last executing test programs: 4m37.291683633s ago: executing program 4 (id=1941): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0xba}, [@ldst={0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd96, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000003000000000000000000000903000000010000000000000f03000000000000000000000202000000005f"], 0x0, 0x3f}, 0x28) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@gettaction={0x150, 0x32, 0x20, 0x70bd2c, 0x25dfdbfb, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x0, 0x1}}, @action_gd=@TCA_ACT_TAB={0x80, 0x1, [{0x10, 0xd, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0x10, 0x4, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x6, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40000081}}, {0x10, 0x20, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0xc, 0x1f, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4654}}, {0x10, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0xc, 0x10, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8000}}, {0xc, 0xd, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0xc, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}]}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc}, @action_gd=@TCA_ACT_TAB={0x7c, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0x10, 0x17, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0x14, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0xc, 0x7, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xa}}, {0x10, 0x1e, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0x10, 0x1a, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0xc, 0xb, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0x10, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}]}]}, 0x150}}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0xd, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="760a0000000000006111500000000000180000000000000000000000000000009500000000000000ad9b46fab8acb550abbcbc2fe4479d41d7d268ab1bb18e2356c11ed8a120065feade11ca40757fa7afaa62026f9dc39ac65a0f3b0be5de74532fc4c03e3a6682d3e4de34c7606b0525149c389184c570797e8714bef14c182fbb2a9e55666b7271da92cb90060a4f8ba444fa6ea4ce0d778afb58556bea1fd3ad2900"/178], &(0x7f0000000080)='syzkaller\x00'}, 0x90) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="2400000018000900000000000000000002000000ff0000010000000008000500ac1414"], 0x24}}, 0x0) pread64(r0, &(0x7f0000000580)=""/230, 0xe6, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="0500000012a4b9d5f111520000000000851000000200000085000000000000009500081000003a3a2ed8d9b24d5d7366"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) 4m37.152255279s ago: executing program 2 (id=1944): r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0xbb}, [@ldst={0x4}]}, &(0x7f0000003ff6)='GPL\x00', 0xa, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, r0, 0x8, &(0x7f00000000c0), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) 4m37.100142347s ago: executing program 4 (id=1945): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000800)=@newtaction={0xe6c, 0x30, 0x25, 0x0, 0x0, {}, [{0xe58, 0x1, [@m_pedit={0xe54, 0x1, 0x0, 0x0, {{0xa}, {0xe28, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0xd}, [{0x0, 0x0, 0x81, 0x0, 0x2}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x8001}, {0x0, 0x0, 0x0, 0x1000}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, {0x3, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x7}, {0x0, 0x6}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x4}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0xfffffffe}, {0x0, 0x0, 0x80}, {}, {}, {}, {0x0, 0x0, 0x80000001}, {0x0, 0x0, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5efd3e9c}, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {0xfffffffa}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xee0e}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {0x9}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0xfffffffe}], [{}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {0x1}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}]}}, @TCA_PEDIT_KEYS_EX={0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe6c}}, 0x0) r1 = socket(0x10, 0x80003, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) r6 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r6, &(0x7f0000000080)={0x1a, 0x0, 0x2, 0x0, 0x20}, 0x10) listen(r6, 0x0) listen(r6, 0x7) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000240)=ANY=[@ANYBLOB="150000005500bbca000000000000000007"], 0x18}}, 0x0) r8 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f00000004c0)={'vcan0\x00', 0x0}) connect$can_bcm(r8, &(0x7f00000000c0)={0x1d, r9}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r0, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000280)={&(0x7f0000001680)={0x168, 0x0, 0x800, 0x70bd28, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0xc4, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x61dffd19}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8a}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x81}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}]}, @TIPC_NLA_NODE={0x20, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x5}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x1000}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8000}]}, @TIPC_NLA_SOCK={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}]}, @TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xffffffff}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1d35}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x122b5eaf}, @TIPC_NLA_SOCK_CON={0x4}]}]}, 0x168}, 0x1, 0x0, 0x0, 0x4044884}, 0x24000054) sendmsg$can_bcm(r8, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x1, 0x840, 0x0, {}, {0x77359400}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "ef1d62ee7e923b0ad9cda5b28dd4753620a2f0271768a8284c18a4e2b5e44dc77098b18fd964df81213608ec503db52d42f1a78c97322f4ae4c8dc89cf2b1440"}}, 0x80}}, 0x0) sendmsg$can_bcm(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="030000e0010000000400008007020000d467aef0f23fe738"], 0x48}, 0x1, 0x0, 0x0, 0x4001}, 0x4000000) close(r8) r10 = socket$inet6(0xa, 0x802, 0x0) sendmsg$inet(r10, &(0x7f0000000300)={&(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10, 0x0, 0x0, &(0x7f0000000440)=[@ip_tos_u8={{0x11}}, @ip_retopts={{0x1c, 0x0, 0x7, {[@timestamp={0x44, 0xc, 0x7, 0x0, 0x0, [0x0, 0x0]}]}}}], 0x38}, 0x0) sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB="60010000", @ANYRES16=r5, @ANYBLOB="010028bd7000fcdbdf25010000001400020077673000000000000000000000000000060006004e21000024000300a05ca84f6c9c8e3853e2fd7a70ae0fb20fa152600cb00845174f08076f8d784308000500000000000401088030000080060005000100000024000100d1732899f611cd8994034d7f413dc957630e5493c285aca40065cb6311be696bd000008024000100d1732899f611cd8994034d7f413dc957630e5493c285aca40065cb6311be696ba80004"], 0x160}, 0x1, 0x0, 0x0, 0x20048000}, 0x814) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r5, 0x20, 0x70bd2a, 0x25dfdbfc, {}, [@WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e22}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e24}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000c0}, 0x4004000) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56459, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0xfffffffe}}]}, 0x38}}, 0x0) 4m37.043482163s ago: executing program 2 (id=1947): r0 = epoll_create(0x7) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @local, @void, {@ipv4={0x800, @generic={{0x7, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local, {[@cipso={0x86, 0x8, 0x0, [{0xe1170df307341ec5, 0x2}]}]}}}}}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000040)=@setlink={0x2c, 0x13, 0x5, 0x70bd29, 0x0, {0x0, 0x0, 0x0, r3, 0x312}, [@IFLA_ADDRESS={0xa, 0x1, @remote}]}, 0xfffffddc}, 0x1, 0x0, 0x0, 0x40001}, 0x42) close(r0) 4m36.9041081s ago: executing program 4 (id=1948): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) bind$netlink(r3, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r3, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="2000000010000d042dbd70000000002000000000", @ANYRES32=r4, @ANYBLOB='4yG;\x00\x00\x00\x00'], 0x20}, 0x1, 0x0, 0x0, 0x40040}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, 0x0, &(0x7f00000002c0)) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x34, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x4}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x2c, 0x5, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2000}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0xa8}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001400)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x30030}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8}]}, 0x44}}, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) (async) r8 = socket$nl_rdma(0x10, 0x3, 0x14) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'erspan0\x00'}, @IFLA_CARRIER={0x5, 0x21, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x600}, 0x0) (async) sendmsg$nl_route(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'erspan0\x00'}, @IFLA_CARRIER={0x5, 0x21, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x600}, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x14, 0x0, 0x0, 0xfffffffd, 0x25dfdbfb, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x20008084) (async) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x14, 0x0, 0x0, 0xfffffffd, 0x25dfdbfb, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x20008084) ioctl$sock_SIOCBRDELBR(r10, 0x89a2, &(0x7f0000000000)='bridge0\x00') (async) ioctl$sock_SIOCBRDELBR(r10, 0x89a2, &(0x7f0000000000)='bridge0\x00') r11 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r11, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140604000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x38, 0x1403, 0xc23, 0x70bd2a, 0x25dfdbff, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'syz_tun\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x48845}, 0x4000) 4m36.903427542s ago: executing program 2 (id=1949): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'vlan1\x00', 0x0}) sendto$packet(r1, &(0x7f0000000200)="3605bfafb05d65571e583e7c88a8f90688a83d2dc5b4", 0x16, 0xc814, &(0x7f0000000180)={0x11, 0x0, r2, 0x1, 0x80, 0x6, @multicast}, 0x14) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'vlan0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x11, &(0x7f0000000540)=ANY=[@ANYBLOB="180000000100000000000000c500000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7032000000000008500000083000000bf0900000000000055090100000000009500000000000000184b0000000000000000000000000000bf91000000000000b7020000020000008500000085000000b7e0ff00000000009500000000000000adc6ac48ef1b5e131b4896d7acb4205ec66a73e8efafc2b21ad32583911260f5fba7c7df148b1a27a21af0f12bff2508522f9803f39e92fc8b1df795716e62583a01b0f56bac51f6714a7ce6f643f14a"], &(0x7f0000000100)='syzkaller\x00', 0x912, 0x66, &(0x7f00000001c0)=""/102, 0x41100, 0xd6, '\x00', r3, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x4, 0x3}, 0x8, 0x10, &(0x7f0000000280)={0x0, 0xf, 0x80000001, 0xff}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[0xffffffffffffffff, 0x1, 0x1, 0x1, 0x1], 0x0, 0x10, 0x10}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000300)=r5, 0x4) r6 = socket$inet(0x2, 0x2, 0x1) setsockopt$inet_int(r6, 0x0, 0xf, &(0x7f0000000000)=0xfffffffc, 0x4) bind$inet(r6, &(0x7f0000000300)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) getsockopt$EBT_SO_GET_INIT_INFO(r6, 0x0, 0x82, &(0x7f00000004c0)={'nat\x00', 0x0, 0x0, 0x0, [0x9, 0xd8, 0x0, 0x8001, 0x8001, 0x5]}, &(0x7f0000000340)=0x78) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xe315}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x1020703971be172d}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8, 0x1f, r3}]}, 0x44}}, 0x4) ioctl$BTRFS_IOC_QUOTA_CTL(r4, 0xc0109428, &(0x7f0000000040)={0x2, 0x1}) 4m36.636104192s ago: executing program 2 (id=1952): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000100)=ANY=[@ANYBLOB="30000000020301080000000000000000000000000800010001000000090002000029260c6a000000080003"], 0x30}}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_MCAST_RATE(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)={0x14, r3, 0x1, 0x70fd2a, 0x25dfdbfb, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x44001}, 0x4800) r4 = socket(0x840000000002, 0x3, 0xff) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) r6 = syz_genetlink_get_family_id$nbd(&(0x7f00000026c0), r5) sendmsg$NBD_CMD_CONNECT(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000027c0)={&(0x7f0000002740)={0x30, r6, 0x79964d8cba2f455d, 0xa070bd24, 0x25dfdbfe, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x1}, @NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r4}}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4040005}, 0x20000000) sendmsg$NL80211_CMD_NEW_MPATH(r4, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x8c, r3, 0x100, 0x70bd26, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x8c}, 0x1, 0x0, 0x0, 0x40}, 0x844) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000008c0)=ANY=[@ANYBLOB="6c0000001000010400d201000072f60000020000", @ANYRES32=0x0, @ANYBLOB="0524060000000000300012800b0001006272696467650000200002800c002e00fffff6ffffffffff050007001f0091af76d027000000000008000a00a8"], 0x6c}}, 0x10) 4m36.633860733s ago: executing program 4 (id=1953): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000300)="d80000001c0081064e81f782db44b9040a1d08040e000000000002a1180002000600142603600e1208000f0000810401a8001605200001400200680803600cfab94dcf5c0461c1d67f6f94007134cf61e08000a0e4", 0x55}], 0x1, 0x0, 0x0, 0x7400}, 0x40000) r1 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0xa8, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r2, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x78, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1], 0x0, [0x5, 0x4, 0x2, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x2]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x1c, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}]}, {0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x80000001}]}]}]}}]}, 0xa8}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000180)={0x4000}, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB=' \x00\x00\x00\"\x00'], 0x20}}, 0x0) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) r6 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x9006000, &(0x7f00000030c0)=[{&(0x7f0000000180)="1400000016001963d25a80648c56915a19aa2bfe", 0x14}], 0x1}, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000040)=ANY=[@ANYBLOB="0184c200000000000000000008060001080006040002ffffffffffffac1414bbbbbbbbbbbbbb7f000001"], 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x7a, &(0x7f0000000040)={r5, @in={{0x2, 0x4e23, @local}}}, &(0x7f0000000000)=0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000240)={r5, 0x6}, 0x8) syz_emit_ethernet(0x2a, &(0x7f0000000240)=ANY=[@ANYBLOB="bbbbbbbbbbbb0180c200000008060001080006040002aaaa"], 0x0) 4m36.589082513s ago: executing program 2 (id=1954): syz_emit_ethernet(0x52e, &(0x7f0000000000)={@local, @remote, @val, {@ipv6}}, 0x0) (async) syz_emit_ethernet(0x52e, &(0x7f0000000000)={@local, @remote, @val, {@ipv6}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x13, 0x4, &(0x7f0000000080)=@framed={{}, [@ldst={0x2, 0x0, 0x3, 0x1, 0x0, 0x40}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x13, 0x4, &(0x7f0000000080)=@framed={{}, [@ldst={0x2, 0x0, 0x3, 0x1, 0x0, 0x40}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r1, 0x7d4165c9) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r4, 0x7d4165c9) listen(r3, 0x0) (async) listen(r3, 0x0) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r5, 0x0) (async) listen(r5, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000780)={@in6={{0xa, 0x4e24, 0x2, @empty, 0xc}}, 0x0, 0x0, 0x20, 0x0, "9c0fe2154aa786d10084ecfbe8e86f7d312fcc8fde38d5823d22fbbb55a7837e5f2329f4d662f2185f18fae43e09d661d12a01669d6eef2e4733c2c29a3c3d16ef45c7c1c8ecfcc76b47d9ab9a573f11"}, 0xd8) listen(r6, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r6, 0x6, 0xe, &(0x7f0000000680)={@in6={{0xa, 0x4e21, 0x1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x81}}, 0x0, 0x0, 0x40, 0x0, "2b20a1a47cddc63b223be606d7303a4d4d11e10450d766feb63b382d54bab577021cad5de4fe7630a33b6deca160b1267ff02123bc27830000000000ffff40000000000000b5b29049cb65f00300"}, 0xd8) r7 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r7, &(0x7f0000000540)=[{&(0x7f0000000180)="580000001400192340834b80040d8c560a066f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0effeffe809005300fff5dd00000010000100080c10000000000000000000", 0x58}], 0x1) (async) writev(r7, &(0x7f0000000540)=[{&(0x7f0000000180)="580000001400192340834b80040d8c560a066f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0effeffe809005300fff5dd00000010000100080c10000000000000000000", 0x58}], 0x1) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000001c0)={0x50, 0x2, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x9}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x1}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}]}, 0x50}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x4}, 0x50) 4m36.527851948s ago: executing program 4 (id=1955): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000001c0)={'syzkaller1\x00', @broadcast}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)={0x44, r3, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_UDP_SPORT={0x6}, @L2TP_ATTR_UDP_DPORT={0x6}]}, 0x44}}, 0x0) write$tun(r0, &(0x7f0000001400)=ANY=[@ANYBLOB="6021b90b"], 0x152) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="e80000006c00010029bd7000fcdbdf2500000000", @ANYRES32, @ANYBLOB="001000008000000008000f002000000014003500726f7365300000000000000000000000a40034801400350070696d367265673000000020000000001400350076"], 0xe8}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="6400000010000305160000001dc76dcd00000000", @ANYRES32=0x0, @ANYBLOB="00000000000000004400128009000100626f6e6400000000340002800500010004000000050016000000000008001c000000000005000c00000000000a001a"], 0xc3}, 0x1, 0x100000000000000}, 0x0) 4m36.38960125s ago: executing program 2 (id=1957): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c000000190001000000000000000000021800000000fd000000ed0008000100ac1414003400080004"], 0x2c}}, 0x0) sendto$inet6(r2, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) r3 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610434000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x1, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffd8b, 0xffffffffffffffff}, 0x48) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), r1) sendmsg$TIPC_NL_BEARER_GET(r3, &(0x7f0000001600)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000015c0)={&(0x7f0000000400)={0x1184, r5, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [@TIPC_NLA_LINK={0x100, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xd107c39c}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xa7d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xd}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xa}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}]}, @TIPC_NLA_NODE={0x1018, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_NODE_ID={0x1004, 0x3, "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"}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_MEDIA={0x58, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}]}]}, 0x1184}, 0x1, 0x0, 0x0, 0x80044}, 0x40) sendmsg$MPTCP_PM_CMD_REMOVE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r4, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_TOKEN={0x8}, @MPTCP_PM_ATTR_LOC_ID={0x5}]}, 0x24}}, 0x0) sendmsg$MPTCP_PM_CMD_REMOVE(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000180)={&(0x7f0000000300)={0xe4, r4, 0x20, 0x70bd28, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x9}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x3c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x47}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x7c}, @MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00'}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_ADDR={0x44, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x10}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}]}, 0xe4}, 0x1, 0x0, 0x0, 0x4081}, 0x20040000) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) sendmsg$IEEE802154_LLSEC_LIST_KEY(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={0x10, r6, 0x0, 0x70bd29, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20010014}, 0x40000cc) 4m36.029095805s ago: executing program 32 (id=1957): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c000000190001000000000000000000021800000000fd000000ed0008000100ac1414003400080004"], 0x2c}}, 0x0) sendto$inet6(r2, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) r3 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610434000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x1, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffd8b, 0xffffffffffffffff}, 0x48) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), r1) sendmsg$TIPC_NL_BEARER_GET(r3, &(0x7f0000001600)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000015c0)={&(0x7f0000000400)={0x1184, r5, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [@TIPC_NLA_LINK={0x100, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xd107c39c}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xa7d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xd}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xa}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}]}, @TIPC_NLA_NODE={0x1018, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_NODE_ID={0x1004, 0x3, "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"}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_MEDIA={0x58, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}]}]}, 0x1184}, 0x1, 0x0, 0x0, 0x80044}, 0x40) sendmsg$MPTCP_PM_CMD_REMOVE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r4, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_TOKEN={0x8}, @MPTCP_PM_ATTR_LOC_ID={0x5}]}, 0x24}}, 0x0) sendmsg$MPTCP_PM_CMD_REMOVE(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000180)={&(0x7f0000000300)={0xe4, r4, 0x20, 0x70bd28, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x9}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x3c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x47}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x7c}, @MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00'}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_ADDR={0x44, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x10}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}]}, 0xe4}, 0x1, 0x0, 0x0, 0x4081}, 0x20040000) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) sendmsg$IEEE802154_LLSEC_LIST_KEY(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={0x10, r6, 0x0, 0x70bd29, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20010014}, 0x40000cc) 4m35.982837718s ago: executing program 4 (id=1961): r0 = socket$alg(0x26, 0x5, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000a40)=ANY=[@ANYBLOB="00010000160001000000000000000000fe88"], 0x100}}, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000400)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="18000000000000001701000003"], 0x18, 0x40045}], 0x1, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r3, 0x0, 0x0) close(0x3) 4m35.921994628s ago: executing program 33 (id=1961): r0 = socket$alg(0x26, 0x5, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000a40)=ANY=[@ANYBLOB="00010000160001000000000000000000fe88"], 0x100}}, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000400)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="18000000000000001701000003"], 0x18, 0x40045}], 0x1, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r3, 0x0, 0x0) close(0x3) 1m32.969091285s ago: executing program 6 (id=3369): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000680)=""/139, 0x8b}], 0x1, &(0x7f0000002f40)=""/229, 0xe5}, 0x0) sendmsg$tipc(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000800)="b8d3d8eb8974aae56e0046d828cd3b00000000008bdf0100d6b9aa5ffc723899ad120c5a54b1c64080f64f103ee1deb7f829432647d19f732f17e4769e5e9dd847dc85fea662eaad499c52a16f40cb3a0900000000000000b2e6b5397f7806b6ff846de37a34c8342bbac5a51eacf8a09cede8676044eafd3d7935f90651aa2d9c5727637f2e7a01e122b82e8976f5a4d980eaeb3b636630b8c89163", 0x9c}], 0x1, 0x0, 0x0, 0x84}, 0x4081) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0xfb83a000) close(r1) 1m32.625298334s ago: executing program 6 (id=3372): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket(0x10, 0x803, 0x101) sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14) recvmsg$unix(r1, &(0x7f0000000280)={&(0x7f0000000080)=@abs, 0x6e, &(0x7f0000000180)=[{&(0x7f00000003c0)=""/211, 0xd3}, {&(0x7f0000001800)=""/4096, 0x1000}, {&(0x7f0000000100)=""/114, 0x72}, {&(0x7f0000000000)=""/50, 0x32}], 0x4, &(0x7f0000000200)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x68}, 0x101) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000370425bd7000fedbdf2500000000", @ANYRES32=r2, @ANYBLOB="890c040000000000280012800b000100697036746e6c00001800028014000200fc0100000000000000000000000000c58624bd2c865aebb0b459a9143ada942362c1e14e7b4f20c2e1beaa8eececeb95"], 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x8809) r3 = socket$inet(0xa, 0x801, 0x84) connect$inet(r3, &(0x7f0000000340)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r3, 0xffffffff) r4 = accept4(r3, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f0000000740)={0x0, @in6={{0xa, 0x4e24, 0xf29e, @empty, 0x5}}, 