last executing test programs: 47.536400701s ago: executing program 3 (id=2129): r0 = socket$netlink(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)={0x24, 0x1, 0x1, 0x301, 0x0, 0x0, {}, [@CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x42e}]}, @CTA_TUPLE_REPLY={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x200440f0}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=@newlink={0x44, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0xe403}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x6}, @IFLA_BOND_ARP_VALIDATE={0x8}]}}}]}, 0x44}}, 0x0) 47.042134663s ago: executing program 3 (id=2136): getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)=""/197, &(0x7f0000000140)=0xc5) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x9, 0x3, 0xc4f, 0x1, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000300)="9a6464ee8eea354807030bd89ba7c462660740d229e4d08feff5fc66874f2e6f75455c63c258164c52d15c8a9943d8584a3dc52e5ec866985b4513fc2880e826272c115eb5f115c0f736d835c851faa121c4b99e6bfa", &(0x7f0000000380)="0495bc13cb7644d9d3c3d713fc2c6edb6a855c24d5a01480560ac9d424c130c9ea4215e1f5ff52d69a1a79c67c782fe448a07b4c1708beef3ff9252309b4010000801b56a7783927053968a6ce7d549cba083393c3803b687844bb3bfb65cc4ba1ce7b48fbabf5ee8463643e7add2e912cb1b2", 0x1007c7, r0, 0x0, 0x200000000000000}, 0x38) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x16, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="7a0a00ff0000002871104f000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x90) r2 = accept4$phonet_pipe(0xffffffffffffffff, &(0x7f0000000180), &(0x7f00000001c0)=0x10, 0x0) ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0xc0385869, &(0x7f00000004c0)={r1, &(0x7f0000000280)='[][\x00', 0x2, &(0x7f00000002c0)={@_ha_fsid={[0x80000000, 0x92]}, {0xce, 0x8, 0x6, 0x5}}, 0x69, &(0x7f0000000400)={@_ha_fsid}, &(0x7f0000000440)=0x4}) bind$bt_hci(r3, &(0x7f0000000500)={0x1f, 0x0, 0x1}, 0x6) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000200)={'wg1\x00', {0x2, 0x4e24, @private=0xa010100}}) 37.49264857s ago: executing program 3 (id=2258): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="010000000000000400"/28], 0x50) (async) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000540)={'netdevsim0\x00', &(0x7f0000000440)=@ethtool_drvinfo={0x3, "86e222b24d3c8fd9e57cbd147fbce38fa5be46e375115f5bff4a1fcc879a914f", "fb274525bb40b164d8f6cee113a845c712e74e79c5a706b760cbbae873ae98a9", "2887185357d9ecf8e9f7ec58522f3af9d6000870ef578c57623b7eec453fc3b5", "b29842a612b01620285ae2c1151f607285bcabede51e33f7695b7f9c6f749b8e", "71797a7a272810f3c4bea9d7cf9e0da259b4d106be4325ac6f7fb74f037d826c", "7055cdd54b2942c3f184bc8c", 0x0, 0x8, 0xdabc, 0x100, 0xfffffff9}}) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000140)=ANY=[@ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="05"], 0x10) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r1}, &(0x7f00000006c0), &(0x7f0000000700)=r0}, 0x20) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000008b40)=ANY=[@ANYBLOB="3800000040000100fcff070004000000010000000400488014000180100010800400058005000400000000000c0002"], 0x38}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) (async) r4 = socket$inet6(0xa, 0x3, 0x88) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000280)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@empty, 0x0, 0x56, 0x4e23, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x100000002, 0xfffffffffffffff6, 0x2000000, 0x1, 0x8}, {0x7, 0x0, 0x4}, 0x932, 0x0, 0x1, 0x0, 0x3}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4d4, 0x6c}, 0xa, @in=@empty, 0x2, 0x4, 0x0, 0x0, 0xfffffffc, 0x8, 0x4}}, 0xe8) (async) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) socket$inet(0xa, 0x801, 0x84) (async, rerun: 32) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) shutdown(r5, 0x0) (async) recvmmsg(r5, &(0x7f00000055c0), 0x400023c, 0x300, 0x0) (async, rerun: 32) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x300000c, 0x3032, 0xffffffffffffffff, 0x0) (async, rerun: 32) pselect6(0x40, &(0x7f0000000040)={0x5, 0x800007, 0x2, 0x6, 0x8, 0x8, 0x7, 0x4}, &(0x7f0000000080)={0x97, 0x8, 0x0, 0x1, 0x5, 0x4, 0x3, 0x4}, 0x0, 0x0, 0x0) (async) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xff}}}, 0x1c) 37.286568728s ago: executing program 3 (id=2262): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x24, 