last executing test programs: 4m50.155680585s ago: executing program 2 (id=5950): r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) close(r0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000e40)=@bpf_lsm={0x1d, 0x1a, &(0x7f0000000980)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc91f, 0x0, 0x0, 0x0, 0xfffffff1}, [@map_fd={0x18, 0x6, 0x1, 0x0, r0}, @tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @call={0x85, 0x0, 0x0, 0x55}, @map_val={0x18, 0x0, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x6}, @initr0={0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6}, @exit, @printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xffffffff}}, @map_val={0x18, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x85e}]}, &(0x7f0000000940)='GPL\x00', 0x81, 0x85, &(0x7f0000000b80)=""/133, 0x41100, 0x2, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000d00)={0x0, 0x1}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000e00)=[r0, r0, 0x1, 0xffffffffffffffff, r0, r0, r0, r0, r0], 0x0, 0x10, 0x200}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r3 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r3, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001400add427323b472545b4560a117fffffff81000e220e227f000008925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x2, &(0x7f0000000680)=ANY=[], &(0x7f0000000140)='syzkaller\x00'}, 0x94) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r6, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r5, {}, 0xa}}, 0x26) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bridge0\x00', {0x1}, 0x8}) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_PAUSE_SET(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000080)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r9, @ANYBLOB="0100000010651fbe347b2c2b00000c000180080001"], 0x20}}, 0x0) unshare(0x60020000) r11 = socket$inet6_udp(0xa, 0x2, 0x0) r12 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r12, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, r11, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x4}}, 0x26) sendmsg$L2TP_CMD_TUNNEL_GET(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=r8, @ANYBLOB="2535dd"], 0x14}}, 0x40000000) r13 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r13, 0x0, 0x8, &(0x7f0000000300)=0x2, 0x4) syz_emit_ethernet(0x46, &(0x7f0000000400)=ANY=[@ANYBLOB="0380c2000000bbbbbbbbbbbb08004500003800000000000815c88341bd8c5f1414aa0c0090781200183f2500000000000000000100007f0000017f000001"], 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x1c00, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 4m47.892693783s ago: executing program 2 (id=5976): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket(0x10, 0x803, 0x0) ioctl$FS_IOC_READ_VERITY_METADATA(r1, 0xc0286687, &(0x7f0000000400)={0x3, 0x57e, 0xc4, &(0x7f0000000300)=""/196}) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000001f80), r2) sendmsg$DEVLINK_CMD_RATE_SET(r2, &(0x7f0000002080)={0x0, 0x0, &(0x7f0000002040)={&(0x7f0000001fc0)={0x3c, r3, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24004010}, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e24, 0x8, @loopback, 0xb31}, 0x1c) getsockname$packet(r1, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$inet(r5, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000140)="be38", 0xffe7}], 0x1, &(0x7f0000000080)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414aaac14140000000b0014000000000000000000000007000000df038b0100000000"], 0x38}, 0x0) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r6, &(0x7f0000000040)=ANY=[], 0x6) sendmmsg$inet(r6, &(0x7f0000000b00)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000100)="c6b6f30d52c0d1698a2643bd9f2401992b551e98de86a6bf84a4aec62fce77b3527790f07509fbd676312cf0e995", 0x2e}], 0x1, &(0x7f0000000bc0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @remote, @loopback}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xff}}], 0x38}}, {{&(0x7f0000000280)={0x2, 0x4e20, @local}, 0x10, &(0x7f0000000780)=[{&(0x7f0000000480)="37a4d4cb4a559372a19f85a8a9fb92809765c97a5f34c84586ac8998fe380e4c15adf282265ef292a334ea49f8c8a4f9b9e610f6c70618009678a551f6825c4e8855bb0fb1b6df1d5882c52607efb453b83ec48cbdce10b2c4528e4ec3d3f2e582079579772c5ac21aaa70f2267e104215a66212540426ea9ae5ca77a22c5a8db4236bfa4c4c4e", 0x87}, {&(0x7f0000000540)="2263f049bbbad97933ffd21ab54a6977180bdc7ef20551eaddd85964821d71c9c2a50a9d461fcec824bba1e15de9703ae42054baa272d264d9f958052f3c21115ecc5ad1a2509a84c76560c0e48413b17ae115e27c3c5ed3874ca71dd0de1237a8aadf7277ebdc63a3c3fdcb7931c6e13d3c9770b74aee52327b91ec74181df9ff346bcd148710b66925fab5b487bdaaf419c837e9f918bf880cc1ad5b11c03cb7f9766d08d0481778a0729642adccfacceb297c0e3b881089f340bac14c665832d94eaf710b82e910a7", 0xca}, {&(0x7f0000000640)="8f0a6bb1af2a1404d9427f2be732eda2b88dc273c1151ad625c73719fb6451ec4e60f04567d1b89c64c862e6a697a46f2d95d5fcdcc8b22bc773f3eed0495f05863a890ed1243f12c90ce60738ae0fe9b0d8b86797a381ea884c857e1df2139bbb31e0b27ab9a8b02d4ba8aa6aeea2d33328a115efc74300326f9e80702d61e9ac776603f9a7f9979f79db95a8826d214779cace8af757b9a75461368d052268b9f3199d211dd5f2cd803c5b447ff2ab7679ed6647744daae510a4463fce52bedda3433cbcd38fceaeb265d40103805b740b6258bb4896ae9c4c8f507882caa83287f268", 0xe4}, {&(0x7f0000000740)="52e1eacfb0e5d3106fbf21", 0xb}], 0x4, &(0x7f00000007c0)=[@ip_retopts={{0x14, 0x0, 0x7, {[@noop, @end]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xfb}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @rand_addr=0x64010100, @empty}}}], 0x50}}, {{&(0x7f00000008c0)={0x2, 0x4e21, @empty}, 0x10, &(0x7f0000000a80)=[{&(0x7f0000000900)="bb692f9d481a59f72f448d92adb14d4136a05eb665bf6bd8de1f37b695660001be41a9c064720597475e1a7bae0fb2f45a3023a9db9193b7ac5bc718bb38780cf3641c10d1df02f4af034b5b2cd59d04af89503763bb3eb23a66d4cc9a696efc0b5dd81475a2cf30839c2dd7dbca6ab887c9baafdb2ac5b2d54a33b8a5b2aa774f6f77271b4642bb2fa4a9dd6347369c37a7ac09a591962fb329ba5453a3de41224415cee06b48ea45", 0xa9}, {&(0x7f00000009c0)="e32cc102472e856bee33552dbf5720e68977ace990432629792cf372a98f104f2ca48d4471b9353179506f903f69400fe6a0f90f04bcc64ed6ff02492f1bcb5acb012fab0546f2fbb89024155944c8214da2e32e7d39f5103ac5576d266ea761e21afe0b9dd50750ba1d0c27786c9fd211a05cc3bb2407a62ab36951e983667785e724dda4027e6593f441b449ac331c7f2e6b2600bc88dff2714030043cac409a86e0aa93e6cdc4f2dd32", 0xab}], 0x2, &(0x7f0000000ac0)=[@ip_ttl={{0x14, 0x0, 0x2, 0xffff}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x3}}], 0x30}}], 0x3, 0x800) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="4000000010003704feffffff0000000000000000", @ANYRES32=r4, @ANYBLOB="c13c06001b14bf262000128008000100736974001400028008000100e00000020500050081"], 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmmsg$inet(r0, &(0x7f00000018c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000080)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880) socket$inet6(0xa, 0x2, 0x0) (async) socket(0x10, 0x803, 0x0) (async) ioctl$FS_IOC_READ_VERITY_METADATA(r1, 0xc0286687, &(0x7f0000000400)={0x3, 0x57e, 0xc4, &(0x7f0000000300)=""/196}) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r1) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000001f80), r2) (async) sendmsg$DEVLINK_CMD_RATE_SET(r2, &(0x7f0000002080)={0x0, 0x0, &(0x7f0000002040)={&(0x7f0000001fc0)={0x3c, r3, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24004010}, 0x0) (async) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e24, 0x8, @loopback, 0xb31}, 0x1c) (async) getsockname$packet(r1, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) (async) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) sendmsg$inet(r5, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000140)="be38", 0xffe7}], 0x1, &(0x7f0000000080)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414aaac14140000000b0014000000000000000000000007000000df038b0100000000"], 0x38}, 0x0) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(r6, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) write$bt_hci(r6, &(0x7f0000000040)=ANY=[], 0x6) (async) sendmmsg$inet(r6, &(0x7f0000000b00)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000100)="c6b6f30d52c0d1698a2643bd9f2401992b551e98de86a6bf84a4aec62fce77b3527790f07509fbd676312cf0e995", 0x2e}], 0x1, &(0x7f0000000bc0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @remote, @loopback}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xff}}], 0x38}}, {{&(0x7f0000000280)={0x2, 0x4e20, @local}, 0x10, &(0x7f0000000780)=[{&(0x7f0000000480)="37a4d4cb4a559372a19f85a8a9fb92809765c97a5f34c84586ac8998fe380e4c15adf282265ef292a334ea49f8c8a4f9b9e610f6c70618009678a551f6825c4e8855bb0fb1b6df1d5882c52607efb453b83ec48cbdce10b2c4528e4ec3d3f2e582079579772c5ac21aaa70f2267e104215a66212540426ea9ae5ca77a22c5a8db4236bfa4c4c4e", 0x87}, {&(0x7f0000000540)="2263f049bbbad97933ffd21ab54a6977180bdc7ef20551eaddd85964821d71c9c2a50a9d461fcec824bba1e15de9703ae42054baa272d264d9f958052f3c21115ecc5ad1a2509a84c76560c0e48413b17ae115e27c3c5ed3874ca71dd0de1237a8aadf7277ebdc63a3c3fdcb7931c6e13d3c9770b74aee52327b91ec74181df9ff346bcd148710b66925fab5b487bdaaf419c837e9f918bf880cc1ad5b11c03cb7f9766d08d0481778a0729642adccfacceb297c0e3b881089f340bac14c665832d94eaf710b82e910a7", 0xca}, {&(0x7f0000000640)="8f0a6bb1af2a1404d9427f2be732eda2b88dc273c1151ad625c73719fb6451ec4e60f04567d1b89c64c862e6a697a46f2d95d5fcdcc8b22bc773f3eed0495f05863a890ed1243f12c90ce60738ae0fe9b0d8b86797a381ea884c857e1df2139bbb31e0b27ab9a8b02d4ba8aa6aeea2d33328a115efc74300326f9e80702d61e9ac776603f9a7f9979f79db95a8826d214779cace8af757b9a75461368d052268b9f3199d211dd5f2cd803c5b447ff2ab7679ed6647744daae510a4463fce52bedda3433cbcd38fceaeb265d40103805b740b6258bb4896ae9c4c8f507882caa83287f268", 0xe4}, {&(0x7f0000000740)="52e1eacfb0e5d3106fbf21", 0xb}], 0x4, &(0x7f00000007c0)=[@ip_retopts={{0x14, 0x0, 0x7, {[@noop, @end]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xfb}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @rand_addr=0x64010100, @empty}}}], 0x50}}, {{&(0x7f00000008c0)={0x2, 0x4e21, @empty}, 0x10, &(0x7f0000000a80)=[{&(0x7f0000000900)="bb692f9d481a59f72f448d92adb14d4136a05eb665bf6bd8de1f37b695660001be41a9c064720597475e1a7bae0fb2f45a3023a9db9193b7ac5bc718bb38780cf3641c10d1df02f4af034b5b2cd59d04af89503763bb3eb23a66d4cc9a696efc0b5dd81475a2cf30839c2dd7dbca6ab887c9baafdb2ac5b2d54a33b8a5b2aa774f6f77271b4642bb2fa4a9dd6347369c37a7ac09a591962fb329ba5453a3de41224415cee06b48ea45", 0xa9}, {&(0x7f00000009c0)="e32cc102472e856bee33552dbf5720e68977ace990432629792cf372a98f104f2ca48d4471b9353179506f903f69400fe6a0f90f04bcc64ed6ff02492f1bcb5acb012fab0546f2fbb89024155944c8214da2e32e7d39f5103ac5576d266ea761e21afe0b9dd50750ba1d0c27786c9fd211a05cc3bb2407a62ab36951e983667785e724dda4027e6593f441b449ac331c7f2e6b2600bc88dff2714030043cac409a86e0aa93e6cdc4f2dd32", 0xab}], 0x2, &(0x7f0000000ac0)=[@ip_ttl={{0x14, 0x0, 0x2, 0xffff}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x3}}], 0x30}}], 0x3, 0x800) (async) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="4000000010003704feffffff0000000000000000", @ANYRES32=r4, @ANYBLOB="c13c06001b14bf262000128008000100736974001400028008000100e00000020500050081"], 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) sendmmsg$inet(r0, &(0x7f00000018c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000080)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880) (async) 4m47.763824197s ago: executing program 2 (id=5979): r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x7, &(0x7f0000000200)=0xd, 0x4) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000280)={'vcan0\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f00000004c0)={&(0x7f0000000140)={0x1d, r1}, 0x10, &(0x7f0000000080)={&(0x7f0000000000)=@can={{0x0, 0x0, 0x0, 0x1}, 0xfe, 0x1, 0x4, 0x0, "0500000000000002"}, 0x10}, 0x1, 0x0, 0x0, 0x84844}, 0x0) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x202000, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) (async) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) (async) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) r7 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2c, 0x2, {0x0, 0x0, 0x0, r8, {0xffff, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29d}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0xf4, 0x0, 0x4, 0xb, 0x3}, 0x2f}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x884}, 0x40) r9 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r9, 0x107, 0xf, &(0x7f0000000600), 0x56) (async) sendmsg$kcm(r9, &(0x7f00000000c0)={&(0x7f0000000280)=@xdp={0x2c, 0x0, r8, 0x18}, 0x80, &(0x7f00000034c0)=[{&(0x7f00000001c0)="27030200dc0f14000e0005004024c102000000", 0x13}, {&(0x7f00000022c0)="ffc9ace87aade11690dd52a158e0b1c49686ce569fbf520db4cad1", 0x1b}], 0x2}, 0x8000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb01002000000000000000000005000000f2ffff0102000000000000be"], 0x0, 0x36, 0x0, 0x1, 0xb000000}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1c, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18020000b3b2000000000000ffff000000000000000000009500000000000000", @ANYRESOCT=r1], &(0x7f0000000100)='syzkaller\x00', 0x4, 0x9c, &(0x7f0000001300)=""/156, 0x0, 0xa}, 0x94) 4m44.957468436s ago: executing program 2 (id=5991): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="010000000000ff7f1c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x428a4}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'dummy0\x00'}, @IFLA_WEIGHT={0x8, 0xf, 0x5}]}, 0x3c}}, 0x8000) sendmsg$nl_route(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x200e3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, 0x0, 0x0) (async) setsockopt$packet_fanout(r5, 0x107, 0x12, 0x0, 0x0) r6 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000fbe000)={0x0, &(0x7f0000000100)}, 0x10) socket$netlink(0x10, 0x3, 0x4) (async) socket$netlink(0x10, 0x3, 0x4) socket$packet(0x11, 0x2, 0x300) (async) socket$packet(0x11, 0x2, 0x300) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ANNOUNCE(r7, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000680)={0x18, r8, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x24048011}, 0xc0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r9, &(0x7f0000002080)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) recvmsg(r9, &(0x7f0000001100)={0x0, 0x0, 0x0}, 0x142) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r2, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="040000008a7e2319e254b5746c99226cb2d2d62994a346022dec91cfdaebc9f8b2dcd68e25995a508f27e962a65b56a0fe23bd3db03ffafa2248", @ANYRES16=r8, @ANYBLOB="00032abd7000fddbdf250a00000008000300040000000400018008000200060000000800030002000000050005000800000008000400040000000800020008000000"], 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x8d1) socket$inet6_sctp(0xa, 0x5, 0x84) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000340)={'tunl0\x00'}) r11 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r11, 0x10e, 0xc, &(0x7f0000000340)=0x6, 0x4) (async) setsockopt$netlink_NETLINK_NO_ENOBUFS(r11, 0x10e, 0xc, &(0x7f0000000340)=0x6, 0x4) sendmsg$nl_route(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001a0001000000ff7f0000000080000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00', @ANYRES32=r11], 0x24}}, 0x0) (async) sendmsg$nl_route(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001a0001000000ff7f0000000080000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00', @ANYRES32=r11], 0x24}}, 0x0) ioctl$FICLONERANGE(r11, 0x4020940d, &(0x7f00000000c0)={{r1}, 0x9, 0x4, 0x5}) syz_emit_ethernet(0x6e, &(0x7f0000000500)=ANY=[@ANYBLOB="bbbbbbbbbbbbffffffffffff86dd6000000000233a0120010000000000000000000000000000ff0200000000000000000000000000010300907804000000625fc26a0056320100000000000000000000000000000000fc020000000000000000000000000000987c596a881c3093e1353a42c871b0acfcd8b373d1da47926014779838dedc813331d6ef4359b7120cbdc56b5edb84a5933cd2aa78ab8a4c0759653b4654a6ed317a5a63c5ecca"], 0x0) 4m44.096208671s ago: executing program 2 (id=6002): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x122}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r8, @ANYBLOB="0000000000000000b705000000000000850000007500000095"], 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x43}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r9}, 0xc) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) socket(0x8, 0x3, 0x0) 4m40.950942626s ago: executing program 2 (id=6038): r0 = socket$kcm(0x10, 0x2, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$TUNSETNOCSUM(r1, 0x400454c8, 0x0) (async, rerun: 32) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d006a0f000000e8fe55a1180015000600142603600e1209000a0044000000a80016000a0001", 0x37}], 0x1}, 0x0) (rerun: 32) unshare(0x100000) (async, rerun: 32) r2 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) sendmsg$nl_generic(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000340)={0x14, 0x27, 0x1, 0x70bd2b, 0x25dfdbfe, {0x6}}, 0x14}}, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0xfe33) 4m25.893924286s ago: executing program 32 (id=6038): r0 = socket$kcm(0x10, 0x2, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$TUNSETNOCSUM(r1, 0x400454c8, 0x0) (async, rerun: 32) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d006a0f000000e8fe55a1180015000600142603600e1209000a0044000000a80016000a0001", 0x37}], 0x1}, 0x0) (rerun: 32) unshare(0x100000) (async, rerun: 32) r2 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) sendmsg$nl_generic(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000340)={0x14, 0x27, 0x1, 0x70bd2b, 0x25dfdbfe, {0x6}}, 0x14}}, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0xfe33) 2m28.677673552s ago: executing program 5 (id=6819): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b80)=ANY=[], 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r1}, 0x4) r2 = socket$inet6(0xa, 0x3, 0x7) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8001}, 0x20000000) setsockopt$inet6_int(r2, 0x29, 0x4b, &(0x7f0000000000)=0x2, 0x4) sendmmsg$inet6(r2, &(0x7f0000004580)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='$\x00\x00\x00\x00\x00\x00\x00)\x00\x00\x002'], 0x28}}], 0x1, 0x0) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x3f, &(0x7f0000000180)=0x79cf, 0x4) recvfrom$inet6(r2, 0x0, 0x0, 0x10000, &(0x7f0000000040)={0xa, 0x4e21, 0x9, @private0, 0x23}, 0x1c) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000640)={r0, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0x1c, &(0x7f0000000680)=ANY=[@ANYBLOB="18080000cbb60000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000008000000bf0920000000000035090100000000009500000000000000bf080000000000007b8af8ff00000000b7080000020000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000020000b7050000080000001c00000000000000bf9800000000000056080000000000008500000006000000b70000000200000095"], &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) 2m28.484868696s ago: executing program 5 (id=6822): r0 = socket(0x1e, 0x4, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, &(0x7f0000000480), 0x4) recvmmsg(r0, &(0x7f0000002500)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000001980)=""/96, 0x60}], 0x1, 0x0, 0x18}, 0x9}, {{0x0, 0x0, &(0x7f00000022c0)=[{&(0x7f0000002280)=""/58, 0x3a}], 0x1, &(0x7f0000002300)=""/12, 0xc}, 0x90}], 0x2, 0x40002122, 0x0) sendmsg$tipc(r0, &(0x7f0000000200)={&(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x3, {0x1, 0x1, 0x2}}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000500)="e8", 0x1}], 0x1}, 0x4800) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="5c000000020605000000000000000000000000000c00078005001500267d00000500010007000000050005000a000000050004"], 0x5c}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r2, 0x40305839, &(0x7f0000000000)={0x17c04, 0xffffffffffffffff, 0x0, 0xfcc3}) r3 = accept4(r2, &(0x7f0000000080)=@x25, &(0x7f0000000100)=0x80, 0x80800) setsockopt$sock_int(r3, 0x1, 0xb, &(0x7f0000000180)=0x2, 0x4) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r3) sendmsg$ETHTOOL_MSG_DEBUG_SET(r1, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c000280"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) 2m27.923736189s ago: executing program 5 (id=6827): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x30}}, 0x0) (async, rerun: 32) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x905, 0x0, 0x0, {0x0, 0x0, 0x4c, 0x0, 0x60281, 0x300}, [@IFLA_GROUP={0x8}, @IFLA_OPERSTATE={0x5, 0x10, 0x6}]}, 0x30}, 0x1, 0xffffa888}, 0x0) (rerun: 32) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c0000000201010200000000000000000200000608000840000080810800034000003000080015"], 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x4048890) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) (async) close(0x3) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000cd03000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r4, 0xffffffffffffffff}, &(0x7f0000000300), &(0x7f0000000340)=r5}, 0x20) r7 = socket$inet6_udp(0xa, 0x2, 0x0) (async) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000400)={r4, &(0x7f0000000080)="5038c685e40b6dfca1ea32cee3a2ae3c19d8f84297cc4316b3943e0c5dc391", &(0x7f00000003c0)=@tcp, 0x1}, 0x20) (async, rerun: 64) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r5, 0x18000000000002a0, 0x5ee, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) (async, rerun: 64) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback, 0x7fc}], 0x2c) getsockname$packet(0xffffffffffffffff, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000005c0)=0x14) r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000980)={&(0x7f0000000780)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xe6, 0xe6, 0x4, [@union={0x0, 0x4, 0x0, 0x5, 0x1, 0xffe00, [{0xc, 0x0, 0x19}, {0x5, 0x5, 0x8}, {0x1, 0x5, 0x7}, {0x5, 0x5, 0x3b}]}, @type_tag={0x9, 0x0, 0x0, 0x12, 0x2}, @struct={0x0, 0x1, 0x0, 0x4, 0x1, 0xb, [{0x9, 0x4}]}, @func={0x3, 0x0, 0x0, 0xc, 0x1}, @datasec={0xb, 0x9, 0x0, 0xf, 0x2, [{0x2, 0x56d4, 0x9}, {0x5, 0x4, 0x7}, {0x2, 0xf, 0x7}, {0x1, 0xf, 0x1}, {0x1, 0x7, 0x101}, {0x4, 0xc, 0x2}, {0x1, 0x200, 0xe4d7a1f}, {0x5, 0x5, 0xd7e}, {0x1, 0xffffd1f6, 0x4}], "d141"}]}, {0x0, [0x5f, 0x5f]}}, &(0x7f00000008c0)=""/156, 0x104, 0x9c, 0x1, 0x7ff, 0x10000}, 0x28) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000a00)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x1b9, '\x00', r8, r9, 0x3, 0x2, 0x5}, 0x50) (async) sendto$inet6(r2, &(0x7f0000000680)="e4", 0x1, 0x0, &(0x7f00000006c0)={0xa, 0x4e23, 0x0, @loopback, 0x5}, 0x1c) r10 = socket$inet_sctp(0x2, 0x1, 0x84) (async) r11 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2000000018140101"], 0x20}, 0x1, 0x0, 0x0, 0x8}, 0x0) (async) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r6) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000002c0)={'wlan1\x00', 0x0}) (rerun: 32) sendmsg$NL80211_CMD_DISASSOCIATE(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x64, r12, 0x400, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r13}, @void}}, [@NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x2}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_REASON_CODE={0x6}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @random="a33f5630f413"}, @NL80211_ATTR_MAC={0xa, 0x6, @random="207907c3dfc4"}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0x11) setsockopt$sock_int(r10, 0x1, 0xf, &(0x7f0000000600)=0x9, 0x4) (async) setsockopt$sock_int(r10, 0x1, 0x2, &(0x7f0000000040)=0x7, 0x4) (async, rerun: 32) listen(r10, 0x7) (async, rerun: 32) recvmmsg(r2, &(0x7f0000000740)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x40000112, 0x0) 2m27.154592014s ago: executing program 5 (id=6831): ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000180)={0xffffffffffffffff, &(0x7f0000000000)='cgroup\x00', 0x101, 0x0, 0xf, 0x0, 0x0}) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='cpu.idle\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000140)=0xf85, 0x12) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r2, &(0x7f00000003c0)={0x0, 0xfffffffffffffd90, &(0x7f0000000380)={&(0x7f0000000240)={0x14, r3, 0x701, 0x74bd2b, 0x0, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x20004074}, 0x0) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b80)=ANY=[], 0x0}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000"], 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r7, 0xc004743e, &(0x7f0000000000)=0x3) ioctl$PPPIOCSPASS(r7, 0x40107447, &(0x7f0000000080)={0x2, &(0x7f00000001c0)=[{0x40, 0x0, 0x0, 0xffeffffc}, {0x6, 0x0, 0x0, 0x8}]}) write$ppp(r7, &(0x7f0000000300)="5af9", 0x2) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r6}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000640)={r5, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0x1c, &(0x7f0000000680)=ANY=[@ANYBLOB="18080000cbb60000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000008000000bf0920000000000035090100030000009500000000000000b7080000000000007b8afbff00000000b7080000020000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r8, @ANYBLOB="0000000000020000b7050000080000001c20000000000000bf98000000000000560800000000000085000000bc000000b70000000200000095"], &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) sendmsg$netlink(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000a00)={0x114, 0x30, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x103, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0xfac08}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @empty}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be", @typed={0x4, 0xe9}]}]}, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000001100), r2) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000002400)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0xa}, 0x10}, 0x94) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x20004090) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x10, &(0x7f0000000040)=0x3, 0x4) sendto(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000008c0)={'bridge0\x00'}) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000001180)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001140)={0x0, 0x6cc}, 0x1, 0x0, 0x0, 0x44}, 0x41) syz_genetlink_get_family_id$SEG6(&(0x7f0000004040), 0xffffffffffffffff) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x4d, 0x0}, 0x40) 2m26.651063024s ago: executing program 5 (id=6837): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$inet6(0xa, 0x2, 0x3a) sendto$inet6(r2, 0x0, 0x0, 0x4004, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_INITMSG(r2, 0x84, 0x2, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$inet(0xffffffffffffffff, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x2f}}, 0x10) sendmmsg$inet(r3, 0x0, 0x0, 0x2090) sendto$inet(0xffffffffffffffff, &(0x7f0000000580), 0x0, 0x10008095, 0x0, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r5, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x9}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0xfffffffffffffffd, 0x0, 0x4, 0x0, 0x0, 0x2, 0x7}, {0x0, 0x0, 0x400000000}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3e}}, 0x4d5, 0x32}, 0x0, @in=@private=0xa0100fe, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe, 0xc00}}, 0xe8) sendmmsg(r5, &(0x7f0000007fc0), 0x800001d, 0x1c) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) socket$pppl2tp(0x18, 0x1, 0x1) r6 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$PPPIOCSFLAGS(r6, 0x40047459, &(0x7f00000002c0)=0x24) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000340), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x2b, 0x80801, 0x1) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e22, 0x10000, @private2={0xfc, 0x2, '\x00', 0x1}, 0x2}, 0x1c) pselect6(0x40, &(0x7f00000003c0)={0x4, 0x8, 0x833, 0xfffffffffffffffe, 0x7, 0x2, 0xd, 0x1}, 0x0, &(0x7f0000000440)={0x8, 0x7, 0x80000001, 0x3, 0x3, 0xfffffffffffffffd, 0x2, 0x2}, &(0x7f0000000480)={0x0, 0x3938700}, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="1a30d3a84f1a0f948a56", @ANYRES16=r7, @ANYBLOB="010026bd7000fedbdf25050000000800090002000000060001000700000008000c00aa0a000008000b0004000000"], 0x34}, 0x1, 0x0, 0x0, 0x20006911}, 0x0) 2m25.421943193s ago: executing program 5 (id=6847): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f00000000c0)={0x1d, r1}, 0x10) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff000000000200"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000004000a98000000060a0b040000000000000000020000006c00048018000180080001006f7366000c000280080001400000000424000180090001006d6574610000000014000280080002400000000c08000340000000042c0001800a0001006c696d69740000001c0002800c00014000000000000000230c00024000000000000000010900010073797a3000000000090002"], 0xc0}}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd637f4b22667f2f00db5b686158bbcfe8875a65969ff57b00"/50], 0xfdef) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f00000002c0)={0x40, 0x0, 0x1}, 0x10) r6 = socket(0x10, 0x2, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETCHAIN(r7, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000600)={0x14, 0x4, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x20000004) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000080)={0x8, 0x6, 0x2}, 0x10) write(r6, &(0x7f0000000480)="1c0000001a009b8a140000003b00"/28, 0x1c) recvmmsg(r6, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0xc, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r6, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000004c0)={&(0x7f0000000340)={0x50, 0x140b, 0x100, 0x70bd28, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x5}, @RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x4}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x4}]}, 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x4000080) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x14, 0x27, 0x301, 0x2270bd24, 0x25dfdbff, {0xd}}, 0x14}, 0x1, 0x0, 0x0, 0x4008}, 0x4044810) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r8, 0x3e8, 0xe80, 0x0, &(0x7f0000000000)="c1df07000000d30a298ee68886dd87", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000240)={0x3, &(0x7f0000000140)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x20, 0x0, 0x8, 0xfffff010}, {0x6, 0xba, 0x2, 0xefff}]}, 