0xfff7, 0x9}, &(0x7f0000000000)=0x90) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newlink={0x5c, 0x10, 0x401, 0x70bd26, 0x0, {}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x28, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e21}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_LINK={0x8}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e23}]}}}]}, 0x5c}}, 0x0) r6 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r6, 0x0, 0x0) sendmmsg$inet(r0, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @loopback}, 0x10, 0x0, 0x0, &(0x7f00000004c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @empty, @rand_addr=0x3}}}], 0x20}}], 0x1, 0x4040880) 1m32.309010034s ago: executing program 6 (id=3375): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000010000)={0x2, 0x4e21, @empty}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0xfffffffffffffd74, 0x40004, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000001c0)='westwood', 0x8) recvfrom$inet(r1, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) getsockopt$inet_tcp_int(r1, 0x6, 0x6, &(0x7f0000000100), &(0x7f0000000140)=0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x3, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="660a00000000000061114c000000000085000000cf00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x64, '\x00', r2}, 0x94) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f7, &(0x7f0000003200)={'ip6gre0\x00', 0x0}) sendto$inet6(r3, &(0x7f0000000000)="1505f4d9efe6eb3d788109fb2b747f1a2d35c75e2a07514b2e9ff989c87a762c4f52586ada192ff1aab25949a3ed08925fc991b7db3117938b100a585ed6c112d7daf634694bd7ab75df6ce05bab26d9fb91602df06e54155f09eb69e1c1edb6edff37a5bb1d7f1e3cbfcf47e1803cdecc795e1963ae8f55f162c4ff3cf9e054", 0x80, 0x2400c054, &(0x7f0000000080)={0xa, 0x4e23, 0xffff, @loopback, 0x81}, 0x1c) 1m31.264775041s ago: executing program 6 (id=3382): socket$nl_route(0x10, 0x3, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000080)=@framed={{}, [@ldst={0x2, 0x2, 0x3, 0x1, 0x0, 0x3d}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) socket$netlink(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$l2tp6(0xa, 0x2, 0x73) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0xb) socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000140)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r0], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 1m30.675698489s ago: executing program 6 (id=3386): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x10, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0xb, 0x20}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, 0x8}, 0x94) r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000000)={0x18, 0x2, {0x2, @multicast1}}, 0x1e) (async) bind$pptp(r0, &(0x7f0000000000)={0x18, 0x2, {0x2, @multicast1}}, 0x1e) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0x8, &(0x7f0000000100)=ANY=[@ANYBLOB="1809000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000008a000000b70000000000000095000000000000001377a57b500aadb10b2d27359c9977be78ad97338c4fd8396ef063abfe3867cf1073546ad0432d09d90b2b64e73adc511c1195424356c6ce4a1babea3fd5e966d9899de215f820e169198c57900eaa45995b16620894314947f5f2b03b7f2175d7b66e7aa9f6d48801de83d7479f9c0b3061f4e4de6ef56afadadef2237c09498d61cae9139c0af75575d2e71a49fc5826ef9cfc22f067cd3d0e48858d37314e3ab1"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 1m29.567708752s ago: executing program 6 (id=3391): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x28b1b}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_PORT={0x6, 0x5, 0x4e1f}]}}}]}, 0x3c}}, 0x0) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)={0x1c, r1, 0x1, 0x70bd2b, 0x25dfdbfe, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2000c181}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) unshare(0x20400) syz_emit_ethernet(0x66, &(0x7f0000000080)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "d20040", 0x30, 0x3a, 0x0, @dev, @local, {[], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, '\x00', 0x0, 0x89, 0x0, @empty, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}}}}}, 0x0) sendmsg$DEVLINK_CMD_RATE_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={0x34, r4, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x8000) 1m14.321847671s ago: executing program 34 (id=3391): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x28b1b}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_PORT={0x6, 0x5, 0x4e1f}]}}}]}, 0x3c}}, 0x0) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)={0x1c, r1, 0x1, 0x70bd2b, 0x25dfdbfe, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2000c181}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) unshare(0x20400) syz_emit_ethernet(0x66, &(0x7f0000000080)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "d20040", 0x30, 0x3a, 0x0, @dev, @local, {[], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, '\x00', 0x0, 0x89, 0x0, @empty, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}}}}}, 0x0) sendmsg$DEVLINK_CMD_RATE_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={0x34, r4, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x8000) 2.332049398s ago: executing program 1 (id=4299): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_netrom_SIOCDELRT(r1, 0x8916, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) clock_gettime(0xfffffffffffffffd, 0x0) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYRESHEX=r3, @ANYRESHEX=r3], 0x1c}}, 0x4) write$nci(r0, &(0x7f0000000000)=ANY=[@ANYRESHEX=r0, @ANYBLOB="b336620a723bbfef47eb1f761529a5986822"], 0x2b) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f00000007c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x370, 0x160, 0x1170, 0x1398, 0x160, 0x1170, 0x2a0, 0x1398, 0x1398, 0x2a0, 0x1398, 0x3, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x13}, @loopback, [0x0, 0xff000000], [0xffffff00], 'ip6tnl0\x00', 'veth0_to_hsr\x00', {}, {}, 0x18}, 0x0, 0xf8, 0x160, 0x0, {}, [@common=@inet=@ecn={{0x28}, {0x21}}, @common=@unspec=@addrtype1={{0x28}, {0x94, 0x804, 0x9}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'syz1\x00', 'syz1\x00'}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @multicast2}, [], [], 'geneve1\x00', 'veth1_vlan\x00', {}, {}, 0x0, 0x0, 0x0, 0x12}, 0x0, 0xf8, 0x140, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}, {0x3}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) syz_init_net_socket$netrom(0x6, 0x5, 0x0) (async) ioctl$sock_netrom_SIOCDELRT(r1, 0x8916, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) clock_gettime(0xfffffffffffffffd, 0x0) (async) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)) (async) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYRESHEX=r3, @ANYRESHEX=r3], 0x1c}}, 0x4) (async) write$nci(r0, &(0x7f0000000000)=ANY=[@ANYRESHEX=r0, @ANYBLOB="b336620a723bbfef47eb1f761529a5986822"], 0x2b) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f00000007c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x370, 0x160, 0x1170, 0x1398, 0x160, 0x1170, 0x2a0, 0x1398, 0x1398, 0x2a0, 0x1398, 0x3, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x13}, @loopback, [0x0, 0xff000000], [0xffffff00], 'ip6tnl0\x00', 'veth0_to_hsr\x00', {}, {}, 0x18}, 0x0, 0xf8, 0x160, 0x0, {}, [@common=@inet=@ecn={{0x28}, {0x21}}, @common=@unspec=@addrtype1={{0x28}, {0x94, 0x804, 0x9}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'syz1\x00', 'syz1\x00'}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @multicast2}, [], [], 'geneve1\x00', 'veth1_vlan\x00', {}, {}, 0x0, 0x0, 0x0, 0x12}, 0x0, 0xf8, 0x140, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}, {0x3}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d0) (async) 2.136561356s ago: executing program 1 (id=4303): r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x8) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r4 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000100)={0x41}, 0x10) bind$tipc(r4, 0x0, 0x0) sendmsg$tipc(r4, &(0x7f0000000340)={&(0x7f0000000000)=@name={0x1e, 0x2, 0x3, {{0x41, 0x1}}}, 0x10, 0x0}, 0x1) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f00000003c0)={r2, 0x3a, "4148f72ad69994f7dc360ab6afecd7f2cfe33873ccff0b28e893b5858f2028664871b92b2354d490b378bb0694595c7b322ffcd3e4e067a9e55b"}, &(0x7f0000000440)=0x42) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000480)={r5, @in={{0x2, 0x4e21, @multicast1}}, 0x9, 0x3, 0x2, 0x5, 0x1, 0x1, 0x9}, 0x9c) r6 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r6, 0x10e, 0xc, &(0x7f0000000040)=0x597, 0xfffffffffffffdc4) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="18000000520001000000000000000000020300003200000071a61559a989c11a7d6c15092335f69015bca6687e9eb0d97da669d2b09e878a12521812740821a45ad174f1459204eeb50ffcb86b6bf0a2887f35f308dd7ab688e1933c4a0555e03e4821e9091868fc1d82b87fbac3a5e1666ebd928a93604b8c7403c0fd34eadd476f156fcc4f85595762bc6ac529e8e92de66ec43460a8c42c054441be938c784d33da0f6da467d197408c0fef3eb0de6ed701b4f976efe8f11491f1a52d7aa650a602671ba04221b71a5c340cf0"], 0x18}}, 0x0) r7 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r7, &(0x7f0000000040), 0x10) listen(r7, 0x0) r8 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r8, &(0x7f0000000080), 0x10) r9 = accept4$unix(r7, 0x0, 0x0, 0x0) recvfrom$unix(r9, &(0x7f0000000140)=""/263, 0x107, 0x0, 0x0, 0x0) shutdown(r9, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) r11 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)=ANY=[@ANYBLOB="48000000100005ff00000000000000000000004a", @ANYRES32=r10, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r12, @ANYRES32=r8], 0x48}, 0x1, 0x0, 0x0, 0x40044}, 0x0) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r3, 0x118, 0x2, 0x0, 0x0) 1.925701694s ago: executing program 1 (id=4308): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="300000001d000100000000000000000007000000", @ANYRES32=r1, @ANYBLOB="000096040a0002"], 0x30}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r2) sendmsg$ETHTOOL_MSG_STRSET_GET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000023c0)={0x2c, r3, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2001}, 0x4010000) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0xba0c29e690d41d4b, 0x20000000ec071, 0xffffffffffffffff, 0x0) 1.872236325s ago: executing program 7 (id=4309): r0 = socket(0x2b, 0x1, 0x0) listen(r0, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000454ff0)={0x0, 0x2710}, 0x10) accept4$nfc_llcp(r0, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000640)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000002000000000000000000000d0000"], &(0x7f0000000540)=""/228, 0x26, 0xe4, 0x1}, 0x28) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket(0x10, 0x3, 0x0) sendto$isdn(r3, &(0x7f0000000100)={0x9, 0x50ee}, 0x8, 0xc044, &(0x7f0000000080)={0x22, 0x6, 0x7, 0x40, 0x7}, 0x6) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r7, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000100)={0x3c, r6, 0x801, 0x0, 0x3, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_KEY={0x20, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x5}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "0500"}]}]}, 0x3c}}, 0x850) r9 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x468, 0x0, 0xffffffff, 0xffffffff, 0x120, 0xffffffff, 0x398, 0xffffffff, 0xffffffff, 0x398, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [0x0, 0x0, 0xffffffff], [], 'macvlan0\x00', 'erspan0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xc}}, @common=@inet=@ecn={{0x28}, {0x1, 0x10, 0x2, 0x4}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x2}}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @broadcast}, [0x0, 0x0, 0x0, 0xffffffff], [0x0, 0xffffffff, 0xff], 'erspan0\x00', 'gre0\x00', {}, {}, 0x0, 0x7, 0x5}, 0x0, 0x258, 0x278, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0xaf53, 0x5, 0x4, 0x0, 0x7, 0x3ff}}}, @common=@inet=@policy={{0x158}, {[{@ipv4=@multicast1, [0x0, 0x0, 0xff000000], @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0xffffffff, 0x0, 0xff000000, 0xffffffff], 0x4d5, 0x3500, 0x3a, 0x0, 0x13, 0xd}, {@ipv4=@local, [0xff000000, 0xff000000, 0xff], @ipv6=@private1, [0x100000100, 0xffffff00, 0xffffffff, 0xffffffff], 0x4d6, 0x3507, 0xf6, 0x1, 0x6, 0x1b}, {@ipv6=@rand_addr=' \x01\x00', [0xffffff, 0xff, 0xffffffff], @ipv4=@local, [0x0, 0xffffffff, 0xff, 0xffffffff], 0x4d3, 0x3502, 0x6c, 0x1, 0xd, 0x15}, {@ipv4=@multicast2, [0xff000000, 0xff000000, 0xffffffff, 0xffffffff], @ipv4=@dev={0xac, 0x14, 0x14, 0xf}, [0x0, 0x0, 0xff000000], 0x4d6, 0x0, 0x6, 0x1, 0x6, 0xafcf8a57df96f1de}], 0x1}}]}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x4c8) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000680)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0x3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x3c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}, [@TCA_NETEM_ECN={0x8, 0x7, 0xfffffff8}, @TCA_NETEM_LOSS={0x18, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0x2, 0x9, 0x3, 0xffffff2e}}]}]}}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r10 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r10, &(0x7f00000005c0)="bad330fbc9b55400040000ea0756a85d86dd", 0x5ea, 0x40, &(0x7f00000001c0)={0x11, 0x88a8, r5, 0x1, 0xd8, 0x6, @multicast}, 0x14) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) getsockname$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0}, &(0x7f00000001c0)=0x14) sendmsg$ETHTOOL_MSG_FEATURES_SET(r11, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="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", @ANYRES32=r13, @ANYBLOB="140002006d616376746170300000000000000000780003806300040039e56e00889715aa92eab253fa1329ad0b0befeedfef879b3658936441906c777383aa23a47c40cd69c1c83834b8981d7dbbbec7b1281cc9e58ea7347a6101af116d963a0e9a1935998047893f0fb243d03b1415137d05cdff5ebb9d52f8af00080002004e8b190708000200c30000005c020380400103803400018004000300080002006e66630008000100030000000400030008000200285e7d000400030004000300070002002d2900003c0001800400030008000100080000000c0002002e3a5b5c2d2b2900040003000400030004000300080002006e6663000400030008000100018000000c00018005000200000000003800018008000100000000050800010004000000080002006e66630004000300080001000f000000080002006e666300080002006e6663003800018004000300080002006e6663000c00020023402d7d3ae33a0008000100060000000500020000000000060002002d000000040003003c00018004000300080001000100000004000300040003000400030008000100030000000800010009000000080001000600000008000100080000000c000180040003000400030008000180040003001801038018000180080001000600000008000100c834035f0400030048000180040003000500020000000000080002006e66630004000300080002006e666300100002002e407d5b6a215b2f5d2a7b00080002006e666300080002002c0d26000400030014000180080002006e6663000800010071000000140001800600020040000000080002006e66630018000180050002000000000004000300040003000400030040000180080002006e66630008000100070000000400030011000200762d4d2f2b257b5d2c2a285c000000000a0002005cc5257b2d00000008000100000080ff14000180080001008e000000080001009b230000200001800800010007000000040003000400030004000300080002006e666300"], 0x5c8}, 0x1, 0x0, 0x0, 0x85}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 1.420372529s ago: executing program 7 (id=4317): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000701feffffff00000000017c0000040042800c0001800612061290391200100002"], 0x34}, 0x1, 0x0, 0x0, 0x24004851}, 0xc000) 1.32558953s ago: executing program 0 (id=4318): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/net\x00') r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_netrom_SIOCDELRT(r1, 0x890c, &(0x7f0000000000)={0x5e38b282e414372c, @default, @bpq0, 0x4, 'syz0\x00', @bcast, 0x5, 0x4, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB='\x00'/14, @ANYRES32=0x0, @ANYBLOB="00100000000000005400128009000100626f6e64000000004400028005001d000000000005000d000100000008000b00", @ANYRES32=0x0, @ANYBLOB="080009000300000008000900000000080000000000000000050001000000000008000200", @ANYRES32, @ANYBLOB="0a000100ff"], 0x88}}, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000008000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000afa100000000000007010000f8ffffffbffbf7d5c100000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)=@deltfilter={0xa8, 0x2d, 0x100, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x8, 0xfff3}, {0x7, 0x6}, {0xe, 0x4}}, [@TCA_CHAIN={0x8, 0xb, 0x10000}, @TCA_RATE={0x6, 0x5, {0x8, 0x4}}, @filter_kind_options=@f_flower={{0xb}, {0x40, 0x2, [@TCA_FLOWER_KEY_ARP_SHA_MASK={0xa, 0x40, [0xff, 0x0, 0xff, 0xff, 0x0, 0xff]}, @TCA_FLOWER_KEY_ENC_IPV6_SRC={0x14, 0x1f, @private1={0xfc, 0x1, '\x00', 0x1}}, @TCA_FLOWER_KEY_ENC_UDP_SRC_PORT={0x6}, @TCA_FLOWER_KEY_IPV6_SRC={0x14, 0xe, @remote}]}}, @TCA_CHAIN={0x8, 0xb, 0x3}, @TCA_RATE={0x6, 0x5, {0xf, 0x5}}, @TCA_CHAIN={0x8, 0xb, 0x4}, @TCA_CHAIN={0x8, 0xb, 0x1}, @TCA_RATE={0x6, 0x5, {0x6, 0x2}}]}, 0xa8}, 0x1, 0x0, 0x0, 0x2000050}, 0x40900) 1.243805946s ago: executing program 7 (id=4319): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0x15}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x62}}}, @IFLA_MASTER={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40c8030}, 0x0) 1.113091346s ago: executing program 0 (id=4322): getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000040)={0x0, @multicast2}, &(0x7f0000000080)=0xc) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x14, '\x00', r0}, 0x94) unshare(0x22020600) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/net\x00') sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYRESDEC=r2, @ANYRES32=0x0, @ANYRESOCT=r1, @ANYRES32=r1, @ANYRESOCT=0x0], 0x3c}}, 0x0) 1.058938872s ago: executing program 7 (id=4323): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="2000000072009fb300000000ffdbdf2507000000", @ANYRES32=0x0, @ANYBLOB="050001"], 0x20}}, 0x0) 964.459832ms ago: executing program 5 (id=4324): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000200)={0x34, r2, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_RINGS_TX={0x8, 0x9, 0xfffffffe}, @ETHTOOL_A_RINGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}]}]}, 0x34}}, 0x0) setsockopt$inet6_int(r0, 0x29, 0x46, 0x0, 0x0) r3 = socket$can_bcm(0x1d, 0x2, 0x2) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x60040, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000980)=@newtfilter={0x5c, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0x0, 0xfff3}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x2c, 0x2, [@TCA_FLOWER_KEY_ENC_IPV6_SRC={0x14, 0x1f, @private1}, @TCA_FLOWER_KEY_ENC_IPV6_SRC_MASK={0x14, 0x20, [0xfffffefe, 0xffffff00]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) connect$can_bcm(r3, &(0x7f0000000140)={0x1d, r8}, 0x10) sendmsg$can_bcm(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x5, 0x0, 0x0, {}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "6a53198af9b87849"}}, 0x48}}, 0x0) sendmsg$can_bcm(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="06"], 0x48}}, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20004000, &(0x7f00000001c0)={0xa, 0x4e22, 0x40000000, @loopback, 0xfffffffe}, 0x1c) 964.285095ms ago: executing program 0 (id=4325): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x8, &(0x7f0000000100)=ANY=[@ANYBLOB="180300010000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b50a000000000000850000000c000000b7000000000000009500000000000000"], &(0x7f00000001c0)='GPL\x00'}, 0x90) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'geneve1\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="080000000400000005000000ffcb1a0000800000", @ANYRES32=r0, @ANYBLOB="0500"/20, @ANYRES32=r1, @ANYRES32, @ANYBLOB="05000000040000000100"/20, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x50) (async) r2 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000200)="df5682e45df2cf30ce367907fca7f88db3916f7eddcd8772dba8df0b19ac1529d915b8b850a95b3d09d9ef71f94b0172bf6e6d51a713ae26bec5a054b17221d605ae3421d8edebe355018779bbca8eb9be956f498f42b012e2b6a5d98fb0ccae9ae98bf6059fd41f914c9f7915147dcb0ebde254759c9e6e9c066b461767ca659f95f1b22713d954bf1a1562d747d872ce5aa368be1f298ec81e7a18ee6369b8c957a36356c9", 0xa6) 956.997765ms ago: executing program 7 (id=4326): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) getsockname(r0, 0x0, &(0x7f00000000c0)) r1 = socket(0x2a, 0x2, 0xfffffffd) write(r1, &(0x7f00000000c0)="1c0000001d005f0214fffffffffffff8070000001d00000000000000", 0x1c) 877.630569ms ago: executing program 1 (id=4327): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$WPAN_SECURITY(r0, 0x0, 0x1, 0x0, &(0x7f0000000380)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x11, 0x4, &(0x7f0000000000)=@framed={{}, [@generic={0xd4, 0x0, 0x0, 0x0, 0x10}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc}, 0x94) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x400000, 0x0) ioctl$PPPIOCSMRRU(r1, 0x4004743b, &(0x7f00000000c0)) 796.103657ms ago: executing program 7 (id=4329): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000003000000000000000000000903000000010000000000000f03000000000000000000000202000000005f"], 0x0, 0x3f}, 0x28) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWSET={0x28, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}], {0x14, 0x14}}, 0x50}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newtaction={0x50, 0x30, 0x48b, 0x70bd26, 0x0, {}, [{0x3c, 0x1, [@m_ctinfo={0x38, 0x402, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x800}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc}}}]}]}, 0x50}}, 0x48195) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sm3\x00'}, 0x58) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000340)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) r4 = accept4(r3, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f00000002c0), r4) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_HARDIF(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="11072abd7000ffdbdf250500000008000300", @ANYRES32=r7], 0x1c}, 0x1, 0x0, 0x0, 0x28008000}, 0x40000) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000000500)={&(0x7f0000000200), 0xc, &(0x7f00000003c0)={&(0x7f0000000480)={0x4c, r6, 0x200, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x20400}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r8}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x80) r9 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r9, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r10 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r10, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r10, 0x1, 0x8, &(0x7f0000000300), 0x4) r11 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r11, &(0x7f0000000140)={0x0, 0x2, &(0x7f0000000100)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b8703410000004000000000000000040014000d000a00100000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) r12 = accept4(r2, 0x0, 0x0, 0x0) sendmsg$nl_route(r12, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[], 0x78}}, 0x20008040) sendmsg$IPVS_CMD_SET_INFO(r12, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0}, 0x1, 0x0, 0x0, 0x4008001}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="340000003e0007010000000000000000017c00000400fc800c0001800600060065580000080002"], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) sendmsg$NFT_BATCH(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f0000000b40)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_DELFLOWTABLE={0x1fc, 0x18, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x8}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_HOOK={0x114, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0xcc, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth1_to_bridge\x00'}, {0x14, 0x1, 'veth0_macvtap\x00'}, {0x14, 0x1, 'team0\x00'}, {0x14, 0x1, 'syzkaller1\x00'}, {0x14, 0x1, 'team_slave_1\x00'}, {0x14, 0x1, 'rose0\x00'}, {0x14, 0x1, 'macvlan0\x00'}, {0x14, 0x1, 'netpci0\x00'}, {0x14, 0x1, 'team0\x00'}, {0x14, 0x1, 'pim6reg1\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'nicvf0\x00'}, {0x14, 0x1, 'bridge0\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xb37c}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_HOOK={0x98, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x7ff}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'ip6gre0\x00'}, {0x14, 0x1, 'veth1_to_team\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth1_macvtap\x00'}, {0x14, 0x1, 'pimreg1\x00'}, {0x14, 0x1, 'veth0\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWCHAIN={0x110, 0x3, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x6}, [@NFTA_CHAIN_HOOK={0x4}, @NFTA_CHAIN_HOOK={0x4}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_COUNTERS={0x34, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xfff}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x7}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xd405}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x5}]}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}, @NFTA_CHAIN_COUNTERS={0x94, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x8}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xffffffffffffffff}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x8}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x7}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x80}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x6}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xfffffffffffffff9}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x4}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x2}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x200}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x4}]}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELOBJ={0x3c, 