last executing test programs: 8m11.288361154s ago: executing program 32 (id=27): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x80) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newqdisc={0x38, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r4, {0x7, 0xfff1}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_BACKLOG_LIMIT={0x8}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x400dc}, 0x4020080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="720ac4ff010000007110230000000000046804000f000000950000000000000012357b0b378e2049acdb31b06a328f057747101fa967e5b21c84a448288d97c6d072fb776892fa34544449e872aff89dc5e57f82c8fe20627a84197c6bbc8cc986af5d17cea61de2d47ecf60f7229c40d7cae16b2147cf477c49611ad9afc4100ec98f68040735fe6a548ebba6364b772f3a0dc7148af29ca66408eeab9bc90ae7c5e52e8f5dc2a54a7f537d0134f82b0044e11c84c7085703c9e4959bae5f983f88"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4d}, 0x94) 8m10.884695856s ago: executing program 33 (id=29): getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000600)={0x0, 0x68}, &(0x7f0000000640)=0x8) (async) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000680)={0x0, 0x2}, &(0x7f00000006c0)=0x8) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000840)={r0, 0x2, 0x8001, 0x3, 0xf0, 0x2, 0x2, 0x8000, {r1, @in={{0x2, 0x4e21, @multicast1}}, 0x7, 0x400, 0x6, 0x6f, 0x100}}, &(0x7f0000000700)=0xb0) (async, rerun: 32) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) (rerun: 32) sendmmsg$inet6(r2, &(0x7f0000004b40)=[{{&(0x7f0000001140)={0xa, 0x4e23, 0x10, @private2, 0x8}, 0x1c, &(0x7f00000013c0)=[{&(0x7f00000016c0)="99", 0x1}], 0x1}}, {{&(0x7f0000000000)={0xa, 0x4e24, 0x9b5d, @private2={0xfc, 0x2, '\x00', 0x1}, 0x80}, 0x1c, &(0x7f00000015c0)=[{&(0x7f0000001700)="92", 0x1}], 0x1}}], 0x2, 0x4000090) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x48}}, 0x0) (async) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r3, &(0x7f0000004380)=[{{&(0x7f0000004440)={0xa, 0x4e22, 0x0, @private1}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000800)='P', 0x1}], 0x1}}, {{&(0x7f0000000180)={0xa, 0x4e20, 0x401, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7}, 0x1c, &(0x7f0000000780)=[{&(0x7f00000001c0)='K', 0x1}], 0x1}}], 0x2, 0x0) (async) shutdown(r3, 0x1) (async, rerun: 32) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000080), 0x8) (async, rerun: 32) r4 = socket$inet_sctp(0x2, 0x5, 0x84) r5 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) (async) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) (async) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x80, 0x0, 0x2, 0x401, 0x0, 0x0, {0x2}, [@CTA_EXPECT_TUPLE={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_EXPECT_MASK={0x24, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_EXPECT_MASTER={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}]}]}, 0x80}}, 0x0) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r4, 0x84, 0x71, &(0x7f0000000100)={r6, 0xb4ea}, 0x8) (async) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f0000000540)={r6, @in={{0x2, 0x4e24, @remote}}}, 0x84) shutdown(r2, 0x1) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) splice(r8, &(0x7f0000000040)=0x3, r8, &(0x7f00000000c0)=0x9, 0x71, 0x6) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newlink={0x278, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32b, 0x200}, [@IFLA_VFINFO_LIST={0x258, 0x16, 0x0, 0x1, [{0xd8, 0x1, 0x0, 0x1, [@IFLA_VF_MAC={0x28, 0x1, {0x5, @local}}, @IFLA_VF_MAC={0x28, 0x1, {0x7, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2d}}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x0, 0x3}}, @IFLA_VF_TRUST={0xc, 0x9, {0x8000, 0x1}}, @IFLA_VF_MAC={0x28, 0x1, {0x7, @broadcast}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x2, 0x4}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0xfffffffb, 0x153}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x576, 0x8000000000000000}}]}, {0x5c, 0x1, 0x0, 0x1, [@IFLA_VF_LINK_STATE={0xc, 0x5, {0xffffffff, 0x33}}, @IFLA_VF_RATE={0x10, 0x6, {0x9, 0xc18, 0x6}}, @IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0xd, 0xfffffff7}}, @IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x70000000, 0xe643}}, @IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x15}}, @IFLA_VF_VLAN={0x10, 0x2, {0x6f7e, 0x4b, 0x7f}}]}, {0x24, 0x1, 0x0, 0x1, [@IFLA_VF_RATE={0x10, 0x6, {0x4, 0xa, 0xffffffff}}, @IFLA_VF_VLAN={0x10, 0x2, {0x0, 0xd42, 0x4}}]}, {0xe4, 0x1, 0x0, 0x1, [@IFLA_VF_LINK_STATE={0xc, 0x5, {0xb, 0x80}}, @IFLA_VF_TX_RATE={0xc, 0x3, {0x0, 0x94}}, @IFLA_VF_VLAN_LIST={0xb8, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x2, 0x46, 0x10, 0x88a8}}, {0x14, 0x1, {0x3, 0x123, 0xa1e, 0x8100}}, {0x14, 0x1, {0x594, 0xc3a, 0x8, 0x8100}}, {0x14, 0x1, {0x17, 0xe57, 0x9, 0x88a8}}, {0x14, 0x1, {0x40, 0xed3, 0xfffff55b, 0x88a8}}, {0x14, 0x1, {0x4, 0x456, 0x3, 0x8100}}, {0x14, 0x1, {0x2, 0x4c0, 0xe, 0x88a8}}, {0x14, 0x1, {0x6, 0x6ac, 0xffff, 0x88a8}}, {0x14, 0x1, {0x9, 0x100, 0x9, 0x8100}}]}, @IFLA_VF_RATE={0x10, 0x6, {0x2, 0x2, 0x10001}}]}, {0x18, 0x1, 0x0, 0x1, [@IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x6be5, 0x9}}]}]}]}, 0x278}}, 0x0) r9 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r9, 0x0, 0x30, &(0x7f0000000a40)=ANY=[@ANYBLOB="030000018000000000000021e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000760000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000014c5da4de4d92"], 0x90) (async) write$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000180)={'caif0', 0x32, 0x37}, 0x8) (async) socketpair(0x5, 0x4, 0x6, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$BATADV_CMD_SET_VLAN(r10, &(0x7f0000000500)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB], 0x14}, 0x1, 0x0, 0x0, 0x44000}, 0x4000000) 8m0.83182435s ago: executing program 3 (id=116): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r1) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=@newlink={0x48, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x50483}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @gre={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x8, 0x6, @remote}, @IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x1}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x4bb7}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) sendmmsg$inet(r0, &(0x7f0000000880)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000080)={@ipv4={'\x00', '\xff\xff', @multicast2}, 0x75, r2}) 8m0.536624052s ago: executing program 3 (id=119): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) (async) socket$inet(0x2, 0x3, 0x0) (async, rerun: 64) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) (async, rerun: 64) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000100)='rdma.current\x00', 0x0, 0x0) (async) socket$phonet_pipe(0x23, 0x5, 0x2) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4000) (async, rerun: 32) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{0x1}, &(0x7f0000000000), &(0x7f0000000040)=r0}, 0x20) (async, rerun: 32) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 32) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d80)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum={0x0, 0x0, 0x0, 0x13}]}}, 0x0, 0x26}, 0x20) (rerun: 32) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x9, 0x4, 0x4, 0x2, 0x80, 0x1, 0x0, '\x00', 0x0, r3, 0x1, 0x1}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0a00000004000000dd0000000a"], 0x50) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000020000000000000002000084ffffffff000000000300000000000000000000000200000000000000000000000000000a03000000000000000000001302"], 0x0, 0x56}, 0x20) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) (async, rerun: 64) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4], 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000000000001850000000000020000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffff0, 0x0, 0x0, 0x0, &(0x7f0000000080)}, 0x9a) r5 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r5, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="b4050000000000007100000000000000000008"], 0x0}, 0x90) (async) sendmsg$netlink(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)=ANY=[], 0x1c}], 0x1}, 0x0) (async) sendmsg$inet6(r2, &(0x7f0000003ac0)={&(0x7f0000000140)={0xa, 0x4e24, 0x56f, @mcast1, 0x9fe7}, 0x1c, &(0x7f0000003880)=[{&(0x7f00000001c0)="27f57dc7a59f517263edb34a654aee758d20d19f04ab675791c4103def17928f0702bc36fb36059d6f206f3a10", 0x2d}, {&(0x7f0000000380)="c7531dd92370418dc092c6c9c611eaba8e00ac41c89b958b7fa15d3971b10c55571e76d1dbd4961a96f2f85cf49bd0f194e50fee9f9b34f3e919a5cf57a7414dc95e9ddaa2f8f1ddfeccc14a82f912da6486f0c8256b3c426510c7049ae85d3535b217652524adc63b87f7d45a84", 0x6e}, {&(0x7f00000004c0)="0ee8fc6e9f50a97529b513b5240b78fd76a3a03c8f2ba6ef54fedd97d951e13fcaf4eef85d01c42bc11d4148e1a13640cdb00452de1ec2c522475e1be5b328daeec84168265800e0100d9f94e13a3c9e9c9fee5359b7b8f7dd36d9ede20cbf1ffa4f4e1299f0cedc8cc18fc0df2c486cac186a78a137061919a41951733bb3a9e08d28335f4f690e98", 0x89}, {&(0x7f0000000300)="04ab67cf2ab490874aeef5c1bb972f3e4fb313bb84afae3088ea0f7db57110c20f413e37f46c7e87c537922b1c551979e5cbe9bc52c0a92fd9097afb3a49b2", 0x3f}, {&(0x7f0000001680)="8638077622f80eb770102cc7996672ee074cad3e43e4df85f0138fcc35bbb8dbead86ece622aa4ca3e2a8fbeb386ec8948ec6edf27df7669acbc5a47210c26b2c44f7ec27c44838351194fcbb98b18c68c3e4d74bac44ab65056b1db7c5560a9cc74343e956f3d7c42e58d913c4d1c03ed6bbdfd98c72da2f9d947efbd0834c343214aa9755c6002b656e9bcf4f145b87f1237f0c5431ee57a4bd1b1a9004ba0512bd79bcce24bf0a98e640c89e42f9f98a83d76b99b99b7451449b77350852d990f143607ff2afb024a54ad064de8ac0feb1ca735cb", 0xd6}, {&(0x7f0000000580)="22634cd6d46cca493195cba6b8c65c84edbe91d62bc43c6934b5bc111ed8379a80de67bb63675b59098df1c55497319b3f0b7738c920adde89f43d7259fdab26918067d713c9e0b65a6a8762b3256c4582da599247a57269eb85b096fdc03049e087c930649341e067623fbbfb7691ff9eb5b73bbcdd1747a95e6c621878776d6abf1f2361cd658feadb2817b2b627b51c17fc5e75673b0d5365fc6300ac7fe253ac912c25ab52399f", 0xa9}, {&(0x7f0000000400)="bd75f4dd80d01c4941f2454c510a461814ac0a77e00cfc7218fdbdb6f5b5d82c556f", 0x22}, {&(0x7f0000002880)="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", 0x1000}, {&(0x7f0000001780)="484842aea8e7b2f8bc30ed513d752987edb4262ab077c80c018a5accb2c34e87c0d1e947bd0134c1109d2fd1fdd1bd404329f1b25573ebe4e8b8140ea240ddd21a106f05f736083caeccb6676560b212d2ac429ea7d49ff0eb5c8ad9b7c98b90d98246d25684c7710b782ab8163526851365bdb682c142479fcb6c6bbd0472841ac4dca45b3028b5a4cdd29a8c4603932ec9f03a3ae3373ddc7f89127c2b0664e23a1f", 0xa3}], 0x9, &(0x7f0000003940)=[@dstopts_2292={{0x78, 0x29, 0x4, {0x3c, 0xc, '\x00', [@padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @ra={0x5, 0x2, 0x5}, @pad1, @pad1, @calipso={0x7, 0x40, {0x1, 0xe, 0xf6, 0x4, [0x7fffffff, 0x49, 0x5, 0x0, 0x3ff, 0x6, 0x0]}}, @ra={0x5, 0x2, 0x9}]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x4}}, @hoplimit={{0x14}}, @rthdr_2292={{0x68, 0x29, 0x39, {0x2b, 0xa, 0x2, 0xd6, 0x0, [@private2, @mcast2, @dev={0xfe, 0x80, '\x00', 0x41}, @remote, @private0]}}}, @hoplimit={{0x14, 0x29, 0x34, 0x4}}, @rthdr={{0x58, 0x29, 0x39, {0x0, 0x8, 0x0, 0x2, 0x0, [@private2={0xfc, 0x2, '\x00', 0x1}, @loopback, @empty, @private0={0xfc, 0x0, '\x00', 0x1}]}}}], 0x180}, 0x0) (async) r6 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r6, &(0x7f0000000680)=[{{&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}}], 0x1, 0x4000000) (async) r7 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r6, 0x84, 0x10, &(0x7f00000000c0)=@sack_info={r8, 0x3, 0x7}, 0xc) 8m0.352804153s ago: executing program 2 (id=120): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000001200)={0x60000010}) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000100)={0xa000000d}) close(0x4) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0xa401000000000000) 8m0.14989844s ago: executing program 3 (id=121): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x42000, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xb007}, 0x4) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) (async) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000980)={'wg2\x00', 0x0}) sendto$packet(r4, &(0x7f0000000180)="0b031407e0ff640f0200475400f6a13bb1000e00080008004803", 0x10000, 0x0, &(0x7f0000000140)={0x11, 0x0, r5}, 0x14) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ANNOUNCE(r6, &(0x7f0000000380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000200)={&(0x7f0000000300)={0x7c, 0x0, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x6}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x1}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x411ab76613a6c272}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}]}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x4a}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x7}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x1}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x5}, @MPTCP_PM_ATTR_LOC_ID={0x5}]}, 0x7c}}, 0x44084) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2}) (async) ioctl$TUNSETLINK(r0, 0x400454cd, 0x207) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40500000000000079109e000000000007000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x22e, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) (async) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @multicast}) 8m0.111476606s ago: executing program 2 (id=122): sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x34, 0x0, 0x1, 0x70bd2b, 0x0, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_RX={0x5, 0x19, 0x1}]}, 0x34}}, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, 0x0, {0x0, 0x5}, {0xffff, 0xffff}, {0xfff3, 0x10}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x7}]}, 0x2c}}, 0x44080) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_STATS(r1, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, r2, 0x200, 0x70bd2c, 0x25dfdbfe, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4800}, 0x40) (async) socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket$inet6(0xa, 0x2, 0x0) (async) r4 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f00000005c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14) sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000c00)=@newlink={0x48, 0x10, 0x437, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, 0x40c89}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0xe3}}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{0xf, 0x5}]}]}}, 0x0, 0x2e, 0x0, 0x1, 0x8000}, 0x20) (async) sendmmsg$inet(r3, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @loopback}, 0x10, 0x0, 0x0, &(0x7f00000004c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @empty, @rand_addr=0x3}}}], 0x20}}], 0x1, 0x4040880) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000020000103feffffff000000000a000000000000000400010008000a000008000005001e"], 0x50}}, 0x4000850) (async) r6 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000ffe000/0x2000)=nil, 0x2002, 0x0, 0x11, r6, 0x80000000) 7m59.869987646s ago: executing program 2 (id=124): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x6a) (async, rerun: 32) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (rerun: 32) r1 = openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) sendfile(r1, r1, 0x0, 0x1) preadv(r1, &(0x7f0000000040)=[{&(0x7f0000000100)=""/120, 0x78}], 0x1, 0x4, 0x0) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000000)="fc0000001d000724ab09254ec100070007ab08001b000000f0ffff002100057e0000000000000e000039000000039815fad151ba0101099cecb94b46fe0000000a00020025", 0xffffff0c) setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r5, 0x0, r3, 0x0, 0xffffffffffff8000, 0x0) (async) close(r6) close(r4) socket$nl_netfilter(0x10, 0x3, 0xc) (async) splice(r2, 0x0, r4, 0x0, 0x1100000000f336, 0x0) (async) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r7, 0x11, 0xb, &(0x7f0000000000)=0x7fffffff, 0x4) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000000c0)={'syztnl1\x00', &(0x7f00000001c0)={'syztnl2\x00', 0x0, 0x10, 0x20, 0x1ff, 0x5, {{0x28, 0x4, 0x1, 0x8, 0xa0, 0x67, 0x0, 0x2, 0x29, 0x0, @loopback, @local, {[@lsrr={0x83, 0xb, 0xde, [@multicast2, @empty]}, @ssrr={0x89, 0xf, 0x9d, [@dev={0xac, 0x14, 0x14, 0x12}, @multicast2, @empty]}, @end, @timestamp={0x44, 0x10, 0x7f, 0x0, 0x5, [0x6, 0xcc, 0x8]}, @timestamp_prespec={0x44, 0x3c, 0x55, 0x3, 0x9, [{@rand_addr=0x64010102, 0xfff}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x6b012d4}, {@private=0xa010102, 0x3}, {@private=0xa010101, 0x3}, {@broadcast, 0xc6}, {@loopback}, {@private=0xa010102, 0x2}]}, @generic={0x82, 0x9, "e0a71bc7a4c4c0"}, @rr={0x7, 0x1b, 0x5c, [@dev={0xac, 0x14, 0x14, 0x1c}, @local, @multicast1, @local, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x1, 0x0}]}]}}}}}) setsockopt$inet_mreqn(r7, 0x0, 0x24, &(0x7f0000000280)={@dev={0xac, 0x14, 0x14, 0x24}, @rand_addr=0x64010102, r8}, 0xc) 7m59.763743156s ago: executing program 3 (id=125): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x4, 0x9, 0x1, 0x533, 0x1, @dev={0xfe, 0x80, '\x00', 0x3f}, @private1, 0x78c9, 0x8, 0x5, 0x1000}}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000000)=@newtaction={0x68, 0x30, 0x101, 0x0, 0x0, {}, [{0x54, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd}, {0xfffffffffffffc24, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x0) ioctl$int_in(r3, 0x5452, &(0x7f0000000100)=0x9) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r3) sendmsg$IPSET_CMD_FLUSH(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x14, 0x4, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000009c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r6, {0x0, 0xd}, {0x6, 0xb}, {0xa, 0xb}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_NAT={0x8, 0xb, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2001c061}, 0x4008000) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x5c, 0x10, 0x20, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_TOS={0x5, 0x9, 0xfa}, @IFLA_GRE_LOCAL={0x8, 0x6, @loopback}, @IFLA_GRE_IGNORE_DF={0x5, 0x13, 0x1}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e20}, @IFLA_GRE_LINK={0x8, 0x1, r6}]}}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) 7m59.674065123s ago: executing program 2 (id=126): sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x40) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="bc1b0000400007012bbd700000000000017c00000400c2800c0001800600060065580000971b0280540211"], 0x1bbc}, 0x1, 0x0, 0x0, 0x40440d0}, 0x24048800) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f00000002c0), r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000200)={'ip6tnl0\x00', &(0x7f0000000040)={'syztnl1\x00', 0x0, 0x4, 0x7, 0x8, 0x81, 0x29, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x40, 0x81, 0x10001}}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="2c0000001000030400000000fedbdf2500007400", @ANYRES32=0x0, @ANYBLOB='\x00\b\x00\x00\x00\x00\x00'], 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x20080800) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(md5)\x00'}, 0x58) r4 = accept$alg(r3, 0x0, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) sendmsg$alg(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000c80)=[{&(0x7f0000000540)="b6", 0x1}, {&(0x7f0000000240)="56625141a8e6340ca1dba91b4bc246fe5dae4ee032ecf60658eb170d9420c1d7b61f16e339d1c65582a296b8229179fad660b3a4e699", 0x36}, {&(0x7f00000009c0)="ea1e5170d78b97", 0x7}, {&(0x7f0000000a00)="488c05fb4dc5671747a73c16403746c46b28323683072fe5e7e14a1b93ab04d71b988fdc4ed314b17037dc6c0ade9cbe7fa1fd38d708abf4f679a216c25497e654d17f73ed716eafc70f5913126e017f0aa2abf0613b0b811f0528fe90b57facd62a51d27214937ba2616dd63ab0965462c7d886793d2b44e7864699ee20944c9b99", 0x82}], 0x4, 0x0, 0x0, 0x44090}, 0x4000004) syz_emit_ethernet(0x4e, &(0x7f00000000c0)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa86dd6087fb7e00000000fe880000000000000000000000000001fc0200000000000000000000000000000002000000000000040100010100c204"], 0x0) 7m59.414072049s ago: executing program 2 (id=128): r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, &(0x7f00000000c0), &(0x7f0000000100)=0x4) (async) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000", @ANYRES16, @ANYBLOB="017f00000000000000200300000004"], 0x18}}, 0x4000) (async) r2 = socket(0x10, 0x80002, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8b24, &(0x7f0000000000)={'wlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newchain={0x6c, 0x64, 0x8, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0xfff1, 0x9}, {0xffff, 0xffff}, {0xa, 0xffff}}, [@filter_kind_options=@f_flower={{0xb}, {0x3c, 0x2, [@TCA_FLOWER_KEY_PORT_SRC_MAX={0x6, 0x58, 0x4e22}, @TCA_FLOWER_KEY_IPV6_DST={0x14, 0x10, @empty}, @TCA_FLOWER_KEY_TCP_SRC={0x6}, @TCA_FLOWER_KEY_ARP_THA={0xa, 0x41, @local}, @TCA_FLOWER_KEY_PORT_SRC_MAX={0x6, 0x58, 0x4e22}]}}]}, 0x6c}}, 0x4008884) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r4) sendmsg$NL80211_CMD_REQ_SET_REG(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000540)={0x1c, r5, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040080}, 0x20000090) 7m59.299147168s ago: executing program 3 (id=129): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x1, 0xffffffff, [{0x0, 0x2, 0xc1}]}, @restrict={0x0, 0x0, 0x0, 0x6, 0x2}]}}, 0x0, 0x3e}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket(0x10, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x2c, 0x9, 0x6, 0x201, 0x0, 0x0, {0xa}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) r5 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r5) getsockname$packet(r5, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0xfffffffffffffe49) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r6, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x30, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_MTU={0x8, 0x4, 0x6}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x24, 0x2c, 0x107, 0x70bd2b, 0x25dfdbff, {0x7, 0x7c}, [@nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0xdd}]}, @nested={0x8, 0x3, 0x0, 0x1, [@nested={0x4, 0x1}]}]}, 0x24}}, 0xc010) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xa, 0x1, 0xdd, 0x9}, 0x50) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r10}, 0x10) 7m58.949802763s ago: executing program 2 (id=130): r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000080)=0x0) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)={0x16c, 0x2e, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x15a, 0xf2, 0x0, 0x1, [@typed={0x8, 0x18, 0x0, 0x0, @uid=r2}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x16}}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd3f", @nested={0x5a, 0x73, 0x0, 0x1, [@nested={0x10, 0x140, 0x0, 0x1, [@typed={0x8, 0x38, 0x0, 0x0, @fd=r1}, @nested={0x4, 0xc8}]}, @generic="7fe3dc2c989ddb8954711ed39caacdb2b048719871ca70abf8136b120426f20dbf9d96c3996987d5fa5facbda716f4b813d2823c9adb5c86796dab0d46b501157c96f068cfd5"]}]}]}, 0x16c}], 0x1, 0x0, 0x0, 0x1}, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106-gcm-aesni\x00'}, 0x58) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r4, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) sendmmsg(r3, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) recvmmsg$unix(r3, &(0x7f00000043c0)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000002c0)=""/240, 0xf0}], 0x1}}], 0x1, 0x0, 0x0) recvmmsg(r3, &(0x7f0000002d40)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000002f00)=""/130, 0x82}], 0x1}, 0xfffffffd}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000006c0)=""/118, 0x76}], 0x1}, 0xd335}], 0x2, 0x2120, 0x0) r5 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000480), r3) sendmsg$SEG6_CMD_SET_TUNSRC(r4, &(0x7f00000005c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x68, r5, 0x1, 0x70bd26, 0x25dfdbff, {}, [@SEG6_ATTR_DST={0x14, 0x1, @loopback}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, '\x00', 0x43}}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x7}, @SEG6_ATTR_SECRET={0x14, 0x4, [0xc0, 0xfffff41d, 0xf, 0x0]}, @SEG6_ATTR_SECRET={0x10, 0x4, [0xfffffffe, 0x6, 0x3]}]}, 0x68}, 0x1, 0x0, 0x0, 0x20008441}, 0x4000) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000009c0)="ad56b6c5820fae9d6dcd3292ea54c7be8bbdadbb1632ea5704cae881ef915d374c90c200", 0x24) r6 = accept4(r0, 0x0, 0x0, 0x800) r7 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r7, &(0x7f0000000c00)=[{0x0, 0x0, 0x0, 0xffffffffffffffad, &(0x7f0000000380)=[@assoc={0x18, 0x117, 0x4, 0x10}, @op={0x18, 0x117, 0x3, 0x1}, @op], 0x30, 0x881}], 0x1, 0x80c5) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r9) sendmsg$NFC_CMD_FW_DOWNLOAD(r9, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f0000002e80)={&(0x7f0000002e00)={0x14, r10, 0xba960a2220112c19, 0x70bd2c, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x100040c0}, 0x80) r11 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) ioctl$sock_inet6_udp_SIOCOUTQ(r6, 0x5411, &(0x7f00000000c0)) sendmsg$nl_route_sched(r8, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r12, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8}, {0xfffffffffffffe62}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040005}, 0x0) sendmsg$RDMA_NLDEV_CMD_GET(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x38, 0x1401, 0x400, 0x70bd25, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x38}}, 0x0) recvmsg(r6, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000001240)=""/47, 0x2f}, {&(0x7f0000001280)=""/211, 0xd3}], 0x2}, 0x10002) 7m58.948837559s ago: executing program 3 (id=131): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) (async) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00000000c0)=0x102, 0x4f) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r1, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000f00)="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", 0x242}], 0x1}}], 0x1, 0x20000114) (async) shutdown(r1, 0x1) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1886c301}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x1}]}]}, @NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}], {0x14}}, 0xb0}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) 7m58.617057327s ago: executing program 34 (id=130): r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000080)=0x0) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)={0x16c, 0x2e, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x15a, 0xf2, 0x0, 0x1, [@typed={0x8, 0x18, 0x0, 0x0, @uid=r2}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x16}}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd3f", @nested={0x5a, 0x73, 0x0, 0x1, [@nested={0x10, 0x140, 0x0, 0x1, [@typed={0x8, 0x38, 0x0, 0x0, @fd=r1}, @nested={0x4, 0xc8}]}, @generic="7fe3dc2c989ddb8954711ed39caacdb2b048719871ca70abf8136b120426f20dbf9d96c3996987d5fa5facbda716f4b813d2823c9adb5c86796dab0d46b501157c96f068cfd5"]}]}]}, 0x16c}], 0x1, 0x0, 0x0, 0x1}, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106-gcm-aesni\x00'}, 0x58) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r4, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) sendmmsg(r3, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) recvmmsg$unix(r3, &(0x7f00000043c0)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000002c0)=""/240, 0xf0}], 0x1}}], 0x1, 0x0, 0x0) recvmmsg(r3, &(0x7f0000002d40)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000002f00)=""/130, 0x82}], 0x1}, 0xfffffffd}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000006c0)=""/118, 0x76}], 0x1}, 0xd335}], 0x2, 0x2120, 0x0) r5 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000480), r3) sendmsg$SEG6_CMD_SET_TUNSRC(r4, &(0x7f00000005c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x68, r5, 0x1, 0x70bd26, 0x25dfdbff, {}, [@SEG6_ATTR_DST={0x14, 0x1, @loopback}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, '\x00', 0x43}}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x7}, @SEG6_ATTR_SECRET={0x14, 0x4, [0xc0, 0xfffff41d, 0xf, 0x0]}, @SEG6_ATTR_SECRET={0x10, 0x4, [0xfffffffe, 0x6, 0x3]}]}, 0x68}, 0x1, 0x0, 0x0, 0x20008441}, 0x4000) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000009c0)="ad56b6c5820fae9d6dcd3292ea54c7be8bbdadbb1632ea5704cae881ef915d374c90c200", 0x24) r6 = accept4(r0, 0x0, 0x0, 0x800) r7 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r7, &(0x7f0000000c00)=[{0x0, 0x0, 0x0, 0xffffffffffffffad, &(0x7f0000000380)=[@assoc={0x18, 0x117, 0x4, 0x10}, @op={0x18, 0x117, 0x3, 0x1}, @op], 0x30, 0x881}], 0x1, 0x80c5) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r9) sendmsg$NFC_CMD_FW_DOWNLOAD(r9, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f0000002e80)={&(0x7f0000002e00)={0x14, r10, 0xba960a2220112c19, 0x70bd2c, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x100040c0}, 0x80) r11 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) ioctl$sock_inet6_udp_SIOCOUTQ(r6, 0x5411, &(0x7f00000000c0)) sendmsg$nl_route_sched(r8, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r12, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8}, {0xfffffffffffffe62}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040005}, 0x0) sendmsg$RDMA_NLDEV_CMD_GET(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x38, 0x1401, 0x400, 0x70bd25, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x38}}, 0x0) recvmsg(r6, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000001240)=""/47, 0x2f}, {&(0x7f0000001280)=""/211, 0xd3}], 0x2}, 0x10002) 7m58.616847197s ago: executing program 35 (id=131): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) (async) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00000000c0)=0x102, 