: 'syz.4.5661': attribute type 4 has an invalid length. [ 663.769792][T27116] netlink: 17 bytes leftover after parsing attributes in process `syz.4.5661'. [ 664.195125][T27142] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5670'. [ 664.336652][T27160] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5676'. [ 664.370117][T27160] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 664.621219][T27177] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5680'. [ 664.646459][T27177] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5680'. [ 664.713617][T27177] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5680'. [ 664.723035][ T124] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 664.741280][ T124] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 664.752168][T27177] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5680'. [ 664.762937][ T124] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 664.782302][ T124] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 664.886423][T27185] xt_time: unknown flags 0xf4 [ 665.322503][T27204] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5689'. [ 665.366894][ T124] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 665.403230][ T124] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 665.411940][ T797] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 665.530028][ T10] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 665.596150][T27221] xt_cluster: node mask cannot exceed total number of nodes [ 665.986668][ T1149] bond3 (unregistering): (slave ip6gre1): Releasing backup interface [ 666.006684][ T1149] ip6gre1 (unregistering): left promiscuous mode [ 666.371665][ T10] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 666.463305][ T1149] bond4 (unregistering): (slave gretap1): Releasing active interface [ 666.685210][ T1149] team0: Port device bridge4 removed [ 666.904918][ T1149] bond5 (unregistering): (slave bridge9): Releasing active interface [ 667.000319][ T1149] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 667.009354][ T1149] bond0 (unregistering): Released all slaves [ 667.021195][ T1149] bond1 (unregistering): Released all slaves [ 667.036627][ T1149] bond2 (unregistering): Released all slaves [ 667.055372][ T1149] bond3 (unregistering): Released all slaves [ 667.074560][ T1149] bond4 (unregistering): Released all slaves [ 667.093685][ T1149] bond5 (unregistering): Released all slaves [ 667.112948][ T1149] bond6 (unregistering): Released all slaves [ 667.315853][T27270] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5701'. [ 667.368719][T27267] vlan2: entered allmulticast mode [ 667.405944][T27267] hsr0: entered allmulticast mode [ 667.412549][T27267] hsr_slave_0: entered allmulticast mode [ 667.418367][T27267] hsr_slave_1: entered allmulticast mode [ 667.590813][T27285] bond2: option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 667.628837][T27285] bond2 (unregistering): Released all slaves [ 668.380138][T27333] syzkaller1: entered promiscuous mode [ 668.385693][T27333] syzkaller1: entered allmulticast mode [ 668.500922][T27347] tipc: Resetting bearer [ 668.624573][T27353] __nla_validate_parse: 8 callbacks suppressed [ 668.624590][T27353] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5724'. [ 668.641863][T27353] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5724'. [ 668.681731][T27354] netlink: 'syz.1.5723': attribute type 29 has an invalid length. [ 668.718354][T27356] tc_dump_action: action bad kind [ 668.766786][T27356] tc_dump_action: action bad kind [ 668.832328][T27361] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5726'. [ 669.012228][T27369] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5730'. [ 669.175857][T27377] netlink: 'syz.4.5731': attribute type 2 has an invalid length. [ 669.215773][ T1149] hsr_slave_0: left promiscuous mode [ 669.232690][ T1149] hsr_slave_1: left promiscuous mode [ 669.260080][ T1149] veth1_macvtap: left promiscuous mode [ 669.265881][ T1149] veth0_macvtap: left promiscuous mode [ 669.365904][T27382] IPVS: persistence engine module ip_vs_pe_ not found [ 669.574033][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 670.012463][T27399] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5738'. [ 670.234708][T27404] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 670.386389][T27404] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5739'. [ 670.407614][T27404] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5739'. [ 670.432327][T27404] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5739'. [ 670.575149][ T1149] IPVS: stop unused estimator thread 0... [ 670.586552][T27425] 8021q: VLANs not supported on lo [ 670.750810][T27430] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5746'. [ 670.765725][T27430] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5746'. [ 671.538322][T27482] openvswitch: netlink: Key 6 has unexpected len 16 expected 2 [ 671.600502][T27484] 8021q: VLANs not supported on lo [ 671.638052][T27488] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 671.943849][T27501] syzkaller1: entered promiscuous mode [ 671.949425][T27501] syzkaller1: entered allmulticast mode [ 672.191320][T27527] sctp: [Deprecated]: syz.3.5775 (pid 27527) Use of int in max_burst socket option. [ 672.191320][T27527] Use struct sctp_assoc_value instead [ 672.865430][T27559] sch_tbf: peakrate 5 is lower than or equals to rate 16783679728848008391 ! [ 672.942808][T27566] macvtap0: entered promiscuous mode [ 673.017420][T27576] veth0_macvtap: left promiscuous mode [ 673.159545][T27576] macvtap0 (unregistering): left promiscuous mode [ 673.183937][T27572] syzkaller1: entered promiscuous mode [ 673.190010][T27572] syzkaller1: entered allmulticast mode [ 673.333517][T27586] syzkaller0: entered promiscuous mode [ 673.339184][T27586] syzkaller0: entered allmulticast mode [ 673.455603][T20197] IPVS: starting estimator thread 0... [ 673.460047][T27594] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 673.563282][T27596] IPVS: using max 29 ests per chain, 69600 per kthread [ 675.916713][T27568] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 675.930601][T27605] __nla_validate_parse: 10 callbacks suppressed [ 675.930620][T27605] netlink: 224 bytes leftover after parsing attributes in process `syz.1.5794'. [ 676.286063][T27637] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5799'. [ 676.425043][T27645] xt_bpf: check failed: parse error [ 678.291248][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 678.514371][T27637] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5799'. [ 678.915568][T27685] netlink: 'syz.3.5810': attribute type 10 has an invalid length. [ 678.948603][T27685] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 679.060261][T27689] netlink: 'syz.4.5811': attribute type 30 has an invalid length. [ 679.119994][T27693] netlink: 80 bytes leftover after parsing attributes in process `syz.3.5812'. [ 679.421096][T27706] bond0: option miimon: invalid value (18446744073144631296) [ 679.428733][T27706] bond0: option miimon: allowed values 0 - 2147483647 [ 679.661443][T27722] IPv6: NLM_F_CREATE should be specified when creating new route [ 679.669335][T27722] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5818'. [ 679.735165][T27724] ipt_REJECT: TCP_RESET invalid for non-tcp [ 679.814830][T27728] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5822'. [ 680.646875][T27747] siw: device registration error -23 [ 682.352176][T27702] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 682.366024][T27754] netlink: 'syz.6.5831': attribute type 1 has an invalid length. [ 682.462127][T27759] netlink: 52 bytes leftover after parsing attributes in process `syz.1.5832'. [ 682.616172][T27761] bond8: option resend_igmp: invalid value (32767) [ 682.623409][T27761] bond8: option resend_igmp: allowed values 0 - 255 [ 682.669015][T27761] bond8 (unregistering): Released all slaves [ 683.005641][T27787] macvtap1: entered promiscuous mode [ 683.057896][T27787] macvtap1: entered allmulticast mode [ 683.086222][T27787] veth1_vlan: entered allmulticast mode [ 683.113473][T27794] macvtap2: entered promiscuous mode [ 683.118946][T27794] macvtap2: entered allmulticast mode [ 683.565294][T27835] SET target dimension over the limit! [ 683.666175][T27838] tipc: Enabling of bearer rejected, failed to enable media [ 683.725963][T27838] tipc: Enabling of bearer rejected, failed to enable media [ 683.743227][T27844] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5854'. [ 683.935343][T27854] tipc: New replicast peer: 255.255.255.255 [ 683.946149][T27854] tipc: Enabled bearer , priority 10 [ 684.044325][T27866] netlink: 132 bytes leftover after parsing attributes in process `syz.4.5860'. [ 684.168647][T27873] x_tables: duplicate underflow at hook 2 [ 684.187193][T27873] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5861'. [ 684.416954][T27878] syzkaller1: entered promiscuous mode [ 684.425462][T27878] syzkaller1: entered allmulticast mode [ 684.497051][T27883] sch_tbf: burst 0 is lower than device lo mtu (1514) ! [ 684.613034][T27888] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5868'. [ 684.650135][T27892] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5869'. [ 684.723178][T27892] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5869'. [ 684.934078][T27907] netlink: 'syz.5.5873': attribute type 21 has an invalid length. [ 684.946227][T27907] netlink: 128 bytes leftover after parsing attributes in process `syz.5.5873'. [ 685.002079][T27907] netlink: 3 bytes leftover after parsing attributes in process `syz.5.5873'. [ 685.047285][T27905] mac80211_hwsim hwsim52 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 685.057778][T27905] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5872'. [ 685.143739][T27915] rdma_rxe: rxe_newlink: failed to add vxcan1 [ 685.470586][T27945] netlink: 