0x0, &(0x7f0000000040)) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x30, 0x40, 0x107, 0xfffffffe, 0x2, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0xc, 0x2, 0x0, 0x1, [@nested={0x8, 0x14, 0x0, 0x1, [@nested={0x4, 0x16}]}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0xc800) 37.058164047s ago: executing program 3 (id=2264): r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x2a, 0x2, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@getchain={0x24, 0x66, 0x109, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {}, {0xd, 0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x8880}, 0x0) ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000180)={0xffffffffffffffff, &(0x7f0000000080)='/!\x00', 0x80001, &(0x7f00000000c0)={@_ha_fsid={[0x200, 0x8001]}, {0xc5b, 0x5, 0x1}}, 0x3, &(0x7f0000000100)={@_ha_fsid}, &(0x7f0000000140)=0x1}) sendmsg$NL80211_CMD_ASSOCIATE(r3, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="06000000fbdbdffdffffff701e121f0000000d000000000100000005000040130008000008ffffffff1a0000140034005a7d0fc6417f05827e3f2ea6cdf07bee040093000000c258401ffb799112a6e589c7e9116fcfbd22e369d48ebcf97fb18c72ba9593fe8d11b564ff22fbc4f05652f0f8d2a7095eb13c8f264e21c990aec1efa2583afe68f5fe944ae6f33967f6dfe4932ac2d61b2d180defdb0aefbe18a0bcd04282f6520a7d"], 0x4c}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000) r4 = socket$inet6(0x10, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000000)={0x4, &(0x7f0000000200)=[{0x30, 0x0, 0x0, 0xffeffffe}, {0x16, 0x0, 0x0, 0xfffffffc}, {0x3, 0x1, 0x7, 0x10000}, {0x0, 0xd, 0x7, 0x2}]}, 0x10) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r5, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r6 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r6, 0x400448c8, &(0x7f0000000400)={r5, r5, 0x6, 0x0, 0x0, 0x9, 0xfd, 0xc48, 0x1012, 0xc3, 0x1, 0x7, 'syz0\x00'}) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r6, 0x800448d3, 0x0) r7 = syz_genetlink_get_family_id$nbd(&(0x7f00000004c0), 0xffffffffffffffff) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) recvmmsg(r8, &(0x7f000000df00)=[{{0x0, 0x0, 0x0}, 0x4}], 0x1, 0x40002023, 0x0) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000540)={&(0x7f00000005c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r7, @ANYBLOB="060027bd7000fedbdf250300a86b4cbeff00000c0008000400000000000000"], 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x8800) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=@can_newroute={0x154, 0x18, 0x1, 0x0, 0x0, {}, [@CGW_MOD_XOR={0x15, 0x3, {{{}, 0x0, 0x0, 0x0, 0x0, "dd5f392602cc3057"}, 0x5}}, @CGW_CS_XOR={0x8, 0x5, {0x0, 0x8}}, @CGW_CS_CRC8={0x11e, 0x6, {0x7, 0x0, 0x0, 0x0, 0x0, "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", 0x0, "bd3d13746078e05fb6a2112ea9e93b498f4bdefc"}}]}, 0x154}}, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r10, 0x10f, 0x85, 0x0, 0x0) sendto$inet6(r4, &(0x7f00000002c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) 36.686928381s ago: executing program 4 (id=2270): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="58000000020601080000000000000000000000090c0007800500150000000000050005000a000000050001000700000005000414000000000900020073797a300000000013000300686173683a6e65742c69666163650000"], 0x58}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0xa, 0x17, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf090000000000009709010000000281650000000000000018010000646c6c2500000000002020207b9af8ff000000002e9100000000000037010000f8ffffffb702000008000000b70300000000000014000000060000805f93000000000000b5030000000000008500000076000000b70000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(r4, 0x89e3, &(0x7f0000000000)={0x6, 0x0, 0x8, 0x4, 0x40}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r3) getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="400000001000370400008000fcdbdf2500000000", @ANYRES32=r5, @ANYBLOB="c30405000000000020001280080001006774700014000280080004010010000008000100c182edc4"], 0x40}, 0x1, 0x0, 0x0, 0x2000c014}, 0x0) sendmmsg$inet(r2, &(0x7f0000000300)=[{{&(0x7f00000002c0)={0x2, 0x4e23, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @empty, @remote}}}], 0x20}}], 0x1, 0x40004) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r6) sendmsg$NLBL_MGMT_C_ADD(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000600)={0x108, r7, 