0x4f) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r1, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000f00)="68ddaa732d69a6f7eb258957fccb89134faf578e9ff0cc38595e4c9c1f2a32ceb6799c682d87e991cd718f04a1487a5d99bef5a95019bdd837d20274d2e98cfbde31b70e45fcc74efe1c42ba121fe280bf8af2c22489537e57dee1cc54c41bd8f9086f9498bc3bcc4f0501f1defec42e4faac1dd0b0b67b797182b6c4ce3ff3da7d4d4a1069cada5b152bbd64335f0254ecbfe43c5d7cd5b8403e53ae4f612b05945b98eb3420bb04c7ecf528693bb9693ada19e3a8f9522ab692a2d78aefa8af8f0e6b3b3af268e535bc4a610f7341e7da01249d929b75acf7c99bd21b2b5e3f210e2798f5636bed013dae7ff0d009ca52fffbd88a3964a60786f8f025e4b8fac68f910cdd4a991a6020fcd5a92bc7747acef6f62d087646d32fc37f6d1cabd609e6f392350ebcc02c341a3ce598522d3963374f5eb522919d029136288fd1c08cadfd7f43a3a6618d6dd5ae6baf5b2f321588e9dfc879e213badc550eb9982777b09d808ca8e5540695200193c820ad6ce1e924cdfeab68af907798fbc0fa570ef885369090c35b0959baf6e29b86833a14cf3532cd537891f27caa37b10cda2cf6e75ddc123b13c558cc210be334af3433630bb2c16145cf91ce50099452e0b10e4ce9beb32ab1a8692d2b3cff0e370f87e2219172b7bbcce5d8daca20ce4e047510920000e3a56747839920f72318843b6161fd643c2c56ca396b4c2283f9afef62412c04c934bc1ad4e54eac1acd4447ae3e2f9abf6cb9a5dcbba25aaf4254dc8a081b4eb4b98a11e71ea52be944225f68146444c7780798266feb5927fb3eb", 0x242}], 0x1}}], 0x1, 0x20000114) (async) shutdown(r1, 0x1) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1886c301}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x1}]}]}, @NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}], {0x14}}, 0xb0}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) 7m58.306623435s ago: executing program 5 (id=28): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000140)={r2, 0x1, 0x6, @remote}, 0x10) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000180)={r2, 0x11, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1a}}, 0x10) close(0x3) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r3, &(0x7f0000001c00)=[{{&(0x7f0000000040)={0xa, 0x4e23, 0x5, @private1, 0x2}, 0x1c, &(0x7f0000001780)=[{&(0x7f0000000100)="630e71", 0x3}], 0x1}}], 0x1, 0x24044005) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f0000000080)={0x0, 0x0, 0x1}, 0x8) setsockopt$sock_int(r0, 0x1, 0x1, &(0x7f00000002c0)=0x5f53, 0x4) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000880)=@newlink={0x44, 0x10, 0x401, 0xc47, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20000, 0x200}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MIIMON={0x8, 0x3, 0x2}, @IFLA_BOND_DOWNDELAY={0x8, 0x5, 0x2}]}}}]}, 0x44}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=@ipv4_getnexthop={0x20, 0x6a, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@NHA_ID={0x8, 0x1, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x20040880}, 0x10) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000005, 0x100010, r0, 0x81) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r5, 0x29, 0x33, 0x0, 0x0) r6 = accept4$inet(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x80000) ioctl$SIOCGETSGCNT(r6, 0x89e1, &(0x7f0000000040)={@multicast1, @multicast1}) getsockopt$inet6_tcp_int(r0, 0x6, 0x2, 0x0, &(0x7f0000000340)) 7m58.306016791s ago: executing program 36 (id=28): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000140)={r2, 0x1, 0x6, @remote}, 0x10) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000180)={r2, 0x11, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1a}}, 0x10) close(0x3) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r3, &(0x7f0000001c00)=[{{&(0x7f0000000040)={0xa, 0x4e23, 0x5, @private1, 0x2}, 0x1c, &(0x7f0000001780)=[{&(0x7f0000000100)="630e71", 0x3}], 0x1}}], 0x1, 0x24044005) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f0000000080)={0x0, 0x0, 0x1}, 0x8) setsockopt$sock_int(r0, 0x1, 0x1, &(0x7f00000002c0)=0x5f53, 0x4) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000880)=@newlink={0x44, 0x10, 0x401, 0xc47, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20000, 0x200}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MIIMON={0x8, 0x3, 0x2}, @IFLA_BOND_DOWNDELAY={0x8, 0x5, 0x2}]}}}]}, 0x44}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=@ipv4_getnexthop={0x20, 0x6a, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@NHA_ID={0x8, 0x1, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x20040880}, 0x10) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000005, 0x100010, r0, 0x81) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r5, 0x29, 0x33, 0x0, 0x0) r6 = accept4$inet(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x80000) ioctl$SIOCGETSGCNT(r6, 0x89e1, &(0x7f0000000040)={@multicast1, @multicast1}) getsockopt$inet6_tcp_int(r0, 0x6, 0x2, 0x0, &(0x7f0000000340)) 7m58.301014445s ago: executing program 6 (id=30): ioctl$PPPIOCUNBRIDGECHAN(0xffffffffffffffff, 0x7434) r0 = socket(0x2, 0x1, 0x3) r1 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_POOL_SET(r0, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="0c010001", @ANYRES16=r1, @ANYBLOB="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"], 0x10c}, 0x1, 0x0, 0x0, 0x81}, 0x20040000) r2 = socket$packet(0x11, 0x3, 0x300) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000380)={'pimreg\x00', 0x5005}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000500)={'syztnl0\x00', &(0x7f0000000480)={'syztnl2\x00', 0x0, 0x4, 0x6c, 0x4f, 0x9, 0x8, @private0={0xfc, 0x0, '\x00', 0x1}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x80, 0xff00, 0x3d37, 0x1000}}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000580)={0x1b, 0x0, 0x0, 0x5, 0x0, 0x1, 0x800, '\x00', r4, 0xffffffffffffffff, 0x0, 0x3, 0x2}, 0x50) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000600), 0x20080, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'pimreg\x00', 0x3}) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f0000000040)=0x394, 0x4) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="07000000125adff212053c7ef88b92d474be", @ANYRES16=r7, @ANYBLOB="01002bbd7000000000001400000018000180140002006e657464657673696d300000000000000800170004000000"], 0x34}}, 0x240008c0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000300)={'ip6_vti0\x00', 0x0}) r10 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r10, 0x1, 0x41, &(0x7f0000000340)=0x63ba, 0x4) setsockopt$inet6_int(r10, 0x29, 0x31, &(0x7f0000000000)=0xb2, 0x4) sendmmsg$inet6(r10, &(0x7f0000001a40)=[{{&(0x7f0000000080)={0xa, 0x4e20, 0x6, @empty, 0x3}, 0x1c, 0x0}}], 0x1, 0x24044000) recvmmsg(r10, &(0x7f0000000940)=[{{0x0, 0x0, 0x0}, 0xdb30}], 0x1, 0x40002042, 0x0) sendmsg$IPVS_CMD_DEL_SERVICE(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000780)={&(0x7f0000000680)={0xe8, 0x0, 0x201, 0x70bd2c, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x54, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x4}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x6}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'wlan1\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010102}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x6}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'team0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfff}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x4}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xc00f}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}]}, 0xe8}, 0x1, 0x0, 0x0, 0x20000094}, 0x80) sendto$packet(r2, &(0x7f0000000180)="10031400e0ff020002004788aa96a13bb100001100007fca1a00", 0x1a, 0x0, &(0x7f0000000140)={0x11, 0x19, r9, 0x1, 0x0, 0x6, @local}, 0x14) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$fou(&(0x7f0000002b40), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r11, &(0x7f0000002c00)={0x0, 0x100000, &(0x7f0000002bc0)={&(0x7f0000002b80)={0x38, r12, 0x1, 0x0, 0x0, {}, [@FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e22}, @FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_PEER_V6={0x14, 0x9, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}]}, 0x38}}, 0x0) recvfrom$packet(r2, 0x0, 0x0, 0x2000, 0x0, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000380)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaa99aaaabb86dd60122d9200183afffe8000000000000000000000000000bbff020000000000c421a60000000000000000018800907810000000ff0100"/78], 0x0) 7m58.067674372s ago: executing program 37 (id=30): ioctl$PPPIOCUNBRIDGECHAN(0xffffffffffffffff, 0x7434) r0 = socket(0x2, 0x1, 0x3) r1 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_POOL_SET(r0, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="0c010001", @ANYRES16=r1, @ANYBLOB="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"], 0x10c}, 0x1, 0x0, 0x0, 0x81}, 0x20040000) r2 = socket$packet(0x11, 0x3, 0x300) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000380)={'pimreg\x00', 0x5005}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000500)={'syztnl0\x00', &(0x7f0000000480)={'syztnl2\x00', 0x0, 0x4, 0x6c, 0x4f, 0x9, 0x8, @private0={0xfc, 0x0, '\x00', 0x1}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x80, 0xff00, 0x3d37, 0x1000}}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000580)={0x1b, 0x0, 0x0, 0x5, 0x0, 0x1, 0x800, '\x00', r4, 0xffffffffffffffff, 0x0, 0x3, 0x2}, 0x50) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000600), 0x20080, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'pimreg\x00', 0x3}) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f0000000040)=0x394, 0x4) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="07000000125adff212053c7ef88b92d474be", @ANYRES16=r7, @ANYBLOB="01002bbd7000000000001400000018000180140002006e657464657673696d300000000000000800170004000000"], 0x34}}, 0x240008c0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000300)={'ip6_vti0\x00', 0x0}) r10 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r10, 0x1, 0x41, &(0x7f0000000340)=0x63ba, 0x4) setsockopt$inet6_int(r10, 0x29, 0x31, &(0x7f0000000000)=0xb2, 0x4) sendmmsg$inet6(r10, &(0x7f0000001a40)=[{{&(0x7f0000000080)={0xa, 0x4e20, 0x6, @empty, 0x3}, 0x1c, 0x0}}], 0x1, 0x24044000) recvmmsg(r10, &(0x7f0000000940)=[{{0x0, 0x0, 0x0}, 0xdb30}], 0x1, 0x40002042, 0x0) sendmsg$IPVS_CMD_DEL_SERVICE(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000780)={&(0x7f0000000680)={0xe8, 0x0, 0x201, 0x70bd2c, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x54, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x4}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x6}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'wlan1\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010102}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x6}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'team0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfff}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x4}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xc00f}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}]}, 0xe8}, 0x1, 0x0, 0x0, 0x20000094}, 0x80) sendto$packet(r2, &(0x7f0000000180)="10031400e0ff020002004788aa96a13bb100001100007fca1a00", 0x1a, 0x0, &(0x7f0000000140)={0x11, 0x19, r9, 0x1, 0x0, 0x6, @local}, 0x14) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$fou(&(0x7f0000002b40), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r11, &(0x7f0000002c00)={0x0, 0x100000, &(0x7f0000002bc0)={&(0x7f0000002b80)={0x38, r12, 0x1, 0x0, 0x0, {}, [@FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e22}, @FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_PEER_V6={0x14, 0x9, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}]}, 0x38}}, 0x0) recvfrom$packet(r2, 0x0, 0x0, 0x2000, 0x0, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000380)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaa99aaaabb86dd60122d9200183afffe8000000000000000000000000000bbff020000000000c421a60000000000000000018800907810000000ff0100"/78], 0x0) 7m26.482100572s ago: executing program 9 (id=452): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) setsockopt$X25_QBITINCL(r0, 0x106, 0x1, &(0x7f0000000240), 0x4) r1 = socket$inet(0x2, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x54, &(0x7f00000001c0)=[@in6={0xa, 0x4e21, 0x7ff, @private2, 0xeb2}, @in6={0xa, 0x4e21, 0x7, @local, 0x9}, @in6={0xa, 0x4e21, 0x5, @private1, 0xa7d}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x84, &(0x7f0000000000)={r3, @in={{0x2, 0x0, @empty}}}, 0x90) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000280)={0x1d, @private=0xa010100, 0x4e20, 0x2, 'wrr\x00', 0x5, 0x10, 0x67}, 0x2c) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r4, &(0x7f0000000100)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x40938, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x68010}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) recvmsg(r7, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x143) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x49920d862a92153b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_HASH_MAX={0x8}, @IFLA_BR_MCAST_HASH_ELASTICITY={0x8}]}}}]}, 0x44}}, 0x0) socket$netlink(0x10, 0x3, 0x14) sendmsg$IPCTNL_MSG_EXP_NEW(r4, &(0x7f00000001c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x24, 0x0, 0x2, 0x201, 0x0, 0x0, {0x2, 0x0, 0x7}, [@CTA_EXPECT_HELP_NAME={0xf, 0x6, 'tftp-20000\x00'}]}, 0x24}, 0x1, 0x0, 0x0, 0x48040}, 0x1) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000000)={@multicast2, @loopback, 0x0, 0x1, [@loopback]}, 0x14) 7m25.643628288s ago: executing program 9 (id=460): r0 = socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x15, 0x10, 0x4, 0x0, 0x0, 0x1, 0x25f, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x50) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macsec0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000010010000002ffebdf2530000000", @ANYRES32=r2, @ANYBLOB="20000000000000001c0012800b0001006d616373656300000c00028005000f"], 0x3c}}, 0x0) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x1e00, 0x21}, 0x94) r4 = socket$inet6(0xa, 0x3, 0x3) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'bond_slave_1\x00', 0x0}) r6 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000bc0)={r3, r5, 0x25, 0x2, @val=@kprobe_multi=@syms={0x0, 0x0, 0x0, 0x0, 0x6}}, 0x30) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x2, 0xc, 0x1400}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={r7, 0x68, &(0x7f0000000200)}, 0x10) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={0x1, 0xffffffffffffffff}, 0x4) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000540)={r6, 0x20, &(0x7f0000000440)={&(0x7f0000000300)=""/104, 0x68, 0x0, &(0x7f0000000380)=""/157, 0x9d}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x1a, 0x13, &(0x7f0000000680)=ANY=[@ANYBLOB="180000007f000000000000000300000018250000", @ANYRES32=r7, @ANYBLOB="0000000000c4000000b708000000770f2e0000007b8af8ff00000000b7080000010000007b8af0ff00000000bfa10000000000000701000049e8502ebfa400000000000007040000f0ffffffb7020000080000004da73db000000000000000b6e6b4812995ad0609316ac3d12e156e5e6f83d06a7bcfbcc6e5e5c5af9a46f8d4057f290ed384aa538bc4ba87fe26d151a15df5832148", @ANYRES32=r8, @ANYBLOB="0000000000000000b70500000800000085000000a50000009500000000000000"], &(0x7f0000000100)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0xf, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000001c0)={0x5, 0x3, 0x6, 0xea9}, 0x10, r9, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000580)=[{0x0, 0x2, 0x7, 0x9}, {0x0, 0x1, 0x9, 0xa}, {0x4, 0x4, 0xe, 0xc}], 0x10, 0x9}, 0x94) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010800deedcc2b9d89d50c398fe0", @ANYRES32=0x0, @ANYBLOB="80400100000001000c002b8008000100", @ANYRES32=r3, @ANYBLOB="08001b0000000000"], 0x34}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000008c0)={r7, &(0x7f0000000780)="9aa6ca36e7cb9a2bd118c12220c1ddcec016cbf620de3ff5feec4aea250084ec4aa5ebad79a3ad7da5450f7040d91f37ac10502cba959d35648dbe0aea1dd0e3896f6e8745ebeb299a8b606fa35f0dc6a2585a4c551021af2161a5bf8f1031f7740c1f5468d0", &(0x7f0000000800)=""/160}, 0x20) 7m25.389493286s ago: executing program 9 (id=464): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="6c00000002060104db406e3e0004000200000000100003006269746d61703a706f72740005000400000000000900020073797a32000000000500050000006c00050001000600000024000780080008400000137906000440fffff000060005401c02000008000640"], 0x6c}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@bridge_delneigh={0x1c, 0x1d, 0xf07, 0x0, 0x0, {0x7, 0x0, 0x0, r3, 0x8, 0x7a}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000001}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="6c00000002060104db406e3e0004000200000000100003006269746d61703a706f72740005000400000000000900020073797a32000000000500050000006c00050001000600000024000780080008400000137906000440fffff000060005401c02000008000640"], 0x6c}}, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) (async) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) socket$netlink(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'bridge0\x00'}) (async) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@bridge_delneigh={0x1c, 0x1d, 0xf07, 0x0, 0x0, {0x7, 0x0, 0x0, r3, 0x8, 0x7a}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000001}, 0x0) (async) 7m25.211556676s ago: executing program 9 (id=469): socket$nl_xfrm(0x10, 0x3, 0x6) (async) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$netlink(0x10, 0x3, 0x4) (async) socket$netlink(0x10, 0x3, 0x4) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a98000000060a0b040000000000000000020000000900020073797a32000000006c000480680001800b00010074617267657400005800028040000300cd4b6abe42030763d02899c7e9ee2bcc9b6a37b458a8056dd9a87f963d140d7a9d3ac869f3a860917523679abf4579f9cd65080000000000000000000a000100484d41524b00000008000240000000000900010073797a30"], 0xc0}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) (async) sendmsg$NFT_BATCH(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a98000000060a0b040000000000000000020000000900020073797a32000000006c000480680001800b00010074617267657400005800028040000300cd4b6abe42030763d02899c7e9ee2bcc9b6a37b458a8056dd9a87f963d140d7a9d3ac869f3a860917523679abf4579f9cd65080000000000000000000a000100484d41524b00000008000240000000000900010073797a30"], 0xc0}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) (async) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x305200, 0x0) close(r7) (async) close(r7) r8 = socket$unix(0x1, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x10000, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x9, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x4, 0xfffffffd, 0xc5, 0xe23, 0x1, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x80005, {0x0, 0x0, 0x0, r10, {}, {0x9, 0xb}, {0xe, 0x8}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_ATM={0x8, 0x4, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x9f8b8a2ee701f9b2}, 0x24008004) (async) sendmsg$nl_route_sched(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x80005, {0x0, 0x0, 0x0, r10, {}, {0x9, 0xb}, {0xe, 0x8}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_ATM={0x8, 0x4, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x9f8b8a2ee701f9b2}, 0x24008004) ioctl$SIOCSIFHWADDR(r7, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000001a80)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe50a10a000600014002020c600e41b0000900ac000a0501000000160012000a00ff120048035c3b61c1d67f6f94007134cf6efb8007a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667daffffffffff1f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5b7276505de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000001008af26c8b7b55f4d2a6823a45", 0xd8}], 0x1}, 0x894) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001ac0)=[{0x0, 0x114}], 0x1}, 0x0) (async) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001ac0)=[{0x0, 0x114}], 0x1}, 0x0) sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0x0) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x6}, 0x1c) (async) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x6}, 0x1c) write(0xffffffffffffffff, &(0x7f0000000400)="27000000040007d7200e0000120f0a00110001002215d5e0c0a24f52078a151f76080039000500fc440700000000000000ebec7812ce912dce7135c22faf52a523c66e53ad8f8148ea437a7fd31c8e9a6241c99aa800e141e74d4ffb60dea2f6a48816b7afedcdcefcabdfbe940c62b70718c290ee125b56a6630158a958832da47ed9b33bd3973735fe87da3ce75e17e4021438f0e2b5672270cb283f917812ceb9f882704072de1b46fafe70f5412f8f1377d4d6879479fda233e8010000000000000036f595bc9cb5eea5b5f39a1cd5ce658c4e7191340eacc23c8648766a3707c1f369ca115ad03c07000000dcfd1e5d00004cc6666be4d7beb66af88f47931a64b6e901be437b51a858e69dc2e29b4588ef41930359b95cf5a4f754a445b771bb6621817408aba057e4d359162d56755c6cbd22e2c751a8b94df79551a8d8925b32fa77885453b09f5cc23c4734f4833e176ba11f4b64f59e24a1d7f2d2e6414bf07809d2fdb9836101909f4300a66e4e3264ec9c8c5b10f4061b657a956e5981a3acdac8c31929aaaa880a125529f2d95ca2b75583d207b093335f40637cce275f911267d5f50a8511b61ab10a30dcc33d072213fa7e3ab101ed8d1d7dc28060d44173f0b0f29ab8527de2110c530c17297ca2364e7399f31db8ac643f039eaadaa477ec68036095bf8e18da6b97dca564bcee65bab6c0034d4f", 0x1fd) sendmsg$netlink(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="440000001f0001"], 0x44}], 0x1}, 0x0) 7m24.178712398s ago: executing program 9 (id=487): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket(0xa, 0x1, 0x84) setsockopt$inet_group_source_req(r3, 0x0, 0x2e, &(0x7f00000002c0)={0x1, {{0x2, 0x4e26, @multicast1}}, {{0x2, 0x4e23, @broadcast}}}, 0x108) setsockopt$inet_mreqsrc(r3, 0x0, 0x27, &(0x7f0000000000)={@multicast2, @loopback, @loopback}, 0xc) setsockopt$inet_mreqsrc(r3, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback, @empty}, 0xc) r4 = socket(0x2, 0x80805, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r4) ioctl$sock_inet_SIOCSIFDSTADDR(r4, 0x8918, &(0x7f0000000340)={'wg2\x00', {0x2, 0x4e24, @empty}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000003c0)={'syztnl2\x00', &(0x7f00000002c0)={'ip6gre0\x00', 0x0, 0x4, 0x6, 0x78, 0x81, 0x2, @private2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x40, 0x20, 0x9, 0x6}}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000480)={0x1, 0x58, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000540)={'tunl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x1, 0x8000, 0x7, 0x7, {{0xf, 0x4, 0x3, 0x16, 0x3c, 0x65, 0x0, 0x10, 0x2f, 0x0, @rand_addr=0x64010102, @multicast2, {[@cipso={0x86, 0x28, 0x0, [{0x0, 0x7, "1012cc96d2"}, {0x6, 0xf, "88ef28cebb23b9ad763570e852"}, {0x6, 0xc, "524c965e892ca1a7872b"}]}]}}}}}) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000580)={0x0, @broadcast, @private}, &(0x7f00000005c0)=0xc) sendmsg$ETHTOOL_MSG_FEATURES_SET(r2, &(0x7f0000000700)={&(0x7f0000000280), 0xc, &(0x7f00000006c0)={&(0x7f0000000600)={0x8c, 0x0, 0x1, 0x70bd27, 0x25dfdbff, {}, [@ETHTOOL_A_FEATURES_HEADER={0x78, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x200440c1}, 0xc010) sendmsg$NFT_BATCH(r1, &(0x7f0000000380)={0x0, 0x13, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x150}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@deltaction={0x50, 0x18, 0x1, 0x70bd2a, 0x25dfdc00, {0xa}, [@TCA_ACT_TAB={0x3c, 0x1, [{0x10, 0x8f, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0xc, 0x20, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xd}}, {0xc, 0x10c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x37}}, {0x10, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x44840}, 0x20040844) 7m24.036010897s ago: executing program 9 (id=490): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="280000000203010400000000ffffffff000000000800010001"], 0x28}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791048000000000081001000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) r1 = socket$l2tp6(0xa, 0x2, 0x73) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x23c, 0x19, 0x1, 0x0, 0x0, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0x100000000, 0xca8}}, [@tmpl={0x184, 0x5, [{{@in=@local, 0x4d5, 0x3c}, 0x0, @in=@broadcast}, {{@in6=@remote, 0x0, 0x3c}, 0x0, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x1}, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x0, 0x6c}, 0x0, @in=@local, 0x0, 0x0, 0x0, 0x80}, {{@in6=@ipv4={'\x00', '\xff\xff', @local}, 0x0, 0x33}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @broadcast}, 0x3, 0x0, 0x0, 0x81}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xfffffffe, 0x6c}, 0x0, @in=@multicast1, 0x0, 0x0, 0x0, 0x3}, {{@in6=@mcast1, 0x0, 0x32}, 0xa, @in6=@private1, 0x0, 0x4, 0x0, 0x2}]}]}, 0x23c}}, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r3, &(0x7f0000001740)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000080)='o', 0x1}], 0x1}}], 0x1, 0x0) setsockopt(r3, 0x84, 0x7f, &(0x7f0000000040)="010000000980ffff", 0x8) bind$l2tp6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x1}, 0x20) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_SERVICE(r2, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000380)={0xa8, r4, 0x2, 0x70bd2a, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}]}, @IPVS_CMD_ATTR_DAEMON={0x5c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'team0\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip_vti0\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'batadv0\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'pimreg0\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}]}, @IPVS_CMD_ATTR_DEST={0x18, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@local}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x4040080}, 0x4000) sendmsg$NFQNL_MSG_VERDICT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)={0x20, 0x3, 0x3, 0x801, 0x0, 0x0, {}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0xffffffffffffffff, 0x3}}]}, 0x20}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000041c0)=ANY=[@ANYBLOB="140000002600010026bdf000fcdb080006"], 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20048000) 7m8.94767916s ago: executing program 38 (id=490): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="280000000203010400000000ffffffff000000000800010001"], 0x28}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791048000000000081001000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) r1 = socket$l2tp6(0xa, 0x2, 0x73) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x23c, 0x19, 0x1, 0x0, 0x0, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0x100000000, 0xca8}}, [@tmpl={0x184, 0x5, [{{@in=@local, 0x4d5, 0x3c}, 0x0, @in=@broadcast}, {{@in6=@remote, 0x0, 0x3c}, 0x0, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x1}, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x0, 0x6c}, 0x0, @in=@local, 0x0, 0x0, 0x0, 0x80}, {{@in6=@ipv4={'\x00', '\xff\xff', @local}, 0x0, 0x33}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @broadcast}, 0x3, 0x0, 0x0, 0x81}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xfffffffe, 0x6c}, 0x0, @in=@multicast1, 0x0, 0x0, 0x0, 0x3}, {{@in6=@mcast1, 0x0, 0x32}, 0xa, @in6=@private1, 0x0, 0x4, 0x0, 0x2}]}]}, 0x23c}}, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r3, &(0x7f0000001740)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000080)='o', 0x1}], 0x1}}], 0x1, 0x0) setsockopt(r3, 0x84, 0x7f, &(0x7f0000000040)="010000000980ffff", 0x8) bind$l2tp6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x1}, 0x20) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_SERVICE(r2, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000380)={0xa8, r4, 0x2, 0x70bd2a, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}]}, @IPVS_CMD_ATTR_DAEMON={0x5c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'team0\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip_vti0\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'batadv0\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'pimreg0\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}]}, @IPVS_CMD_ATTR_DEST={0x18, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@local}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x4040080}, 0x4000) sendmsg$NFQNL_MSG_VERDICT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)={0x20, 0x3, 0x3, 0x801, 0x0, 0x0, {}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0xffffffffffffffff, 0x3}}]}, 0x20}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000041c0)=ANY=[@ANYBLOB="140000002600010026bdf000fcdb080006"], 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20048000) 1.927055008s ago: executing program 4 (id=5329): r0 = accept$netrom(0xffffffffffffffff, &(0x7f0000000000)={{0x3, @default}, [@netrom, @remote, @netrom, @default, @netrom, @bcast, @netrom, @null]}, &(0x7f0000000080)=0x48) recvmmsg(r0, &(0x7f00000040c0)=[{{&(0x7f00000000c0)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000140)=""/115, 0x73}, {&(0x7f00000001c0)=""/234, 0xea}, {&(0x7f00000002c0)=""/58, 0x3a}, {&(0x7f0000000300)=""/12, 0xc}], 0x4}, 0x4}, {{&(0x7f0000000380)=@l2tp={0x2, 0x0, @empty}, 0x80, &(0x7f0000000400), 0x0, &(0x7f0000000440)=""/93, 0x5d}, 0x6}, {{&(0x7f00000004c0)=@can={0x1d, 0x0}, 0x80, &(0x7f0000000740)=[{&(0x7f0000000540)=""/92, 0x5c}, {&(0x7f00000005c0)=""/182, 0xb6}, {&(0x7f0000000680)=""/156, 0x9c}], 0x3}, 0x40}, {{&(0x7f0000000780)=@hci, 0x80, &(0x7f0000003b80)=[{&(0x7f0000000800)=""/179, 0xb3}, {&(0x7f00000008c0)=""/170, 0xaa}, {&(0x7f0000000980)=""/4096, 0x1000}, {&(0x7f0000001980)=""/3, 0x3}, {&(0x7f00000019c0)=""/4096, 0x1000}, {&(0x7f00000029c0)=""/152, 0x98}, {&(0x7f0000002a80)=""/197, 0xc5}, {&(0x7f0000002b80)=""/4096, 0x1000}], 0x8, &(0x7f0000003c00)=""/42, 0x2a}, 0x3}, {{0x0, 0x0, &(0x7f0000003f40)=[{&(0x7f0000003c40)=""/32, 0x20}, {&(0x7f0000003c80)=""/236, 0xec}, {&(0x7f0000003d80)=""/27, 0x1b}, {&(0x7f0000003dc0)=""/37, 0x25}, {&(0x7f0000003e00)}, {&(0x7f0000003e40)=""/12, 0xc}, {&(0x7f0000003e80)=""/68, 0x44}, {&(0x7f0000003f00)=""/7, 0x7}], 0x8, &(0x7f0000003fc0)=""/226, 0xe2}, 0x8}], 0x5, 0x42, &(0x7f0000004200)={0x0, 0x3938700}) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r0, 0xf502, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000004240)=0x800) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000004280)={0x0, r0, 0x1, 0xd93, 0x4, 0x3}) r2 = openat$cgroup_int(0xffffffffffffffff, &(0x7f00000042c0)='blkio.throttle.read_iops_device\x00', 0x2, 0x0) write$cgroup_int(r2, &(0x7f0000004300)=0x8000, 0x12) r3 = accept4$inet(0xffffffffffffffff, 0x0, &(0x7f0000004340), 0x100000) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r3, 0x89f6, &(0x7f0000004440)={'sit0\x00', &(0x7f0000004380)={@rand_addr=0x64010101, 0x0, 0x0, 0x80, 0x0, [{@multicast1}, {@multicast1}, {@multicast2}, {@local}, {@remote}, {@initdev}, {@dev}, {@initdev}]}}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000004480)={'wlan0\x00', 0x8000}) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f00000044c0)) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r3, 0x84, 0xc, &(0x7f0000004500)=0x1, 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_DEL_DAEMON(r4, &(0x7f0000004600)={&(0x7f0000004540)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000045c0)={&(0x7f0000004580)={0x14, 0x0, 0x300, 0x70bd2c, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x40408b5) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000004640)={0x0, @dev, @empty}, &(0x7f0000004680)=0xc) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000004700)={'ip_vti0\x00', &(0x7f00000046c0)={'syztnl0\x00', r1, 0x8, 0x1, 0xcbe, 0x8, {{0x8, 0x4, 0x3, 0xb, 0x20, 0x66, 0x0, 0x5, 0x4, 0x0, @empty, @remote, {[@ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0x8, 0xd5, 0x0, 0xf, [0x400]}]}}}}}) r5 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r5, 0x84, 0x4, &(0x7f0000004740)=0xb82, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) sendmmsg$inet_sctp(r3, &(0x7f0000005f00)=[{&(0x7f0000004780)=@in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10, &(0x7f00000057c0)=[{&(0x7f00000047c0)="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", 0x1000}], 0x1, 0x0, 0x0, 0x4000000}, {&(0x7f0000005800)=@in={0x2, 0x4e23, @multicast2}, 0x10, &(0x7f0000005e80)=[{&(0x7f0000005840)="dd27a0c026187e53b9539c019d33efd3560709ea141584afb1a8b32393e8bd740793abbaca65ce04c5a1d960f12ee6b355f0011433aa9bc88f1ceab35ebd46d2d61cac1a4321660bf76bcdd9b569aba08ad5c3d7bdefe5316b19a524af128bcf246b05f0756ed1db3dcbd9eecded136c18024704f925d205a958ea0307f1f10de402787829868df457066ccb9a50b8edde33d21fa306af920e81dd95e468a71e69dc12407866c1ca61428ef1a62283249ee872709117a4269fe15ec54ab785f9ab59e612737df4b60d9b7d481de5", 0xce}, {&(0x7f0000005940)="3b550747c01a33e100422902a8e3e45d9685ec9b758124ed4fcb3dd5026cc07c7bd512b2dd39ad667ffc4f7756dfb415200773ed36ba322808ad5af6f9bf9cf154b7a83ae386bec9c2e2ca76cb77819192cf1a96e0a6e364ced4e8132e4a7a1a9cce5f1ec6ae55db9ba28c3b19982e0935a9a38e84a52f3b30e6aa11f105d4e587eaa7bf544b12280f485bcbd54bb292633159b2d71531a4b23c8442d04b532ce0f75e7e140e17db53e3b6d712b1c98cf83e0f70edb4e51dc30a20da8a9a7bb0d05bbd05692243c73c2e57a59c2f31a63348767f", 0xd4}, {&(0x7f0000005a40)="cd6ec807e177ed368eab5a50c1ad70ea4446c671f3043296dd6e10b86af8c0afb0540c266d382481f02cd74e10c946519a372deac0072d673abf732abfa9dc947d13cd6d07a52c88fb1f80ed76bb2e6b238c9df450dbe08d19ea397a106e33246918aced2710f7fe652f9cedcb851102da0b28941284b8ac72440e4b28793c93b38fcfee03a973e6f69516e7a9b726b2c1ae687b6a27ba541c2c626b5f276db09ef9fab86018b0e52299d4366d52da314da47caeaaebc0e3fb854710c03da70465c411e68fbba9a1ba9c4d466e3686c6", 0xd0}, {&(0x7f0000005b40)="d06dff4553e6d89bc2c34c19d4b8b4b3d4e5bec606b98e0c72b90cb54301077768de215c71975dea9fde6c751aaf9416e3c0503dba07690b0666651ea2e97293781a6c4712a2939bcfbe9289adb51e35935f07714a9925730add3dfe6a089a5814175e46088369a401d49dbe9e570702c73a79f50c9a0cdf16306f3ceb155aa9b1d6aec395650e60f95338858faeb27e4317d3007f758c5acb91b594d305c8ddf6a4ac0aa2574b410f6ac03b1e9d58544579d2058ce8c84c560c43ac1e94f6b8d197e68dd17d7c81b25d2bdb14028cec3e7dd7e837", 0xd5}, {&(0x7f0000005c40)="144998d4d42f9b49720f3fcdc5052a0cc26c2785033afbfe73a76a88b238b32e81f347fc70c7478e87b1063c3a348ab6e427141aeb95ae41e9ffb87a5fefb5", 0x3f}, {&(0x7f0000005c80)="72a2f56f5b40eeee7deccf3b63319af65f3bf174e8b2885ae4f541f88104a9f4297e9d2af8f0e2b90b03d01e38c3bddd7c96c35426f7d64865bf74f39af119e3cda9640199d40da610d1fd43d734e3f792221b2d12bb339eb1d9f7d9df26aa6bf7e185da855ea8646aab9c3fe3835e04673f095add628b29c3e55240bf5f21a7c422cad67423724849", 0x89}, {&(0x7f0000005d40)="8544c5c35265452812ee4a2fc92efacf2e9951d9b111d656cb42144da739404c5bf30b00e9d729326164bf77c46f89f0fe69f86d8c97ffa19f803c1a5e640121096c4f827dbc3eecdc887082063d33f4a217d7477e295f0f628f11f76017faf747fe57fa30daafff9736913025ed33d04b72609b4dc7db99fe29ab11b90c968c512097e1f72240ee6a13a1079f630f6910999fedd1918995f1965c731ac8f0c73f91c5e79b2ee4613bdf7f9d62adbd6c6c7f31f46443701b2af665d68eb9a64c8f5cb565fda26219b56eb9cb6c168b8c4f4aeef0acd62423a47b9954fb227054c37f0417e011911af0681ff8a1", 0xed}, {&(0x7f0000005e40)="4ae9eac42209", 0x6}], 0x8, 0x0, 0x0, 0x40008}], 0x2, 0x0) pipe(&(0x7f0000005f80)={0xffffffffffffffff, 0xffffffffffffffff}) bind$bt_hci(r6, &(0x7f0000005fc0), 0x6) getsockopt$sock_buf(r7, 0x1, 0x0, &(0x7f0000006000)=""/147, &(0x7f00000060c0)=0x93) recvmsg$can_j1939(r7, &(0x7f0000006580)={&(0x7f0000006100)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, &(0x7f0000006400)=[{&(0x7f0000006180)=""/188, 0xbc}, {&(0x7f0000006240)=""/28, 0x1c}, {&(0x7f0000006280)=""/31, 0x1f}, {&(0x7f00000062c0)=""/16, 0x10}, {&(0x7f0000006300)=""/217, 0xd9}], 0x5, &(0x7f0000006480)=""/253, 0xfd}, 0x40002040) socket$alg(0x26, 0x5, 0x0) setsockopt$IP_VS_SO_SET_EDITDEST(r5, 0x0, 0x489, &(0x7f00000065c0)={{0x3a, @loopback, 0x4e24, 0x2, 'sh\x00', 0x2a, 0x8, 0x7}, {@multicast2, 0x4e20, 0x1, 0xfffff8fe, 0xff, 0x2331}}, 0x44) r8 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_TTY_SET(r8, &(0x7f0000006700)={&(0x7f0000006640)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000066c0)={&(0x7f0000006680)={0x18, 0x3f9, 0x100, 0x70bd29, 0x25dfdbfb, {0x0, 0x7d}}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x841) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1000000, 0x80010, r8, 0xb03e2000) sendmsg$TIPC_NL_PEER_REMOVE(r4, &(0x7f0000006b40)={&(0x7f0000006740)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000006b00)={&(0x7f00000067c0)={0x338, 0x0, 0x200, 0x70bd29, 0x25dfdbff, {}, [@TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xc5}]}, @TIPC_NLA_NET={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x10}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xb}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}]}, @TIPC_NLA_BEARER={0x94, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xfffffe00}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8001}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x21}}}, {0x14, 0x2, @in={0x2, 0x4e20, @remote}}}}]}, @TIPC_NLA_BEARER={0xec, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'eth', 0x3a, 'vcan0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x30}}}, {0x14, 0x2, @in={0x2, 0x4e21, @multicast2}}}}, @TIPC_NLA_BEARER_NAME={0xc, 0x1, @l2={'eth', 0x3a, 'wg0\x00'}}, @TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'eth', 0x3a, 'veth1\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x3e29, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0xf472, @rand_addr=' \x01\x00', 0x1}}}}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x401}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xb4}]}]}, @TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xf0}]}, @TIPC_NLA_MEDIA={0x80, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x101}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x401}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_MEDIA={0x50, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5e}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x240000}]}, @TIPC_NLA_MEDIA_PROP={0x4}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}]}, @TIPC_NLA_MEDIA={0x3c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5e8f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8000}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_PUBL={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xff}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1c2}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xf}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7f}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xc}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xcb3}]}]}, 0x338}, 0x1, 0x0, 0x0, 0x800}, 0x8000) 1.704511384s ago: executing program 4 (id=5332): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="180000002e0001ff070000000000000006"], 0x18}], 0x1, 0x0, 0x0, 0x84}, 0x300) r1 = socket$nl_generic(0x10, 0x3, 0x10) close(0x3) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f00000001c0)=0x2, 0x4) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r2, &(0x7f0000000100)={0x2c, 0x0, r4}, 0x10) sendmsg$NL80211_CMD_SET_WOWLAN(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x3538}}, 0x4004000) read(r0, &(0x7f0000000080)=""/38, 0x26) 1.520444773s ago: executing program 0 (id=5334): syz_emit_ethernet(0xca, &(0x7f0000000640)={@broadcast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xbc, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote}, @dest_unreach={0xc, 0x0, 0x0, 0x0, 0x0, 0x0, {0x28, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @local, @local, {[@rr={0x7, 0x3, 0xdd}, @generic={0x0, 0xd, "ee0dd9de36ed4bcc5b4e23"}, @timestamp_prespec={0x44, 0xc, 0x0, 0x3, 0x0, [{@private}]}, @ssrr={0x89, 0xf, 0x0, [@private=0x4000, @broadcast, @broadcast]}, @timestamp_addr={0x44, 0x4c, 0x0, 0x1, 0x0, [{@initdev={0xac, 0x1e, 0x0, 0x0}}, {@private}, {}, {@local}, {@loopback}, {@private}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@broadcast}, {@broadcast}]}, @timestamp={0x44, 0x14, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0]}]}}}}}}}, 0x0) socket(0x1d, 0x4, 0x1) 1.51621921s ago: executing program 4 (id=5337): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f00000000c0)={0x90000005}) epoll_pwait(r3, &(0x7f0000000100)=[{}], 0x1, 0xfffeffff, 0x0, 0x443c000000000000) connect$unix(r1, &(0x7f0000000140)=@abs={0x0, 0x0, 0x4e20}, 0x6e) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba9432}) readv(r4, &(0x7f00000001c0)=[{&(0x7f0000001400)=""/227, 0x10}], 0x4) r5 = socket$kcm(0x2, 0xa, 0x2) r6 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r6, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'}) r7 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r7, 0x29, 0x3b, &(0x7f00000002c0)=ANY=[], 0x8) bind$inet6(r7, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r7, &(0x7f0000008ac0)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x2b, 0x0) setsockopt$inet6_int(r7, 0x29, 0x4, &(0x7f0000000000)=0x1, 0x4) sendto$inet6(r7, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local}) r8 = socket$inet(0xa, 0x801, 0x84) connect$inet(r8, &(0x7f0000000340)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r8, 0xffffffff) r9 = accept4(r8, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r9, 0x84, 0x1f, &(0x7f0000000740)={0x0, @in6={{0xa, 0x4e24, 0xf29e, @empty, 0x5}}, 0xfff7, 0x9}, &(0x7f0000000000)=0x90) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r10, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000003a00000008000300", @ANYRES32, @ANYBLOB="04005b0006006500"], 0x28}, 0x1, 0x0, 0x0, 0x20000c00}, 0x0) socket$netlink(0x10, 0x3, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000280)) 1.378530839s ago: executing program 0 (id=5339): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="daaf00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000010000000000000000000000000000000000000000000000d52711933c8b84cf42e8a8ce32a8b9c142bd8f50b96cfdc180d854c8296ed7725ec339903b782123bb5beee8cc3cbc82aa7db68a6b46cd21e6434908000000f735fa8e5dadfd47151db29334e172165dad0430ca2f545517777ab62c6602d01338a67ea28ae6e3fc631749834735e71b911e596dea"], 0x50) syz_genetlink_get_family_id$devlink(&(0x7f0000000dc0), 0xffffffffffffffff) splice(r0, &(0x7f0000000040)=0xd3, r1, &(0x7f0000000080)=0x3, 0x7, 0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_TARGET(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r4) syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r4) sendmsg$NL802154_CMD_NEW_INTERFACE(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000580)=ANY=[], 0x30}}, 0x4000000) r5 = socket$pppl2tp(0x18, 0x1, 0x1) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xb, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000dd0a00000000000063019d00000000009500000000000001"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7, 0x0, 0xffffffffffffffff, 0x300}, 0x48) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28, 0xfffd}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=@newtfilter={0x2c, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r9, {0x10, 0xfff3}, {}, {0xa, 0x7}}, [@TCA_CHAIN={0x8, 0xb, 0x3bc}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20044005}, 0x40040) r10 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r5, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, r10, {0x2, 0x0, @multicast2}, 0x2}}, 0x26) r11 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r11, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x8, 0x1, 0x400, 0x0, {0xa, 0x0, 0xe38, @private0}}}, 0x32) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(r12, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="14000000", @ANYRES16=r13, @ANYBLOB="250300000000000000000800"], 0x14}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_GET(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRESDEC=r1, @ANYRESOCT=r1], 0x50}, 0x1, 0x0, 0x0, 0x24040011}, 0x0) 1.329480563s ago: executing program 7 (id=5340): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c0000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000004001004000024001a80200002801c00018008001a00060000000800160002000000080010000004000008001b"], 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'ip6gre0\x00'}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, 0x0, 0x8000) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2e00000010008188040f80ec59acbc0413a181000b00000000010000000000000e000a000f000000028002002d1f", 0x2e}], 0x1}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x44, r4, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r6}, @void}}, [@chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0xe6445995d9064ed7}], @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x30}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xc}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1685}], @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7}]]}, 0x44}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f00000001c0)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @multicast, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, @loopback}}}}, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="1b0000001900599c6d0eab070004000523"], 0xfe33) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x4c, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bond={{0x9}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BOND_MIIMON={0x8, 0x3, 0x280}, @IFLA_BOND_UPDELAY={0x8}, @IFLA_BOND_DOWNDELAY={0x8, 0x5, 0x2000000}]}}}]}, 0x4c}}, 0x0) 1.222039379s ago: executing program 8 (id=5341): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={0x0, 0x0, 0x43}, 0x28) r1 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x891b, &(0x7f0000000000)={'lo\x00', {0x2, 0xffff, @loopback}}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000540)=@sco={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x80, &(0x7f0000000100)=[{&(0x7f0000000b80)="3cd4ec8a217ac4005ec737907222ae17e5f22a1d07fd0c28ccfa8ca14ad19a9c32cfa64b547b61d4112f70545e7e26ffe80c1590ff1900967e7481b849e03990910576020ceefdfa9854ab3c78bd9e24500a775cc93a7b12d05bda170f22a4e5db62f70d4c045482499dde3ddec9f0764648ccf9131db83c17cec89d47fb12887c9a29634028075a2196cdc2aa48831950bd73217bd019a76d39d7f897aed9466b8e83bf77a3e52759e6", 0xaa}, {&(0x7f0000000c40)="bbc3f7606690a998af6919ab24a60e461f97edd42e1193a4e5025a900cf3e59fc5bb00498cb4090225f7a2cef688e36db9c5d0cc2e80b5435eebecc7a893165bd41fecc0cbd40709071f5887d747f5f0cce10a491936dc568045630ae8482f4904628e58721ee38258c662e035735e6ff5834d69d5e8ee229cef5e2f24724a367dd1efd08341", 0x86}], 0x2, &(0x7f0000001480)=ANY=[@ANYBLOB="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"], 0x1408}, 0x4000000) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r5 = socket(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000e40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000001040)={'vxcan1\x00', 0x0}) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x4, 0x4, 0x4, 0xbf25}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000280)={r10, &(0x7f0000000180), 0x0}, 0x20) r11 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001100)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x7e22, '\x00', r7, r0, 0x3, 0x4, 0x4}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001200)={0x6, 0x17, &(0x7f0000000e80)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@generic={0x1, 0x2, 0x3, 0x3, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x1}, @map_fd={0x18, 0x1, 0x1, 0x0, r8}, @ldst={0x1, 0x3, 0x1, 0xb, 0x5, 0x20, 0x8}, @ldst={0x0, 0x3, 0x4, 0x5, 0x8, 0x18, 0xfffffffffffffff0}, @map_idx_val={0x18, 0xb, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, 0xffffffffffffffff, 0x5c08, 0xc4, &(0x7f0000000f40)=""/196, 0x41000, 0x10, '\x00', r9, 0x25, r0, 0x8, &(0x7f0000001080)={0x6, 0x2}, 0x8, 0x10, &(0x7f00000010c0)={0x4, 0xc, 0x595ee2b, 0x4}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000001180)=[r6, r5, r10, r6, r11, 0xffffffffffffffff], &(0x7f00000011c0)=[{0x5, 0x4, 0x1, 0xa}], 0x10, 0x3}, 0x94) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f00000002c0)=@newqdisc={0x70, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x3c, 0x2, [@TCA_FQ_CODEL_TARGET={0x8, 0x1, 0x6}, @TCA_FQ_CODEL_TARGET={0x8, 0x1, 0x474c}, @TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5, 0xb, 0x6}, @TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0x7}, @TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5}, @TCA_FQ_CODEL_ECN={0x8}, @TCA_FQ_CODEL_LIMIT={0x6}]}}]}, 0x70}}, 0x0) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000d40), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r5, &(0x7f0000000e00)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d80)={0x1c, r12, 0x400, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x21}, @void, @void}}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x1) sendmsg$netlink(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)={0x268, 0x25, 0x1, 0x0, 0x0, "", [@nested={0x255, 0x20b1, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64=0x2}, @nested={0x165, 0x1fc, 0x0, 0x1, [@generic="aacb078fbe8fcbd3844064688b2b4f72c8b118a6a90ed572e0926e98ff65077497ecdfa2dd0b5be86a30b081592ea9aee28a5b9348e4309e890e00a64b80b2f24c4e21bbf0e68a8e654b69e6ffbeb86cad20e8b308763f888071387b6411d1d7a3daf18fa5b322cf482b526b0a09ec57b041b4725cdc1a60af0c680b1c0876c75d014155cffa2183cb7b0cef3d0fb8771666304bb326ae16138cf54860b3b23ea42b6d60982de3c6ad7bddef702a654f13fff71f05637e0a13e0534ac5ddf248333a135ad7629cff78c318eefec08d0d3b67eb20d03f38eb4ac5ec825788c56d07a5ef39bdbc3913dd175f1b1f1fc98ec55124715319", @generic="fae644f50596f81d9ad9081d397c66b15f5eaf36bc97fc82590eed387df8a1852954f8892f18315574824837ae0ffbd6ee87e5a331e118cfdbd0ea0cb2c9afbcc6c7f301d71f0a16bff8718e908545b6008dd320da4618006dccda8c1c3249c67738b4e6ecd1164f16d2ad"]}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe8101000000010000008b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd"]}]}, 0x268}], 0x1}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r3, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfffffffffffffe22, 0x0}}, 0x10) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0xf0b, 0x70bd2e, 0x0, {0x0, 0x0, 0x12, r13, {0x0, 0x6}, {0xfff1, 0xffff}, {0xfff3}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x8004005}, 0x0) r14 = socket$inet_udplite(0x2, 0x2, 0x88) r15 = syz_init_net_socket$llc(0x1a, 0x0, 0x0) bind$llc(r15, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x54}, 0x10) getsockname$packet(r15, 0x0, &(0x7f0000000480)) setsockopt$IPT_SO_SET_REPLACE(r14, 0x4000000000000, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x4001, 0x3, 0x548, 0x1f0, 0x0, 0x148, 0x0, 0x148, 0x4b0, 0x240, 0x240, 0x4b0, 0x240, 0x7fffffe, 0x0, {[{{@ip={@private=0xa010102, @local, 0x0, 0xff000000, 'ip6tnl0\x00', 'wlan1\x00', {}, {}, 0x88, 0x3, 0x10}, 0x0, 0x190, 0x1f0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x6}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x6, 0x1, 0x1, 'syz1\x00', 0xc}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, [0xffffff00, 0xffffff00, 0x0, 0xffffffff], 0x4e22, 0x4e22, 0x4e20, 0x4e23, 0x8, 0x2, 0x5f4a, 0x100, 0x2}}}, {{@ip={@remote, @multicast1, 0xff000000, 0xffffff00, 'tunl0\x00', 'pimreg1\x00', {}, {0xff}, 0x84, 0x0, 0x60}, 0x0, 0x260, 0x2c0, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x9, 0x9, 0x1, 0x1, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x4, 0x3, 0x1, 0x1, 'syz1\x00', 0x5}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x2, [0x1, 0x1, 0x3, 0x1, 0x5, 0x1], 0x3}, {0x1, [0x1, 0x1, 0x7, 0x1, 0x0, 0x4]}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x5a8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000071123e000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) 1.16272715s ago: executing program 0 (id=5343): r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xf}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0xf17}]}}]}, 0x3c}}, 0x40000) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) r3 = socket$igmp6(0xa, 0x3, 0x2) getsockopt$inet6_int(r3, 0x29, 0x7, 0x0, &(0x7f0000000040)) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0x204, 0x4) setsockopt$packet_int(r4, 0x107, 0x12, &(0x7f0000000440)=0x8000, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000480)={'ip6_vti0\x00', 0x0}) sendto$packet(r4, &(0x7f00000002c0)="05031600d3fc140000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x300, 0x0, 0x150}, [@IFLA_VFINFO_LIST={0xc, 0x16, 0x0, 0x1, [{0x8, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN_LIST={0x4}]}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket(0x2a, 0x2, 0x0) (async) getsockname$packet(r0, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xf}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0xf17}]}}]}, 0x3c}}, 0x40000) (async) socket$netlink(0x10, 0x3, 0x0) (async) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) socket$igmp6(0xa, 0x3, 0x2) (async) getsockopt$inet6_int(r3, 0x29, 0x7, 0x0, &(0x7f0000000040)) (async) socket$packet(0x11, 0x3, 0x300) (async) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0x204, 0x4) (async) setsockopt$packet_int(r4, 0x107, 0x12, &(0x7f0000000440)=0x8000, 0x4) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000480)={'ip6_vti0\x00'}) (async) sendto$packet(r4, &(0x7f00000002c0)="05031600d3fc140000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x300, 0x0, 0x150}, [@IFLA_VFINFO_LIST={0xc, 0x16, 0x0, 0x1, [{0x8, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN_LIST={0x4}]}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) 1.031930446s ago: executing program 1 (id=5344): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_emit_ethernet(0x121, &(0x7f00000007c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x22}, @void, {@mpls_uc={0x8847, {[{0x9b}, {0x1}, {0x4, 0x0, 0x1}, {0x8, 0x0, 0x1}], @ipv4=@igmp={{0x15, 0x4, 0x2, 0x9, 0x103, 0x64, 0x0, 0xf9, 0x2, 0x0, @remote, @rand_addr=0x64010102, {[@ssrr={0x89, 0x13, 0x22, [@local, @multicast1, @multicast1, @remote]}, @end, @end, @timestamp_addr={0x44, 0x1c, 0x11, 0x1, 0x3, [{@multicast2}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x9b}, {@loopback, 0x996b}]}, @generic={0x94, 0x2}, @generic={0x86, 0x8, "4ef7455ec1ba"}, @ra={0x94, 0x4}]}}, {0x17, 0x2, 0x0, @multicast1, "315944c3f751ef1ab18b91d33851c40c360a67e2ab57881eb2ecd445cc6897de01b8c2d3dc5fec2fcb2d0ff1bacda06416d27384d6ed1956b62cbebc7d5ee4ddcc897e4c84e302c0f33b2d36492ab69cf02af2a3b1c10620f99a5b9885d1adafc76fd858ea3dd2b3c25d77c22ef3e4c237257efa57ccf6c479c746a6f3a9e8a5bc7e8ddb90f7015571073b33415ea6f6bd10ad9c34644a086b7037e53be6c0a8a7d7c8a47cfda7"}}}}}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f00000012c0)=@nat={'nat\x00', 0x670, 0x5, 0x3d0, 0x270, 0x0, 0xfeffffff, 0x270, 0xf8, 0x338, 0x338, 0xffffffff, 0x338, 0x338, 0x5, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0xffffffff, 'veth0_to_bond\x00', 'caif0\x00', {}, {}, 0x6}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x7, 0x3, 0xa}}, @common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x2, 0x4}}]}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @broadcast, @remote, @icmp_id}}}}, {{@ip={@loopback, @broadcast, 0xff, 0x0, 'lo\x00', 'veth1_to_batadv\x00', {0xff}}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@icmp={{0x28}, {0xe, "8a1c"}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id}}}}, {{@ip={@remote, @broadcast, 0x0, 0x0, 'pim6reg0\x00', 'wlan0\x00'}, 0x0, 0x90, 0xc8, 0x0, {}, [@common=@socket0={{0x20}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @private=0xa010101, @rand_addr, @gre_key, @gre_key}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x430) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000100)='vlan0\x00', 0x10) socket$inet(0x2, 0x5, 0x81) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r1) sendmsg$NL80211_CMD_ASSOCIATE(r1, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0x61, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="e40000004ef2d9034cc79316d86ba64971f495d37e0d760bf46d1e4cddc25cc82e4ed8865ec8b43b7007c0d68fae552f1308f538ec7bc57fc6e3d181183a39fec30f36024a04ba727f4880baabb4293355cbe25930e07f8a6c09550ff9a36dd3d5cd142886568c2809588b14eca4324e214de46e8c9086c5cd0998f04e1403", @ANYRES16=r3, @ANYBLOB="00012ebd7000fcdbdf252600000000009900020000005800000008009f000700000005001901070000000800a1000180000008009f0000000000080027000200000008002201840300000800a10006000000080026002017000008002201e50300001e0094000040191000000000000000480000001c0000000003000000000c0000080042000000000010009d0000001010e4dc0300ffff0400"], 0xe4}, 0x1, 0x0, 0x0, 0x40000}, 0x80) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000580)={'veth0_to_team\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r0, r4, 0x25, 0x0, @void}, 0x10) 882.210908ms ago: executing program 7 (id=5345): r0 = accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0x10) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, &(0x7f00000002c0)={0x0, 0x3, 0x3, 0x4fd, 0x4, 0x0, [{0xe, 0x3, 0x5, '\x00', 0x4c84}, {0x4, 0xee1, 0x400, '\x00', 0x1882}, {0x56, 0x401, 0xe0f, '\x00', 0x3501}, {0xfffffffffffffffd, 0x9689, 0x7fffffffffffff7f, '\x00', 0x500}]}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000540), r1) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)={0x24, r2, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast1}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast2}]}, 0x24}, 0x1, 0x0, 0x0, 0x20008040}, 0x8080) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="440000001000090600"/20, @ANYRES32=0x0, @ANYRESDEC=r2], 0x44}}, 0x0) ioctl$F2FS_IOC_COMPRESS_FILE(r0, 0xf518, 0x0) 879.572155ms ago: executing program 0 (id=5346): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) r3 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r3, 0x0, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) (async) socket$pppl2tp(0x18, 0x1, 0x1) sendmsg$nl_route(r3, 0x0, 0x4008040) (async) sendmsg$nl_route(r3, 0x0, 0x4008040) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00', 0x0}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000800)=@newlink={0x44, 0x10, 0x503, 0x70bd2a, 0x4, {0x0, 0x0, 0x0, 0x0, 0x0, 0x201a0}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_SCB={0x5}]}}}, @IFLA_LINK={0x8, 0x5, r5}]}, 0x44}}, 0x800) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)={0x54, r2, 0x4c1dad3e3d6a7499, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @private=0x774}}, {0x14, 0x2, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x24000884}, 0x2400c000) (async) sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)={0x54, r2, 0x4c1dad3e3d6a7499, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @private=0x774}}, {0x14, 0x2, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x24000884}, 0x2400c000) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000200)="cb000000150081054e81f782db44b904021f08010a000000040000a118000200ac141414ffff0d1208000f0100810401880016ea1f0006ea7f400303000803600cfab94dcf5c046181d67f6f94007134cf6ee080005c4ab0f45312b3429fa0e408f456211bef32d4760000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd60100730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee", 0xcb}], 0x1, 0x0, 0x0, 0x7400}, 0x44804) 879.077731ms ago: executing program 8 (id=5347): r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) sendto$inet6(r0, 0x0, 0xa, 0x40054, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@newsa={0x16c, 0x10, 0x713, 0x70bd26, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in=@dev={0xac, 0x14, 0x14, 0x13}, 0x4e22, 0x1, 0x0, 0x3, 0x2, 0x0, 0x0, 0x3a, 0x0, 0xffffffffffffffff}, {@in6=@remote, 0x0, 0x32}, @in6=@local, {0x0, 0x0, 0x8, 0xa, 0x6, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x2, 0xfffffffffffffff8}, {0xc, 0x5, 0x2}, 0x70bd29, 0x0, 0x2, 0x1, 0x0, 0x28}, [@algo_aead={0x68, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0xe0, 0x80, "316f74eeac053deb73fc018493cc121927a9bca207141b9a451c00aa"}}, @tfcpad={0x8, 0x16, 0x4}, @offload={0xc, 0x1c, {0x0, 0x2}}]}, 0x16c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) r3 = socket(0x40000000015, 0x5, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}}, 0x1c) getsockopt$sock_buf(r3, 0x1, 0x1c, 0x0, &(0x7f00000001c0)=0xff1a) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="5800000002060104000000050001000700000005000400000000000900020073797a3200000000050005000a0000000c000780080006000000000011000300686173683a69702c6d61726b00"/88], 0x58}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$pppoe(0x18, 0x1, 0x0) tee(r5, r6, 0x1ff, 