0x14, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x3}, [@NFTA_OBJ_TYPE={0x8}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x5}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFT_MSG_NEWSET={0x14, 0x9, 0xa, 0x301, 0x0, 0x0, {0x6, 0x0, 0x1}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x384}, 0x1, 0x0, 0x0, 0x880}, 0x44) 794.782105ms ago: executing program 0 (id=4330): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_CHANNEL(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x4c, r0, 0x200, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x31}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x5}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x94}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x93}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20004011}, 0x4041) (async) r2 = accept4$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000200)=0x14, 0x80000) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000240)={'lo\x00', {0x2, 0x4e21, @empty}}) (async) r4 = accept(r2, &(0x7f0000000280)=@qipcrtr, &(0x7f0000000300)=0x80) getsockopt$SO_J1939_PROMISC(r4, 0x6b, 0x2, &(0x7f0000000340), &(0x7f0000000380)=0x4) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x90000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000400)={0x8c, r0, 0x1, 0x70bd2b, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x9}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x5}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x4d}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1d}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1ff}], @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x80}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x77c19b353dba5695}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]]}, 0x8c}}, 0x4000801) sendmsg$nl_route(r4, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)=@delnexthop={0x30, 0x69, 0x8, 0x70bd2c, 0x25dfdbfb, {}, [{0x8, 0x1, 0x1}, {0x8, 0x1, 0x1}, {0x8, 0x1, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000640)={0x1b, 0x0, 0x0, 0x412, 0x0, 0xffffffffffffffff, 0x2, '\x00', r3, 0xffffffffffffffff, 0x1, 0x3, 0x5}, 0x50) (async) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0xe, 0xf, 0x0, 0x10001, 0x1810, 0xffffffffffffffff, 0x1, '\x00', r3, 0xffffffffffffffff, 0x2, 0x3, 0x4}, 0x50) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000740)={0x1, 0xffffffffffffffff}, 0x4) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000009c0)=0xffffffffffffffff, 0x4) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=@base={0x11, 0x0, 0x0, 0x1, 0xdba0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x1}, 0x50) r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000ac0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0xffffffae, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x3}, 0x50) r11 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000b40)={0x1b, 0x0, 0x0, 0x6, 0x0, 0x1, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x4}, 0x50) (async) r12 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000bc0)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0xaef5, '\x00', r3, 0xffffffffffffffff, 0x4, 0x5, 0x2}, 0x50) r13 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000c40)={0x1b, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x7, '\x00', r3, 0xffffffffffffffff, 0x1, 0x2, 0x4}, 0x50) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000d40)={{0x1, 0xffffffffffffffff}, &(0x7f0000000cc0), &(0x7f0000000d00)}, 0x20) r15 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e00)={0x9, 0x35, &(0x7f0000000780)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x401}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@map_idx_val={0x18, 0x1, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0x5}, @ldst={0x4, 0x0, 0x4, 0x9, 0x7, 0x8, 0x6}, @tail_call={{0x18, 0x2, 0x1, 0x0, r6}}, @map_idx_val={0x18, 0xb, 0x6, 0x0, 0xf, 0x0, 0x0, 0x0, 0x4}, @cb_func={0x18, 0x5, 0x4, 0x0, 0x1}, @cb_func={0x18, 0x3, 0x4, 0x0, 0x6}, @printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}}, @map_val={0x18, 0x6, 0x2, 0x0, r7, 0x0, 0x0, 0x0, 0x6da1}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xdc}}, @call={0x85, 0x0, 0x0, 0x38}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3137e0281d9ebf8c}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000940)='syzkaller\x00', 0x0, 0x15, &(0x7f0000000980)=""/21, 0x41000, 0xc, '\x00', r3, 0x0, r8, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000a00)={0x1, 0x4, 0x6, 0x1}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000d80)=[r9, r10, 0xffffffffffffffff, r11, r12, r13, r14], &(0x7f0000000dc0)=[{0x2, 0x5, 0x1, 0x1}, {0x0, 0x2, 0x7, 0x8}], 0x10, 0x3}, 0x94) getsockopt$ax25_int(r4, 0x101, 0x6, &(0x7f0000000ec0), &(0x7f0000000f00)=0x4) (async) sendmsg$NL80211_CMD_AUTHENTICATE(r4, &(0x7f0000001040)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001000)={&(0x7f0000000f80)={0x4c, r0, 0x11, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x72a, 0x51}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4008001}, 0x4000090) (async, rerun: 32) getsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f0000001080)={0x0, @empty, @loopback}, &(0x7f00000010c0)=0xc) (rerun: 32) r17 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001140), r4) sendmsg$TIPC_NL_LINK_SET(r4, &(0x7f0000001440)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001400)={&(0x7f0000001180)={0x250, r17, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@TIPC_NLA_BEARER={0x28, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x34eb}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xa70}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf2}]}]}, @TIPC_NLA_BEARER={0x44, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0xf, @loopback, 0x9}}, {0x14, 0x2, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_NODE={0xe8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0xe4, 0x3, "78378911c2575519f38b42d6f67f6470d7c26c6302bc123431aecd9e4f7d06782c2b2c4b4a3f1e5b62bde63acaf1b1680062b1d309c92e545e08243eb2b711c0a8001b7e0f10305eb4bb200a47d05b5c923a0216b18a07bcb21220a603755cd624ede6cb431265e47055bb72a44f630d78efaf18c3ec107edc880bf0987770b6eb582c068d8715bc6b6cf4522a3bf6f726d68b25772102b76c72047490512e0dd835fbc751fb38b3bc545852c2159a41674f787de34f72ea2a4f5f34603cca5c735a092921154c1c2b8236dbecd9fb8df443a75c2092b3d672334f02171e5ea5"}]}, @TIPC_NLA_MEDIA={0xb8, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xcde3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xac}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xa6b3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x800}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xf}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x200}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}]}]}, @TIPC_NLA_NET={0x30, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xfffffffffffffffd}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xcf8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x6368}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3}]}]}, 0x250}, 0x1, 0x0, 0x0, 0x4000851}, 0x8000) (async) setsockopt$TIPC_IMPORTANCE(r4, 0x10f, 0x7f, &(0x7f0000001480), 0x4) (async) ioctl$SIOCX25GFACILITIES(r4, 0x89e2, &(0x7f00000014c0)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001780)={r15, 0x0, 0x91, 0xd7, &(0x7f0000001500)="f168726c459d055cd164e1d7b82ed35f065f42d808ab1bb9703014c815346a8efb8f4cd950c75e4104c33f621248ce652136fa4d74c75e67899211454b6ac2305e3262ea6cb8575ecb595902516549f4a1a407a836b90fb4f1991c7cc77ffa2cdd9f5cce1a3599d5d17f64e19e12ae277150b21b5475d42f22937f5ce62c8cac769c9c18b627e41760cacbb3f9076dbfa9", &(0x7f00000015c0)=""/215, 0x1, 0x0, 0x54, 0x1c, &(0x7f00000016c0)="a64d675bf96be0a42d4f9e3dff86dd2f1b6f5084aa2a6a15d0d720600e9ed9f55a5adc648c7cfa75615f1c0394de9088f84085b7d84838b1ce0fcb23d3d01888a694ef8cd365a7494b9a84f21907ec8af6b94a48", &(0x7f0000001740)="182ca1cc79e6e83130b44c9d193f35d53d412f8a6f2e928f12faf6bf", 0x0, 0x0, 0x7}, 0x50) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001800)) (async) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000001840)={0xffffffffffffffff, r16, 0x25, 0x12, @void}, 0x10) 748.647493ms ago: executing program 1 (id=4331): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005c40)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0x6c, 0x30, 0x1, 0x0, 0x0, {}, [{0x58, 0x1, [@m_bpf={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x83, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6}, @TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x0, 0x0, 0x10000000}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=ANY=[@ANYBLOB="ec000000210001002dbd7000fedbdf25fe880000000000000000000000000101ac1414bb0000000000000000000000004e240002000700010a0080a000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="af6b6e00010000009c0011001901010000000000000000000000000020010000000000000000000000000001ac14143e0000000000c8b10000000000ac1414bb00000000000000000000000032fcff00073500000a00020000000000000000000000020000000000ac1e01010000000000000000000000000a010102000000000000000000000000fe80000000000000000000000000002f33"], 0xec}}, 0x20000000) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000240)='vegas', 0x5) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r4 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x80000) close(r4) 683.157452ms ago: executing program 1 (id=4332): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x120, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x4c, 0x4, 0x0, 0x1, [{0x48, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x38, 0x2, 0x0, 0x1, [@NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0xf}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_EXPR={0x14, 0x5, 0x0, 0x1, @immediate={{0xe}, @void}}]}}}]}, @NFTA_RULE_EXPRESSIONS={0xb4, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @tunnel={{0xb}, @void}}, {0x5c, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x4c, 0x2, 0x0, 0x1, [@NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0xd}, @NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x5d}, @NFTA_INNER_EXPR={0x10, 0x5, 0x0, 0x1, @payload={{0xc}, @void}}, @NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0xf}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0x34}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0x13}]}}}, {0xc, 0x1, 0x0, 0x1, @log={{0x8}, @void}}, {0x28, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_QUOTA_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_QUOTA_CONSUMED={0xc, 0x4, 0x1, 0x0, 0x3}]}}}, {0x10, 0x1, 0x0, 0x1, @socket={{0xb}, @void}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x148}}, 0x0) (async) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x82, &(0x7f00000001c0)={r3, 0x40, 0x8}, 0x8) (async) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000007c0)=ANY=[@ANYBLOB="7800000010003b1500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000300012800b00010067656e65766500002000028014000700fe8000000000000000000000000000bb080001000100000004001a80140014007465616d300000000000000000000000080004"], 0x78}}, 0x0) 628.626553ms ago: executing program 5 (id=4333): socket$inet_tcp(0x2, 0x1, 0x0) (async) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r0, 0x0, 0x8008000000010, &(0x7f0000000180)="17000000020002000003be8c5ee17688a8006c00030100ecff3f0000000300000a0001000098fc5a53d3f5b7e4a96c6b06169da9c0f8d9485bbb6a880000d6c8db0000dba67e06000000e289c46f8ab8b4028a7a63c900000200df0180000000000100000000000080c457681f009cee4a5acb3da400001fb7315033bf79ac2df5bc080236e2b68c8eec25a02aff06011500394100000000000affff02dfccebf6ba00085d024f0298e9e90554062a80e605007f71174aa9", 0xb8) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x3, 0x4, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000000000000000000000000000071105a000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x3, 0x4, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000000000000000000000000000071105a000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) mmap(&(0x7f0000058000/0x2000)=nil, 0x2000, 0x1000001, 0x4010, 0xffffffffffffffff, 0x1000) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x42073, 0xffffffffffffffff, 0x0) ioctl$F2FS_IOC_GET_COMPRESS_OPTION(r0, 0x8002f515, &(0x7f0000000000)) 623.191677ms ago: executing program 0 (id=4335): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) (async) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000540)=@gcm_128={{0x303}, "ffffffffffffffe2", "8e083700daf38a6d69e9b5e9c2f133d7", "6a3a05b9", "b4003a00"}, 0x28) (async) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000540)=@gcm_128={{0x303}, "ffffffffffffffe2", "8e083700daf38a6d69e9b5e9c2f133d7", "6a3a05b9", "b4003a00"}, 0x28) shutdown(r0, 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) sendfile(r0, r1, 0x0, 0xffffffff004) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$kcm(0x21, 0x2, 0x2) (async) r2 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r2, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @remote}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x4c080) sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) socket$netlink(0x10, 0x3, 0xb) (async) r3 = socket$netlink(0x10, 0x3, 0xb) socket(0x10, 0x80002, 0x0) (async) socket(0x10, 0x80002, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="98000000", @ANYRES16=0x0, @ANYBLOB="e265bb5c68b6f0f771486b21494d71250100000008eb9a8b00264dde", @ANYRES32=0x0, @ANYBLOB="7c00028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005000000100004006c6f616462616c616e63650038000100240001006c625f73746174735f726566726573685f696e74657276616c0000000000000005000300030000000800040000010000"], 0x98}, 0x1, 0x0, 0x0, 0x48000}, 0x80) 554.198637ms ago: executing program 3 (id=4336): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000700)={@map, 0xffffffffffffffff, 0xf, 0x18}, 0x20) setsockopt$llc_int(r0, 0x10c, 0x3, &(0x7f0000000040), 0x4) connect$llc(r0, &(0x7f0000000000)={0x1a, 0x0, 0x1, 0x1, 0x0, 0x0, @remote}, 0x10) 525.909506ms ago: executing program 5 (id=4337): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x0, 0x0, 0x2, 0x0, 0x4102, 0x1, 0x10000}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600, 0x0, 0x48, 0x0, &(0x7f0000000000)='\x00', 0x0}, 0x48) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r2, 0x400448e0, &(0x7f0000000040)) r3 = accept$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) getsockopt$packet_buf(r3, 0x107, 0x6, &(0x7f0000000080)=""/60, &(0x7f0000000100)=0x3c) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="0f070000200000000035affd70005a10f8d6c67d5d4a643056eab337b8330529"], 0x14}, 0x1, 0x0, 0x0, 0x2}, 0x24000800) bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x24}, 0x94) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x0, 0x0, 0x2, 0x0, 0x4102, 0x1, 0x10000}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600, 0x0, 0x48, 0x0, &(0x7f0000000000)='\x00', 0x0}, 0x48) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) ioctl$sock_bt_hci(r2, 0x400448e0, &(0x7f0000000040)) (async) accept$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) (async) getsockopt$packet_buf(r3, 0x107, 0x6, &(0x7f0000000080)=""/60, &(0x7f0000000100)=0x3c) (async) syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), 0xffffffffffffffff) (async) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="0f070000200000000035affd70005a10f8d6c67d5d4a643056eab337b8330529"], 0x14}, 0x1, 0x0, 0x0, 0x2}, 0x24000800) (async) 400.528363ms ago: executing program 3 (id=4338): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xf, 0x4, 0x8, 0x9}, 0x50) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0xe, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)={@map=r0, r1, 0x4}, 0x10) close(r0) 356.579067ms ago: executing program 5 (id=4339): r0 = socket(0xa, 0x2400000001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000034000)={0x1, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000001980)={'tunl0\x00', &(0x7f00000018c0)={'sit0\x00', 0x0, 0x8000, 0x1, 0xffff, 0x6, {{0x1c, 0x4, 0x1, 0x3, 0x70, 0x68, 0x0, 0xbf, 0x4, 0x0, @remote, @local, {[@timestamp_addr={0x44, 0x24, 0xa6, 0x1, 0x4, [{@local, 0x9}, {@broadcast, 0x10001}, {@local, 0x7}, {@multicast1}]}, @timestamp_prespec={0x44, 0x2c, 0x91, 0x3, 0x4, [{@broadcast, 0x28}, {@rand_addr=0x64010100, 0xc0}, {@loopback, 0x7}, {@rand_addr=0x64010101, 0x2cc}, {@multicast1, 0x2}]}, @timestamp={0x44, 0xc, 0xc5, 0x0, 0x4, [0xff99, 0x2]}]}}}}}) setsockopt$MRT6_DEL_MIF(r0, 0x29, 0xcb, &(0x7f00000019c0)={0x1, 0x1, 0x9, r1, 0x1000}, 0xc) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00000002c0)={0x1, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) getsockopt$inet6_buf(r0, 0x29, 0x10000000000030, &(0x7f0000034000)=""/144, &(0x7f0000002280)=0x90) syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, @empty, @private}, "040088beffff0200"}}}}}, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @random="08c82553c54d", @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x6, 0x0, @private=0xa010102, @local}, {{0x1, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0xa, 0x0, 0x0, 0x0, 0x0, {[@md5sig={0x13, 0x12, "b3e480a7613088fd71106c027deb3b11"}]}}}}}}}, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x32}}, 0x0) accept$packet(r2, &(0x7f0000001a00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000001a40)=0x14) r3 = accept$packet(r2, &(0x7f0000001a80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000001ac0)=0x14) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001b00)=0x5f) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000005000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=@newtaction={0x6c, 0x30, 0xeaa3ef926154ef0f, 0x0, 0x0, {}, [{0x58, 0x1, [@m_vlan={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{}, 0x2}}, @TCA_VLAN_PUSH_VLAN_ID={0x6}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) syz_extract_tcp_res(&(0x7f0000000440), 0x10, 0x3) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB="68000000100039042cbd7000eaffffff000003e4", @ANYRES32=r4, @ANYBLOB="83000400000000004800128008000100736974003c0002800500090029000000190010"], 0x68}, 0x1, 0x0, 0x0, 0x8000}, 0x4040) recvmsg$kcm(r0, &(0x7f00000001c0)={&(0x7f0000000240)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x80, &(0x7f0000001740)=[{&(0x7f0000000540)=""/4096, 0x1000}, {&(0x7f0000000380)=""/142, 0x8e}, {&(0x7f00000000c0)=""/13, 0xd}, {&(0x7f00000022c0)=""/4096, 0x1000}, {&(0x7f0000001540)=""/155, 0x9b}, {&(0x7f0000001600)=""/163, 0xa3}, {&(0x7f00000016c0)=""/92, 0x5c}, {&(0x7f0000000140)=""/59, 0x3b}], 0x8, &(0x7f00000017c0)=""/196, 0xc4}, 0x10060) 334.011056ms ago: executing program 3 (id=4340): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0500000003006c2366cf99ce34000006000000080003000000", @ANYRES32=r2, @ANYBLOB="08000500060000000800178004000200"], 0x2c}}, 0x0) 216.12618ms ago: executing program 0 (id=4341): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}, 0x1, 0x0, 0x0, 0x20000000}, 0x4040954) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34665c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbccbddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e712a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd13f4cec49669e443dcb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ef8dba2f23b01a9ae44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af40000000000000005f58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef07000000000000006da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405a07feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09c0e5a3bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea10d3cfb41b92ecbb422a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f74562adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b4412331d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225a53072423b907c6682f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd100fcffff007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711c6529ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a22c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29008000000000000005ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42192cf393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc030ea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efd936b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800001f00000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351b9332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d9890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b0783883ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a138d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fce43d8c53a8031e64026e0d36b6401064c49a729f11ab377f7132c5232bb80195dd5d43d29646a9378eea0761b7ed9d2172e33ed87c7413c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8d2286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8445029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a828b07f1dc7df9c8e5da22dfb9dacbf5529e4e994128d835f85465173ea7bbcc519a0c9798ce8b1b07567e3e07169c8c3e4da8bf725c050000000000000000000000000000000000000000004775abdf0c62728eb55a9e2849a1ce05bed60dfe4cc9fa43f9684297c02382c0a35829be7a86305792a9d2e80ca9e8fc50f31f6e0fa810303da03d8b74b42c1ebaf16bb343256405a3a07229a54de09a97b269cd29e8b2f0b0d46c51a6a93eec37f4bc6e29a8e19120ae050ab682662e9b2cc3263a4aba62b63ca9123a53c0f4bf3c4463b8144c89bf058a0af0ae9fc2b7cdfc4817703e267cddc193637d7fd97646090da37093657643daae3840c7f5c10f93524f7ae4791ec6e9d9722e5f670ccb358e051a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000003880)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c9f4cef7f9606056fe5c34664c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbcebddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cfd7c3a1d37a6ab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ed8dba2f23b01a9aeb980aff9fa3a64709270c701db801f44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af4c0eb97fca585ec6bf58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75055df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83766b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef3b7cda42013d53046da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b556381768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea2a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f76062adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b441233151122b41a8d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225c380fac12f8205d182f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd1f539bd43007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711d7219ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a26c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29754f928c59306ce105ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42ddd5f393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc05bea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efdb36b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800000000000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351ba332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d96ee1b84bb64b14aebc6b5194c55dd6890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b07838a3ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a139d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fcc49a729f11ab377f7132c543d29646a9378eea0761b7ed9d2172e33ed87c6513c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8dc0d472672286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8455029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a82a6ef09d0ed9829dec16ab67a4f59a504e09f55ab82bbd405087a17a229a149c53ee9145500db213cb36489a10957739e481a756e65bde579bbbfb404213f661eeaaffacbcfbfd60b1a715c366da2b37ac7e9e3033f8ec04db1c2412e02ccd0617d9fb646c4897750d068c936c3558a94b05d7c65c0d458c0d70d0aa864bc1e324d3f69b1b4061627da875a4b5c2668ab0990623fe6f3b54cd1c79da4baf256f88750c18486330589473e267fa44e220cf40db662b570c2a2fbba9a34a3dd7bbd8368fe506daa62b45797d4b397905a69e58eb436c08cc78963197adb1b16ad83a1a9b420e74c6bcdf1ed0b306141a83bf1268e954ad069257fbfaa1a7ea582badc1a7f2a5b0965f3535872d85c0bc3a233a3ea85df6a8ed76f0f803d54b7bef77d8ea71621f8a78dd17c3b58c5c7476ed6191acbb949e77f7cac81c543f7751e5e1000"/4545], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)={@cgroup=r5, r4, 0x2f}, 0x20) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r4, r5, 0x2f, 0x14, 0x4}, 0x20) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001500)=@newqdisc={0x6c, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x9, 0x9}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x3c, 0x2, {{0x1ff, 0x4, 0x0, 0x0, 0xfffffffd, 0x8}, [@TCA_NETEM_ECN={0x8, 0x7, 0x1}, @TCA_NETEM_LOSS={0x18, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0xfffffffa, 0x9, 0x20005, 0x7fff}}]}]}}}]}, 0x6c}}, 0x4010) sendto$packet(r0, &(0x7f00000002c0)="44c33b69ebc9e05e9bdec0c288a8", 0xe, 0x830, &(0x7f0000000440)={0x11, 0x0, r3, 0x1, 0x2, 0x6, @local}, 0x14) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000240)={'syztnl2\x00', &(0x7f0000000180)={'gretap0\x00', r3, 0x80, 0x7800, 0x4, 0x9, {{0x13, 0x4, 0x1, 0x11, 0x4c, 0x65, 0x0, 0xe, 0x29, 0x0, @broadcast, @broadcast, {[@cipso={0x86, 0x1c, 0x1, [{0x6, 0x10, "033a32fb7083f9f3f899e0d3d118"}, {0x6, 0x4, "4e95"}, {0x2, 0x2}]}, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x17, 0x87, [@multicast2, @initdev={0xac, 0x1e, 0xf, 0x0}, @local, @empty, @dev={0xac, 0x14, 0x14, 0x1b}]}]}}}}}) r7 = socket(0x1, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000280), 0x0, 0x2, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r8) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f0000000000)={0x0, 0x3e, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r12, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r11, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x25dfdc01, {0x0, 0x0, 0x0, r12, {0x0, 0xd}, {0xffff, 