0x10) syz_emit_ethernet(0x32, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbb8b5cbbbb0800450000a70000000200119078000000000000000000000000010000000000060080000000"], 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001f00)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0xfff1, 0xa}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}, @TCA_BPF_CLASSID={0x8, 0x3, {0xd, 0xa}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) socket$packet(0x11, 0x3, 0x300) 2m24.323874539s ago: executing program 1 (id=6856): unshare(0x400) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000002c0)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB='&\x00'/12, @ANYRES32, @ANYBLOB="02ee8cb74a0a006f3e3a95cdc17ddbf7692005ea4a27c3598a229c7548c80a423aa066832a63c17dfd34c68b4f66789ab27a6cdf08e45fe32f3a87c4f841929a309cbc9dc8fe836691fc61c1585fcc5419a7ed3df2fc3e83dd92a913e8098ff3637295cfc1a43063cbb03d8d59e3d932f0ff482f12bf26a7d58093cf682ac3aadd2c7ba3de1cf0a0b5c841b392cd01a164d2319ca8264faeddcdceae2e0f46c1ec061be09c9142a552449a141046da95d05176f1a7aafa91096e55a0747c3c7de26b30efaddcf22f3afc99d0d9361d6b737fe6831f51d788380aa45d68d9608cd88dfb761d", @ANYRES64=0x0], 0x10) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x129642, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) unshare(0x10000400) socket$unix(0x1, 0x2, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25GSUBSCRIP(r2, 0x89e0, &(0x7f0000000600)={'ip6tnl0\x00', 0xe5ed, 0x6d0}) recvmmsg(r1, &(0x7f0000003d00)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x40002000, 0x0) setsockopt$sock_int(r1, 0x1, 0x20, &(0x7f0000000200)=0x1, 0x4) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'veth1_vlan\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x1, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xd}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x1ff}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x4}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000540)=ANY=[@ANYRES32=0x0, @ANYRES32=r6, @ANYBLOB='7\x00'/12, @ANYRES32, @ANYBLOB="ef4fadee29451765895782b5057b4fd07fa7780f000000000000000651b614feb5a7b5e4f3cd9d8ae123cbca4b83687acb1ec207512ee1fff42860f7ec43f6910d215b12efe58dcbacba38b4dc03cd12bd56dd11cffa1cd86f2e85442276096c37b3a106068369", @ANYRES64=0x0], 0x20) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000004c0)={r6, 0x58, &(0x7f0000000440)}, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) openat$nci(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x1, 0x70bd25, 0xfffffffd, {0x0, 0x0, 0x0, r8, {0xb, 0xb}, {0xffe0}, {0xc}}}, 0x24}}, 0x41814) getsockopt$inet_sctp_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f0000000240), &(0x7f0000000400)=0x8) 2m23.256307336s ago: executing program 1 (id=6867): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x19, 0x4, 0x4, 0x2}, 0x50) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r2 = socket(0x28, 0x801, 0x0) connect$vsock_stream(r2, &(0x7f0000000880)={0x28, 0x0, 0x0, @local}, 0x10) shutdown(r2, 0x1) connect$rds(r2, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000040)={0x8000, 0x7, 0x9, 0xfbffffff, 0xf}) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x6, 0xc, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f00000004c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) 2m23.107006847s ago: executing program 1 (id=6870): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000100)={0x2, 0x0, @remote}, 0x10) setsockopt$sock_int(r1, 0x1, 0x1d, &(0x7f0000000200)=0xc7f, 0x4) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r1, 0x6, 0x15, &(0x7f0000000000)=0x401, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="1800b38a27c5ff000008000000000000008000000073119a000000000ff500950000000000e01ada5c565f8941e49424aace78600c2c1f7b25074115c97cd297ba0ca815d43fa68fe83183f78e13bd5f890d793930c77005d1370854cff3099c9c1228d255cb8b5893c5490d5bae4cae96b1b948bf3c0a3fe6c86bdc77a64a363240847dcb01a21c047415572c339670962b049b29a79e7c1e9521618b635d2e1401478c2f2c87e7e2aca333c7abcedf3121ada1d82b6509e7b16d9bfdab94"], &(0x7f0000000140)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x3d}}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYRES64=r0], 0x134}, 0x1, 0x0, 0x0, 0x2000000}, 0x4000) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x300) setsockopt$inet_int(r0, 0x0, 0xd, &(0x7f0000000180)=0x80, 0x4) recvmmsg(r0, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) 2m22.181987527s ago: executing program 1 (id=6878): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x4005, @broadcast, 'ipvlan1\x00'}}, 0x1e) sendmmsg(r0, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000600)={0x0, @in={{0x2, 0x4e23, @loopback}}, 0x5, 0x40004, 0x3, 0x3}, &(0x7f0000000200)=0x98) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f00000000c0)={r2, 0x6}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000080)={0x0, 0x3ea}, 0x8) r3 = socket$pppoe(0x18, 0x1, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x31}}, 0x0) getsockname$packet(r5, &(0x7f00000005c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[], 0x4c}}, 0x0) sendto$packet(r4, &(0x7f0000000240)="7eeb99b6f78c67515ea2f0d01d76", 0xe, 0x94, &(0x7f0000000140)={0x11, 0x86dd, r6, 0x1, 0x6, 0x6, @local}, 0x14) connect$pppoe(r3, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r4, 0x8983, &(0x7f0000000180)={0x6, 'veth1_macvtap\x00', {0x101}, 0x3}) bind$bt_l2cap(r8, &(0x7f0000000040)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) setsockopt$bt_BT_DEFER_SETUP(r8, 0x112, 0xf, &(0x7f0000000080), 0x4) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_GET(r5, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001e80)={&(0x7f0000001c00)=ANY=[@ANYBLOB="60020000", @ANYRES16=0x0, @ANYBLOB="180025bd7000fbdbdf2507000000180001801400020076657468315f746f5f626174616476004400018008000100", @ANYRES32=r6, @ANYBLOB="08000100", @ANYRES32=r6, @ANYBLOB="08000100", @ANYRES32=r6, @ANYBLOB="1400020076657468305f766972745f77696669001400020064766d727031000000000000000000000c00018008000300030000003c000180140002006272696467655f736c6176655f31000008000100", @ANYRES32=r6, @ANYBLOB="0800030000000000140002007369743000000000000000000000000014000180080003000200000008000100", @ANYRES32=r6, @ANYBLOB="5c0001800800030001000000140002007767320000000000000000000000000008000100", @ANYRES32=r6, @ANYBLOB="08000300857e5ba908000100", @ANYRES32=r6, @ANYBLOB="01020100", @ANYRES32=0x0, @ANYBLOB="08000300030000001400020073797a6b616c6c6572310000000000003000018014000200697036746e6c30000000000000000000080003000100000008000100", @ANYRES32=0x0, @ANYBLOB="080003000200000074000180080003000200000008000300020000001400020076657468315f766c616e000000000000140002006d6163766c616e3000000000000000001400020076657468305f746f5f7465616d00000008000300030000001400020069703665727370616e3000000000000008000100", @ANYRES32=r6, @ANYBLOB="5c00018008000100", @ANYRES32=r9, @ANYBLOB="08000100", @ANYRES32=r6, @ANYBLOB="08000300030000001400020076657468315f746f5f7465616d00000014000200636169663000000000000000000000000800030001000000080003000300000008000100", @ANYRES32=r4, @ANYBLOB="38000180080003000000000008000300000000002a0003000200000014000200687372300000000000000000000000000800030001000000"], 0x260}, 0x1, 0x0, 0x0, 0x4c881}, 0x800) sendmsg$nl_generic(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501"], 0x14}, 0x1, 0x0, 0x0, 0x18050}, 0x44014) recvmmsg(r9, &(0x7f0000004480)=[{{0x0, 0x0, &(0x7f0000001bc0)=[{&(0x7f0000000980)=""/112, 0x70}, {&(0x7f0000000a80)=""/207, 0xcf}, {&(0x7f0000000b80)=""/12, 0xc}, {&(0x7f0000000bc0)=""/4096, 0x1000}], 0x4}, 0xd}], 0x1, 0x12, 0x0) r10 = socket$inet(0xa, 0x801, 0x84) connect$inet(r10, &(0x7f0000004cc0)={0x2, 0x0, @private=0xa010102}, 0xd) listen(r10, 0x8) r11 = syz_genetlink_get_family_id$batadv(0x0, r7) sendmsg$BATADV_CMD_TP_METER(r5, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="88416f3711648ae411340e536f5b01221e18ead2c44344eaca63", @ANYRES16=r11, @ANYBLOB="000127bd7000ffdbdf250200000008002c0006000000"], 0x1c}, 0x1, 0x0, 0x0, 0x100c0}, 0x4c801) accept4(r10, 0x0, 0x0, 0x0) 2m22.001759637s ago: executing program 1 (id=6880): socket$kcm(0xa, 0x3, 0x87) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="020200020900000000000000000400000200080008000000700000000400005054f9dce400020001000000000000000500000000a00300b65c340000aa28bbfbbb000002000000ac1414ff0000"], 0x48}, 0x1, 0x7}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x50, 0x7, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x8000}, 0x1) write$tun(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd120000000000140000006000000003088700fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef) 2m21.578581102s ago: executing program 1 (id=6884): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b70300000000ff80"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380)={r1}, 0xc) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9feb010018000000000000005000000050000000020000000b0000000000001104000000070000000a0000000000000203000000000000000500000d00404500020000000100000000000000000000000d000000feffffff100000000000000001000000030010"], 0x0, 0x6a, 0x0, 0x0, 0x1}, 0x28) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r3, 0x0, 0x60, &(0x7f0000000640)={'filter\x00', 0x5, 0x4, 0x3f0, 0x110, 0x110, 0x110, 0x308, 0x308, 0x308, 0x4, 0x0, {[{{@arp={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffff00, 0x0, 0x4, 0x4, {@mac=@remote, {[0xff, 0xff, 0x0, 0x0, 0x0, 0xff]}}, {@empty, {[0xff, 0x0, 0x0, 0x0, 0xff, 0xff]}}, 0x3, 0x8, 0x7, 0x9, 0x6, 0x4, 'veth0_to_batadv\x00', 'ipvlan0\x00', {0xff}, {0xff}, 0x0, 0x2}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @private, @empty, 0xa}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @local, @private=0x1000, 0x0, 0xffffffff}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x2, 0x1}}, {0x4}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000}, 0x4000058) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f00000006c0)=@security={'security\x00', 0x44, 0x4, 0x578, 0xffffffff, 0x390, 0x240, 0x240, 0xffffffff, 0xffffffff, 0x4a8, 0x4a8, 0x4a8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x203, 0x1f8, 0x240, 0x8502, {}, [@common=@inet=@hashlimit2={{0x150}, {'ip6erspan0\x00', {0x3ff, 0x2, 0x0, 0x2, 0x2fff, 0x849a, 0x1, 0x18, 0x18}, {0x8}}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x9, 'syz0\x00', {0x2}}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, [0xff, 0xff, 0xff, 0xff], [0xffffffff, 0xff, 0x0, 0xffffff00], 'erspan0\x00', 'caif0\x00', {0x80}, {}, 0x2c, 0x0, 0x4, 0x50}, 0x0, 0x128, 0x150, 0x0, {0x0, 0x11}, [@common=@eui64={{0x28}}, @common=@inet=@hashlimit1={{0x58}, {'batadv_slave_0\x00', {0x8, 0x7, 0x101, 0x3, 0x4, 0x4, 0xfffffff8, 0x0, 0x78}, {0x9}}}]}, @common=@unspec=@NFQUEUE2={0x28}}, {{@uncond, 0x0, 0xa8, 0x118}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x1, 0x7, 0x81, 0x1, 0x0, "d13aea835ab25d2af06d2a594bd55044f3f8f4a6ee1c3d886408088b5319e5294d4192982093b0f1e78cdb4585b98822e00d4b509e74d3ebb43b153f2481c6e3"}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5d8) close(r6) socket$nl_sock_diag(0x10, 0x3, 0x4) r8 = socket$igmp(0x2, 0x3, 0x2) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000c40)=ANY=[@ANYBLOB="14000000270001031dbd5002fadbdf2501"], 0x14}}, 0x0) setsockopt$MRT_TABLE(r8, 0x0, 0xcf, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x0, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x800, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f00000002c0)={0x8, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000300)=[{0x2, 0x1, 0x7, 0x8}], 0x10, 0x80000000}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) ioctl$SIOCSIFHWADDR(r6, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}}) sendmsg$nl_generic(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x28, 0x14, 0x800, 0x70bd2a, 0x25dfdbfd, {0x10}, [@generic="123bbc652379a67f1a58", @typed={0x8, 0xcf, 0x0, 0x0, @fd=r1}]}, 0x28}, 0x1, 0x0, 0x0, 0x4805}, 0x20004000) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000c40), r11) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r11, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)={0x54, r12, 0x100, 0x0, 0x0, {0x6, 0x0, 0x900}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @loopback}, @NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:utempter_exec_t:s0\x00'}]}, 0x54}, 0x2, 0x34005, 0x0, 0x804}, 0x0) r13 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r13, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x1c, 0x68, 0x1, 0xfcfd, 0x25dfdbfb, {0x2, 0x0, 0x1}, [@NHA_FDB={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x5}, 0x0) getsockname$packet(r13, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r10, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="200000006a0005062cbd700500000000000000000000000008000500", @ANYRES32=r14], 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x880) 2m10.247108707s ago: executing program 33 (id=6847): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f00000000c0)={0x1d, r1}, 0x10) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff000000000200"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000004000a98000000060a0b040000000000000000020000006c00048018000180080001006f7366000c000280080001400000000424000180090001006d6574610000000014000280080002400000000c08000340000000042c0001800a0001006c696d69740000001c0002800c00014000000000000000230c00024000000000000000010900010073797a3000000000090002"], 0xc0}}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd637f4b22667f2f00db5b686158bbcfe8875a65969ff57b00"/50], 0xfdef) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f00000002c0)={0x40, 0x0, 0x1}, 0x10) r6 = socket(0x10, 0x2, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETCHAIN(r7, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000600)={0x14, 0x4, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x20000004) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000080)={0x8, 0x6, 0x2}, 0x10) write(r6, &(0x7f0000000480)="1c0000001a009b8a140000003b00"/28, 0x1c) recvmmsg(r6, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0xc, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r6, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000004c0)={&(0x7f0000000340)={0x50, 0x140b, 0x100, 0x70bd28, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x5}, @RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x4}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x4}]}, 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x4000080) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x14, 0x27, 0x301, 0x2270bd24, 0x25dfdbff, {0xd}}, 0x14}, 0x1, 0x0, 0x0, 0x4008}, 0x4044810) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r8, 0x3e8, 0xe80, 0x0, &(0x7f0000000000)="c1df07000000d30a298ee68886dd87", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000240)={0x3, &(0x7f0000000140)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x20, 0x0, 0x8, 0xfffff010}, {0x6, 0xba, 0x2, 0xefff}]}, 0x10) syz_emit_ethernet(0x32, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbb8b5cbbbb0800450000a70000000200119078000000000000000000000000010000000000060080000000"], 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001f00)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0xfff1, 0xa}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}, @TCA_BPF_CLASSID={0x8, 0x3, {0xd, 0xa}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) socket$packet(0x11, 0x3, 0x300) 2m6.564238899s ago: executing program 34 (id=6884): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b70300000000ff80"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380)={r1}, 0xc) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9feb010018000000000000005000000050000000020000000b0000000000001104000000070000000a0000000000000203000000000000000500000d00404500020000000100000000000000000000000d000000feffffff100000000000000001000000030010"], 0x0, 0x6a, 0x0, 0x0, 0x1}, 0x28) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r3, 0x0, 0x60, &(0x7f0000000640)={'filter\x00', 0x5, 0x4, 0x3f0, 0x110, 0x110, 0x110, 0x308, 0x308, 0x308, 0x4, 0x0, {[{{@arp={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffff00, 0x0, 0x4, 0x4, {@mac=@remote, {[0xff, 0xff, 0x0, 0x0, 0x0, 0xff]}}, {@empty, {[0xff, 0x0, 0x0, 0x0, 0xff, 0xff]}}, 0x3, 0x8, 0x7, 0x9, 0x6, 0x4, 'veth0_to_batadv\x00', 'ipvlan0\x00', {0xff}, {0xff}, 0x0, 0x2}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @private, @empty, 0xa}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @local, @private=0x1000, 0x0, 0xffffffff}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x2, 0x1}}, {0x4}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000}, 0x4000058) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f00000006c0)=@security={'security\x00', 0x44, 0x4, 0x578, 0xffffffff, 0x390, 0x240, 0x240, 0xffffffff, 0xffffffff, 0x4a8, 0x4a8, 0x4a8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x203, 0x1f8, 0x240, 0x8502, {}, [@common=@inet=@hashlimit2={{0x150}, {'ip6erspan0\x00', {0x3ff, 0x2, 0x0, 0x2, 0x2fff, 0x849a, 0x1, 0x18, 0x18}, {0x8}}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x9, 'syz0\x00', {0x2}}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, [0xff, 0xff, 0xff, 0xff], [0xffffffff, 0xff, 0x0, 0xffffff00], 'erspan0\x00', 'caif0\x00', {0x80}, {}, 0x2c, 0x0, 0x4, 0x50}, 0x0, 0x128, 0x150, 0x0, {0x0, 0x11}, [@common=@eui64={{0x28}}, @common=@inet=@hashlimit1={{0x58}, {'batadv_slave_0\x00', {0x8, 0x7, 0x101, 0x3, 0x4, 0x4, 0xfffffff8, 0x0, 0x78}, {0x9}}}]}, @common=@unspec=@NFQUEUE2={0x28}}, {{@uncond, 0x0, 0xa8, 0x118}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x1, 0x7, 0x81, 0x1, 0x0, "d13aea835ab25d2af06d2a594bd55044f3f8f4a6ee1c3d886408088b5319e5294d4192982093b0f1e78cdb4585b98822e00d4b509e74d3ebb43b153f2481c6e3"}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5d8) close(r6) socket$nl_sock_diag(0x10, 0x3, 0x4) r8 = socket$igmp(0x2, 0x3, 0x2) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000c40)=ANY=[@ANYBLOB="14000000270001031dbd5002fadbdf2501"], 0x14}}, 0x0) setsockopt$MRT_TABLE(r8, 0x0, 0xcf, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x0, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x800, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f00000002c0)={0x8, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000300)=[{0x2, 0x1, 0x7, 0x8}], 0x10, 0x80000000}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) ioctl$SIOCSIFHWADDR(r6, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}}) sendmsg$nl_generic(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x28, 0x14, 0x800, 0x70bd2a, 0x25dfdbfd, {0x10}, [@generic="123bbc652379a67f1a58", @typed={0x8, 0xcf, 0x0, 0x0, @fd=r1}]}, 0x28}, 0x1, 0x0, 0x0, 0x4805}, 0x20004000) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000c40), r11) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r11, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)={0x54, r12, 0x100, 0x0, 0x0, {0x6, 0x0, 0x900}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @loopback}, @NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:utempter_exec_t:s0\x00'}]}, 0x54}, 0x2, 0x34005, 0x0, 0x804}, 0x0) r13 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r13, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x1c, 0x68, 0x1, 0xfcfd, 0x25dfdbfb, {0x2, 0x0, 0x1}, [@NHA_FDB={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x5}, 0x0) getsockname$packet(r13, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r10, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="200000006a0005062cbd700500000000000000000000000008000500", @ANYRES32=r14], 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x880) 6.171465191s ago: executing program 7 (id=7392): r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x35c, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xa8}, 0x1, 0x0, 0x0, 0x10000004}, 0xc010) (async) preadv(r0, &(0x7f0000000040)=[{&(0x7f00000013c0)=""/4096, 0x5}], 0x3f, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000002280)={0x3, &(0x7f0000000180)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x48, 0x3, 0x0, 0x1}, {0x6, 0xba, 0x2, 0xffff}]}, 0x10) (async) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb010789005e107538e486dd6317ce22000000fffe80000000000000101000007f0600080000000000000071273fa7b49301641184"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0xa}, 0x94) (async) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000021c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="5c0100001000130700000000ffdbdf25e0000001000000000000000000000000ff020000000000000000000000000001000400004e2100020000000021000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\f'], 0x15c}, 0x1, 0x0, 0x0, 0x880}, 0x2014) 5.688812469s ago: executing program 7 (id=7397): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000c80)="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", 0x103) getsockname(r0, &(0x7f0000000bc0)=@l2tp={0x2, 0x0, @loopback}, &(0x7f0000000c40)=0x80) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r1, 0x0, 0x0, 0x2090) unshare(0x80) sendmmsg(r1, &(0x7f0000003e00)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000180)=@xdp={0x2c, 0x0, 0x0, 0x30}, 0x80, &(0x7f0000000a80)=[{&(0x7f0000000300)="e114c5dd90492b6869f654a3df80bba9b59726a68e40302d01e77ec4e7dc20a871a9a1c524d489d6559183bf805adca76d91457cc443204d477ea3a0232bc7be976dd38295dc80c2c3ebdd1d18b86df91da21699ae349a901beab234cfdb726b902f21e5ed9dc9b0f40aa826113ab92569bfce2e9b9662effc40dea687071aa0d1176c94a4045863d34a429505a9c4a5c3326bf855105ee6d3e7bc91a8177b193fbb5c16c95f525ca7c5373030df16dde382c8ddf4f79636d71cd6db8274e7153567d2562e1cbf1aa3a54f87daec94208f0659685b81d8ed1fdc4e"}, {&(0x7f0000000440)="0b52dcba0edf747eaa1504732e5cedae1a98b02d81d32473599f0251"}, {&(0x7f0000000480)="045f8bf0c26980df995de165206853be6037eb57bd54bbbedf988154fad86050a5e44d558e5aa87a8dcff1d6b1c3760d138c5c705f43df2f371d509f609cb81b4ccab08d5a6cc1ac9cbe41f38b0862a13593aa9b5e1e37712687fc7860162ef8a81d243f2da00a7a02dc7968cf1aba2bcb7220bfa0fe70724ad86e80a79d93bbd7b0dc606ca76634da5ffa43798367"}, {&(0x7f0000000680)="e12542c83f0811ada40c735498e234b03a9c94f2430c1823f98211a9b62f56d836019491988cfe7fc99d973d175ec2ab87817b56a6cd68acb72211ff243141a4b7c7fc7a230c01b03cff43c8995af104e9322a46bf9d9e74ff"}, {&(0x7f0000000700)="337bf9b077034d621e051262448dda4119ff95d5264f59c9e9906402c09217b7ed8828c55e1006a04085030bb78734df574e371bc9aa29b1"}, {&(0x7f0000000740)="c54bc7b698adc29b25419bc2ef66134b4f0d1244368c"}, {&(0x7f0000000780)="446cbc014410a7cbe1f3c6defd674dd1ce005c427c5a5a526ff544248481a21074bf603caf809d8ef1f3cd03f6afb352d2bc66d42e4aaa30de60e69402974b74e3ca61662244fb212dff03671eed977f1e6ea5e86ba95528a779e61aa792dedbf04ff9c55d1c89d4718fea906c50502ecedcb32da078a7a93fe334467892a1c16865237a7f3556af73d345bd4f5218e7154750a9f23d3058a8f800b7872b4ce276ce33911f286464838642d8ce421e97c81c9d239bd0fc8548e67458e04bf613f03260642b7d586e0a0ac40a72f915"}, {&(0x7f0000000880)="1836bee1279adadd69f23a616f3dfac5e25dcf5d451dae5dd7bbba44e358aad004910dfb2a03e52816ceeecacded02fcaaa264e4be61548141a1243a6fe58071ee9025b86946cd3236266d02c7d8c29069dd2115b83cb7905d98e2e4b88d6832131cfa8e181ee3ebcb2d549b9301a861160f4ebc199c0690245da21623a8e5430d409559614cc18e9cbb826ab8470d79da67950868971c328248bbdc2589774f6e303784a3854cd1a6"}, {&(0x7f0000000940)="6d746efb7cbda7a35520110efeef714404c1810864"}, {&(0x7f0000000980)="0ec42f1a71d8782602f54881eeb6decd9d2b9c227c67cea4852d07b996739a31d50871f6dbdaba03f359345c0ee130b4f4f50759902a8837232d1484c4f8f02afc210ba148dc6934a59df53400be04278ddfbcebdd8d247c062604f7400569d00d821df1257116ac48cd8ad516c32eab7029bbac604a49e87a44f04f5ec8a8764703ef2ec25ba0ba109534d93bd8208aba2ad9e5ea24ae95c726e9c831a962252170c3eb70b4e71a00823891e48e6e115464e5998479efefc0d59d6b517d229a0c26af4bc7b0b1eee667"}], 0x0, &(0x7f0000003a80), 0x15}}, {{0x0, 0x0, 0x0}}], 0x3, 0x20008091) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000640), 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000380)={0x0, 0x9, 0x20}, &(0x7f00000003c0)=0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=@ipv6_newrule={0x44, 0x20, 0x1, 0x70bd28, 0x25dfdbfc, {0xa, 0x14, 0x10, 0x0, 0x8, 0x0, 0x0, 0x3, 0x17}, [@FRA_SRC={0x14, 0x2, @empty}, @FRA_DST={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000050}, 0x20048810) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="ac00000000000000000000001400000000000018000000000200000000000000000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="7f0000017f00000a0000000800"/28, @ANYRES32, @ANYBLOB="7f000001ac141400000000011c0e0000000000000000000007006fc946f1f569c01801"], 0x230}, 0x1) socket$kcm(0x10, 0x3, 0x10) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000240)={'veth0_to_bridge\x00'}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000b40)=@deltclass={0x60, 0x29, 0x400, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0xfff1}, {0xe, 0x8}, {0x2, 0x8}}, [@TCA_RATE={0x6, 0x5, {0x0, 0x56}}, @TCA_RATE={0x6, 0x5, {0xff}}, @tclass_kind_options=@c_cbs={0x8}, @tclass_kind_options=@c_tbf={0x8}, @TCA_RATE={0x6, 0x5, {0xfa, 0xc}}, @tclass_kind_options=@c_prio={0x9}, @TCA_RATE={0x6, 0x5, {0x3, 0x4}}]}, 0x60}, 0x1, 0x0, 0x0, 0x8881}, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r6, 0x84, 0x18, &(0x7f0000000100)={0x0, 0x6}, 0x8) setsockopt$inet6_udp_int(r4, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4) r7 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) socket$kcm(0x2, 0xa, 0x2) setsockopt$inet6_udp_encap(r4, 0x11, 0x64, &(0x7f0000000000)=0x2, 0x4) write$tun(r7, &(0x7f0000000340)=ANY=[@ANYBLOB="0a000000bbbbbbbbbbbbaaaaaaaaaabb86dd6d002000001011ff00000000000100070000000000000000ff0200000000000000000000000000014f194e20"], 0xfdef) sendmsg$DEVLINK_CMD_RATE_SET(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000280)=ANY=[@ANYBLOB="3c020000", @ANYRES16=r3, @ANYBLOB="010000000000000000002d00000008005800000000000e0001006e657464657673696d0000000f0002006e657464657673696d300000"], 0x3c}}, 0x0) 5.370464364s ago: executing program 7 (id=7400): r0 = socket(0x10, 0x3, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="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", 0x1000) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000002c0)={'ip6tnl0\x00', &(0x7f0000000240)={'syztnl2\x00', 0x0, 0x29, 0x8, 0xc6, 0x233, 0x8, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1b}}, @loopback, 0x10, 0x1, 0xe, 0x7}}) 5.070608435s ago: executing program 7 (id=7405): socket$netlink(0x10, 0x3, 0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0)=[@rights={{0x10}}, @cred={{0x1c}}, @rights={{0x10}}, @rights={{0x10}}], 0x50}, 0x40000002) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000080000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x34, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$igmp(0x2, 0x3, 0x2) setsockopt$ARPT_SO_SET_REPLACE(r6, 0x0, 0x60, &(0x7f0000000200)={'filter\x00', 0x7, 0x4, 0x3e0, 0x100, 0x210, 0x100, 0x2f8, 0x2f8, 0x2f8, 0x4, 0x0, {[{{@arp={@broadcast, @loopback, 0xff000000, 0x0, 0x1, 0x7, {@empty, {[0x0, 0xff, 0x0, 0xff]}}, {@mac=@random="51ac3a9fea72", {[0x0, 0x0, 0x0, 0xff, 0xff]}}, 0x4, 0x5, 0x7, 0x7, 0x7, 0x300, 'wlan0\x00', 'netpci0\x00', {0xff}, {0xff}, 0x0, 0x200}, 0xc0, 0x100}, @unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "5daebec57f2164811045513c3cc921a8e3e6709afbc7f694047d4eb7443f"}}, {{@arp={@loopback, @multicast1, 0xffffffff, 0xffffffff, 0xd, 0xb, {@empty, {[0x0, 0x0, 0xff, 0xff, 0xff, 0xff]}}, {@mac=@local, {[0xff, 0x0, 0xff, 0xff, 0xff, 0xff]}}, 0x4, 0xffff, 0xd, 0x8, 0x4, 0x35bd, 'dvmrp0\x00', 'nicvf0\x00', {0xff}, {}, 0x0, 0x2}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@random="db5bb883bbf8", @mac, @remote, @multicast2, 0x2}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x430) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r5, r4, 0x25, 0x0, @val=@perf_event={0x17}}, 0x18) syz_emit_ethernet(0x2e, &(0x7f0000000000)={@local, @remote, @val={@void, {0x8100, 0x6, 0x0, 0x4}}, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x2, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @multicast1}}}}, 0x0) connect$unix(r0, &(0x7f00000006c0)=@abs={0x1, 0x0, 0x4e22}, 0x6e) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x4, 0x4, 0x2}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="220000000400000010"], 0x48) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r8}, &(0x7f0000000140), &(0x7f0000000280)=r7}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r8}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0x1c, &(0x7f0000000640)=ANY=[@ANYBLOB="18080000cbb60000000000000000000018110000", @ANYRES32=0x0, @ANYRESDEC=r3, @ANYRES32=r2, @ANYBLOB="0000000001000000b7050000080000001c00000000000000bf980000000000000d08000000000000850000001b300000b70000000200000095"], &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) 4.897009702s ago: executing program 7 (id=7407): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000040)={r1, 0xffffffffffffffff, 0x2b, 0xe4, @void}, 0x10) r2 = socket$kcm(0x10, 