'syz.3.5885': attribute type 23 has an invalid length. [ 685.980740][T27975] Unsupported ieee802154 address type: 0 [ 685.994235][T27975] mac80211_hwsim hwsim49 wlan1: entered allmulticast mode [ 686.139033][T27979] syzkaller0: entered promiscuous mode [ 686.157547][T27979] syzkaller0: entered allmulticast mode [ 686.262296][T27985] netlink: 'syz.3.5898': attribute type 8 has an invalid length. [ 686.412533][T27994] syzkaller0: entered promiscuous mode [ 686.433090][T27994] syzkaller0: entered allmulticast mode [ 686.501770][T27999] netlink: 'syz.3.5902': attribute type 1 has an invalid length. [ 686.634609][ T10] IPVS: starting estimator thread 0... [ 686.724551][T27999] 8021q: adding VLAN 0 to HW filter on device bond8 [ 686.749746][T28011] IPVS: using max 26 ests per chain, 62400 per kthread [ 686.786411][T28005] bond8: (slave geneve2): making interface the new active one [ 686.809230][T28005] af_packet: tpacket_rcv: packet too big, clamped from 46 to 4294967272. macoff=96 [ 686.840202][T28005] bond8: (slave geneve2): Enslaving as an active interface with an up link [ 687.162971][T28036] lo speed is unknown, defaulting to 1000 [ 687.363810][T28046] netlink: 'syz.3.5913': attribute type 1 has an invalid length. [ 687.469919][T28044] netlink: 'syz.3.5913': attribute type 1 has an invalid length. [ 687.498505][T28049] __nla_validate_parse: 11 callbacks suppressed [ 687.498527][T28049] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5914'. [ 687.691083][T28056] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 687.863671][T28071] xt_hashlimit: size too large, truncated to 1048576 [ 688.310802][T28095] netlink: 276 bytes leftover after parsing attributes in process `syz.6.5926'. [ 688.380899][T28100] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5928'. [ 688.558842][T28112] netlink: 72 bytes leftover after parsing attributes in process `syz.4.5933'. [ 688.578414][T28111] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5931'. [ 688.599050][T28112] netlink: 'syz.4.5933': attribute type 19 has an invalid length. [ 688.617596][T28111] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5931'. [ 688.632455][T28112] netlink: 72 bytes leftover after parsing attributes in process `syz.4.5933'. [ 688.976690][T28139] netlink: 284 bytes leftover after parsing attributes in process `syz.1.5938'. [ 689.013438][T28141] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5940'. [ 689.040670][T28137] syzkaller0: entered promiscuous mode [ 689.044148][T28141] netlink: 36 bytes leftover after parsing attributes in process `syz.5.5940'. [ 689.046551][T28137] syzkaller0: entered allmulticast mode [ 689.068966][T28143] netlink: 'syz.4.5941': attribute type 1 has an invalid length. [ 689.143093][T28145] veth0_to_bond: entered allmulticast mode [ 689.352134][ T10] hid-generic 0005:07FF:0008.0002: unexpected long global item [ 689.378290][ T10] hid-generic 0005:07FF:0008.0002: probe with driver hid-generic failed with error -22 [ 689.473367][T28174] netlink: 'syz.4.5950': attribute type 1 has an invalid length. [ 689.518497][T28174] bond9: entered promiscuous mode [ 689.524535][T28174] 8021q: adding VLAN 0 to HW filter on device bond9 [ 689.966239][T28197] netlink: 'syz.6.5957': attribute type 10 has an invalid length. [ 692.160483][T28149] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 692.171882][T28164] netlink: 'syz.3.5948': attribute type 1 has an invalid length. [ 692.183079][T28164] NCSI netlink: No device for ifindex 0 [ 692.519290][T28225] __nla_validate_parse: 3 callbacks suppressed [ 692.519310][T28225] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5966'. [ 692.540398][T28229] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5967'. [ 692.798335][T28247] netlink: 'syz.4.5970': attribute type 1 has an invalid length. [ 692.810565][T28247] workqueue: Failed to create a rescuer kthread for wq "bond10": -EINTR [ 692.977557][T28259] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5972'. [ 693.082662][T28259] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5972'. [ 693.512604][T28284] IPVS: dh: TCP 172.20.20.170:0 - no destination available [ 693.622067][T28290] team0: Device gtp2 is up. Set it down before adding it as a team port [ 693.633371][T28292] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5981'. [ 694.185058][T28322] netlink: 56 bytes leftover after parsing attributes in process `syz.5.5993'. [ 694.251917][T28322] bond8 (unregistering): Released all slaves [ 694.289918][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 694.377589][T28329] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5996'. [ 694.613023][T28338] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6000'. [ 694.624993][T28336] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5997'. [ 694.666912][T28336] netlink: 'syz.4.5997': attribute type 3 has an invalid length. [ 694.774882][T28347] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6002'. [ 694.893803][T28350] veth5: entered promiscuous mode [ 694.992805][T28360] netlink: 'syz.1.6006': attribute type 1 has an invalid length. [ 695.045438][T28363] x_tables: duplicate underflow at hook 3 [ 695.154138][T28366] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 695.206491][T28366] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 695.235394][T28375] netlink: 'syz.5.6010': attribute type 1 has an invalid length. [ 695.353688][T28372] bond1: (slave gretap1): making interface the new active one [ 695.362947][T28372] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 695.407030][T28384] netlink: 'syz.5.6013': attribute type 58 has an invalid length. [ 695.539010][T28390] syzkaller0: entered promiscuous mode [ 695.549778][T28390] syzkaller0: entered allmulticast mode [ 695.565510][T28389] ÿÿÿÿÿÿ: renamed from virt_wifi0 [ 695.592236][T28393] netlink: 'syz.5.6016': attribute type 1 has an invalid length. [ 695.640741][T28393] netlink: 'syz.5.6016': attribute type 4 has an invalid length. [ 695.906768][T28412] netlink: 'syz.3.6021': attribute type 7 has an invalid length. [ 696.767758][T28445] tipc: Enabling of bearer rejected, already enabled [ 696.782514][T28445] syzkaller0: entered allmulticast mode [ 696.791062][T28445] syzkaller0: entered promiscuous mode [ 696.943774][T28451] sctp: [Deprecated]: syz.6.6033 (pid 28451) Use of struct sctp_assoc_value in delayed_ack socket option. [ 696.943774][T28451] Use struct sctp_sack_info instead [ 696.963806][T28448] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 697.044883][T28462] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 697.179988][T20627] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 697.190738][T20627] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 697.208402][T20627] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 697.216927][T20627] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 697.225528][T20627] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 697.386330][T28474] lo speed is unknown, defaulting to 1000 [ 697.562250][T28481] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 697.577805][T28464] lo speed is unknown, defaulting to 1000 [ 697.663030][T28488] netlink: 'syz.5.6040': attribute type 1 has an invalid length. [ 697.831574][T28488] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 698.167602][T28512] openvswitch: netlink: IP tunnel dst address not specified [ 698.195772][T28511] gre0: entered promiscuous mode [ 698.217711][T28511] gre0: entered allmulticast mode [ 698.515097][T28464] chnl_net:caif_netlink_parms(): no params data found [ 698.928967][T28464] bridge0: port 1(bridge_slave_0) entered blocking state [ 698.936826][T28464] bridge0: port 1(bridge_slave_0) entered disabled state [ 698.944622][T28464] bridge_slave_0: entered allmulticast mode [ 698.953144][T28464] bridge_slave_0: entered promiscuous mode [ 698.973645][T28464] bridge0: port 2(bridge_slave_1) entered blocking state [ 698.995018][T28464] bridge0: port 2(bridge_slave_1) entered disabled state [ 699.011303][T28464] bridge_slave_1: entered allmulticast mode [ 699.029507][T28464] bridge_slave_1: entered promiscuous mode [ 699.064751][T28562] netlink: 'syz.3.6060': attribute type 1 has an invalid length. [ 699.145397][T28565] __nla_validate_parse: 9 callbacks suppressed [ 699.145421][T28565] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6061'. [ 699.273634][T28562] bond9: entered promiscuous mode [ 699.279359][T28562] 8021q: adding VLAN 0 to HW filter on device bond9 [ 699.293885][T28464] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 699.315186][T28568] wlan1 speed is unknown, defaulting to 1000 [ 699.332439][T20627] Bluetooth: hci5: command tx timeout [ 699.341689][T28464] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 699.368870][T28568] wlan1 speed is unknown, defaulting to 1000 [ 699.417060][T28568] wlan1 speed is unknown, defaulting to 1000 [ 699.463224][T28568] infiniband óyz2: RDMA CMA: cma_listen_on_dev, error -98 [ 699.473575][T28464] team0: Port device team_slave_0 added [ 699.486258][T28464] team0: Port device team_slave_1 added [ 699.504766][T28575] netlink: 'syz.1.6064': attribute type 4 has an invalid length. [ 699.517740][T28575] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6064'. [ 699.543201][T28576] netlink: 'syz.1.6064': attribute type 1 has an invalid length. [ 699.557667][T28568] wlan1 speed is unknown, defaulting to 1000 [ 699.568026][T28568] wlan1 speed is unknown, defaulting to 1000 [ 699.631171][T28575] bond2: entered promiscuous mode [ 699.647323][T28575] 8021q: adding VLAN 0 to HW filter on device bond2 [ 699.674900][T28585] xt_hashlimit: size too large, truncated to 1048576 [ 699.709340][T28568] wlan1 speed is unknown, defaulting to 1000 [ 699.731857][T28583] bond2: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 699.746942][T28583] bond2: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 