0xb}, {0xf, 0xb}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x9}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4008000) r13 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r13, &(0x7f00000005c0)="bad330fbc9b55400040000ea0756", 0xe, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r12, 0x1, 0xd8, 0x6, @multicast}, 0x14) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r7, 0x89f0, &(0x7f0000000400)={'sit0\x00', &(0x7f0000000540)={'gretap0\x00', r6, 0x20, 0x10, 0x7, 0x5, {{0xd, 0x4, 0x1, 0x3, 0x34, 0x67, 0x0, 0x1, 0x2f, 0x0, @multicast1, @local, {[@timestamp={0x44, 0x18, 0xcf, 0x0, 0xd, [0x4, 0x2, 0x200, 0xe99, 0x1]}, @rr={0x7, 0x7, 0x70, [@broadcast]}]}}}}}) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000000600)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000001580)={0x8d0, 0x0, 0x0, 0x70bd29, 0x25dfdbfd, {}, [{{0x8, 0x1, r3}, {0x4}}, {{0x8, 0x1, r3}, {0x134, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r10}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r6}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8, 0x6, r10}}}]}}, {{0x8, 0x1, r6}, {0x134, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}, {0x74, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x44, 0x4, [{0x1, 0x9, 0x6, 0x9}, {0x8d6f, 0x0, 0x7, 0x3}, {0x7, 0x5, 0x1, 0x6}, {0x8, 0x8c, 0xe}, {0xf, 0x2, 0x0, 0x80000000}, {0x3f2d, 0x6, 0x5, 0xffffffff}, {0x1, 0x9, 0x6, 0x2}, {0xb, 0xb6, 0xff, 0x5}]}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r12}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}, {{0x8, 0x1, r6}, {0x108, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r6}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r3}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x2, 0x7, 0xb, 0x3}, {0xcb, 0xb, 0x8d, 0x3}, {0x9, 0x7, 0x6, 0x4}]}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}]}}, {{0x8, 0x1, r6}, {0xf4, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r10}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r10}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}]}}, {{0x8, 0x1, r6}, {0x278, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r10}}}, {0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x101, 0x6, 0x9, 0x4}, {0x5, 0xff, 0xf6, 0x25}, {0x6, 0xc7, 0x6, 0x40}, {0x7fff, 0x4, 0x4, 0xd}, {0x0, 0x40, 0x9, 0xff}, {0xd, 0xd, 0x0, 0x2}]}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xb}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0xff00, 0x4, 0x6, 0x443b}]}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xfff}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}]}}, {{0x8, 0x1, r6}, {0x1a4, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r6}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r10}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r14}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r10}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r6}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1ff}}}]}}]}, 0x8d0}, 0x1, 0x0, 0x0, 0x20040810}, 0x4) sendmsg$BATADV_CMD_GET_NEIGHBORS(r8, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="310300000000fcdbdf250900000008000300", @ANYRES32=r10, @ANYBLOB="080006"], 0x24}}, 0x8) ioctl$sock_ifreq(r7, 0x89f2, &(0x7f0000000040)={'bond0\x00', @ifru_names='bond_slave_1\x00'}) sendmsg$nl_route(r2, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)=@ipv4_getaddr={0x20, 0x16, 0x200, 0x70bd2d, 0x25dfdbff, {0x2, 0x18, 0x5a, 0xfd, r6}, [@IFA_ADDRESS={0x8, 0x1, @multicast1}]}, 0x20}, 0x1, 0x0, 0x0, 0x2000800}, 0x4000400) 215.141239ms ago: executing program 3 (id=4342): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r0, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x64, r1, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x11}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_TOKEN={0x8}]}, 0x64}, 0x1, 0x0, 0x0, 0x20810}, 0x20000044) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) (async) socket$inet_sctp(0x2, 0x1, 0x84) (async) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000440), r0) (async) r4 = socket(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'bond0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001400b59500000000000000000a000000", @ANYRES32=r6, @ANYBLOB="14000200fe8000000000000000000000000000aa080009003f0c0000140001"], 0x48}}, 0x0) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) (async) r8 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WOWLAN(r8, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x30}}, 0x0) (async) getsockname$packet(r8, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="50000000100001042dbd70000000000000000000", @ANYRES8=r7, @ANYBLOB="000000000000000030001280080001007369740024000280080014002f00000008000300ac"], 0x50}}, 0x0) sendmsg$WG_CMD_GET_DEVICE(r0, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x200020}, 0xc, &(0x7f0000000480)={&(0x7f0000000c80)={0x568, r3, 0xc00, 0x70bd2a, 0x25dfdbfe, {}, [@WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r6}, @WGDEVICE_A_PEERS={0x504, 0x8, 0x0, 0x1, [{0x318, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_ALLOWEDIPS={0x210, 0x9, 0x0, 0x1, [{0xd0, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5}}]}, {0x34, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x21}}, {0x5, 0x3, 0x3}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x39}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0xe}}, {0x5, 0x3, 0x2}}]}, {0x4c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x2}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_ALLOWEDIPS={0x80, 0x9, 0x0, 0x1, [{0x7c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x14}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x2}}]}]}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "e76422879b0b957b086a7381bbeb1cde3ab04c01bbda80a05a9bec139b4dfcc6"}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0x6, @private0, 0xc}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e24, @local}}]}, {0x7c, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @local}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e21, @broadcast}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "b5511aada7d289fd6858b5d1456268721c44e390b2de87af0b596d102a3bd928"}]}, {0x16c, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x7}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x8e7}, @WGPEER_A_ALLOWEDIPS={0x11c, 0x9, 0x0, 0x1, [{0x4c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x1}}]}, {0x34, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}]}, {0x7c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x37}}, {0x5}}]}]}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x100}, @WGPEER_A_FLAGS={0x8, 0x3, 0x6}]}]}, @WGDEVICE_A_PRIVATE_KEY={0x24}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r9}]}, 0x568}, 0x1, 0x0, 0x0, 0x4}, 0x80) (async) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000340)={0x0, @in6={{0xa, 0x4e21, 0xfffffffe, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x1}}, 0xfffffff9, 0x5, 0x4, 0xfffffff8, 0x8, 0x7, 0xf}, &(0x7f0000000000)=0x9c) (async) r10 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r10, 0x89f2, &(0x7f0000000200)={'ip6tnl0\x00', &(0x7f0000000180)={'ip6tnl0\x00', 0x0, 0x2f, 0x2, 0x4, 0x4, 0x41, @loopback, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x8, 0xb7, 0x2}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x13, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000004c00000095"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x6a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x130}, 0x90) 185.963461ms ago: executing program 3 (id=4343): r0 = socket$nl_rdma(0x10, 0x3, 0x14) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000a, 0x8c4b815a5465c2b1, r0, 0xf1e000) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$inet6(0xa, 0x1, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x1, 0x4, &(0x7f00000010c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x99, &(0x7f0000000180)=""/148, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x8b63bfea1a14a3c7}, 0x16) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x11, 0x4, 0x4, 0x9}, 0x50) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x2, 0x4, 0x1, 0x0, r4}, 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=@base={0xa, 0x7, 0x2, 0x4}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r5}, &(0x7f0000000840), &(0x7f0000000880)=r4, 0x1000000}, 0x20) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000280)=@raw={'raw\x00', 0x3c1, 0x3, 0x570, 0x0, 0x8, 0x7f02ae, 0x0, 0x200, 0x4a0, 0x2e8, 0x2e8, 0x4a0, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x340, 0x368, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @fd={0x2, 0x0, r3}}, @common=@inet=@iprange={{0x68}, {@ipv4, @ipv4=@remote, @ipv6=@mcast2, @ipv4=@remote}}]}, @common=@unspec=@CLASSIFY={0x28}}, {{@ipv6={@private2, @private2, [], [], 'veth0_to_team\x00', 'netdevsim0\x00', {}, {0xff}, 0x0, 0x0, 0x1}, 0x0, 0xd0, 0x138, 0x0, {}, [@common=@mh={{0x28}, {"a27d"}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x13, 0xec, 0x5, 0x400, 'snmp\x00', 'syz0\x00', {0xffffffff8cdbbefd}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5d0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x2, 0x0, &(0x7f0000000000)) r6 = socket$inet6(0xa, 0x1, 0x0) socket$key(0xf, 0x3, 0x2) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(cast5)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000100)="ad73364256", 0x5) r8 = accept4(r7, 0x0, 0x0, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(r8, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000780)={0x88, 0x0, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DEST={0x4c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x58d2}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x9}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xb}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x100}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}]}, @IPVS_CMD_ATTR_SERVICE={0x28, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x7}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x4040000}, 0x4048000) recvmsg$qrtr(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)=""/31, 0x1f}, {&(0x7f0000000500)=""/101, 0x65}], 0x2, 0x0, 0x0, 0x42}, 0x1c, 0x12080) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000100)={'syztnl1\x00', &(0x7f00000000c0)={'syztnl1\x00', 0x0, 0x80, 0x10, 0x4, 0x7, {{0x6, 0x4, 0x2, 0xb, 0x18, 0x65, 0x0, 0xfc, 0x29, 0x0, @local, @loopback, {[@noop]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r8, 0x89f1, &(0x7f0000000240)={'erspan0\x00', &(0x7f0000000900)={'syztnl2\x00', r9, 0x7800, 0x7, 0x5, 0x7, {{0x19, 0x4, 0x0, 0xf, 0x64, 0x65, 0x0, 0x40, 0x2f, 0x0, @private=0xa010100, @multicast2, {[@timestamp_addr={0x44, 0x14, 0x6a, 0x1, 0x6, [{@dev={0xac, 0x14, 0x14, 0x18}, 0x4}, {@multicast1, 0x1}]}, @noop, @ssrr={0x89, 0x17, 0xf8, [@multicast2, @private=0xa010100, @local, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @lsrr={0x83, 0xb, 0x1f, [@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @cipso={0x86, 0x18, 0x1, [{0x7, 0x12, "b59c9de246634ddb816134f2857831b6"}]}, @noop]}}}}}) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000001cc0)=@raw={'raw\x00', 0x3c1, 0x3, 0x568, 0x3c8, 0x12, 0x600, 0x0, 0x202, 0x498, 0x2e8, 0x2e8, 0x498, 0x2c0, 0x4, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth1_to_bond\x00', 'geneve1\x00', {0xff}}, 0x0, 0x398, 0x3c8, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "0000000000000019b5115c2aee68d23a465cd431e150c3234e082555f67222476147864fa0318236000000c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baeb8989f1f34a214e6726401fe4b124e0f7323a587d2a1fcf07000000eca0a7b66c60c527bac2b50700", 0x2}}, @common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x3f, 0x0, [{0x8, 0xb, 0x7}, {0x1, 0x4, 0x80, 0x2}, {0x9, 0x4, 0xf8, 0xfffffff5}, {0x3, 0x8d, 0x5, 0xfffffc93}, {0x3, 0x0, 0x0, 0x4}, {0xa, 0x60, 0xee, 0xb}, {0x81, 0x0, 0xf3, 0x100}, {0x0, 0xff, 0x81, 0xed65}, {0x1bd4, 0x0, 0x6, 0xa}, {0x800, 0x1, 0xf1, 0x1}, {0x8000, 0x82, 0x9, 0x3}, {0x617, 0x9, 0xb9, 0x864}, {0x2, 0x5, 0x10, 0x1}, {0xdb8b, 0xb, 0x9, 0x2}, {0x8, 0x40, 0x8}, {0xfff1, 0x2, 0x5, 0x2}, {0x10, 0xc7, 0x2, 0x8}, {0x6, 0x0, 0xd, 0x80}, {0x95f1, 0x8, 0x2, 0x600000}, {0x1, 0x2f, 0xfb, 0x6}, {0x6, 0x4c, 0xfc, 0x80}, {0x4c24, 0x83, 0x7, 0xcbf4d91}, {0x3, 0x7, 0x9, 0xc9}, {0x3, 0x2, 0x7, 0x7fff}, {0x9, 0x6, 0x3, 0x6a9}, {0x3, 0x3, 0x10, 0x7}, {0x400, 0x1, 0x7, 0x8000}, {0x5a8a, 0x3, 0x5, 0x8}, {0x9d5, 0xff, 0xb, 0xedc6}, {0x9, 0xc, 0xfa, 0x1}, {0x2, 0x9, 0xae, 0xb478}, {0x5, 0x9, 0x0, 0x3}, {0x7fff, 0xd, 0x2, 0x9}, {0x1, 0x96, 0x5, 0xfffffffe}, {0x4, 0xeb, 0x10}, {0x8, 0x4, 0x0, 0x5}, {0x9, 0x0, 0xd, 0x4}, {0x6, 0xd6, 0xe, 0x3}, {0x5, 0xc, 0xc, 0x3}, {0x0, 0x6, 0x3, 0x3}, {0xd90, 0x2, 0x0, 0x1}, {0x2, 0xfd, 0x7f, 0x400000}, {0xaa0, 0xc, 0xff}, {0x7, 0x9, 0x1, 0xa6c}, {0x8, 0x9, 0x3, 0x5}, {0x7db0, 0xf6, 0x4, 0x6}, {0x7, 0x3, 0x8, 0xfffff6d9}, {0x8e35, 0x0, 0x5, 0x3ff}, {0xcfa6, 0x9, 0x9, 0x7}, {0x4be, 0x7, 0x1, 0x3ff}, {0x16bd, 0xff, 0xa, 0x47c}, {0xd8b, 0x3, 0x6, 0xd635}, {0x5, 0x3, 0x0, 0x6}, {0x2, 0x9, 0x5, 0x49}, {0x8, 0x3, 0x31, 0x3de}, {0xaa7, 0x0, 0xff, 0xfffffc4a}, {0x400, 0x81, 0xc, 0x1}, {0x1, 0x9, 0x4, 0x81}, {0x30, 0x6, 0x9, 0x6}, {0x8, 0x81, 0xd, 0x149}, {0x7f, 0x7, 0x3, 0x59b}, {0x9, 0x1d, 0x7, 0x3}, {0xf, 0x4d, 0x1, 0x6}, {0x6, 0x3, 0x1, 0xfffffffb}], {0x8}}}]}, @common=@unspec=@CONNMARK={0x30}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5c8) 178.378266ms ago: executing program 5 (id=4344): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000a80)=ANY=[@ANYBLOB="1c0000001500010000000000000000000100000008000100", @ANYBLOB='z'], 0x1c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000000c0)={r1}) r3 = socket$inet(0xa, 0x801, 0x84) connect$inet(r3, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r3, 0x8) r4 = accept4(r3, 0x0, 0x0, 0x0) r5 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r4, 0x84, 0x6d, &(0x7f0000000700)={r6}, &(0x7f0000000740)=0x8) setsockopt$inet_sctp_SCTP_AUTH_KEY(r2, 0x84, 0x17, &(0x7f0000000ac0)={r6, 0x2, 0x1000, "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"}, 0x1008) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a0bfc0000000000000000020000000900010073797a30000000000900020073797a320000000014000000110001"], 0x54}, 0x1, 0x0, 0x0, 0x40820}, 0x0) writev(r1, &(0x7f0000000040), 0x2) close(r1) 619.656µs ago: executing program 5 (id=4345): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000004c0)={r1, 0x3, 0x6, @remote}, 0x10) socket$nl_route(0x10, 0x3, 0x0) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000000)={r1, 0x1, 0x6, @random="790c7edd3d8d"}, 0x10) r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(r2, &(0x7f00000009c0)={0x24, @none={0x0, 0xfffc}}, 0x14) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0) 0s ago: executing program 3 (id=4346): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000140)={'gre0\x00', &(0x7f0000000080)={'erspan0\x00', 0x0, 0x700, 0x7820, 0x7, 0x4, {{0x7, 0x4, 0x2, 0xf, 0x1c, 0x65, 0x0, 0x81, 0x2f, 0x0, @broadcast, @multicast1, {[@generic={0x83, 0x7, "7be2021738"}]}}}}}) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x70, r1, 0x10, 0x70bd26, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x81}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x3}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x8001}, @MPTCP_PM_ATTR_TOKEN={0x8}, @MPTCP_PM_ATTR_ADDR_REMOTE={0xc, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x10}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4000004}, 0x20040004) syz_emit_ethernet(0x46, &(0x7f00000000c0)={@local, @random="7f0a00034011", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x12, 0x0, 0x2802, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x6c, 0x0, @remote, @private}, "240086ddffff0000"}}}}}, 0x0) kernel console output (not intermixed with test programs): active [ 329.117008][T16483] hsr_slave_0: entered promiscuous mode [ 329.148293][T16483] hsr_slave_1: entered promiscuous mode [ 329.160215][T16483] debugfs: 'hsr0' already exists in 'hsr' [ 329.175141][T16483] Cannot create hsr debugfs directory [ 329.351953][T16618] netdevsim netdevsim5: Direct firmware load for /. failed with error -2 [ 329.382891][T16618] netdevsim netdevsim5: Falling back to sysfs fallback for: /. [ 329.499555][T16628] netlink: 'syz.3.2965': attribute type 28 has an invalid length. [ 329.507937][T16628] netlink: 'syz.3.2965': attribute type 3 has an invalid length. [ 329.516471][T16628] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2965'. [ 329.845621][T16634] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2966'. [ 329.910398][T16635] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2966'. [ 330.006562][T16639] netlink: 'syz.3.2967': attribute type 11 has an invalid length. [ 330.166856][T16644] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2969'. [ 330.490830][T16663] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2973'. [ 330.690624][T16652] netlink: 830 bytes leftover after parsing attributes in process `syz.3.2973'. [ 330.780370][T16671] sctp: [Deprecated]: syz.6.2974 (pid 16671) Use of int in maxseg socket option. [ 330.780370][T16671] Use struct sctp_assoc_value instead [ 330.951109][T16483] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 330.964752][T16483] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.087890][ C1] net_ratelimit: 15432 callbacks suppressed [ 331.087910][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 331.106153][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:ca:58:e8:4d:87, vlan:0) [ 331.118597][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 331.130967][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 331.143322][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:ca:58:e8:4d:87, vlan:0) [ 331.155810][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 331.168126][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 331.180514][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:ca:58:e8:4d:87, vlan:0) [ 331.192862][T16685] ip6t_srh: unknown srh invflags 4000 [ 331.193826][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 331.206140][T16685] netlink: 'syz.5.2978': attribute type 1 has an invalid length. [ 331.210711][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 331.313093][T16483] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 331.340786][T16483] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.383585][T16691] netlink: 256 bytes leftover after parsing attributes in process `syz.0.2979'. [ 331.401495][T16681] netlink: 132 bytes leftover after parsing attributes in process `syz.6.2977'. [ 331.809963][T16483] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 331.853605][T16483] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.999663][T16708] Bluetooth: MGMT ver 1.23 [ 332.269636][ T95] block nbd1: Possible stuck request ffff888025070000: control (read@0,1024B). Runtime 180 seconds [ 332.271023][ T7405] netdevsim netdevsim3 : unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.292894][ T95] block nbd1: Possible stuck request ffff8880250701c0: control (read@1024,1024B). Runtime 180 seconds [ 332.316312][ T95] block nbd1: Possible stuck request ffff888025070380: control (read@2048,1024B). Runtime 180 seconds [ 332.339719][ T95] block nbd1: Possible stuck request ffff888025070540: control (read@3072,1024B). Runtime 180 seconds [ 332.474323][T16483] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 332.578159][T16483] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.657139][ T7405] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.691059][ T7405] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.755054][ T7405] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.909474][T16732] netlink: 'syz.5.2989': attribute type 10 has an invalid length. [ 333.008083][T16732] __nla_validate_parse: 2 callbacks suppressed [ 333.008103][T16732] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2989'. [ 333.037252][T16734] netlink: 'syz.6.2990': attribute type 1 has an invalid length. [ 333.252736][T16732] team0: Port device geneve0 added [ 333.521270][T16483] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 333.642357][T16483] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 333.794297][T16483] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 333.994241][T16483] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 334.733893][T16783] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3001'. [ 335.007390][T16483] 8021q: adding VLAN 0 to HW filter on device bond0 [ 335.790968][T16796] syzkaller0: entered promiscuous mode [ 335.796829][T16796] syzkaller0: entered allmulticast mode [ 336.097929][ C1] net_ratelimit: 14438 callbacks suppressed [ 336.097948][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 336.116209][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 336.128559][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:ca:58:e8:4d:87, vlan:0) [ 336.141000][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 336.153356][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 336.165669][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:ca:58:e8:4d:87, vlan:0) [ 336.178109][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 336.190381][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 336.203601][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:ca:58:e8:4d:87, vlan:0) [ 336.216091][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 336.347525][T16483] 8021q: adding VLAN 0 to HW filter on device team0 [ 336.442359][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 336.449584][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 336.515216][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 336.522459][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 337.645261][T16853] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3018'. [ 337.772626][T16853] bridge_slave_1: left allmulticast mode [ 337.799415][T16853] bridge_slave_1: left promiscuous mode [ 337.838712][T16853] bridge0: port 2(bridge_slave_1) entered disabled state [ 337.865306][T16853] bridge_slave_0: left allmulticast mode [ 337.888963][T16853] bridge_slave_0: left promiscuous mode [ 337.919643][T16853] bridge0: port 1(bridge_slave_0) entered disabled state [ 338.152490][T16866] netlink: 48 bytes leftover after parsing attributes in process `syz.5.3021'. [ 338.196397][T16483] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 338.372508][T16483] veth0_vlan: entered promiscuous mode [ 338.465559][T16483] veth1_vlan: entered promiscuous mode [ 338.651122][T16877] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3027'. [ 338.672289][T16483] veth0_macvtap: entered promiscuous mode [ 338.733012][T16876] netlink: 'syz.6.3026': attribute type 7 has an invalid length. [ 338.755637][T16483] veth1_macvtap: entered promiscuous mode [ 338.869436][T16483] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 338.933519][T16483] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 339.014144][ T7399] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.056658][ T7399] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.095808][ T7399] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.168462][ T7399] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.841972][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 339.904821][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 340.134450][T16905] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3035'. [ 340.172118][ T7405] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 340.238192][ T7405] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 340.407177][T16907] bond3 (unregistering): Released all slaves [ 340.522814][T16922] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3040'. [ 340.586776][T16922] block nbd3: Unsupported socket: should be TCP or UNIX. [ 340.670179][T16920] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3039'. [ 340.737568][ T5839] Bluetooth: hci4: command 0x0405 tx timeout [ 340.982168][T16922] tipc: Enabling of bearer rejected, failed to enable media [ 341.001733][T16933] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3041'. [ 341.037458][T16927] hsr0 speed is unknown, defaulting to 1000 [ 341.057049][T16933] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3041'. [ 341.108159][ C1] net_ratelimit: 14244 callbacks suppressed [ 341.108188][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:ca:58:e8:4d:87, vlan:0) [ 341.126731][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 341.139299][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 341.151834][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:ca:58:e8:4d:87, vlan:0) [ 341.164532][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 341.177245][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 341.189820][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:ca:58:e8:4d:87, vlan:0) [ 341.202881][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 341.215720][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 341.228355][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:ca:58:e8:4d:87, vlan:0) [ 341.617592][T12762] IPVS: starting estimator thread 0... [ 341.717934][T16952] IPVS: using max 25 ests per chain, 60000 per kthread [ 341.782172][T16944] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 341.823300][T16953] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3044'. [ 342.032852][T16962] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3047'. [ 343.529160][T16990] netlink: 'syz.3.3057': attribute type 1 has an invalid length. [ 343.638573][T16990] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 343.855918][T16992] veth7: entered promiscuous mode [ 