0x400000002, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="b7020000b0ffffffbfa30000000000000703000000feffff7a0af0ff8f00000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010001010404000011000000b7030000000000006a0a00fe000000008500000032000000b700000001000000950000000000000075cdc4b57b0c65752a3ad50000007ddd0000cb450063dedba767ade51f7f1f66acd19100002000000000000000ff7f0000b52f17cee19d0001000000000000000000cb04fcbb4e4d0b9bafe3ba431351a58a885ba9918d37b056b9bbd11b6b9f6cf7db6d574620260000000000008062d77e85cef4a2ab938f65aac33c4d620de2c9b7dc10d7d313f9f57606b83b994fc4051ade12f41deff6df6a936b4ec3827c739bb39aad16cc75fe369258673b5df11cc2afb53611cc32a790bc0b80e80eae8f5e64be2c9d2d29db3d36dd0cf8f79a015c7bd3f15aa6aadbeab2a01685108e61aa00000000000000000000000000c67c6c6a06e828e5216f601b19db1af1b5d356d0f062137d866d11be4ba3f0151fdbbd4e97d62ecc645e143a60f10800000000000000826151e3b42bcae95239ef5ca2a730a00c87c493db0300e63fda97a296820000000001000000eecc952a3fd2c46f3c1cde71a19d1a2982492a210e00d2bfea3b8d188df2eff8d56aaae7d32a2e180022537395019f02ec4b85f6aad7faca088de9b26797a8446b16c28d85f225992dbdd5bb01ba51508951c7a7d6ca0916c3a12912715649c2b1c7192a4251b59d378d3f00000000000000665c8b7e89eddfc3783f6c9129a7c5f8ee5f50579e2f638f7eb12f63be72a3d81ab324d6e417b1c2cbfdcada0a16e31790e26cf19588a7e0496ee2782224cf30f810da86cf1a3204f4c9404f5d7321a4fefc4d1c9139ca4b65b99909950000006b42077ca60fdecb2717e21f8f187b1866108b6e8c71e2603217606637ece1fa89917e131f4034a8383e99c3568fd04201b37cd92ca6ebf94a2d8310f7032775cfd75652f87b039d5430b3c6643e9146d2478ce31344b554aca7670000000000000010c65608fda6ed5d08e7a796042aa127d874105787d0347aa37801faff5b9050803a19ff6205aa5c263e407a2f7de56f7a0000e094fa4e3f05528caab5a430c08dd810bc97204b767dd969721a26aa740000000000bc433fe2d0a6ef2a8a91cd3cb305aa80dadef8b0caca780000000000000000863e21db415a222bb1a7ab94bfe4a74157d794f9d0430c2c0eb563350559829865a3dd08fb31bd0801e09aa3ee45e61a56fc83076451cff7632e49a41eadb5044a0d5f73d6932161ae5e9ce218a35cd8e7b747887b1a74798982d0b492c3f0ff53189d80733eb04f8124877b648ff438f7d66c7efcc09a8f3330b6c22d14e80db8e5608bdeab9388b758a15f4ce70390c214bc6838798f5b9b0b500d4e8b5174f329b8501c6feb7a6982bcea74a0f2ced7fa2059234a8d10b7f0597151d5c9067d57d85f4ae933eaf5174ba122f3f702ef8695578d3c08562c9fc185f0f65d11b4c58ae52500cbe99cde3758a5cbe6093dd328ac820e2de309d25a324647aadffcecf0f3bbaeda7af4436d9ffbce1b240a2f5e346eba8812e6329e01b087bde7da4a6448f478102e90c8134f531de08d4cf4f6f35b15a202544c0ced0c1715fd3a90099f785a13a2412bedba2981dd22bd9d736c00000000000000000000000000000000eb6fec8d7d2f77f4d470a9caa5b1bfc00cd1d40830ac35f229f8ffe1c02a63d3c2d9"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x23) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r3, 0x702, 0xe98, 0x0, &(0x7f0000000380)="e460334470d8d400eb00c15286dd", 0x0, 0xfffffff7, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$inet(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000000c0)="5c00000013006bcc9e3be35c6e17aa31076b876c1c0000007ea60864160af3653c000cc00800040081000200300001c00364683b9dad7aa21240d69a6a818cf6c551ae60fc91b1", 0x47}, {&(0x7f0000000180)="a8067d08f2ada5f799c1dda64b9a304f851b5f6e41", 0x15}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x4054) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001ec0), 0xffffffffffffffff) sendmsg$TIPC_NL_PUBL_GET(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)={0x44, r6, 0xf03, 0x0, 0x0, {}, [@TIPC_NLA_SOCK={0x30, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0xfffffffffffffff6}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_FLAG, @TIPC_NLA_CON_FLAG={0x8}]}]}]}, 0x44}}, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x14, 0x0, &(0x7f0000000000)) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="280000002d0007012bbd7000fedbdf25047c00000c000180080063007f00000108000380040003"], 0x28}}, 0x4008030) ioctl$NILFS_IOCTL_CHANGE_CPMODE(r5, 0x40106e80, &(0x7f0000000140)={0x4}) 4.531653588s ago: executing program 6 (id=7410): unshare(0x6a060200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet_sctp_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000000), &(0x7f00000000c0)=0x4) r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, &(0x7f0000000040)={'mangle\x00', 0x0, [0x8, 0x800000, 0xc2, 0x4, 0xfffffffd]}, &(0x7f0000000100)=0x54) 3.327926139s ago: executing program 3 (id=7411): bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000007d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa10000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000838500000004"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r0}, 0xc) r1 = socket$packet(0x11, 0x2, 0x300) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f00000010c0)=0x3, 0x12) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x50) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) r6 = socket$inet6(0xa, 0x3, 0x1) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000180)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@rand_addr=0x64010102, 0x4e20, 0x0, 0x4e22, 0x48, 0x2, 0x0, 0x0, 0x1}, {0xfffffffffffffffc, 0xffffffffffffffff, 0xfff, 0x10001, 0x5, 0x5, 0x5, 0xfffffffffffffffd}, {0x58b6c42b, 0xffffffffffff90df, 0x0, 0x20000000000000}, 0x40, 0x0, 0x1, 0x0, 0x1}, {{@in=@rand_addr=0x64010102, 0x4d4, 0x6c}, 0xa, @in=@broadcast, 0x3502, 0x4, 0x3, 0x0, 0x0, 0x0, 0x200000}}, 0xe8) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x17}}}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r7, 0x4) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={{0x14}, [], {0x14}}, 0x28}, 0x1, 0x0, 0x0, 0x850}, 0x4040080) 3.321762742s ago: executing program 7 (id=7412): socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') socket$nl_xfrm(0x10, 0x3, 0x6) unshare(0x6a040000) socket(0x8, 0x3, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r0}, 0x8) socket$nl_route(0x10, 0x3, 0x0) read$alg(0xffffffffffffffff, &(0x7f0000000380)=""/250, 0xfa) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r1, 0x0, 0xd1, 0x0, 0x0) sendmsg$NL80211_CMD_DEL_PMKSA(0xffffffffffffffff, 0x0, 0x81) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001200)=ANY=[@ANYBLOB="b70200001a000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b70600007fffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5ae46d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946e0ebc622003b538dfc8e012e79578e51bc5f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b803000000661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7b148ba532e6ea09c346dfebd38608b32a0080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e14861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aee20182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a81505000000000000003591a15c0a9be6eb18208404c1b30c3a6a71bc85018e5ff2c91018afc9ffc2cc788bee1b47683db01a469398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b74cd36e7487afa447e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9857399537f5dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f50714600fb6241c6e955031795b2c2f56411e48455b5a8b90dfae158b94f0800000000000000af5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeedd005b3d96c7aabf4df5db927d12aba9113c1cec6817d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe00000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273fd905deb28c13c1ed210d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d488afdc0e170000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e909938a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e80339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd52364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000a5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b6122f207dd59c9f2500579aca11033ec14bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f3390343c12aa51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0d5ea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccdac114482b619fca4d97affe65ccf11e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35e9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137ff17320adda5867947257f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d88d024bdc6bb74b5589829b6b0679b5d65a927de6f4c09f4b742e037381c85d2ec7bb2a8152f0d6a99a0370e0cbd65744eb2efd7beeaf9afce09594b09a709a940965f04aa7e72588757b9612bb4253a63bb303c0c68a07f115d104f2007237a4f771416741bfd63fdfe3ae6f8bea755d8b7202c2bbae137dc1c3cf40db74a4c1c219d8ddec8f91dae2cdea1353fe062830fa1d233296ec9d8317872257e154665485e7f31cdbfbf435517faf93015b57417d84b8bc8662e097d5ba55d02d48e150695ffae3a676555b10da11751865126d19336116a1e58ab727dda6b343cc97f9479136a66f552abf8fe3d134f6d69df1cffe6740f90735f66ca54fd87800b4bda4db5e68aaccf44d24e09f8a769e3ae7bf246673f15e3d1adae4384bdb7cd30a33e30466b421feb96006c810fd3830a1c75af2580727ffc604d2b04f476acc21419fad9b1baec88974da2db29b80859bde08b8f7ff86e4b7f1fd568042ad5396d3179c71b1dc43291e450ce9b8d7d80fcb44966d7ad4691a37870000000000000000000000000000000000000000b0558e580000000000000000000083a5765d06da91165d24bc316607e2d69344aa1c07ff7cd7bc3d17f122478b6e81077782b9c298edc2546045feff90e7aa7da88d2489fb000a4aa838f911c1a869fa55e979e033b7707df75b93cf5b8d25242741a88f2d54a7107375b25911aa11efa3a4f87fc14f180e353615b3cb9a5cf5ea843014a277c3694a5a83266f73ef039dd739187923715548d58ff43be997e357e0cbed29faef19c0082e26fb867be0ef0099d71bb0d2f443e77a44e8c4b0455d95b19c73ef4c98f775aad9e1b317b3cc48f7ad1d82ea6ad6c3c7d943fb0157c250e2ba56301e25c19a7e37ce880bed8a8e1538560f2be7d4cca6539257505826bd61bad2bcd4914344d4a27b29d2eb89bdc7a702e485d68c04e8f6b05336bf8d8e116605eaf375a592fe2382763c3cba76a0e4029dad5d37dd77abb1b7d2e2de23a4131e45ed81123ad6fa4f8b92c47eb03ec5a01466baad5a8ef329d831e3373f7f82b82a27b3d25682d9e63920658e5460c789633c5cf79e4e77cd7bd34c864c08d57fe32728d24f881fb8b1e1974ca17883835c5c60a9776f2df14227789f4da2296fecb3c44b783ea2e6f448eddc7f25648a5f27b8eda95b960efd3af193c4eb6f4e04f7bb89cb944fb7abea0b90da3c9bf41776604b5fa3423ca680029ae6ef5aaa4d72b8efba9abd3451e5d2b81a6022d4c1a78767058f84b56b8d062df5b5344c89add73f2b889cdb35c30ee2425621f1d966d56e8d315f8fe347464464ee0721f4253f500689c0f3efcb845254dab76f06c0d76b30c42aa9f55923c71350c2436eef1cab2d900442dd89f1051d32a12b576c9cbf5f5b32153e06eaeba938548bf5a3b4b5f5822790e0d8fd77b92ad9736af615b77e7597da8f0ab04a62"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xe80, 0x6000002f, &(0x7f0000000100)="b9ff0f316844268cb89e14f008004ce0050000000000002c77030a89079f03b180004415050300845013f2325f0094090519fa0000880b943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c060000000000005992078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014c0000c0adc04308461738190da450296b0ac014968ce23eefc9d4246dd14afbf79a228326c3acc240d7da058fa4806d1f5f7ff40000001600"/249, 0x0, 0xfe, 0x60000000, 0x0, 0xfffffffe}, 0x2c) 2.38803762s ago: executing program 3 (id=7418): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@getsadinfo={0x88, 0x23, 0x200, 0x70bd2b, 0x5dfdbff, 0x0, [@etimer_thresh={0x8, 0xc, 0x5}, @XFRMA_SET_MARK={0x8, 0x1d, 0x2}, @replay_esn_val={0x30, 0x17, {0x5, 0x70bd27, 0x70bd24, 0x70bd26, 0x70bd2d, 0x9, [0x80000001, 0x9, 0xbd93, 0x6bca, 0x800]}}, @policy_type={0xa, 0x10, {0x1}}, @coaddr={0x14, 0xe, @in=@broadcast}, @srcaddr={0x14, 0xd, @in6=@ipv4={'\x00', '\xff\xff', @private=0xa010101}}]}, 0x88}, 0x1, 0x0, 0x0, 0x4008011}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e000000180002801400"], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r2, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x0, 0x0, 0xffffffff}, 0x1c) (async) r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async, rerun: 64) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async, rerun: 64) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000044c0)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000280)="a204756c1c11215ceeeb08b6b9aecaf73554f794aba384", 0x17}, {&(0x7f00000002c0)="fd652b9c5199a508f5bc328c99588dcb4a9c66c0bf6f7cb937b9802c5100750790b8971232476c669d279420c823f82e9c188221e0ef85f60ca75851de1a2527bfb7d7f817db36ec10cbb5dbc77c3fc0c566ef5aeb41bbc03b7a8613fd0da338db9bd0", 0x63}], 0x2}, 0x4000) (async, rerun: 64) r4 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) r5 = socket$netlink(0x10, 0x3, 0xa) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r5, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000008c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="060025bd7000fddbdf25460000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008e00000000000c008f0000000000000000000c0090f90600000000000000"], 0x54}, 0x1, 0x0, 0x0, 0x4000000}, 0x10) (async) socket$packet(0x11, 0x2, 0x300) (async) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r6, 0x5, 0x14, 0x0, &(0x7f0000000240)="259a53f271a76d2608004c6588a80a3888ca2f15", 0x0, 0xd15, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x6}, 0x50) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r7, 0x400452c9, &(0x7f0000000100)) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000000)={'wg0\x00'}) (async) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)={0x2c, 0x2, 0x1, 0x301, 0x0, 0x0, {0xa, 0x0, 0x2}, [@CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x10001}, @CTA_HELP={0x10, 0x5, 0x0, 0x1, {0x9, 0x1, 'syz0\x00'}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x4) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) (rerun: 64) setsockopt$inet6_tcp_int(r10, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r10, &(0x7f0000000100)={0xa, 0x0, 0xa3c, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x1}, 0x1c) (async) setsockopt$inet6_tcp_int(r10, 0x6, 0xc, &(0x7f0000000200)=0x9, 0x4) sendmsg$nl_generic(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c0000002600090122bd7008faffffff0200000008003f800400000003004700000008003e0067"], 0x2c}, 0x1, 0x0, 0x0, 0x1000c957}, 0x600c800) (async) socket$nl_generic(0x10, 0x3, 0x10) 2.133247294s ago: executing program 0 (id=7420): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=@newtclass={0x24, 0x28, 0x400, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x9, 0x2}, {0x7, 0xb}, {0xb, 0xf}}}, 0x24}}, 0x80000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x4c}, 0x1, 0x0, 0x0, 0x400c880}, 0x4008002) r0 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000000c0)=0xe, 0x800) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000240)={'vcan0\x00', {0x2, 0x4e23, @private=0xa010100}}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0500000001200b00400000004000000041"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000080), 0x1003, r1}, 0x38) bpf$MAP_LOOKUP_ELEM(0x4, &(0x7f0000000b80)={r1, &(0x7f00000014c0), &(0x7f0000000b40)=""/31}, 0x20) 2.047118475s ago: executing program 3 (id=7421): r0 = socket$packet(0x11, 0x3, 0x300) socket$kcm(0x23, 0x5, 0x0) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000000)=@req3={0x8000, 0x200, 0x80, 0x20000}, 0x1c) r1 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_inet_SIOCGARP(r1, 0x8954, &(0x7f0000000000)={{0x2, 0x4e23, @broadcast}, {0x0, @remote}, 0x4, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x15}}, 'ip6tnl0\x00'}) (async) ioctl$sock_inet_SIOCGARP(r1, 0x8954, &(0x7f0000000000)={{0x2, 0x4e23, @broadcast}, {0x0, @remote}, 0x4, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x15}}, 'ip6tnl0\x00'}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) (async) r3 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) (async) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x8}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x4) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001080)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd25, 0xa000, {0x0, 0x0, 0x0, r5, {0xe, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_IPV4_SRC={0x8, 0xa, @rand_addr=0x64010101}, @TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x806}]}}]}, 0x44}}, 0x0) mmap(&(0x7f0000568000/0x2000)=nil, 0x1000000, 0x0, 0x11, r0, 0x0) (async) mmap(&(0x7f0000568000/0x2000)=nil, 0x1000000, 0x0, 0x11, r0, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r6) (async) r7 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r6) sendmsg$NLBL_CIPSOV4_C_ADD(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000006040)={0x44, r7, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}, @NLBL_CIPSOV4_A_MLSCATLST={0x18, 0xc, 0x0, 0x1, [{0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xffffffff}]}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) (async) sendmsg$NLBL_CIPSOV4_C_ADD(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000006040)={0x44, r7, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}, @NLBL_CIPSOV4_A_MLSCATLST={0x18, 0xc, 0x0, 0x1, [{0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xffffffff}]}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000340)={0x0, @in6={{0xa, 0x4e21, 0x3, @empty, 0x1}}, 0xa20, 0x4, 0x0, 0x3, 0xf4, 0x7, 0x10}, &(0x7f0000000400)=0x9c) r8 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000001c0)={r9, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0xfffffffc, 0x0, 0xd4}, 0x9c) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r3, 0x84, 0x77, &(0x7f00000000c0)={r9, 0x1e0a}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x1f, &(0x7f0000000280)={r10, @in6={{0xa, 0x4e20, 0x4, @remote, 0x7}}, 0x6, 0x1}, 0x90) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f0000000180)=@sack_info={r10, 0xc3, 0x11}, &(0x7f0000000480)=0xc) 1.803970726s ago: executing program 0 (id=7423): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=@ipv6_newrule={0x4c, 0x20, 0x1, 0x70bd28, 0x35dfdbfc, {0xa, 0x80, 0x10, 0x0, 0x8, 0x0, 0x0, 0x3, 0x17}, [@FIB_RULE_POLICY=@FRA_DPORT_RANGE={0x8, 0x18, {0x4e24, 0x4e24}}, @FRA_SRC={0x14, 0x2, @private0}, @FRA_DST={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10000050}, 0x20048810) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=@newlink={0x5c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}]}}}]}, 0x5c}}, 0x0) 1.791095394s ago: executing program 3 (id=7424): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) close(0x3) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200), 0x806000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGPGRP(r4, 0x8904, &(0x7f0000000000)=0x0) syz_open_procfs$namespace(r5, &(0x7f0000000040)='ns/cgroup\x00') r6 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000001180)={{{@in=@dev, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@local}}, &(0x7f0000001380)=0xe8) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003b80)=ANY=[@ANYBLOB="c01500004100010029bd7000040000000100000004004780180001801400108005000480f300000008009d00", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=r5, @ANYBLOB='\b\x00N\x00', @ANYRES32=r7, @ANYBLOB="2831978c0100f384fdd21b30cac941b5f5246661ebb006de3334f8430af278e3867dc48d3d4a8cf66537897c8b98717a82a23a1713a7adf6976b75039f3a7b34805f77773811bb984d3441a5f3ebf9b3b5894c3d00a26cda06ecbbfc3e28529899e91dd88222c3db37aa3509f1d71b96c63d83f5a1b15ea262ddd414b687e7d56f52a69da939d6143f1b2a229c6a178d37240b864e5c55c361de73b06657575d286ec824e00c5054a55be951e41fda7b835c2abd8cec1a79c77123871c840020f1bbe4ffd62a700000000400"], 0x15c0}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) sendmsg$inet(r3, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f0000000300)="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", 0xcb3}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) recvmsg$unix(r4, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x2}, 0x40000300) ioctl$FS_IOC_RESVSP(r2, 0x40305829, &(0x7f0000000380)={0x0, 0x0, 0x4000, 0x9ffffc}) socket$inet6_sctp(0xa, 0x1, 0x84) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r9, &(0x7f0000000340), 0x11000) socket(0x9, 0x803, 0x0) socket$rds(0x15, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) socket$nl_rdma(0x10, 0x3, 0x14) pselect6(0x40, &(0x7f0000000200)={0x0, 0x0, 0xd6c1, 0x7, 0x4, 0x0, 0x0, 0x2}, 0x0, &(0x7f0000000140)={0x2000000000003fb, 0xffffffffffffdffd, 0x0, 0x9, 0xfffffffffffffffc, 0x0, 0x192dbfb5, 0xfffffffffffffffc}, 0x0, 0x0) writev(r9, &(0x7f0000000e00)=[{&(0x7f0000000a40)='^', 0x1}], 0x1) getpid() r10 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r10, &(0x7f00000000c0)={0xa, 0x4e24, 0x9, @local, 0x6}, 0x1c) connect$inet6(r10, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) syz_emit_ethernet(0x14a, &(0x7f0000002740)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x13, 0x4, 0x2, 0x21, 0x13c, 0x64, 0x0, 0x7, 0x6, 0x0, @remote, @remote, {[@noop, @timestamp={0x44, 0x18, 0x26, 0x0, 0xa, [0x6, 0x7, 0x5, 0xffffffff, 0x0]}, @lsrr={0x83, 0x17, 0xd7, [@remote, @remote, @empty, @broadcast, @empty]}, @end, @cipso={0x86, 0x6}]}}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xb, 0x4, 0x2, 0x0, 0xe7, {[@md5sig={0x13, 0x12, "b5ddd138a0d69f78bde7515c048fa7ae"}, @exp_smc={0xfe, 0x6}]}}, {"28bc82987fc0dc28068e414f3b5434185ef1c36cdccc664d036573ff20eb42806c64926900a835f664b822e0f4105cb7d77f58ab70c04d45221a175e8f0d66e61fc0a6c563ec9334278303716c6fc9fc7eb3ec186186169fa739ba2cc39bc5c0a4591ca7ebeba269454fbf88e7b6acfa2ffc443fe2439d5a0e7443329162b350f00a03bd09e7e1fca22411fe7b5c284bd8d625c32c504666d53c6fe90b3f342904c9936ea16282c6229122680d1098af9a9628e9e211e6a97d2bc68943508c0df4825c4f"}}}}}}, 0x0) vmsplice(r8, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x13, r0, 0x0) 1.626950403s ago: executing program 0 (id=7425): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x11, 0x0, 0x0) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$IEEE802154_SCAN_REQ(0xffffffffffffffff, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002cbd7000fddbdf250900000005001300070000000800140016000000"], 0x24}, 0x1, 0x0, 0x0, 0x40801}, 0x10) socket$inet6_udp(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x10, 0x3, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$unix(0x1, 0x5, 0x0) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r4, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) recvmmsg(0xffffffffffffffff, &(0x7f0000007980)=[{{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, 0x0}, 0x5}], 0x2, 0x10003, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r7, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x200000c0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x91}, 0x24044884) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) sendmsg$802154_dgram(r1, &(0x7f0000001980)={0x0, 0x0, &(0x7f0000001940)={0x0}}, 0x4021) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) socket(0x28, 0x5, 0x0) 1.626427399s ago: executing program 4 (id=7426): socket$kcm(0x10, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket(0x1, 0x803, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="1c0000001500010300000000000000000c00000008000100", @ANYRES8=r0], 0x1c}, 0x1, 0x0, 0x0, 0xc001}, 0x4000000) sendmsg$NLBL_UNLABEL_C_STATICADD(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x6b7e369c4a37b0ea) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000480)={0xa, 0x4e21, 0x0, @mcast1={0xff, 0x5}}, 0x1c) setsockopt$MRT6_FLUSH(r1, 0x29, 0xd4, &(0x7f0000000000)=0x1, 0x4) 1.456719372s ago: executing program 6 (id=7427): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x150, 0x168, 0x9, 0x150, 0xb, 0x250, 0x250, 0x250, 0x250, 0x250, 0x3, 0x0, {[{{@ipv6={@remote, @rand_addr=' \x01\x00', [], [], 'veth0_to_bridge\x00', 'sit0\x00', {}, {}, 0x6c}, 0x6000000, 0x108, 0x150, 0x0, {0x0, 0x28e}, [@common=@inet=@ipcomp={{0x30}, {[], 0x74c8aad696aabd1d}}, @common=@inet=@ipcomp={{0x30}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'dvmrp0\x00'}}}, {{@uncond, 0x0, 0xd0, 0x100, 0x0, {}, [@common=@inet=@set2={{0x28}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{}, {0x2}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f0000000e80)=0x1, 0x4) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB="200000006a008313000000000000354f1b0800000000000008"], 0x20}}, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=@newneigh={0x30, 0x1c, 0x401, 0x0, 0x0, {0x2, 0x0, 0x0, r7, 0x0, 0x11}, [@NDA_DST_MAC={0xa, 0x1, @link_local}, @NDA_FLAGS_EXT={0x8, 0xf, 0x1}]}, 0x30}}, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r9 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$SO_ATTACH_FILTER(r9, 0x1, 0x1a, &(0x7f0000000200)={0x3, &(0x7f0000000ec0)=[{0x28, 0x4, 0x53, 0xfffff028}, {0xffff, 0x1, 0x8, 0x1}, {0x4, 0xc, 0x2a, 0x9}]}, 0x10) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@bridge_delneigh={0x3c, 0x1c, 0xc07, 0x2000, 0x0, {0x2, 0x0, 0x0, r8, 0x8, 0x10}, [@NDA_DST_IPV6={0x14, 0x1, @empty}, @NDA_LLADDR={0xa, 0x2, @random="44328a67ad89"}]}, 0x3c}}, 0x20024090) sendmmsg$inet(r3, &(0x7f0000004540)=[{{&(0x7f0000000040)={0x2, 0x4e22, @multicast1}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="15b26f226e2966667482d50703b0a8d92ccd9e69d5cc4cb3d467a670b237a9225fb56c0f7ea725dee27c4bb43bb50c6748c83b71d59f0537405dfab648c096607340fac939a2efd31cbe2f8ca29c409e87ea0974b7bceff9afef5dffd691575f5115f2f961ad488e3386036913e98181a6034febaab853a3e928b9035b0e3a8e1cb393c70f6d0448970e0af2476f8b923ee09c19deca55d58f70e8eeff55dda6381cb96afe97196c0af0a8fd450a1447a1a521e2c211fb84cbcf4aebd31298972ec6be", 0xc3}, {&(0x7f0000000d80)="7d68e6de85f9b0cbc9d710267f321ec64eab043ecad9af7e01e9463218ec45924a99867163e468d36a682fadd749caa325e685d75559a87139e02fae7271be8f55671cfd32a09896278d1941370174720838039d0989bc3394b8a4c4f4a30f0496be313d6d60fe47966c634a3ee1f659e8ef310647725bda0130d5de5028220a4cf5fc808a75694738ee26cb21302b4bba4265b845a5d5dce706d9820c6936b122f9658446d74a9016b94424971dd443a6907eb5c73b6b200e92b23f2c36a214729b0bc231511e4c", 0xc8}, {&(0x7f0000000380)="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", 0x9fd}], 0x3}}, {{0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f0000001700)="c9", 0x1}], 0x300}}], 0x3, 0x240080e4) 1.447650641s ago: executing program 4 (id=7428): r0 = socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) (async) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) (async) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) (async) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) (async) r7 = socket$kcm(0xa, 0x2, 0x3a) sendmsg$kcm(r7, &(0x7f0000000440)={&(0x7f0000000000)=@l2={0x1f, 0x4ab9, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0xfffe, 0x1}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000080)="a0005b", 0x3}, {&(0x7f0000000240)="d3f1bfb89e", 0x5}], 0x2, 0x0, 0x0, 0x900}, 0x4000800) (async, rerun: 64) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0x403, 0x78bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x600}, 0x0) (async, rerun: 64) socket$nl_xfrm(0x10, 0x3, 0x6) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[], 0xa0}}, 0x0) socket(0x10, 0x3, 0x0) (async) sendmmsg(r4, &(0x7f0000000000), 0x0, 0x0) (async) sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f0000000b80)={&(0x7f00000002c0), 0xc, &(0x7f0000000b40)={&(0x7f0000000800)={0x314, 0x0, 0x4, 0x70bd26, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0xb8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xff}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}]}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5bfc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}]}]}, @TIPC_NLA_NODE={0xd0, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x7}, @TIPC_NLA_NODE_ID={0xb7, 0x3, "48ba268ec65bede174a228cae49491bdfbed22cb4afd041c00f35053c409a5153ce0dcf7eb3c6225109e1c9d043091eb6911c75dfe8d0bb5829c103b6581cec9aac2e8e361c7a390ef6b66aa1822db5256a442a9afa8d2ecb91b0d5f526972eb9533e30bbff6c55a83c972fdc71dcbb4922a9316d9bd843191784d5abc4873074e22d001cc17e7505ae1570a9605ebeb409767e980af92bda9a681bf6dc88a6559328283970742c0f2043afaf102746fd45919"}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_LINK={0xa4, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4aa7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xdff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3ff}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x81}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK={0x30, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xd790}]}, @TIPC_NLA_MEDIA={0x20, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb454}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}]}, @TIPC_NLA_BEARER={0x70, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0xffffffff, @ipv4={'\x00', '\xff\xff', @broadcast}}}, {0x14, 0x2, @in={0x2, 0x4e24, @multicast2}}}}]}]}, 0x314}, 0x1, 0x0, 0x0, 0x40000c4}, 0x4000010) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="3c00000010000305000000000007000000000000", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x440b0) 1.155371371s ago: executing program 4 (id=7429): socket$kcm(0x10, 0x2, 0x0) r0 = socket$inet6(0xa, 0x6, 0x7) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmmsg$inet(r2, &(0x7f0000000c40), 0x1, 0x8014) ioctl$sock_inet_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000080)={'\x00', {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x2, 0x0}}}) sendmmsg$inet(r1, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000140)='\x00\x00', 0x2}], 0x1}}], 0x1, 0x20008000) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYBLOB="440931437800594f03518ef4219ef80f12e378dacbf03b48cf73114676544aba0cf4c2479ec0a00d07c79d8210b61cf433b72baa8aa157cc1f4c3c2f069a12aedfef3528b8f6b1561247cada67a292c501894bb1d112e28a1f2c6a3fb515b945bca4fbafab493a9d25bd", @ANYBLOB="0303ba2e0500000000001280080001006b8cab26741003697400240002800800d500", @ANYRES32=r1, @ANYBLOB="08000200ac14144005000900890000000600080017000000", @ANYRESDEC=r3, @ANYRESOCT=r0, @ANYRES16=0x0], 0x50}, 0x1, 0x0, 0x0, 0x400880c}, 0x0) recvmsg(r1, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001380)}, 0x40000123) shutdown(r1, 0x1) r4 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r4, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x3, {0x0, 0x1, 0x4}}, 0x10) bind$tipc(0xffffffffffffffff, &(0x7f00000000c0)=@id={0x1e, 0x3, 0x1, {0x4e20, 0x4}}, 0x10) bind$tipc(0xffffffffffffffff, 0x0, 0x0) bind$tipc(r4, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42, 0x20000003}}}, 0x10) bind$tipc(0xffffffffffffffff, &(0x7f0000000140)=@name={0x1e, 0x2, 0x3, {{0x41, 0x4}, 0x4}}, 0x10) socket$inet6(0xa, 0x5, 0x0) bind$tipc(0xffffffffffffffff, 0x0, 0x0) r5 = socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r5, 0x111, 0x1, 0x2, 0x4) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r6, 0x400448cb, 0x0) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f00000003c0)={0x26, 'hash\x00', 0x0, 0x0, 'blake2b-160-generic\x00'}, 0x58) r8 = accept4(r7, 0x0, 0x0, 0x800) sendmmsg$alg(r8, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000140)="b57523cb1a2c90d8acad2e2d98dfc9ea7a5843c3b63b683ced2b3266175599b779617e66e6b3e15c042be90635a2d36160bbf9a2edcacc0bbe015b84150a1928de94397894ff36aa430fc2a0814ba634308d6d0837250dfd1eca5383f9d151449743b1a0c4ffc51242a229c5d6d06f147a61d797ea7ffeda95b76f5623", 0x7d}, {&(0x7f00000001c0)="66f7", 0x2}, {&(0x7f0000000300)="0400", 0x2}], 0x3}], 0x1, 0x0) bind$bt_hci(r6, &(0x7f0000000340)={0x1f, 0x0, 0x1}, 0x6) bind$tipc(r4, 0x0, 0x0) 1.127577248s ago: executing program 6 (id=7430): sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x4804) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x40000002) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r3, 0x8, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1e}]]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x48010) 996.123256ms ago: executing program 0 (id=7431): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="e9ecdcb0a336629600000000000000002001040000004b00000000000000000064010102000000000000000000000000000000050000000302002000000000f2", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000ac00000000000000ff0f000000000000ffffffffffffffff0000000000000000ffffffffffffffffffffff7f0000000000000100000000000200000000000000040a00000000000000000000008040000000000000000008000000000000000001000003000000004400050000000000000000000000000000000000000004d23c0000000a000000ffffffff00000000000000000000000000000000000308"], 0xfc}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) (async) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket(0x18, 0x80000, 0x1) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000180)={'wlan1\x00', &(0x7f00000006c0)=@ethtool_per_queue_op={0x4b, 0xf, [0x1, 0x3, 0x4, 0xff, 0x80000000, 0x8, 0x4, 0x91, 0x9, 0x8174, 0x4, 0x10, 0xffffec8c, 0x80000000, 0x2, 0x0, 0xdc, 0xffffffff, 0x5, 0x7ff, 0x2b38, 0x4, 0x0, 0x0, 0x85e, 0x3, 0x4, 0x4, 0x8, 0x8, 0x80000001, 0x1, 0x6, 0x85, 0x7, 0x338, 0x9, 0x3, 0x9, 0x4, 0x0, 0x4, 0x0, 0x1000, 0x7, 0x6, 0x0, 0x1, 0x6, 0x0, 0x1, 0x63, 0x3, 0x1, 0x4, 0xbafd, 0x8000, 0x6, 0x8, 0xda94, 0x0, 0x9, 0x100, 0x4de, 0x1, 0x7cb, 0x5, 0x4, 0x7, 0x4, 0x81, 0x80000000, 0x96a, 0x5, 0x8e, 0x5, 0x9, 0x3, 0x2, 0x10001, 0xc1bc, 0x800000, 0x2, 0x5, 0x7, 0xfbca, 0x1, 0x0, 0xf, 0x80000001, 0x1, 0x101, 0x2, 0x5, 0x9, 0xffffffff, 0x8, 0x1, 0x3, 0x8, 0x2, 0xfffffff1, 0x9050, 0x10000000, 0x3, 0x7, 0x0, 0x3, 0x8001, 0x7, 0x0, 0x7, 0x4, 0x4, 0x5, 0x106, 0x3ff, 0x100, 0x0, 0xffff, 0x1, 0xfffffff7, 0x8, 0xf, 0x7, 0x0, 0x1, 0x8001], "c17d7a748811b04ffe6267017b87361fec5f6eae15fa708e01553ec0aeb56b83308abcbedd304eedb4ae7a6a3ea308056f27b3d1652726e7903cfdcd6f1ccf0147a951ed6d02df68dca06fb57bb55402435454a4bf0d7bbc388f26e5fd0ea589901ff1d1a65c3445ecf602f6097e2f910f9cb919645b9a4e87e73c07af26b2c7c3eefead4e831389c7f48cc043fb452420c6ac284acd78ed0b43151a1aa0b26df99767aec6c244d6a1506a82e03ddbf2b300fb4d789de5d155ba893213326bfcd2e5ad5f4b33c85e6d78ae2fbc596db83dd7a4d1ac7a2b"}}) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000001}, 0x10) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000001}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56441, 0x70b925, 0x80000, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff2}, {0x2, 0xb}, {0xe, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x2000c061}, 0x8000) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56441, 0x70b925, 0x80000, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff2}, {0x2, 0xb}, {0xe, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x2000c061}, 0x8000) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_CAP_ACK(0xffffffffffffffff, 0x10e, 0xa, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019f00000000000000000200000000000000080001000100000004"], 0x24}, 0x1, 0x0, 0x0, 0x4005}, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019f00000000000000000200000000000000080001000100000004"], 0x24}, 0x1, 0x0, 0x0, 0x4005}, 0x0) sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0x0) (async) sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x0, 0x400, 0x70bd27, 0x25dfdbfd, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x24000000}, 0x40000c1) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000064010100000000000000000000000000fc01000000000000000000000000000000000000000000000a0000"], 0xfc}}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) (async) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0xae0, 0x6361, 0x4, 0xffffffff, 0x3}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x4, 0x7fffffffffffffff, 0x0, 0x1000, 0xc, 0x215}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r6) sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000640)=ANY=[@ANYRESHEX, @ANYRES16=r7, @ANYBLOB="010000000d0000000000010000002fe0c33f6353c7085996020000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x4084) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r8) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r10, {0x0, 0xd}, {0xffff, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}}, 0x4890) 928.737335ms ago: executing program 6 (id=7432): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000009c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56fa8ef1d91a4574758ecefbe1d7a46df6d558ecf1820f", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f7", 0x1}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x4000}], 0x1, 0x4040040) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000100)=""/21, 0x15}], 0x1}, 0x142) r2 = socket$alg(0x26, 0x5, 0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000100)={0x2, &(0x7f0000000140)=[{0x30, 0x3, 0x51, 0xfffff014}, {0x6, 0x4, 0x5, 0x5}]}, 0x10) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e21, @loopback}]}, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_DELTABLE={0x20, 0x2, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x48}, 0x1, 0x0, 0x0, 0x4001}, 0x20000010) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000180)={r4, 0x7}, &(0x7f0000000340)=0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f00000000c0)={r4, 0x1}, &(0x7f0000000180)=0x8) 644.004546ms ago: executing program 6 (id=7433): r0 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r0, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x10) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_percpu\x00', 0x7a05, 0x1700) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, 0x0, 0x0}, 0x94) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000ac0)=ANY=[], 0x0, 0x56}, 0x28) bind$inet(r2, &(0x7f0000000380)={0x2, 0x4e22, @multicast1}, 0x10) setsockopt$sock_int(r2, 0x1, 0x800000000f, 0x0, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x143942, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r4, 0x0, 0x4e) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCETHTOOL(r6, 0x8946, 0x0) syz_emit_ethernet(0x32, &(0x7f00000002c0)={@multicast, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0xfffd, 0x0, 0x0, 0x11, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x0, 0x17c1, 0x10, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}, "d482449a"}}}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb79100a6c52d922ba2a05dd42"], 0xfdef) r7 = socket$alg(0x26, 0x5, 0x0) accept4$alg(r7, 0x0, 0x0, 0x40000) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYRES8=r3, @ANYRESDEC=r1], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x31, &(0x7f0000000000)=0x7ff, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) 578.041234ms ago: executing program 4 (id=7434): syz_emit_ethernet(0x82, &(0x7f0000000040)={@local, @random="8eff80ec0031", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x74, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010101, @local}, @source_quench={0x4, 0x0, 0x0, 0x0, {0x16, 0x4, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x11, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@noop, @cipso={0x86, 0x40, 0x0, [{0x0, 0x10, "9e0cec69d2dae06de9173b3f60c8"}, {0x0, 0x2}, {0x0, 0xb, "3033a70f1c0f9d1bfd"}, {0x0, 0xa, "3aba454f6dc54cc6"}, {0x0, 0x11, "debb67ffffff00000000aee5f2e64d"}, {0x0, 0x2}]}]}}}}}}}, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x88, &(0x7f0000000100)=[@in={0x2, 0x4e23, @broadcast}, @in={0x2, 0x4e23, @multicast2}, @in={0x2, 0x4e23, @multicast2}, @in6={0xa, 0x4e24, 0x103, @private1, 0xeb6}, @in={0x2, 0x4e24, @empty}, @in6={0xa, 0x4e24, 0x7ff, @dev={0xfe, 0x80, '\x00', 0x2c}, 0x8000}, @in={0x2, 0x4e23, @rand_addr=0x64010102}]}, &(0x7f0000000200)=0x10) 462.421264ms ago: executing program 4 (id=7435): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000140)={'syztnl0\x00', &(0x7f0000000080)={'gretap0\x00', 0x0, 0x8000, 0x700, 0x0, 0x0, {{0x1b, 0x4, 0x2, 0x8, 0x6c, 0x64, 0x0, 0xa, 0x29, 0x0, @multicast1, @loopback, {[@generic={0x86, 0x7, "0adfea50f0"}, @ra={0x94, 0x4}, @noop, @ra={0x94, 0x4}, @ra={0x94, 0x4}, @timestamp_prespec={0x44, 0x14, 0xc4, 0x3, 0x6, [{@rand_addr=0x64010101, 0xfffffff3}, {@multicast2, 0xfffffff9}]}, @ra={0x94, 0x4, 0x1}, @noop, @noop, @rr={0x7, 0x27, 0x50, [@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010100, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, @loopback, @remote]}]}}}}}) sendmsg$FOU_CMD_DEL(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x3c, r1, 0x20, 0x70bd2b, 0x25dfdbfd, {}, [@FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_IFINDEX={0x8, 0xb, r2}, @FOU_ATTR_TYPE={0x5}, @FOU_ATTR_PEER_V4={0x8, 0x8, @empty}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e23}]}, 0x3c}, 0x1, 0x0, 0x0, 0x100}, 0x8010) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x7, 0x4, 0x100, 0x4, 0x24}, 0x50) 304.175637ms ago: executing program 3 (id=7436): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="a80000001000ffff423c06f402e57d0cc1fb4003263d7000fedbdf25000000000f7ed0720f5340e67121205b2d2514c50b887fc00dbd2f9366346002d3b1", @ANYRES32=0x0, @ANYBLOB="20ba0100180a04007800128009000100766c616e0000000068000280060001000400000004000480580003800c00010007000000030000000c00010002000000008000000c00010001000000018000000c00010000000000f00500000c00010000020000010400000c0001000100000078998c5d0c000100010000000500000008000500", @ANYRES32=r1, @ANYBLOB="0500110001000000"], 0xa8}, 0x1, 0x0, 0x0, 0x10}, 0x8000002) 244.00337ms ago: executing program 4 (id=7437): socket$inet6_sctp(0xa, 0x1, 0x84) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x10, &(0x7f0000000100)=ANY=[@ANYRES32=0xffffffffffffffff], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r4) sendmsg$IPVS_CMD_NEW_SERVICE(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000200000040000180060001000a00000008000500000000000c000700000000000000000008000900710000010700060072720000080008"], 0x54}}, 0x0) sendmsg$nl_generic(r2, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYRES16=r1], 0x40}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="18020000000000000000000000000030850000002c00000095000000000000002b4003fe37a077ae55f52c0d80a2649baca85309be96d5a45bbbdb5ff7ffffffd075b3eee14473f51be98db7efbb059842badcfc81364470e8e04acb807fbbabc68abdcce9"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x100a, &(0x7f0000001400)=""/4106, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r0}, 0x94) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r5}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[], 0x3c}}, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{}, &(0x7f0000000240), &(0x7f0000000280)}, 0x20) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000080)={'ipvlan1\x00', 0x200}) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r9, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x30, r10, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}]}]}, 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r11) r12 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r11, &(0x7f0000000040)={0xa, 0x4e22, 0x8, @empty, 0x2}, 0x1c) listen(r12, 0x6f2) r13 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r13, &(0x7f0000000000)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x31}}, 0x10) r14 = socket$nl_generic(0x10, 0x3, 0x10) r15 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r14, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0x28, r15, 0x1, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1a}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x8) ioctl$TUNSETQUEUE(r8, 0x400454d9, &(0x7f00000000c0)={'macsec0\x00', 0x400}) 242.00656ms ago: executing program 6 (id=7438): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x1c0, 0x111, 0x4b4, 0x0, 0xd4feffff, 0x290, 0x20a, 0x278, 0x290, 0x278, 0x3, 0x0, {[{{@ipv6={@empty, @loopback, [0xffffffff, 0xffffff00, 0x0, 0xffffff00], [0x0, 0xffffff00], 'ip_vti0\x00', 'batadv0\x00', {0xff}, {}, 0x6, 0xfe, 0x1}, 0x0, 0x198, 0x1c0, 0x0, {}, [@common=@inet=@tcp={{0xff0}, {[], [], 0x0, 0xc0, 0x2, 0xb}}, @common=@unspec=@string={{0xc0}, {0x0, 0xfffd, 'bm\x00', "6d93eb04697dfa39de04767f46614613a407abbf4ed2e83a63b484dbb3bf6b2a850e79009e2905d2f98ba19f91f3c9faee6d3686e9bee067f4e77d9ad66238750c4100d7ee97ec7646259d90edece6e9787a97bc956c01754c34c5c9518c46178ed5f9194454980e579c80eca35a58dc47d1d5e4ff6e216c724e88c702448587", 0x27}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x2}}}, {{@ipv6={@loopback, @mcast2, [0x0, 0xffffff00, 0xffff00], [], 'veth1_to_hsr\x00', 'pim6reg1\x00', {}, {}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0xa3, 0x7, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x8, 0x32, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r1) sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r2, 0x701, 0x70bd2d, 0x25dfdbff}, 0x14}}, 0x10044880) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f00000000c0)=0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r5) sendmsg$NFC_CMD_DEV_UP(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000001c0)={0x1c, r6, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r4}]}, 0x1c}}, 0x0) r7 = openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r8) ioctl$IOCTL_GET_NCIDEV_IDX(r7, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r9, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r10], 0x1c}}, 0x4008054) sendmsg$NFC_CMD_ENABLE_SE(r1, &(0x7f0000001780)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000100)={0x44, r6, 0x400, 0x70bd25, 0x25dfdbfe, {}, [@NFC_ATTR_SE_INDEX={0x8}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0xc0}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0x2}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0xa0}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r10}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0xc0}]}, 0x44}, 0x1, 0x0, 0x0, 0x20080014}, 0x8010) r11 = socket$inet6(0xa, 0x1, 0x8010000000000084) r12 = socket$inet6(0xa, 0x1, 0x0) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r13, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a20000000000a01020000000000000000010000000900010073797a300000000040000000160a01000000000000000000010000000900010073797a30000000000900020073797a3000000000140003800800014000000000080002400000000078010000160a0101000b000000000000010000000c00054000000000000000040900010073797a30000000002400038018000380140001006261746164763000000000000000000008000140000000000900020073797a31000000000900020073797a3000000000000103800800014000000000080001400000000068000380140001007663616e300000000000000000000000d9366e65766530000000000000000000140001006970365f767469300000000000000000140001006d6163767461703000000000000000001400010076657468315f766972745f77696669007c000380140001006d"], 0x200}, 0x1, 0x0, 0x0, 0x200448c1}, 0x20040080) setsockopt$inet6_IPV6_XFRM_POLICY(r12, 0x29, 0x23, &(0x7f00000004c0)={{{@in6=@private2, @in6=@mcast2, 0x0, 0x1, 0x1000, 0xfffe, 0xa}, {0x0, 0xffffffffffffffff}, {0x0, 0xfffffffffffffffd, 0xb5, 0x1}, 0x800, 0x0, 0x1, 0x1}, {{@in=@remote, 0x0, 0x32}, 0x2, @in=@multicast1, 0x0, 0x2, 0x3}}, 0xe4) setsockopt$inet6_IPV6_XFRM_POLICY(r12, 0x29, 0x23, &(0x7f0000000180)={{{@in=@multicast2, @in=@remote, 0x3, 0x7, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2c}, {0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x3ff}, 0x0, 0x20000000}, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x6c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3, 0x0, 0x80000, 0x9, 0x3}}, 0xe8) close(r12) bind$inet6(r11, &(0x7f00000000c0)={0xa, 0x4e21, 0xb, @empty}, 0x1c) connect$inet6(r11, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r11, 0x84, 0x9, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e23, @empty}}, 0x0, 0xfff9, 0x20000000, 0x5, 0x50, 0x1000, 0x1}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r11, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x4e23, 0x2, @empty, 0x9d7}}, 0x6, 0x0, 0x0, 0xb3, 0xb3550aa4ba878396, 0x0, 0x1}, 0x9c) shutdown(r11, 0x1) 228.98828ms ago: executing program 0 (id=7439): r0 = socket$kcm(0x21, 0x5, 0xa) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)}, 0xfc40) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000000)) 53.355681ms ago: executing program 3 (id=7440): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000080000000000000064ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10000000}, 0x94) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, 0x0}], 0x1, 0x448c4) readv(r2, &(0x7f0000000440)=[{&(0x7f0000000540)=""/4096, 0x1000}], 0x1) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) ioctl$TUNSETDEBUG(r3, 0x400454c9, &(0x7f00000001c0)=0x5) write$cgroup_devices(r0, &(0x7f0000000840)=ANY=[@ANYBLOB="1e0308004d6b71ef288563"], 0xffdd) close(r3) close(0x4) r5 = socket$inet(0x2, 0x4, 0x6) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="4000000010003904020002000000000000000000", @ANYRES32=0x0, @ANYBLOB="40100000004104002000128008000100677265001400028006000f0003000000060010004e200000"], 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x4004000) setsockopt$inet_mreqsrc(r5, 0x0, 0x27, &(0x7f0000000000)={@local, @broadcast, @broadcast}, 0xc) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) unshare(0x400) r7 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000480)='devices.deny\x00', 0x2, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0x6, 0x1, 0x7fff, 0x1, 0x4, 0x9, 0xa4, 0x93a2, 0x7, 0xb69, 0xc1, 0x7, 0x1, 0x9, 0x5, 0x101, 0x1000, 0x40, 0x701, 0x3, 0x40001, 0xfffffffa, 0x0, 0x6, 0x9, 0x4, 0x7, 0x5, 0x4, 0x762, 0x3, 0xd, 0xe, 0x2b12, 0xb6, 0x6, 0x1c00, 0x2, 0x7, 0xbed4, 0x2000008, 0x8000100, 0x3, 0xfffffffc, 0x11000, 0x8, 0x5, 0x79b, 0x2, 0x21, 0x7f, 0x7, 0x7, 0x7, 0x10, 0x101, 0xd7, 0x1fa0860a, 0x7, 0xaa, 0x7, 0xa, 0x180001, 0x4007, 0x7ff, 0x5, 0x6, 0xf7, 0x5, 0x8, 0x6, 0x10000006, 0x4, 0x7, 0x4009, 0x0, 0x4, 0x100002, 0x401, 0x752, 0x0, 0x3, 0x0, 0x10001, 0x2, 0x0, 0x6, 0x6, 0x3, 0x80000000, 0xfdffffff, 0x5a3, 0x2, 0x84, 0x100, 0x5, 0x8, 0x81, 0xb, 0x5, 0x20006, 0x5, 0x22, 0xb, 0x2, 0xd9a, 0xd, 0x2a2, 0xffffffff, 0x6, 0x2, 0x2, 0x8, 0x0, 0x4, 0x2, 0xc76a, 0x8, 0x3, 0x4, 0x401, 0x66cd, 0x8, 0x8000, 0x2008da0, 0x1fc, 0x3, 0xffffffff]}}) poll(&(0x7f0000000180)=[{r7, 0x600}, {0xffffffffffffffff, 0x2010}, {r6, 0x102}, {r2, 0x41c0}], 0x4, 0x9) 0s ago: executing program 0 (id=7441): socket$nl_xfrm(0x10, 0x3, 0x6) (async) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000740)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x10000, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20}, {0x8, 0x10, 0x100000002, 0x0, 0xfff, 0xffffffffffffb473, 0xffffffffffffffff}, {0x1000000000, 0x2000000000000000, 0x2, 0xffffffffffffffff}, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x3}}, 0xb8}}, 0x4004) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {0x0, 0x0, 0x200000000000000}}}, 0xb8}}, 0x2c000010) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "6410a6", 0x0, 0x0, 0x0, @dev, @mcast2}}}}, 0x0) (async) syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "6410a6", 0x0, 0x0, 0x0, @dev, @mcast2}}}}, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="380000003f00070113a769d500000000017c00000400fc800c00018008000600", @ANYRES32=0x0, @ANYBLOB="0c0002800500230000000000080007"], 0x38}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x5, 0xfffffffffffffffb}, {0x0, 0x40000000000000, 0x200000000000000}, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x4000015}, 0x2c000010) (async) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x5, 0xfffffffffffffffb}, {0x0, 0x40000000000000, 0x200000000000000}, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x4000015}, 0x2c000010) kernel console output (not intermixed with test programs): e [ 882.006785][T30105] vlan2: entered allmulticast mode [ 882.012541][T30105] hsr0: entered allmulticast mode [ 882.017655][T30105] hsr_slave_0: entered allmulticast mode [ 882.023375][T30105] hsr_slave_1: entered allmulticast mode [ 882.043639][T29960] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 882.109525][T30105] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6088'. [ 882.203279][T30105] hsr_slave_0: left promiscuous mode [ 882.227785][T30105] hsr_slave_1: left promiscuous mode [ 882.305455][T17401] Bluetooth: hci5: command tx timeout [ 882.460385][T29960] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 882.560045][T30115] syzkaller0: entered promiscuous mode [ 882.571579][T30115] syzkaller0: entered allmulticast mode [ 882.613431][T30122] netlink: 128 bytes leftover after parsing attributes in process `syz.4.6092'. [ 882.999951][T30131] syzkaller0: entered promiscuous mode [ 883.015995][T30131] syzkaller0: entered allmulticast mode [ 883.026249][T29960] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 883.044323][T29960] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 883.053265][T29960] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 883.065886][T29960] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 883.074956][T29960] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 883.085952][T29960] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 884.389403][T17401] Bluetooth: hci5: command tx timeout [ 885.648009][T29960] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 885.657009][T29960] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 885.664719][T30146] netlink: 'syz.3.6099': attribute type 33 has an invalid length. [ 885.673267][T30151] netlink: 'syz.4.6097': attribute type 8 has an invalid length. [ 885.909186][ T4986] udevd[4986]: worker [27685] /devices/virtual/block/nbd6 is taking a long time [ 885.971205][T29960] 8021q: adding VLAN 0 to HW filter on device bond0 [ 886.005639][T30177] netlink: 'syz.3.6105': attribute type 8 has an invalid length. [ 886.009416][T29960] 8021q: adding VLAN 0 to HW filter on device team0 [ 886.038877][T30175] lo speed is unknown, defaulting to 1000 [ 886.042650][T11241] bridge0: port 1(bridge_slave_0) entered blocking state [ 886.051813][T11241] bridge0: port 1(bridge_slave_0) entered forwarding state [ 886.078697][T21274] bridge0: port 2(bridge_slave_1) entered blocking state [ 886.085910][T21274] bridge0: port 2(bridge_slave_1) entered forwarding state [ 886.461842][T17401] Bluetooth: hci5: command tx timeout [ 886.531038][T30175] lo speed is unknown, defaulting to 1000 [ 886.854874][T29960] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 887.034129][T29960] veth0_vlan: entered promiscuous mode [ 887.062464][T29960] veth1_vlan: entered promiscuous mode [ 887.129614][T29960] veth0_macvtap: entered promiscuous mode [ 887.145608][T29960] veth1_macvtap: entered promiscuous mode [ 887.168965][T29960] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 887.240715][T29960] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 887.292193][T21269] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 887.315206][T21269] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 887.342277][T30208] __nla_validate_parse: 1 callbacks suppressed [ 887.342295][T30208] netlink: 420 bytes leftover after parsing attributes in process `syz.4.6111'. [ 887.371743][T21269] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 887.392383][T21269] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 887.415404][T30204] tipc: Enabled bearer , priority 0 [ 887.605396][T30212] syzkaller0: entered promiscuous mode [ 887.623266][T30212] syzkaller0: entered allmulticast mode [ 887.664061][T30204] tipc: Resetting bearer [ 887.673082][T30204] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6110'. [ 887.708374][T30203] tipc: Resetting bearer [ 887.727857][T30203] tipc: Disabling bearer [ 887.738292][T21269] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 887.752563][T21269] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 887.810162][T21269] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 887.837477][T21269] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 888.079141][T30232] team0: Device vlan0 is already an upper device of the team interface [ 888.435659][T30247] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6121'. [ 888.945102][T30240] erspan0: entered promiscuous mode [ 888.961602][T30240] erspan0: entered allmulticast mode [ 889.083828][T30256] lo speed is unknown, defaulting to 1000 [ 889.181867][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 889.306959][T30266] x_tables: duplicate underflow at hook 2 [ 889.315001][T30266] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6127'. [ 889.467473][T30256] lo speed is unknown, defaulting to 1000 [ 889.590295][T30284] hsr0: entered promiscuous mode [ 889.654600][T30284] hsr0: left promiscuous mode [ 889.942459][ T5620] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 889.956683][ T5620] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 889.965295][ T5620] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 889.974701][ T5620] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 889.983926][ T5620] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 890.580175][T17891] team0: Port device syz_tun removed [ 890.614948][T30306] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6135'. [ 890.626369][T11241] tipc: Resetting bearer [ 890.640066][T30306] netlink: 'syz.4.6135': attribute type 49 has an invalid length. [ 890.740272][ T29] audit: type=1804 audit(1784421641.681:15): pid=30316 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.6137" name="/newroot/63/memory.events" dev="tmpfs" ino=336 res=1 errno=0 [ 890.805853][T30316] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6137'. [ 890.816084][ T29] audit: type=1800 audit(1784421641.681:16): pid=30316 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.6137" name="memory.events" dev="tmpfs" ino=336 res=0 errno=0 [ 890.855555][ T29] audit: type=1804 audit(1784421641.751:17): pid=30317 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.6137" name="/newroot/63/memory.events" dev="tmpfs" ino=336 res=1 errno=0 [ 891.157522][T30300] lo speed is unknown, defaulting to 1000 [ 891.694996][T30300] lo speed is unknown, defaulting to 1000 [ 891.905749][T30344] netlink: 'syz.1.6141': attribute type 20 has an invalid length. [ 891.917023][T30346] gretap3: entered promiscuous mode [ 892.061509][T17401] Bluetooth: hci2: command tx timeout [ 892.178437][T30357] netlink: 'syz.3.6146': attribute type 1 has an invalid length. [ 892.335969][T30357] 8021q: adding VLAN 0 to HW filter on device bond13 [ 892.433218][ T5620] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 892.450669][ T5620] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 892.460400][ T5620] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 892.470126][ T5620] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 892.478873][ T5620] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 892.523540][T30300] bridge0: port 1(bridge_slave_0) entered blocking state [ 892.532986][T30300] bridge0: port 1(bridge_slave_0) entered disabled state [ 892.551835][T30300] bridge_slave_0: entered allmulticast mode [ 892.568193][T30300] bridge_slave_0: entered promiscuous mode [ 892.596327][T30300] bridge0: port 2(bridge_slave_1) entered blocking state [ 892.611559][T30300] bridge0: port 2(bridge_slave_1) entered disabled state [ 892.618879][T30300] bridge_slave_1: entered allmulticast mode [ 892.627016][T30300] bridge_slave_1: entered promiscuous mode [ 892.685595][T30300] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 892.699835][T30300] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 892.765620][T30300] team0: Port device team_slave_0 added [ 892.785235][T30300] team0: Port device team_slave_1 added [ 892.790965][T30380] lo speed is unknown, defaulting to 1000 [ 892.800529][T30383] netlink: 80 bytes leftover after parsing attributes in process `syz.4.6152'. [ 892.890818][T30300] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 892.920154][T30300] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 892.985941][T30300] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 893.010866][T30396] netlink: 56 bytes leftover after parsing attributes in process `syz.4.6155'. [ 893.012300][T30300] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 893.022049][T30394] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6154'. [ 893.044914][T30300] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 893.109600][T30300] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 893.280653][T30300] hsr_slave_0: entered promiscuous mode [ 893.295973][T30300] hsr_slave_1: entered promiscuous mode [ 893.310174][T30300] debugfs: 'hsr0' already exists in 'hsr' [ 893.323897][T30300] Cannot create hsr debugfs directory [ 893.382785][T30416] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6157'. [ 893.414473][T30416] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6157'. [ 893.448829][T30380] lo speed is unknown, defaulting to 1000 [ 893.458721][T30419] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6157'. [ 893.488471][T30419] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6157'. [ 893.584879][T30371] lo speed is unknown, defaulting to 1000 [ 893.864030][T30300] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 893.874776][T30300] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 893.936763][T30371] lo speed is unknown, defaulting to 1000 [ 894.090180][T30300] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 894.125657][T30300] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 894.141546][T17401] Bluetooth: hci2: command tx timeout [ 894.281284][T30300] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 894.309020][T30300] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 894.365089][T30432] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6160'. [ 894.553844][T17401] Bluetooth: hci0: command tx timeout [ 894.569235][T30300] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 894.590152][T30300] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 894.909214][T30437] netlink: 'syz.1.6162': attribute type 3 has an invalid length. [ 894.939322][T30437] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6162'. [ 894.982786][T30441] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6163'. [ 895.434285][T30300] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 895.448367][T30300] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 895.500069][T30300] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 895.523450][T30300] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 895.542732][T30300] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 895.566567][T30300] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 