699.758396][T28583] bond2: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 699.815243][T28464] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 699.826477][T28464] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 699.853647][T28464] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 699.868642][T28464] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 699.877218][T28464] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 699.977021][T28464] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 699.992400][T28568] wlan1 speed is unknown, defaulting to 1000 [ 700.000942][T28568] wlan1 speed is unknown, defaulting to 1000 [ 700.043206][T28568] wlan1 speed is unknown, defaulting to 1000 [ 700.076174][T28568] wlan1 speed is unknown, defaulting to 1000 [ 700.108494][T28568] wlan1 speed is unknown, defaulting to 1000 [ 700.149388][T28464] hsr_slave_0: entered promiscuous mode [ 700.157171][T28464] hsr_slave_1: entered promiscuous mode [ 700.164394][T28464] debugfs: 'hsr0' already exists in 'hsr' [ 700.170619][T28464] Cannot create hsr debugfs directory [ 700.176273][T28568] wlan1 speed is unknown, defaulting to 1000 [ 700.208428][T28568] wlan1 speed is unknown, defaulting to 1000 [ 700.251534][T28568] wlan1 speed is unknown, defaulting to 1000 [ 700.429887][T28617] netlink: 256 bytes leftover after parsing attributes in process `syz.6.6075'. [ 700.472746][T28464] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20002 - 0 [ 700.528934][T28464] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20002 - 0 [ 700.579901][T28464] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20002 - 0 [ 700.631900][T28464] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20002 - 0 [ 700.659447][T28632] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6079'. [ 700.669446][T28632] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6079'. [ 700.758923][T28634] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6080'. [ 701.410060][T20627] Bluetooth: hci5: command tx timeout [ 703.077206][T28601] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 703.121560][T28464] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 703.190738][T28464] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 703.226654][T28657] xt_hashlimit: size too large, truncated to 1048576 [ 703.244494][T28464] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 703.265652][T28658] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6085'. [ 703.285396][T28658] validate_nla: 1 callbacks suppressed [ 703.285415][T28658] netlink: 'syz.5.6085': attribute type 7 has an invalid length. [ 703.315185][T28658] netlink: 'syz.5.6085': attribute type 8 has an invalid length. [ 703.317783][T28464] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 703.331591][T28658] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6085'. [ 703.348405][T28662] batadv_slave_0: entered promiscuous mode [ 703.365428][T28661] xt_hashlimit: Unknown mode mask C4, kernel too old? [ 703.495225][T20627] Bluetooth: hci5: command tx timeout [ 703.576256][T28659] batadv_slave_0: left promiscuous mode [ 703.696573][T28464] 8021q: adding VLAN 0 to HW filter on device bond0 [ 703.746666][T28464] 8021q: adding VLAN 0 to HW filter on device team0 [ 703.755542][T28682] openvswitch: netlink: Message has 8 unknown bytes. [ 703.775094][T28682] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6090'. [ 703.786002][ T8051] bridge0: port 1(bridge_slave_0) entered blocking state [ 703.793290][ T8051] bridge0: port 1(bridge_slave_0) entered forwarding state [ 703.829387][ T8051] bridge0: port 2(bridge_slave_1) entered blocking state [ 703.836683][ T8051] bridge0: port 2(bridge_slave_1) entered forwarding state [ 703.911087][T28691] netlink: 32 bytes leftover after parsing attributes in process `syz.5.6094'. [ 704.174673][T28703] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6097'. [ 704.188295][T28706] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6097'. [ 704.293191][T17769] IPVS: ip_vs_send_async error -101 [ 704.319317][T28464] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 704.384287][T28712] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6099'. [ 704.814978][T28742] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6107'. [ 704.860740][T28744] netlink: 'syz.1.6106': attribute type 1 has an invalid length. [ 704.868706][T28744] netlink: 'syz.1.6106': attribute type 2 has an invalid length. [ 704.920366][T28744] netlink: 'syz.1.6106': attribute type 1 has an invalid length. [ 704.967074][T28744] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6106'. [ 704.980262][T28464] veth0_vlan: entered promiscuous mode [ 705.027223][T28464] veth1_vlan: entered promiscuous mode [ 705.154821][T28464] veth0_macvtap: entered promiscuous mode [ 705.207197][T28464] veth1_macvtap: entered promiscuous mode [ 705.294853][T28464] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 705.344922][T28464] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 705.385109][ T8037] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 705.414274][T28771] netlink: 32 bytes leftover after parsing attributes in process `syz.6.6114'. [ 705.423477][ T8037] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 705.423524][ T8037] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 705.423560][ T8037] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 705.454275][T28772] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6113'. [ 705.520710][T28774] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 705.571406][T20627] Bluetooth: hci5: command tx timeout [ 705.591365][T28772] hsr0 (unregistering): left allmulticast mode [ 705.951174][ T8037] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 705.979899][ T8037] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 706.118971][ T8045] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 706.127976][T28789] netlink: 'syz.6.6120': attribute type 1 has an invalid length. [ 706.159820][ T8045] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 706.198166][T28789] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 706.424969][T28810] netlink: 'syz.5.6125': attribute type 3 has an invalid length. [ 706.718344][T28828] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 706.742495][T28835] netlink: 20 bytes leftover after parsing attributes in process `syz.5.6130'. [ 706.822345][T28836] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6130'. [ 706.945570][T28848] netlink: 'syz.6.6128': attribute type 1 has an invalid length. [ 707.000307][T28850] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6132'. [ 707.367903][T20225] IPVS: starting estimator thread 0... [ 707.479133][T28863] IPVS: using max 35 ests per chain, 84000 per kthread [ 707.494891][ T5844] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 707.528831][ T5844] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 707.539458][ T5844] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 707.547716][ T5844] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 707.556227][ T5844] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 707.983889][T28850] bridge0: port 2(bridge_slave_1) entered disabled state [ 707.991884][T28850] bridge0: port 1(bridge_slave_0) entered disabled state [ 708.488234][T28850] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 708.525228][T28850] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 709.121166][T28850] vlan2: left allmulticast mode [ 709.129964][T28850] hsr0: left allmulticast mode [ 709.135031][T28850] hsr_slave_0: left allmulticast mode [ 709.140866][T28850] hsr_slave_1: left allmulticast mode [ 709.147655][T28850] veth1_vlan: left allmulticast mode [ 709.154278][T28850] macvtap1: left promiscuous mode [ 709.159383][T28850] macvtap1: left allmulticast mode [ 709.180034][T28850] __nla_validate_parse: 75 callbacks suppressed [ 709.180056][T28850] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6132'. [ 709.195737][T28850] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6132'. [ 709.215585][T28850] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6132'. [ 709.227068][T28850] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6132'. [ 709.237899][T28850] bond2: left promiscuous mode [ 709.248167][T28850] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6132'. [ 709.415011][T28889] IPv6: NLM_F_CREATE should be specified when creating new route [ 709.444250][ T8051] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 709.473660][ T8051] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 709.506960][ T8051] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 709.520991][ T8051] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 709.531692][ T8051] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 709.542736][ T8051] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 709.583755][T28892] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6145'. [ 709.657584][ T5844] Bluetooth: hci1: command tx timeout [ 709.705452][ T8050] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 709.717932][ T8050] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 709.778789][ T8051] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 709.798376][ T8051] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 709.830673][T28864] lo speed is unknown, defaulting to 1000 [ 709.851235][T28902] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6146'. [ 709.860907][T28864] wlan1 speed is unknown, defaulting to 1000 [ 709.875137][T28904] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6147'. [ 710.114824][ T8050] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 710.140475][ T8050] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 710.341884][ T8050] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 710.364915][ T8050] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 