344.054997][ T5834] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 344.093287][ T5834] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 344.103234][ T5834] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 344.119798][ T5834] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 344.127726][ T5834] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 344.486419][T17004] hsr0 speed is unknown, defaulting to 1000 [ 344.771242][T17020] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3065'. [ 344.796834][ T13] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 344.825386][T17024] netlink: 'syz.1.3065': attribute type 1 has an invalid length. [ 344.837496][ T13] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 344.863425][ T13] netdevsim netdevsim0 eth3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 345.124517][T17027] bond1 (unregistering): Released all slaves [ 345.307720][ T13] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 345.351697][ T13] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.396321][ T13] netdevsim netdevsim0 eth2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 345.600932][T17038] gtp0: entered promiscuous mode [ 345.614419][T17038] gtp0: entered allmulticast mode [ 345.761940][ T13] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 345.845439][ T13] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.904121][ T13] netdevsim netdevsim0 eth1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 345.971473][T17056] netlink: 'syz.3.3071': attribute type 4 has an invalid length. [ 346.059409][T17057] netlink: 'syz.3.3071': attribute type 4 has an invalid length. [ 346.071666][T17052] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3073'. [ 346.117865][ C1] net_ratelimit: 15197 callbacks suppressed [ 346.117885][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:ca:58:e8:4d:87, vlan:0) [ 346.136261][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 346.148615][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 346.161093][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:ca:58:e8:4d:87, vlan:0) [ 346.161143][T17043] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3071'. [ 346.173603][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 346.173892][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 346.175046][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:ca:58:e8:4d:87, vlan:0) [ 346.187307][ T5834] Bluetooth: hci1: command tx timeout [ 346.195780][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 346.237302][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 346.249673][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:ca:58:e8:4d:87, vlan:0) [ 346.300214][ T13] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 346.339740][ T13] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.383794][ T13] netdevsim netdevsim0 eth0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 347.431487][T17087] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3083'. [ 347.626642][T17090] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3084'. [ 347.843471][T17102] tls_set_device_offload: netdev not found [ 348.248322][ T5834] Bluetooth: hci1: command tx timeout [ 350.332275][ T5834] Bluetooth: hci1: command tx timeout [ 350.739624][ T5201] udevd[5201]: worker [5848] /devices/virtual/block/nbd1 timeout; kill it [ 350.761851][ T5201] udevd[5201]: seq 14143 '/devices/virtual/block/nbd1' killed [ 351.127980][ C1] net_ratelimit: 16058 callbacks suppressed [ 351.128000][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 351.146208][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 351.158391][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 351.170552][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:ca:58:e8:4d:87, vlan:0) [ 351.182880][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 351.195096][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 351.207645][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 351.219951][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 351.232221][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:ca:58:e8:4d:87, vlan:0) [ 351.244436][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 352.408840][ T5834] Bluetooth: hci1: command tx timeout [ 355.368872][ T5839] Bluetooth: hci2: command 0x0406 tx timeout [ 355.524912][ T13] bond0 (unregistering): Released all slaves [ 355.740119][ T13] bond1 (unregistering): Released all slaves [ 355.933672][ T13] bond2 (unregistering): Released all slaves [ 355.952326][ T13] bond3 (unregistering): Released all slaves [ 355.974401][ T13] bond4 (unregistering): Released all slaves [ 356.010237][ T13] bond5 (unregistering): Released all slaves [ 356.032301][ T13] bond6 (unregistering): Released all slaves [ 356.138003][ C1] net_ratelimit: 19179 callbacks suppressed [ 356.138022][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 356.156192][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 356.168472][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 356.180867][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 356.193167][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:ca:58:e8:4d:87, vlan:0) [ 356.205968][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 356.218196][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 356.230478][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 356.242804][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 356.255053][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:ca:58:e8:4d:87, vlan:0) [ 356.399355][ T13] bond7 (unregistering): Released all slaves [ 356.422102][ T13] bond8 (unregistering): Released all slaves [ 356.448985][T17004] chnl_net:caif_netlink_parms(): no params data found [ 356.522171][T17099] netlink: 'syz.5.3086': attribute type 3 has an invalid length. [ 356.825634][ T13] 9: left promiscuous mode [ 357.525274][T17140] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3092'. [ 357.872057][ T13] tipc: Disabling bearer [ 357.914420][ T13] tipc: Left network mode [ 358.083749][ T13] IPVS: stopping backup sync thread 14837 ... [ 358.189075][T17152] bond4: option miimon: invalid value (18446744073709551585) [ 358.240272][T17152] bond4: option miimon: allowed values 0 - 2147483647 [ 358.359948][T17152] bond4 (unregistering): Released all slaves [ 358.493823][T17177] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3100'. [ 358.745554][T17184] netlink: 'syz.6.3101': attribute type 10 has an invalid length. [ 359.281897][T17004] bridge0: port 1(bridge_slave_0) entered blocking state [ 359.321729][T17004] bridge0: port 1(bridge_slave_0) entered disabled state [ 359.377692][T17004] bridge_slave_0: entered allmulticast mode [ 359.418145][T17004] bridge_slave_0: entered promiscuous mode [ 359.441390][T17004] bridge0: port 2(bridge_slave_1) entered blocking state [ 359.506849][T17004] bridge0: port 2(bridge_slave_1) entered disabled state [ 359.566467][T17004] bridge_slave_1: entered allmulticast mode [ 359.610092][T17004] bridge_slave_1: entered promiscuous mode [ 359.760560][T17217] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3108'. [ 360.317146][T17206] syzkaller0: entered promiscuous mode [ 360.354312][T17206] syzkaller0: entered allmulticast mode [ 360.675707][T17004] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 360.771765][T17004] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 361.148030][ C1] net_ratelimit: 13896 callbacks suppressed [ 361.148050][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 361.166377][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 361.178842][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:ca:58:e8:4d:87, vlan:0) [ 361.191348][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 361.203793][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 361.216360][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 361.228859][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 361.231226][T17256] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3112'. [ 361.241312][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 361.241762][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:ca:58:e8:4d:87, vlan:0) [ 361.242119][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 361.859212][T17004] team0: Port device team_slave_0 added [ 361.948351][T17004] team0: Port device team_slave_1 added [ 362.575179][T17004] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 362.593523][T17004] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 362.639128][T17004] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 362.675093][T17279] netlink: 1044 bytes leftover after parsing attributes in process `syz.6.3119'. [ 362.701042][T17004] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 362.735391][T17004] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 362.848251][T17004] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 363.046842][ T95] block nbd1: Possible stuck request ffff888025070000: control (read@0,1024B). Runtime 210 seconds [ 363.060930][ T13] hsr_slave_0: left promiscuous mode [ 363.090618][ T95] block nbd1: Possible stuck request ffff8880250701c0: control (read@1024,1024B). Runtime 210 seconds [ 363.090654][ T13] hsr_slave_1: left promiscuous mode [ 363.114545][ T95] block nbd1: Possible stuck request ffff888025070380: control (read@2048,1024B). Runtime 210 seconds [ 363.139098][ T95] block nbd1: Possible stuck request ffff888025070540: control (read@3072,1024B). Runtime 210 seconds [ 363.323187][ T13] veth1_macvtap: left allmulticast mode [ 363.340001][ T13] veth1_macvtap: left promiscuous mode [ 363.364513][ T13] veth0_macvtap: left promiscuous mode [ 364.513680][ T13] pimreg (unregistering): left allmulticast mode [ 364.741762][ T13] pim6reg (unregistering): left allmulticast mode [ 366.158012][ C1] net_ratelimit: 15603 callbacks suppressed [ 366.158034][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 366.176220][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:ca:58:e8:4d:87, vlan:0) [ 366.188463][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 366.200665][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 366.212873][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 366.225130][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 366.237389][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 366.249602][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:ca:58:e8:4d:87, vlan:0) [ 366.261992][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 366.274411][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 366.488151][T17308] netlink: 64985 bytes leftover after parsing attributes in process `syz.6.3127'. [ 366.812288][T17004] hsr_slave_0: entered promiscuous mode [ 366.846536][T17004] hsr_slave_1: entered promiscuous mode [ 366.886919][T17004] debugfs: 'hsr0' already exists in 'hsr' [ 366.904180][T17004] Cannot create hsr debugfs directory [ 367.052619][T17340] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3134'. [ 367.503792][T17359] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3139'. [ 368.841967][T17396] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3144'. [ 368.861508][T17395] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3144'. [ 368.914821][T17398] netlink: 'syz.5.3144': attribute type 1 has an invalid length. [ 369.221402][T17398] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 369.595617][T17411] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3147'. [ 369.623702][ T13] IPVS: stop unused estimator thread 0... [ 369.774766][T17411] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3147'. [ 369.933292][T17427] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 2, id = 0 [ 370.262522][T17431] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3152'. [ 370.308195][T17432] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3151'. [ 371.167880][ C1] net_ratelimit: 14326 callbacks suppressed [ 371.167900][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 371.186746][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:ca:58:e8:4d:87, vlan:0) [ 371.199172][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 371.211598][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 371.224016][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 371.236543][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 371.240378][T17458] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3160'. [ 371.248895][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 371.249298][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:ca:58:e8:4d:87, vlan:0) [ 371.282937][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 371.295355][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 371.401870][T17458] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3160'. [ 372.119508][T17004] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 372.167161][T17004] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 372.233270][T17004] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 372.290829][T17485] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3164'. [ 372.319079][T17004] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 372.353993][T17484] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3164'. [ 373.985163][T17004] 8021q: adding VLAN 0 to HW filter on device bond0 [ 374.131609][T17004] 8021q: adding VLAN 0 to HW filter on device team0 [ 374.171961][T17529] netlink: 'syz.5.3176': attribute type 1 has an invalid length. [ 374.289554][ T1160] bridge0: port 1(bridge_slave_0) entered blocking state [ 374.296785][ T1160] bridge0: port 1(bridge_slave_0) entered forwarding state [ 374.537691][T17529] 8021q: adding VLAN 0 to HW filter on device bond3 [ 374.689316][T17549] netlink: 'syz.6.3180': attribute type 10 has an invalid length. [ 374.718523][T17534] vlan2: entered promiscuous mode [ 374.758012][T17534] bond3: entered promiscuous mode [ 374.783249][T17534] vlan2: entered allmulticast mode [ 374.833637][T17534] bond3: entered allmulticast mode [ 374.993901][T17540] bond3: (slave gretap3): making interface the new active one [ 375.031765][T17540] gretap3: entered promiscuous mode [ 375.063013][T17540] gretap3: entered allmulticast mode [ 375.085365][T17540] bond3: (slave gretap3): Enslaving as an active interface with an up link [ 375.122562][ T1160] bridge0: port 2(bridge_slave_1) entered blocking state [ 375.129853][ T1160] bridge0: port 2(bridge_slave_1) entered forwarding state [ 375.243789][T17549] 8021q: adding VLAN 0 to HW filter on device team0 [ 375.333061][T17549] bond0: (slave team0): Enslaving as an active interface with an up link [ 375.783105][T17574] xt_l2tp: missing protocol rule (udp|l2tpip) [ 375.799945][T17573] netlink: 'syz.6.3186': attribute type 1 has an invalid length. [ 376.177853][ C1] net_ratelimit: 11810 callbacks suppressed [ 376.177873][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 376.196250][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 376.208707][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 376.221104][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:ca:58:e8:4d:87, vlan:0) [ 376.233514][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 376.245913][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 376.259232][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 376.271788][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 376.284329][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 376.296754][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:ca:58:e8:4d:87, vlan:0) [ 376.938575][T17609] __nla_validate_parse: 2 callbacks suppressed [ 376.938591][T17609] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3191'. [ 376.966042][T17004] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 377.388596][T17004] veth0_vlan: entered promiscuous mode [ 377.424636][T17620] netlink: 'syz.3.3194': attribute type 9 has an invalid length. [ 377.455234][T17004] veth1_vlan: entered promiscuous mode [ 377.558190][T17621] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 377.801633][T17004] veth0_macvtap: entered promiscuous mode [ 377.940163][T17004] veth1_macvtap: entered promiscuous mode [ 378.092386][T17641] tipc: Enabled bearer , priority 0 [ 378.216207][T17004] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 378.494435][T17652] netlink: 'syz.5.3201': attribute type 21 has an invalid length. [ 378.510924][T17636] tipc: Resetting bearer [ 378.525830][T17652] netlink: 'syz.5.3201': attribute type 6 has an invalid length. [ 378.578670][T17652] netlink: 132 bytes leftover after parsing attributes in process `syz.5.3201'. [ 378.700691][T17004] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 378.789208][T17659] netlink: 'syz.1.3202': attribute type 58 has an invalid length. [ 378.831526][T17666] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3203'. [ 378.865815][T17659] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3202'. [ 378.951673][T17633] tipc: Disabling bearer [ 379.133393][T17656] syzkaller1: entered promiscuous mode [ 379.148936][T17656] syzkaller1: entered allmulticast mode [ 379.168520][T17666] gre0: entered promiscuous mode [ 379.721629][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 379.772078][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.219813][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.280989][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.711209][T17709] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3209'. [ 380.846471][T17713] syz_tun: left allmulticast mode [ 380.870252][T17713] syz_tun: left promiscuous mode [ 380.903612][T17713] bridge0: port 3(syz_tun) entered disabled state [ 380.952280][T17720] netlink: 'syz.3.3209': attribute type 10 has an invalid length. [ 381.027676][T17713] bridge_slave_0: left allmulticast mode [ 381.053643][T17713] bridge_slave_0: left promiscuous mode [ 381.072859][T17713] bridge0: port 1(bridge_slave_0) entered disabled state [ 381.095736][T17722] netlink: 576 bytes leftover after parsing attributes in process `syz.1.3211'. [ 381.143844][T17713] bridge_slave_1: left allmulticast mode [ 381.163094][T17713] bridge_slave_1: left promiscuous mode [ 381.187484][T17713] bridge0: port 2(bridge_slave_1) entered disabled state [ 381.189146][ C1] net_ratelimit: 9633 callbacks suppressed [ 381.189163][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 381.212906][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 381.225331][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 381.237864][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:ca:58:e8:4d:87, vlan:0) [ 381.250365][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 381.262861][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 381.276302][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 381.288809][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 381.301240][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 381.313688][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:ca:58:e8:4d:87, vlan:0) [ 381.393382][T17713] bond0: (slave bond_slave_0): Releasing backup interface [ 381.473931][T17730] x_tables: duplicate underflow at hook 2 [ 381.490191][T17713] bond0: (slave bond_slave_1): Releasing backup interface [ 381.559837][T17713] team0: Port device team_slave_0 removed [ 381.604417][T17713] team0: Port device team_slave_1 removed [ 381.621921][T17713] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 381.634898][T17713] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 381.655464][T17713] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 381.666464][T17713] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 382.380831][ T5986] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 382.449367][ T5986] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 382.631043][ T5986] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 382.674967][ T5986] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 382.783927][T17751] x_tables: ip6_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT/POSTROUTING [ 385.107148][ T5839] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 385.137258][ T5839] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 385.145863][ T5839] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 385.169575][ T5839] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 385.178522][ T5839] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 385.437538][T17804] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3228'. [ 385.481391][T17804] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3228'. [ 385.610236][T17804] erspan0: entered promiscuous mode [ 385.663658][T17804] erspan0: left promiscuous mode [ 385.907879][T17793] hsr0 speed is unknown, defaulting to 1000 [ 386.199021][ C1] net_ratelimit: 9519 callbacks suppressed [ 386.199038][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 386.217671][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 386.230103][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 386.242537][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:ca:58:e8:4d:87, vlan:0) [ 386.255239][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 386.267694][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 386.282011][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 386.294570][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 386.306990][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 386.319564][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:ca:58:e8:4d:87, vlan:0) [ 387.209107][ T5839] Bluetooth: hci3: command tx timeout [ 387.232142][T17849] netlink: 'syz.5.3237': attribute type 12 has an invalid length. [ 387.308492][T17849] netlink: 132 bytes leftover after parsing attributes in process `syz.5.3237'. [ 387.492585][T17854] netlink: 'syz.6.3238': attribute type 7 has an invalid length. [ 387.533186][T17842] can: request_module (can-proto-0) failed. [ 387.659119][T17793] chnl_net:caif_netlink_parms(): no params data found [ 388.158262][T17864] IPVS: length: 193 != 8 [ 388.839695][T17879] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3244'. [ 388.885995][T17793] bridge0: port 1(bridge_slave_0) entered blocking state [ 388.905993][T17793] bridge0: port 1(bridge_slave_0) entered disabled state [ 388.932868][T17793] bridge_slave_0: entered allmulticast mode [ 388.957211][T17793] bridge_slave_0: entered promiscuous mode [ 389.003649][T17793] bridge0: port 2(bridge_slave_1) entered blocking state [ 389.055257][T17793] bridge0: port 2(bridge_slave_1) entered disabled state [ 389.100719][T17793] bridge_slave_1: entered allmulticast mode [ 389.146715][T17793] bridge_slave_1: entered promiscuous mode [ 389.265857][T17893] netlink: 14544 bytes leftover after parsing attributes in process `syz.6.3247'. [ 389.293575][ T5839] Bluetooth: hci3: command tx timeout [ 389.659567][T17900] sctp: [Deprecated]: syz.6.3249 (pid 17900) Use of int in max_burst socket option. [ 389.659567][T17900] Use struct sctp_assoc_value instead [ 389.712427][T17793] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 389.811351][T17904] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 389.997288][T17793] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 390.023116][T17907] netlink: 104 bytes leftover after parsing attributes in process `syz.1.3252'. [ 390.226745][T17793] team0: Port device team_slave_0 added [ 390.272780][T17793] team0: Port device team_slave_1 added [ 390.464299][T17919] Bluetooth: MGMT ver 1.23 [ 390.718961][T17793] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 390.763035][T17793] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 390.869339][T17793] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 390.946885][T17937] tipc: Started in network mode [ 390.969889][T17937] tipc: Node identity 8273326c0629, cluster identity 4711 [ 390.995021][T17937] tipc: Enabled bearer , priority 0 [ 391.019307][T17793] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 391.050681][T17793] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 391.114475][T17793] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 391.208052][ C1] net_ratelimit: 9818 callbacks suppressed [ 391.208072][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 391.226342][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:ca:58:e8:4d:87, vlan:0) [ 391.228024][T17943] netlink: 228 bytes leftover after parsing attributes in process `syz.5.3261'. [ 391.238826][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 391.239222][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 391.240655][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 391.285857][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:ca:58:e8:4d:87, vlan:0) [ 391.290707][T17947] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 391.298389][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 391.298720][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 391.299122][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:ca:58:e8:4d:87, vlan:0) [ 391.341839][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 391.362172][T17937] tipc: Disabling bearer [ 391.368271][ T5839] Bluetooth: hci3: command tx timeout [ 392.042486][T17793] hsr_slave_0: entered promiscuous mode [ 392.078471][T17793] hsr_slave_1: entered promiscuous mode [ 392.105022][T17793] debugfs: 'hsr0' already exists in 'hsr' [ 392.120823][T17793] Cannot create hsr debugfs directory [ 392.186375][T17977] netlink: 'syz.6.3270': attribute type 30 has an invalid length. [ 392.213029][T17979] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3271'. [ 392.455027][T17977] bond6: option arp_missed_max: invalid value (0) [ 392.464426][T17977] bond6: option arp_missed_max: allowed values 1 - 255 [ 392.502679][T17977] bond6 (unregistering): Released all slaves [ 392.786704][T17983] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3272'. [ 392.977607][T17992] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3274'. [ 393.448199][ T5839] Bluetooth: hci3: command tx timeout [ 393.484796][T18004] xt_hashlimit: invalid interval [ 393.716074][ T95] block nbd1: Possible stuck request ffff888025070000: control (read@0,1024B). Runtime 240 seconds [ 393.741884][ T95] block nbd1: Possible stuck request ffff8880250701c0: control (read@1024,1024B). Runtime 240 seconds [ 393.778616][ T95] block nbd1: Possible stuck request ffff888025070380: control (read@2048,1024B). Runtime 240 seconds [ 393.803850][ T95] block nbd1: Possible stuck request ffff888025070540: control (read@3072,1024B). Runtime 240 seconds [ 394.355955][T18026] IPVS: set_ctl: invalid protocol: 94 0.0.0.8:20001 [ 394.581223][T18030] netlink: 88 bytes leftover after parsing attributes in process `syz.0.3287'. [ 395.158835][ T5944] IPVS: starting estimator thread 0... [ 395.250098][T18047] IPVS: using max 26 ests per chain, 62400 per kthread [ 395.642875][T18059] netlink: 'syz.6.3294': attribute type 1 has an invalid length. [ 395.851889][T18059] bond6: entered promiscuous mode [ 395.861795][T18059] 8021q: adding VLAN 0 to HW filter on device bond6 [ 395.873746][T18065] netlink: 'syz.0.3295': attribute type 1 has an invalid length. [ 395.885683][T18065] netlink: 'syz.0.3295': attribute type 2 has an invalid length. [ 395.940169][T18065] netlink: 'syz.0.3295': attribute type 1 has an invalid length. [ 395.991715][T17793] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 396.138583][T17793] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 396.215758][T17793] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 396.218256][ C1] net_ratelimit: 10230 callbacks suppressed [ 396.218274][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 396.240892][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:ca:58:e8:4d:87, vlan:0) [ 396.253543][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 396.266000][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 396.278499][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:ca:58:e8:4d:87, vlan:0) [ 396.290962][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 396.303785][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 396.317016][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 396.329469][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:ca:58:e8:4d:87, vlan:0) [ 396.341899][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 396.362453][T17793] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 396.403445][T18070] IPVS: length: 239 != 24 [ 396.674428][T18086] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3299'. [ 396.688754][T18070] bond1: entered allmulticast mode [ 396.694633][T18070] 8021q: adding VLAN 0 to HW filter on device bond1 [ 397.552790][T17793] 8021q: adding VLAN 0 to HW filter on device bond0 [ 397.675574][T17793] 8021q: adding VLAN 0 to HW filter on device team0 [ 397.867598][ T5986] bridge0: port 1(bridge_slave_0) entered blocking state [ 397.874872][ T5986] bridge0: port 1(bridge_slave_0) entered forwarding state [ 397.976249][ T5986] bridge0: port 2(bridge_slave_1) entered blocking state [ 397.983596][ T5986] bridge0: port 2(bridge_slave_1) entered forwarding state [ 398.263240][T18130] tipc: Can't bind to reserved service type 1 [ 398.861839][T18145] IPVS: set_ctl: invalid protocol: 108 127.0.0.1:20003 [ 398.924361][T18148] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3317'. [ 399.384995][T18157] tipc: New replicast peer: 255.255.255.255 [ 399.396598][T18157] tipc: Enabled bearer , priority 10 [ 399.439843][T17793] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 399.513134][T18162] netlink: 'syz.0.3320': attribute type 29 has an invalid length. [ 399.562229][T18162] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3320'. [ 399.734277][T17793] veth0_vlan: entered promiscuous mode [ 399.814239][T17793] veth1_vlan: entered promiscuous mode [ 400.004869][T17793] veth0_macvtap: entered promiscuous mode [ 400.055856][T17793] veth1_macvtap: entered promiscuous mode [ 400.188968][T18173] netlink: 32 bytes leftover after parsing attributes in process `syz.6.3322'. [ 400.382167][T18182] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3326'. [ 400.392364][ T5944] tipc: Node number set to 3659629568 [ 400.473427][T17793] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 400.920865][T18194] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3327'. [ 401.109089][T18192] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3327'. [ 401.227917][ C1] net_ratelimit: 9988 callbacks suppressed [ 401.227937][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 401.246187][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 401.258557][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:ca:58:e8:4d:87, vlan:0) [ 401.270941][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 401.283310][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 401.296525][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 401.308975][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:ca:58:e8:4d:87, vlan:0) [ 401.321459][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 401.334412][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 401.346817][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:ca:58:e8:4d:87, vlan:0) [ 401.667443][T18204] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3331'. [ 401.772516][T18206] x_tables: ip6_tables: rpfilter match: used from hooks INPUT, but only valid from PREROUTING [ 401.807673][T18206] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 406.103447][T17793] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 406.238893][ C1] net_ratelimit: 12469 callbacks suppressed [ 406.238915][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 406.257113][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:ca:58:e8:4d:87, vlan:0) [ 406.269374][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 406.281734][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 406.293968][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:ca:58:e8:4d:87, vlan:0) [ 406.306216][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 406.318376][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 406.331169][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 406.343629][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:ca:58:e8:4d:87, vlan:0) [ 406.356173][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 406.588495][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 406.621716][ T5986] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 406.659031][T18238] syzkaller0: entered promiscuous mode [ 406.683175][T18238] syzkaller0: entered allmulticast mode [ 406.703641][ T5986] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 406.751428][ T5986] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 407.717286][ T7405] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 407.760742][ T7405] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 407.933514][ T7399] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 408.004080][ T7399] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 408.059769][T18274] netlink: 108 bytes leftover after parsing attributes in process `syz.0.3349'. [ 408.539574][T18282] vlan2: entered promiscuous mode [ 408.572939][T18282] geneve1: entered promiscuous mode [ 408.608168][T18282] vlan2: entered allmulticast mode [ 408.623796][T18289] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3352'. [ 408.636009][T18282] geneve1: entered allmulticast mode [ 408.695687][T18288] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3353'. [ 408.776957][T18293] netlink: 104 bytes leftover after parsing attributes in process `syz.6.3354'. [ 409.072217][T18302] IPVS: length: 239 != 24 [ 409.123906][T18307] IPVS: length: 239 != 24 [ 409.243342][T18310] netlink: 'syz.6.3358': attribute type 21 has an invalid length. [ 409.285840][T18310] netlink: 152 bytes leftover after parsing attributes in process `syz.6.3358'. [ 409.471332][T18314] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input6 [ 410.713268][T18350] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3367'. [ 411.035780][T18359] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3370'. [ 411.247921][ C1] net_ratelimit: 10220 callbacks suppressed [ 411.247938][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 411.266249][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 411.278667][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:ca:58:e8:4d:87, vlan:0) [ 411.291099][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 411.303516][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 411.316986][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 411.329519][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:ca:58:e8:4d:87, vlan:0) [ 411.342153][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 411.354542][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 411.367392][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:ca:58:e8:4d:87, vlan:0) [ 412.449954][T18399] xt_hashlimit: invalid rate [ 412.614293][T18399] netlink: 'syz.1.3380': attribute type 1 has an invalid length. [ 412.776409][T18406] netlink: 14 bytes leftover after parsing attributes in process `syz.0.3383'. [ 413.020246][T18414] x_tables: duplicate underflow at hook 2 [ 413.135304][ C1] sched: DL replenish lagged too much [ 413.698585][T18436] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3388'. [ 413.758137][T18436] block nbd3: Unsupported socket: should be TCP or UNIX. [ 414.471009][T18450] netlink: 64 bytes leftover after parsing attributes in process `syz.5.3390'. [ 414.720917][T18406] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 414.766769][T18406] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 414.787572][T18406] bond0 (unregistering): Released all slaves [ 415.071897][T18432] syzkaller0: entered promiscuous mode [ 415.077588][T18432] syzkaller0: entered allmulticast mode [ 415.104168][T18451] geneve2: entered promiscuous mode [ 415.110628][T18451] geneve2: entered allmulticast mode [ 416.257943][ C1] net_ratelimit: 10566 callbacks suppressed [ 416.257964][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:ca:58:e8:4d:87, vlan:0) [ 416.276354][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 416.288663][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 416.300838][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:ca:58:e8:4d:87, vlan:0) [ 416.313190][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 416.325500][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 416.339201][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 416.351646][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:ca:58:e8:4d:87, vlan:0) [ 416.363934][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 416.376163][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 419.475288][T18455] dvmrp1: entered allmulticast mode [ 419.484810][ T13] netdevsim netdevsim6 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0 [ 419.504141][ T13] netdevsim netdevsim6 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 419.734770][T18452] netdevsim netdevsim6 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 419.771207][T18452] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 419.857199][T18463] tipc: Enabled bearer , priority 0 [ 419.959335][T18466] geneve2: entered promiscuous mode [ 420.194513][T18486] netlink: 1 bytes leftover after parsing attributes in process `syz.0.3398'. [ 420.304372][T18464] syzkaller0: entered promiscuous mode [ 420.310149][T18464] syzkaller0: entered allmulticast mode [ 420.316664][T18464] tipc: Resetting bearer [ 420.403986][ T1160] tipc: Resetting bearer [ 420.417849][ T13] netdevsim netdevsim6 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 420.464396][T18460] tipc: Resetting bearer [ 421.267874][ C1] net_ratelimit: 12791 callbacks suppressed [ 421.267895][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 421.286539][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 421.298804][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:ca:58:e8:4d:87, vlan:0) [ 421.311197][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 421.323471][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 421.335855][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:ca:58:e8:4d:87, vlan:0) [ 421.348281][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 421.360583][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 421.373520][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 421.385862][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:ca:58:e8:4d:87, vlan:0) [ 424.344625][T18460] tipc: Disabling bearer [ 424.367305][ T95] block nbd1: Possible stuck request ffff888025070000: control (read@0,1024B). Runtime 270 seconds [ 424.385794][ T95] block nbd1: Possible stuck request ffff8880250701c0: control (read@1024,1024B). Runtime 270 seconds [ 424.411565][ T95] block nbd1: Possible stuck request ffff888025070380: control (read@2048,1024B). Runtime 270 seconds [ 424.471805][ T95] block nbd1: Possible stuck request ffff888025070540: control (read@3072,1024B). Runtime 270 seconds [ 424.679840][T18499] netlink: 'syz.3.3401': attribute type 21 has an invalid length. [ 424.690540][T18500] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.3400'. [ 424.706304][T18499] netlink: 128 bytes leftover after parsing attributes in process `syz.3.3401'. [ 424.727619][T18499] netlink: 'syz.3.3401': attribute type 4 has an invalid length. [ 424.771175][T18503] netlink: 'syz.3.3401': attribute type 21 has an invalid length. [ 424.806780][T18499] netlink: 'syz.3.3401': attribute type 5 has an invalid length. [ 424.844291][T18499] netlink: 3 bytes leftover after parsing attributes in process `syz.3.3401'. [ 424.887238][T18503] netlink: 128 bytes leftover after parsing attributes in process `syz.3.3401'. [ 424.925258][T18503] netlink: 'syz.3.3401': attribute type 4 has an invalid length. [ 425.012239][T18503] netlink: 'syz.3.3401': attribute type 5 has an invalid length. [ 425.059311][T18503] netlink: 3 bytes leftover after parsing attributes in process `syz.3.3401'. [ 425.170109][T18515] xt_hashlimit: invalid rate [ 425.269670][T18516] netlink: 'syz.5.3405': attribute type 1 has an invalid length. [ 425.760478][T18526] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3407'. [ 425.972526][T18452] netdevsim netdevsim6 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 426.041442][T18452] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 426.109896][T18452] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 426.147708][T18530] netlink: 'syz.3.3408': attribute type 1 has an invalid length. [ 426.158531][T18530] netlink: 16150 bytes leftover after parsing attributes in process `syz.3.3408'. [ 426.277919][ C1] net_ratelimit: 11915 callbacks suppressed [ 426.277937][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 426.296243][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:ca:58:e8:4d:87, vlan:0) [ 426.308632][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 426.320946][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 426.333638][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 426.345899][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:ca:58:e8:4d:87, vlan:0) [ 426.358238][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 426.370513][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 426.383452][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:ca:58:e8:4d:87, vlan:0) [ 426.395726][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 426.576255][T18518] batadv_slave_1: entered promiscuous mode [ 426.619475][T18532] geneve2: entered promiscuous mode [ 426.624878][T18532] geneve2: entered allmulticast mode [ 426.635397][T18518] batadv_slave_1: left promiscuous mode [ 426.642514][ T13] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0 [ 426.964988][T18533] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 427.033064][T18542] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3411'. [ 427.072530][T18542] netlink: 'syz.0.3411': attribute type 7 has an invalid length. [ 427.127543][T18542] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3411'. [ 427.330122][T18452] netdevsim netdevsim6 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 427.352441][T18452] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 427.375535][T18452] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 427.460861][ T13] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 427.532354][ T13] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 427.753063][T18452] bond0: (slave netdevsim0): Releasing backup interface [ 427.871987][T18452] netdevsim netdevsim6 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 427.922576][T18452] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 427.979010][T18452] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 428.416266][ T3565] netdevsim netdevsim6 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 428.447214][ T3565] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 19999 - 0 [ 428.474648][T18572] netlink: 104 bytes leftover after parsing attributes in process `syz.0.3420'. [ 428.497583][ T3565] netdevsim netdevsim6 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 428.668112][ T3565] netdevsim netdevsim6 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 428.687329][ T3565] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 19999 - 0 [ 428.708023][ T3565] netdevsim netdevsim6 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 428.778233][T18578] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3422'. [ 428.887187][T18586] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3424'. [ 428.903246][ T5986] netdevsim netdevsim6 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 428.912930][ T5986] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 19999 - 0 [ 428.930513][ T5986] netdevsim netdevsim6 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 429.103338][T18533] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 429.114059][T18533] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 429.246447][ T5986] netdevsim netdevsim6 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 429.286826][ T5986] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 19999 - 0 [ 429.340893][ T5986] netdevsim netdevsim6 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 429.657469][T18533] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 429.706434][T18533] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 430.366977][T18533] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 430.432643][T18533] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 431.093745][T18613] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3432'. [ 431.178298][T18617] xt_CT: You must specify a L4 protocol and not use inversions on it [ 431.287852][ C1] net_ratelimit: 10621 callbacks suppressed [ 431.287872][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:ca:58:e8:4d:87, vlan:0) [ 431.314475][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 431.326922][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 431.339325][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:ca:58:e8:4d:87, vlan:0) [ 431.351747][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 431.364220][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 431.377543][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 431.389144][ T5834] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 431.390017][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:ca:58:e8:4d:87, vlan:0) [ 431.400010][ T5834] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 431.409336][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 431.409637][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 431.454701][T18627] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3435'. [ 431.466217][ T5834] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 431.476987][ T5834] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 431.499487][ T5834] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 431.534503][T18626] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3435'. [ 431.653238][ T5986] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 19999 - 0 [ 431.663105][ T5986] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 431.723812][ T5986] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 19999 - 0 [ 431.766211][ T5986] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 431.820640][ T5986] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 19999 - 0 [ 431.842803][ T5986] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 431.996946][ T7421] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 19999 - 0 [ 432.012502][ T7421] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 432.083145][T18621] hsr0 speed is unknown, defaulting to 1000 [ 432.318436][T18647] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 432.461551][T18655] netlink: 'syz.3.3444': attribute type 1 has an invalid length. [ 432.470009][T18655] netlink: 'syz.3.3444': attribute type 2 has an invalid length. [ 432.522372][T18649] xt_ecn: cannot match TCP bits for non-tcp packets [ 432.610760][T18651] bond1 (unregistering): Released all slaves [ 432.653934][T18659] sctp: [Deprecated]: syz.0.3445 (pid 18659) Use of int in max_burst socket option deprecated. [ 432.653934][T18659] Use struct sctp_assoc_value instead [ 432.764810][T18650] ip6tnl1: entered promiscuous mode [ 432.785657][T18650] ip6tnl1: entered allmulticast mode [ 433.532339][ T5834] Bluetooth: hci4: command tx timeout [ 433.574266][T18684] SET target dimension over the limit! [ 434.687537][ T3503] netdevsim netdevsim6 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 434.715738][ T3503] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 434.736829][T18701] netlink: 148 bytes leftover after parsing attributes in process `syz.1.3454'. [ 434.747032][ T3503] netdevsim netdevsim6 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 434.790186][T18703] netlink: 148 bytes leftover after parsing attributes in process `syz.1.3454'. [ 434.803737][T18682] syzkaller0: entered promiscuous mode [ 434.811105][T18682] syzkaller0: entered allmulticast mode [ 435.172039][ T3503] netdevsim netdevsim6 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 435.219189][ T3503] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 435.274687][ T3503] netdevsim netdevsim6 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 435.344032][T18621] chnl_net:caif_netlink_parms(): no params data found [ 435.553921][T18694] syzkaller0: entered promiscuous mode [ 435.564319][T18694] syzkaller0: entered allmulticast mode [ 435.609690][ T5834] Bluetooth: hci4: command tx timeout [ 436.298043][ C1] net_ratelimit: 11242 callbacks suppressed [ 436.298070][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:ca:58:e8:4d:87, vlan:0) [ 436.316334][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 436.328593][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 436.341721][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 436.354091][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:ca:58:e8:4d:87, vlan:0) [ 436.366493][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 436.378713][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 436.390929][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:ca:58:e8:4d:87, vlan:0) [ 436.403275][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 436.415735][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 437.691473][ T5834] Bluetooth: hci4: command tx timeout [ 439.770445][ T5834] Bluetooth: hci4: command tx timeout [ 439.833289][ T3503] netdevsim netdevsim6 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 439.859289][ T3503] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 439.887215][ T3503] netdevsim netdevsim6 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 440.119026][ T3503] netdevsim netdevsim6 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 440.171071][ T3503] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 440.205893][ T3503] netdevsim netdevsim6 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 440.761497][T18745] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3464'. [ 440.783239][T18621] bridge0: port 1(bridge_slave_0) entered blocking state [ 440.827325][T18621] bridge0: port 1(bridge_slave_0) entered disabled state [ 440.849182][T18621] bridge_slave_0: entered allmulticast mode [ 440.866854][T18621] bridge_slave_0: entered promiscuous mode [ 441.057474][T18749] bond0: option primary: mode dependency failed, not supported in mode 802.3ad(4) [ 441.147147][T18749] bond0 (unregistering): Released all slaves [ 441.174575][T18756] netlink: 'syz.5.3467': attribute type 21 has an invalid length. [ 441.261416][T18621] bridge0: port 2(bridge_slave_1) entered blocking state [ 441.282054][T18762] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3467'. [ 441.300450][T18760] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3470'. [ 441.308620][ C1] net_ratelimit: 13503 callbacks suppressed [ 441.308663][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 441.312958][T18621] bridge0: port 2(bridge_slave_1) entered disabled state [ 441.315585][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:ca:58:e8:4d:87, vlan:0) [ 441.346701][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 441.359124][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 