0x0) sendmsg$nl_generic(r4, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000001000000000004000000000000a0000000c00"/32], 0x20}}, 0x0) 799.270212ms ago: executing program 1 (id=5348): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, 0x0}], 0x1, 0x40800) r3 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r3, &(0x7f0000000200)={&(0x7f0000001340)=@hci={0x1f, 0xdd86, 0x2}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000080)='b', 0x1}], 0x1}, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f0000000200)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000080000003d0301000000000095000000000000006926000000000000bf67000000000000150700000fff07003506000002000000170600000ee50000bf250000000000001f650000000000006507000002000000070700004c0001000f75000000000000bf54000000000000070400000400f9ff2d3501000000000095000000000000000500000000000000950007000000000001722fabb733a0c857c7c45402000000a2d23da04d1ffc187fa1a2ba7ba030c7267c2de00435fd233cc0f0d9b2c3127c46b0f408398d09ee4dc258d726eae098804de25df627a64ac7efde50fd7f1dd5b17ed764c33b06598bae66ea38541a7cd29032de94983dfab0e5043daf1b46bef5135c65377bdbe65d525743d88ef4b2ee62652b07f8a4b6e6155cecc13a5ddfab726eca91bd5fecb254ab358488c400330171128be291297947d474c570a385a459db8e7ada8ee987cc0000f6"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x1f1, 0x10, &(0x7f0000000000), 0xfffffffffffffe66}, 0x48) setsockopt$inet_opts(r4, 0x0, 0x8000000000000c, 0x0, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r0, 0x8982, &(0x7f0000000000)) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) sendmsg$IPSET_CMD_SWAP(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000006060500000000000000000000000007050001"], 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000004000000000000000000000085000000ae00000095"], &(0x7f00000001c0)='GPL\x00', 0x4}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r5}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5}, 0x94) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000440)={'syztnl2\x00', &(0x7f00000003c0)={'ip6gre0\x00', 0x0, 0x2f, 0xf3, 0xa, 0x4, 0x10, @local, @loopback, 0x1, 0x7800, 0x7fffffff, 0x8}}) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={&(0x7f0000000380), 0xc, &(0x7f0000000540)={&(0x7f0000000480)=@newtclass={0x40, 0x28, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0x3, 0x8}, {0xfff2, 0x10}, {0x4, 0xc}}, [@tclass_kind_options=@c_drr={{0x8}, {0xc, 0x2, @TCA_DRR_QUANTUM={0x8, 0x1, 0x9}}}, @TCA_RATE={0x6, 0x5, {0x20, 0x5}}]}, 0x40}, 0x1, 0x0, 0x0, 0x8004}, 0x40000) 796.132104ms ago: executing program 0 (id=5349): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r1, 0x0, 0x484, 0x0, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r2, 0x29, 0x3a, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r6, 0x89fa, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000000)={@empty, @broadcast, 0xd, 0x4}}) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106-gcm-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f00000009c0)="ad56b6c5820fae9d6dcd3292ea54c7be8bbdadbb1632ea5704cae881ef915d374c90c200", 0x24) r8 = socket$inet_sctp(0x2, 0x5, 0x84) r9 = accept4(r8, 0x0, 0x0, 0x80000) sendmmsg$alg(r9, &(0x7f0000000c00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@assoc={0x18, 0x117, 0x4, 0x10}], 0x18, 0x40040}], 0x1, 0x8040) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r9) sendmsg$TIPC_NL_NAME_TABLE_GET(r3, &(0x7f0000000200)={&(0x7f0000000140), 0xc, &(0x7f00000001c0)={&(0x7f0000000280)={0xd0, r10, 0x800, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_MON={0x54, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x800}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8c0e}]}, @TIPC_NLA_BEARER={0x68, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x72}, @TIPC_NLA_BEARER_NAME={0x14, 0x1, @l2={'ib', 0x3a, 'team_slave_0\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xf}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xfff}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}]}]}, 0xd0}, 0x1, 0x0, 0x0, 0x20004010}, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r9) sendmsg$nl_route_sched(r3, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) 706.30317ms ago: executing program 7 (id=5350): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001240)=@newqdisc={0x88, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x2, [0x10, 0x4, 0x10, 0xb, 0x9, 0x3, 0x9, 0xb, 0x7, 0xf, 0x7, 0x7, 0x8, 0xa, 0xd, 0xa], 0x1, [0x6, 0x7fff, 0x401, 0xf3c7, 0x4, 0x2, 0xf, 0x4, 0x7, 0x3, 0x8001, 0x8, 0x1c00, 0x0, 0x1, 0x7], [0x8, 0x101, 0x9, 0x5, 0x5, 0x3, 0x6, 0x800, 0x0, 0x4, 0x8, 0x4, 0x7, 0x9ca6, 0x10, 0x1ff]}}}}]}, 0x88}}, 0x4014) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0700020000000000000005000000180001801400020073797a5f74756e0000000000000000001c000380140003800c000180080001000200000004000188040001"], 0x48}}, 0x4814) 682.983246ms ago: executing program 0 (id=5351): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x6, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x2d}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x3801}, {0x2c}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0xb, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 667.393568ms ago: executing program 8 (id=5352): socket$nl_route(0x10, 0x3, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000002b80)={0x6, 0x4, &(0x7f0000001a00)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}, [@alu={0x7, 0x0, 0x9, 0x0, 0x0, 0x1, 0xffffffffffffffff}]}, &(0x7f0000001a40)='GPL\x00', 0x7}, 0x94) 618.037372ms ago: executing program 1 (id=5353): r0 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0x890c, 0x0) r1 = socket(0x1e, 0x4, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000100)={'rose0\x00', @local}) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000800)=@newlink={0x44, 0x10, 0x503, 0x70bd2a, 0x4, {0x0, 0x0, 0x0, 0x0, 0x0, 0x201a0}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_PORT={0x6, 0x2, 0x1, 0x0, 0x4e24}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}}, 0x800) syz_emit_ethernet(0x2b, &(0x7f0000000000)={@link_local, @dev, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0xff64, 0x0, 0x0, 0x0, 0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x0, 0x0, 0x0, @multicast1, '\x00'}}}}}, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000240)='ip6gre0\x00', 0x10) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) bind$tipc(r1, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb01001c0000000000000064000000640000000300000003"], 0x0, 0x7f, 0x0, 0x1, 0x2}, 0x20) r6 = socket$inet_udplite(0x2, 0x2, 0x88) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000016c0)=ANY=[@ANYBLOB="0a000000e6280000500000000700000000000200", @ANYRES32=0x1, @ANYBLOB="005b00000000000000fffffffc0000", @ANYRESOCT=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r8, 0x80108906, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001940)={{r7}, &(0x7f0000000300), &(0x7f0000000440), 0x2}, 0x20) ioctl$FIDEDUPERANGE(r1, 0xc0189436, &(0x7f0000000440)=ANY=[@ANYBLOB="ff0f02000000000000007fe45596f763c55dfec446233711975d6db1f0d41c9421aa544ea571a9d67298e8ec4186b8083f09c992ce765baff49d8130d6d888eb4ce29511b89e00"/81, @ANYRES32, @ANYBLOB="000000000400"/28, @ANYRES32, @ANYBLOB="000000000100"/28]) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000015c0)=@generic={&(0x7f00000002c0)='./file0\x00', 0x0, 0x10}, 0x18) r10 = socket$inet6(0xa, 0x3, 0x5) setsockopt$IP6T_SO_SET_REPLACE(r10, 0x29, 0x40, &(0x7f0000001a80)=@raw={'raw\x00', 0x8, 0x3, 0x12d8, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1208, 0xffffffff, 0xffffffff, 0x1208, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [0x0, 0x62], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {0xff}, 0x0, 0xfd}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x7fff, 0x30, 0x1}}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [0x0, 0x0, 0xff000000], [], 'wg1\x00', 'ip6gretap0\x00', {}, {}, 0x3b, 0x0, 0x0, 0x3}, 0x0, 0x1108, 0x1138, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x1, 0x0, 0x0, './cgroup.cpu/syz0\x00', 0x2, {0x8}}}, @common=@srh={{0x30}, {0x1, 0x4, 0x7, 0x3, 0x8001, 0x204, 0x3004}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x0, 0x0, 0x0, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x1338) pipe(&(0x7f0000000340)) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000380)=@bpf_lsm={0x1d, 0x17, &(0x7f0000000500)=@raw=[@map_idx_val={0x18, 0x8, 0x6, 0x0, 0xe}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x5}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1c00000}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r7}}, @alu={0x7, 0x0, 0x7, 0x2, 0xb, 0x50, 0x3ee5ea0544f159c4}, @jmp={0x5, 0x1, 0xb, 0xb, 0x2, 0x1, 0x1}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x1}], &(0x7f0000000080)='GPL\x00', 0x2, 0x1000, &(0x7f00000005c0)=""/4096, 0x41000, 0x31, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000280)={0x0, 0x0, 0x8000, 0xb}, 0x10, 0xffffffffffffffff, 0x0, 0x3, &(0x7f0000001600)=[r9, r7, r7], &(0x7f0000001680)=[{0x3, 0x2, 0xa, 0x1}, {0x2, 0x1, 0x7}, {0x3, 0x2, 0xd, 0x9}], 0x10, 0x40}, 0x94) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000140)={'bridge_slave_0\x00', 0x0}) socket$netlink(0x10, 0x3, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001740)=ANY=[@ANYBLOB="90000000110000040000000000000000070000005d4b8c4112acf3d6e0f80bdc72441947badc23cad91bf4179fbc209387d796612dad97799e52c99af72ee93e07ddd13a501867535a", @ANYRES32=r11, @ANYBLOB="00000000624700006c000c0068000a80050008000400000005000800040000001400070000000000000000000000ffff6401010105000800090000001400000000002114000700ff0100000000000000000000000000010500080009000000050008008600000004001a80040d41fc23cc8981d65a3a9a3d6d4092bddc33b900"/140], 0x90}, 0x1, 0x0, 0x0, 0x40000}, 0x4) syz_genetlink_get_family_id$tipc(&(0x7f0000000300), 0xffffffffffffffff) 612.969548ms ago: executing program 7 (id=5354): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) r4 = socket$inet_sctp(0x2, 0x5, 0x84) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x8, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x7, 0xa, 0xfffffff3}}}}]}, 0x44}}, 0x0) r9 = socket$inet6(0xa, 0x3, 0x8000000003c) setsockopt$inet6_int(r9, 0x29, 0x18, 0x0, 0x2e) sendmsg$nl_route_sched(r6, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newtfilter={0x3c, 0x2c, 0xd2b, 0x803, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {0x6}, {}, {0x7, 0xf}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x86dd}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2404c044}, 0x240440d4) setsockopt$EBT_SO_SET_COUNTERS(r4, 0x0, 0x81, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000010001fff000000008100000000000000", @ANYRES32=0x0, @ANYBLOB="00000000003f0000200012800b00010067656e657665000010000280060005004e24000004000e0008000a00", @ANYRES32=r2], 0x48}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) 536.607636ms ago: executing program 8 (id=5355): recvmsg$qrtr(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, &(0x7f0000000140)=[{&(0x7f00000003c0)=""/121, 0x79}], 0x11ec, &(0x7f0000000240)=[{0xb8, 0x0, 0x0, ""/159}, {0xb0, 0x0, 0x0, ""/157}, {0x18, 0x0, 0x0, ""/8}], 0x180, 0x22}, 0x38, 0x0) r0 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r0, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x81, 0x42}, 0x10) connect$llc(r0, &(0x7f0000000340)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random="48bd00"}, 0x10) r1 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r1, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x10) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0x5, &(0x7f0000000040)=0x5, 0x4) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x5, &(0x7f0000000080)=0x7, 0x4) getsockopt$inet6_tcp_int(r4, 0x6, 0x5, 0x0, &(0x7f00000000c0)) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ(r5, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10420420}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x30, 0x13, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x9}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x9}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x9}]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x48000) r6 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r6, &(0x7f0000000440)=[{{&(0x7f0000000280)={0x2, 0x4e22, @private=0xa010101}, 0x10, &(0x7f0000000980)=[{&(0x7f0000000200)="9c", 0x1}], 0x1}}, {{&(0x7f0000000080)={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000300)="99", 0x1}], 0x1}}], 0x2, 0x48000) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)={{0x14, 0x10, 0x7c, 0x0, 0x6000, {0x5}}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_EXPR={0x14, 0x11, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x2}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, "d1"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xb8}}, 0x40) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r6, 0x84, 0x18, &(0x7f00000003c0)={r7, 0xcb}, 0x8) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f00000000c0)={r7, 0x0, 0x20}, &(0x7f0000000440)=0xc) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'veth1\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newqdisc={0x5c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x2, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}, {0x0, 0x8}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4000}}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xfa, 0xf, 0x100, 0x3, 0x1, 0x3, 0x401}}, {0x4}}]}]}, 0x5c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYRES32], 0x30}}, 0x11) 428.683415ms ago: executing program 4 (id=5356): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) getsockopt$inet_buf(r1, 0x0, 0x29, &(0x7f0000000000)=""/145, &(0x7f0000695ffc)=0x24b) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f0000000240)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}], 0x10) shutdown(r2, 0x1) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x84, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e21, @empty}}}, &(0x7f00000003c0)=0x90) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40000000010800034000000014480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c0003801800008008000340000000020c0004400000000000000c7f14000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="2cff00000d0a010300000000000000000a00003a4500000073797a310000000009000100595a3b99123eb673"], 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x3, 0x0, 0xa00, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x9000000}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x58}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_PROTOCOL(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000000106030000000000000305000100076fb53356fa913326000000000080000000"], 0x24}, 0x1, 0x0, 0x0, 0x889e91718cabb3b2}, 0x4000) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a300000000040000000030a01020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000800010073797a300000000058000000060a010400000000000000000100000008000b40000000000900010073797a3000000000300004802c0001800e000100696d6d6564696174650000001800028008000140000000010c000280050001004c00000014000000110001"], 0xe0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2, 0x10, 0x0, 0x38}, 0x48) 363.692676ms ago: executing program 1 (id=5357): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff}) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_sys\x00', 0x275a, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x2a, &(0x7f0000000140)=r1, 0x4) (async) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r2, &(0x7f0000000000)={0x1f, 0x0, @fixed}, 0xe) (async) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff002, 0x0, 0x2000000000032, 0xffffffffffffffff, 0x0) (async) setsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0xf, &(0x7f0000000080)=0x3, 0x4) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0xb, 0x3, &(0x7f0000000000)=@framed={{0x62, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0x4e}}, &(0x7f0000000480)='GPL\x00', 0x0, 0xffffffffffffff7d}, 0x94) 327.542401ms ago: executing program 8 (id=5358): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00000000c0)={0x3, 0x1000}, 0x4) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x3, 0x1000}, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000003180)=@req={0x5, 0x6, 0x10000000, 0x7}, 0x10) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_drop_memb(r2, 0x107, 0x2, &(0x7f0000002380)={0x0, 0x1, 0x6, @broadcast}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) 201.95681ms ago: executing program 1 (id=5359): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000180)={0x3, 0xfffc, "6ab62d", 0x5, 0x7f}) (async) setsockopt$inet6_int(r0, 0x29, 0xdf, &(0x7f0000000040)=0x7, 0x4) (async, rerun: 64) r1 = socket(0x28, 0x5, 0x0) (rerun: 64) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, r2, 0x81b21000) r3 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x3c, &(0x7f0000000000)={0x0, 0x0}, 0x10) (async) syz_80211_join_ibss(&(0x7f00000000c0)='wlan0\x00', &(0x7f0000000140)=@default_ibss_ssid, 0x6, 0x0) (async) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200), r0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$inet6(0xa, 0x3, 0x3c) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_opts(r7, 0x0, 0x8000000000000c, 0x0, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x5000, 0x0, @dev={0xfe, 0x80, '\x00', 0x13}, 0x5}, 0x1c) writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0xffdf}], 0x1) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)={0xfc, r4, 0x200, 0x70bd2b, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0x7c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private0}, @IPVS_SVC_ATTR_SCHED_NAME={0xa, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'lblc\x00'}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast1}, @IPVS_SVC_ATTR_FLAGS={0x6a082d86918c7f30, 0x7, {0x10, 0x20}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@empty}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_NETMASK={0x0, 0x9, 0x71}]}, @IPVS_CMD_ATTR_DAEMON={0x50, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x1ff}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xec}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'macvtap0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}, @IPVS_DAEMON_ATTR_STATE={0x8}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x30}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1450}]}, 0xfc}, 0x1, 0x0, 0x0, 0x20004810}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x1b, 0x3, &(0x7f0000000100)=@framed={{0x18, 0x5, 0x0, 0x72}}, &(0x7f0000000000)='GPL\x00', 0x8, 0xde, &(0x7f0000003e40)=""/222}, 0x90) r8 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=@newtaction={0x48, 0x30, 0x51b, 0x0, 0x0, {}, [{0x34, 0x1, [@m_skbmod={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4, 0x14}, {0xc}, {0xc, 0x6}}}]}]}, 0x48}}, 0x0) (async) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000500), r0) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f00000005c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)=ANY=[@ANYBLOB, @ANYRES16=r9, @ANYBLOB="100029bd7000fbdbdf25120000000500380001000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4048840}, 0x48451) 201.584499ms ago: executing program 8 (id=5360): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) write$tun(r1, &(0x7f0000000000)=ANY=[], 0x38) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000ac0)={0x28, r3, 0x5, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0xd}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x40008084}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB="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"/1752], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=@bridge_dellink={0x34, 0x13, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r7}, [@IFLA_AF_SPEC={0x14, 0x1a, 0x0, 0x1, [@AF_INET={0x10, 0x5, 0x0, 0x1, {0xc, 0x1, 0x0, 0x1, [{0x8, 0x1}]}}]}]}, 0x34}}, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x10012, r1, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x4d4881, 0x0) ioctl$sock_ifreq(r0, 0x8910, &(0x7f0000000000)={'ip6gretap0\x00', @ifru_mtu=0x6}) recvmsg$kcm(r1, &(0x7f00000006c0)={&(0x7f0000000040)=@phonet, 0x80, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/128, 0x80}, {&(0x7f0000000140)=""/151, 0x97}, {&(0x7f0000000200)=""/239, 0xef}, {&(0x7f0000000300)=""/227, 0xe3}, {&(0x7f0000000400)=""/31, 0x1f}, {&(0x7f0000000440)=""/107, 0x6b}, {&(0x7f00000004c0)=""/174, 0xae}], 0x7, &(0x7f0000000600)=""/174, 0xae}, 0x2000) ioctl$sock_netdev_private(r0, 0x8914, &(0x7f0000000000)) 162.030805ms ago: executing program 7 (id=5361): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e21, 0x4, @dev={0xfe, 0x80, '\x00', 0x22}, 0x2c5443c4}, 0x1c) sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000000090108000000000000000000000001080005400000001c0900010073797a31000000000c000480060001"], 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x2000000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={0x58, 0x2, 0x6, 0x101, 0x0, 0x0, {0x0, 0x0, 0x1}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x5}]}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0xfffffcc5}}, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3400000040000701fcffffff00000100017c0000040042800c00018006000600800e0000100002800c0006", @ANYRESOCT=r1], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0x1404c8c0) 139.672301ms ago: executing program 4 (id=5362): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xd, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000085000000a000000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 29.582763ms ago: executing program 7 (id=5363): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="620ac4ff0000000071104a00000000009500"], &(0x7f0000000480)='GPL\x00'}, 0x94) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r3, 0x8914, &(0x7f0000000000)) ioctl$sock_netrom_SIOCADDRT(r2, 0x890b, &(0x7f0000000280)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bpq0, 0xfffd, 'syz0\x00', @default, 0xfffffdb8, 0x2, [@default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast]}) ioctl$sock_netrom_SIOCADDRT(r2, 0x890b, &(0x7f00000001c0)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x2, 'syz1\x00', @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x5, 0x1, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x10001, 'syz1\x00', @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x1, 0x0, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default]}) 29.164827ms ago: executing program 1 (id=5364): ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b04, &(0x7f0000000040)={'virt_wifi0\x00', @link_local}) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r0, 0x8b27, &(0x7f0000000040)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000004680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a1d010000000000000000020000000900010073797a3000000000080002400000000098000000030a01020000000000000000020000000900010073797a30000000000900030073797a32000000006b00030091abc12404cf378042f26c43f91f68d8a90767c0bc71f60877974475de3d78efb8abe4697255db0a95d58051bdd88bb7f063e5870df43110ba778743ed0d89fd11c0"], 0xfc}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000b00)={@local, @local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "4a00a6", 0x0, 0x0, 0x0, @private0, @remote}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="61124e00000000006113500000000000bf2000000000000007000000180000003d030100000000009500f000000000006926000000000000bf67000000000000140600000fff07006706000020000000350200000ee60000bf25000000000000bd350000000000006507000002000000070700004c0000001f75000000000000bf54000000000000070400000400f9ffad53010000000000840400000000000014000000000000009500000000000000db13d5d8b740f2cdaabc8383c8f56b8c2b84a800ea6553f3ef4392b3815dcf00c3eebc52267b042d19d6e31e25e589d5f2692c75a547d6f186641ae8c557ccff3878a93b51a0389749df734f49ed5078b10f1e7f2b37626a3ace1ea89f7d2c570720a86853e26168761f0a53358f7ee2baa0e6a67a98a0d57ac09f36cfefbbc7492bbe7cdf64971a57fd64efd46c26"], &(0x7f0000000100)='GPL\x00'}, 0x48) 0s ago: executing program 4 (id=5365): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000006440)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000600)={0x34, 0x11, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @uid}, @typed={0x14, 0x1b, 0x0, 0x0, @ipv6=@loopback={0x21}}]}, 0x34}], 0x1}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000040)={'vxcan1\x00', @remote}) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WOWLAN(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x30}}, 0x0) getsockname$packet(r4, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="50000000100001042dbd70000000000000000000", @ANYRES32=r5, @ANYBLOB="000000000000000030001280080001007369740024000280080014002f00000008000300ac"], 0x50}}, 0x0) syz_genetlink_get_family_id$nl80211(0x0, r4) sendmsg$key(r4, &(0x7f0000000100)={0x4, 0x0, &(0x7f00008feff0)={&(0x7f0000000180)=ANY=[], 0x80}}, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=@updpolicy={0x17c, 0x19, 0x1, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @empty}, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0xff}}, [@tmpl={0xc4, 0x5, [{{@in6=@mcast1, 0x4d2, 0x33}, 0xa, @in=@dev={0xac, 0x14, 0x14, 0x28}, 0x3501, 0x1, 0x0, 0x3b, 0x83, 0x5, 0x7}, {{@in6=@local, 0x4d6, 0x3c}, 0xa, @in6=@dev={0xfe, 0x80, '\x00', 0x13}, 0x3502, 0x2, 0x0, 0x7, 0x7f, 0x0, 0x4}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4d3, 0x6c}, 0x2, @in=@private=0xa010100, 0x3502, 0x5, 0x0, 0xd1, 0xe, 0x47b, 0x3}]}]}, 0x17c}}, 0x4000) kernel console output (not intermixed with test programs): 636] netlink: 'syz.0.3237': attribute type 1 has an invalid length. [ 374.659872][T17366] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 374.708151][T17642] IPVS: persistence engine module ip_vs_pe_ not found [ 374.718843][ T12] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.744090][T17642] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3240'. [ 374.771133][ T12] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.783529][T17645] netlink: 28 bytes leftover after parsing attributes in process `syz.8.3241'. [ 374.793492][ T12] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.819568][ T12] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.918553][T17650] syzkaller0: entered promiscuous mode [ 374.924076][T17650] syzkaller0: entered allmulticast mode [ 375.107937][ T8896] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 375.120154][ T8896] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 375.167588][T17669] IPv6: NLM_F_REPLACE set, but no existing node found! [ 375.185685][T17667] xt_hashlimit: size too large, truncated to 1048576 [ 375.217978][T17669] bridge0: port 3(vlan2) entered blocking state [ 375.226598][T17669] bridge0: port 3(vlan2) entered disabled state [ 375.233014][T17669] vlan2: entered allmulticast mode [ 375.259089][T17669] bridge0: entered allmulticast mode [ 375.517954][T17669] vlan2: left allmulticast mode [ 375.522834][T17669] bridge0: left allmulticast mode [ 375.587556][ T8899] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 375.614179][ T8899] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 375.663018][T17676] __nla_validate_parse: 4 callbacks suppressed [ 375.663034][T17676] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3251'. [ 375.707121][T17674] syzkaller1: entered promiscuous mode [ 375.716095][T17674] syzkaller1: entered allmulticast mode [ 375.905152][T17682] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3153'. [ 375.944050][T17682] netlink: 6 bytes leftover after parsing attributes in process `syz.7.3153'. [ 376.005742][ T5837] Bluetooth: hci3: command tx timeout [ 376.297488][T17707] vlan2: entered promiscuous mode [ 376.313517][T17707] vlan2: entered allmulticast mode [ 376.331944][T17707] hsr_slave_1: entered allmulticast mode [ 376.394074][T17710] lo speed is unknown, defaulting to 1000 [ 376.501356][T17716] netlink: 'syz.0.3261': attribute type 1 has an invalid length. [ 376.719756][ T5848] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 376.731130][ T5848] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 376.739264][ T5848] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 376.750289][ T5848] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 376.760238][ T5848] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 376.803441][T17730] netlink: 220 bytes leftover after parsing attributes in process `syz.0.3264'. [ 376.973187][T17736] netlink: 'syz.0.3269': attribute type 13 has an invalid length. [ 376.981894][T17736] netlink: 'syz.0.3269': attribute type 17 has an invalid length. [ 377.069626][T17736] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 377.105077][T17736] netlink: 'syz.0.3269': attribute type 13 has an invalid length. [ 377.113993][T17736] netlink: 'syz.0.3269': attribute type 17 has an invalid length. [ 377.127989][T17722] lo speed is unknown, defaulting to 1000 [ 377.128370][T17736] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3269'. [ 377.135419][T17710] hsr0 speed is unknown, defaulting to 1000 [ 377.143233][T17736] netlink: 'syz.0.3269': attribute type 13 has an invalid length. [ 377.159722][T17736] netlink: 'syz.0.3269': attribute type 17 has an invalid length. [ 377.179884][T17736] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3269'. [ 377.318006][T17753] netlink: 'syz.0.3272': attribute type 1 has an invalid length. [ 377.327441][T17753] netlink: 13486 bytes leftover after parsing attributes in process `syz.0.3272'. [ 377.337633][T17753] netlink: 'syz.0.3272': attribute type 1 has an invalid length. [ 377.345700][T17753] netlink: 13486 bytes leftover after parsing attributes in process `syz.0.3272'. [ 377.401091][T17755] RDS: rds_bind could not find a transport for ::ffff:10.1.1.2, load rds_tcp or rds_rdma? [ 377.642110][T17767] IPVS: set_ctl: invalid protocol: 46 127.0.0.1:20000 [ 377.713656][T17722] hsr0 speed is unknown, defaulting to 1000 [ 377.896887][T17773] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3278'. [ 378.117738][T17778] bridge0: port 3(batadv1) entered blocking state [ 378.135777][T17778] bridge0: port 3(batadv1) entered disabled state [ 378.144101][T17783] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3282'. [ 378.159508][T17778] batadv1: entered allmulticast mode [ 378.169360][T17778] batadv1: entered promiscuous mode [ 378.369759][T17722] chnl_net:caif_netlink_parms(): no params data found [ 378.568617][T17806] IPVS: set_ctl: invalid protocol: 1 172.20.20.68:20003 [ 378.585765][ T12] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 378.595330][ T12] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 378.683658][T17722] bridge0: port 1(bridge_slave_0) entered blocking state [ 378.694885][T17722] bridge0: port 1(bridge_slave_0) entered disabled state [ 378.702516][T17722] bridge_slave_0: entered allmulticast mode [ 378.712027][T17722] bridge_slave_0: entered promiscuous mode [ 378.734508][T17722] bridge0: port 2(bridge_slave_1) entered blocking state [ 378.747036][T17722] bridge0: port 2(bridge_slave_1) entered disabled state [ 378.756582][T17722] bridge_slave_1: entered allmulticast mode [ 378.764320][T17722] bridge_slave_1: entered promiscuous mode [ 378.806762][ T5848] Bluetooth: hci1: command tx timeout [ 378.849866][T17812] tipc: Started in network mode [ 378.854980][T17812] tipc: Node identity e6ea611f8efe, cluster identity 4711 [ 378.862280][T17812] tipc: Enabled bearer , priority 0 [ 378.880825][T17722] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 378.893140][T17812] syzkaller0: entered promiscuous mode [ 378.903073][T17812] syzkaller0: entered allmulticast mode [ 378.924145][T17722] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 379.122639][T17722] team0: Port device team_slave_0 added [ 379.152264][T17722] team0: Port device team_slave_1 added [ 379.160912][T17811] tipc: Resetting bearer [ 379.187435][T17811] tipc: Disabling bearer [ 379.273415][T17722] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 379.312452][T17722] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 379.351255][T17722] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 379.373200][T17722] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 379.380509][T17722] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 379.418234][T17722] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 379.449386][T17852] dvmrp1: entered allmulticast mode [ 379.607258][T17722] hsr_slave_0: entered promiscuous mode [ 379.627405][T17722] hsr_slave_1: entered promiscuous mode [ 379.633901][T17722] debugfs: 'hsr0' already exists in 'hsr' [ 379.640556][T17722] Cannot create hsr debugfs directory [ 379.679219][T17862] veth3: entered allmulticast mode [ 379.890222][T17881] validate_nla: 4 callbacks suppressed [ 379.890238][T17881] netlink: 'syz.4.3316': attribute type 1 has an invalid length. [ 380.009158][T17880] syzkaller0: entered promiscuous mode [ 380.016071][T17880] syzkaller0: entered allmulticast mode [ 380.032433][T17887] tipc: Started in network mode [ 380.041930][T17887] tipc: Node identity , cluster identity 4711 [ 380.049842][T17887] tipc: Failed to obtain node identity [ 380.060242][T17887] tipc: Enabling of bearer rejected, failed to enable media [ 380.898941][ T5848] Bluetooth: hci1: command tx timeout [ 381.499232][T17722] netdevsim netdevsim8 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 381.523483][T17722] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 381.719305][T17722] netdevsim netdevsim8 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 381.735227][T17722] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 381.751049][T17912] __nla_validate_parse: 10 callbacks suppressed [ 381.751063][T17912] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3326'. [ 381.859808][T17722] netdevsim netdevsim8 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 381.877458][T17722] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 381.924487][T17927] IPv6: NLM_F_CREATE should be specified when creating new route [ 381.946275][T17929] bond1: invalid ARP target 0.0.0.0 specified for addition [ 381.953575][T17929] bond1: option arp_ip_target: invalid value (0) [ 381.962520][T17929] bond1 (unregistering): Released all slaves [ 382.069744][T17722] netdevsim netdevsim8 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 382.081005][T17722] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.267772][T17722] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 382.278521][T17722] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 382.294082][T17722] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 382.306297][T17722] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 382.417430][T17722] 8021q: adding VLAN 0 to HW filter on device bond0 [ 382.442606][T17722] 8021q: adding VLAN 0 to HW filter on device team0 [ 382.458247][ T8896] bridge0: port 1(bridge_slave_0) entered blocking state [ 382.465416][ T8896] bridge0: port 1(bridge_slave_0) entered forwarding state [ 382.489419][ T8899] bridge0: port 2(bridge_slave_1) entered blocking state [ 382.496594][ T8899] bridge0: port 2(bridge_slave_1) entered forwarding state [ 382.778530][T17976] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3339'. [ 382.816259][T17722] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 382.903063][T17983] netlink: 'syz.7.3341': attribute type 30 has an invalid length. [ 382.939600][T17985] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3342'. [ 382.966445][ T5848] Bluetooth: hci1: command tx timeout [ 382.966745][T17983] bond1: option arp_missed_max: invalid value (0) [ 382.979440][T17983] bond1: option arp_missed_max: allowed values 1 - 255 [ 382.991358][T17983] bond1 (unregistering): Released all slaves [ 383.108604][T17993] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3343'. [ 383.133339][T17996] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3344'. [ 383.267348][T18010] netlink: 'syz.4.3347': attribute type 12 has an invalid length. [ 383.280342][T18010] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3347'. [ 383.408781][T18018] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3350'. [ 383.463302][T18020] tipc: New replicast peer: 255.255.255.255 [ 383.479502][T18020] tipc: Enabled bearer , priority 10 [ 383.509779][T18020] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3352'. [ 383.521425][T18030] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3353'. [ 383.704338][T17722] veth0_vlan: entered promiscuous mode [ 383.732932][T17722] veth1_vlan: entered promiscuous mode [ 383.824395][T17722] veth0_macvtap: entered promiscuous mode [ 383.870872][T17722] veth1_macvtap: entered promiscuous mode [ 383.937905][T17722] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 383.958876][T17722] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 383.995572][T18060] netlink: 'syz.4.3362': attribute type 2 has an invalid length. [ 384.022810][ T13] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.051152][T18060] 9: entered promiscuous mode [ 384.067920][ T30] audit: type=1107 audit(1763089862.033:8): pid=18059 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='Ńtc*j5 [ 384.067920][ T30] n@c AVE!&eWCQb'=ͱ!\0Ky_mD_5rk_6gfTe`]6FXwJ61 +7ج(= X> °T&2#*ޮ&RJh6;%A:z/' [ 384.116636][T18061] bond1: Unable to set down delay as MII monitoring is disabled [ 384.127510][T18061] bond1 (unregistering): Released all slaves [ 384.154229][ T13] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.179463][T18071] netlink: 'syz.1.3365': attribute type 3 has an invalid length. [ 384.199731][ T13] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.215930][ T13] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.295818][ T8903] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 384.303775][ T8903] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 384.329697][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 384.337919][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 384.389600][T18073] netlink: 60 bytes leftover after parsing attributes in process `syz.8.3253'. [ 384.692212][T18079] syzkaller1: entered promiscuous mode [ 384.698639][T18079] syzkaller1: entered allmulticast mode [ 384.758416][T18080] 8021q: adding VLAN 0 to HW filter on device bond1 [ 384.879909][T18094] syz_tun: entered allmulticast mode [ 384.917396][T18092] syz_tun: left allmulticast mode [ 385.048851][ T5848] Bluetooth: hci1: command tx timeout [ 385.361898][T18126] lo speed is unknown, defaulting to 1000 [ 385.622908][T18143] netlink: 'syz.4.3388': attribute type 1 has an invalid length. [ 385.792738][T18149] bond3: (slave bridge2): making interface the new active one [ 385.842152][T18149] bond3: (slave bridge2): Enslaving as an active interface with an up link [ 385.898234][T18126] hsr0 speed is unknown, defaulting to 1000 [ 385.940416][T18158] syzkaller1: entered promiscuous mode [ 385.979810][T18158] syzkaller1: entered allmulticast mode [ 386.336577][T18166] bridge0: port 2(bridge_slave_1) entered disabled state [ 386.344297][T18166] bridge0: port 1(bridge_slave_0) entered disabled state [ 386.547933][T18166] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 386.578932][T18166] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 386.938198][ T8897] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 386.961726][ T8897] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 386.972562][ T8897] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 386.982874][ T8897] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 386.993647][ T8897] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 387.003343][ T8897] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 387.045888][ T8897] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 387.055931][ T8897] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 387.074302][T18198] __nla_validate_parse: 4 callbacks suppressed [ 387.074316][T18198] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3400'. [ 387.115488][T18197] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3400'. [ 387.172773][T18197] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3400'. [ 387.188923][T18200] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3401'. [ 387.199409][T18200] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3401'. [ 387.299688][T18207] xt_NFQUEUE: number of total queues is 0 [ 387.313083][T18207] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 387.541143][T18218] netlink: 'syz.1.3407': attribute type 1 has an invalid length. [ 387.602788][T18218] netlink: 'syz.1.3407': attribute type 2 has an invalid length. [ 387.656191][T18218] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3407'. [ 387.673672][T18218] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3407'. [ 388.068288][T18249] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3415'. [ 388.094647][T18249] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3415'. [ 388.794820][T18307] netlink: 138 bytes leftover after parsing attributes in process `syz.0.3436'. [ 388.938260][T18320] tap0: tun_chr_ioctl cmd 1074025672 [ 388.975621][T18320] tap0: ignored: set checksum disabled [ 389.045093][T18327] netlink: 'syz.8.3441': attribute type 13 has an invalid length. [ 389.156864][T18333] IPVS: set_ctl: invalid protocol: 43 0.0.0.0:20001 [ 389.614192][T18340] vxcan1 speed is unknown, defaulting to 1000 [ 389.640656][T18340] vxcan1 speed is unknown, defaulting to 1000 [ 389.675891][T18340] vxcan1 speed is unknown, defaulting to 1000 [ 389.907775][T18340] infiniband syz2: set down [ 389.912382][T18340] infiniband syz2: added vxcan1 [ 389.924237][T11768] vxcan1 speed is unknown, defaulting to 1000 [ 389.962361][T18340] RDS/IB: syz2: added [ 389.966501][T18340] smc: adding ib device syz2 with port count 1 [ 389.972760][T18340] smc: ib device syz2 port 1 has no pnetid [ 389.980283][T11768] vxcan1 speed is unknown, defaulting to 1000 [ 389.994603][T18340] vxcan1 speed is unknown, defaulting to 1000 [ 390.313875][T18376] bond4: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 390.330726][T18376] bond4 (unregistering): Released all slaves [ 390.364212][T18340] vxcan1 speed is unknown, defaulting to 1000 [ 390.400878][T18378] netlink: 'syz.0.3454': attribute type 2 has an invalid length. [ 390.871281][T18340] vxcan1 speed is unknown, defaulting to 1000 [ 390.976828][T18413] netlink: 'syz.4.3463': attribute type 5 has an invalid length. [ 391.184876][T18340] vxcan1 speed is unknown, defaulting to 1000 [ 391.463000][T18340] vxcan1 speed is unknown, defaulting to 1000 [ 391.712982][T18428] A link change request failed with some changes committed already. Interface gre1 may have been left with an inconsistent configuration, please check. [ 391.824482][T18430] bond0: (slave bond_slave_1): Releasing backup interface [ 391.896257][T18436] syz_tun: entered allmulticast mode [ 391.914505][T18431] syz_tun: left allmulticast mode [ 391.977699][T18340] vxcan1 speed is unknown, defaulting to 1000 [ 391.981313][T18441] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 392.096405][T18453] __nla_validate_parse: 10 callbacks suppressed [ 392.096422][T18453] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3475'. [ 392.115520][T18448] netlink: 'syz.8.3476': attribute type 10 has an invalid length. [ 392.320762][T18459] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 392.410565][T18464] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3480'. [ 392.427438][T18464] batadv1: left allmulticast mode [ 392.449075][T18464] batadv1: left promiscuous mode [ 392.457805][T18466] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3479'. [ 392.459192][T18464] bridge0: port 3(batadv1) entered disabled state [ 392.491274][T18464] bridge_slave_1: left allmulticast mode [ 392.498101][T18464] bridge_slave_1: left promiscuous mode [ 392.504046][T18464] bridge0: port 2(bridge_slave_1) entered disabled state [ 392.504937][T18468] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 392.523633][T18464] bridge_slave_0: left allmulticast mode [ 392.531316][T18464] bridge_slave_0: left promiscuous mode [ 392.538938][T18464] bridge0: port 1(bridge_slave_0) entered disabled state [ 392.637776][T18340] vxcan1 speed is unknown, defaulting to 1000 [ 392.753995][T18480] IPVS: Error connecting to the multicast addr [ 392.945580][T18493] vlan1: entered allmulticast mode [ 392.950723][T18493] veth0_vlan: entered allmulticast mode [ 393.061463][T18496] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3491'. [ 393.089460][T18500] FAULT_INJECTION: forcing a failure. [ 393.089460][T18500] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 393.105611][T18496] bridge0: port 2(bridge_slave_1) entered disabled state [ 393.154646][T18500] CPU: 0 UID: 0 PID: 18500 Comm: syz.0.3492 Not tainted syzkaller #0 PREEMPT(full) [ 393.154669][T18500] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 393.154680][T18500] Call Trace: [ 393.154687][T18500] [ 393.154695][T18500] dump_stack_lvl+0x189/0x250 [ 393.154720][T18500] ? __pfx____ratelimit+0x10/0x10 [ 393.154742][T18500] ? __pfx_dump_stack_lvl+0x10/0x10 [ 393.154763][T18500] ? __pfx__printk+0x10/0x10 [ 393.154781][T18500] ? __might_fault+0xb0/0x130 [ 393.154814][T18500] should_fail_ex+0x414/0x560 [ 393.154843][T18500] _copy_from_user+0x2d/0xb0 [ 393.154865][T18500] do_ipv6_getsockopt+0x2b0/0x2300 [ 393.154893][T18500] ? __pfx_do_ipv6_getsockopt+0x10/0x10 [ 393.154911][T18500] ? __lock_acquire+0xab9/0xd20 [ 393.154939][T18500] ? __might_fault+0xb0/0x130 [ 393.154963][T18500] ? _parse_integer_limit+0x1ae/0x1f0 [ 393.154978][T18500] ? aa_label_sk_perm+0x4cd/0x630 [ 393.155009][T18500] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 393.155055][T18500] ipv6_getsockopt+0xbd/0x290 [ 393.155077][T18500] ? __pfx_ipv6_getsockopt+0x10/0x10 [ 393.155099][T18500] ? __might_fault+0xb0/0x130 [ 393.155124][T18500] rawv6_getsockopt+0x298/0x580 [ 393.155145][T18500] ? __pfx_rawv6_getsockopt+0x10/0x10 [ 393.155167][T18500] ? sock_common_getsockopt+0x2d/0xb0 [ 393.155189][T18500] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 393.155213][T18500] do_sock_getsockopt+0x372/0x450 [ 393.155234][T18500] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 393.155251][T18500] ? do_syscall_64+0xa0/0xfa0 [ 393.155272][T18500] ? __fget_files+0x2a/0x420 [ 393.155288][T18500] ? __fget_files+0x3a0/0x420 [ 393.155302][T18500] ? __fget_files+0x2a/0x420 [ 393.155325][T18500] __x64_sys_getsockopt+0x1a5/0x250 [ 393.155342][T18500] ? do_syscall_64+0xa0/0xfa0 [ 393.155365][T18500] ? do_syscall_64+0xa0/0xfa0 [ 393.155391][T18500] do_syscall_64+0xfa/0xfa0 [ 393.155412][T18500] ? lockdep_hardirqs_on+0x9c/0x150 [ 393.155434][T18500] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 393.155451][T18500] ? clear_bhb_loop+0x60/0xb0 [ 393.155471][T18500] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 393.155488][T18500] RIP: 0033:0x7f74c518f6c9 [ 393.155509][T18500] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 393.155523][T18500] RSP: 002b:00007f74c6098038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 393.155541][T18500] RAX: ffffffffffffffda RBX: 00007f74c53e5fa0 RCX: 00007f74c518f6c9 [ 393.155554][T18500] RDX: 000000000000003d RSI: 0000000000000029 RDI: 0000000000000003 [ 393.155565][T18500] RBP: 00007f74c6098090 R08: 00002000000009c0 R09: 0000000000000000 [ 393.155576][T18500] R10: 0000200000000940 R11: 0000000000000246 R12: 0000000000000001 [ 393.155587][T18500] R13: 00007f74c53e6038 R14: 00007f74c53e5fa0 R15: 00007fff6f6152d8 [ 393.155618][T18500] [ 393.584022][T18518] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 393.600605][T18502] bond0: (slave bond_slave_0): Releasing backup interface [ 393.629695][T18502] bond0: (slave bond_slave_1): Releasing backup interface [ 393.651407][T18502] team0: Port device team_slave_0 removed [ 393.679487][T18502] team0: Port device team_slave_1 removed [ 393.693603][T18502] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 393.707736][T18502] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 393.720030][T18502] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 393.731262][T18502] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 393.747054][T18502] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 393.766592][T18340] vxcan1 speed is unknown, defaulting to 1000 [ 393.938081][T18532] netlink: 'syz.7.3499': attribute type 1 has an invalid length. [ 393.946785][T18532] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3499'. [ 393.991556][T16922] IPVS: starting estimator thread 0... [ 394.087501][T18537] IPVS: using max 27 ests per chain, 64800 per kthread [ 394.146596][T18544] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3502'. [ 394.259505][T18340] vxcan1 speed is unknown, defaulting to 1000 [ 394.305530][T18553] netlink: 'syz.7.3506': attribute type 10 has an invalid length. [ 394.358276][T18557] netlink: 'syz.7.3506': attribute type 10 has an invalid length. [ 394.396901][T18553] team0: Port device dummy0 added [ 394.408387][T18557] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 394.452630][T18557] team0: Failed to send options change via netlink (err -105) [ 394.461591][T18557] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 394.478524][T18557] team0: Port device dummy0 removed [ 394.793055][T18340] vxcan1 speed is unknown, defaulting to 1000 [ 394.817218][T18593] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3516'. [ 394.967527][T18597] syzkaller0: entered promiscuous mode [ 394.973370][T18597] syzkaller0: entered allmulticast mode [ 395.030601][T18602] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3520'. [ 395.076041][T18602] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3520'. [ 395.285634][T18614] netlink: 32 bytes leftover after parsing attributes in process `syz.7.3524'. [ 395.371638][T18626] sctp: [Deprecated]: syz.0.3526 (pid 18626) Use of struct sctp_assoc_value in delayed_ack socket option. [ 395.371638][T18626] Use struct sctp_sack_info instead [ 395.442376][T18626] !: renamed from bond_slave_0 (while UP) [ 395.506252][ T8897] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 395.516624][ T8897] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 395.531802][ T8897] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 395.546181][ T8897] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 395.623487][T18642] IPVS: set_ctl: invalid protocol: 2 224.0.0.1:20003 [ 395.917980][T18660] netlink: 'syz.0.3537': attribute type 21 has an invalid length. [ 395.928775][T18660] netlink: 'syz.0.3537': attribute type 21 has an invalid length. [ 395.937076][T18660] netlink: 'syz.0.3537': attribute type 21 has an invalid length. [ 395.946516][T18660] netlink: 'syz.0.3537': attribute type 21 has an invalid length. [ 395.955685][T18660] netlink: 'syz.0.3537': attribute type 21 has an invalid length. [ 396.334452][T18663] infiniband !yz!: set active [ 396.339481][T18663] infiniband !yz!: added team_slave_0 [ 396.441406][T18683] block nbd1: Unsupported socket: should be TCP or UNIX. [ 396.499182][T18663] RDS/IB: !yz!: added [ 396.520211][T18663] smc: adding ib device !yz! with port count 1 [ 396.550684][T18663] smc: ib device !yz! port 1 has no pnetid [ 396.722475][T18701] bond0: Error: Cannot enslave bond to itself. [ 397.222665][T18734] IPVS: set_ctl: invalid protocol: 135 172.20.20.187:20001 [ 397.351485][T18739] tipc: Enabled bearer , priority 10 [ 397.689784][T18762] team0: Caught tx_queue_len zero misconfig [ 397.794374][T18771] __nla_validate_parse: 41 callbacks suppressed [ 397.794390][T18771] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3569'. [ 397.836082][T18761] bridge: RTM_NEWNEIGH with unconfigured vlan 11 on bridge0 [ 397.844097][T18760] bridge: RTM_NEWNEIGH with unconfigured vlan 11 on bridge0 [ 397.860189][T18775] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3572'. [ 397.989194][T18779] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3574'. [ 398.066891][T18779] xfrm1: entered promiscuous mode [ 398.093533][T18779] xfrm1: entered allmulticast mode [ 398.108107][T18784] x_tables: duplicate underflow at hook 2 [ 398.114148][T18784] netlink: 300 bytes leftover after parsing attributes in process `syz.1.3575'. [ 398.215364][T18789] netlink: 24 bytes leftover after parsing attributes in process `syz.8.3578'. [ 398.328446][T18789] netlink: 830 bytes leftover after parsing attributes in process `syz.8.3578'. [ 398.464674][ T856] tipc: Node number set to 1746166047 [ 398.955805][T18822] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3589'. [ 399.271737][T18840] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3593'. [ 399.281275][T18840] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3593'. [ 399.314503][T18840] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3593'. [ 399.327831][T18804] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 399.640808][T18863] validate_nla: 28 callbacks suppressed [ 399.640825][T18863] netlink: 'syz.4.3600': attribute type 2 has an invalid length. [ 399.985700][T18883] xt_ecn: cannot match TCP bits for non-tcp packets [ 399.992376][T18884] xt_ecn: cannot match TCP bits for non-tcp packets [ 400.570289][T18894] xt_HMARK: spi-set and port-set can't be combined [ 401.188757][T18938] netlink: 'syz.8.3617': attribute type 1 has an invalid length. [ 401.307808][T18943] tipc: Enabling of bearer rejected, failed to enable media [ 401.842083][T18982] netlink: 'syz.8.3632': attribute type 1 has an invalid length. [ 401.915137][T18987] sctp: [Deprecated]: syz.0.3634 (pid 18987) Use of struct sctp_assoc_value in delayed_ack socket option. [ 401.915137][T18987] Use struct sctp_sack_info instead [ 402.715516][T19049] tipc: Enabling of bearer rejected, failed to enable media [ 402.820869][T19063] __nla_validate_parse: 13 callbacks suppressed [ 402.820886][T19063] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3654'. [ 402.838122][T19064] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3653'. [ 402.937121][T19068] netlink: 'syz.7.3654': attribute type 4 has an invalid length. [ 402.976735][T19063] netlink: 2268 bytes leftover after parsing attributes in process `syz.7.3654'. [ 403.273948][T19078] openvswitch: netlink: IP tunnel dst address not specified [ 403.477636][ T8698] syz_tun (unregistering): left promiscuous mode [ 403.534981][T19087] netlink: 80 bytes leftover after parsing attributes in process `syz.7.3663'. [ 403.541250][T19094] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3665'. [ 403.571469][T19093] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3665'. [ 403.679062][ T5837] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 403.688130][ T5837] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 403.696642][ T5837] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 403.710232][ T5837] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 403.727212][ T5837] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 403.798651][T19098] lo speed is unknown, defaulting to 1000 [ 403.901431][T19109] netlink: 'syz.0.3670': attribute type 1 has an invalid length. [ 404.009435][T19113] netlink: 16 bytes leftover after parsing attributes in process `syz.8.3671'. [ 404.148922][T19118] Unsupported ieee802154 address type: 0 [ 404.162351][T19098] hsr0 speed is unknown, defaulting to 1000 [ 404.186941][T19098] vxcan1 speed is unknown, defaulting to 1000 [ 404.235985][ T8903] bond1: left promiscuous mode [ 404.244836][ T8903] bridge0: port 3(bond1) entered disabled state [ 404.289050][ T8903] bridge_slave_0: left allmulticast mode [ 404.309184][ T8903] bridge_slave_0: left promiscuous mode [ 404.319092][ T8903] bridge0: port 1(bridge_slave_0) entered disabled state [ 404.454739][ T8903] ip6gretap0 (unregistering): left promiscuous mode [ 404.638137][ T8903] gretap0 (unregistering): left promiscuous mode [ 404.693539][ T8903] dvmrp0 (unregistering): left allmulticast mode [ 404.773237][ T8903] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 405.111682][ T8903] bond0 (unregistering): (slave 1!): Releasing backup interface [ 405.121007][ T8903] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 405.130614][ T8903] bond0 (unregistering): Released all slaves [ 405.223110][ T8903] bond1 (unregistering): Released all slaves [ 405.316331][ T8903] bond2 (unregistering): (slave veth3): Releasing active interface [ 405.325820][ T8903] bond2 (unregistering): Released all slaves [ 405.338224][ T8903] bond3 (unregistering): Released all slaves [ 405.351113][ T8903] bond4 (unregistering): Released all slaves [ 405.550705][ T8903] : left promiscuous mode [ 405.592885][T19153] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3684'. [ 405.645605][T19153] netlink: 'syz.7.3684': attribute type 2 has an invalid length. [ 405.653349][T19153] netlink: 188 bytes leftover after parsing attributes in process `syz.7.3684'. [ 405.687383][ T8903] : left promiscuous mode [ 405.709478][T19156] netlink: 348 bytes leftover after parsing attributes in process `syz.0.3685'. [ 405.781131][ T5848] Bluetooth: hci4: command tx timeout [ 405.837857][ T8903] tipc: Disabling bearer [ 405.854794][ T8903] tipc: Disabling bearer [ 405.867905][ T8903] tipc: Left network mode [ 405.950236][T19171] syzkaller0: entered promiscuous mode [ 405.964777][T19171] syzkaller0: entered allmulticast mode [ 406.160478][T19182] syzkaller0: entered promiscuous mode [ 406.172052][T19182] syzkaller0: entered allmulticast mode [ 406.227098][T19189] netlink: 'syz.0.3692': attribute type 58 has an invalid length. [ 406.753929][T19098] chnl_net:caif_netlink_parms(): no params data found [ 407.201223][T19098] bridge0: port 1(bridge_slave_0) entered blocking state [ 407.229740][T19098] bridge0: port 1(bridge_slave_0) entered disabled state [ 407.261199][T19098] bridge_slave_0: entered allmulticast mode [ 407.303200][T19098] bridge_slave_0: entered promiscuous mode [ 407.320809][ T8903] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 407.323400][T19237] xt_SECMARK: invalid mode: 9 [ 407.329869][T19238] xt_SECMARK: invalid mode: 9 [ 407.339067][ T8903] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 407.402717][T19238] netlink: 'syz.0.3708': attribute type 1 has an invalid length. [ 407.543164][ T8903] team0 (unregistering): Port device veth0_virt_wifi removed [ 407.684420][ T8903] team0 (unregistering): Port device team_slave_1 removed [ 407.731620][ T8903] team0 (unregistering): Port device team_slave_0 removed [ 407.855520][ T5848] Bluetooth: hci4: command tx timeout [ 407.906407][ T8897] smc: removing ib device syz2 [ 408.098355][T19098] bridge0: port 2(bridge_slave_1) entered blocking state [ 408.125705][T19098] bridge0: port 2(bridge_slave_1) entered disabled state [ 408.136701][T19098] bridge_slave_1: entered allmulticast mode [ 408.148205][T19098] bridge_slave_1: entered promiscuous mode [ 408.285797][T19261] __nla_validate_parse: 3 callbacks suppressed [ 408.285813][T19261] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3711'. [ 408.307800][T19261] ipt_rpfilter: unknown options [ 408.323401][T19249] team0: No ports can be present during mode change [ 408.756309][T19098] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 408.821198][T19098] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 409.120887][T19098] team0: Port device team_slave_0 added [ 409.142634][T19288] syzkaller0: entered promiscuous mode [ 409.159383][T19288] syzkaller0: entered allmulticast mode [ 409.201084][T19098] team0: Port device team_slave_1 added [ 409.628383][T19301] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3726'. [ 409.632990][T19098] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 