710.388691][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 710.416076][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 710.509498][T28946] netlink: 64 bytes leftover after parsing attributes in process `syz.4.6158'. [ 710.548799][ T8050] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 710.559424][ T8050] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 710.587482][T28939] netlink: 60 bytes leftover after parsing attributes in process `syz.6.6157'. [ 710.654534][T28950] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 710.812886][T28950] netlink: 'syz.5.6159': attribute type 5 has an invalid length. [ 710.962069][T28968] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not security [ 710.977321][T28864] chnl_net:caif_netlink_parms(): no params data found [ 711.212086][ T8050] erspan0: left allmulticast mode [ 711.230059][ T8050] erspan0: left promiscuous mode [ 711.235365][ T8050] bridge0: port 1(erspan0) entered disabled state [ 711.312423][ T8050] tipc: Resetting bearer [ 711.440666][T28994] netlink: 'syz.4.6165': attribute type 9 has an invalid length. [ 711.714462][ T8050] bond1 (unregistering): (slave ip6gre1): Releasing backup interface [ 711.730112][ T5844] Bluetooth: hci1: command tx timeout [ 711.807161][ T8050] tipc: Disabling bearer [ 711.896448][ T8050] batman_adv: batadv0: Removing interface: gretap2 [ 711.948045][ T8050] bond8 (unregistering): (slave geneve2): Releasing active interface [ 712.115428][ T8050] bond6 (unregistering): (slave bridge4): Releasing backup interface [ 712.125702][ T8050] bridge4 (unregistering): left promiscuous mode [ 712.357354][ T8050] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 712.368972][ T8050] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 712.382674][ T8050] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 712.393614][ T8050] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 712.406713][ T8050] bond0 (unregistering): Released all slaves [ 712.419201][ T8050] bond1 (unregistering): Released all slaves [ 712.435653][ T8050] bond2 (unregistering): (slave veth5): Releasing active interface [ 712.445314][ T8050] veth0_to_bond: entered promiscuous mode [ 712.455159][ T8050] bond2 (unregistering): (slave veth0_to_bond): Releasing active interface [ 712.467488][ T8050] bond2 (unregistering): Released all slaves [ 712.485600][ T8050] bond3 (unregistering): Released all slaves [ 712.501531][ T8050] bond4 (unregistering): (slave lo): Releasing backup interface [ 712.512144][ T8050] bond4 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 712.527892][ T8050] bond4 (unregistering): Released all slaves [ 712.546716][ T8050] bond5 (unregistering): Released all slaves [ 712.562026][ T8050] bond6 (unregistering): Released all slaves [ 712.577288][ T8050] bond7 (unregistering): Released all slaves [ 712.596423][ T8050] bond8 (unregistering): Released all slaves [ 712.616496][ T8050] bond9 (unregistering): Released all slaves [ 712.954207][ T8050] tipc: Left network mode [ 713.101563][T28864] bridge0: port 1(bridge_slave_0) entered blocking state [ 713.109066][T28864] bridge0: port 1(bridge_slave_0) entered disabled state [ 713.127159][T28864] bridge_slave_0: entered allmulticast mode [ 713.146798][T28864] bridge_slave_0: entered promiscuous mode [ 713.208583][T28864] bridge0: port 2(bridge_slave_1) entered blocking state [ 713.219846][T28864] bridge0: port 2(bridge_slave_1) entered disabled state [ 713.234716][T28864] bridge_slave_1: entered allmulticast mode [ 713.252376][T28864] bridge_slave_1: entered promiscuous mode [ 713.328953][T29031] netlink: 'syz.4.6176': attribute type 1 has an invalid length. [ 713.392714][T28864] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 713.473066][T28864] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 713.552100][T29044] netlink: 'syz.6.6179': attribute type 51 has an invalid length. [ 713.751230][T29052] netlink: 'syz.1.6181': attribute type 11 has an invalid length. [ 713.805856][T28864] team0: Port device team_slave_0 added [ 713.813581][ T5844] Bluetooth: hci1: command tx timeout [ 713.856922][T28864] team0: Port device team_slave_1 added [ 713.916133][T28864] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 713.924125][T28864] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 713.985930][T28864] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 714.085685][T28864] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 714.111731][T28864] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 714.198228][T28864] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 714.276657][T29057] lo speed is unknown, defaulting to 1000 [ 714.356884][T29057] wlan1 speed is unknown, defaulting to 1000 [ 714.491477][T28864] hsr_slave_0: entered promiscuous mode [ 714.532834][T28864] hsr_slave_1: entered promiscuous mode [ 714.583271][T28864] debugfs: 'hsr0' already exists in 'hsr' [ 714.595812][T28864] Cannot create hsr debugfs directory [ 714.747900][ T8050] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 714.759972][ T8050] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 714.780539][ T8050] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 714.788081][ T8050] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 714.818234][ T8050] veth1_macvtap: left promiscuous mode [ 714.829150][ T8050] veth0_macvtap: left promiscuous mode [ 714.840049][ T8050] veth1_vlan: left promiscuous mode [ 714.845498][ T8050] veth0_vlan: left promiscuous mode [ 715.014293][T29091] "syz.6.6187" (29091) uses obsolete ecb(arc4) skcipher [ 715.368446][ T8050] team0 (unregistering): Port device team_slave_1 removed [ 715.492416][ T8050] smc: removing net device team0 with user defined pnetid SYZ2 [ 715.726199][T19180] wlan1 speed is unknown, defaulting to 1000 [ 715.890161][ T5844] Bluetooth: hci1: command tx timeout [ 715.986905][T29108] __nla_validate_parse: 8 callbacks suppressed [ 715.986926][T29108] netlink: 104 bytes leftover after parsing attributes in process `syz.5.6191'. [ 716.313582][ T8050] IPVS: stop unused estimator thread 0... [ 716.439851][T29129] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6197'. [ 716.630452][T29136] netlink: 36 bytes leftover after parsing attributes in process `syz.6.6200'. [ 716.641161][T29136] netlink: 36 bytes leftover after parsing attributes in process `syz.6.6200'. [ 716.653107][T29137] ipt_ECN: cannot use operation on non-tcp rule [ 716.714716][T29140] x_tables: ip_tables: ECN target: only valid in mangle table, not pimreg0 [ 716.750030][T29136] netlink: 36 bytes leftover after parsing attributes in process `syz.6.6200'. [ 716.759371][T29136] netlink: 36 bytes leftover after parsing attributes in process `syz.6.6200'. [ 717.052913][T29136] netlink: 36 bytes leftover after parsing attributes in process `syz.6.6200'. [ 717.067482][T28864] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 717.080516][T29136] netlink: 36 bytes leftover after parsing attributes in process `syz.6.6200'. [ 717.097865][T29156] syzkaller0: entered promiscuous mode [ 717.107560][T29156] syzkaller0: entered allmulticast mode [ 717.154699][T28864] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 717.190473][T29156] netlink: 'syz.4.6202': attribute type 1 has an invalid length. [ 717.247730][T29156] 8021q: adding VLAN 0 to HW filter on device bond1 [ 717.325417][T28864] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 717.367619][T28864] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 717.396934][T29156] bond1: entered promiscuous mode [ 717.404152][T29156] bond1: entered allmulticast mode [ 717.659085][T28864] 8021q: adding VLAN 0 to HW filter on device bond0 [ 717.686128][T28864] 8021q: adding VLAN 0 to HW filter on device team0 [ 717.697730][T29196] netlink: 48 bytes leftover after parsing attributes in process `syz.4.6210'. [ 717.716235][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 717.723475][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 717.745163][ T8037] bridge0: port 2(bridge_slave_1) entered blocking state [ 717.752404][ T8037] bridge0: port 2(bridge_slave_1) entered forwarding state [ 718.274259][T28864] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 718.344394][T29195] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 718.448721][T28864] veth0_vlan: entered promiscuous mode [ 718.512537][T28864] veth1_vlan: entered promiscuous mode [ 718.649378][T28864] veth0_macvtap: entered promiscuous mode [ 718.688187][T28864] veth1_macvtap: entered promiscuous mode [ 718.781620][T28864] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 718.800340][T29249] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6219'. [ 718.832336][T28864] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 718.870258][ T8045] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 718.891918][ T8045] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 718.922858][ T8045] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 718.940033][ T8045] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 719.209183][T19776] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 719.238117][T19776] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 719.428754][ T8050] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 719.449149][ T8050] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 719.793523][T29302] tap0: tun_chr_ioctl cmd 1074025676 [ 719.799001][T29302] tap0: owner set to 0 [ 719.807136][T29302] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 719.865014][T29305] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 720.380294][T29344] IPVS: ip_vs_add_dest(): server weight less than zero [ 720.403935][T29344] ip6_vti0: left promiscuous mode [ 720.458334][T29346] syzkaller0: entered promiscuous mode [ 720.464384][T29346] syzkaller0: entered allmulticast mode [ 721.153125][T29387] netlink: 'syz.5.6250': attribute type 10 has an