895.584290][T30460] lo speed is unknown, defaulting to 1000 [ 895.604145][T30300] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 895.632340][T30300] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 895.759308][T30371] bridge0: port 1(bridge_slave_0) entered blocking state [ 895.772760][T30371] bridge0: port 1(bridge_slave_0) entered disabled state [ 895.786946][T30371] bridge_slave_0: entered allmulticast mode [ 895.808089][T30371] bridge_slave_0: entered promiscuous mode [ 895.834507][T30371] bridge0: port 2(bridge_slave_1) entered blocking state [ 895.843607][T30371] bridge0: port 2(bridge_slave_1) entered disabled state [ 895.850846][T30371] bridge_slave_1: entered allmulticast mode [ 895.859267][T30371] bridge_slave_1: entered promiscuous mode [ 895.945110][T30371] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 895.959595][T30371] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 895.995516][T30460] lo speed is unknown, defaulting to 1000 [ 896.018062][T30371] team0: Port device team_slave_0 added [ 896.027208][T30371] team0: Port device team_slave_1 added [ 896.077861][T30371] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 896.085783][T30371] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 896.112850][T30371] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 896.129437][T30371] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 896.137693][T30371] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 896.164428][T30371] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 896.232059][T17401] Bluetooth: hci2: command tx timeout [ 896.261995][T30371] hsr_slave_0: entered promiscuous mode [ 896.268834][T30371] hsr_slave_1: entered promiscuous mode [ 896.275558][T30371] debugfs: 'hsr0' already exists in 'hsr' [ 896.292243][T30371] Cannot create hsr debugfs directory [ 896.376435][T30479] rdma_rxe: rxe_newlink: failed to add lo [ 896.528540][T30300] 8021q: adding VLAN 0 to HW filter on device bond0 [ 896.606850][T30485] lo speed is unknown, defaulting to 1000 [ 896.619728][T30300] 8021q: adding VLAN 0 to HW filter on device team0 [ 896.632785][T17401] Bluetooth: hci0: command tx timeout [ 896.699101][T11241] bridge0: port 1(bridge_slave_0) entered blocking state [ 896.706289][T11241] bridge0: port 1(bridge_slave_0) entered forwarding state [ 896.784932][ T6445] bridge0: port 2(bridge_slave_1) entered blocking state [ 896.792160][ T6445] bridge0: port 2(bridge_slave_1) entered forwarding state [ 896.838929][T30485] lo speed is unknown, defaulting to 1000 [ 896.933068][T30371] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 896.945940][T30371] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 896.958770][T30371] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 896.973627][T30371] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 896.983352][T30371] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 896.994409][T30371] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 897.005511][T30371] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 897.019763][T30371] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 897.145988][T30371] 8021q: adding VLAN 0 to HW filter on device bond0 [ 897.168472][T30371] 8021q: adding VLAN 0 to HW filter on device team0 [ 897.185150][T11226] bridge0: port 1(bridge_slave_0) entered blocking state [ 897.192367][T11226] bridge0: port 1(bridge_slave_0) entered forwarding state [ 897.379465][T30500] xt_TCPMSS: Only works on TCP SYN packets [ 897.393364][T21269] bridge0: port 2(bridge_slave_1) entered blocking state [ 897.400553][T21269] bridge0: port 2(bridge_slave_1) entered forwarding state [ 897.457879][T30501] bridge_slave_1: left allmulticast mode [ 897.471452][T30501] bridge_slave_1: left promiscuous mode [ 897.488736][T30501] bridge0: port 2(bridge_slave_1) entered disabled state [ 897.526615][T30501] bridge_slave_0: left allmulticast mode [ 897.542857][T30501] bridge_slave_0: left promiscuous mode [ 897.550073][T30501] bridge0: port 1(bridge_slave_0) entered disabled state [ 898.303432][T17401] Bluetooth: hci2: command tx timeout [ 898.315593][T30300] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 898.448911][T30526] __nla_validate_parse: 4 callbacks suppressed [ 898.448944][T30526] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.6177'. [ 898.469231][T30526] netlink: 'syz.3.6177': attribute type 1 has an invalid length. [ 898.491594][T30526] netlink: 224 bytes leftover after parsing attributes in process `syz.3.6177'. [ 898.513049][T30526] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6177'. [ 898.517225][T30300] veth0_vlan: entered promiscuous mode [ 898.702064][T17401] Bluetooth: hci0: command tx timeout [ 898.714722][T30300] veth1_vlan: entered promiscuous mode [ 898.806494][T30371] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 898.886392][T30300] veth0_macvtap: entered promiscuous mode [ 898.929701][T30300] veth1_macvtap: entered promiscuous mode [ 898.955440][T30539] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6179'. [ 898.997391][T30539] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6179'. [ 899.018821][T30540] syzkaller0: entered promiscuous mode [ 899.028976][T30540] syzkaller0: entered allmulticast mode [ 899.043002][T30543] netlink: 'syz.4.6179': attribute type 1 has an invalid length. [ 899.053682][T30300] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 899.065877][T30543] netlink: 224 bytes leftover after parsing attributes in process `syz.4.6179'. [ 899.110103][T30539] geneve2: entered promiscuous mode [ 899.288537][T30300] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 899.339873][T11226] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 899.377565][T11226] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 899.415221][T11226] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 899.442360][T11226] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 899.486753][T30556] tipc: Enabling of bearer rejected, failed to enable media [ 899.633058][ T6445] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 899.684644][ T6445] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 899.740435][ T6428] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 899.781476][ T6428] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 899.800237][T30371] veth0_vlan: entered promiscuous mode [ 899.827837][T30566] No such timeout policy "syz0" [ 899.837134][T30371] veth1_vlan: entered promiscuous mode [ 899.913290][T30371] veth0_macvtap: entered promiscuous mode [ 899.940648][T30371] veth1_macvtap: entered promiscuous mode [ 900.013174][T30371] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 900.056146][T30371] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 900.108691][T30572] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6188'. [ 900.129893][T30572] netlink: 64 bytes leftover after parsing attributes in process `syz.3.6188'. [ 900.151270][T30572] tipc: Invalid UDP bearer configuration [ 900.151311][T30572] tipc: Enabling of bearer rejected, failed to enable media [ 900.182060][ T6428] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 900.202788][ T6428] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 900.237607][ T6428] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 900.266154][ T6428] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 900.453885][T30576] lo speed is unknown, defaulting to 1000 [ 900.520756][T11226] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 900.564143][T11226] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 900.657852][T21269] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 900.675377][T21269] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 900.849786][T30601] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6195'. [ 901.013499][T30576] lo speed is unknown, defaulting to 1000 [ 901.149495][T30610] netlink: 'syz.3.6197': attribute type 11 has an invalid length. [ 901.449611][T30621] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6199'. [ 902.049065][T30628] team0 (unregistering): Port device team_slave_0 removed [ 902.068160][T30628] team0 (unregistering): Port device team_slave_1 removed [ 902.133566][T30622] syzkaller0: entered promiscuous mode [ 902.142622][T30622] syzkaller0: entered allmulticast mode [ 902.171273][T30632] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check. [ 905.141952][T30677] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 906.101738][ T5620] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 906.109497][T30706] IPVS: persistence engine module ip_vs_pe_ not found [ 906.122067][ T5620] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 906.133029][ T5620] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 906.148545][ T5620] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 906.158505][ T5620] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 906.939868][T30737] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 907.017458][T30737] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 907.024345][T30737] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 907.031167][T30737] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 907.038012][T30737] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 907.044843][T30737] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 907.051653][T30737] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 907.056462][T30707] lo speed is unknown, defaulting to 1000 [ 907.058431][T30737] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 907.070928][T30737] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 907.174325][T30737] net_ratelimit: 184 callbacks suppressed [ 907.174341][T30737] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 907.186990][T30737] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 907.193817][T30737] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 907.200603][T30737] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 907.207458][T30737] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 907.214271][T30737] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 907.221108][T30737] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 907.227939][T30737] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 907.234777][T30737] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 907.241582][T30737] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 907.835729][T23151] IPVS: starting estimator thread 0... [ 907.857938][T30739] netlink: 'syz.0.6223': attribute type 8 has an invalid length. [ 907.892526][T30746] netlink: 'syz.5.6224': attribute type 12 has an invalid length. [ 907.902831][T30707] lo speed is unknown, defaulting to 1000 [ 907.914941][T30746] netlink: 'syz.5.6224': attribute type 29 has an invalid length. [ 907.938886][T30746] __nla_validate_parse: 3 callbacks suppressed [ 907.938901][T30746] netlink: 148 bytes leftover after parsing attributes in process `syz.5.6224'. [ 907.958981][T30750] IPVS: using max 27 ests per chain, 64800 per kthread [ 908.221455][ T5620] Bluetooth: hci6: command tx timeout [ 909.084562][ T4947] block nbd6: Possible stuck request ffff888027b40000: control (read@0,4096B). Runtime 90 seconds [ 909.285668][T30707] bridge0: port 1(bridge_slave_0) entered blocking state [ 909.302156][T30707] bridge0: port 1(bridge_slave_0) entered disabled state [ 909.319895][T30707] bridge_slave_0: entered allmulticast mode [ 909.348941][T30707] bridge_slave_0: entered promiscuous mode [ 909.366503][T30707] bridge0: port 2(bridge_slave_1) entered blocking state [ 909.386617][T30707] bridge0: port 2(bridge_slave_1) entered disabled state [ 909.400080][T30707] bridge_slave_1: entered allmulticast mode [ 909.409206][T30707] bridge_slave_1: entered promiscuous mode [ 909.481657][T30822] batman_adv: batadv0: Adding interface: gretap1 [ 909.488042][T30822] batman_adv: batadv0: The MTU of interface gretap1 is too small (1424) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 909.514693][T30822] batman_adv: batadv0: Interface activated: gretap1 [ 909.539618][T30707] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 909.556220][T30707] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 909.608156][T30707] team0: Port device team_slave_0 added [ 909.617403][T30707] team0: Port device team_slave_1 added [ 909.699377][T30707] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 909.706892][T30707] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 909.745054][T30707] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 909.760548][T30707] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 909.768802][T30707] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 909.805013][T30707] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 909.893760][T30707] hsr_slave_0: entered promiscuous mode [ 909.899980][T30707] hsr_slave_1: entered promiscuous mode [ 909.921915][T30707] debugfs: 'hsr0' already exists in 'hsr' [ 909.927663][T30707] Cannot create hsr debugfs directory [ 910.298880][T30832] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 910.321502][ T5620] Bluetooth: hci6: command tx timeout [ 910.458738][T30859] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 910.735586][T30707] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 910.886047][T30870] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 910.918608][T30867] lo speed is unknown, defaulting to 1000 [ 911.016079][T30707] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 911.069498][T11247] vlan2: left allmulticast mode [ 911.086555][T11247] geneve0: left allmulticast mode [ 911.092781][T11247] vlan2: left promiscuous mode [ 911.097633][T11247] geneve0: left promiscuous mode [ 911.108324][T11247] bridge0: port 3(vlan2) entered disabled state [ 911.117731][T11247] bridge_slave_1: left allmulticast mode [ 911.123905][T11247] bridge_slave_1: left promiscuous mode [ 911.129725][T11247] bridge0: port 2(bridge_slave_1) entered disabled state [ 911.139512][T11247] bridge_slave_0: left allmulticast mode [ 911.150178][T11247] bridge0: port 1(bridge_slave_0) entered disabled state [ 911.211003][T11247] dvmrp0: left allmulticast mode [ 911.417092][T11247] bond2 (unregistering): (slave gretap1): Releasing active interface [ 911.454221][T11247] bond7 (unregistering): (slave geneve6): Releasing active interface [ 911.537847][T11247] team0: Port device bridge3 removed [ 911.558820][T11247] team0: Port device bridge4 removed [ 911.621015][T11247] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 911.636330][T11247] bond0 (unregistering): Released all slaves [ 911.649888][T11247] bond1 (unregistering): Released all slaves [ 911.664033][T11247] bond2 (unregistering): Released all slaves [ 911.678104][T11247] bond3 (unregistering): Released all slaves [ 911.697318][T11247] bond4 (unregistering): Released all slaves [ 911.715554][T11247] bond5 (unregistering): Released all slaves [ 911.730293][T11247] bond6 (unregistering): Released all slaves [ 911.748238][T11247] bond7 (unregistering): Released all slaves [ 911.768028][T11247] bond8 (unregistering): Released all slaves [ 911.799268][T30868] syzkaller0: entered promiscuous mode [ 911.807750][T30868] syzkaller0: entered allmulticast mode [ 911.842507][T30867] lo speed is unknown, defaulting to 1000 [ 911.976573][T30707] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 912.389292][ T5620] Bluetooth: hci6: command tx timeout [ 914.476291][ T5620] Bluetooth: hci6: command tx timeout [ 914.534066][T11247] : left promiscuous mode [ 914.703137][T30707] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 915.514118][T11247] tipc: Left network mode [ 916.283275][T30943] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6269'. [ 916.918491][T30943] (: renamed from bridge_slave_0 (while UP) [ 917.225390][T30707] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 917.294668][T30961] netlink: 'syz.4.6273': attribute type 1 has an invalid length. [ 917.407493][T30707] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 917.432232][T30707] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 917.918063][T30707] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 918.068476][T30961] 8021q: adding VLAN 0 to HW filter on device bond3 [ 918.107514][T30967] bond3: (slave ip6gretap1): making interface the new active one [ 918.117799][T30967] bond3: (slave ip6gretap1): Enslaving as an active interface with an up link [ 918.134900][T11247] hsr_slave_0: left promiscuous mode [ 918.147826][T11247] hsr_slave_1: left promiscuous mode [ 918.160734][T11247] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 918.165153][T30974] siw: device registration error -23 [ 918.198039][T30974] netlink: 60 bytes leftover after parsing attributes in process `syz.1.6276'. [ 918.292540][T30977] sctp: [Deprecated]: syz.4.6278 (pid 30977) Use of struct sctp_assoc_value in delayed_ack socket option. [ 918.292540][T30977] Use struct sctp_sack_info instead [ 918.369702][T11247] smc: removing net device vlan1 with user defined pnetid SYZ2 [ 918.605865][T11247] team0 (unregistering): Port device team_slave_1 removed [ 918.621120][T30988] tls_set_device_offload: netdev not found [ 918.777281][T30707] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 918.787683][T30993] netlink: 'syz.4.6282': attribute type 13 has an invalid length. [ 918.791145][T30707] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 918.879459][T30707] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 918.888519][T30707] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 919.092111][T31001] netlink: 76 bytes leftover after parsing attributes in process `syz.1.6283'. [ 919.105234][T31001] netlink: 76 bytes leftover after parsing attributes in process `syz.1.6283'. [ 919.253927][T11247] IPVS: stop unused estimator thread 0... [ 920.138817][T30707] 8021q: adding VLAN 0 to HW filter on device bond0 [ 920.188297][T31025] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6289'. [ 920.209248][T31028] netlink: 224 bytes leftover after parsing attributes in process `syz.4.6290'. [ 920.225977][T30707] 8021q: adding VLAN 0 to HW filter on device team0 [ 920.232882][T31025] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6289'. [ 920.257634][ T6445] bridge0: port 1(bridge_slave_0) entered blocking state [ 920.264828][ T6445] bridge0: port 1(bridge_slave_0) entered forwarding state [ 920.288679][T31025] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6289'. [ 920.341095][T31038] netlink: 76 bytes leftover after parsing attributes in process `syz.4.6293'. [ 920.386713][ T6445] bridge0: port 2(bridge_slave_1) entered blocking state [ 920.393943][ T6445] bridge0: port 2(bridge_slave_1) entered forwarding state [ 920.647443][T31052] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6294'. [ 920.919284][T30707] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 920.992368][T30707] veth0_vlan: entered promiscuous mode [ 921.006978][T30707] veth1_vlan: entered promiscuous mode [ 921.053109][T30707] veth0_macvtap: entered promiscuous mode [ 921.058151][T31030] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 921.063243][T30707] veth1_macvtap: entered promiscuous mode [ 921.126198][T30707] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 921.200333][T30707] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 921.248364][T21273] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 921.288704][T21273] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 921.335931][T21273] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 921.367700][T21273] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 921.372490][T31069] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6298'. [ 921.622710][T21273] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 921.655758][T21273] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 921.758212][T11241] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 921.788582][T11241] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 922.323259][T31090] syzkaller0: entered promiscuous mode [ 922.344672][T31090] syzkaller0: entered allmulticast mode [ 922.496209][T31105] tls_set_device_offload: netdev not found [ 922.568071][T31111] netlink: 'syz.3.6213': attribute type 1 has an invalid length. [ 922.611452][T31111] netlink: 236 bytes leftover after parsing attributes in process `syz.3.6213'. [ 922.696293][T31120] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6308'. [ 923.428321][T31140] netlink: 6024 bytes leftover after parsing attributes in process `syz.1.6312'. [ 923.763917][T31140] syzkaller1: entered promiscuous mode [ 923.777024][T31140] syzkaller1: entered allmulticast mode [ 923.958283][T31158] sctp: [Deprecated]: syz.5.6316 (pid 31158) Use of struct sctp_assoc_value in delayed_ack socket option. [ 923.958283][T31158] Use struct sctp_sack_info instead [ 924.029519][T31153] bond1: Removing last arp target with arp_interval on [ 924.344632][T31172] netlink: 'syz.5.6320': attribute type 1 has an invalid length. [ 924.366118][T31172] netlink: 756 bytes leftover after parsing attributes in process `syz.5.6320'. [ 924.434572][T31186] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6324'. [ 924.441001][T31181] netlink: 96 bytes leftover after parsing attributes in process `syz.0.6322'. [ 924.527058][T31187] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6323'. [ 924.565942][T31187] netlink: 108 bytes leftover after parsing attributes in process `syz.1.6323'. [ 924.672400][T31196] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 925.657522][T31244] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6337'. [ 925.692006][T31247] netlink: 'syz.4.6338': attribute type 1 has an invalid length. [ 925.700515][T31247] netlink: 'syz.4.6338': attribute type 2 has an invalid length. [ 925.882865][T31252] net_ratelimit: 3127 callbacks suppressed [ 925.882883][T31252] Set syz1 is full, maxelem 2076 reached [ 925.898927][T31258] bond2: option packets_per_slave: mode dependency failed, not supported in mode balance-tlb(5) [ 925.941258][T31258] bond2 (unregistering): Released all slaves [ 926.051129][T31267] netlink: 'syz.0.6345': attribute type 2 has an invalid length. [ 926.117720][T31267] netlink: 'syz.0.6345': attribute type 8 has an invalid length. [ 926.229020][T31279] netlink: 'syz.4.6347': attribute type 32 has an invalid length. [ 926.426045][T31287] lo speed is unknown, defaulting to 1000 [ 926.437600][T31294] __nla_validate_parse: 2 callbacks suppressed [ 926.437618][T31294] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6353'. [ 926.614831][T31291] IPVS: set_ctl: invalid protocol: 92 255.255.255.255:20003 [ 926.923282][T31315] Bluetooth: MGMT ver 1.23 [ 927.074611][T31320] macsec1: entered promiscuous mode [ 927.310294][T31327] syzkaller0: entered promiscuous mode [ 927.328464][T31327] syzkaller0: entered allmulticast mode [ 927.371825][T31327] syz_tun: entered allmulticast mode [ 927.402373][T31326] syz_tun: left allmulticast mode [ 927.527876][T31333] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci6/hci6:200/input5 [ 927.614797][T31287] lo speed is unknown, defaulting to 1000 [ 927.904896][T31349] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6366'. [ 928.245927][T31356] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6370'. [ 928.279417][T31358] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6369'. [ 928.427915][T31363] netlink: 264 bytes leftover after parsing attributes in process `syz.1.6371'. [ 928.537414][T31373] x_tables: ip_tables: osf match: only valid for protocol 6 [ 928.618670][T31377] bridge0: port 3(syz_tun) entered blocking state [ 928.651723][T31377] bridge0: port 3(syz_tun) entered disabled state [ 928.658495][T31377] syz_tun: entered allmulticast mode [ 928.659800][T31369] netlink: 'syz.5.6372': attribute type 1 has an invalid length. [ 928.665551][T31377] syz_tun: entered promiscuous mode [ 928.679805][T31377] bridge0: port 3(syz_tun) entered blocking state [ 928.686372][T31377] bridge0: port 3(syz_tun) entered forwarding state [ 928.724671][T31385] syz_tun: entered allmulticast mode [ 928.757455][T31381] dvmrp8: entered allmulticast mode [ 928.797062][T31369] gretap1: entered allmulticast mode [ 928.850424][T31369] bond1: (slave gretap1): making interface the new active one [ 928.862695][T31369] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 928.933401][T31375] syzkaller0: entered promiscuous mode [ 928.969368][T31375] syzkaller0: entered allmulticast mode [ 929.047497][T31385] syz_tun: left allmulticast mode [ 929.162263][T31402] netlink: 36 bytes leftover after parsing attributes in process `syz.3.6378'. [ 929.497386][T31414] tipc: Started in network mode [ 929.512651][T31414] tipc: Node identity _, cluster identity 4711 [ 929.533545][T31414] tipc: Enabling of bearer rejected, failed to enable media [ 929.712326][T31425] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 929.852658][T31437] syzkaller0: entered promiscuous mode [ 929.884258][T31437] syzkaller0: entered allmulticast mode [ 930.080686][T31458] xt_l2tp: v2 doesn't support IP mode [ 930.322092][T31472] netlink: 'syz.4.6393': attribute type 1 has an invalid length. [ 930.535943][T31483] netlink: 228 bytes leftover after parsing attributes in process `syz.4.6395'. [ 930.763698][T31492] netlink: 56 bytes leftover after parsing attributes in process `syz.4.6397'. [ 931.426141][ T1316] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 934.088540][T31501] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 934.411241][T31537] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6410'. [ 934.446345][T31537] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6410'. [ 934.922499][T31546] netlink: 'syz.0.6412': attribute type 13 has an invalid length. [ 934.930499][T31546] netlink: 'syz.0.6412': attribute type 12 has an invalid length. [ 935.334219][T31551] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6415'. [ 936.095926][T31589] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6423'. [ 936.210483][T31594] netlink: 'syz.4.6426': attribute type 32 has an invalid length. [ 936.250373][T31594] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6426'. [ 936.317854][T31594] bond4: option coupled_control: invalid value (255) [ 936.330937][T31594] bond4 (unregistering): Released all slaves [ 936.502724][T31606] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6428'. [ 936.514501][T31602] veth3: entered allmulticast mode [ 936.762334][T31606] nbd: socks must be embedded in a SOCK_ITEM attr [ 936.774900][T31602] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6428'. [ 936.799726][T26079] block nbd64: NBD_DISCONNECT [ 936.819279][T31602] nbd: device at index 64 is going down [ 937.046234][T31631] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6435'. [ 937.117661][T26079] udevd[26079]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 937.122281][ T29] audit: type=1800 audit(1784421688.071:18): pid=31630 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.6434" name="memory.events" dev="tmpfs" ino=163 res=0 errno=0 [ 937.162293][T31630] netlink: 292 bytes leftover after parsing attributes in process `syz.3.6434'. [ 937.298362][T31643] hsr0: entered promiscuous mode [ 938.365790][T31664] xt_hashlimit: size too large, truncated to 1048576 [ 938.600538][T31669] openvswitch: netlink: Tunnel attr 68 out of range max 16 [ 938.636375][T31674] netlink: 'syz.5.6446': attribute type 1 has an invalid length. [ 938.659820][T31673] netlink: 'syz.5.6446': attribute type 1 has an invalid length. [ 938.666046][T31674] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6446'. [ 939.133736][ T4947] block nbd6: Possible stuck request ffff888027b40000: control (read@0,4096B). Runtime 120 seconds [ 962.142119][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 969.182398][ T4947] block nbd6: Possible stuck request ffff888027b40000: control (read@0,4096B). Runtime 150 seconds [ 976.460290][T31689] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6448'. [ 976.597422][T31699] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6452'. [ 976.607995][T31689] syzkaller0: entered promiscuous mode [ 976.617597][T31689] syzkaller0: entered allmulticast mode [ 976.735724][T31704] netlink: 5 bytes leftover after parsing attributes in process `syz.0.6454'. [ 976.738098][T31709] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6457'. [ 976.748348][T31707] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 976.809563][T31707] syzkaller0: entered promiscuous mode [ 976.848807][T31707] syzkaller0: entered allmulticast mode [ 976.857368][T31707] tipc: Started in network mode [ 976.862404][T31707] tipc: Node identity , cluster identity 4711 [ 976.868649][T31707] tipc: Failed to obtain node identity [ 976.876347][T31707] tipc: Enabling of bearer rejected, failed to enable media [ 976.888920][T31707] ip6t_srh: unknown srh match flags 4000 [ 976.977441][T31722] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6459'. [ 976.991910][T31721] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6459'. [ 977.056531][T31724] netlink: 'syz.1.6458': attribute type 3 has an invalid length. [ 977.086455][T31722] bond0: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 977.097218][T31721] bond0: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 977.115424][T31716] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6458'. [ 977.242755][T31733] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6462'. [ 977.255631][T31733] netlink: 'syz.0.6462': attribute type 30 has an invalid length. [ 977.308247][T31737] netlink: 'syz.0.6462': attribute type 30 has an invalid length. [ 977.454665][T31743] veth0: entered promiscuous mode [ 977.610588][T31744] veth0: left promiscuous mode [ 977.760200][T31758] bridge0: port 2(bridge_slave_1) entered disabled state [ 977.767957][T31758] bridge0: port 1(bridge_slave_0) entered disabled state [ 977.832983][T31758] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 977.844510][T31758] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 977.928658][T31758] gretap1: left allmulticast mode [ 977.950179][T31768] netlink: 'syz.4.6470': attribute type 29 has an invalid length. [ 