409.666907][T19098] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 409.737953][T19098] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 409.811081][T19098] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 409.830842][T19098] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 409.904509][T19098] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 409.925426][ T5848] Bluetooth: hci4: command tx timeout [ 409.943795][T19309] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR [ 410.228423][T19326] netlink: 'syz.4.3731': attribute type 24 has an invalid length. [ 410.258366][T19327] netlink: 9740 bytes leftover after parsing attributes in process `syz.7.3733'. [ 410.357533][T19098] hsr_slave_0: entered promiscuous mode [ 410.395926][T19098] hsr_slave_1: entered promiscuous mode [ 410.402264][T19098] debugfs: 'hsr0' already exists in 'hsr' [ 410.427630][T19098] Cannot create hsr debugfs directory [ 410.518411][T19339] netlink: 32 bytes leftover after parsing attributes in process `syz.7.3735'. [ 410.804202][T19348] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3741'. [ 410.816010][T19348] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3741'. [ 411.146512][T19373] netlink: 'syz.0.3747': attribute type 4 has an invalid length. [ 411.192336][T19357] syz.8.3744 (19357) used greatest stack depth: 16056 bytes left [ 411.197319][T19374] netlink: 'syz.0.3747': attribute type 4 has an invalid length. [ 411.319557][T19381] netlink: 92 bytes leftover after parsing attributes in process `syz.4.3751'. [ 411.366235][T19380] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 411.836532][ T8903] IPVS: stop unused estimator thread 0... [ 412.005604][ T5848] Bluetooth: hci4: command tx timeout [ 412.088249][T19428] netlink: 'syz.8.3764': attribute type 13 has an invalid length. [ 412.351985][T19441] pim6reg: entered allmulticast mode [ 412.468389][T19098] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 412.483819][T19098] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 412.505061][ T8893] tipc: Subscription rejected, illegal request [ 412.534229][T19098] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 412.553703][T19450] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3768'. [ 412.554374][T19098] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 412.602285][T19456] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 412.917255][T19473] netlink: 36 bytes leftover after parsing attributes in process `syz.8.3773'. [ 412.946197][T19098] 8021q: adding VLAN 0 to HW filter on device bond0 [ 412.960819][T19473] netlink: 36 bytes leftover after parsing attributes in process `syz.8.3773'. [ 412.987676][T19098] 8021q: adding VLAN 0 to HW filter on device team0 [ 413.030566][ T8890] bridge0: port 1(bridge_slave_0) entered blocking state [ 413.037747][ T8890] bridge0: port 1(bridge_slave_0) entered forwarding state [ 413.063988][ T8893] bridge0: port 2(bridge_slave_1) entered blocking state [ 413.071145][ T8893] bridge0: port 2(bridge_slave_1) entered forwarding state [ 413.259966][T19487] IPVS: set_ctl: invalid protocol: 0 0.32.0.0:51200 [ 413.424664][T19503] __nla_validate_parse: 1 callbacks suppressed [ 413.424680][T19503] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3783'. [ 413.446034][T19503] netlink: 207952 bytes leftover after parsing attributes in process `syz.7.3783'. [ 413.451933][T19504] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3782'. [ 413.540273][T19098] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 413.705577][T19098] veth0_vlan: entered promiscuous mode [ 413.788188][T19098] veth1_vlan: entered promiscuous mode [ 413.844160][T19520] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3791'. [ 413.921674][T19098] veth0_macvtap: entered promiscuous mode [ 413.940574][T19098] veth1_macvtap: entered promiscuous mode [ 413.953886][T19518] tipc: Started in network mode [ 413.971501][T19518] tipc: Node identity 6a29a85590b3, cluster identity 4711 [ 413.984059][T19530] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3792'. [ 413.994919][T19518] tipc: Enabled bearer , priority 0 [ 414.006661][T19530] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3792'. [ 414.025267][T19531] syzkaller0: entered promiscuous mode [ 414.030740][T19531] syzkaller0: entered allmulticast mode [ 414.067469][T19098] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 414.083828][T19518] tipc: Resetting bearer [ 414.103176][T19530] netlink: 'syz.7.3792': attribute type 10 has an invalid length. [ 414.119142][T19530] netlink: 40 bytes leftover after parsing attributes in process `syz.7.3792'. [ 414.126078][T19098] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 414.149668][T19530] dummy0: entered promiscuous mode [ 414.158335][T19530] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 414.189097][T19531] bridge1: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 414.216745][T19516] tipc: Resetting bearer [ 414.248059][T19516] tipc: Disabling bearer [ 414.272948][ T8893] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 414.282903][T19542] netlink: 72 bytes leftover after parsing attributes in process `syz.8.3797'. [ 414.292812][T19542] netlink: 72 bytes leftover after parsing attributes in process `syz.8.3797'. [ 414.302936][T19544] syzkaller0: entered promiscuous mode [ 414.323996][T19544] syzkaller0: entered allmulticast mode [ 414.356297][ T8893] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 414.370716][T19548] ipt_REJECT: TCP_RESET invalid for non-tcp [ 414.379269][ T8893] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 414.413345][T19539] IPVS: set_ctl: invalid protocol: 58 100.1.1.1:20002 [ 414.432750][ T8893] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 414.609757][T19567] netlink: 'syz.7.3801': attribute type 1 has an invalid length. [ 414.617876][T19567] netlink: 'syz.7.3801': attribute type 1 has an invalid length. [ 414.624714][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 414.628476][T19567] netlink: 9172 bytes leftover after parsing attributes in process `syz.7.3801'. [ 414.633384][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 414.716728][T19571] tipc: Started in network mode [ 414.721698][T19571] tipc: Node identity aaaaaaaaaa3, cluster identity 4711 [ 414.746028][T19574] xt_socket: unknown flags 0xe4 [ 414.747848][T19571] tipc: Enabled bearer , priority 2 [ 414.760236][ T8893] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 414.780664][ T8893] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 415.120675][T19592] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 415.135322][T11767] IPVS: starting estimator thread 0... [ 415.192334][T19599] 0: reclassify loop, rule prio 0, protocol 800 [ 415.215103][T19598] 0: reclassify loop, rule prio 0, protocol 800 [ 415.224731][T19602] IPVS: using max 33 ests per chain, 79200 per kthread [ 415.513233][T19627] nftables ruleset with unbound chain [ 415.636673][T19634] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 415.712779][T19634] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 415.769345][T19643] netlink: 'syz.8.3822': attribute type 1 has an invalid length. [ 415.864819][T11769] tipc: Node number set to 10136234 [ 416.103769][T19660] netlink: 'syz.4.3827': attribute type 4 has an invalid length. [ 416.161119][T19655] hsr_slave_0 (unregistering): left promiscuous mode [ 416.202834][T19657] blkio.reset_stats is deprecated [ 416.584023][T19687] gretap1: entered promiscuous mode [ 416.601122][T19687] gretap1: entered allmulticast mode [ 416.752214][T19697] lo: entered promiscuous mode [ 416.771189][T19697] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 417.075425][T19716] bond2: option resend_igmp: invalid value (32767) [ 417.093913][T19716] bond2: option resend_igmp: allowed values 0 - 255 [ 417.116602][T19716] bond2 (unregistering): Released all slaves [ 417.456469][ T13] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 417.482290][ T13] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 417.501658][ T13] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 417.526826][ T13] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 417.775593][T19762] xt_TCPMSS: Only works on TCP SYN packets [ 417.815669][T19764] IPVS: set_ctl: invalid protocol: 92 172.30.0.9:20002 [ 417.855218][T19765] IPVS: set_ctl: invalid protocol: 44 172.20.20.24:20004 [ 417.874272][T19761] tipc: Enabled bearer , priority 0 [ 417.886266][T19761] syzkaller0: entered promiscuous mode [ 417.916337][T19761] syzkaller0: entered allmulticast mode [ 418.021852][T19777] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 418.078137][T19761] tipc: Resetting bearer [ 418.260439][T19759] tipc: Resetting bearer [ 418.340917][T19759] tipc: Disabling bearer [ 418.362255][T19789] tipc: Enabling of bearer rejected, failed to enable media [ 418.481425][T19820] __nla_validate_parse: 17 callbacks suppressed [ 418.481442][T19820] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3866'. [ 418.580189][T19823] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3874'. [ 418.602131][T19824] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3874'. [ 418.700252][T19831] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3877'. [ 418.745980][T19833] xt_l2tp: invalid flags combination: 8 [ 418.828238][T19838] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3881'. [ 418.839162][T19840] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3881'. [ 419.052965][T19852] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3885'. [ 419.119988][T19856] xt_socket: unknown flags 0x50 [ 419.131920][T19856] netlink: 24 bytes leftover after parsing attributes in process `syz.8.3887'. [ 419.141907][T19856] netlink: 24 bytes leftover after parsing attributes in process `syz.8.3887'. [ 419.210393][T19863] netlink: 'syz.1.3890': attribute type 1 has an invalid length. [ 419.273470][T19869] syzkaller0: create flow: hash 3290038533 index 2 [ 419.291532][ T8903] syzkaller0: tun_net_xmit 76 [ 419.298596][ T8903] syzkaller0: tun_net_xmit 48 [ 419.306198][T16922] syzkaller0: tun_net_xmit 76 [ 419.384810][ T856] syzkaller0: tun_net_xmit 76 [ 419.474187][T19877] netlink: 32 bytes leftover after parsing attributes in process `syz.8.3893'. [ 419.484070][T19858] syzkaller0: delete flow: hash 3290038533 index 2 [ 419.495372][T16922] syzkaller0: tun_net_xmit 76 [ 421.085601][T19901] 8021q: adding VLAN 0 to HW filter on device bond1 [ 421.094367][T19901] bond0: (slave bond1): Enslaving as an active interface with an up link [ 421.678815][T19960] netlink: 'syz.7.3916': attribute type 29 has an invalid length. [ 421.863274][T16922] IPVS: starting estimator thread 0... [ 422.017396][T19974] IPVS: using max 30 ests per chain, 72000 per kthread [ 422.201191][T19999] ip6tnl0: Caught tx_queue_len zero misconfig [ 422.481464][T20021] bond0: (slave rose0): Error: Device can not be enslaved while up [ 422.701953][T20044] sctp: [Deprecated]: syz.1.3941 (pid 20044) Use of int in maxseg socket option. [ 422.701953][T20044] Use struct sctp_assoc_value instead [ 422.737968][T20046] netlink: 'syz.0.3945': attribute type 4 has an invalid length. [ 423.033841][T20067] netlink: 'syz.4.3951': attribute type 11 has an invalid length. [ 423.128321][T20073] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 423.224202][T20077] lo speed is unknown, defaulting to 1000 [ 423.410821][T20089] bond2: option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 423.469080][T20089] bond2 (unregistering): Released all slaves [ 423.524095][T20099] pim6reg1: entered promiscuous mode [ 423.533420][T20099] pim6reg1: entered allmulticast mode [ 423.699120][T20107] ip6gre1: entered allmulticast mode [ 423.802717][T20077] hsr0 speed is unknown, defaulting to 1000 [ 423.811917][T20115] netlink: 'syz.7.3965': attribute type 2 has an invalid length. [ 423.828241][T20119] netlink: 'syz.7.3965': attribute type 2 has an invalid length. [ 423.945725][T20120] bond2: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 423.959596][T20120] bond2 (unregistering): Released all slaves [ 424.310619][T20144] __nla_validate_parse: 14 callbacks suppressed [ 424.310636][T20144] netlink: 20 bytes leftover after parsing attributes in process `syz.8.3973'. [ 424.430402][T20149] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3977'. [ 424.438593][T20151] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3976'. [ 424.479816][T20151] team1: entered promiscuous mode [ 424.485683][T20151] team1: entered allmulticast mode [ 424.562276][T20153] sctp: [Deprecated]: syz.4.3978 (pid 20153) Use of int in maxseg socket option. [ 424.562276][T20153] Use struct sctp_assoc_value instead [ 424.819352][T20165] tipc: Enabled bearer , priority 0 [ 424.840397][T20165] tipc: Resetting bearer [ 424.879211][T20164] tipc: Disabling bearer [ 425.094846][T20175] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3986'. [ 425.156407][T20175] xfrm1: entered promiscuous mode [ 425.161761][T20175] xfrm1: entered allmulticast mode [ 425.442813][T20200] bond2: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 425.457808][T20200] bond2 (unregistering): Released all slaves [ 425.567091][T20200] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3993'. [ 425.641907][T20227] syzkaller0: entered promiscuous mode [ 425.650802][T20227] syzkaller0: entered allmulticast mode [ 425.677770][T20200] netlink: 'syz.0.3993': attribute type 4 has an invalid length. [ 426.267060][T20236] netlink: 'syz.8.3999': attribute type 27 has an invalid length. [ 426.291546][T20234] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3998'. [ 426.468754][T20252] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 426.506945][T20252] lo: Caught tx_queue_len zero misconfig [ 426.638694][T20258] netlink: 88 bytes leftover after parsing attributes in process `syz.8.4006'. [ 426.708658][T20264] pim6reg: entered promiscuous mode [ 426.799336][T20269] netlink: 'syz.8.4009': attribute type 15 has an invalid length. [ 426.810302][T20269] netlink: 24 bytes leftover after parsing attributes in process `syz.8.4009'. [ 426.988018][T20284] bond4: Unable to set down delay as MII monitoring is disabled [ 427.012894][T20284] bond4 (unregistering): Released all slaves [ 427.059571][T20290] netlink: 96 bytes leftover after parsing attributes in process `syz.7.4016'. [ 427.186340][T20290] macvtap1: entered promiscuous mode [ 427.191935][T20290] vlan0: entered promiscuous mode [ 427.199266][T20290] macvtap1: entered allmulticast mode [ 427.205040][T20290] vlan0: entered allmulticast mode [ 427.205662][ T5837] Bluetooth: hci4: command 0x0405 tx timeout [ 427.210482][T20290] veth0_vlan: entered allmulticast mode [ 427.221079][T20302] netlink: 'syz.4.4019': attribute type 11 has an invalid length. [ 427.231478][T20302] netlink: 224 bytes leftover after parsing attributes in process `syz.4.4019'. [ 428.217544][T20315] kthread_run failed with err -4 [ 428.294404][T20337] veth0: entered promiscuous mode [ 428.377288][T20335] veth0: left promiscuous mode [ 428.803509][T20367] IPv6: NLM_F_CREATE should be specified when creating new route [ 428.833466][T20367] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 428.840719][T20367] IPv6: NLM_F_CREATE should be set when creating new route [ 462.485589][ T5848] Bluetooth: hci6: command 0x0406 tx timeout [ 482.964694][ T5837] Bluetooth: hci2: command 0x0406 tx timeout [ 493.205960][ T5848] Bluetooth: hci3: command 0x0406 tx timeout [ 496.690451][ T8893] bridge_slave_1: left allmulticast mode [ 496.696725][ T8893] bridge_slave_1: left promiscuous mode [ 496.702397][ T8893] bridge0: port 2(bridge_slave_1) entered disabled state [ 496.711236][ T8893] bridge_slave_0: left allmulticast mode [ 496.717490][ T8893] bridge_slave_0: left promiscuous mode [ 496.723137][ T8893] bridge0: port 1(bridge_slave_0) entered disabled state [ 497.059310][ T8893] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 497.069239][ T8893] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 497.078495][ T8893] bond0 (unregistering): Released all slaves [ 497.128057][ T8893] tipc: Left network mode [ 497.544420][ T8893] hsr_slave_0: left promiscuous mode [ 497.551395][ T8893] hsr_slave_1: left promiscuous mode [ 497.564466][ T8893] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 497.577012][ T8893] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 497.847101][ T8893] team0 (unregistering): Port device team_slave_1 removed [ 497.879771][ T8893] team0 (unregistering): Port device team_slave_0 removed [ 498.413043][ T8893] IPVS: stop unused estimator thread 0... [ 501.092126][T20385] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 501.114016][T20390] ipt_REJECT: ECHOREPLY no longer supported. [ 501.162401][T20394] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input7 [ 501.273148][T20405] __nla_validate_parse: 6 callbacks suppressed [ 501.273164][T20405] netlink: 207952 bytes leftover after parsing attributes in process `syz.4.4051'. [ 501.479409][T20416] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4056'. [ 501.586078][T20430] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4059'. [ 501.846763][T20441] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4062'. [ 501.857229][T20441] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 501.889842][T20441] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4062'. [ 502.045539][T20450] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 502.123709][T20457] netlink: 272 bytes leftover after parsing attributes in process `syz.8.4069'. [ 502.199875][T20464] x_tables: duplicate underflow at hook 1 [ 502.439304][T20483] netlink: 'syz.8.4075': attribute type 1 has an invalid length. [ 502.499060][ T30] audit: type=1800 audit(1763089980.463:9): pid=20487 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.4077" name="memory.events" dev="tmpfs" ino=1545 res=0 errno=0 [ 502.596138][T20483] team0 (unregistering): Port device team_slave_0 removed [ 502.611369][T20483] team0 (unregistering): Port device team_slave_1 removed [ 502.721768][T20498] syzkaller0: entered promiscuous mode [ 502.744685][T20498] syzkaller0: entered allmulticast mode [ 502.826301][T20512] IPv6: sit1: Disabled Multicast RS [ 502.838082][T20512] sit1: entered allmulticast mode [ 503.035705][ T8903] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 503.356443][T20550] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4096'. [ 503.445370][ T5837] Bluetooth: hci1: command 0x0406 tx timeout [ 503.520524][T20558] x_tables: duplicate underflow at hook 1 [ 503.626233][T20569] netlink: 92 bytes leftover after parsing attributes in process `syz.4.4100'. [ 503.883127][T20584] bond3: option mode: invalid value (133) [ 503.890706][T20584] bond3 (unregistering): Released all slaves [ 503.908297][T20582] tipc: Enabled bearer , priority 0 [ 503.915759][T20582] syzkaller0: entered promiscuous mode [ 503.921295][T20582] syzkaller0: entered allmulticast mode [ 503.935066][T20582] tipc: Resetting bearer [ 503.941373][T20582] netlink: 24 bytes leftover after parsing attributes in process `syz.7.4102'. [ 503.963518][T20580] tipc: Resetting bearer [ 503.990061][T20580] tipc: Disabling bearer [ 504.144005][T20597] netlink: 'syz.7.4108': attribute type 22 has an invalid length. [ 504.166079][T20597] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4108'. [ 504.186350][T20597] netlink: 'syz.7.4108': attribute type 22 has an invalid length. [ 504.186555][ T8890] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 504.203571][ T8890] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 504.225859][ T8890] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 504.525027][T20625] bond2: option mode: invalid value (133) [ 504.532259][T20625] bond2 (unregistering): Released all slaves [ 504.620520][T20630] netlink: 'syz.1.4119': attribute type 10 has an invalid length. [ 504.633210][T20630] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 504.713829][T20637] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 504.857551][T20648] x_tables: ip6_tables: NETMAP.0 target: invalid size 40 (kernel) != (user) 0 [ 504.883916][T20650] netlink: 'syz.1.4122': attribute type 1 has an invalid length. [ 505.023464][T20657] 8021q: adding VLAN 0 to HW filter on device bond3 [ 505.066537][T20658] netlink: 'syz.7.4127': attribute type 5 has an invalid length. [ 505.447307][ T5848] Bluetooth: hci4: command 0x0405 tx timeout [ 505.473183][T20706] netlink: 'syz.8.4137': attribute type 1 has an invalid length. [ 505.511089][T20706] 8021q: adding VLAN 0 to HW filter on device bond2 [ 505.602393][T20642] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 505.707690][T20730] netlink: 'syz.0.4143': attribute type 1 has an invalid length. [ 505.720061][T20730] xt_l2tp: wrong L2TP version: 0 [ 506.070653][T20756] dvmrp1: left allmulticast mode [ 506.180791][T20766] "syz.1.4156" (20766) uses obsolete ecb(arc4) skcipher [ 506.292666][T20773] sctp: [Deprecated]: syz.4.4157 (pid 20773) Use of struct sctp_assoc_value in delayed_ack socket option. [ 506.292666][T20773] Use struct sctp_sack_info instead [ 506.379924][T20782] __nla_validate_parse: 8 callbacks suppressed [ 506.379942][T20782] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.4161'. [ 506.543624][T20789] netlink: 'syz.7.4163': attribute type 12 has an invalid length. [ 506.555102][T20791] netlink: 'syz.7.4163': attribute type 1 has an invalid length. [ 506.748688][T20808] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4169'. [ 506.771843][T20808] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4169'. [ 506.781189][T20809] Bluetooth: MGMT ver 1.23 [ 506.871255][T20816] netlink: 32 bytes leftover after parsing attributes in process `syz.7.4170'. [ 506.902755][T20818] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4171'. [ 506.922592][T20816] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4170'. [ 507.021711][T20826] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4173'. [ 507.116170][T20826] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4173'. [ 507.238151][T20839] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4178'. [ 507.244354][T20826] bond3: option mode: invalid value (133) [ 507.279153][T20826] bond3 (unregistering): Released all slaves [ 507.403349][T20835] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4178'. [ 507.437131][T20835] syzkaller0: entered promiscuous mode [ 507.442619][T20835] syzkaller0: entered allmulticast mode [ 507.467193][T20850] gre0: entered promiscuous mode [ 507.490384][T20852] policy can only be matched on NF_INET_PRE_ROUTING [ 507.490399][T20852] unable to load match [ 507.666190][T20866] validate_nla: 6 callbacks suppressed [ 507.666206][T20866] netlink: 'syz.0.4189': attribute type 17 has an invalid length. [ 507.810126][T20875] tipc: Enabled bearer , priority 0 [ 507.820035][T20875] syzkaller0: entered promiscuous mode [ 507.825975][T20875] syzkaller0: entered allmulticast mode [ 507.843560][T20877] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 507.872659][T20877] tipc: Resetting bearer [ 507.884582][T20874] tipc: Resetting bearer [ 507.907466][T20874] tipc: Disabling bearer [ 508.144216][T20885] syzkaller1: entered promiscuous mode [ 508.151007][T20885] syzkaller1: entered allmulticast mode [ 508.432613][T20919] syzkaller0: entered promiscuous mode [ 508.452930][T20919] syzkaller0: entered allmulticast mode [ 508.497280][T20927] openvswitch: netlink: Key 6 has unexpected len 0 expected 2 [ 508.620568][T20934] bridge0: port 3(vlan2) entered blocking state [ 508.622907][T20938] netlink: 'syz.8.4206': attribute type 5 has an invalid length. [ 508.630013][T20934] bridge0: port 3(vlan2) entered disabled state [ 508.642017][T20934] vlan2: entered allmulticast mode [ 508.650583][T20934] bridge0: entered allmulticast mode [ 508.658341][T20934] vlan2: left allmulticast mode [ 508.663221][T20934] bridge0: left allmulticast mode [ 508.925010][ T10] IPVS: starting estimator thread 0... [ 509.014673][T20964] IPVS: using max 31 ests per chain, 74400 per kthread [ 509.180101][T20978] xt_hashlimit: size too large, truncated to 1048576 [ 509.472847][T20996] netlink: 'syz.0.4224': attribute type 75 has an invalid length. [ 509.571710][T21007] syzkaller0: entered promiscuous mode [ 509.587660][T21007] syzkaller0: entered allmulticast mode [ 509.600252][T21010] netlink: 'syz.4.4228': attribute type 39 has an invalid length. [ 509.613840][T21013] IPVS: set_ctl: invalid protocol: 117 172.20.20.20:20000 [ 509.954352][ T30] audit: type=1107 audit(1763089987.913:10): pid=21027 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='b#Sh8"5(9 *$KW_d_=~Ƥn@6![?N{FS6]R' w7' [ 509.976523][T21033] netlink: 'syz.1.4239': attribute type 1 has an invalid length. [ 510.021946][T21033] 8021q: adding VLAN 0 to HW filter on device bond4 [ 510.066950][T21039] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 510.102964][T21039] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 510.153527][T21039] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 510.164067][T21039] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 510.388322][T21061] bond2: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 510.408750][T21061] bond2 (unregistering): Released all slaves [ 510.530116][T21068] bridge5: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 510.561279][T21069] bridge6: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 510.595684][T21077] netlink: 'syz.1.4250': attribute type 4 has an invalid length. [ 510.597878][T21074] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 510.710915][T21083] bond5 (unregistering): Released all slaves [ 511.095438][T21110] netlink: 'syz.0.4259': attribute type 3 has an invalid length. [ 511.103198][T21110] netlink: 'syz.0.4259': attribute type 2 has an invalid length. [ 511.722348][T21143] __nla_validate_parse: 51 callbacks suppressed [ 511.722364][T21143] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4266'. [ 511.746596][T21143] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4266'. [ 511.755613][T21145] openvswitch: netlink: Message has 536 unknown bytes. [ 511.755646][T21145] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 511.976984][T21155] "syz.7.4270" (21155) uses obsolete ecb(arc4) skcipher [ 512.164340][T21162] veth0: entered promiscuous mode [ 512.198710][T21160] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4272'. [ 512.292499][T21163] veth0: left promiscuous mode [ 512.484555][ T8890] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 512.523619][ T8890] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 512.759388][T21199] delete_channel: no stack [ 512.958232][T21217] netlink: 104 bytes leftover after parsing attributes in process `syz.0.4289'. [ 513.251109][T21233] lo speed is unknown, defaulting to 1000 [ 513.310642][T21236] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4294'. [ 513.325126][T21242] sock: sock_timestamping_bind_phc: sock not bind to device [ 513.375364][T21247] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4293'. [ 513.386386][T21245] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4297'. [ 513.862624][T21270] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4305'. [ 513.955311][T21277] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 514.154375][T21288] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4309'. [ 514.239477][T21287] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 514.363698][T21305] netlink: 164 bytes leftover after parsing attributes in process `syz.4.4313'. [ 514.443648][T21307] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 514.452364][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 514.600950][T21319] netlink: 'syz.1.4318': attribute type 11 has an invalid length. [ 515.038895][T21342] nbd2: detected capacity change from 0 to 63 [ 515.149081][ T5848] block nbd2: Receive control failed (result -32) [ 515.150981][T21350] IPVS: set_ctl: invalid protocol: 1 0.0.0.0:20003 [ 515.267275][T21363] gtp0: entered promiscuous mode [ 515.272247][T21363] gtp0: entered allmulticast mode [ 515.287385][T21362] IPVS: set_ctl: invalid protocol: 120 255.255.255.255:20003 [ 515.439635][T21370] netlink: 'syz.0.4335': attribute type 5 has an invalid length. [ 515.639947][T21389] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 515.650125][T21389] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 515.738985][T21391] netlink: 'syz.0.4343': attribute type 7 has an invalid length. [ 515.824028][T21396] netlink: 'syz.0.4343': attribute type 24 has an invalid length. [ 516.060484][T21401] syzkaller0: entered promiscuous mode [ 516.068257][T21401] syzkaller0: entered allmulticast mode [ 516.372841][T21409] bond3: entered promiscuous mode [ 516.386711][T21409] bond3: entered allmulticast mode [ 516.399662][T21409] 8021q: adding VLAN 0 to HW filter on device bond3 [ 516.469740][T21422] netlink: 'syz.8.4353': attribute type 29 has an invalid length. [ 516.611882][T21430] IPVS: set_ctl: invalid protocol: 189 172.20.20.0:20002 [ 516.638484][T21424] tls_set_device_offload: netdev not found [ 516.661980][T21435] tipc: Enabled bearer , priority 0 [ 516.784129][T21429] tipc: Disabling bearer [ 516.817108][T21447] netlink: 'syz.1.4360': attribute type 1 has an invalid length. [ 516.913420][T21447] bond5: entered promiscuous mode [ 516.919140][T21447] bond5: entered allmulticast mode [ 516.925717][T21447] 8021q: adding VLAN 0 to HW filter on device bond5 [ 516.957227][T21448] bridge0: port 2(bridge_slave_1) entered disabled state [ 517.089827][T21467] __nla_validate_parse: 11 callbacks suppressed [ 517.089845][T21467] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4362'. [ 517.328620][T21483] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4370'. [ 517.451732][T21494] veth0: entered promiscuous mode [ 517.468634][T21494] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4377'. [ 