invalid length. [ 721.196283][T29389] syzkaller1: entered promiscuous mode [ 721.212702][T29389] syzkaller1: entered allmulticast mode [ 721.237968][T29387] netdevsim netdevsim5 netdevsim0: left promiscuous mode [ 721.501917][T29407] __nla_validate_parse: 9 callbacks suppressed [ 721.501937][T29407] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6254'. [ 721.642647][T29417] netlink: 'syz.4.6256': attribute type 5 has an invalid length. [ 721.803342][T29423] netlink: 'syz.5.6259': attribute type 1 has an invalid length. [ 721.825727][T29423] netlink: 'syz.5.6259': attribute type 1 has an invalid length. [ 721.847023][T29423] netlink: 'syz.5.6259': attribute type 1 has an invalid length. [ 721.890481][T29423] netlink: 'syz.5.6259': attribute type 2 has an invalid length. [ 721.937752][T29428] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6259'. [ 721.970422][T29423] netlink: 76 bytes leftover after parsing attributes in process `syz.5.6259'. [ 722.024870][T29431] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6261'. [ 722.043863][T29435] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6263'. [ 722.055919][T29436] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6263'. [ 722.284157][T29451] netlink: 'syz.5.6267': attribute type 4 has an invalid length. [ 722.312352][T29453] netlink: 'syz.5.6267': attribute type 4 has an invalid length. [ 722.326572][T29456] netlink: 212340 bytes leftover after parsing attributes in process `syz.6.6266'. [ 722.343035][T29456] openvswitch: netlink: Port 167772160 exceeds max allowable 65535 [ 722.745385][T29477] ±ÿ: renamed from team_slave_1 (while UP) [ 722.899098][T29485] netlink: 'syz.1.6275': attribute type 1 has an invalid length. [ 722.927472][T29487] netlink: 'syz.1.6275': attribute type 1 has an invalid length. [ 722.985848][T29485] 8021q: adding VLAN 0 to HW filter on device bond3 [ 723.032110][T29485] IPv6: Can't replace route, no match found [ 723.038666][T29485] IPv6: Can't replace route, no match found [ 723.082740][T29492] bond3: (slave gretap2): making interface the new active one [ 723.097758][T29492] bond3: (slave gretap2): Enslaving as an active interface with an up link [ 723.134629][T29495] netlink: 'syz.4.6277': attribute type 1 has an invalid length. [ 723.323574][T29512] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 723.385467][T29513] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 723.894977][T29537] tipc: Started in network mode [ 723.900988][T29537] tipc: Node identity ac14140f, cluster identity 4711 [ 723.912885][T29537] tipc: New replicast peer: 255.255.255.255 [ 723.919444][T29537] tipc: Enabled bearer , priority 10 [ 724.029766][T29541] netlink: 200 bytes leftover after parsing attributes in process `syz.3.6287'. [ 724.045636][T29545] openvswitch: netlink: Geneve opt len 1 is not a multiple of 4. [ 724.621332][T29572] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6291'. [ 724.670805][T29570] netlink: 412 bytes leftover after parsing attributes in process `syz.1.6291'. [ 724.700556][T29570] openvswitch: netlink: Flow key attr not present in new flow. [ 724.780366][T29576] nbd: socks must be embedded in a SOCK_ITEM attr [ 725.029846][T20214] tipc: Node number set to 2886997007 [ 725.471067][T29615] netlink: 'syz.4.6305': attribute type 13 has an invalid length. [ 725.553951][ T8045] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 725.591018][ T8045] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 725.634862][ T8045] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 725.702122][ T8045] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 725.735163][T29633] netlink: 'syz.3.6308': attribute type 22 has an invalid length. [ 725.756987][T29633] netlink: 'syz.3.6308': attribute type 22 has an invalid length. [ 726.352581][ T8045] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 726.394281][ T8051] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 726.408598][ T8051] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 726.431538][ T8051] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 729.262145][T29670] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 729.488939][T29711] x_tables: duplicate underflow at hook 3 [ 729.590401][T29722] __nla_validate_parse: 10 callbacks suppressed [ 729.590426][T29722] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6326'. [ 729.646397][T29722] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 729.823102][T29734] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 729.985719][T29746] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6333'. [ 730.173609][T29746] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6333'. [ 730.248380][T29767] netlink: 72 bytes leftover after parsing attributes in process `syz.1.6337'. [ 730.259088][T29761] netlink: 40 bytes leftover after parsing attributes in process `syz.5.6335'. [ 730.281697][T29767] netlink: 72 bytes leftover after parsing attributes in process `syz.1.6337'. [ 730.586596][T29776] netlink: 596 bytes leftover after parsing attributes in process `syz.1.6340'. [ 730.622220][T29780] netlink: 'syz.5.6341': attribute type 1 has an invalid length. [ 730.703570][T29784] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6341'. [ 730.743938][T29785] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6343'. [ 730.957039][T29795] netlink: 'syz.6.6347': attribute type 1 has an invalid length. [ 731.125444][T29804] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 731.165220][T29804] netlink: 'syz.6.6350': attribute type 1 has an invalid length. [ 731.177221][ T798] IPVS: starting estimator thread 0... [ 731.249404][T29804] 8021q: adding VLAN 0 to HW filter on device bond3 [ 731.264771][T29807] siw: device registration error -23 [ 731.303819][T29809] IPVS: using max 28 ests per chain, 67200 per kthread [ 731.486391][T29829] netlink: 212408 bytes leftover after parsing attributes in process `syz.6.6357'. [ 731.627481][T29835] syzkaller0: entered promiscuous mode [ 731.638981][T29835] syzkaller0: entered allmulticast mode [ 731.757869][T29850] netlink: 'syz.3.6363': attribute type 1 has an invalid length. [ 731.758382][T29835] netlink: 'syz.5.6358': attribute type 10 has an invalid length. [ 731.824681][T29850] 8021q: adding VLAN 0 to HW filter on device bond2 [ 731.927190][T29850] 8021q: adding VLAN 0 to HW filter on device bond2 [ 731.936705][T29850] bond2: (slave xfrm1): The slave device specified does not support setting the MAC address [ 731.994874][T29850] bond2: (slave xfrm1): Error -95 calling set_mac_address [ 732.101722][T29864] bond2: (slave gretap1): making interface the new active one [ 732.124604][T29864] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 732.164873][T29858] macvlan2: entered promiscuous mode [ 732.171653][T29858] macvlan2: entered allmulticast mode [ 732.178326][T29858] bond2: entered promiscuous mode [ 732.185939][T29858] gretap1: entered promiscuous mode [ 732.193124][T29858] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 732.225633][T29858] bond2: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap1 [ 732.252908][T29858] bond2: left promiscuous mode [ 732.272755][T29858] gretap1: left promiscuous mode [ 732.400953][T29842] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 732.424467][T29855] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_tx_wq": -EINTR [ 732.527971][T29887] syzkaller1: entered promiscuous mode [ 732.550911][T29887] syzkaller1: entered allmulticast mode [ 732.895059][T29902] netlink: 'syz.1.6373': attribute type 1 has an invalid length. [ 733.197687][T29914] syzkaller0: entered promiscuous mode [ 733.250818][T29914] syzkaller0: entered allmulticast mode [ 733.436680][T29936] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 736.200065][T29945] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 736.206369][T29945] syzkaller1: linktype set to 823 [ 736.348569][T29960] __nla_validate_parse: 6 callbacks suppressed [ 736.348593][T29960] netlink: 45 bytes leftover after parsing attributes in process `syz.5.6390'. [ 736.365613][T29953] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 736.462052][T29964] sock: sock_set_timeout: `syz.1.6391' (pid 29964) tries to set negative timeout [ 736.541265][T29965] netlink: 'syz.1.6391': attribute type 1 has an invalid length. [ 736.559082][T29965] netlink: 224 bytes leftover after parsing attributes in process `syz.1.6391'. [ 736.760868][T29976] netlink: 128 bytes leftover after parsing attributes in process `syz.6.6395'. [ 736.785585][T29976] netlink: 128 bytes leftover after parsing attributes in process `syz.6.6395'. [ 736.807456][T29980] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6398'. [ 736.842141][T29983] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6397'. [ 736.856812][T29983] netlink: 164 bytes leftover after parsing attributes in process `syz.4.6397'. [ 736.878701][T29983] netlink: 'syz.4.6397': attribute type 21 has an invalid length. [ 736.889445][T29983] netlink: 156 bytes leftover after parsing attributes in process `syz.4.6397'. [ 736.917591][T29981] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 737.322332][T30012] netlink: 212 bytes leftover after parsing attributes in process `syz.1.6407'. [ 737.380300][T30014] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6408'. [ 737.440785][T30019] openvswitch: netlink: Tunnel attr 78 out of range max 16 [ 737.476703][T30022] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 737.562166][T30024] netlink: 'syz.1.6411': attribute type 10 has an invalid length. [ 737.591565][T30024] team0: Device vxcan1 is of different type [ 738.141781][T30059] netlink: 'syz.5.6424': attribute type 1 has an invalid length. [ 738.154105][T30061] F: renamed from gretap0 (while UP) [ 738.160005][T30059] netlink: 'syz.5.6424': attribute type 1 has an invalid length. [ 738.170554][T30061] F: entered