977.982908][T11241] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 977.998182][T11241] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 978.018665][T11241] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 978.045676][T11241] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 978.103949][T31779] netlink: 48 bytes leftover after parsing attributes in process `syz.0.6473'. [ 978.526180][T31797] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6478'. [ 978.659689][T21269] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 978.700916][T21269] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 978.750730][T21269] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 978.789150][T21269] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 978.907813][T31804] veth1_to_hsr: Caught tx_queue_len zero misconfig [ 979.163804][T31821] netlink: 'syz.0.6484': attribute type 1 has an invalid length. [ 979.450149][T31835] netlink: 'syz.5.6489': attribute type 2 has an invalid length. [ 979.520683][T31835] : entered promiscuous mode [ 979.760370][T31850] syzkaller0: entered promiscuous mode [ 979.776255][T31850] syzkaller0: entered allmulticast mode [ 979.800423][T31850] 0: reclassify loop, rule prio 0, protocol 800 [ 980.063695][T31862] syzkaller0: entered promiscuous mode [ 980.073319][T31862] syzkaller0: entered allmulticast mode [ 980.157682][T14603] IPVS: starting estimator thread 0... [ 980.279176][T31875] IPVS: using max 28 ests per chain, 67200 per kthread [ 980.750590][T31898] lo speed is unknown, defaulting to 1000 [ 981.037089][T31906] bond2: up delay (10) is not a multiple of miimon (7), value rounded to 7 ms [ 981.076837][T31906] bond2 (unregistering): Released all slaves [ 981.173381][T31898] lo speed is unknown, defaulting to 1000 [ 981.760272][T31925] lo speed is unknown, defaulting to 1000 [ 982.504961][T31952] __nla_validate_parse: 10 callbacks suppressed [ 982.504979][T31952] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6522'. [ 982.637274][T31925] lo speed is unknown, defaulting to 1000 [ 983.037392][T31971] netlink: 60 bytes leftover after parsing attributes in process `syz.3.6528'. [ 983.062861][T31971] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6528'. [ 983.088727][T31971] netlink: 60 bytes leftover after parsing attributes in process `syz.3.6528'. [ 983.240652][T31959] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6523'. [ 983.277872][T31985] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6530'. [ 983.297973][T31985] veth1_to_bond: entered allmulticast mode [ 983.321902][T31985] veth1_to_bond: entered promiscuous mode [ 983.333999][T31985] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6530'. [ 983.374075][T31985] veth1_to_bond (unregistering): left allmulticast mode [ 983.392359][T31985] veth1_to_bond (unregistering): left promiscuous mode [ 983.436328][T31993] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6531'. [ 983.491242][T31985] bond0: (slave bond_slave_1): Releasing backup interface [ 983.827073][T32004] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6535'. [ 983.852704][T32004] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6535'. [ 984.139273][T32022] openvswitch: netlink: Key 0 has unexpected len 4 expected 0 [ 984.805090][T32051] x_tables: duplicate underflow at hook 2 [ 985.305461][T32073] xt_TCPMSS: Only works on TCP SYN packets [ 985.363871][T32076] syzkaller1: entered promiscuous mode [ 985.387306][T32076] syzkaller1: entered allmulticast mode [ 985.854861][T32102] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 985.917476][T32101] netlink: 'syz.3.6563': attribute type 1 has an invalid length. [ 986.484566][T32136] vlan2: entered allmulticast mode [ 986.489795][T32138] netlink: 'syz.4.6574': attribute type 21 has an invalid length. [ 986.489895][T32136] bond0: entered allmulticast mode [ 986.507679][T32136] bond_slave_0: entered allmulticast mode [ 986.509937][T32138] IPv6: NLM_F_CREATE should be specified when creating new route [ 986.513861][T32136] bond_slave_1: entered allmulticast mode [ 986.514777][T32116] sit0: entered promiscuous mode [ 986.538393][T32116] netlink: 'syz.0.6568': attribute type 1 has an invalid length. [ 986.698531][T32141] bond2: option ad_actor_sys_prio: invalid value (0) [ 986.726383][T32141] bond2: option ad_actor_sys_prio: allowed values 1 - 65535 [ 986.739363][T32141] bond2 (unregistering): Released all slaves [ 986.824843][T32152] x_tables: unsorted underflow at hook 3 [ 986.911039][T32154] netlink: 'syz.0.6579': attribute type 1 has an invalid length. [ 987.015488][T32163] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 987.936299][T32223] netlink: 'syz.4.6595': attribute type 29 has an invalid length. [ 987.950858][T32225] __nla_validate_parse: 15 callbacks suppressed [ 987.950876][T32225] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6596'. [ 987.963362][T32223] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6595'. [ 987.967432][T32225] netlink: 11 bytes leftover after parsing attributes in process `syz.5.6596'. [ 987.990268][T32225] netlink: 11 bytes leftover after parsing attributes in process `syz.5.6596'. [ 988.000716][T32225] netlink: 52 bytes leftover after parsing attributes in process `syz.5.6596'. [ 988.027481][T32223] tunl0: Caught tx_queue_len zero misconfig [ 988.188611][T32232] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6598'. [ 990.368240][T32186] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 990.548667][T32251] netlink: 'syz.3.6600': attribute type 1 has an invalid length. [ 990.596721][T32251] 8021q: adding VLAN 0 to HW filter on device bond2 [ 990.618970][T32251] bond2: (slave gretap1): making interface the new active one [ 990.629237][T32251] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 990.716547][T32251] bond2 (unregistering): (slave gretap1): Releasing active interface [ 990.790945][T32251] bond2 (unregistering): Released all slaves [ 990.860086][T32274] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6610'. [ 991.192386][T32291] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6614'. [ 991.203901][T32292] syzkaller0: entered promiscuous mode [ 991.226438][T32292] syzkaller0: entered allmulticast mode [ 991.489468][T32292] tipc: Enabling of bearer rejected, failed to enable media [ 991.550392][T32312] openvswitch: netlink: Message has 8 unknown bytes. [ 991.664053][T32317] lo speed is unknown, defaulting to 1000 [ 991.888295][T32337] openvswitch: netlink: IP tunnel TTL not specified. [ 991.933185][T32337] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 992.181032][T32317] lo speed is unknown, defaulting to 1000 [ 992.309918][T32355] bridge2: entered promiscuous mode [ 992.321736][T32355] bridge2: entered allmulticast mode [ 992.344499][T32355] team0: Port device bridge2 added [ 992.439121][T32358] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 992.477643][T32358] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 992.593222][T32368] bridge0: port 3(vlan2) entered blocking state [ 992.615006][T32368] bridge0: port 3(vlan2) entered disabled state [ 992.639712][T32372] netlink: 'syz.3.6628': attribute type 1 has an invalid length. [ 992.659393][T32368] vlan2: entered allmulticast mode [ 992.669411][T32368] geneve0: entered allmulticast mode [ 992.687831][T32368] vlan2: entered promiscuous mode [ 992.701786][T32368] geneve0: entered promiscuous mode [ 992.873049][ T1316] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 993.438035][T32395] bond1: Unable to set down delay as MII monitoring is disabled [ 993.505998][T32395] bond1 (unregistering): Released all slaves [ 993.614018][T32403] IPVS: Unknown mcast interface: pimreg1 [ 993.747291][T32414] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6636'. [ 993.863312][T32426] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 993.881842][T32421] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 993.900752][T32430] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6641'. [ 994.074724][ T5281] netdevsim netdevsim4 netdevsim3: default qdisc (pfifo_fast) fail, fallback to noqueue [ 994.117792][ T5281] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 994.158169][T32423] lo speed is unknown, defaulting to 1000 [ 994.245941][T32435] netlink: 14 bytes leftover after parsing attributes in process `syz.4.6643'. [ 994.897281][T32462] x_tables: duplicate underflow at hook 1 [ 994.958630][T32423] lo speed is unknown, defaulting to 1000 [ 995.020533][T32472] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6652'. [ 995.118549][T32472] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6652'. [ 995.444194][T32486] netlink: 32 bytes leftover after parsing attributes in process `syz.5.6656'. [ 995.605920][T32492] netlink: 'syz.5.6659': attribute type 15 has an invalid length. [ 995.679607][T32494] netlink: 'syz.3.6660': attribute type 1 has an invalid length. [ 995.724049][T32495] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6659'. [ 995.955073][T32503] netlink: 'syz.5.6662': attribute type 1 has an invalid length. [ 996.018984][T32511] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6665'. [ 996.035803][T32511] xt_TCPMSS: Only works on TCP SYN packets [ 996.119388][T32503] 8021q: adding VLAN 0 to HW filter on device bond2 [ 996.309846][T32509] bond2: (slave veth3): Enslaving as an active interface with a down link [ 996.337023][T32508] netlink: 'syz.3.6664': attribute type 5 has an invalid length. [ 996.378280][T32512] bond2: (slave dummy0): making interface the new active one [ 996.412601][T32512] bond2: (slave dummy0): Enslaving as an active interface with an up link [ 996.742451][T32522] netlink: 32 bytes leftover after parsing attributes in process `syz.5.6668'. [ 996.759951][T32522] netlink: 'syz.5.6668': attribute type 3 has an invalid length. [ 996.783431][T32522] netlink: 72 bytes leftover after parsing attributes in process `syz.5.6668'. [ 997.117642][T32530] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 997.187718][T32543] bond0: Caught tx_queue_len zero misconfig [ 997.413157][T32530] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 997.465061][T32547] lo speed is unknown, defaulting to 1000 [ 997.654279][T32530] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 997.730310][T32559] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 997.766910][T32567] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 997.822361][T32567] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 997.839971][T32530] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 997.841393][T32567] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 997.940139][T32547] lo speed is unknown, defaulting to 1000 [ 998.187318][T11247] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 998.336391][T11241] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 998.427567][T11247] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 998.524073][T21269] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 998.755940][T32614] tipc: Started in network mode [ 998.769567][T26079] udevd[26079]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 998.773622][T32614] tipc: Node identity , cluster identity 4711 [ 998.820564][T32614] tipc: Failed to obtain node identity [ 998.823374][T26079] udevd[26079]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 998.850367][T32614] tipc: Enabling of bearer rejected, failed to enable media [ 998.885284][T32621] __nla_validate_parse: 3 callbacks suppressed [ 998.885299][T32621] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6692'. [ 998.929505][T32621] netlink: 'syz.4.6692': attribute type 10 has an invalid length. [ 998.982427][T32623] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6693'. [ 999.005912][T32621] 8021q: adding VLAN 0 to HW filter on device team0 [ 999.023450][T32621] bond0: (slave team0): Enslaving as an active interface with an up link [ 999.052544][T32625] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6693'. [ 999.086024][T32625] ip6erspan0: entered promiscuous mode [ 999.267709][ T4947] block nbd6: Possible stuck request ffff888027b40000: control (read@0,4096B). Runtime 180 seconds [ 999.462517][T32641] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 999.526738][T32641] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 999.596701][T32640] bridge0: port 1(bridge_slave_0) entered disabled state [ 999.701163][T32648] tipc: Started in network mode [ 999.708996][T32648] tipc: Node identity , cluster identity 4711 [ 999.741547][T32648] tipc: Failed to obtain node identity [ 999.754375][T32648] tipc: Enabling of bearer rejected, failed to enable media [ 999.788460][T32652] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6702'. [ 999.893211][T32656] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 999.938250][T32652] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6702'. [ 999.988220][T32660] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6701'. [ 1000.108783][T32658] sch_tbf: burst 88 is lower than device veth5 mtu (1514) ! [ 1000.177471][T32666] team0: renamed from lo (while UP) [ 1000.192039][T32666] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6704'. [ 1000.775358][T32691] bond0: (slave ip6tnl0): Error: Device type is different from other slaves [ 1000.798223][T32691] netlink: 'syz.4.6711': attribute type 4 has an invalid length. [ 1000.863149][T32697] netlink: 5 bytes leftover after parsing attributes in process `syz.0.6713'. [ 1001.088774][T32714] netlink: 27 bytes leftover after parsing attributes in process `syz.3.6718'. [ 1001.125386][T32718] netlink: 'syz.1.6720': attribute type 1 has an invalid length. [ 1001.167103][T32718] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1001.191056][T32718] vlan3: entered allmulticast mode [ 1001.197285][T32718] bond2: entered allmulticast mode [ 1001.239458][T32718] bond2: (slave geneve2): making interface the new active one [ 1001.247178][T32718] geneve2: entered allmulticast mode [ 1001.262044][T32718] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 1001.296538][T32723] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6718'. [ 1001.407024][T32729] lo speed is unknown, defaulting to 1000 [ 1001.767574][T26079] udevd[26079]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1002.072495][T32757] bond2: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 1002.086872][T32757] bond2 (unregistering): Released all slaves [ 1002.223855][T32762] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1002.252363][T32762] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1002.268285][T32762] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1002.276269][T32762] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1002.298042][T32729] lo speed is unknown, defaulting to 1000 [ 1003.199637][ T342] lo speed is unknown, defaulting to 1000 [ 1004.166590][ T342] lo speed is unknown, defaulting to 1000 [ 1004.296031][T10865] IPVS: starting estimator thread 0... [ 1004.312503][ T393] __nla_validate_parse: 3 callbacks suppressed [ 1004.312521][ T393] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6749'. [ 1004.387289][ T401] IPVS: sync thread started: state = MASTER, mcast_ifn = bridge_slave_0, syncid = -1707933696, id = 0 [ 1004.405800][ T395] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1004.421605][ T396] IPVS: using max 31 ests per chain, 74400 per kthread [ 1004.515041][ T395] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1004.527061][ T407] netlink: 140 bytes leftover after parsing attributes in process `syz.3.6752'. [ 1004.649439][ T413] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6753'. [ 1004.690838][ T412] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6753'. [ 1004.754394][ T413] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 1004.755899][ T412] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 1005.100882][ T436] netlink: 'syz.5.6761': attribute type 16 has an invalid length. [ 1005.128990][ T436] netlink: 64138 bytes leftover after parsing attributes in process `syz.5.6761'. [ 1005.190591][ T347] Bluetooth: hci5: command 0x0406 tx timeout [ 1005.190806][ T344] Bluetooth: hci4: command 0x0406 tx timeout [ 1005.412925][ T29] audit: type=1107 audit(1784421756.361:19): pid=464 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 1005.927089][ T493] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6769'. [ 1005.952931][ T497] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6772'. [ 1006.340739][ T498] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6772'. [ 1006.385503][ T498] nbd: device at index 64 is going down [ 1006.560994][ T515] syzkaller0: entered promiscuous mode [ 1006.563815][T32742] udevd[32742]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1006.582642][ T515] syzkaller0: entered allmulticast mode [ 1006.707700][ T528] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6779'. [ 1006.784509][ T532] syzkaller0: entered promiscuous mode [ 1006.803834][ T532] syzkaller0: entered allmulticast mode [ 1006.914608][ T540] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6784'. [ 1007.258244][ T558] hsr_slave_1 (unregistering): left promiscuous mode [ 1007.373832][T11247] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0x2e [ 1008.047420][ T597] syzkaller1: entered promiscuous mode [ 1008.071990][ T597] syzkaller1: entered allmulticast mode [ 1008.215112][ T605] syzkaller1: entered promiscuous mode [ 1008.249219][ T605] syzkaller1: entered allmulticast mode [ 1008.305877][ T609] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 1008.791090][ T637] netlink: 'syz.3.6809': attribute type 1 has an invalid length. [ 1009.062829][ T629] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1009.122841][ T629] bond2: (slave bond3): making interface the new active one [ 1009.142485][ T629] bond2: (slave bond3): Enslaving as an active interface with an up link [ 1009.165256][ T666] netlink: 'syz.0.6818': attribute type 3 has an invalid length. [ 1009.334074][ T676] __nla_validate_parse: 6 callbacks suppressed [ 1009.337277][ T676] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6813'. [ 1009.808530][ T676] bond0: (slave bond_slave_1): Releasing backup interface [ 1009.848819][ T676] bond_slave_1 (unregistering): left allmulticast mode [ 1009.890254][ T696] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6824'. [ 1009.891206][ T694] netlink: 68 bytes leftover after parsing attributes in process `syz.4.6824'. [ 1010.055196][ T708] lo: entered allmulticast mode [ 1010.092925][ T708] tunl0: entered allmulticast mode [ 1010.119092][ T708] gre0: entered allmulticast mode [ 1010.139545][ T708] gretap0: entered allmulticast mode [ 1010.155906][ T708] erspan0: entered allmulticast mode [ 1010.170841][ T708] ip_vti0: entered allmulticast mode [ 1010.176885][ T708] ip6_vti0: entered allmulticast mode [ 1010.182825][ T708] sit0: entered allmulticast mode [ 1010.188159][ T708] ip6tnl0: entered allmulticast mode [ 1010.194504][ T708] ip6gre0: entered allmulticast mode [ 1010.200591][ T708] syz_tun: entered allmulticast mode [ 1010.206557][ T708] ip6gretap0: entered allmulticast mode [ 1010.215310][ T708] bridge0: entered allmulticast mode [ 1010.220834][ T708] vcan0: entered allmulticast mode [ 1010.227222][ T708] bond0: entered allmulticast mode [ 1010.232749][ T708] bond_slave_0: entered allmulticast mode [ 1010.238655][ T708] bond_slave_1: entered allmulticast mode [ 1010.246400][ T708] team0: entered allmulticast mode [ 1010.252397][ T708] team_slave_0: entered allmulticast mode [ 1010.258224][ T708] team_slave_1: entered allmulticast mode [ 1010.267164][ T708] dummy0: entered allmulticast mode [ 1010.274566][ T708] nlmon0: entered allmulticast mode [ 1010.280034][ T708] batadv0: entered allmulticast mode [ 1010.286496][ T708] vxcan0: entered allmulticast mode [ 1010.292069][ T708] vxcan1: entered allmulticast mode [ 1010.297461][ T708] veth0: entered allmulticast mode [ 1010.301844][ T5620] Bluetooth: hci1: command 0x0406 tx timeout [ 1010.307882][ T708] veth1: entered allmulticast mode [ 1010.320734][ T708] wg0: entered allmulticast mode [ 1010.326761][ T708] wg1: entered allmulticast mode [ 1010.341384][ T708] wg2: entered allmulticast mode [ 1010.346513][ T708] veth0_to_bridge: entered allmulticast mode [ 1010.361575][ T708] veth1_to_bridge: entered allmulticast mode [ 1010.369606][ T708] veth0_to_bond: entered allmulticast mode [ 1010.391629][ T708] veth1_to_bond: entered allmulticast mode [ 1010.397764][ T708] veth0_to_team: entered allmulticast mode [ 1010.412076][ T708] veth1_to_team: entered allmulticast mode [ 1010.423295][ T708] veth0_to_batadv: entered allmulticast mode [ 1010.434693][ T708] batadv_slave_0: entered allmulticast mode [ 1010.440749][ T708] veth1_to_batadv: entered allmulticast mode [ 1010.449298][ T708] batadv_slave_1: entered allmulticast mode [ 1010.463069][ T708] xfrm0: entered allmulticast mode [ 1010.480044][ T708] veth0_to_hsr: entered allmulticast mode [ 1010.486241][ T708] hsr_slave_0: entered allmulticast mode [ 1010.493111][ T708] veth1_to_hsr: entered allmulticast mode [ 1010.500145][ T708] hsr_slave_1: entered allmulticast mode [ 1010.506403][ T708] hsr0: entered allmulticast mode [ 1010.513441][ T708] veth1_virt_wifi: entered allmulticast mode [ 1010.519957][ T708] veth0_virt_wifi: entered allmulticast mode [ 1010.526292][ T708] virt_wifi0: entered allmulticast mode [ 1010.532313][ T708] veth1_vlan: entered allmulticast mode [ 1010.538012][ T708] veth0_vlan: entered allmulticast mode [ 1010.543972][ T708] vlan0: entered allmulticast mode [ 1010.549265][ T708] vlan1: entered allmulticast mode [ 1010.559531][ T708] macvlan0: entered allmulticast mode [ 1010.565645][ T708] macvlan1: entered allmulticast mode [ 1010.571116][ T708] ipvlan0: entered allmulticast mode [ 1010.577845][ T708] ipvlan1: entered allmulticast mode [ 1010.583379][ T708] veth1_macvtap: entered allmulticast mode [ 1010.589298][ T708] veth0_macvtap: entered allmulticast mode [ 1010.595862][ T708] macvtap0: entered allmulticast mode [ 1010.602635][ T708] macsec0: entered allmulticast mode [ 1010.608020][ T708] geneve0: entered allmulticast mode [ 1010.613566][ T708] geneve1: entered allmulticast mode [ 1010.618946][ T708] netdevsim netdevsim5 netdevsim0: entered allmulticast mode [ 1010.627673][ T708] netdevsim netdevsim5 netdevsim1: entered allmulticast mode [ 1010.635278][ T708] netdevsim netdevsim5 netdevsim2: entered allmulticast mode [ 1010.642948][ T708] netdevsim netdevsim5 netdevsim3: entered allmulticast mode [ 1010.650499][ T708] mac80211_hwsim hwsim60 wlan0: entered allmulticast mode [ 1010.658311][ T708] mac80211_hwsim hwsim61 wlan1: entered allmulticast mode [ 1010.665693][ T708] bond1: entered allmulticast mode [ 1010.670829][ T708] gretap1: entered allmulticast mode [ 1010.676432][ T708] : entered allmulticast mode [ 1010.681383][ T708] ip6gre1: entered allmulticast mode [ 1010.686744][ T708] vlan2: entered allmulticast mode [ 1010.692634][ T708] gre1: entered allmulticast mode [ 1010.697780][ T708] bond2: entered allmulticast mode [ 1010.703709][ T708] veth2: entered allmulticast mode [ 1010.708937][ T708] veth3: entered allmulticast mode [ 1010.714790][ T708] bond3: entered allmulticast mode [ 1010.719995][ T708] mac80211_hwsim hwsim67 wlan2: entered allmulticast mode [ 1010.730459][ T708] ipvlan2: entered allmulticast mode [ 1010.766360][ T720] geneve2: entered promiscuous mode [ 1010.961626][ T735] netlink: 'syz.5.6831': attribute type 1 has an invalid length. [ 1010.969832][ T735] netlink: 224 bytes leftover after parsing attributes in process `syz.5.6831'. [ 1010.969957][ T741] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6834'. [ 1011.002725][ T740] netlink: 'syz.4.6833': attribute type 4 has an invalid length. [ 1011.037910][ T740] netlink: 152 bytes leftover after parsing attributes in process `syz.4.6833'. [ 1011.214490][ T740] .`: renamed from bond0 (while UP) [ 1011.395248][ T761] lo speed is unknown, defaulting to 1000 [ 1012.595135][ T833] netlink: 616 bytes leftover after parsing attributes in process `syz.1.6848'. [ 1012.608950][ T832] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6847'. [ 1012.664750][ T761] lo speed is unknown, defaulting to 1000 [ 1012.688512][ T831] veth0_macvtap: left promiscuous mode [ 1013.182773][ T854] tipc: Enabling of bearer rejected, failed to enable media [ 1013.275406][ T864] netlink: 240 bytes leftover after parsing attributes in process `syz.4.6853'. [ 1013.415328][ T867] netlink: 60 bytes leftover after parsing attributes in process `syz.1.6854'. [ 1014.210255][ T897] lo speed is unknown, defaulting to 1000 [ 1014.290974][ T901] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1014.311790][ T901] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1014.325122][ T901] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1014.335827][ T901] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1014.721593][ T899] netlink: 'syz.0.6862': attribute type 1 has an invalid length. [ 1014.877635][ T911] bond1: (slave gretap2): making interface the new active one [ 1014.886563][ T911] bond1: (slave gretap2): Enslaving as an active interface with an up link [ 1014.898875][ T897] lo speed is unknown, defaulting to 1000 [ 1015.632521][ T966] syzkaller0: entered promiscuous mode [ 1015.638251][ T966] syzkaller0: entered allmulticast mode [ 1016.256304][ T982] sctp: [Deprecated]: syz.3.6883 (pid 982) Use of int in max_burst socket option deprecated. [ 1016.256304][ T982] Use struct sctp_assoc_value instead [ 1016.320773][ T988] x_tables: duplicate underflow at hook 2 [ 1016.339733][ T988] xt_NFQUEUE: number of total queues is 0 [ 1016.357805][ T984] bridge0: entered allmulticast mode [ 1016.472003][ T995] __nla_validate_parse: 4 callbacks suppressed [ 1016.472017][ T995] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6886'. [ 1016.521228][ T995] vlan0: entered promiscuous mode [ 1016.526664][ T995] veth0_virt_wifi: entered promiscuous mode [ 1016.533768][ T995] vlan0: entered allmulticast mode [ 1016.539265][ T995] veth0_virt_wifi: entered allmulticast mode [ 1016.562103][ T995] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6886'. [ 1016.699700][ T1005] syzkaller1: entered promiscuous mode [ 1016.705667][ T1005] syzkaller1: entered allmulticast mode [ 1016.715499][ T1005] PF_CAN: dropped non conform CAN skbuff: dev type 280, len 324 [ 1016.719383][ T1007] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6889'. [ 1017.261201][ T1010] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6890'. [ 1017.354055][ T1013] siw: device registration error -23 [ 1017.606671][ T1015] syzkaller0: entered promiscuous mode [ 1017.621330][ T1015] syzkaller0: entered allmulticast mode [ 1017.814271][ T1019] syzkaller1: entered promiscuous mode [ 1017.819947][ T1019] syzkaller1: entered allmulticast mode [ 1017.835424][ T1019] syz_tun: entered allmulticast mode [ 1017.843418][ T1019] IPVS: Unknown mcast interface: vcan0 [ 1018.085722][ T1041] lo speed is unknown, defaulting to 1000 [ 1018.258297][ T1041] lo speed is unknown, defaulting to 1000 [ 1018.410051][ T1060] netlink: 'syz.4.6903': attribute type 1 has an invalid length. [ 1018.459332][ T1060] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1018.476507][ T1062] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6903'. [ 1018.516098][ T1060] bond0: (slave geneve3): making interface the new active one [ 1018.525023][ T1060] bond0: (slave geneve3): Enslaving as an active interface with an up link [ 1018.683584][ T1073] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6904'. [ 1018.885529][ T1084] netlink: 'syz.0.6908': attribute type 1 has an invalid length. [ 1019.312716][ T1096] netlink: 160 bytes leftover after parsing attributes in process `syz.4.6912'. [ 1019.334586][ T1096] netlink: 'syz.4.6912': attribute type 11 has an invalid length. [ 1020.873046][ C0] vxcan1: j1939_tp_rxtimer: 0xffff88807b2e1000: rx timeout, send abort [ 1021.373212][ C0] vxcan1: j1939_tp_rxtimer: 0xffff88807b2e0c00: rx timeout, send abort [ 1021.383931][ C0] vxcan1: j1939_tp_rxtimer: 0xffff88807b2e1000: abort rx timeout. Force session deactivation [ 1021.881559][ C0] vxcan1: j1939_tp_rxtimer: 0xffff88807b2e0c00: abort rx timeout. Force session deactivation [ 1022.856447][ T1124] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1022.926020][ T1157] netlink: 224 bytes leftover after parsing attributes in process `syz.0.6923'. [ 1023.012353][ T1164] ip6tnl0: Caught tx_queue_len zero misconfig [ 1023.128827][ T1176] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6928'. [ 1023.706832][ T1201] netlink: 'syz.0.6936': attribute type 11 has an invalid length. [ 1023.717089][ T1201] netlink: 44 bytes leftover after parsing attributes in process `syz.0.6936'. [ 1023.726641][ T1201] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6936'. [ 1023.758683][ T1201] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6936'. [ 1023.887275][ T1204] pimreg9: entered allmulticast mode [ 1023.951696][ T1207] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6938'. [ 1023.963979][ T1207] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6938'. [ 1024.516877][ T1236] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6942'. [ 1024.752373][ T1253] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6945'. [ 1025.103603][ T1266] syzkaller1: entered promiscuous mode [ 1025.117434][ T1266] syzkaller1: entered allmulticast mode [ 1025.164170][ T1266] syzkaller1: left promiscuous mode [ 1025.169506][ T1266] syzkaller1: left allmulticast mode [ 1025.215793][ T1272] netlink: 'syz.3.6949': attribute type 3 has an invalid length. [ 1025.240551][ T1274] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6951'. [ 1025.253167][ T1274] netlink: 'syz.0.6951': attribute type 2 has an invalid length. [ 1026.106715][ T1297] bond2: option mode: invalid value (9) [ 1026.114384][ T1297] bond2 (unregistering): Released all slaves [ 1026.145043][ T1294] hsr0: left promiscuous mode [ 1026.150438][ T1294] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 1026.173870][ T6428] bridge0: port 1(bridge_slave_0) entered blocking state [ 1026.181077][ T6428] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1026.265492][ T1303] ipip0: entered promiscuous mode [ 1026.270726][ T1303] ipip0: entered allmulticast mode [ 1026.291196][ T1305] team0: Device xfrm0 is of different type [ 1026.297109][ T4986] udevd[4986]: worker [27685] /devices/virtual/block/nbd6 timeout; kill it [ 1026.297220][ T4986] udevd[4986]: seq 35402 '/devices/virtual/block/nbd6' killed [ 1026.403604][ T1314] tipc: Enabled bearer , priority 0 [ 1026.411124][ T1314] syzkaller0: entered promiscuous mode [ 1026.419667][ T1314] syzkaller0: entered allmulticast mode [ 1026.457438][ T1314] tipc: Resetting bearer [ 1026.466088][ T1311] tipc: Resetting bearer [ 1026.500083][ T1311] tipc: Disabling bearer [ 1026.582170][ T1323] Cannot find add_set index 2 as target [ 1026.887173][ T1339] vlan3: entered promiscuous mode [ 1026.900011][ T1339] hsr0: entered promiscuous mode [ 1026.906948][ T1339] vlan3: entered allmulticast mode [ 1026.913247][ T1339] hsr0: entered allmulticast mode [ 1026.930951][ T1339] hsr_slave_0: entered allmulticast mode [ 1026.942791][ T1339] hsr_slave_1: entered allmulticast mode [ 1026.966196][ T1330] hsr_slave_0: left promiscuous mode [ 1026.972406][ T1330] hsr_slave_1: left promiscuous mode [ 1027.743933][ T5620] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1027.759237][ T5620] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1027.770981][ T5620] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1027.778934][ T5620] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1027.787387][ T5620] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1027.986401][ T1364] lo speed is unknown, defaulting to 1000 [ 1028.092961][ T1364] lo speed is unknown, defaulting to 1000 [ 1028.360914][ T1364] bridge0: port 1(bridge_slave_0) entered blocking state [ 1028.368292][ T1364] bridge0: port 1(bridge_slave_0) entered disabled state [ 1028.375641][ T1364] bridge_slave_0: entered allmulticast mode [ 1028.385249][ T1364] bridge_slave_0: entered promiscuous mode [ 1028.393378][ T1364] bridge0: port 2(bridge_slave_1) entered blocking state [ 1028.400579][ T1364] bridge0: port 2(bridge_slave_1) entered disabled state [ 1028.408092][ T1364] bridge_slave_1: entered allmulticast mode [ 1028.415032][ T1364] bridge_slave_1: entered promiscuous mode [ 1028.439987][ T1364] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1028.451138][ T1364] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1028.478158][ T1364] team0: Port device team_slave_0 added [ 1028.485668][ T1364] team0: Port device team_slave_1 added [ 1028.508110][ T1364] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1028.515116][ T1364] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1028.541384][ T1364] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1028.553328][ T1364] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1028.560299][ T1364] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1028.586285][ T1364] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1028.627099][ T1364] hsr_slave_0: entered promiscuous mode [ 1028.633469][ T1364] hsr_slave_1: entered promiscuous mode [ 1028.639446][ T1364] debugfs: 'hsr0' already exists in 'hsr' [ 1028.645377][ T1364] Cannot create hsr debugfs directory [ 1029.342611][ T4947] block nbd6: Possible stuck request ffff888027b40000: control (read@0,4096B). Runtime 210 seconds [ 1029.821510][T17401] Bluetooth: hci3: command tx timeout [ 1029.878621][ T1343] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1029.902713][ T1364] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1029.949215][ T1364] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1029.977427][ T1364] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1030.014078][ T1364] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1030.022190][ T1364] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1030.037337][ T1364] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1030.057351][ T1364] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1030.069267][ T1364] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1030.136782][ T1382] sit1: entered allmulticast mode [ 1030.143987][ T1398] __nla_validate_parse: 3 callbacks suppressed [ 1030.144002][ T1398] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6978'. [ 1030.168975][ T1398] bond0: entered promiscuous mode [ 1030.174086][ T1398] geneve3: entered promiscuous mode [ 1030.180602][ T1398] gretap0: entered promiscuous mode [ 1030.186710][ T1398] debugfs: 'hsr0' already exists in 'hsr' [ 1030.192725][ T1398] Cannot create hsr debugfs directory [ 1030.199238][ T1400] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6978'. [ 1030.208090][ T1398] hsr0: entered promiscuous mode [ 1030.262675][ T1401] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6974'. [ 1030.304164][ T1364] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1030.336946][ T1364] 8021q: adding VLAN 0 to HW filter on device team0 [ 1030.350909][ T1108] bridge0: port 1(bridge_slave_0) entered blocking state [ 1030.358135][ T1108] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1030.374970][ T1106] bridge0: port 2(bridge_slave_1) entered blocking state [ 1030.382103][ T1106] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1030.762558][ T1412] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1030.781704][T17401] Bluetooth: hci2: command 0x0406 tx timeout [ 1031.324154][ T1364] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1031.390825][ T1440] netlink: 48 bytes leftover after parsing attributes in process `syz.4.6988'. [ 1031.418926][ T1448] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6987'. [ 1031.546685][ T1450] bond6: option ad_user_port_key: invalid value (65535) [ 1031.559268][ T1450] bond6: option ad_user_port_key: allowed values 0 - 1023 [ 1031.576970][T17401] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1031.589960][ T1450] bond6 (unregistering): Released all slaves [ 1031.595188][T17401] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1031.597605][ T1457] sctp: [Deprecated]: syz.0.6991 (pid 1457) Use of int in max_burst socket option. [ 1031.597605][ T1457] Use struct sctp_assoc_value instead [ 1031.620121][T17401] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1031.633600][T17401] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1031.645443][T17401] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1031.902220][ T5620] Bluetooth: hci3: command tx timeout [ 1031.933616][ T1364] veth0_vlan: entered promiscuous mode [ 1031.950825][ T1364] veth1_vlan: entered promiscuous mode [ 1031.996368][ T1364] veth0_macvtap: entered promiscuous mode [ 1032.018381][ T1364] veth1_macvtap: entered promiscuous mode [ 1032.039640][ T1364] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1032.063851][ T1364] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1032.085606][ T6428] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1032.094776][ T6428] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1032.104241][ T1455] lo speed is unknown, defaulting to 1000 [ 1032.110759][ T6428] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1032.122463][ T6428] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1032.383043][ T1475] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6993'. [ 1032.424493][ T6428] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1032.450061][ T6428] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1032.517779][ T6428] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1032.532890][ T1455] lo speed is unknown, defaulting to 1000 [ 1032.538764][ T6428] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1032.830835][ T1493] lo speed is unknown, defaulting to 1000 [ 1032.862417][ T1497] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6999'. [ 1033.030344][ T1503] netlink: 'syz.6.7000': attribute type 4 has an invalid length. [ 1033.309580][ T344] block nbd8: Receive control failed (result -32) [ 1033.313083][ T5620] block nbd8: Receive control failed (result -32) [ 1033.317131][T17401] block nbd8: Receive control failed (result -32) [ 1033.325196][ T1493] lo speed is unknown, defaulting to 1000 [ 1033.335201][ T1501] lo speed is unknown, defaulting to 1000 [ 1033.658199][ T1455] bridge0: port 1(bridge_slave_0) entered blocking state [ 1033.681057][ T1455] bridge0: port 1(bridge_slave_0) entered disabled state [ 1033.700868][ T1455] bridge_slave_0: entered allmulticast mode [ 1033.718448][ T1455] bridge_slave_0: entered promiscuous mode [ 1033.731705][ T1455] bridge0: port 2(bridge_slave_1) entered blocking state [ 1033.739081][ T1455] bridge0: port 2(bridge_slave_1) entered disabled state [ 1033.746899][ T5620] Bluetooth: hci7: command tx timeout [ 1033.761889][ T1455] bridge_slave_1: entered allmulticast mode [ 1033.768512][ T1506] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1033.770523][ T1455] bridge_slave_1: entered promiscuous mode [ 1033.787466][ T1506] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 1033.803690][ T1521] netlink: 'syz.0.7003': attribute type 1 has an invalid length. [ 1033.879381][ T1455] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1033.894285][ T1501] lo speed is unknown, defaulting to 1000 [ 1033.896965][ T1506] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1033.904827][ T1455] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1033.924456][ T1506] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 1033.981509][ T5620] Bluetooth: hci3: command tx timeout [ 1034.021070][ T1455] team0: Port device team_slave_0 added [ 1034.027146][ T1506] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1034.041936][ T1506] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 1034.045657][ T1455] team0: Port device team_slave_1 added [ 1034.101493][ T1526] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7005'. [ 1034.134576][ T1506] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1034.148371][ T1506] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 1034.165360][ T1455] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1034.172814][ T1455] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1034.199876][ T1455] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1034.240041][ T1506] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 1034.254524][ T1506] Bluetooth: hci6: Error when powering off device on rfkill (-4) [ 1034.263505][ T1455] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1034.272588][ T1455] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1034.302715][ T1455] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1034.353785][ T1531] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7006'. [ 1034.506270][ T1455] hsr_slave_0: entered promiscuous mode [ 1034.529173][ T1455] hsr_slave_1: entered promiscuous mode [ 1034.575828][ T1455] debugfs: 'hsr0' already exists in 'hsr' [ 1034.584003][ T1455] Cannot create hsr debugfs directory [ 1034.780571][ T1506] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1034.790908][ T1506] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 1034.837575][ T1506] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 1034.846515][ T1506] Bluetooth: hci7: Error when powering off device on rfkill (-4) [ 1035.722845][ T1455] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1035.758350][ T1567] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7015'. [ 1035.771522][ T1455] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1035.792121][ T1455] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1035.829098][ T1455] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1035.847247][ T1455] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1035.860844][ T1572] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7016'. [ 1035.886626][ T1455] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1035.915492][ T1455] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1035.958457][ T1455] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1036.089989][ T1585] netlink: 40 bytes leftover after parsing attributes in process `syz.6.7019'. [ 1036.130638][ T1455] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1036.153959][ T1455] 8021q: adding VLAN 0 to HW filter on device team0 [ 1036.173390][T21274] bridge0: port 1(bridge_slave_0) entered blocking state [ 1036.180585][T21274] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1036.209019][T21274] bridge0: port 2(bridge_slave_1) entered blocking state [ 1036.216226][T21274] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1036.466889][ T1592] syzkaller0: entered promiscuous mode [ 1036.472813][ T1592] syzkaller0: entered allmulticast mode [ 1036.671143][ T1598] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7018'. [ 1036.959131][ T1455] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1037.387043][ T1455] veth0_vlan: entered promiscuous mode [ 1037.400635][ T1455] veth1_vlan: entered promiscuous mode [ 1037.451533][ T1455] veth0_macvtap: entered promiscuous mode [ 1037.463922][ T1455] veth1_macvtap: entered promiscuous mode [ 1037.484661][ T1455] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1037.501100][ T1455] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1037.521118][ T1108] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1037.535804][ T1108] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1037.545310][ T1108] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1037.556684][ T1108] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1037.672532][ T6428] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1037.688095][ T6428] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1037.750900][ T1110] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1037.763937][ T1110] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1054.312309][ T1316] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 1059.425843][ T4947] block nbd6: Possible stuck request ffff888027b40000: control (read@0,4096B). Runtime 240 seconds [ 1059.433726][ C0] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 1070.280825][ T1626] syzkaller0: entered promiscuous mode [ 1070.299892][ T1626] syzkaller0: entered allmulticast mode [ 1070.319343][ T1632] netdevsim netdevsim6 €Â: renamed from netdevsim0 (while UP) [ 1070.426413][ T1639] bond0: (slave bond_slave_1): Releasing backup interface [ 1070.458377][ T1632] netlink: 72 bytes leftover after parsing attributes in process `syz.6.7024'. [ 1070.469400][ T1644] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7028'. [ 1070.570882][ T1648] tipc: Started in network mode [ 1070.605505][ T1648] tipc: Node identity 5693c648a8d, cluster identity 4711 [ 1070.638690][ T1648] tipc: Enabled bearer , priority 0 [ 1070.665467][ T1649] xt_hashlimit: max too large, truncated to 1048576 [ 1070.672582][ T1649] xt_hashlimit: overflow, try lower: 17592186044421/511 [ 1070.847878][ T1670] netlink: 'syz.4.7035': attribute type 1 has an invalid length. [ 1070.857403][ T1670] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7035'. [ 1070.868505][ T1670] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7035'. [ 1070.879145][ T1670] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7035'. [ 1070.889736][ T1670] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7035'. [ 1070.906499][ T1646] tipc: Disabling bearer [ 1071.166201][ T1681] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7038'. [ 1071.220734][ T1684] netlink: 'syz.6.7039': attribute type 8 has an invalid length. [ 1071.241244][ T1692] ip6gretap0: entered promiscuous mode [ 1071.250359][ T1684] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7039'. [ 1071.261229][ T1694] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1071.295885][ T1684] bond0: entered promiscuous mode [ 1071.300957][ T1684] bond_slave_0: entered promiscuous mode [ 1071.306866][ T1684] bond_slave_1: entered promiscuous mode [ 1071.317685][ T1684] gretap0: entered promiscuous mode [ 1071.329586][ T1684] team0: entered promiscuous mode [ 1071.334729][ T1684] team_slave_0: entered promiscuous mode [ 1071.341673][ T1684] team_slave_1: entered promiscuous mode [ 1071.349104][ T1684] debugfs: 'hsr1' already exists in 'hsr' [ 1071.355252][ T1684] Cannot create hsr debugfs directory [ 1071.360917][ T1684] hsr1: entered promiscuous mode [ 1071.516233][ T1708] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7043'. [ 1071.601161][ T1705] bond4: option updelay: invalid value (18446744073709518847) [ 1071.634061][ T1705] bond4: option updelay: allowed values 0 - 2147483647 [ 1071.646249][ T1705] bond4 (unregistering): Released all slaves [ 1071.936252][ T1699] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7044'. [ 1074.370865][ T1707] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1074.659460][ T1759] netlink: 'syz.4.7054': attribute type 3 has an invalid length. [ 1074.672539][ T1756] xt_connbytes: Forcing CT accounting to be enabled [ 1074.921486][ T1774] Bluetooth: MGMT ver 1.23 [ 1075.369472][ T29] audit: type=1804 audit(1784421826.311:20): pid=1790 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.6.7063" name="/newroot/11/memory.events" dev="tmpfs" ino=74 res=1 errno=0 [ 1075.455641][ T1793] sch_tbf: burst 8 is lower than device lo mtu (65550) ! [ 1075.525124][ T1802] __nla_validate_parse: 7 callbacks suppressed [ 1075.525142][ T1802] netlink: 36 bytes leftover after parsing attributes in process `syz.0.7065'. [ 1075.825824][ T1808] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 1075.991959][ T1808] team0: Device xfrm0 is of different type [ 1076.016905][ T1812] team0: MTU too low for tipc bearer [ 1076.028685][ T1812] tipc: Enabling of bearer rejected, failed to enable media [ 1076.368754][ T1830] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7069'. [ 1076.423768][ T1830] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7069'. [ 1076.545792][ T1826] netlink: 'syz.4.7069': attribute type 1 has an invalid length. [ 1076.580540][ T1826] netlink: 'syz.4.7069': attribute type 1 has an invalid length. [ 1076.582114][ T1834] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7071'. [ 1076.620703][ T1826] netlink: 156 bytes leftover after parsing attributes in process `syz.4.7069'. [ 1076.655352][ T1826] netlink: 'syz.4.7069': attribute type 1 has an invalid length. [ 1076.692337][ T1826] netlink: 29 bytes leftover after parsing attributes in process `syz.4.7069'. [ 1076.774177][ T1838] netlink: 120 bytes leftover after parsing attributes in process `syz.0.7072'. [ 1076.848093][ T1838] netlink: 144 bytes leftover after parsing attributes in process `syz.0.7072'. [ 1077.570110][ T1881] vlan2: entered promiscuous mode [ 1077.607585][ T1881] bridge0: entered promiscuous mode [ 1077.681156][ T1897] syzkaller0: entered promiscuous mode [ 1077.696466][ T1897] syzkaller0: entered allmulticast mode [ 1077.706764][ T1897] syz_tun: entered allmulticast mode [ 1078.059845][ T1893] syz_tun: left allmulticast mode [ 1078.147445][ T1922] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7092'. [ 1078.338681][ T1922] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7092'. [ 1078.602767][ T1952] syzkaller0: entered promiscuous mode [ 1078.614129][ T1952] syzkaller0: entered allmulticast mode [ 1078.730550][ T1954] ip6tnl2: entered allmulticast mode [ 1078.748019][T21273] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1079.027340][ T1971] bond2: entered promiscuous mode [ 1079.044887][ T1977] block nbd9: Unsupported socket: should be TCP or UNIX. [ 1079.064311][ T1971] bond2: entered allmulticast mode [ 1079.125579][ T1971] macvlan2: entered promiscuous mode [ 1079.130901][ T1971] macvlan2: entered allmulticast mode [ 1079.151765][ T1971] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1082.701514][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1089.503352][ T4947] block nbd6: Possible stuck request ffff888027b40000: control (read@0,4096B). Runtime 270 seconds [ 1090.781490][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1105.503195][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1115.741942][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1115.750477][ T1316] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 1119.585378][ T4947] block nbd6: Possible stuck request ffff888027b40000: control (read@0,4096B). Runtime 300 seconds [ 1121.757985][ T1999] netlink: 'syz.7.7111': attribute type 1 has an invalid length. [ 1121.784833][ T2003] __nla_validate_parse: 5 callbacks suppressed [ 1121.784850][ T2003] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7114'. [ 1121.907849][ T1999] netlink: 'syz.7.7111': attribute type 10 has an invalid length. [ 1121.931196][ T1999] netlink: 40 bytes leftover after parsing attributes in process `syz.7.7111'. [ 1121.945089][ T1999] dummy0: entered promiscuous mode [ 1122.081162][ T2012] syzkaller0: entered promiscuous mode [ 1122.087237][ T2012] syzkaller0: entered allmulticast mode [ 1122.363668][ T2020] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7119'. [ 1122.457940][ T2027] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7121'. [ 1122.480103][ T2027] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7121'. [ 1122.490505][ T2029] veth0: entered promiscuous mode [ 1122.499092][ T2029] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7122'. [ 1122.502642][ T2027] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7121'. [ 1122.559776][ T2028] veth0: left promiscuous mode [ 1123.040344][ T2064] netlink: 'syz.0.7130': attribute type 1 has an invalid length. [ 1123.074732][ T2072] bridge_slave_0: left allmulticast mode [ 1123.080670][ T2072] bridge_slave_0: left promiscuous mode [ 1123.088918][ T2072] bridge0: port 1(bridge_slave_0) entered disabled state [ 1123.119373][ T2072] bridge_slave_1: left allmulticast mode [ 1123.125611][ T2072] bridge_slave_1: left promiscuous mode [ 1123.131868][ T2072] bridge0: port 2(bridge_slave_1) entered disabled state [ 1123.149755][ T2072] bond0: (slave bond_slave_0): Releasing backup interface [ 1123.195822][ T2072] team0: Port device team_slave_0 removed [ 1123.239009][ T2072] team0: Port device team_slave_1 removed [ 1123.258700][ T2072] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1123.277281][ T2072] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1123.298895][ T2072] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1123.308016][ T2072] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1123.346425][ T2072] team0: Port device bridge2 removed [ 1123.352683][ T2072] vlan2: left allmulticast mode [ 1123.366387][ T2072] geneve0: left allmulticast mode [ 1123.382874][ T2072] vlan2: left promiscuous mode [ 1123.388085][ T2072] geneve0: left promiscuous mode [ 1123.396020][ T2072] bridge0: port 3(vlan2) entered disabled state [ 1123.404070][ T2081] netlink: 'syz.6.7133': attribute type 1 has an invalid length. [ 1123.414318][ T2081] netlink: 244 bytes leftover after parsing attributes in process `syz.6.7133'. [ 1123.427806][ T2072] bond2: (slave bond3): Releasing backup interface [ 1123.450024][ T2064] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 1123.464425][ T2074] team0: Port device xfrm0 added [ 1123.497603][ T2073] syzkaller1: entered promiscuous mode [ 1123.504013][ T2073] syzkaller1: entered allmulticast mode [ 1123.614536][ T2088] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7134'. [ 1123.925814][ T2107] netlink: 'syz.4.7137': attribute type 4 has an invalid length. [ 1123.993362][ T2110] netlink: 48 bytes leftover after parsing attributes in process `syz.0.7139'. [ 1124.127296][ T2118] netlink: 'syz.4.7142': attribute type 11 has an invalid length. [ 1124.366544][ T2129] netlink: 'syz.3.7147': attribute type 4 has an invalid length. [ 1124.408002][ T2138] erspan0: entered promiscuous mode [ 1124.479207][ T2142] syzkaller0: entered allmulticast mode [ 1127.329418][ T2128] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1127.687167][ T2183] __nla_validate_parse: 4 callbacks suppressed [ 1127.687183][ T2183] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7160'. [ 1127.794167][ T2183] bond4: Invalid ad_actor_system MAC address. [ 1127.825359][ T2183] bond4: option ad_actor_system: invalid value (7) [ 1127.864269][ T2183] bond4 (unregistering): Released all slaves [ 1128.023225][ T2204] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7166'. [ 1128.083658][ T2206] netlink: 'syz.7.7167': attribute type 10 has an invalid length. [ 1128.083767][ T2208] netlink: 24 bytes leftover after parsing attributes in process `syz.6.7168'. [ 1128.194001][ T2211] bridge0: port 1(macvlan0) entered blocking state [ 1128.202775][ T2211] bridge0: port 1(macvlan0) entered disabled state [ 1128.212096][ T2211] macvlan0: entered allmulticast mode [ 1128.226158][ T2215] netlink: 'syz.6.7170': attribute type 15 has an invalid length. [ 1128.232692][ T2211] veth1_vlan: entered allmulticast mode [ 1128.249875][ T2215] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7170'. [ 1128.270807][ T2211] macvlan0: entered promiscuous mode [ 1128.279949][ T2211] bridge0: port 1(macvlan0) entered blocking state [ 1128.286616][ T2211] bridge0: port 1(macvlan0) entered forwarding state [ 1128.298489][ T2218] netlink: 48 bytes leftover after parsing attributes in process `syz.3.7169'. [ 1128.327387][ T2220] netlink: 12 bytes leftover after parsing attributes in process `syz.7.7173'. [ 1128.329408][ T2215] netlink: 'syz.6.7170': attribute type 15 has an invalid length. [ 1128.347319][ T1110] netdevsim netdevsim6 €Â: set [0, 0] type 1 family 0 port 2816 - 0 [ 1128.363818][ T2222] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7174'. [ 1128.372935][ T1110] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 2816 - 0 [ 1128.373280][ T2215] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7170'. [ 1128.398053][ T1110] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 2816 - 0 [ 1128.414309][ T2224] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7174'. [ 1128.433424][ T2224] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7174'. [ 1128.490949][ T2220] bond2: option ad_actor_system: mode dependency failed, not supported in mode balance-rr(0) [ 1128.835345][ T2220] bond2 (unregistering): Released all slaves [ 1129.160507][ T2222] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1129.198772][ T2222] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1129.206379][ T1110] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 2816 - 0 [ 1129.300899][ T2242] tipc: Started in network mode [ 1129.312865][ T2242] tipc: Node identity ba606bbe85f8, cluster identity 4711 [ 1129.337171][ T2242] tipc: Enabled bearer , priority 0 [ 1129.367093][ T2236] syzkaller0: entered promiscuous mode [ 1129.386865][ T2236] syzkaller0: entered allmulticast mode [ 1129.419845][ T2244] tipc: Resetting bearer [ 1129.639040][ T2266] IPv6: Can't replace route, no match found [ 1129.657016][ T2262] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1129.706886][ T2257] lo speed is unknown, defaulting to 1000 [ 1129.717388][ T2244] tipc: Resetting bearer [ 1129.787654][ T2244] tipc: Disabling bearer [ 1130.211614][ T2283] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 1130.223995][ T2283] syzkaller1: linktype set to 786 [ 1130.232561][ T2257] lo speed is unknown, defaulting to 1000 [ 1130.447468][ T2295] netlink: 'syz.4.7190': attribute type 2 has an invalid length. [ 1130.477109][T10865] IPVS: starting estimator thread 0... [ 1130.494222][ T2296] IPVS: lc: FWM 3 0x00000003 - no destination available [ 1130.585005][ T2297] IPVS: using max 33 ests per chain, 79200 per kthread [ 1130.658195][ T2304] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1132.084093][ T2341] netlink: 'syz.0.7204': attribute type 15 has an invalid length. [ 1132.100750][ T2339] batman_adv: batadv0: Adding interface: dummy0 [ 1132.122149][ T2339] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1132.176174][ T2342] netlink: 'syz.3.7203': attribute type 1 has an invalid length. [ 1132.181781][ T2339] batman_adv: batadv0: Interface activated: dummy0 [ 1132.356588][ T2356] siw: device registration error -23 [ 1132.369996][ T2357] siw: device registration error -23 [ 1132.513179][ T2363] can: request_module (can-proto-0) failed. [ 1132.970004][ T2378] veth0_to_team: entered promiscuous mode [ 1132.978928][ T2380] netlink: 'syz.7.7214': attribute type 1 has an invalid length. [ 1133.020663][ T2380] bond2: entered promiscuous mode [ 1133.027988][ T2380] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1133.066514][ T2380] vlan0: entered allmulticast mode [ 1133.072274][ T2380] bond2: entered allmulticast mode [ 1133.150262][ T2380] bond2: (slave bridge1): making interface the new active one [ 1133.190975][ T2380] bridge1: entered promiscuous mode [ 1133.200778][ T2388] __nla_validate_parse: 9 callbacks suppressed [ 1133.200794][ T2388] netlink: 128 bytes leftover after parsing attributes in process `syz.3.7216'. [ 1133.203097][ T2380] bridge1: entered allmulticast mode [ 1133.226125][ T2380] bond2: (slave bridge1): Enslaving as an active interface with an up link [ 1133.496655][ T2409] 8021q: VLANs not supported on ip6gre0 [ 1133.524986][ T2406] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7222'. [ 1133.556219][ T2419] syzkaller1: entered allmulticast mode [ 1133.600370][ T2419] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7224'. [ 1133.684729][ T2424] netlink: 'syz.7.7226': attribute type 10 has an invalid length. [ 1133.691639][ T2419] batadv0: entered promiscuous mode [ 1133.705779][ T2419] macsec1: entered promiscuous mode [ 1133.712122][ T2419] macsec1: entered allmulticast mode [ 1133.717880][ T2419] batadv0: entered allmulticast mode [ 1133.724878][ T2419] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 1133.733557][ T2419] batadv0: left allmulticast mode [ 1133.739425][ T2419] batadv0: left promiscuous mode [ 1133.778114][ T2435] netlink: 'syz.4.7228': attribute type 19 has an invalid length. [ 1133.790392][ T2435] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7228'. [ 1133.815380][ T2424] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1133.825320][ T2424] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 