441.359906][T18621] bridge_slave_1: entered allmulticast mode [ 441.371522][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:ca:58:e8:4d:87, vlan:0) [ 441.371840][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 441.372184][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 441.373364][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 441.383612][T18621] bridge_slave_1: entered promiscuous mode [ 441.390887][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:ca:58:e8:4d:87, vlan:0) [ 441.408796][T18756] netlink: 'syz.5.3467': attribute type 6 has an invalid length. [ 441.416194][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 441.669000][T18756] netlink: 132 bytes leftover after parsing attributes in process `syz.5.3467'. [ 441.683376][T18760] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3470'. [ 441.693791][T18760] tipc: Invalid UDP bearer configuration [ 441.693850][T18760] tipc: Enabling of bearer rejected, failed to enable media [ 441.951994][T18621] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 442.051624][T18621] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 442.585075][T18621] team0: Port device team_slave_0 added [ 442.685654][T18621] team0: Port device team_slave_1 added [ 443.145375][ T3503] veth0_to_bridge: left allmulticast mode [ 443.177270][ T3503] veth0_to_bridge: left promiscuous mode [ 443.224869][ T3503] bridge0: port 3(veth0_to_bridge) entered disabled state [ 443.267733][ T3503] bridge_slave_1: left allmulticast mode [ 443.273614][ T3503] bridge_slave_1: left promiscuous mode [ 443.287086][ T3503] bridge0: port 2(bridge_slave_1) entered disabled state [ 443.318579][ T3503] bridge_slave_0: left allmulticast mode [ 443.331526][ T3503] bridge_slave_0: left promiscuous mode [ 443.355670][ T3503] bridge0: port 1(bridge_slave_0) entered disabled state [ 443.477264][T18830] rdma_op ffff8880276139f0 conn xmit_rdma 0000000000000000 [ 444.070784][ T3503] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 444.082711][ T3503] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 444.093993][ T3503] bond0 (unregistering): (slave team0): Releasing backup interface [ 444.106183][ T3503] bond0 (unregistering): Released all slaves [ 444.119529][ T3503] bond1 (unregistering): Released all slaves [ 444.133798][ T3503] bond2 (unregistering): Released all slaves [ 444.146408][ T3503] bond3 (unregistering): Released all slaves [ 444.161519][ T3503] bond4 (unregistering): Released all slaves [ 444.175292][ T3503] bond5 (unregistering): Released all slaves [ 444.302808][ T3503] bond6 (unregistering): Released all slaves [ 444.315213][ T3503] bond7 (unregistering): Released all slaves [ 444.439782][T18621] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 444.450030][T18621] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 444.483557][T18621] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 444.523966][ T3503] 9: left promiscuous mode [ 444.573697][T18621] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 444.609435][T18621] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 444.680104][T18621] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 444.731398][ T3503] IPVS: stopping backup sync thread 13626 ... [ 444.739641][T18854] netlink: 'syz.5.3489': attribute type 1 has an invalid length. [ 444.747849][T18854] netlink: 136 bytes leftover after parsing attributes in process `syz.5.3489'. [ 444.769081][T18854] netlink: 'syz.5.3489': attribute type 1 has an invalid length. [ 444.998741][T18621] hsr_slave_0: entered promiscuous mode [ 445.028149][T18621] hsr_slave_1: entered promiscuous mode [ 445.045902][T18621] debugfs: 'hsr0' already exists in 'hsr' [ 445.064371][T18621] Cannot create hsr debugfs directory [ 445.181017][T18879] netlink: 'syz.1.3496': attribute type 21 has an invalid length. [ 445.235667][T18879] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3496'. [ 445.338868][T18885] netlink: 'syz.1.3496': attribute type 12 has an invalid length. [ 445.357708][T18885] netlink: 'syz.1.3496': attribute type 29 has an invalid length. [ 445.384284][T18885] netlink: 148 bytes leftover after parsing attributes in process `syz.1.3496'. [ 445.422650][T18885] netlink: 59 bytes leftover after parsing attributes in process `syz.1.3496'. [ 445.716132][T18915] netlink: 'syz.0.3499': attribute type 4 has an invalid length. [ 445.768379][T18916] netlink: 'syz.0.3499': attribute type 4 has an invalid length. [ 445.828125][T18918] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3501'. [ 446.000736][ T3503] hsr_slave_0: left promiscuous mode [ 446.035291][ T3503] hsr_slave_1: left promiscuous mode [ 446.050272][ T3503] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 446.060734][ T3503] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 446.071588][T18924] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3502'. [ 446.080624][ T3503] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 446.080650][ T3503] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 446.110700][ T3503] veth1_macvtap: left promiscuous mode [ 446.116558][ T3503] veth0_macvtap: left promiscuous mode [ 446.124208][ T3503] veth1_vlan: left allmulticast mode [ 446.130078][ T3503] veth1_vlan: left promiscuous mode [ 446.135533][ T3503] veth0_vlan: left promiscuous mode [ 446.809281][ T3503] team0 (unregistering): Port device team_slave_1 removed [ 446.885309][ T3503] team0 (unregistering): Port device team_slave_0 removed [ 447.197506][ T3503] team0 (unregistering): Port device 0! removed [ 447.410116][T18935] syzkaller0: entered promiscuous mode [ 447.415811][T18935] syzkaller0: entered allmulticast mode [ 447.606593][T18959] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3508'. [ 447.763625][T18621] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 447.819809][T18621] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 447.916646][T18621] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 447.972977][T18621] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 448.224893][ T3503] IPVS: stop unused estimator thread 0... [ 448.344551][T18621] 8021q: adding VLAN 0 to HW filter on device bond0 [ 448.434963][T18996] bond1: entered allmulticast mode [ 448.441148][T18996] 8021q: adding VLAN 0 to HW filter on device bond1 [ 448.463469][T18999] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3515'. [ 448.496514][T18621] 8021q: adding VLAN 0 to HW filter on device team0 [ 448.519853][ T1141] bridge0: port 1(bridge_slave_0) entered blocking state [ 448.527268][ T1141] bridge0: port 1(bridge_slave_0) entered forwarding state [ 448.551297][T19001] netlink: 76 bytes leftover after parsing attributes in process `syz.0.3516'. [ 448.557672][ T1141] bridge0: port 2(bridge_slave_1) entered blocking state [ 448.567612][ T1141] bridge0: port 2(bridge_slave_1) entered forwarding state [ 448.966554][T19028] netlink: 'syz.0.3522': attribute type 17 has an invalid length. [ 449.007981][T19028] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3522'. [ 449.045281][T19028] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3522'. [ 449.082190][T19028] gretap0: entered promiscuous mode [ 449.098254][T19028] gretap0: left promiscuous mode [ 449.283248][T19043] netlink: 'syz.0.3526': attribute type 29 has an invalid length. [ 449.304402][T19043] netlink: 'syz.0.3526': attribute type 29 has an invalid length. [ 449.336057][T19043] netlink: 188 bytes leftover after parsing attributes in process `syz.0.3526'. [ 449.355222][T18621] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 449.391653][T19046] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3527'. [ 449.414104][T19046] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3527'. [ 449.856027][T19072] vlan2: entered promiscuous mode [ 449.890701][T19072] bridge0: entered promiscuous mode [ 450.019006][T19077] net_ratelimit: 4032 callbacks suppressed [ 450.019050][T19077] openvswitch: netlink: IP tunnel dst address not specified [ 450.364507][T18621] veth0_vlan: entered promiscuous mode [ 450.422783][T18621] veth1_vlan: entered promiscuous mode [ 450.507316][T18621] veth0_macvtap: entered promiscuous mode [ 450.543928][T19109] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 450.563250][T18621] veth1_macvtap: entered promiscuous mode [ 450.639398][T18621] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 450.670023][T18621] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 450.721785][ T1141] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 450.749358][ T1141] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 450.805928][ T1141] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 450.837194][ T1141] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 451.004116][ T8953] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 451.028764][ T8953] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 451.135926][ T8953] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 451.151806][T19131] __nla_validate_parse: 4 callbacks suppressed [ 451.151824][T19131] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3549'. [ 451.180781][ T8953] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 451.234324][T19131] tipc: Invalid UDP bearer configuration [ 451.234393][T19131] tipc: Enabling of bearer rejected, failed to enable media [ 451.556386][T19145] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3552'. [ 451.611828][T19162] netlink: 80 bytes leftover after parsing attributes in process `syz.5.3554'. [ 451.623078][T19163] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 453.377429][T19151] hsr0 speed is unknown, defaulting to 1000 [ 453.566022][T19181] netlink: 'syz.0.3556': attribute type 1 has an invalid length. [ 453.573060][T19186] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3559'. [ 453.646286][T19181] 8021q: adding VLAN 0 to HW filter on device bond0 [ 453.665369][T19186] vlan2: entered allmulticast mode [ 453.673441][T19186] mac80211_hwsim hwsim36 wlan0: entered allmulticast mode [ 453.822648][T19189] bond0: (slave geneve2): making interface the new active one [ 453.873518][T19189] bond0: (slave geneve2): Enslaving as an active interface with an up link [ 453.941864][T19177] syzkaller0: entered promiscuous mode [ 453.950727][T19177] syzkaller0: entered allmulticast mode [ 453.972564][T19194] syzkaller0: entered promiscuous mode [ 453.986271][T19194] syzkaller0: entered allmulticast mode [ 454.034222][T19203] bridge0: port 2(bridge_slave_1) entered disabled state [ 454.042657][T19203] bridge0: port 1(bridge_slave_0) entered disabled state [ 454.221943][T19206] hsr0 speed is unknown, defaulting to 1000 [ 454.224995][T19214] syzkaller0: entered promiscuous mode [ 454.246696][T19214] syzkaller0: entered allmulticast mode [ 454.355311][T19221] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3568'. [ 454.408920][ T95] block nbd1: Possible stuck request ffff888025070000: control (read@0,1024B). Runtime 300 seconds [ 454.421459][ T95] block nbd1: Possible stuck request ffff8880250701c0: control (read@1024,1024B). Runtime 300 seconds [ 454.479056][ T95] block nbd1: Possible stuck request ffff888025070380: control (read@2048,1024B). Runtime 300 seconds [ 454.503663][ T95] block nbd1: Possible stuck request ffff888025070540: control (read@3072,1024B). Runtime 300 seconds [ 454.752682][T19239] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3572'. [ 455.434550][T19287] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3587'. [ 455.891274][T19308] netlink: 'syz.0.3596': attribute type 1 has an invalid length. [ 455.930350][T19319] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3599'. [ 455.976060][T19308] 8021q: adding VLAN 0 to HW filter on device bond2 [ 456.017974][T19319] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3599'. [ 456.515931][T19335] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3604'. [ 456.696629][T19349] netlink: 'syz.0.3608': attribute type 11 has an invalid length. [ 457.253735][T19382] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3617'. [ 457.354718][T19387] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3618'. [ 457.355210][T19388] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 457.385022][T19392] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 457.724588][T19413] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3626'. [ 457.734476][T19412] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3625'. [ 457.768877][T19417] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3627'. [ 457.784107][T19419] netlink: 'syz.1.3628': attribute type 1 has an invalid length. [ 457.811183][T19419] netlink: 236 bytes leftover after parsing attributes in process `syz.1.3628'. [ 457.882714][T19417] 8021q: VLANs not supported on ipvlan1 [ 457.961966][T19426] ipt_REJECT: ECHOREPLY no longer supported. [ 457.985404][T19426] netlink: 232 bytes leftover after parsing attributes in process `syz.3.3630'. [ 458.010911][T19426] netlink: 256 bytes leftover after parsing attributes in process `syz.3.3630'. [ 458.193235][T19436] netlink: 220 bytes leftover after parsing attributes in process `syz.5.3633'. [ 459.333087][T12749] IPVS: starting estimator thread 0... [ 459.389171][T19514] IPVS: lc: FWM 3 0x00000003 - no destination available [ 459.418070][ C1] IPVS: lc: FWM 3 0x00000003 - no destination available [ 459.444183][T19515] IPVS: using max 27 ests per chain, 64800 per kthread [ 460.155215][T19561] netlink: 'syz.3.3671': attribute type 24 has an invalid length. [ 460.307065][T19576] netdevsim netdevsim0 : renamed from netdevsim0 (while UP) [ 461.494866][T19619] netlink: 'syz.3.3687': attribute type 21 has an invalid length. [ 461.551971][T19619] __nla_validate_parse: 9 callbacks suppressed [ 461.551988][T19619] netlink: 156 bytes leftover after parsing attributes in process `syz.3.3687'. [ 461.962845][T19642] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3694'. [ 462.145993][T19648] netlink: 'syz.5.3695': attribute type 10 has an invalid length. [ 462.223048][T19648] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 462.523693][T19669] netlink: 132 bytes leftover after parsing attributes in process `syz.5.3699'. [ 462.608157][T19669] delete_channel: no stack [ 462.691466][T19669] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap4 [ 462.733825][T19669] gretap4: default qdisc (pfifo_fast) fail, fallback to noqueue [ 462.751215][T19669] gretap4: entered promiscuous mode [ 462.772331][T19669] gretap4: entered allmulticast mode [ 462.934769][T19680] netlink: 'syz.7.3703': attribute type 11 has an invalid length. [ 462.953674][T19680] netlink: 224 bytes leftover after parsing attributes in process `syz.7.3703'. [ 463.043074][T19680] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3703'. [ 463.124914][T19687] macvtap1: entered promiscuous mode [ 463.134855][T19687] vlan0: entered promiscuous mode [ 463.140963][T19687] macvtap1: entered allmulticast mode [ 463.162316][T19687] vlan0: entered allmulticast mode [ 463.166424][T19692] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3704'. [ 463.172203][T19687] veth0_vlan: entered allmulticast mode [ 463.285515][T19692] hsr_slave_1 (unregistering): left promiscuous mode [ 463.321868][T19689] macvtap2: entered promiscuous mode [ 463.328590][T19689] macvtap2: entered allmulticast mode [ 463.485968][T19703] netlink: 72 bytes leftover after parsing attributes in process `syz.5.3709'. [ 463.535144][T19703] bond5 (unregistering): Released all slaves [ 463.807016][T19721] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3711'. [ 464.182885][T19725] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 464.191240][T19725] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 464.268034][T19726] IPVS: lc: FWM 3 0x00000003 - no destination available [ 464.298182][ C0] IPVS: lc: FWM 3 0x00000003 - no destination available [ 464.573511][T19739] xt_CT: You must specify a L4 protocol and not use inversions on it [ 464.623768][T19740] netlink: 'syz.1.3717': attribute type 38 has an invalid length. [ 464.681645][T19739] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3719'. [ 464.693725][T19745] netlink: 36 bytes leftover after parsing attributes in process `syz.7.3722'. [ 465.117352][T19770] gretap0: entered promiscuous mode [ 465.128991][T19768] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 465.528140][T19799] tipc: Failed to obtain node identity [ 465.587859][T19799] tipc: Enabling of bearer rejected, failed to enable media [ 465.916742][T19818] netlink: 'syz.0.3741': attribute type 8 has an invalid length. [ 466.460009][T19839] tipc: Enabling of bearer rejected, media not registered [ 466.693407][T19856] __nla_validate_parse: 8 callbacks suppressed [ 466.693424][T19856] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3754'. [ 466.879100][T19860] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 466.929002][T19868] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3757'. [ 467.001592][T19874] netlink: 'syz.5.3759': attribute type 6 has an invalid length. [ 467.003055][T19870] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 467.010176][T19872] nbd: must specify at least one socket [ 467.030955][T19875] netlink: 'syz.5.3759': attribute type 6 has an invalid length. [ 467.379648][T19895] IPVS: lc: FWM 3 0x00000003 - no destination available [ 467.386921][ C0] IPVS: lc: FWM 3 0x00000003 - no destination available [ 467.449543][T19899] tipc: Started in network mode [ 467.454492][T19899] tipc: Node identity bab27c28386f, cluster identity 4711 [ 467.479180][T19899] tipc: Enabled bearer , priority 0 [ 467.533016][T19899] syzkaller0: entered promiscuous mode [ 467.558694][T19899] syzkaller0: entered allmulticast mode [ 467.600702][T19907] tipc: Resetting bearer [ 467.614115][T19898] tipc: Resetting bearer [ 467.683440][T19898] tipc: Disabling bearer [ 468.009481][ T5839] Bluetooth: hci1: command 0x0406 tx timeout [ 468.140545][T19946] tipc: Started in network mode [ 468.153308][T19946] tipc: Node identity 2eb528c0effc, cluster identity 4711 [ 468.173054][T19946] tipc: Enabled bearer , priority 0 [ 468.292067][T19945] tipc: Disabling bearer [ 468.466794][T19968] SET target dimension over the limit! [ 469.067991][T19999] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3799'. [ 469.078805][T19999] netlink: 176 bytes leftover after parsing attributes in process `syz.3.3799'. [ 469.099385][T19999] netlink: 'syz.3.3799': attribute type 5 has an invalid length. [ 469.263798][T20012] x_tables: duplicate entry at hook 2 [ 469.285366][T20015] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3805'. [ 469.521527][T20029] syzkaller1: entered promiscuous mode [ 469.527051][T20029] syzkaller1: entered allmulticast mode [ 469.885489][T20051] bond0: option ad_select: unable to set because the bond device is up [ 470.047331][T20062] netlink: 80 bytes leftover after parsing attributes in process `syz.1.3819'. [ 470.126238][T20072] netlink: 'syz.7.3822': attribute type 2 has an invalid length. [ 470.137969][T20072] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3822'. [ 470.565677][T20093] xt_CT: You must specify a L4 protocol and not use inversions on it [ 470.872842][T20109] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3830'. [ 471.077707][T20117] vcan0: tx drop: invalid da for name 0x0000000000000002 [ 471.232096][T20127] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3838'. [ 471.335670][T20130] bond3 (unregistering): Released all slaves [ 471.368399][T20139] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 471.397148][T20140] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 471.410975][T20140] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3841'. [ 471.433029][T20141] netlink: 'syz.3.3840': attribute type 4 has an invalid length. [ 471.506326][T20132] pim6reg1: entered promiscuous mode [ 471.515654][T20132] pim6reg1: entered allmulticast mode [ 471.756194][T20155] delete_channel: no stack [ 472.076720][T20172] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3853'. [ 472.534931][T20195] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3865'. [ 472.643268][T20195] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 472.721405][T20205] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3868'. [ 472.757947][T20205] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3868'. [ 472.995762][T20217] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3872'. [ 473.075536][T20219] bond1: option arp_all_targets: invalid value (18446744073709551613) [ 473.094923][T20227] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3874'. [ 473.108517][T20219] bond1 (unregistering): Released all slaves [ 473.151183][T20227] erspan0: entered promiscuous mode [ 473.201902][T20227] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3874'. [ 473.325631][T20236] netlink: 108 bytes leftover after parsing attributes in process `syz.7.3877'. [ 473.353954][T20236] !: renamed from dummy0 (while UP) [ 473.763414][T20255] netlink: 56 bytes leftover after parsing attributes in process `syz.7.3882'. [ 473.850199][T20258] dvmrp0: entered allmulticast mode [ 473.893279][T20255] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3882'. [ 474.033088][T20269] Bluetooth: MGMT ver 1.23 [ 474.311692][T20290] SET target dimension over the limit! [ 474.403343][T20296] bond0: entered promiscuous mode [ 474.413029][T20296] geneve2: entered promiscuous mode [ 474.421519][T20296] batadv0: entered promiscuous mode [ 474.433871][T20296] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 474.451088][T20296] bond0: left promiscuous mode [ 474.456116][T20296] geneve2: left promiscuous mode [ 474.462437][T20296] batadv0: left promiscuous mode [ 474.639882][T20308] sctp: [Deprecated]: syz.0.3897 (pid 20308) Use of struct sctp_assoc_value in delayed_ack socket option. [ 474.639882][T20308] Use struct sctp_sack_info instead [ 474.859837][T20315] netlink: 'syz.0.3901': attribute type 21 has an invalid length. [ 474.918111][T20315] netlink: 'syz.0.3901': attribute type 1 has an invalid length. [ 474.924949][T20318] netlink: 'syz.0.3901': attribute type 21 has an invalid length. [ 475.015817][T20318] netlink: 'syz.0.3901': attribute type 1 has an invalid length. [ 475.246293][T20335] netlink: 'syz.1.3908': attribute type 1 has an invalid length. [ 475.411937][T20339] tipc: Enabled bearer , priority 0 [ 475.426665][T20339] syzkaller0: entered promiscuous mode [ 475.449639][T20339] syzkaller0: entered allmulticast mode [ 475.494009][T20339] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 475.644639][T20339] tipc: Resetting bearer [ 475.674111][T20337] tipc: Resetting bearer [ 475.723669][T20337] tipc: Disabling bearer [ 476.033774][T20389] bond0: entered promiscuous mode [ 476.042893][T20389] bond_slave_0: entered promiscuous mode [ 476.052560][T20389] bond_slave_1: entered promiscuous mode [ 476.061819][T20389] batadv0: entered promiscuous mode [ 476.070174][T20389] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 476.080567][T20389] bond0: left promiscuous mode [ 476.088323][ T5834] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 476.088886][ T5839] Bluetooth: hci2: command 0x0406 tx timeout [ 476.101599][T20389] bond_slave_0: left promiscuous mode [ 476.108319][T20389] bond_slave_1: left promiscuous mode [ 476.115083][T20389] batadv0: left promiscuous mode [ 476.155298][T20393] syzkaller1: entered promiscuous mode [ 476.161447][T20393] syzkaller1: entered allmulticast mode [ 477.867959][T20462] bond2: down delay (33554432) is not a multiple of miimon (640), value rounded to 33553920 ms [ 477.929855][ T5839] Bluetooth: hci4: command tx timeout [ 477.945786][T20474] tipc: Enabling of bearer rejected, failed to enable media [ 477.959197][T20475] tipc: Enabling of bearer rejected, failed to enable media [ 478.104184][T20485] __nla_validate_parse: 6 callbacks suppressed [ 478.104202][T20485] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3950'. [ 478.126411][T20485] netlink: 'syz.5.3950': attribute type 1 has an invalid length. [ 478.258790][T20485] bond5: entered promiscuous mode [ 478.264737][T20485] 8021q: adding VLAN 0 to HW filter on device bond5 [ 478.356301][T20485] 8021q: adding VLAN 0 to HW filter on device bond5 [ 478.357070][T20503] Bluetooth: hci0: Opcode 0x0c20 failed: -22 [ 478.367439][T20485] bond5: (slave wireguard0): The slave device specified does not support setting the MAC address [ 478.386769][T20485] bond5: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 478.407151][T20485] bond5: (slave wireguard0): making interface the new active one [ 478.417430][T20485] wireguard0: entered promiscuous mode [ 478.425282][T20485] bond5: (slave wireguard0): Enslaving as an active interface with an up link [ 478.452713][T20500] pim6reg527: entered allmulticast mode [ 478.591384][T20517] syzkaller0: entered promiscuous mode [ 478.597210][T20517] syzkaller0: entered allmulticast mode [ 478.621591][T20517] tipc: Enabled bearer , priority 0 [ 478.630442][T20516] tipc: Resetting bearer [ 478.660128][T20516] tipc: Disabling bearer [ 478.789341][T20527] team_slave_0: entered promiscuous mode [ 478.795413][T20527] team_slave_1: entered promiscuous mode [ 478.803035][T20527] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 478.813590][T20527] team0: Device macvtap1 is already an upper device of the team interface [ 478.825670][T20527] team_slave_0: left promiscuous mode [ 478.831235][T20527] team_slave_1: left promiscuous mode [ 479.041432][T20534] syzkaller0: entered promiscuous mode [ 479.045937][T20536] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3965'. [ 479.047112][T20534] syzkaller0: entered allmulticast mode [ 479.280829][T20542] netlink: 64 bytes leftover after parsing attributes in process `syz.5.3969'. [ 479.359090][T20551] Cannot find set identified by id 1 to match [ 479.388693][T20551] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3972'. [ 479.614655][T20568] netlink: 'syz.1.3976': attribute type 12 has an invalid length. [ 480.418662][ T5834] Bluetooth: hci0: command tx timeout [ 480.573062][ T5834] Bluetooth: hci4: command 0x0405 tx timeout [ 481.794641][T20607] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3986'. [ 481.882615][T20616] netlink: 10 bytes leftover after parsing attributes in process `syz.0.3987'. [ 482.041612][T20618] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3988'. [ 482.051491][T20626] netlink: 'syz.7.3992': attribute type 58 has an invalid length. [ 482.074407][T20626] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3992'. [ 482.212738][T20642] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3995'. [ 482.349705][T20651] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3998'. [ 482.415498][T20651] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 482.447926][T20651] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 482.469371][T20651] gretap1: entered promiscuous mode [ 482.494442][T20651] gretap1: entered allmulticast mode [ 482.746752][T20658] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 483.120521][T20690] netlink: zone id is out of range [ 483.147363][T20691] netlink: 'syz.5.4012': attribute type 29 has an invalid length. [ 483.148892][T20690] netlink: zone id is out of range [ 483.157134][T20691] netlink: 'syz.5.4012': attribute type 29 has an invalid length. [ 483.170164][T20691] __nla_validate_parse: 2 callbacks suppressed [ 483.170191][T20691] netlink: 508 bytes leftover after parsing attributes in process `syz.5.4012'. [ 483.225905][T20690] netlink: zone id is out of range [ 483.281163][T20690] netlink: zone id is out of range [ 483.286329][T20690] netlink: zone id is out of range [ 483.324725][T20690] netlink: zone id is out of range [ 483.333717][T20690] netlink: zone id is out of range [ 483.343066][T20690] netlink: zone id is out of range [ 483.369505][T20690] netlink: zone id is out of range [ 483.541823][T20717] netlink: 24 bytes leftover after parsing attributes in process `syz.7.4019'. [ 483.577966][T20719] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4021'. [ 483.604394][T20711] netlink: 696 bytes leftover after parsing attributes in process `syz.7.4019'. [ 483.643208][T20717] bond1 (unregistering): Released all slaves [ 483.728169][T20719] macvlan2: entered promiscuous mode [ 483.733509][T20719] macvlan2: entered allmulticast mode [ 483.744485][T20719] bond2: (slave macvlan2): Opening slave failed [ 483.908838][T20727] tipc: Started in network mode [ 483.913822][T20727] tipc: Node identity aacecd59d4b6, cluster identity 4711 [ 483.922528][T20727] tipc: Enabled bearer , priority 0 [ 483.931497][T20727] syzkaller0: entered promiscuous mode [ 483.937096][T20727] syzkaller0: entered allmulticast mode [ 483.946504][T20698] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 483.954363][T20698] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 483.986741][T20727] tipc: Resetting bearer [ 484.093077][T20726] tipc: Resetting bearer [ 484.122777][T20726] tipc: Disabling bearer [ 484.134003][T20698] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 484.140146][T20698] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 484.263792][T20698] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 484.274057][T20698] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 484.305852][T20745] syzkaller0: entered promiscuous mode [ 484.316576][T20745] syzkaller0: entered allmulticast mode [ 484.497237][ T95] block nbd1: Possible stuck request ffff888025070000: control (read@0,1024B). Runtime 330 seconds [ 484.508290][ T95] block nbd1: Possible stuck request ffff8880250701c0: control (read@1024,1024B). Runtime 330 seconds [ 484.519454][ T95] block nbd1: Possible stuck request ffff888025070380: control (read@2048,1024B). Runtime 330 seconds [ 484.538596][ T95] block nbd1: Possible stuck request ffff888025070540: control (read@3072,1024B). Runtime 330 seconds [ 485.449296][ T5834] Bluetooth: hci4: command 0x0405 tx timeout [ 485.456483][T20698] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 485.462554][T20698] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 485.736960][T20769] tipc: Enabled bearer , priority 0 [ 485.745425][T20776] netlink: 'syz.1.4036': attribute type 10 has an invalid length. [ 485.764520][T20776] team0: Port device dummy0 added [ 485.863524][T20769] tipc: Resetting bearer [ 485.870828][T20769] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4034'. [ 485.902209][T20769] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4034'. [ 486.042198][T20766] tipc: Disabling bearer [ 486.191957][T20808] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4043'. [ 486.306899][T20811] bridge5: entered promiscuous mode [ 486.315633][T20811] bridge5: entered allmulticast mode [ 486.486712][T20825] netlink: 224 bytes leftover after parsing attributes in process `syz.7.4050'. [ 486.533499][T20828] netlink: 'syz.3.4053': attribute type 58 has an invalid length. [ 486.541930][T20828] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4053'. [ 486.599499][T20834] netlink: 'syz.5.4054': attribute type 29 has an invalid length. [ 486.657866][T20834] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4054'. [ 486.703402][T20836] netlink: 'syz.3.4053': attribute type 1 has an invalid length. [ 487.147634][T20870] netlink: 'syz.5.4063': attribute type 7 has an invalid length. [ 487.226559][T20867] bond3: Removing last arp target with arp_interval on [ 487.249145][T20875] netlink: 'syz.1.4065': attribute type 1 has an invalid length. [ 487.473431][T20886] Unsupported ieee802154 address type: 0 [ 488.123880][T20936] xt_l2tp: missing protocol rule (udp|l2tpip) [ 488.143041][T20935] net_ratelimit: 2 callbacks suppressed [ 488.143060][T20935] veth1_to_hsr: mtu less than device minimum [ 488.320048][T20942] __nla_validate_parse: 7 callbacks suppressed [ 488.320067][T20942] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4084'. [ 488.351036][T20943] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4084'. [ 488.433719][T20951] netlink: 'syz.7.4089': attribute type 1 has an invalid length. [ 488.446217][T20953] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4087'. [ 488.501964][T20951] 8021q: adding VLAN 0 to HW filter on device bond1 [ 488.512991][T20962] netlink: 36 bytes leftover after parsing attributes in process `syz.5.4091'. [ 488.538435][T20952] vlan3: entered promiscuous mode [ 488.546823][T20952] bond1: entered promiscuous mode [ 488.557075][T20952] vlan3: entered allmulticast mode [ 488.562328][T20952] bond1: entered allmulticast mode [ 488.717722][T20972] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 488.737581][T20972] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 488.745662][T20972] gretap1: entered promiscuous mode [ 488.762528][T20972] gretap1: entered allmulticast mode [ 489.879306][T21006] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4105'. [ 489.901915][T21006] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4105'. [ 489.904019][T21011] netlink: 40 bytes leftover after parsing attributes in process `syz.7.4104'. [ 489.913236][T21007] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4105'. [ 489.929090][T21011] netlink: 40 bytes leftover after parsing attributes in process `syz.7.4104'. [ 490.021322][T21019] netdevsim netdevsim1: Direct firmware load for emory_pressure_enabled failed with error -2 [ 490.034953][T21019] netdevsim netdevsim1: Falling back to sysfs fallback for: emory_pressure_enabled [ 490.165674][T21026] netlink: 256 bytes leftover after parsing attributes in process `syz.3.4111'. [ 490.567231][T21055] netlink: 'syz.0.4120': attribute type 30 has an invalid length. [ 490.733640][T21059] netlink: 'syz.5.4122': attribute type 21 has an invalid length. [ 490.809615][T21073] ip6gre2: entered allmulticast mode [ 490.960130][T21075] bond6: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 490.989904][T21075] bond6 (unregistering): Released all slaves [ 491.041855][T21087] tipc: Enabled bearer , priority 0 [ 491.050445][T21087] syzkaller0: entered promiscuous mode [ 491.055936][T21087] syzkaller0: entered allmulticast mode [ 491.080044][T21087] tipc: Resetting bearer [ 491.102492][T21086] tipc: Resetting bearer [ 491.148559][T21086] tipc: Disabling bearer [ 491.635914][T21129] IPVS: set_ctl: invalid protocol: 103 172.30.0.6:20003 [ 492.240260][ T30] audit: type=1800 audit(1761815228.344:7): pid=21170 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.4159" name="memory.events" dev="tmpfs" ino=1057 res=0 errno=0 [ 492.271730][ T30] audit: type=1804 audit(1761815228.364:8): pid=21170 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.4159" name="/newroot/203/memory.events" dev="tmpfs" ino=1057 res=1 errno=0 [ 492.324514][T21174] bond4: entered promiscuous mode [ 492.345955][T21176] bond_slave_0: entered promiscuous mode [ 492.352053][T21176] bond_slave_1: entered promiscuous mode [ 492.361036][T21176] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 492.388394][T21176] bond4: (slave macvlan2): making interface the new active one [ 492.400236][T21176] macvlan2: entered promiscuous mode [ 492.405591][T21176] bond0: entered promiscuous mode [ 492.414236][T21176] bond4: (slave macvlan2): Enslaving as an active interface with an up link [ 492.493409][T21185] syzkaller1: entered promiscuous mode [ 492.523895][T21185] syzkaller1: entered allmulticast mode [ 492.671832][T21200] netlink: 'syz.1.4166': attribute type 29 has an invalid length. [ 492.735894][T21205] netlink: 'syz.7.4167': attribute type 6 has an invalid length. [ 492.790046][T21205] netlink: 'syz.7.4167': attribute type 6 has an invalid length. [ 492.790340][ T7412] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 492.811865][ T7412] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 492.831178][ T7412] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 492.859629][ T7399] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 492.909320][T21213] netlink: 'syz.3.4170': attribute type 1 has an invalid length. [ 493.111254][T21219] hsr_slave_0 (unregistering): left promiscuous mode [ 493.123666][T21217] syzkaller1: entered promiscuous mode [ 493.132668][T21217] syzkaller1: entered allmulticast mode [ 493.173543][ T3503] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 493.191467][ T3503] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 493.294309][ T3503] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 493.312546][ T3503] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 493.334507][T21238] syzkaller0: entered promiscuous mode [ 493.340166][T21238] syzkaller0: entered allmulticast mode [ 493.383040][T21245] netlink: 'syz.0.4180': attribute type 4 has an invalid length. [ 493.410836][ T24] IPVS: starting estimator thread 0... [ 493.462815][T21253] __nla_validate_parse: 30 callbacks suppressed [ 493.462832][T21253] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4182'. [ 493.500061][T21251] IPVS: using max 33 ests per chain, 79200 per kthread [ 493.517132][T21259] netlink: 165 bytes leftover after parsing attributes in process `syz.1.4183'. [ 493.535694][T21250] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4181'. [ 493.671157][T21261] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4184'. [ 493.856766][T21276] bridge_slave_0: left allmulticast mode [ 493.872190][T21276] bridge_slave_0: left promiscuous mode [ 493.882423][T21276] bridge0: port 1(bridge_slave_0) entered disabled state [ 493.918570][T21276] bridge_slave_1: left allmulticast mode [ 494.004473][T21288] netlink: 'syz.1.4192': attribute type 1 has an invalid length. [ 494.045360][T21291] xt_l2tp: invalid flags combination: 8 [ 494.052042][T21276] bridge_slave_1: left promiscuous mode [ 494.059906][T21276] bridge0: port 2(bridge_slave_1) entered disabled state [ 494.096159][T21276] bond0: (slave bond_slave_0): Releasing backup interface [ 494.115410][T21276] bond_slave_0: left promiscuous mode [ 494.146872][T21276] bond0: (slave bond_slave_1): Releasing backup interface [ 494.171696][T21276] bond_slave_1: left promiscuous mode [ 494.185819][T21297] xt_cluster: you have exceeded the maximum number of cluster nodes (37482740 > 32) [ 494.204948][T21276] team0: Port device team_slave_0 removed [ 494.224048][T21297] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4192'. [ 494.240507][T21276] team0: Port device team_slave_1 removed [ 494.247145][T21297] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4192'. [ 494.247630][T21276] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 494.269714][T21276] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 494.281333][T21276] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 494.289324][T21276] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 494.299088][T21276] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 494.385121][T21293] gretap1: entered promiscuous mode [ 494.398390][T21293] bond3: (slave gretap1): making interface the new active one [ 494.407104][T21293] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 494.435414][T21294] macvlan2: entered promiscuous mode [ 494.442539][T21294] macvlan2: entered allmulticast mode [ 494.450147][T21294] bond3: entered promiscuous mode [ 494.456249][T21294] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 494.481599][T21294] bond3: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 494.529812][T21294] bond3: left promiscuous mode [ 494.566865][T21316] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4198'. [ 494.814779][T21327] netlink: 24 bytes leftover after parsing attributes in process `syz.7.4200'. [ 494.907248][T21330] tipc: Enabled bearer , priority 0 [ 494.960559][T21332] tipc: Enabling of bearer rejected, already enabled [ 495.044106][T21330] syzkaller0: entered promiscuous mode [ 495.051764][T21330] syzkaller0: entered allmulticast mode [ 495.296001][T21332] tipc: Resetting bearer [ 495.386852][T21332] tipc: Disabling bearer [ 495.588976][T21349] netlink: 'syz.1.4208': attribute type 2 has an invalid length. [ 495.862642][T21368] tipc: Enabled bearer , priority 0 [ 495.938727][T21368] tipc: Disabling bearer [ 495.991489][ T7399] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 496.035427][ T7399] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 496.047997][ T8955] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 496.056737][ T8955] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 496.282302][T21394] syzkaller0: entered promiscuous mode [ 496.288192][T21394] syzkaller0: entered allmulticast mode [ 496.310673][T21402] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 496.345067][T21409] netlink: 'syz.3.4223': attribute type 1 has an invalid length. [ 496.507595][T21404] 8021q: adding VLAN 0 to HW filter on device bond7 [ 496.522546][T21404] bond6: (slave bond7): making interface the new active one [ 496.534167][T21404] bond6: (slave bond7): Enslaving as an active interface with an up link [ 496.559691][T21409] bond6: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 496.573106][T21409] bond6: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 496.964949][T21436] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4231'. [ 496.970617][T21434] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4230'. [ 496.995251][T21434] xt_CT: You must specify a L4 protocol and not use inversions on it [ 498.452245][T21416] netem: invalid attributes len -24 [ 498.465796][T21416] netem: change failed [ 498.790700][T21460] __nla_validate_parse: 2 callbacks suppressed [ 498.790717][T21460] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4238'. [ 498.832298][T21461] netlink: 64 bytes leftover after parsing attributes in process `syz.3.4238'. [ 499.013982][T21470] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4241'. [ 499.043677][T21470] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4241'. [ 499.064589][T21474] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4244'. [ 499.065904][T21470] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4241'. [ 499.120613][T21470] 8021q: adding VLAN 0 to HW filter on device bond2 [ 499.154262][T21485] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4244'. [ 499.156579][T21478] bond2: entered allmulticast mode [ 499.176594][T21490] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4245'. [ 499.445548][T21510] IPVS: set_ctl: invalid protocol: 4 172.20.20.170:20004 [ 499.468254][T21510] sch_tbf: burst 5 is lower than device syzkaller0 mtu (1514) ! [ 499.476558][T21510] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4251'. [ 499.610316][T21523] xt_hashlimit: overflow, try lower: 18446744073709551613/4 [ 499.638505][T21523] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4258'. [ 500.800218][T21609] netlink: 'syz.3.4287': attribute type 21 has an invalid length. [ 500.911942][T21611] netlink: 'syz.0.4289': attribute type 10 has an invalid length. [ 500.930968][T21611] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 500.952246][T21611] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 500.975750][T21616] netlink: 'syz.1.4291': attribute type 2 has an invalid length. [ 500.989559][T21616] netlink: 'syz.1.4291': attribute type 2 has an invalid length. [ 501.375559][T21639] xt_ecn: cannot match TCP bits for non-tcp packets [ 501.658473][T21656] bridge0: port 3(batadv1) entered blocking state [ 501.665406][T21656] bridge0: port 3(batadv1) entered disabled state [ 501.672292][T21656] batadv1: entered allmulticast mode [ 501.681063][T21656] batadv1: entered promiscuous mode [ 501.694769][T21659] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 9 [ 501.841238][T21665] veth0_to_team: entered promiscuous mode [ 501.914796][T21674] syzkaller0: entered promiscuous mode [ 501.933513][T21674] syzkaller0: entered allmulticast mode [ 501.960326][T21674] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 502.160273][ T8960] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 502.170076][ T8960] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 502.310101][T21696] netlink: 'syz.7.4317': attribute type 2 has an invalid length. [ 502.347655][T21696] 9: entered promiscuous mode [ 502.692011][T21715] netlink: 'syz.7.4323': attribute type 1 has an invalid length. [ 502.999311][T21736] netlink: 'syz.7.4329': attribute type 10 has an invalid length. [ 503.052944][T21736] team0: Port device geneve0 added [ 503.427252][T21765] netlink: 'syz.5.4339': attribute type 16 has an invalid length. [ 503.690792][ T31] INFO: task udevd:5848 blocked for more than 143 seconds. [ 503.699013][ T31] Not tainted syzkaller #0 [ 503.723942][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 503.735456][T21783] veth0: entered promiscuous mode [ 503.749848][ T31] task:udevd state:D stack:20136 pid:5848 tgid:5848 ppid:5201 task_flags:0x400140 flags:0x00080003 [ 503.752019][T21783] Unsupported ieee802154 address type: 0 [ 503.785554][ T31] Call Trace: [ 503.792300][ T31] [ 503.798800][ T31] __schedule+0x1798/0x4cc0 [ 503.806833][T21782] veth0: left promiscuous mode [ 503.808704][ T31] ? __pfx___schedule+0x10/0x10 [ 503.828192][ T31] ? schedule+0x91/0x360 [ 503.837079][ T31] schedule+0x165/0x360 [ 503.842730][ T31] io_schedule+0x80/0xd0 [ 503.847229][ T31] folio_wait_bit_common+0x6b0/0xb80 [ 503.853155][ T31] ? __pfx_folio_wait_bit_common+0x10/0x10 [ 503.859206][ T31] ? __pfx_wake_page_function+0x10/0x10 [ 503.864781][ T31] ? __filemap_get_folio+0x770/0xaf0 [ 503.870749][ T31] ? do_read_cache_folio+0x4e9/0x590 [ 503.876046][ T31] do_read_cache_folio+0x1aa/0x590 [ 503.881394][ T31] ? __pfx_blkdev_read_folio+0x10/0x10 [ 503.886876][ T31] read_part_sector+0xb6/0x2b0 [ 503.891745][ T31] adfspart_check_POWERTEC+0x8c/0xf30 [ 503.897248][ T31] ? __pfx_adfspart_check_ICS+0x10/0x10 [ 503.903352][ T31] ? __pfx_adfspart_check_POWERTEC+0x10/0x10 [ 503.909426][ T31] bdev_disk_changed+0x75f/0x14b0 [ 503.914474][ T31] ? __pfx_bdev_disk_changed+0x10/0x10 [ 503.920094][ T31] ? wait_on_inode+0xc0/0x230 [ 503.924787][ T31] blkdev_get_whole+0x380/0x510 [ 503.930864][ T31] bdev_open+0x31e/0xd30 [ 503.935157][ T31] blkdev_open+0x457/0x600 [ 503.939678][ T31] ? __pfx_blkdev_open+0x10/0x10 [ 503.944616][ T31] do_dentry_open+0x953/0x13f0 [ 503.949626][ T31] vfs_open+0x3b/0x340 [ 503.953709][ T31] ? path_openat+0x2ecd/0x3830 [ 503.959080][ T31] path_openat+0x2ee5/0x3830 [ 503.963686][ T31] ? __pfx_path_openat+0x10/0x10 [ 503.968696][ T31] do_filp_open+0x1fa/0x410 [ 503.973190][ T31] ? __lock_acquire+0xab9/0xd20 [ 503.978139][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 503.983165][ T31] ? _raw_spin_unlock+0x28/0x50 [ 503.988621][ T31] ? alloc_fd+0x64c/0x6c0 [ 503.992969][ T31] do_sys_openat2+0x121/0x1c0 [ 503.997636][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 504.002982][ T31] __x64_sys_openat+0x138/0x170 [ 504.008649][ T31] do_syscall_64+0xfa/0xfa0 [ 504.013176][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 504.019748][ T31] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 504.025897][ T31] ? clear_bhb_loop+0x60/0xb0 [ 504.030637][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 504.036535][ T31] RIP: 0033:0x7fa6e14a7407 [ 504.041087][ T31] RSP: 002b:00007fffe7b5a000 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 504.050345][ T31] RAX: ffffffffffffffda RBX: 00007fa6e1c99880 RCX: 00007fa6e14a7407 [ 504.058538][ T31] RDX: 00000000000a0800 RSI: 000055d15b8caa10 RDI: ffffffffffffff9c [ 504.066595][ T31] RBP: 000055d15b8b1910 R08: 0000000000000000 R09: 0000000000000000 [ 504.074623][ T31] R10: 0000000000000000 R11: 0000000000000202 R12: 000055d15b8c6830 [ 504.083246][ T31] R13: 000055d15b8bf190 R14: 0000000000000000 R15: 000055d15b8c6830 [ 504.091601][ T31] [ 504.096198][ T31] [ 504.096198][ T31] Showing all locks held in the system: [ 504.139506][ T31] 1 lock held by khungtaskd/31: [ 504.144508][ T31] #0: ffffffff8df3d2e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 504.173707][ T31] 2 locks held by getty/5593: [ 504.186172][ T31] #0: ffff88814dc850a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 504.196075][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 504.206672][ T31] 1 lock held by udevd/5848: [ 504.211364][ T31] #0: ffff888024b43358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 504.220789][ T31] [ 504.223121][ T31] ============================================= [ 504.223121][ T31] [ 504.232006][ T31] NMI backtrace for cpu 0 [ 504.232024][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 504.232035][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 504.232042][ T31] Call Trace: [ 504.232046][ T31] [ 504.232051][ T31] dump_stack_lvl+0x189/0x250 [ 504.232071][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 504.232085][ T31] ? __pfx__printk+0x10/0x10 [ 504.232108][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 504.232120][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 504.232131][ T31] ? __pfx__printk+0x10/0x10 [ 504.232143][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 504.232159][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 504.232170][ T31] watchdog+0xf60/0xfa0 [ 504.232183][ T31] ? watchdog+0x1e2/0xfa0 [ 504.232195][ T31] kthread+0x711/0x8a0 [ 504.232210][ T31] ? __pfx_watchdog+0x10/0x10 [ 504.232219][ T31] ? __pfx_kthread+0x10/0x10 [ 504.232233][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 504.232244][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 504.232255][ T31] ? __pfx_kthread+0x10/0x10 [ 504.232271][ T31] ret_from_fork+0x4bc/0x870 [ 504.232289][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 504.232317][ T31] ? __switch_to_asm+0x39/0x70 [ 504.232330][ T31] ? __switch_to_asm+0x33/0x70 [ 504.232343][ T31] ? __pfx_kthread+0x10/0x10 [ 504.232363][ T31] ret_from_fork_asm+0x1a/0x30 [ 504.232392][ T31] [ 504.232398][ T31] Sending NMI from CPU 0 to CPUs 1: [ 504.380896][ C1] NMI backtrace for cpu 1 [ 504.380914][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) [ 504.380932][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 504.380942][ C1] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 504.380967][ C1] Code: cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 33 21 22 00 f3 0f 1e fa fb f4 c8 e6 02 00 cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 504.380981][ C1] RSP: 0018:ffffc90000197de0 EFLAGS: 000002c6 [ 504.380996][ C1] RAX: 101473e00d605d00 RBX: ffffffff81967b87 RCX: 101473e00d605d00 [ 504.381009][ C1] RDX: 0000000000000001 RSI: ffffffff8d70ca9c RDI: ffffffff8bbf0460 [ 504.381021][ C1] RBP: ffffc90000197f10 R08: ffff8880b8932fdb R09: 1ffff110171265fb [ 504.381033][ C1] R10: dffffc0000000000 R11: ffffed10171265fc R12: ffffffff8f7cd570 [ 504.381044][ C1] R13: 0000000000000001 R14: 0000000000000001 R15: 1ffff110039d3b58 [ 504.381056][ C1] FS: 0000000000000000(0000) GS:ffff88812623e000(0000) knlGS:0000000000000000 [ 504.381069][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 504.381080][ C1] CR2: 00007fd6545b3ad8 CR3: 0000000077404000 CR4: 00000000003526f0 [ 504.381095][ C1] Call Trace: [ 504.381103][ C1] [ 504.381110][ C1] default_idle+0x13/0x20 [ 504.381131][ C1] default_idle_call+0x73/0xb0 [ 504.381152][ C1] do_idle+0x1e7/0x510 [ 504.381170][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 504.381188][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 504.381207][ C1] ? __pfx_do_idle+0x10/0x10 [ 504.381228][ C1] ? do_idle+0xa/0x510 [ 504.381245][ C1] cpu_startup_entry+0x44/0x60 [ 504.381261][ C1] start_secondary+0x101/0x110 [ 504.381284][ C1] common_startup_64+0x13e/0x147 [ 504.381313][ C1]