allmulticast mode [ 738.191506][T30060] syzkaller1: entered promiscuous mode [ 738.198878][T30060] syzkaller1: entered allmulticast mode [ 738.794805][T30091] 8021q: adding VLAN 0 to HW filter on device bond8 [ 738.803640][T30096] bond8: entered promiscuous mode [ 738.815212][T30096] bond8: entered allmulticast mode [ 738.828219][T30096] 8021q: adding VLAN 0 to HW filter on device bond8 [ 738.841428][T30096] team0: Port device bond8 added [ 738.864867][T30099] syzkaller0: entered promiscuous mode [ 738.872416][T30099] syzkaller0: entered allmulticast mode [ 738.895098][T30091] vxcan2: entered promiscuous mode [ 738.901061][T30091] bond8: (slave vxcan2): refused to change device type [ 739.154095][T30114] x_tables: unsorted underflow at hook 4 [ 739.838604][T30157] netlink: 'syz.4.6449': attribute type 4 has an invalid length. [ 739.942702][T30169] netlink: 'syz.4.6449': attribute type 1 has an invalid length. [ 740.021375][T30160] syzkaller1: entered promiscuous mode [ 740.037697][T30164] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 324 [ 740.058568][T30160] syzkaller1: entered allmulticast mode [ 740.085849][T30164] macvlan2: entered promiscuous mode [ 740.092220][T30164] macvlan2: entered allmulticast mode [ 740.132223][T30164] bond9: (slave macvlan2): Opening slave failed [ 740.742947][T30216] nft_compat: unsupported protocol 0 [ 740.765049][T30218] syzkaller0: entered promiscuous mode [ 740.771220][T30218] syzkaller0: entered allmulticast mode [ 740.779746][T30218] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 741.396006][T30241] syzkaller0: entered promiscuous mode [ 741.415917][T30241] syzkaller0: entered allmulticast mode [ 741.602399][T30246] __nla_validate_parse: 20 callbacks suppressed [ 741.602422][T30246] netlink: 212344 bytes leftover after parsing attributes in process `syz.5.6473'. [ 741.643316][T30246] netlink: 212344 bytes leftover after parsing attributes in process `syz.5.6473'. [ 741.713268][T30252] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6474'. [ 741.998466][T30257] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6475'. [ 742.025502][T30259] netlink: 'syz.1.6476': attribute type 15 has an invalid length. [ 742.150620][T30266] xt_CT: You must specify a L4 protocol and not use inversions on it [ 742.154484][T30266] netlink: 'syz.3.6478': attribute type 51 has an invalid length. [ 742.172134][T30269] netlink: 'syz.1.6479': attribute type 1 has an invalid length. [ 742.217494][T30269] bond4: entered promiscuous mode [ 742.223847][T30269] 8021q: adding VLAN 0 to HW filter on device bond4 [ 742.232503][T30266] netlink: 'syz.3.6478': attribute type 10 has an invalid length. [ 742.261433][T30266] netlink: 16154 bytes leftover after parsing attributes in process `syz.3.6478'. [ 742.436610][T30282] netlink: 'syz.3.6483': attribute type 4 has an invalid length. [ 742.838742][T30300] bridge0: port 1(bridge_slave_0) entered disabled state [ 742.853382][T30296] syzkaller0: entered promiscuous mode [ 742.859058][T30296] syzkaller0: entered allmulticast mode [ 743.045814][T30311] netlink: 44 bytes leftover after parsing attributes in process `syz.5.6493'. [ 743.448417][T30338] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 743.481901][T30338] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 743.885412][T30359] tipc: Started in network mode [ 743.910589][T30359] tipc: Node identity ac14140f, cluster identity 4711 [ 743.918026][T30359] tipc: New replicast peer: 255.255.255.255 [ 743.936891][T30359] tipc: Enabled bearer , priority 10 [ 743.953955][T30361] netlink: 'syz.5.6506': attribute type 15 has an invalid length. [ 743.966390][T30363] Cannot find add_set index 2 as target [ 744.498034][T30398] h: entered promiscuous mode [ 744.597925][T30404] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6518'. [ 744.633051][T30406] bond3: entered allmulticast mode [ 744.666639][T30408] bridge1: entered promiscuous mode [ 744.687506][T30408] bridge1: entered allmulticast mode [ 744.698419][T30408] bond3: (slave bridge1): Enslaving as an active interface with an up link [ 744.895462][T30416] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6521'. [ 744.922441][T30416] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 745.050621][ T798] tipc: Node number set to 2886997007 [ 745.116150][T30430] netlink: 16 bytes leftover after parsing attributes in process `syz.6.6526'. [ 745.130158][T30427] tipc: Started in network mode [ 745.135104][T30427] tipc: Node identity 0e6533dec5c2, cluster identity 4711 [ 745.153540][T30427] tipc: Enabled bearer , priority 0 [ 745.184416][T30435] IPVS: set_ctl: invalid protocol: 30 34.78.0.0:1024 [ 745.249834][T20627] Bluetooth: hci1: command 0x0405 tx timeout [ 745.285830][T30427] syzkaller0: entered promiscuous mode [ 745.325262][T30427] syzkaller0: entered allmulticast mode [ 745.337486][T30427] tipc: Resetting bearer [ 745.403289][T30427] tipc: Resetting bearer [ 745.482945][T30464] netlink: 'syz.5.6533': attribute type 2 has an invalid length. [ 748.383431][T30427] tipc: Disabling bearer [ 748.396266][T30466] syzkaller0: entered promiscuous mode [ 748.403208][T30466] syzkaller0: entered allmulticast mode [ 748.495397][T20215] tipc: Node number set to 3416732638 [ 749.182278][T30521] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 749.205161][T20627] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 749.217554][T20627] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 749.227289][T20627] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 749.239412][T30525] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 749.257161][T20627] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 749.266256][T20627] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 749.315488][T30519] lo speed is unknown, defaulting to 1000 [ 749.324520][T30519] wlan1 speed is unknown, defaulting to 1000 [ 749.332841][T30526] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6551'. [ 749.470186][T19776] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 749.480641][ T124] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 749.495240][ T8051] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 749.506705][T30531] netlink: 'syz.4.6553': attribute type 10 has an invalid length. [ 749.528463][T30533] netlink: 'syz.6.6552': attribute type 16 has an invalid length. [ 749.538445][T30533] netlink: 52 bytes leftover after parsing attributes in process `syz.6.6552'. [ 749.539009][T30529] netlink: 'syz.3.6551': attribute type 10 has an invalid length. [ 749.583681][T30531] team0: Device ipvlan1 is up. Set it down before adding it as a team port [ 749.602111][ T124] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 749.614289][T30529] veth0_macvtap: left promiscuous mode [ 749.927264][T30519] chnl_net:caif_netlink_parms(): no params data found [ 750.080630][T30557] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6561'. [ 750.128161][ T8037] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0 [ 750.144012][ T8037] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 750.163890][T30561] netlink: 'syz.4.6561': attribute type 39 has an invalid length. [ 750.374191][ T8037] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0 [ 750.418792][ T8037] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 750.466263][T30570] can: request_module (can-proto-0) failed. [ 750.501465][T30570] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6564'. [ 750.665074][T30519] bridge0: port 1(bridge_slave_0) entered blocking state [ 750.673894][T30519] bridge0: port 1(bridge_slave_0) entered disabled state [ 750.682443][T30519] bridge_slave_0: entered allmulticast mode [ 750.730937][T30519] bridge_slave_0: entered promiscuous mode [ 750.799072][T30583] netlink: 56 bytes leftover after parsing attributes in process `syz.3.6566'. [ 750.867822][T30578] syzkaller0: entered promiscuous mode [ 750.897487][T30578] syzkaller0: entered allmulticast mode [ 750.909287][T30519] bridge0: port 2(bridge_slave_1) entered blocking state [ 750.938077][T30519] bridge0: port 2(bridge_slave_1) entered disabled state [ 750.950575][T30519] bridge_slave_1: entered allmulticast mode [ 750.959123][T30519] bridge_slave_1: entered promiscuous mode [ 751.006259][T30589] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6568'. [ 751.036935][T30583] bond4: entered promiscuous mode [ 751.054234][T30583] bond4: entered allmulticast mode [ 751.067016][T30583] 8021q: adding VLAN 0 to HW filter on device bond4 [ 751.133685][ T8037] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0 [ 751.170276][ T8037] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 751.334562][T20627] Bluetooth: hci4: command tx timeout [ 753.410714][ T5844] Bluetooth: hci4: command tx timeout [ 754.381192][T30589] team0: Port device team_slave_0 removed [ 754.415393][T30519] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 754.513456][ T8037] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0 [ 754.525497][ T8037] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 754.582877][T30519] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 754.613162][ T5844] Bluetooth: hci6: command 0x0406 tx timeout [ 754.685782][T30519] team0: Port device team_slave_0 added [ 754.734475][T30519] team0: Port device team_slave_1 added [ 754.797232][T30617] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6574'. [ 754.872831][T30519] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 754.900277][T30519] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 754.954472][T30519] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 755.045743][T30519] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 755.070133][T30519] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 755.140577][T30519] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 755.490636][T20627] Bluetooth: hci4: command tx timeout [ 