1133.970606][ T2443] x_tables: duplicate underflow at hook 2 [ 1134.214250][ T2459] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7234'. [ 1134.267268][ T2459] ipvlan0: entered allmulticast mode [ 1134.270011][ T2462] openvswitch: netlink: Tunnel attr 68 out of range max 16 [ 1134.273753][ T2459] ip6gretap0: entered allmulticast mode [ 1134.321144][ T2463] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7235'. [ 1134.505364][ T2478] netlink: 60 bytes leftover after parsing attributes in process `syz.4.7241'. [ 1134.527614][ T2478] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7241'. [ 1134.555092][ T2478] netlink: 60 bytes leftover after parsing attributes in process `syz.4.7241'. [ 1134.651985][ T2492] netlink: 'syz.3.7246': attribute type 11 has an invalid length. [ 1134.764390][ T2494] netlink: 'syz.4.7247': attribute type 11 has an invalid length. [ 1134.791054][ T2494] sch_tbf: burst 3 is lower than device syzkaller0 mtu (1500) ! [ 1134.817180][ T2492] syzkaller0: refused to change device tx_queue_len [ 1134.856103][ T2494] syzkaller0: entered promiscuous mode [ 1134.863529][ T2494] syzkaller0: entered allmulticast mode [ 1134.878381][ T2504] netlink: 'syz.6.7250': attribute type 1 has an invalid length. [ 1134.910381][ T2504] bond1: entered promiscuous mode [ 1134.916128][ T2504] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1134.941430][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1135.009083][ T2520] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7252'. [ 1135.046255][ T2504] bond1: (slave veth3): making interface the new active one [ 1135.053927][ T2504] veth3: entered promiscuous mode [ 1135.060230][ T2504] bond1: (slave veth3): Enslaving as an active interface with an up link [ 1135.169177][ T2523] Cannot find del_set index 2 as target [ 1135.183976][ T2523] netlink: 'syz.4.7255': attribute type 9 has an invalid length. [ 1135.195118][ T2524] syzkaller1: entered promiscuous mode [ 1135.202299][ T2524] syzkaller1: entered allmulticast mode [ 1135.271686][ T2526] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check. [ 1135.578957][ T2541] ip6gretap1: entered promiscuous mode [ 1135.635405][ T2556] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1135.643251][ T2556] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1135.652979][ T2556] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1135.667312][ T2556] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1136.046184][ T2590] netlink: 'syz.3.7272': attribute type 21 has an invalid length. [ 1136.057109][ T2590] veth0_to_team: left promiscuous mode [ 1136.230806][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1136.803979][ T2616] mac80211_hwsim hwsim0 wlan0: entered promiscuous mode [ 1136.847057][ T2616] netlink: 'syz.3.7277': attribute type 1 has an invalid length. [ 1137.501562][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1137.512113][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1137.522031][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1137.531767][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1137.539955][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1137.548145][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1137.556337][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1137.564543][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1137.757044][ T2678] IPv6: NLM_F_CREATE should be specified when creating new route [ 1138.446594][ T2717] syzkaller0: entered promiscuous mode [ 1138.459279][ T2717] syzkaller0: entered allmulticast mode [ 1138.522910][ T2716] __nla_validate_parse: 16 callbacks suppressed [ 1138.522928][ T2716] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7302'. [ 1138.768801][ T2733] netlink: 'syz.0.7305': attribute type 8 has an invalid length. [ 1138.818475][ T2735] netlink: 60 bytes leftover after parsing attributes in process `syz.4.7307'. [ 1138.839136][ T2735] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7307'. [ 1138.851863][ T2735] netlink: 60 bytes leftover after parsing attributes in process `syz.4.7307'. [ 1139.020511][ T2744] netlink: 'syz.4.7310': attribute type 1 has an invalid length. [ 1139.197395][ T2744] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1139.223161][ T2745] bond6: up delay (136) is not a multiple of miimon (100), value rounded to 100 ms [ 1139.299578][ T2745] bond6: entered allmulticast mode [ 1139.331820][ T2748] bond6: up delay (136) is not a multiple of miimon (100), value rounded to 100 ms [ 1139.488426][ T2756] x_tables: duplicate underflow at hook 2 [ 1139.721118][ T2762] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7314'. [ 1139.756985][ T2762] netlink: 40 bytes leftover after parsing attributes in process `syz.7.7314'. [ 1139.809139][ T2772] netlink: 20 bytes leftover after parsing attributes in process `syz.7.7314'. [ 1139.851821][ T2766] bond7 (unregistering): Released all slaves [ 1139.865688][ T2762] netlink: 20 bytes leftover after parsing attributes in process `syz.7.7314'. [ 1140.599608][ T2764] net_ratelimit: 33 callbacks suppressed [ 1140.599626][ T2764] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1140.631759][ T2764] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1140.704745][T23151] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1140.857248][ T2548] Set syz1 is full, maxelem 65536 reached [ 1141.140884][ T2840] lo speed is unknown, defaulting to 1000 [ 1141.619108][ T2865] netlink: 'syz.0.7333': attribute type 16 has an invalid length. [ 1141.674481][ T2865] netlink: 'syz.0.7333': attribute type 17 has an invalid length. [ 1141.732046][ T2865] sit0: left promiscuous mode [ 1141.742969][T10865] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1141.843916][ T2855] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1141.854830][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1141.878059][ T2855] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1141.889836][ T1108] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1141.921401][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1141.939923][ T2879] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7335'. [ 1141.974427][ T2865] ip6erspan0: left promiscuous mode [ 1142.000860][ T2865] ipip0: left promiscuous mode [ 1142.005872][ T2865] ipip0: left allmulticast mode [ 1142.036960][ T2865] bond2: left promiscuous mode [ 1142.048660][ T2865] bond2: left allmulticast mode [ 1142.077218][ T2849] lo speed is unknown, defaulting to 1000 [ 1142.077251][ T2840] lo speed is unknown, defaulting to 1000 [ 1142.107570][ T2885] vlan3: entered allmulticast mode [ 1142.127852][ T2885] bond0: entered allmulticast mode [ 1142.147093][ T2885] bond_slave_0: entered allmulticast mode [ 1142.161678][ T2885] bond_slave_1: entered allmulticast mode [ 1142.202311][ T2888] netlink: 48 bytes leftover after parsing attributes in process `syz.3.7329'. [ 1142.328730][ T2894] sctp: [Deprecated]: syz.7.7337 (pid 2894) Use of int in maxseg socket option. [ 1142.328730][ T2894] Use struct sctp_assoc_value instead [ 1142.587582][ T2906] netlink: 'syz.6.7340': attribute type 1 has an invalid length. [ 1143.043271][ T2905] bridge0: port 2(bridge_slave_1) entered disabled state [ 1143.050621][ T2905] bridge0: port 1(bridge_slave_0) entered disabled state [ 1143.404187][ T2905] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1143.438196][ T2905] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1143.744666][ T2905] hsr1: left promiscuous mode [ 1143.758907][ T2905] vlan2: left promiscuous mode [ 1143.769096][ T2905] bridge0: left promiscuous mode [ 1143.795332][ T2905] bond1: left promiscuous mode [ 1143.805594][ T2905] veth3: left promiscuous mode [ 1143.823784][ T2905] ip6gretap1: left promiscuous mode [ 1143.836661][ T2905] vlan3: left allmulticast mode [ 1143.845714][ T2905] bond0: left allmulticast mode [ 1143.850562][ T2905] bond_slave_0: left allmulticast mode [ 1143.856466][ T2905] bond_slave_1: left allmulticast mode [ 1143.875670][ T2849] lo speed is unknown, defaulting to 1000 [ 1143.955152][T21273] netdevsim netdevsim6 €Â: unset [0, 0] type 1 family 0 port 2816 - 0 [ 1143.974284][T21273] netdevsim netdevsim6 €Â: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1144.002324][T21273] netdevsim netdevsim6 netdevsim1: unset [0, 0] type 1 family 0 port 2816 - 0 [ 1144.045858][T21273] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1144.127199][T21273] netdevsim netdevsim6 netdevsim2: unset [0, 0] type 1 family 0 port 2816 - 0 [ 1144.148715][T21273] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1144.176391][T21273] netdevsim netdevsim6 netdevsim3: unset [0, 0] type 1 family 0 port 2816 - 0 [ 1144.194392][T21273] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1144.312020][ T2931] __nla_validate_parse: 4 callbacks suppressed [ 1144.312038][ T2931] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7346'. [ 1144.362408][ T2931] netlink: 'syz.0.7346': attribute type 7 has an invalid length. [ 1144.363047][ T2939] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7346'. [ 1144.412345][ T2931] netlink: 'syz.0.7346': attribute type 8 has an invalid length. [ 1144.433970][ T2931] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7346'. [ 1144.484508][ T2945] nbd: must specify at least one socket [ 1145.901566][T10865] net_ratelimit: 7 callbacks suppressed [ 1145.901585][T10865] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1146.941987][ T5807] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1147.296867][ T2958] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1147.538691][ T2961] bond3: up delay (4) is not a multiple of miimon (100), value rounded to 0 ms [ 1147.548288][ T2961] bond3: entered allmulticast mode [ 1147.712236][ T2972] netlink: 28 bytes leftover after parsing attributes in process `syz.6.7353'. [ 1147.745325][T14602] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1147.764080][ T2981] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1147.774163][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1147.795637][ T2982] netlink: 28 bytes leftover after parsing attributes in process `syz.7.7354'. [ 1147.984685][T10876] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1148.461781][T14602] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1148.651508][ T2992] lo speed is unknown, defaulting to 1000 [ 1148.970073][ T3022] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1149.022863][ T5807] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1149.192512][ T3035] netlink: 52 bytes leftover after parsing attributes in process `syz.7.7368'. [ 1149.214198][ T3035] netlink: 52 bytes leftover after parsing attributes in process `syz.7.7368'. [ 1149.230828][ T3035] netlink: 16 bytes leftover after parsing attributes in process `syz.7.7368'. [ 1149.256693][ T3037] netlink: 'syz.4.7369': attribute type 1 has an invalid length. [ 1149.440261][ T3037] bond7: entered promiscuous mode [ 1149.461143][ T3037] bond7: entered allmulticast mode [ 1149.484818][ T3037] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1149.576322][ T3045] syzkaller0: entered promiscuous mode [ 1149.583186][ T3045] syzkaller0: entered allmulticast mode [ 1149.663880][ T4947] block nbd6: Possible stuck request ffff888027b40000: control (read@0,4096B). Runtime 330 seconds [ 1149.770906][ T2992] lo speed is unknown, defaulting to 1000 [ 1149.777751][ T3056] netlink: 'syz.4.7372': attribute type 1 has an invalid length. [ 1149.856088][ T3056] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1149.930670][ T3073] tipc: Enabling of bearer rejected, failed to enable media [ 1150.063583][ T3066] bond8: (slave geneve4): making interface the new active one [ 1150.112640][ T3080] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7375'. [ 1150.134706][ T3066] bond8: (slave geneve4): Enslaving as an active interface with an up link [ 1150.160079][ T3065] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 1150.220569][ T3073] syzkaller0: entered promiscuous mode [ 1150.229951][ T3073] syzkaller0: entered allmulticast mode [ 1151.042059][ T3119] netlink: 'syz.0.7387': attribute type 29 has an invalid length. [ 1151.104854][ T5807] net_ratelimit: 2 callbacks suppressed [ 1151.104869][ T5807] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1151.120042][ T3118] lo speed is unknown, defaulting to 1000 [ 1151.309905][ T3135] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7390'. [ 1151.551135][T14602] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1152.132595][ T3150] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7395'. [ 1152.147273][ T5807] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1152.208251][ T3152] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7396'. [ 1152.245140][ T3152] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7396'. [ 1152.302514][ T3152] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7396'. [ 1152.519399][ T3161] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7399'. [ 1152.629779][ T3118] lo speed is unknown, defaulting to 1000 [ 1152.886308][ T3177] netlink: 'syz.6.7404': attribute type 7 has an invalid length. [ 1152.912958][ T3177] netlink: 'syz.6.7404': attribute type 8 has an invalid length. [ 1153.119536][ T3190] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1153.209039][ T3193] netlink: 32 bytes leftover after parsing attributes in process `syz.7.7407'. [ 1153.310176][ T3193] netlink: 'syz.7.7407': attribute type 1 has an invalid length. [ 1153.940087][ T3181] bridge0: port 1(macvlan0) entered disabled state [ 1153.993696][ T3181] batman_adv: batadv0: Interface deactivated: dummy0 [ 1154.360428][ T3181] veth1_vlan: left allmulticast mode [ 1154.502549][ T3192] netlink: 'syz.7.7407': attribute type 4 has an invalid length. [ 1154.521384][ T3192] netlink: 'syz.7.7407': attribute type 1 has an invalid length. [ 1154.529557][ T3192] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1154.564033][T11226] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1154.579949][T11226] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1154.693992][T11226] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1154.721322][T11226] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1154.745370][ T3204] lo speed is unknown, defaulting to 1000 [ 1155.376415][ T3204] lo speed is unknown, defaulting to 1000 [ 1155.378264][ T3222] lo speed is unknown, defaulting to 1000 [ 1155.625606][ T3263] netlink: 'syz.3.7418': attribute type 13 has an invalid length. [ 1155.679823][T11235] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1155.704257][T11235] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1155.738338][T11235] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1155.767571][T11235] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1156.097187][ T3282] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7422'. [ 1156.153389][ T3222] lo speed is unknown, defaulting to 1000 [ 1156.257556][ T3287] openvswitch: netlink: Flow actions attr not present in new flow. [ 1156.505495][ T3297] netlink: 'syz.4.7428': attribute type 1 has an invalid length. [ 1156.586513][ T3302] xt_ipcomp: unknown flags 1D [ 1156.612369][ T3297] bond9: entered promiscuous mode [ 1156.620960][ T3297] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1156.952960][ T3317] netlink: 48 bytes leftover after parsing attributes in process `syz.4.7429'. [ 1157.692974][ T3339] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7437'. [ 1157.720425][ T3341] netlink: 136 bytes leftover after parsing attributes in process `syz.3.7436'. [ 1157.827164][ T3344] netlink: 16 bytes leftover after parsing attributes in process `syz.6.7438'. [ 1157.882370][ T3344] netlink: 'syz.6.7438': attribute type 1 has an invalid length. [ 1157.925975][ T3344] netlink: 72 bytes leftover after parsing attributes in process `syz.6.7438'. [ 1157.986883][ T3352] netlink: 'syz.0.7441': attribute type 2 has an invalid length. [ 1157.995512][ T30] INFO: task syz.5.6847:839 blocked for more than 143 seconds. [ 1157.995535][ T30] Not tainted syzkaller #0 [ 1157.995546][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1157.995557][ T30] task:syz.5.6847 state:D stack:26672 pid:839 tgid:829 ppid:30371 task_flags:0x400140 flags:0x00080002 [ 1157.995611][ T30] Call Trace: [ 1157.995619][ T30] [ 1157.995632][ T30] __schedule+0x17d9/0x56c0 [ 1157.995666][ T30] ? __lock_acquire+0x683/0x2cf0 [ 1157.995746][ T30] ? __lock_acquire+0x683/0x2cf0 [ 1157.995794][ T30] ? __pfx___schedule+0x10/0x10 [ 1157.995897][ T30] ? schedule+0x90/0x2b0 [ 1157.995930][ T30] schedule+0x164/0x2b0 [ 1157.995960][ T30] schedule_preempt_disabled+0x13/0x30 [ 1157.995988][ T30] __mutex_lock+0x7bf/0x1550 [ 1157.996023][ T30] ? __mutex_lock+0x5d4/0x1550 [ 1157.996056][ T30] ? nfsd_nl_expkey_get_reqs_dumpit+0xfd/0xd40 [ 1158.090232][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 1158.125919][ T30] ? net_generic+0x1e/0x240 [ 1158.131575][ T30] ? net_generic+0x1e/0x240 [ 1158.136430][ T30] nfsd_nl_expkey_get_reqs_dumpit+0xfd/0xd40 [ 1158.146058][ T30] ? rcu_is_watching+0x15/0xb0 [ 1158.160157][ T30] ? trace_kmalloc+0x2a/0xf0 [ 1158.166933][ T30] ? __pfx_nfsd_nl_expkey_get_reqs_dumpit+0x10/0x10 [ 1158.176516][ T30] ? __kmalloc_node_track_caller_noprof+0x4e1/0x730 [ 1158.185578][ T30] ? __kmalloc_node_track_caller_noprof+0x2fd/0x730 [ 1158.193868][ T30] ? netlink_dump+0x1e7/0xee0 [ 1158.199909][ T30] ? netlink_dump+0x1e7/0xee0 [ 1158.206371][ T30] genl_dumpit+0x10b/0x1b0 [ 1158.211605][ T30] netlink_dump+0x711/0xee0 [ 1158.216855][ T30] ? __pfx_netlink_dump+0x10/0x10 [ 1158.227672][ T30] ? genl_start+0x497/0x6d0 [ 1158.232946][ T30] __netlink_dump_start+0x589/0x7b0 [ 1158.238749][ T30] genl_family_rcv_msg_dumpit+0x213/0x310 [ 1158.245032][ T30] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 1158.251820][ T30] ? __pfx_genl_start+0x10/0x10 [ 1158.256716][ T30] ? __pfx_genl_dumpit+0x10/0x10 [ 1158.262580][ T30] ? __pfx_genl_done+0x10/0x10 [ 1158.267389][ T30] ? bpf_lsm_capable+0x9/0x20 [ 1158.272935][ T30] ? security_capable+0x7e/0x2c0 [ 1158.278021][ T30] genl_rcv_msg+0x5e1/0x7a0 [ 1158.285616][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1158.290682][ T30] ? __pfx_nfsd_nl_expkey_get_reqs_dumpit+0x10/0x10 [ 1158.298497][ T30] netlink_rcv_skb+0x226/0x4a0 [ 1158.313466][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1158.318541][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1158.325972][ T30] ? down_read+0x2be/0x330 [ 1158.330438][ T30] genl_rcv+0x28/0x40 [ 1158.334551][ T30] netlink_unicast+0x7bb/0x940 [ 1158.339754][ T30] netlink_sendmsg+0x813/0xb40 [ 1158.344954][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1158.350417][ T30] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1158.355964][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1158.367174][ T30] sock_sendmsg_nosec+0x13a/0x180 [ 1158.372457][ T30] ____sys_sendmsg+0x54e/0x850 [ 1158.377650][ T30] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1158.383350][ T30] ? import_iovec+0x73/0xa0 [ 1158.387948][ T30] ___sys_sendmsg+0x2a5/0x360 [ 1158.395754][ T30] ? __lock_acquire+0x683/0x2cf0 [ 1158.410916][ T30] ? __pfx____sys_sendmsg+0x10/0x10 [ 1158.424409][ T30] ? futex_wake+0x51b/0x5f0 [ 1158.439240][ T30] ? __fget_files+0x2a/0x420 [ 1158.443978][ T30] ? __fget_files+0x3a2/0x420 [ 1158.450036][ T30] __x64_sys_sendmsg+0x1b1/0x290 [ 1158.464209][ T30] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1158.472050][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1158.478175][ T30] do_syscall_64+0x174/0x580 [ 1158.483430][ T30] ? trace_irq_disable+0x3b/0x140 [ 1158.488472][ T30] ? clear_bhb_loop+0x40/0x90 [ 1158.493241][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1158.499265][ T30] RIP: 0033:0x7f78c179de99 [ 1158.503875][ T30] RSP: 002b:00007f78c2733028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1158.512829][ T30] RAX: ffffffffffffffda RBX: 00007f78c1a26090 RCX: 00007f78c179de99 [ 1158.520818][ T30] RDX: 0000000004044810 RSI: 0000200000000180 RDI: 000000000000000c [ 1158.528820][ T30] RBP: 00007f78c1833eaf R08: 0000000000000000 R09: 0000000000000000 [ 1158.537021][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1158.546623][ T30] R13: 00007f78c1a26128 R14: 00007f78c1a26090 R15: 00007ffe2ff29128 [ 1158.554702][ T30] [ 1158.574920][ T30] [ 1158.574920][ T30] Showing all locks held in the system: [ 1158.586523][ T3352] : entered promiscuous mode [ 1158.591360][ T30] 1 lock held by pool_workqueue_/3: [ 1158.667231][ T30] 1 lock held by khungtaskd/30: [ 1158.677760][ T30] #0: ffffffff8eb59c60 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1158.697507][ T30] 2 locks held by getty/5372: [ 1158.709463][ T30] #0: ffff888035c670a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1158.726058][ T30] #1: ffffc900032332e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 1158.736459][ T30] 4 locks held by kworker/u8:37/11228: [ 1158.741994][ T30] #0: ffff88801c28e140 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 1158.753134][ T30] #1: ffffc9001aaefc40 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 1158.765090][ T30] #2: ffffffff9001d7a8 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf5/0x810 [ 1158.774676][ T30] #3: ffffffff9002c340 (rtnl_mutex){+.+.}-{4:4}, at: cangw_pernet_exit_batch+0x20/0x90 [ 1158.785645][ T30] 3 locks held by kworker/u8:6/21271: [ 1158.791037][ T30] #0: ffff8880b863b160 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2d/0x160 [ 1158.801412][ T30] #1: ffff8880b8624440 (psi_seq){-.-.}-{0:0}, at: psi_task_switch+0x57/0x7d0 [ 1158.810369][ T30] #2: ffffffff8eb59c60 (rcu_read_lock){....}-{1:3}, at: rds_queue_reconnect+0x213/0x8c0 [ 1158.820330][ T30] 1 lock held by udevd/27685: [ 1158.825057][ T30] #0: ffff8880279df350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xde/0xd70 [ 1158.834521][ T30] 2 locks held by syz.2.6038/29909: [ 1158.839741][ T30] #0: ffffffff9009cba8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1158.847972][ T30] #1: ffffffff8ee8e620 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x135/0x1750 [ 1158.858254][ T30] 3 locks held by syz.5.6847/839: [ 1158.864079][ T30] #0: ffffffff9009cba8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1158.872484][ T30] #1: ffff888042e4e6e8 (nlk_cb_mutex-GENERIC){+.+.}-{4:4}, at: __netlink_dump_start+0xf4/0x7b0 [ 1158.883010][ T30] #2: ffffffff8ee8e620 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_expkey_get_reqs_dumpit+0xfd/0xd40 [ 1158.893580][ T30] 3 locks held by syz.1.6884/988: [ 1158.898598][ T30] #0: ffffffff9009cba8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1158.906865][ T30] #1: ffff8880348d66e8 (nlk_cb_mutex-GENERIC){+.+.}-{4:4}, at: __netlink_dump_start+0xf4/0x7b0 [ 1158.917459][ T30] #2: ffffffff8ee8e620 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_rpc_status_get_dumpit+0xdc/0x13b0 [ 1158.928015][ T30] 2 locks held by syz.7.7412/3222: [ 1158.933251][ T30] #0: ffffffff9001d7a8 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x4e2/0x720 [ 1158.944316][ T30] #1: ffffffff9002c340 (rtnl_mutex){+.+.}-{4:4}, at: cfg802154_pernet_exit+0x18/0xc0 [ 1158.954095][ T30] 1 lock held by syz.3.7440/3360: [ 1158.959135][ T30] #0: ffffffff9002c340 (rtnl_mutex){+.+.}-{4:4}, at: dev_ioctl+0x7a4/0x1150 [ 1158.968026][ T30] 2 locks held by syz.3.7440/3363: [ 1158.973239][ T30] #0: ffffffff9002c340 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 1158.982355][ T30] #1: ffffffff8eb5ff68 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2d0/0x770 [ 1158.993309][ T30] 2 locks held by syz.3.7440/3366: [ 1158.998414][ T30] #0: ffffffff9058f728 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 1159.007995][ T30] #1: ffffffff9002c340 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0xc10/0x1c30 [ 1159.017103][ T30] 1 lock held by syz.3.7440/3368: [ 1159.023016][ T30] #0: ffffffff9002c340 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 1159.032685][ T30] [ 1159.035079][ T30] ============================================= [ 1159.035079][ T30] [ 1159.043573][ T30] NMI backtrace for cpu 1 [ 1159.043591][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1159.043623][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 1159.043634][ T30] Call Trace: [ 1159.043641][ T30] [ 1159.043649][ T30] dump_stack_lvl+0xe8/0x150 [ 1159.043680][ T30] nmi_cpu_backtrace+0x274/0x2d0 [ 1159.043806][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1159.043835][ T30] nmi_trigger_cpumask_backtrace+0x17a/0x380 [ 1159.043861][ T30] sys_info+0x135/0x170 [ 1159.043882][ T30] watchdog+0xfd7/0x1030 [ 1159.043918][ T30] ? watchdog+0x1c7/0x1030 [ 1159.043947][ T30] kthread+0x388/0x470 [ 1159.043972][ T30] ? __pfx_watchdog+0x10/0x10 [ 1159.043991][ T30] ? __pfx_kthread+0x10/0x10 [ 1159.044017][ T30] ret_from_fork+0x514/0xb70 [ 1159.044060][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 1159.044086][ T30] ? __switch_to+0xc89/0x1420 [ 1159.044112][ T30] ? __pfx_kthread+0x10/0x10 [ 1159.044145][ T30] ret_from_fork_asm+0x1a/0x30 [ 1159.044177][ T30] [ 1159.044184][ T30] Sending NMI from CPU 1 to CPUs 0: [ 1159.153901][ C0] NMI backtrace for cpu 0 [ 1159.153918][ C0] CPU: 0 UID: 0 PID: 25331 Comm: kworker/0:5 Not tainted syzkaller #0 PREEMPT(full) [ 1159.153938][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 1159.153948][ C0] Workqueue: events free_obj_work [ 1159.154064][ C0] RIP: 0010:lock_release+0x95/0x3c0 [ 1159.154089][ C0] Code: 0d 02 00 00 65 4c 8b 3d f1 ca c9 11 41 83 bf 9c 0b 00 00 00 0f 85 f7 01 00 00 49 81 3e 20 e5 2f 94 0f 84 ea 01 00 00 9c 5b fa <48> c7 c7 3b 60 24 8e e8 df bd 2c 0a 65 ff 05 a8 0f ca 11 c7 44 24 [ 1159.154104][ C0] RSP: 0018:ffffc900030cf518 EFLAGS: 00000006 [ 1159.154118][ C0] RAX: 0000000000000000 RBX: 0000000000000206 RCX: 0000000080000001 [ 1159.154129][ C0] RDX: ffffc900030cf601 RSI: ffffffff8c4bd360 RDI: ffffffff8c4bd320 [ 1159.154142][ C0] RBP: 1ffffffff21da101 R08: ffffc900030cff38 R09: 0000000000000000 [ 1159.154154][ C0] R10: ffffc900030cf678 R11: fffff52000619ed1 R12: ffffc900030c8000 [ 1159.154167][ C0] R13: ffffffff8176f27f R14: ffffffff8eb59c60 R15: ffff888023690000 [ 1159.154180][ C0] FS: 0000000000000000(0000) GS:ffff888124f5e000(0000) knlGS:0000000000000000 [ 1159.154195][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1159.154207][ C0] CR2: 00007f755fbed2f8 CR3: 000000000e946000 CR4: 00000000003526f0 [ 1159.154222][ C0] Call Trace: [ 1159.154228][ C0] [ 1159.154237][ C0] ? deref_stack_reg+0x18e/0x220 [ 1159.154256][ C0] ? unwind_next_frame+0x8f/0x2550 [ 1159.154273][ C0] unwind_next_frame+0x1baa/0x2550 [ 1159.154292][ C0] ? ret_from_fork+0x514/0xb70 [ 1159.154315][ C0] ? unwind_next_frame+0x8f/0x2550 [ 1159.154332][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1159.154354][ C0] arch_stack_walk+0x11b/0x150 [ 1159.154373][ C0] ? ret_from_fork_asm+0x1a/0x30 [ 1159.154392][ C0] stack_trace_save+0xa9/0x100 [ 1159.154411][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 1159.154432][ C0] ? stack_depot_save_flags+0x33/0x800 [ 1159.154452][ C0] ? __lock_acquire+0x660/0x2cf0 [ 1159.154476][ C0] kasan_save_track+0x3e/0x80 [ 1159.154496][ C0] ? kasan_save_track+0x3e/0x80 [ 1159.154515][ C0] ? kasan_save_free_info+0x40/0x50 [ 1159.154532][ C0] ? __kasan_slab_free+0x5c/0x80 [ 1159.154552][ C0] ? kmem_cache_free+0x182/0x650 [ 1159.154573][ C0] ? free_obj_work+0x357/0x490 [ 1159.154593][ C0] ? process_scheduled_works+0xa8e/0x14e0 [ 1159.154619][ C0] ? worker_thread+0xa47/0xfb0 [ 1159.154637][ C0] ? kthread+0x388/0x470 [ 1159.154658][ C0] ? ret_from_fork+0x514/0xb70 [ 1159.154703][ C0] ? kasan_quarantine_put+0xbb/0x1f0 [ 1159.154723][ C0] ? free_obj_work+0x357/0x490 [ 1159.154744][ C0] kasan_save_free_info+0x40/0x50 [ 1159.154760][ C0] __kasan_slab_free+0x5c/0x80 [ 1159.154782][ C0] kmem_cache_free+0x182/0x650 [ 1159.154803][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1159.154859][ C0] free_obj_work+0x357/0x490 [ 1159.154881][ C0] ? __pfx_free_obj_work+0x10/0x10 [ 1159.154904][ C0] ? rcu_is_watching+0x15/0xb0 [ 1159.154930][ C0] ? process_scheduled_works+0xa20/0x14e0 [ 1159.154948][ C0] process_scheduled_works+0xa8e/0x14e0 [ 1159.154981][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 1159.155003][ C0] ? assign_work+0x3cf/0x5d0 [ 1159.155023][ C0] worker_thread+0xa47/0xfb0 [ 1159.155049][ C0] ? __kthread_parkme+0x71/0x1f0 [ 1159.155075][ C0] kthread+0x388/0x470 [ 1159.155096][ C0] ? __pfx_worker_thread+0x10/0x10 [ 1159.155114][ C0] ? __pfx_kthread+0x10/0x10 [ 1159.155137][ C0] ret_from_fork+0x514/0xb70 [ 1159.155161][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1159.155184][ C0] ? __switch_to+0xc89/0x1420 [ 1159.155204][ C0] ? __pfx_kthread+0x10/0x10 [ 1159.155227][ C0] ret_from_fork_asm+0x1a/0x30 [ 1159.155251][ C0] [ 1159.513808][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 1159.520668][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1159.529770][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 1159.539810][ T30] Call Trace: [ 1159.543083][ T30] [ 1159.546003][ T30] vpanic+0x56c/0xa60 [ 1159.549983][ T30] ? __pfx___schedule+0x10/0x10 [ 1159.554828][ T30] ? __pfx_vpanic+0x10/0x10 [ 1159.559326][ T30] ? nmi_trigger_cpumask_backtrace+0x207/0x380 [ 1159.565473][ T30] panic+0xc5/0xd0 [ 1159.569189][ T30] ? __pfx_panic+0x10/0x10 [ 1159.573600][ T30] ? preempt_schedule_common+0x82/0xd0 [ 1159.579049][ T30] ? preempt_schedule_thunk+0x16/0x40 [ 1159.584408][ T30] ? nmi_trigger_cpumask_backtrace+0x314/0x380 [ 1159.590557][ T30] ? nmi_trigger_cpumask_backtrace+0x319/0x380 [ 1159.596713][ T30] watchdog+0x1030/0x1030 [ 1159.601037][ T30] ? watchdog+0x1c7/0x1030 [ 1159.605450][ T30] kthread+0x388/0x470 [ 1159.609514][ T30] ? __pfx_watchdog+0x10/0x10 [ 1159.614176][ T30] ? __pfx_kthread+0x10/0x10 [ 1159.618758][ T30] ret_from_fork+0x514/0xb70 [ 1159.623344][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 1159.628443][ T30] ? __switch_to+0xc89/0x1420 [ 1159.633109][ T30] ? __pfx_kthread+0x10/0x10 [ 1159.637690][ T30] ret_from_fork_asm+0x1a/0x30 [ 1159.642449][ T30] [ 1159.645600][ T30] Kernel Offset: disabled [ 1159.649909][ T30] Rebooting in 86400 seconds..