517.539952][T21494] veth0 (unregistering): left promiscuous mode [ 517.772151][T21519] netlink: 'syz.4.4383': attribute type 32 has an invalid length. [ 517.795850][T21521] netlink: 'syz.4.4383': attribute type 32 has an invalid length. [ 517.811157][T21519] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4383'. [ 517.831551][T21521] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4383'. [ 517.892646][T21519] bond4: option coupled_control: invalid value (52) [ 517.934212][T21519] bond4 (unregistering): Released all slaves [ 517.982004][T21521] bond4: option coupled_control: invalid value (52) [ 517.993069][T21521] bond4 (unregistering): Released all slaves [ 518.163557][T21544] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4388'. [ 518.387635][T21549] netlink: 'syz.4.4390': attribute type 4 has an invalid length. [ 518.500185][T21569] netlink: del zone limit has 4 unknown bytes [ 518.535627][T21573] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4396'. [ 518.643252][T21580] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4398'. [ 518.666099][T21580] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4398'. [ 518.711404][T21591] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4399'. [ 519.076031][T21615] bond0: (slave bond_slave_1): Releasing backup interface [ 519.740309][T21663] bridge_slave_1: left allmulticast mode [ 519.751018][T21663] bridge_slave_1: left promiscuous mode [ 519.776876][T21663] bridge0: port 2(bridge_slave_1) entered disabled state [ 519.802867][T21663] bridge_slave_0: left allmulticast mode [ 519.820083][T21663] bridge_slave_0: left promiscuous mode [ 519.843721][T21663] bridge0: port 1(bridge_slave_0) entered disabled state [ 520.707431][T21736] netlink: 'syz.7.4437': attribute type 2 has an invalid length. [ 520.767184][T21736] 9: entered promiscuous mode [ 521.015151][T21753] netlink: 'syz.4.4441': attribute type 4 has an invalid length. [ 521.119000][T21759] RDS: rds_bind could not find a transport for ::ffff:100.1.1.0, load rds_tcp or rds_rdma? [ 521.337259][T21781] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 521.360191][T21779] syzkaller0: entered promiscuous mode [ 521.367420][T21779] syzkaller0: entered allmulticast mode [ 521.426306][T21786] x_tables: duplicate underflow at hook 4 [ 521.595168][T21798] bond4: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-xor(2) [ 521.607063][T21798] bond4 (unregistering): Released all slaves [ 521.760056][T21802] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 521.816333][T21806] tipc: Enabled bearer , priority 0 [ 521.823440][T21806] syzkaller0: entered promiscuous mode [ 521.829555][T21806] syzkaller0: entered allmulticast mode [ 521.839235][T21806] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 521.876605][T21806] tipc: Resetting bearer [ 521.883299][T21806] netlink: 'syz.4.4457': attribute type 1 has an invalid length. [ 521.913363][T21806] veth1: entered promiscuous mode [ 521.969839][T21805] tipc: Resetting bearer [ 521.985104][T21805] tipc: Disabling bearer [ 522.136414][T21821] ipt_ECN: cannot use operation on non-tcp rule [ 522.365830][T21834] IPVS: set_ctl: invalid protocol: 47 10.1.1.0:20004 [ 522.637090][T21856] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 522.656064][T21856] netlink: 'syz.4.4475': attribute type 1 has an invalid length. [ 522.676890][T21860] __nla_validate_parse: 147 callbacks suppressed [ 522.676905][T21860] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4477'. [ 522.726094][T21856] ip6erspan0: entered promiscuous mode [ 522.804238][T21868] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4479'. [ 522.850392][T21868] bond2: (slave gre0): Device is not bonding slave [ 522.865517][T21868] bond2: option active_slave: invalid value (gre0) [ 522.900640][T21868] bond2 (unregistering): Released all slaves [ 523.053443][T21885] ipt_rpfilter: unknown options [ 523.304099][T21900] netlink: 'syz.7.4487': attribute type 2 has an invalid length. [ 523.357520][T21904] netlink: 'syz.4.4488': attribute type 1 has an invalid length. [ 523.445484][T21909] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address [ 523.457904][T21909] bond4: (slave vxcan3): Error -95 calling set_mac_address [ 523.519006][T21904] gretap1: entered promiscuous mode [ 523.536922][T21904] bond4: (slave gretap1): making interface the new active one [ 523.548453][T21904] bond4: (slave gretap1): Enslaving as an active interface with an up link [ 523.565781][T21909] macvlan2: entered promiscuous mode [ 523.571270][T21909] macvlan2: entered allmulticast mode [ 523.577834][T21909] bond4: entered promiscuous mode [ 523.586441][T21909] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 523.602309][T21909] bond4: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap1 [ 523.617618][T21909] bond4: left promiscuous mode [ 523.639609][T21922] netlink: 516 bytes leftover after parsing attributes in process `syz.8.4494'. [ 523.742491][T21926] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4496'. [ 523.797217][T21926] 8021q: adding VLAN 0 to HW filter on device bond5 [ 524.061862][T21948] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4501'. [ 524.071319][T21948] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4501'. [ 524.089318][T21938] sctp: [Deprecated]: syz.4.4499 (pid 21938) Use of int in max_burst socket option deprecated. [ 524.089318][T21938] Use struct sctp_assoc_value instead [ 524.233048][T21955] netlink: 'syz.1.4502': attribute type 1 has an invalid length. [ 524.255442][T21955] netlink: 'syz.1.4502': attribute type 1 has an invalid length. [ 524.263240][T21955] netlink: 9172 bytes leftover after parsing attributes in process `syz.1.4502'. [ 524.287324][T21956] ipt_rpfilter: unknown options [ 524.347028][T21961] syzkaller0: entered promiscuous mode [ 524.367631][T21961] syzkaller0: entered allmulticast mode [ 524.400120][T21964] veth3: entered allmulticast mode [ 524.506175][T21968] tipc: Enabled bearer , priority 0 [ 524.526141][T21968] syzkaller0: entered promiscuous mode [ 524.531627][T21968] syzkaller0: entered allmulticast mode [ 524.594725][T21968] tipc: Resetting bearer [ 524.611615][T21967] tipc: Resetting bearer [ 524.692158][T21967] tipc: Disabling bearer [ 524.845470][T21987] netlink: 'syz.0.4511': attribute type 1 has an invalid length. [ 525.085245][T22007] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4516'. [ 525.151797][T22018] netlink: 44 bytes leftover after parsing attributes in process `syz.8.4517'. [ 525.475437][T22035] SET target dimension over the limit! [ 525.976119][T22070] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4533'. [ 525.992141][T22070] netlink: 'syz.1.4533': attribute type 1 has an invalid length. [ 526.091507][T22077] lo: entered allmulticast mode [ 526.148062][T22078] lo: left allmulticast mode [ 526.296665][T22092] netlink: 'syz.0.4541': attribute type 16 has an invalid length. [ 526.319076][T22092] netlink: 'syz.0.4541': attribute type 17 has an invalid length. [ 526.329392][T22099] netlink: 'syz.7.4539': attribute type 1 has an invalid length. [ 526.339407][T22095] tipc: Enabled bearer , priority 0 [ 526.409223][T22092] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 526.445995][T22096] syzkaller0: entered promiscuous mode [ 526.452542][T22096] syzkaller0: entered allmulticast mode [ 526.545768][T22095] tipc: Resetting bearer [ 526.623948][T22112] netlink: 'syz.0.4544': attribute type 1 has an invalid length. [ 526.640512][T22095] tipc: Disabling bearer [ 526.673911][T22124] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 526.702360][T22112] 8021q: adding VLAN 0 to HW filter on device bond2 [ 526.760921][T22120] bond6: option miimon: invalid value (18446744073709551585) [ 526.769867][T22120] bond6: option miimon: allowed values 0 - 2147483647 [ 526.781999][T22120] bond6 (unregistering): Released all slaves [ 526.829852][T22119] tipc: Enabled bearer , priority 0 [ 526.950241][T22119] syzkaller0: entered promiscuous mode [ 526.955876][T22119] syzkaller0: entered allmulticast mode [ 526.962143][T22119] tipc: Resetting bearer [ 527.009683][T22114] tipc: Resetting bearer [ 527.036152][T22146] netlink: 'syz.1.4554': attribute type 1 has an invalid length. [ 528.363745][T22114] tipc: Disabling bearer [ 528.373281][T22144] syzkaller1: entered promiscuous mode [ 528.379278][T22144] syzkaller1: entered allmulticast mode [ 528.540780][T22162] __nla_validate_parse: 7 callbacks suppressed [ 528.540796][T22162] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4557'. [ 528.561162][T22164] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input8 [ 528.628020][T22173] netlink: 'syz.7.4556': attribute type 9 has an invalid length. [ 528.636748][T22173] netlink: 'syz.7.4556': attribute type 11 has an invalid length. [ 528.661040][T22173] netlink: 'syz.7.4556': attribute type 12 has an invalid length. [ 528.682614][T22167] netlink: 44 bytes leftover after parsing attributes in process `syz.7.4556'. [ 528.690239][T22173] netlink: 210060 bytes leftover after parsing attributes in process `syz.7.4556'. [ 528.713951][T22173] openvswitch: netlink: Message has 4 unknown bytes. [ 528.775865][T22181] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4561'. [ 529.023967][T22200] 8021q: VLANs not supported on vcan0 [ 529.259582][T22223] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4574'. [ 529.293638][T22223] netlink: 56 bytes leftover after parsing attributes in process `syz.8.4574'. [ 529.310348][T22226] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4576'. [ 529.319755][T22226] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4576'. [ 529.322628][T22223] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4574'. [ 529.330541][T22226] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4576'. [ 529.840589][T22271] netlink: 'syz.7.4589': attribute type 1 has an invalid length. [ 529.849106][T22271] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 530.026573][T22281] 8021q: adding VLAN 0 to HW filter on device bond4 [ 530.036273][T22280] sch_tbf: peakrate 7 is lower than or equals to rate 2147483647 ! [ 530.106781][T22281] veth5: entered promiscuous mode [ 530.122842][T22281] bond4: (slave veth5): Enslaving as an active interface with a down link [ 530.401080][T22290] warn_alloc: 2 callbacks suppressed [ 530.401096][T22290] syz.1.4594: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 530.439090][T22290] CPU: 0 UID: 0 PID: 22290 Comm: syz.1.4594 Not tainted syzkaller #0 PREEMPT(full) [ 530.439112][T22290] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 530.439126][T22290] Call Trace: [ 530.439133][T22290] [ 530.439140][T22290] dump_stack_lvl+0x189/0x250 [ 530.439169][T22290] ? __pfx_dump_stack_lvl+0x10/0x10 [ 530.439191][T22290] ? __pfx__printk+0x10/0x10 [ 530.439209][T22290] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 530.439230][T22290] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 530.439254][T22290] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 530.439278][T22290] warn_alloc+0x214/0x310 [ 530.439301][T22290] ? stack_depot_save_flags+0x40/0x860 [ 530.439329][T22290] ? __pfx_warn_alloc+0x10/0x10 [ 530.439353][T22290] ? kasan_save_track+0x3e/0x80 [ 530.439372][T22290] ? __kasan_kmalloc+0x93/0xb0 [ 530.439395][T22290] ? xsk_setsockopt+0x4dc/0x8d0 [ 530.439413][T22290] ? do_sock_setsockopt+0x17c/0x1b0 [ 530.439429][T22290] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 530.439445][T22290] ? do_syscall_64+0xfa/0xfa0 [ 530.439465][T22290] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 530.439492][T22290] __vmalloc_node_range_noprof+0x125/0x12d0 [ 530.439547][T22290] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 530.439582][T22290] ? __kasan_kmalloc+0x93/0xb0 [ 530.439612][T22290] vmalloc_user_noprof+0xad/0xf0 [ 530.439636][T22290] ? xskq_create+0xbf/0x170 [ 530.439656][T22290] xskq_create+0xbf/0x170 [ 530.439680][T22290] xsk_init_queue+0xb0/0x110 [ 530.439703][T22290] xsk_setsockopt+0x4dc/0x8d0 [ 530.439727][T22290] ? __pfx_xsk_setsockopt+0x10/0x10 [ 530.439751][T22290] ? __pfx_aa_sk_perm+0x10/0x10 [ 530.439775][T22290] ? aa_sock_opt_perm+0xff/0x1b0 [ 530.439803][T22290] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 530.439819][T22290] ? __pfx_xsk_setsockopt+0x10/0x10 [ 530.439841][T22290] do_sock_setsockopt+0x17c/0x1b0 [ 530.439864][T22290] __x64_sys_setsockopt+0x13f/0x1b0 [ 530.439887][T22290] do_syscall_64+0xfa/0xfa0 [ 530.439908][T22290] ? lockdep_hardirqs_on+0x9c/0x150 [ 530.439929][T22290] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 530.439947][T22290] ? clear_bhb_loop+0x60/0xb0 [ 530.439969][T22290] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 530.439989][T22290] RIP: 0033:0x7fa92518f6c9 [ 530.440006][T22290] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 530.440019][T22290] RSP: 002b:00007fa9260a0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 530.440038][T22290] RAX: ffffffffffffffda RBX: 00007fa9253e5fa0 RCX: 00007fa92518f6c9 [ 530.440050][T22290] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000005 [ 530.440061][T22290] RBP: 00007fa925211f91 R08: 0000000000000004 R09: 0000000000000000 [ 530.440072][T22290] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 530.440082][T22290] R13: 00007fa9253e6038 R14: 00007fa9253e5fa0 R15: 00007ffd417f6788 [ 530.440114][T22290] [ 530.440125][T22290] Mem-Info: [ 530.740992][T22290] active_anon:4027 inactive_anon:0 isolated_anon:0 [ 530.740992][T22290] active_file:3336 inactive_file:40032 isolated_file:0 [ 530.740992][T22290] unevictable:768 dirty:90 writeback:0 [ 530.740992][T22290] slab_reclaimable:13815 slab_unreclaimable:156932 [ 530.740992][T22290] mapped:29988 shmem:1381 pagetables:1019 [ 530.740992][T22290] sec_pagetables:0 bounce:0 [ 530.740992][T22290] kernel_misc_reclaimable:0 [ 530.740992][T22290] free:1260807 free_pcp:14352 free_cma:0 [ 530.789954][T22290] Node 0 active_anon:16108kB inactive_anon:0kB active_file:13344kB inactive_file:159928kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:119952kB dirty:360kB writeback:0kB shmem:3988kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:15552kB pagetables:3944kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 530.829120][T22290] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:132kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 530.861594][T22290] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 530.900047][T22290] lowmem_reserve[]: 0 2505 2505 2505 2505 [ 530.907599][T22290] Node 0 DMA32 free:1129964kB boost:0kB min:34308kB low:42884kB high:51460kB reserved_highatomic:0KB free_highatomic:0KB active_anon:16064kB inactive_anon:0kB active_file:13344kB inactive_file:159928kB unevictable:1536kB writepending:360kB zspages:0kB present:3129332kB managed:2565160kB mlocked:0kB bounce:0kB free_pcp:41116kB local_pcp:20724kB free_cma:0kB [ 530.942361][T22290] lowmem_reserve[]: 0 0 0 0 0 [ 530.986201][T22290] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 531.084964][T22290] lowmem_reserve[]: 0 0 0 0 0 [ 531.104559][T22290] Node 1 Normal free:3897904kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:16220kB local_pcp:7844kB free_cma:0kB [ 531.184846][T22290] lowmem_reserve[]: 0 0 0 0 0 [ 531.193959][T22290] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 531.225847][T22290] Node 0 DMA32: 2973*4kB (UME) 1315*8kB (UM) 702*16kB (UME) 1004*32kB (UME) 350*64kB (UME) 185*128kB (UM) 189*256kB (UME) 98*512kB (UM) 38*1024kB (UM) 8*2048kB (UME) 211*4096kB (UM) = 1129964kB [ 531.283680][T22290] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 531.304003][T22290] Node 1 Normal: 210*4kB (UE) 49*8kB (UME) 40*16kB (UME) 107*32kB (UME) 38*64kB (UME) 10*128kB (UME) 3*256kB (UM) 4*512kB (UME) 1*1024kB (M) 1*2048kB (U) 948*4096kB (M) = 3897904kB [ 531.335074][T22290] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 531.346582][T22290] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 531.356956][T22290] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 531.367259][T22290] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 531.385199][T22290] 44746 total pagecache pages [ 531.390708][T22290] 0 pages in swap cache [ 531.395383][T22290] Free swap = 124996kB [ 531.399602][T22290] Total swap = 124996kB [ 531.400020][T22334] xt_hashlimit: overflow, try lower: 18446744073709551613/4 [ 531.403805][T22290] 2097051 pages RAM [ 531.416085][T22290] 0 pages HighMem/MovableOnly [ 531.421127][T22290] 424119 pages reserved [ 531.425450][T22290] 0 pages cma reserved [ 531.587696][T22341] veth1_to_bond: entered allmulticast mode [ 531.649597][T22350] validate_nla: 1 callbacks suppressed [ 531.649613][T22350] netlink: 'syz.8.4611': attribute type 1 has an invalid length. [ 531.762724][T22341] veth1_to_bond (unregistering): left allmulticast mode [ 531.780764][T22351] sch_tbf: burst 0 is lower than device lo mtu (18) ! [ 531.823529][T22354] geneve2: entered promiscuous mode [ 531.836233][T22354] geneve2: entered allmulticast mode [ 531.906159][T22357] 8021q: adding VLAN 0 to HW filter on device bond6 [ 531.915787][T22357] bond5: (slave bond6): making interface the new active one [ 531.934132][T22357] bond5: (slave bond6): Enslaving as an active interface with an up link [ 531.965357][T22362] bond5: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 531.985385][T22362] bond5: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 532.140931][ T8893] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 532.190395][ T8893] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 532.231568][ T8893] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 532.257653][ T8893] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 532.303139][T22391] netlink: 'syz.4.4618': attribute type 1 has an invalid length. [ 532.933078][T22439] netlink: 'syz.4.4634': attribute type 1 has an invalid length. [ 533.030422][T22444] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input9 [ 533.039118][T22439] 8021q: adding VLAN 0 to HW filter on device bond6 [ 533.054095][T22448] bond6: option lacp_active: mode dependency failed, not supported in mode balance-alb(6) [ 533.148152][T22439] bond6: (slave ip6gretap1): making interface the new active one [ 533.192516][T22439] bond6: (slave ip6gretap1): Enslaving as an active interface with an up link [ 533.417875][T22477] lo speed is unknown, defaulting to 1000 [ 533.770394][T22482] delete_channel: no stack [ 533.794949][T22506] __nla_validate_parse: 21 callbacks suppressed [ 533.795124][T22506] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4652'. [ 533.801095][T22502] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 534.222225][T22530] netlink: 'syz.1.4661': attribute type 1 has an invalid length. [ 534.318621][T22530] gretap1: entered promiscuous mode [ 534.328411][T22530] bond6: (slave gretap1): making interface the new active one [ 534.338603][T22530] bond6: (slave gretap1): Enslaving as an active interface with an up link [ 534.405838][T22538] rdma_rxe: rxe_newlink: failed to add lo [ 534.434111][T22538] bridge7: entered promiscuous mode [ 534.440639][T22538] bridge7: entered allmulticast mode [ 534.729313][T22562] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 534.742147][T22562] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 534.913591][T22569] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4674'. [ 535.020966][T22576] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4676'. [ 535.043478][T22577] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4676'. [ 535.212431][T22580] netlink: 260 bytes leftover after parsing attributes in process `syz.8.4677'. [ 535.252898][T22583] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4678'. [ 535.270680][T22583] block nbd3: Unsupported socket: should be TCP or UNIX. [ 535.327690][T22588] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4680'. [ 535.376449][T22592] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 535.391967][T22586] netlink: 'syz.1.4680': attribute type 3 has an invalid length. [ 535.593355][T22610] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4688'. [ 535.604360][T22610] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4688'. [ 535.681428][T22617] netlink: 56 bytes leftover after parsing attributes in process `syz.0.4691'. [ 535.961621][T22643] tipc: Enabled bearer , priority 0 [ 535.978765][T22641] tipc: Resetting bearer [ 536.031170][T22641] tipc: Disabling bearer [ 536.093023][T22651] netlink: 'syz.8.4700': attribute type 4 has an invalid length. [ 536.307928][T22664] tipc: New replicast peer: 255.255.255.255 [ 536.315831][T22664] tipc: Enabled bearer , priority 10 [ 536.420840][T22673] netlink: 'syz.4.4708': attribute type 1 has an invalid length. [ 536.571820][T22685] netlink: 'syz.4.4708': attribute type 20 has an invalid length. [ 536.952453][T22712] skbuff: bad partial csum: csum=65535/127 headroom=178 headlen=65664 [ 537.775914][T22770] netlink: 'syz.8.4734': attribute type 5 has an invalid length. [ 538.160663][T22802] IPVS: set_ctl: invalid protocol: 117 172.20.20.170:20000 [ 538.403134][T22811] netlink: 'syz.0.4751': attribute type 9 has an invalid length. [ 538.836849][T22840] openvswitch: netlink: Unexpected mask (mask=4000040, allowed=10048) [ 539.118134][T22854] tipc: Enabled bearer , priority 0 [ 539.169743][T22856] syzkaller0: entered promiscuous mode [ 539.191923][T22856] syzkaller0: entered allmulticast mode [ 539.276369][T22856] tipc: Resetting bearer [ 539.376707][T22871] __nla_validate_parse: 78 callbacks suppressed [ 539.376726][T22871] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4773'. [ 539.405667][T22856] tipc: Disabling bearer [ 539.423517][T22880] xt_recent: hitcount (4294901760) is larger than allowed maximum (65535) [ 539.449319][T22877] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4773'. [ 539.566320][T22884] bond7: option all_slaves_active: invalid value (222) [ 539.588588][T22884] bond7 (unregistering): Released all slaves [ 539.686484][T22897] tipc: Enabled bearer , priority 0 [ 539.719981][T22905] syzkaller0: entered promiscuous mode [ 539.743851][T22897] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 539.761507][T22907] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input10 [ 539.762113][T22905] syzkaller0: entered allmulticast mode [ 539.852684][T22913] sctp: [Deprecated]: syz.7.4784 (pid 22913) Use of int in max_burst socket option. [ 539.852684][T22913] Use struct sctp_assoc_value instead [ 539.883525][T22905] tipc: Resetting bearer [ 539.921372][T22921] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4786'. [ 539.958386][T22905] tipc: Disabling bearer [ 540.091481][T22933] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 540.176074][T22935] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 540.248181][T22935] gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 540.273595][T22935] gretap2: entered promiscuous mode [ 540.283522][T22935] gretap2: entered allmulticast mode [ 540.290407][T22947] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 540.307326][T22941] netdevsim netdevsim8: Direct firmware load for .. failed with error -2 [ 540.324734][T22941] netdevsim netdevsim8: Falling back to sysfs fallback for: .. [ 540.439523][T22954] lo: entered promiscuous mode [ 540.458597][T22954] tunl0: entered promiscuous mode [ 540.486433][T22954] gre0: entered promiscuous mode [ 540.536730][T22954] gretap0: entered promiscuous mode [ 540.596098][T22954] erspan0: entered promiscuous mode [ 540.602036][T22970] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4796'. [ 540.636961][T22954] ip_vti0: entered promiscuous mode [ 540.664169][T22954] ip6_vti0: entered promiscuous mode [ 540.684404][T22954] sit0: entered promiscuous mode [ 540.702294][T22954] ip6tnl0: entered promiscuous mode [ 540.714368][T22954] ip6gre0: entered promiscuous mode [ 540.729689][T22954] syz_tun: entered promiscuous mode [ 540.749067][T22954] ip6gretap0: entered promiscuous mode [ 540.760327][T22954] bridge0: port 2(bridge_slave_1) entered disabled state [ 540.769069][T22954] bridge0: entered promiscuous mode [ 540.780101][T22954] vcan0: entered promiscuous mode [ 540.796128][T22954] bond0: entered promiscuous mode [ 540.801318][T22954] !: entered promiscuous mode [ 540.813234][T22954] team0: entered promiscuous mode [ 540.818650][T22954] team_slave_0: entered promiscuous mode [ 540.825153][T22954] team_slave_1: entered promiscuous mode [ 540.840283][T22954] dummy0: entered promiscuous mode [ 540.857861][T22954] nlmon0: entered promiscuous mode [ 540.867836][T22954] caif0: entered promiscuous mode [ 540.873822][T22954] batadv0: entered promiscuous mode [ 540.885773][T22954] veth0: entered promiscuous mode [ 540.897853][T22954] veth1: entered promiscuous mode [ 540.909684][T22954] wg0: entered promiscuous mode [ 540.918213][T22954] wg1: entered promiscuous mode [ 540.933501][T22954] wg2: entered promiscuous mode [ 540.942368][T22954] veth0_to_bridge: entered promiscuous mode [ 540.955454][T22954] veth1_to_bridge: entered promiscuous mode [ 540.973873][T22954] veth0_to_bond: entered promiscuous mode [ 540.991377][T22954] veth0_to_team: entered promiscuous mode [ 541.005875][T22954] veth1_to_team: entered promiscuous mode [ 541.028364][T22954] veth0_to_batadv: entered promiscuous mode [ 541.074072][T22954] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 541.083665][T22954] batadv_slave_0: entered promiscuous mode [ 541.111487][T22954] xfrm0: entered promiscuous mode [ 541.223281][T22954] veth0_to_hsr: entered promiscuous mode [ 541.280734][T22954] veth1_to_hsr: entered promiscuous mode [ 541.315286][T22954] hsr0: entered promiscuous mode [ 541.327124][T22954] veth1_virt_wifi: entered promiscuous mode [ 541.336272][T22954] veth0_virt_wifi: entered promiscuous mode [ 541.346272][T22954] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 541.384076][T22954] vlan0: entered promiscuous mode [ 541.390049][T22954] vlan1: entered promiscuous mode [ 541.397349][T22954] macvlan0: entered promiscuous mode [ 541.417672][T22954] macvlan1: entered promiscuous mode [ 541.429683][T22954] ipvlan0: entered promiscuous mode [ 541.435232][T22954] ipvlan1: entered promiscuous mode [ 541.467272][T22954] macvtap0: entered promiscuous mode [ 541.479324][T22954] macsec0: entered promiscuous mode [ 541.492952][T22954] geneve0: entered promiscuous mode [ 541.508320][T22954] geneve1: entered promiscuous mode [ 541.530836][T22954] netdevsim netdevsim0 netdevsim1: entered promiscuous mode [ 541.547216][T22954] netdevsim netdevsim0 netdevsim2: entered promiscuous mode [ 541.566118][T22954] netdevsim netdevsim0 netdevsim3: entered promiscuous mode [ 541.589712][T22954] mac80211_hwsim hwsim41 wlan0: entered promiscuous mode [ 541.610401][T22954] mac80211_hwsim hwsim43 wlan1: entered promiscuous mode [ 541.624651][T22954] batadv1: entered promiscuous mode [ 541.632652][T22954] bond1: entered promiscuous mode [ 541.645561][T22954] geneve0.3: entered promiscuous mode [ 541.651846][T22954] gre1: entered promiscuous mode [ 541.693692][T22954] mac80211_hwsim hwsim49 wlan2: entered promiscuous mode [ 541.705298][T22954] @: entered promiscuous mode [ 541.716029][T22954] bridge1: entered promiscuous mode [ 541.726612][T22954] macsec1: entered promiscuous mode [ 541.735129][T22954] gtp0: entered promiscuous mode [ 541.740258][T22954] ip6gre1: entered promiscuous mode [ 541.752304][T22954] veth2: entered promiscuous mode [ 541.760664][T22954] veth3: entered promiscuous mode [ 541.767081][T22954] ip6tnl1: entered promiscuous mode [ 541.772426][T22954] mac80211_hwsim hwsim54 wlan3: entered promiscuous mode [ 541.780511][T22954] bond2: entered promiscuous mode [ 541.786564][T22954] sit1: entered promiscuous mode [ 541.791742][T22954] bridge2: entered promiscuous mode [ 541.817372][T22974] pimreg: entered allmulticast mode [ 541.867373][ T8896] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 541.893082][ T8896] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 541.911048][T22989] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4802'. [ 541.949922][ T8896] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 541.992105][ T8896] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 542.013780][ T8896] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 542.025780][ T8896] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 542.035826][ T8896] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 542.048594][ T8896] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 542.096125][T23001] team0: Device vti0 is of different type [ 542.129032][T23003] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4810'. [ 542.156505][T23005] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4808'. [ 542.177400][T23007] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4809'. [ 542.359423][T23016] netlink: 'syz.7.4814': attribute type 11 has an invalid length. [ 542.379893][T23016] netlink: 199788 bytes leftover after parsing attributes in process `syz.7.4814'. [ 542.391829][T23018] tipc: Enabled bearer , priority 0 [ 542.414392][T23018] syzkaller0: entered promiscuous mode [ 542.425932][T23018] syzkaller0: entered allmulticast mode [ 542.459388][T23018] sch_tbf: burst 4 is lower than device syzkaller0 mtu (1514) ! [ 542.519224][T23018] netlink: 2 bytes leftover after parsing attributes in process `syz.8.4815'. [ 542.543939][T23018] tipc: Resetting bearer [ 542.559414][T23014] tipc: Resetting bearer [ 542.646308][T23014] tipc: Disabling bearer [ 542.657191][T23030] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 542.799499][T23041] netlink: 'syz.4.4822': attribute type 2 has an invalid length. [ 542.822598][T23042] vlan1 (unregistering): left allmulticast mode [ 542.845855][T23042] veth0_vlan: left allmulticast mode [ 542.916017][T23050] tipc: Started in network mode [ 542.925578][T23050] tipc: Node identity 66355b069ba4, cluster identity 4711 [ 542.934305][T23050] tipc: Enabled bearer , priority 0 [ 543.032138][T23050] syzkaller0: entered promiscuous mode [ 543.044237][T23050] syzkaller0: entered allmulticast mode [ 543.058249][T23050] tipc: Resetting bearer [ 543.076505][T23052] gretap1: entered promiscuous mode [ 543.108648][T23048] tipc: Resetting bearer [ 543.984092][T23096] netlink: 'syz.7.4837': attribute type 12 has an invalid length. [ 543.995318][T23096] netlink: 'syz.7.4837': attribute type 11 has an invalid length. [ 544.547854][T23048] tipc: Disabling bearer [ 544.580309][T23086] mac80211_hwsim hwsim48 wlan1: entered allmulticast mode [ 544.592290][ T856] tipc: Node number set to 4254161670 [ 544.723531][T23100] netlink: 'syz.4.4838': attribute type 12 has an invalid length. [ 544.919185][T23117] syzkaller1: entered promiscuous mode [ 544.928085][T23117] syzkaller1: entered allmulticast mode [ 544.937148][T23117] __nla_validate_parse: 4 callbacks suppressed [ 544.937162][T23117] netlink: 24 bytes leftover after parsing attributes in process `syz.7.4843'. [ 544.957899][T23122] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4845'. [ 544.992625][T23126] netlink: 'syz.0.4847': attribute type 1 has an invalid length. [ 545.002000][T23124] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4846'. [ 545.002680][T23126] netlink: 'syz.0.4847': attribute type 3 has an invalid length. [ 545.014387][T23124] tc_dump_action: action bad kind [ 545.020753][T23126] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4847'. [ 545.028019][T23128] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4845'. [ 545.137996][T23133] netlink: 'syz.1.4849': attribute type 8 has an invalid length. [ 545.546455][T23162] netlink: 'syz.1.4859': attribute type 13 has an invalid length. [ 545.978888][T23183] syzkaller1: entered promiscuous mode [ 545.998580][T23183] syzkaller1: entered allmulticast mode [ 546.071711][T23196] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 546.117288][T23201] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.4871'. [ 546.326745][T23217] netlink: 'syz.0.4876': attribute type 2 has an invalid length. [ 546.361522][T23214] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4875'. [ 546.372089][T23214] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4875'. [ 546.550940][T23232] netlink: 'syz.7.4880': attribute type 11 has an invalid length. [ 546.574942][T23232] netlink: 224 bytes leftover after parsing attributes in process `syz.7.4880'. [ 546.829057][T23248] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4886'. [ 547.057646][T23271] netlink: 'syz.8.4894': attribute type 3 has an invalid length. [ 547.372909][T23289] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 547.380168][T23289] IPv6: NLM_F_CREATE should be set when creating new route [ 547.873901][T23332] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 547.881179][T23332] IPv6: NLM_F_CREATE should be set when creating new route [ 547.888542][T23332] IPv6: NLM_F_CREATE should be set when creating new route [ 547.895792][T23332] IPv6: NLM_F_CREATE should be set when creating new route [ 548.222142][T23357] validate_nla: 1 callbacks suppressed [ 548.222160][T23357] netlink: 'syz.1.4922': attribute type 10 has an invalid length. [ 548.293292][T23360] netlink: 'syz.4.4921': attribute type 16 has an invalid length. [ 548.322204][T23357] bond0: (slave geneve1): Enslaving as an active interface with an up link [ 548.349988][T23371] sctp: [Deprecated]: syz.0.4925 (pid 23371) Use of int in max_burst socket option. [ 548.349988][T23371] Use struct sctp_assoc_value instead [ 548.998401][T23414] netlink: 'syz.4.4939': attribute type 1 has an invalid length. [ 549.074061][T23422] bond7: option arp_all_targets: invalid value (18446744073709551613) [ 549.085619][T23422] bond7 (unregistering): Released all slaves [ 549.793312][T23458] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 549.840048][T23460] x_tables: duplicate underflow at hook 1 [ 549.947088][T23466] netlink: 'syz.7.4954': attribute type 10 has an invalid length. [ 549.955153][T23467] netlink: 'syz.7.4954': attribute type 10 has an invalid length. [ 549.956888][T23467] 8021q: adding VLAN 0 to HW filter on device team0 [ 549.994259][T23466] 8021q: adding VLAN 0 to HW filter on device team0 [ 550.098833][T23475] tipc: Enabled bearer , priority 0 [ 550.115620][T23474] tipc: Disabling bearer [ 550.301149][T23488] .: renamed from veth1_to_bridge (while UP) [ 550.483271][T23498] xt_l2tp: invalid flags combination: 8 [ 550.493006][T23500] netlink: 'syz.4.4967': attribute type 4 has an invalid length. [ 550.502032][T23498] xt_l2tp: invalid flags combination: 8 [ 550.517162][T23500] netlink: 'syz.4.4967': attribute type 4 has an invalid length. [ 550.530249][T23500] __nla_validate_parse: 13 callbacks suppressed [ 550.530263][T23500] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4967'. [ 550.643813][T23513] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4970'. [ 550.818496][T23522] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4973'. [ 550.828872][T23524] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4974'. [ 550.839860][T23525] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4974'. [ 550.844293][T23522] vlan0: entered allmulticast mode [ 550.860242][T23522] bridge_slave_0: entered allmulticast mode [ 550.997729][T23542] netlink: 20 bytes leftover after parsing attributes in process `syz.8.4979'. [ 551.178405][T23551] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 551.192142][T23556] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4984'. [ 551.205585][T23554] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4984'. [ 551.221449][T23551] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 551.257308][T23560] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4982'. [ 551.291544][T23560] team0: entered promiscuous mode [ 551.298126][T23560] team0: entered allmulticast mode [ 551.360468][T23570] netlink: 'syz.8.4987': attribute type 10 has an invalid length. [ 551.379238][T23570] bond0: (slave geneve1): Enslaving as an active interface with an up link [ 551.439092][T23575] netlink: 132 bytes leftover after parsing attributes in process `syz.8.4989'. [ 551.588277][T23586] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 551.748938][T23597] openvswitch: netlink: EtherType 50a is less than min 600 [ 552.139634][T23625] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 552.787780][T23670] vlan2: entered allmulticast mode [ 552.793063][T23670] mac80211_hwsim hwsim41 wlan0: entered allmulticast mode [ 552.910206][T23677] Cannot find add_set index 65532 as target [ 553.185674][T23700] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 553.591203][T23731] bond0: (slave bond_slave_1): Releasing backup interface [ 553.668959][T23733] pim6reg: left allmulticast mode [ 553.952962][T23758] veth0_to_batadv: entered allmulticast mode [ 553.962406][T23759] netlink: 'syz.8.5043': attribute type 1 has an invalid length. [ 554.026711][T23759] 8021q: adding VLAN 0 to HW filter on device bond7 [ 554.079105][T23764] bond7: (slave geneve2): making interface the new active one [ 554.094039][T23764] bond7: (slave geneve2): Enslaving as an active interface with an up link [ 554.265756][T23781] netlink: 'syz.7.5052': attribute type 3 has an invalid length. [ 554.446017][T23797] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 554.809605][ T8897] wlan1: Trigger new scan to find an IBSS to join [ 555.069513][T23840] netlink: 'syz.8.5073': attribute type 1 has an invalid length. [ 555.106472][T23844] syzkaller0: entered allmulticast mode [ 555.266132][T23856] netlink: 'syz.4.5079': attribute type 2 has an invalid length. [ 555.396023][T23864] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 555.601301][T23877] xt_SECMARK: invalid mode: 9 [ 555.628251][T23878] syzkaller0: entered promiscuous mode [ 555.633738][T23878] syzkaller0: entered allmulticast mode [ 556.526927][T23953] __nla_validate_parse: 19 callbacks suppressed [ 556.526944][T23953] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5100'. [ 556.532347][T23952] netlink: 84 bytes leftover after parsing attributes in process `syz.8.5107'. [ 556.544812][T23953] tipc: Enabled bearer , priority 0 [ 556.567567][T23953] syzkaller0: entered promiscuous mode [ 556.573280][T23953] syzkaller0: entered allmulticast mode [ 556.589234][T23952] netlink: 52 bytes leftover after parsing attributes in process `syz.8.5107'. [ 556.841962][T23973] bond0: Caught tx_queue_len zero misconfig [ 556.848778][T23973] sch_tbf: peakrate 7 is lower than or equals to rate 2147483647 ! [ 556.919019][T23978] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5114'. [ 556.930019][T23978] netlink: 'syz.1.5114': attribute type 7 has an invalid length. [ 556.938553][T23978] netlink: 'syz.1.5114': attribute type 8 has an invalid length. [ 556.946985][T23978] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5114'. [ 557.067639][T23980] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 557.179104][T23936] tipc: Resetting bearer [ 557.199029][T23991] netlink: 24 bytes leftover after parsing attributes in process `syz.8.5122'. [ 557.228003][T23936] tipc: Disabling bearer [ 557.248381][T23994] netlink: 20 bytes leftover after parsing attributes in process `syz.7.5121'. [ 557.253319][T23991] netlink: 16 bytes leftover after parsing attributes in process `syz.8.5122'. [ 557.266723][T23992] netlink: 16 bytes leftover after parsing attributes in process `syz.8.5122'. [ 557.284123][T23991] netlink: 56 bytes leftover after parsing attributes in process `syz.8.5122'. [ 557.338625][T24001] netlink: 'syz.7.5123': attribute type 1 has an invalid length. [ 557.376668][T23991] bond8: (slave ip6gre0): Device is not bonding slave [ 557.398324][T23991] bond8: option active_slave: invalid value (ip6gre0) [ 557.413882][T23991] bond8 (unregistering): Released all slaves [ 557.585581][T24013] netlink: 'syz.0.5129': attribute type 5 has an invalid length. [ 557.594170][T24014] netlink: 'syz.0.5129': attribute type 5 has an invalid length. [ 557.768187][T23931] wlan1: Trigger new scan to find an IBSS to join [ 558.083185][T24032] --map-set only usable from mangle table [ 558.229559][T24041] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 558.490594][T24050] bond3: option lp_interval: invalid value (0) [ 558.508657][T24050] bond3: option lp_interval: allowed values 1 - 2147483647 [ 558.518506][T24050] bond3 (unregistering): Released all slaves [ 558.690895][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 558.762874][T24078] syz_tun: entered allmulticast mode [ 558.862203][T24089] dummy0: left promiscuous mode [ 558.871983][T24078] syz_tun: left allmulticast mode [ 558.984908][T24098] bond3: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 559.011550][T24098] bond3 (unregistering): Released all slaves [ 559.231505][T24109] tipc: Enabled bearer , priority 0 [ 559.245655][T24109] syzkaller0: entered promiscuous mode [ 559.259023][T24109] syzkaller0: entered allmulticast mode [ 559.313231][T24109] tipc: Resetting bearer [ 559.338098][T24108] tipc: Resetting bearer [ 559.367290][T24108] tipc: Disabling bearer [ 559.377861][T24118] netlink: 'syz.7.5158': attribute type 1 has an invalid length. [ 559.567817][T24128] netlink: 'syz.1.5161': attribute type 22 has an invalid length. [ 559.636094][T24128] netlink: 'syz.1.5161': attribute type 22 has an invalid length. [ 559.843955][T24149] netlink: 'syz.0.5169': attribute type 1 has an invalid length. [ 559.976088][T24159] netlink: 'syz.4.5172': attribute type 22 has an invalid length. [ 560.121656][T24173] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 560.280800][T24183] team0: Caught tx_queue_len zero misconfig [ 560.437245][T24195] netlink: 'syz.8.5183': attribute type 10 has an invalid length. [ 560.682546][T24211] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 560.707951][T24214] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 560.733978][T24212] bridge7: entered promiscuous mode [ 560.740203][T24212] bridge7: entered allmulticast mode [ 560.789394][T24220] netlink: 'syz.1.5192': attribute type 1 has an invalid length. [ 561.041023][T24243] syz_tun: entered allmulticast mode [ 561.049588][T24242] syz_tun: left allmulticast mode [ 561.377343][T24271] netlink: 'syz.1.5208': attribute type 1 has an invalid length. [ 561.387320][T24269] tipc: Enabled bearer , priority 0 [ 561.430068][T24269] syzkaller0: entered promiscuous mode [ 561.436308][T24269] syzkaller0: entered allmulticast mode [ 561.442699][T24269] tipc: Resetting bearer [ 561.650465][T23930] tipc: Resetting bearer [ 561.677792][T24268] tipc: Resetting bearer [ 561.701471][T24287] delete_channel: no stack [ 563.302609][T24268] tipc: Disabling bearer [ 563.311229][T24287] __nla_validate_parse: 30 callbacks suppressed [ 563.311244][T24287] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5213'. [ 563.348546][T24316] netlink: 'syz.7.5216': attribute type 3 has an invalid length. [ 563.473657][T24325] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5218'. [ 563.589592][T24336] netlink: 44 bytes leftover after parsing attributes in process `syz.8.5221'. [ 563.638938][T24336] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5221'. [ 563.652773][T24336] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5221'. [ 563.695809][T24343] netlink: 104 bytes leftover after parsing attributes in process `syz.1.5222'. [ 563.754380][T24340] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5223'. [ 563.882369][T24352] netlink: 'syz.8.5227': attribute type 64 has an invalid length. [ 563.890520][T24352] netlink: 20 bytes leftover after parsing attributes in process `syz.8.5227'. [ 563.891999][T24353] netlink: 44 bytes leftover after parsing attributes in process `syz.7.5226'. [ 563.911588][T24352] netlink: 20 bytes leftover after parsing attributes in process `syz.8.5227'. [ 564.660251][T24398] validate_nla: 1 callbacks suppressed [ 564.660267][T24398] netlink: 'syz.4.5242': attribute type 1 has an invalid length. [ 564.757851][T24410] netlink: 'syz.7.5244': attribute type 1 has an invalid length. [ 564.779311][T24410] netlink: 'syz.7.5244': attribute type 5 has an invalid length. [ 564.788179][T24410] netlink: 'syz.7.5244': attribute type 6 has an invalid length. [ 565.000151][T24423] netlink: 'syz.0.5249': attribute type 1 has an invalid length. [ 565.196276][T24438] netlink: 'syz.0.5254': attribute type 63 has an invalid length. [ 565.255723][T24443] netlink: 'syz.7.5256': attribute type 1 has an invalid length. [ 565.300929][T24443] 8021q: adding VLAN 0 to HW filter on device bond3 [ 565.339900][T24443] bond3: (slave veth5): Enslaving as an active interface with a down link [ 565.381264][T24443] veth7: entered promiscuous mode [ 565.391090][T24443] bond3: (slave veth7): Enslaving as an active interface with a down link [ 565.427612][T24443] vlan4: entered allmulticast mode [ 565.432809][T24443] bond3: entered allmulticast mode [ 565.441305][T24443] bond3: (slave vlan4): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 565.477262][T24456] netlink: 'syz.4.5260': attribute type 28 has an invalid length. [ 565.492235][T24456] netlink: 'syz.4.5260': attribute type 3 has an invalid length. [ 565.505320][T24459] netdevsim netdevsim8 netdevsim0: entered promiscuous mode [ 565.561720][T24462] netlink: 'syz.4.5261': attribute type 4 has an invalid length. [ 565.951368][T24471] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 566.040969][T24471] macvtap1: entered promiscuous mode [ 566.051010][T24471] macvtap1: entered allmulticast mode [ 566.558247][T24499] team0: left promiscuous mode [ 566.593314][T24499] 8021q: adding VLAN 0 to HW filter on device team0 [ 566.620087][T24499] team0: Cannot enslave team device to itself [ 566.988020][T24522] can: request_module (can-proto-0) failed. [ 566.989072][T24532] xt_nfacct: accounting object `\$9ZM#mU|^c\F9YⳈ' does not exist [ 567.307999][T24558] batadv1: entered allmulticast mode [ 567.316069][T24558] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 567.333925][T24562] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 567.555309][T24576] veth0_virt_wifi: entered allmulticast mode [ 567.579526][T24584] x_tables: ip6_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT/POSTROUTING [ 567.669862][T24576] team0: Port device veth0_virt_wifi added [ 567.817871][T24603] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 567.842082][T24603] bridge0: port 3(syz_tun) entered blocking state [ 567.851175][T24603] bridge0: port 3(syz_tun) entered disabled state [ 567.858008][T24603] syz_tun: entered allmulticast mode [ 567.866161][T24603] syz_tun: entered promiscuous mode [ 567.889131][T24603] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 568.041886][T24624] veth0_vlan: left promiscuous mode [ 568.289799][T24643] lo: Caught tx_queue_len zero misconfig [ 568.406683][T24652] lo: left promiscuous mode [ 568.411395][T24652] tunl0: left promiscuous mode [ 568.420052][T24652] gre0: left promiscuous mode [ 568.426701][T24652] gretap0: left promiscuous mode [ 568.431917][T24652] erspan0: left promiscuous mode [ 568.437469][T24652] ip_vti0: left promiscuous mode [ 568.442684][T24652] ip6_vti0: left promiscuous mode [ 568.452714][T24652] sit0: left promiscuous mode [ 568.464718][T24652] ip6tnl0: left promiscuous mode [ 568.473584][T24652] ip6gre0: left promiscuous mode [ 568.484291][T24660] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 568.500944][T24652] syz_tun: left promiscuous mode [ 568.513133][T24652] ip6gretap0: left promiscuous mode [ 568.520082][T24652] bridge0: left promiscuous mode [ 568.526305][T24652] bond0: left promiscuous mode [ 568.532313][T24652] nlmon0: left promiscuous mode [ 568.537567][T24652] caif0: left promiscuous mode [ 568.542624][T24652] batadv0: left promiscuous mode [ 568.550037][T24652] veth0: left promiscuous mode [ 568.555624][T24652] veth1: left promiscuous mode [ 568.560618][T24652] wg0: left promiscuous mode [ 568.566903][T24652] wg1: left promiscuous mode [ 568.571993][T24652] wg2: left promiscuous mode [ 568.577909][T24652] veth0_to_bridge: left promiscuous mode [ 568.583910][T24652] bridge_slave_0: left allmulticast mode [ 568.591135][T24652] bridge_slave_0: left promiscuous mode [ 568.597415][T24652] bridge0: port 1(bridge_slave_0) entered disabled state [ 568.610862][T24652] veth1_to_bridge: left promiscuous mode [ 568.618839][T24652] bridge_slave_1: left allmulticast mode [ 568.624756][T24652] bridge_slave_1: left promiscuous mode [ 568.630676][T24652] bridge0: port 2(bridge_slave_1) entered disabled state [ 568.642729][T24652] veth0_to_bond: left promiscuous mode [ 568.651296][T24652] !: left promiscuous mode [ 568.658045][T24652] bond0: (slave 1!): Releasing backup interface [ 568.667411][T24652] veth0_to_team: left promiscuous mode [ 568.673169][T24652] team_slave_0: left promiscuous mode [ 568.684340][T24652] team0: Port device team_slave_0 removed [ 568.691586][T24652] veth1_to_team: left promiscuous mode [ 568.698057][T24652] team_slave_1: left promiscuous mode [ 568.705215][T24652] team0: Port device team_slave_1 removed [ 568.711557][T24652] veth0_to_batadv: left promiscuous mode [ 568.717289][T24674] __nla_validate_parse: 18 callbacks suppressed [ 568.717304][T24674] netlink: 56 bytes leftover after parsing attributes in process `syz.1.5319'. [ 568.733011][T24652] batadv_slave_0: left promiscuous mode [ 568.739731][T24652] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 568.748561][T24652] xfrm0: left promiscuous mode [ 568.753473][T24652] veth0_to_hsr: left promiscuous mode [ 568.759863][T24652] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 568.788999][T24661] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 568.802129][T24661] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 568.812605][T24661] gretap1: entered promiscuous mode [ 568.819242][T24661] gretap1: entered allmulticast mode [ 568.890840][T24671] bond9: Removing last arp target with arp_interval on [ 568.990524][T24686] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5324'. [ 569.004262][T24683] netlink: 156 bytes leftover after parsing attributes in process `syz.7.5326'. [ 569.163417][T24699] IPVS: set_ctl: invalid protocol: 58 127.0.0.1:20004 [ 569.186796][T24694] syzkaller0: entered promiscuous mode [ 569.206105][T24694] syzkaller0: entered allmulticast mode [ 569.268552][T24702] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5331'. [ 569.332272][T24701] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5331'. [ 569.522406][T24710] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5335'. [ 569.577176][T24713] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5336'. [ 569.581817][T24710] bond8: Invalid ad_actor_system MAC address. [ 569.592380][T24710] bond8: option ad_actor_system: invalid value (1) [ 569.601759][T24710] bond8 (unregistering): Released all slaves [ 569.628708][T24720] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5336'. [ 569.803539][T24728] validate_nla: 5 callbacks suppressed [ 569.803556][T24728] netlink: 'syz.7.5340': attribute type 10 has an invalid length. [ 569.832251][T24728] syz_tun: entered promiscuous mode [ 569.876832][T24732] netlink: 'syz.8.5341': attribute type 2 has an invalid length. [ 569.887739][T24731] netlink: 'syz.1.5342': attribute type 29 has an invalid length. [ 569.898399][T24732] netlink: 'syz.8.5341': attribute type 1 has an invalid length. [ 569.906301][T24731] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5342'. [ 569.917609][T24732] netlink: 224 bytes leftover after parsing attributes in process `syz.8.5341'. [ 569.962810][T24739] bond4: down delay (33554432) is not a multiple of miimon (640), value rounded to 33553920 ms [ 569.987463][T24737] lo: entered promiscuous mode [ 569.993538][T24737] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 570.007139][T24742] xt_TCPMSS: Only works on TCP SYN packets [ 570.026957][T24726] Cannot find add_set index 2 as target [ 570.158181][T24749] netlink: 'syz.0.5346': attribute type 2 has an invalid length. [ 570.440006][T24768] netlink: 'syz.7.5354': attribute type 1 has an invalid length. [ 570.559356][T24773] veth1: Caught tx_queue_len zero misconfig [ 570.621696][T24768] bond5: (slave geneve3): making interface the new active one [ 570.654100][T24768] bond5: (slave geneve3): Enslaving as an active interface with an up link [ 570.679258][ T13] netdevsim netdevsim7 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 570.688258][ T13] netdevsim netdevsim7 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 570.739545][ T13] netdevsim netdevsim7 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 570.884038][T24792] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 571.030951][T24798] [ 571.033300][T24798] ====================================================== [ 571.040311][T24798] WARNING: possible circular locking dependency detected [ 571.047335][T24798] syzkaller #0 Not tainted [ 571.048299][T24802] netlink: 'syz.4.5365': attribute type 27 has an invalid length. [ 571.051735][T24798] ------------------------------------------------------ [ 571.051745][T24798] syz.7.5363/24798 is trying to acquire lock: [ 571.051757][T24798] ffffffff8f426358 (nr_neigh_list_lock){+...}-{3:3}, at: nr_remove_neigh+0x25/0xe0 [ 571.081871][T24798] [ 571.081871][T24798] but task is already holding lock: [ 571.089222][T24798] ffff888057f5b570 (&nr_node->node_lock){+...}-{3:3}, at: nr_add_node+0xcce/0x2570 [ 571.098516][T24798] [ 571.098516][T24798] which lock already depends on the new lock. [ 571.098516][T24798] [ 571.108898][T24798] [ 571.108898][T24798] the existing dependency chain (in reverse order) is: [ 571.117886][T24798] [ 571.117886][T24798] -> #2 (&nr_node->node_lock){+...}-{3:3}: [ 571.125855][T24798] lock_acquire+0x120/0x360 [ 571.130859][T24798] _raw_spin_lock_bh+0x36/0x50 [ 571.136133][T24798] nr_rt_device_down+0x12a/0x720 [ 571.141583][T24798] nr_device_event+0x137/0x150 [ 571.146847][T24798] notifier_call_chain+0x1b6/0x3e0 [ 571.152462][T24798] __dev_notify_flags+0x18d/0x2e0 [ 571.157991][T24798] netif_change_flags+0xe8/0x1a0 [ 571.163438][T24798] dev_change_flags+0x130/0x260 [ 571.168798][T24798] dev_ioctl+0x7b4/0x1150 [ 571.173634][T24798] sock_do_ioctl+0x22c/0x300 [ 571.178730][T24798] sock_ioctl+0x576/0x790 [ 571.183571][T24798] __se_sys_ioctl+0xfc/0x170 [ 571.188669][T24798] do_syscall_64+0xfa/0xfa0 [ 571.193685][T24798] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 571.200083][T24798] [ 571.200083][T24798] -> #1 (nr_node_list_lock){+...}-{3:3}: [ 571.207880][T24798] lock_acquire+0x120/0x360 [ 571.212883][T24798] _raw_spin_lock_bh+0x36/0x50 [ 571.218150][T24798] nr_rt_device_down+0xa9/0x720 [ 571.223501][T24798] nr_device_event+0x137/0x150 [ 571.228769][T24798] notifier_call_chain+0x1b6/0x3e0 [ 571.234382][T24798] __dev_notify_flags+0x18d/0x2e0 [ 571.239908][T24798] netif_change_flags+0xe8/0x1a0 [ 571.245344][T24798] dev_change_flags+0x130/0x260 [ 571.250701][T24798] dev_ioctl+0x7b4/0x1150 [ 571.255546][T24798] sock_do_ioctl+0x22c/0x300 [ 571.260638][T24798] sock_ioctl+0x576/0x790 [ 571.265469][T24798] __se_sys_ioctl+0xfc/0x170 [ 571.270562][T24798] do_syscall_64+0xfa/0xfa0 [ 571.275568][T24798] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 571.281957][T24798] [ 571.281957][T24798] -> #0 (nr_neigh_list_lock){+...}-{3:3}: [ 571.289844][T24798] validate_chain+0xb9b/0x2140 [ 571.295112][T24798] __lock_acquire+0xab9/0xd20 [ 571.300285][T24798] lock_acquire+0x120/0x360 [ 571.305287][T24798] _raw_spin_lock_bh+0x36/0x50 [ 571.310552][T24798] nr_remove_neigh+0x25/0xe0 [ 571.315642][T24798] nr_add_node+0x1d9f/0x2570 [ 571.320735][T24798] nr_rt_ioctl+0xc12/0xd50 [ 571.325650][T24798] sock_do_ioctl+0xdc/0x300 [ 571.330659][T24798] sock_ioctl+0x576/0x790 [ 571.335491][T24798] __se_sys_ioctl+0xfc/0x170 [ 571.340585][T24798] do_syscall_64+0xfa/0xfa0 [ 571.345592][T24798] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 571.351993][T24798] [ 571.351993][T24798] other info that might help us debug this: [ 571.351993][T24798] [ 571.362199][T24798] Chain exists of: [ 571.362199][T24798] nr_neigh_list_lock --> nr_node_list_lock --> &nr_node->node_lock [ 571.362199][T24798] [ 571.375996][T24798] Possible unsafe locking scenario: [ 571.375996][T24798] [ 571.383425][T24798] CPU0 CPU1 [ 571.388768][T24798] ---- ---- [ 571.394112][T24798] lock(&nr_node->node_lock); [ 571.398857][T24798] lock(nr_node_list_lock); [ 571.405946][T24798] lock(&nr_node->node_lock); [ 571.413204][T24798] lock(nr_neigh_list_lock); [ 571.417860][T24798] [ 571.417860][T24798] *** DEADLOCK *** [ 571.417860][T24798] [ 571.425979][T24798] 1 lock held by syz.7.5363/24798: [ 571.431063][T24798] #0: ffff888057f5b570 (&nr_node->node_lock){+...}-{3:3}, at: nr_add_node+0xcce/0x2570 [ 571.440792][T24798] [ 571.440792][T24798] stack backtrace: [ 571.446660][T24798] CPU: 1 UID: 0 PID: 24798 Comm: syz.7.5363 Not tainted syzkaller #0 PREEMPT(full) [ 571.446681][T24798] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 571.446691][T24798] Call Trace: [ 571.446697][T24798] [ 571.446704][T24798] dump_stack_lvl+0x189/0x250 [ 571.446724][T24798] ? __pfx_dump_stack_lvl+0x10/0x10 [ 571.446741][T24798] ? __pfx__printk+0x10/0x10 [ 571.446754][T24798] ? stack_trace_save+0x9c/0xe0 [ 571.446775][T24798] print_circular_bug+0x2ee/0x310 [ 571.446793][T24798] check_noncircular+0x134/0x160 [ 571.446811][T24798] validate_chain+0xb9b/0x2140 [ 571.446834][T24798] __lock_acquire+0xab9/0xd20 [ 571.446849][T24798] ? nr_remove_neigh+0x25/0xe0 [ 571.446864][T24798] lock_acquire+0x120/0x360 [ 571.446877][T24798] ? nr_remove_neigh+0x25/0xe0 [ 571.446895][T24798] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 571.446912][T24798] ? nr_remove_neigh+0x25/0xe0 [ 571.446927][T24798] _raw_spin_lock_bh+0x36/0x50 [ 571.446943][T24798] ? nr_remove_neigh+0x25/0xe0 [ 571.446959][T24798] nr_remove_neigh+0x25/0xe0 [ 571.446975][T24798] nr_add_node+0x1d9f/0x2570 [ 571.446992][T24798] ? __asan_memcpy+0x40/0x70 [ 571.447009][T24798] ? nr_call_to_digi+0x126/0x1b0 [ 571.447025][T24798] nr_rt_ioctl+0xc12/0xd50 [ 571.447044][T24798] ? __pfx_nr_rt_ioctl+0x10/0x10 [ 571.447058][T24798] ? lockdep_hardirqs_on+0x9c/0x150 [ 571.447079][T24798] ? apparmor_capable+0x137/0x1b0 [ 571.447096][T24798] ? capable+0x89/0xe0 [ 571.447110][T24798] ? nr_ioctl+0x1b1/0x3b0 [ 571.447123][T24798] sock_do_ioctl+0xdc/0x300 [ 571.447141][T24798] ? __pfx_sock_do_ioctl+0x10/0x10 [ 571.447162][T24798] sock_ioctl+0x576/0x790 [ 571.447179][T24798] ? __pfx_sock_ioctl+0x10/0x10 [ 571.447195][T24798] ? __fget_files+0x3a0/0x420 [ 571.447207][T24798] ? __fget_files+0x2a/0x420 [ 571.447220][T24798] ? bpf_lsm_file_ioctl+0x9/0x20 [ 571.447235][T24798] ? __pfx_sock_ioctl+0x10/0x10 [ 571.447250][T24798] __se_sys_ioctl+0xfc/0x170 [ 571.447267][T24798] do_syscall_64+0xfa/0xfa0 [ 571.447285][T24798] ? lockdep_hardirqs_on+0x9c/0x150 [ 571.447302][T24798] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 571.447315][T24798] ? clear_bhb_loop+0x60/0xb0 [ 571.447329][T24798] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 571.447343][T24798] RIP: 0033:0x7faaa098f6c9 [ 571.447356][T24798] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 571.447367][T24798] RSP: 002b:00007faaa1879038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 571.447382][T24798] RAX: ffffffffffffffda RBX: 00007faaa0be5fa0 RCX: 00007faaa098f6c9 [ 571.447393][T24798] RDX: 00002000000001c0 RSI: 000000000000890b RDI: 0000000000000007 [ 571.447401][T24798] RBP: 00007faaa0a11f91 R08: 0000000000000000 R09: 0000000000000000 [ 571.447410][T24798] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 571.447419][T24798] R13: 00007faaa0be6038 R14: 00007faaa0be5fa0 R15: 00007fffccabe128 [ 571.447436][T24798]