755.806385][T30672] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6588'. [ 755.858613][T30651] bridge0: port 2(bridge_slave_1) entered disabled state [ 756.334358][T30651] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 756.384658][T30651] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 756.887564][T30651] geneve2: left allmulticast mode [ 756.906416][T30651] batman_adv: batadv0: Interface deactivated: ipvlan2 [ 756.915991][T30651] ipvlan2: left allmulticast mode [ 756.921820][T30651] batadv_slave_1: left allmulticast mode [ 756.930784][T30651] veth5: left promiscuous mode [ 757.023753][T30519] hsr_slave_0: entered promiscuous mode [ 757.031389][T30519] hsr_slave_1: entered promiscuous mode [ 757.038009][T30519] debugfs: 'hsr0' already exists in 'hsr' [ 757.044609][T30519] Cannot create hsr debugfs directory [ 757.076882][T30655] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 757.115416][T30677] tipc: Started in network mode [ 757.121031][T30677] tipc: Node identity 660a9518c4f6, cluster identity 4711 [ 757.132608][T30677] tipc: Enabled bearer , priority 11 [ 757.143317][ T8043] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 757.163865][ T8043] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 757.488119][ T8037] bond4 (unregistering): (slave gretap1): Releasing active interface [ 757.497817][ T8037] bond4 (unregistering): (slave gretap1): the permanent HWaddr of slave - 6a:89:6b:ac:57:0e - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 757.517034][ T8037] bond4 (unregistering): (slave gretap2): making interface the new active one [ 757.529277][T30695] IPVS: set_ctl: invalid protocol: 50 172.20.20.187:20002 [ 757.554246][ T8037] bond4 (unregistering): (slave gretap2): Releasing active interface [ 757.570114][T20627] Bluetooth: hci4: command tx timeout [ 757.597732][ T8037] bond3 (unregistering): (slave geneve2): Releasing active interface [ 757.875492][ T8037] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 757.886521][ T8037] bond0 (unregistering): (slave ÿ): Releasing backup interface [ 757.896070][ T8037] bond0 (unregistering): Released all slaves [ 757.907883][ T8037] bond1 (unregistering): Released all slaves [ 757.923904][ T8037] bond2 (unregistering): Released all slaves [ 757.941638][ T8037] bond3 (unregistering): Released all slaves [ 757.960743][ T8037] bond4 (unregistering): Released all slaves [ 757.980481][ T8037] bond5 (unregistering): Released all slaves [ 758.003074][ T8037] bond6 (unregistering): (slave C): Releasing backup interface [ 758.014031][ T8037] bond6 (unregistering): (slave C): last VLAN challenged slave left bond - VLAN blocking is removed [ 758.025853][ T8037] bond6 (unregistering): Released all slaves [ 758.051413][ T8037] bond7 (unregistering): (slave veth7): Releasing active interface [ 758.062594][ T8037] bond7 (unregistering): (slave veth0_to_bond): Releasing active interface [ 758.077990][ T8037] bond7 (unregistering): (slave veth9): Releasing active interface [ 758.088828][ T8037] bond7 (unregistering): Released all slaves [ 758.105659][ T8037] team0: Port device bond8 removed [ 758.114181][ T8037] bond8 (unregistering): Released all slaves [ 758.128899][ T8037] bond9 (unregistering): Released all slaves [ 758.148968][ T8043] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 758.168060][T30683] netlink: 'syz.3.6593': attribute type 2 has an invalid length. [ 758.333296][T20226] tipc: Node number set to 2734462232 [ 758.377057][ T8037] tipc: Disabling bearer [ 758.389909][ T8037] tipc: Disabling bearer [ 758.412377][ T8037] tipc: Left network mode [ 758.439469][T30704] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6595'. [ 758.484452][T30702] netlink: 76 bytes leftover after parsing attributes in process `syz.3.6596'. [ 758.854170][T30720] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6598'. [ 759.443202][T30747] netlink: 75 bytes leftover after parsing attributes in process `syz.4.6603'. [ 759.978791][T30768] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6607'. [ 760.032545][T30768] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6607'. [ 760.360377][T30776] batadv_slave_0: entered promiscuous mode [ 760.425272][T30787] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6611'. [ 760.443822][T30789] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6611'. [ 760.466354][T30790] netlink: 'syz.6.6612': attribute type 3 has an invalid length. [ 760.571251][T30786] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6611'. [ 760.625812][T30789] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 760.633112][T30773] batadv_slave_0: left promiscuous mode [ 760.658568][T30519] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 760.773929][T30519] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 760.911952][T30818] x_tables: duplicate entry at hook 2 [ 760.921972][T30519] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 760.967416][T30818] netlink: 16 bytes leftover after parsing attributes in process `syz.6.6618'. [ 761.003503][T30519] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 761.911772][T30855] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6622'. [ 761.981588][T30856] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6622'. [ 762.049191][T30859] xt_TCPMSS: Only works on TCP SYN packets [ 762.137402][ T8037] vlan1 (unregistering): left allmulticast mode [ 762.146651][ T8037] veth0_vlan (unregistering): left allmulticast mode [ 762.243051][ T8037] team0 (unregistering): Port device team_slave_1 removed [ 762.264602][ T8037] team0 (unregistering): Port device team_slave_0 removed [ 762.287755][T30871] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6627'. [ 762.627582][T30880] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6628'. [ 762.769446][T30519] 8021q: adding VLAN 0 to HW filter on device bond0 [ 762.779053][T30885] netlink: 'syz.6.6631': attribute type 1 has an invalid length. [ 762.813676][T30885] netlink: 'syz.6.6631': attribute type 2 has an invalid length. [ 762.818316][T30519] 8021q: adding VLAN 0 to HW filter on device team0 [ 762.881288][ T8037] IPVS: stop unused estimator thread 0... [ 762.895278][T19776] bridge0: port 1(bridge_slave_0) entered blocking state [ 762.902525][T19776] bridge0: port 1(bridge_slave_0) entered forwarding state [ 762.955477][T19776] bridge0: port 2(bridge_slave_1) entered blocking state [ 762.962762][T19776] bridge0: port 2(bridge_slave_1) entered forwarding state [ 763.257002][T30519] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 763.492628][T30519] veth0_vlan: entered promiscuous mode [ 763.512807][T30519] veth1_vlan: entered promiscuous mode [ 763.541901][T30519] veth0_macvtap: entered promiscuous mode [ 763.553580][T30519] veth1_macvtap: entered promiscuous mode [ 763.574477][T30519] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 763.592068][T30519] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 763.607800][ T8051] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 763.617040][ T8051] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 763.627080][ T8051] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 763.637500][ T8051] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 763.720468][T19776] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 763.728360][T19776] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 763.767053][ T8051] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 763.776202][ T8051] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 765.649971][T17769] IPVS: ip_vs_send_async error -101 [ 773.651333][ T30] INFO: task syz.0.5079:25007 blocked for more than 143 seconds. [ 773.659170][ T30] Not tainted syzkaller #0 [ 773.664292][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 773.673265][ T30] task:syz.0.5079 state:D stack:25816 pid:25007 tgid:24998 ppid:16424 task_flags:0x400040 flags:0x00080002 [ 773.685726][ T30] Call Trace: [ 773.689061][ T30] [ 773.692137][ T30] __schedule+0x15dd/0x52d0 [ 773.696714][ T30] ? __pfx___schedule+0x10/0x10 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=-1 (errno 104: Connection reset by peer) [ 773.701893][ T30] ? schedule+0x90/0x360 [ 773.706214][ T30] schedule+0x164/0x360 [ 773.711993][ T30] schedule_preempt_disabled+0x13/0x30 [ 773.717895][ T30] __mutex_lock+0x7fe/0x1300 [ 773.722997][ T30] ? __mutex_lock+0x5ac/0x1300 [ 773.727836][ T30] ? nfsd_nl_rpc_status_get_dumpit+0xdc/0x1410 [ 773.734922][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 773.740852][ T30] ? stack_trace_save+0xa9/0x100 [ 773.745863][ T30] ? __pfx_stack_trace_save+0x10/0x10 [ 773.751739][ T30] nfsd_nl_rpc_status_get_dumpit+0xdc/0x1410 [ 773.757814][ T30] ? kasan_save_track+0x4f/0x80 [ 773.763304][ T30] ? kasan_save_track+0x3e/0x80 [ 773.768299][ T30] ? __kasan_kmalloc+0x93/0xb0 [ 773.773731][ T30] ? __alloc_skb+0x2c1/0x7d0 [ 773.778396][ T30] ? netlink_dump+0x1ef/0xe80 [ 773.783748][ T30] ? __netlink_dump_start+0x5cb/0x7e0 [ 773.789174][ T30] ? genl_family_rcv_msg_dumpit+0x213/0x310 [ 773.819837][ T30] ? genl_rcv_msg+0x5e8/0x7a0 [ 773.824705][ T30] ? netlink_rcv_skb+0x232/0x4b0 [ 773.900035][ T30] ? genl_rcv+0x28/0x40 [ 773.904303][ T30] ? netlink_unicast+0x80f/0x9b0 [ 773.909297][ T30] ? netlink_sendmsg+0x813/0xb40 [ 773.939950][ T30] ? ____sys_sendmsg+0x972/0x9f0 [ 773.944999][ T30] ? ___sys_sendmsg+0x2a5/0x360 [ 773.950288][ T30] ? __x64_sys_sendmsg+0x1bd/0x2a0 [ 773.955543][ T30] ? do_syscall_64+0x14d/0xf80 [ 773.960765][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 773.966902][ T30] ? __pfx_nfsd_nl_rpc_status_get_dumpit+0x10/0x10 [ 773.975915][ T30] ? rcu_is_watching+0x15/0xb0 [ 774.000134][ T30] ? trace_kmalloc+0x2a/0x110 [ 774.005002][ T30] ? __kmalloc_node_track_caller_noprof+0x4f9/0x7b0 [ 774.030866][ T30] genl_dumpit+0x10b/0x1b0 [ 774.035393][ T30] netlink_dump+0x722/0xe80 [ 774.051446][ T30] ? __pfx_netlink_dump+0x10/0x10 [ 774.056605][ T30] ? genl_start+0x499/0x6c0 [ 774.070102][ T30] __netlink_dump_start+0x5cb/0x7e0 [ 774.075445][ T30] genl_family_rcv_msg_dumpit+0x213/0x310 [ 774.089838][ T30] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 774.096178][ T30] ? genl_get_cmd+0x4a8/0x930 [ 774.105676][ T30] ? __pfx_genl_start+0x10/0x10 [ 774.111108][ T30] ? __pfx_genl_dumpit+0x10/0x10 [ 774.116117][ T30] ? __pfx_genl_done+0x10/0x10 [ 774.121415][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 774.127541][ T30] genl_rcv_msg+0x5e8/0x7a0 [ 774.134503][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 774.141700][ T30] ? __pfx_nfsd_nl_rpc_status_get_dumpit+0x10/0x10 [ 774.148293][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 774.153587][ T30] netlink_rcv_skb+0x232/0x4b0 [ 774.158415][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 774.190094][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 774.195497][ T30] ? down_read+0x272/0x2e0 [ 774.210326][ T30] ? genl_rcv+0xd/0x40 [ 774.214517][ T30] genl_rcv+0x28/0x40 [ 774.218560][ T30] netlink_unicast+0x80f/0x9b0 [ 774.239930][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 774.245325][ T30] ? netlink_sendmsg+0x650/0xb40 [ 774.260038][ T30] ? skb_put+0x11b/0x210 [ 774.264380][ T30] netlink_sendmsg+0x813/0xb40 [ 774.269294][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 774.294106][ T30] ? aa_sock_msg_perm+0xf1/0x1b0 [ 774.299167][ T30] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 774.310027][ T30] ____sys_sendmsg+0x972/0x9f0 [ 774.314892][ T30] ? futex_unqueue+0x211/0x240 [ 774.340079][ T30] ? __pfx_____sys_sendmsg+0x10/0x10 [ 774.345498][ T30] ? import_iovec+0x73/0xa0 [ 774.359777][ T30] ___sys_sendmsg+0x2a5/0x360 [ 774.364578][ T30] ? __pfx____sys_sendmsg+0x10/0x10 [ 774.380073][ T30] ? futex_wait+0x29a/0x380 [ 774.384713][ T30] ? __fget_files+0x2a/0x420 [ 774.389354][ T30] ? __fget_files+0x3a0/0x420 [ 774.398740][ T30] __x64_sys_sendmsg+0x1bd/0x2a0 [ 774.404484][ T30] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 774.410414][ T30] ? rcu_is_watching+0x15/0xb0 [ 774.415258][ T30] do_syscall_64+0x14d/0xf80 [ 774.420074][ T30] ? trace_irq_disable+0x3b/0x150 [ 774.425163][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 774.434236][ T30] ? clear_bhb_loop+0x40/0x90 [ 774.439009][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 774.446765][ T30] RIP: 0033:0x7f920d59c819 [ 774.452397][ T30] RSP: 002b:00007f920b7f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 774.461371][ T30] RAX: ffffffffffffffda RBX: 00007f920d816090 RCX: 00007f920d59c819 [ 774.469417][ T30] RDX: 0000000000004000 RSI: 0000200000000180 RDI: 0000000000000004 [ 774.478690][ T30] RBP: 00007f920d632c91 R08: 0000000000000000 R09: 0000000000000000 [ 774.487131][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 774.495894][ T30] R13: 00007f920d816128 R14: 00007f920d816090 R15: 00007ffc0c293a88 [ 774.505332][ T30] [ 774.508558][ T30] [ 774.508558][ T30] Showing all locks held in the system: [ 774.516401][ T30] 1 lock held by khungtaskd/30: [ 774.521838][ T30] #0: ffffffff8e75e5e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 774.549040][ T30] 3 locks held by kworker/1:2/798: [ 774.556171][ T30] #0: ffff88813fe0f148 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0xa52/0x18c0 [ 774.568589][ T30] #1: ffffc900049c7c40 (free_ipc_work){+.+.}-{0:0}, at: process_scheduled_works+0xa8d/0x18c0 [ 774.579059][ T30] #2: ffffffff8e7648f8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x38d/0x770 [ 774.591183][ T30] 2 locks held by getty/5581: [ 774.595893][ T30] #0: ffff8880223fb0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 774.606397][ T30] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13c0 [ 774.617149][ T30] 2 locks held by syz.2.3413/18489: [ 774.622588][ T30] #0: ffffffff8fc3de70 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 774.631232][ T30] #1: ffffffff8ea86b88 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x141/0x1670 [ 774.642870][ T30] 3 locks held by kworker/u8:29/19776: [ 774.648400][ T30] #0: ffff8880b863ae60 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x31/0x150 [ 774.658756][ T30] #1: ffff8880b8624588 (psi_seq){-.-.}-{0:0}, at: psi_task_switch+0x53/0x880 [ 774.668254][ T30] #2: ffff88808a528788 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x4a0 [ 774.678591][ T30] 3 locks held by syz.0.5079/25007: [ 774.684241][ T30] #0: ffffffff8fc3de70 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 774.693079][ T30] #1: ffff888065b1d6f0 (nlk_cb_mutex-GENERIC){+.+.}-{4:4}, at: __netlink_dump_start+0xfe/0x7e0 [ 774.703829][ T30] #2: ffffffff8ea86b88 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_rpc_status_get_dumpit+0xdc/0x1410 [ 774.714515][ T30] 1 lock held by syz-executor/26737: [ 774.720180][ T30] #0: ffffffff8e7648f8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x38d/0x770 [ 774.731351][ T30] 4 locks held by syz-executor/28464: [ 774.737989][ T30] #0: ffff88805c44cec0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x5a0 [ 774.748189][ T30] #1: ffff88805c44c0c0 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x640/0x10e0 [ 774.758292][ T30] #2: ffffffff8fd5d528 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x260 [ 774.768642][ T30] #3: ffff8880248e4b00 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x92/0x570 [ 774.781353][ T30] [ 774.783808][ T30] ============================================= [ 774.783808][ T30] [ 774.792591][ T30] NMI backtrace for cpu 0 [ 774.792612][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 774.792636][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 774.792649][ T30] Call Trace: [ 774.792658][ T30] [ 774.792667][ T30] dump_stack_lvl+0xe8/0x150 [ 774.792703][ T30] nmi_cpu_backtrace+0x274/0x2d0 [ 774.792727][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 774.792757][ T30] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 774.792783][ T30] sys_info+0x135/0x170 [ 774.792813][ T30] watchdog+0xfd9/0x1030 [ 774.792839][ T30] ? watchdog+0x21a/0x1030 [ 774.792866][ T30] kthread+0x388/0x470 [ 774.792888][ T30] ? __pfx_watchdog+0x10/0x10 [ 774.792906][ T30] ? __pfx_kthread+0x10/0x10 [ 774.792929][ T30] ret_from_fork+0x51e/0xb90 [ 774.792960][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 774.792985][ T30] ? __switch_to+0xc7d/0x1450 [ 774.793012][ T30] ? __pfx_kthread+0x10/0x10 [ 774.793034][ T30] ret_from_fork_asm+0x1a/0x30 [ 774.793081][ T30] [ 774.793090][ T30] Sending NMI from CPU 0 to CPUs 1: [ 774.908389][ C1] NMI backtrace for cpu 1 [ 774.908409][ C1] CPU: 1 UID: 0 PID: 20226 Comm: kworker/1:7 Not tainted syzkaller #0 PREEMPT(full) [ 774.908431][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 774.908443][ C1] Workqueue: rcu_gp process_srcu [ 774.908473][ C1] RIP: 0010:delay_tsc+0x60/0xc0 [ 774.908493][ C1] Code: c1 e7 20 49 09 c7 4d 29 f7 49 39 df 73 53 bf 01 00 00 00 e8 22 db e5 f5 65 8b 05 8b 7c 6e 07 85 c0 74 1c f3 90 bf 01 00 00 00 6b d9 e5 f5 e8 e6 78 01 00 39 c5 75 0e 0f 01 f9 66 90 eb bd e8 [ 774.908509][ C1] RSP: 0018:ffffc9000dcc7908 EFLAGS: 00000286 [ 774.908525][ C1] RAX: 0000000080000000 RBX: 0000000000002af9 RCX: 0000000000000000 [ 774.908538][ C1] RDX: 0000000000000192 RSI: ffffffff8c27d0e0 RDI: 0000000000000001 [ 774.908550][ C1] RBP: 0000000000000001 R08: ffffe8ffffd751c7 R09: 1ffffd1ffffaea38 [ 774.908563][ C1] R10: dffffc0000000000 R11: ffffffff8bae1350 R12: 0000000000000000 [ 774.908576][ C1] R13: 0000000000000001 R14: 000001924aeb3ef2 R15: 0000000000000a75 [ 774.908588][ C1] FS: 0000000000000000(0000) GS:ffff888125557000(0000) knlGS:0000000000000000 [ 774.908603][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 774.908615][ C1] CR2: 00007fff7b460f3c CR3: 0000000035114000 CR4: 00000000003526f0 [ 774.908632][ C1] Call Trace: [ 774.908639][ C1] [ 774.908649][ C1] try_check_zero+0x44b/0x4d0 [ 774.908680][ C1] process_srcu+0x31d/0x1630 [ 774.908712][ C1] ? process_scheduled_works+0xa8d/0x18c0 [ 774.908735][ C1] ? process_scheduled_works+0xa8d/0x18c0 [ 774.908758][ C1] process_scheduled_works+0xb6e/0x18c0 [ 774.908798][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 774.908824][ C1] ? assign_work+0x3d5/0x5e0 [ 774.908848][ C1] worker_thread+0xa53/0xfc0 [ 774.908887][ C1] kthread+0x388/0x470 [ 774.908904][ C1] ? __pfx_worker_thread+0x10/0x10 [ 774.908926][ C1] ? __pfx_kthread+0x10/0x10 [ 774.908944][ C1] ret_from_fork+0x51e/0xb90 [ 774.908968][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 774.908990][ C1] ? __switch_to+0xc7d/0x1450 [ 774.909011][ C1] ? __pfx_kthread+0x10/0x10 [ 774.909028][ C1] ret_from_fork_asm+0x1a/0x30 [ 774.909064][ C1] [ 775.221802][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 775.228763][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 775.237923][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 775.248206][ T30] Call Trace: [ 775.251530][ T30] [ 775.254516][ T30] vpanic+0x56c/0xa60 [ 775.258554][ T30] ? __pfx___schedule+0x10/0x10 [ 775.263535][ T30] ? __pfx_vpanic+0x10/0x10 [ 775.268101][ T30] ? __pfx_console_unlock+0x10/0x10 [ 775.273359][ T30] panic+0xc5/0xd0 [ 775.277142][ T30] ? __pfx_panic+0x10/0x10 [ 775.281700][ T30] ? preempt_schedule_thunk+0x16/0x30 [ 775.287128][ T30] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 775.293327][ T30] watchdog+0x1023/0x1030 [ 775.297705][ T30] ? watchdog+0x21a/0x1030 [ 775.302174][ T30] kthread+0x388/0x470 [ 775.306288][ T30] ? __pfx_watchdog+0x10/0x10 [ 775.311006][ T30] ? __pfx_kthread+0x10/0x10 [ 775.315651][ T30] ret_from_fork+0x51e/0xb90 [ 775.320294][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 775.325450][ T30] ? __switch_to+0xc7d/0x1450 [ 775.330183][ T30] ? __pfx_kthread+0x10/0x10 [ 775.334818][ T30] ret_from_fork_asm+0x1a/0x30 [ 775.339663][ T30] [ 775.342881][ T30] Kernel Offset: disabled [ 775.347219][ T30] Rebooting in 86400 seconds..