0xe701ac47a3d23ecd, 0x0, 0x0, {}, [@NLBL_MGMT_A_PROTOCOL={0x8}, @NLBL_MGMT_A_DOMAIN={0xce, 0x1, 'C\xec\xf8\xa0w\x15|\xd8\xbcs\xe1\xb93\x14\xcd\xcb\xb6\xb9\xbb\x84\xe5\xbc\xdb\x7f\x9a\xf2\xea\xcc\x91:v@\xe83-\x1d\xaagQl\x7f\tKt\fc\x1f\x17]\xd5\xd0\xf0\xa8\xeb\xd2g\x92\x04\x00\x00\x00od\xe6,\xd3@I\x17\xf3\xbees0\xad\xc6\xbf/*\xb6(o\x91t\x12\x93U6\xf4@n\xdc\xdc\x8a7y\x81FY\xbe\xbbc\xd2\xc3\x01\xa5\xe2V\x8c\xb3im~\xd2V\xdaG\xbdbF\xc8n\x86\xac\x9c\xfb\xda\xe2&\"\xb4:\x13\xe9\tc\x85\xb4\xcb\x17\xbfm\x846\xe7\x7fp\x9eCdb\xad;\xa2\x8fs\xbf6\xe8\xe3Xg3&\xe2 \xd6\n\x9d=~<\x93/\xaf\x89\x06+\x96]\xb5+\xee\xff8^D*\xdb\xb8\xd8t\x80\xd4\x8fK=E0\xe8R\x83'}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private2}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @loopback}]}, 0x108}}, 0x0) r8 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'hsr0\x00', 0x0}) setsockopt$packet_add_memb(r8, 0x107, 0x1, &(0x7f0000000080)={r9, 0x3, 0x6, @random="7c6a97bead69"}, 0x10) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@getchain={0x24, 0x11, 0x1, 0xfffffffe, 0x2000001, {0x0, 0x0, 0x0, r9, {0x7, 0xa}, {0xd, 0x9}, {0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20048054) 36.533782188s ago: executing program 4 (id=2272): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3d, &(0x7f0000000080)={0xb}, 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0xffffffff, @empty, 0x401}, 0x1c) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000880)=ANY=[@ANYBLOB="1404000036000100000000000000000003"], 0x414}], 0x1}, 0x0) write(r0, 0x0, 0x0) 36.471456591s ago: executing program 4 (id=2273): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) (async) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x594}], 0x1}, 0x9fc) (async) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001040)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x4}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) (async) r4 = socket$packet(0x11, 0x3, 0x300) (async) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000080), r5) sendmsg$NFC_CMD_VENDOR(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000780)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB], 0x2c}, 0x1, 0x0, 0x0, 0x4004005}, 0x8000) (async) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), r7) (async) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f0000000600)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_KEY(r7, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000300)={0x2c, r8, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@NL802154_ATTR_SEC_KEY={0x10, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0xc, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}]}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}]}, 0x2c}, 0x1, 0x0, 0x0, 0x100}, 0x24000000) sendmsg$NL802154_CMD_DEL_SEC_KEY(r5, &(0x7f0000000740)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000700)={&(0x7f0000000640)={0xa4, 0x0, 0x800, 0x70bd2d, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_SEC_KEY={0x7c, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "dc991e5339c478246ca48f79cdda019a"}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "2f3ba0eb12000d3bd29292f22088f5cb10fc36bc33d5f6decc15f56755a22dba"}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "8f9ddc4bba383666bd662796dfd2ad12"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x4}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "a75a9ef57611ee01427f8aa90be317a5273e8d54cf19e01de7dfc4828f3d64c8"}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0xa4}}, 0x80) (async) sendto$packet(r4, &(0x7f00000005c0)="bad330fbc9b55400040000ea0756a85d86dd", 0x5ea, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r3, 0x1, 0xd8, 0x6, @multicast}, 0x14) 36.369046808s ago: executing program 4 (id=2274): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r1) (async) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000580), r3) sendmsg$NFC_CMD_START_POLL(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000680)={0x14, r4, 0x1, 0x70bd2c, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x4000000) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="380000001000390400"/20, @ANYRES32=0x0, @ANYBLOB="00000000408000001800128008000100736974000c00028008000100", @ANYRES32=r2], 0x38}}, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000040)={'sit0\x00', &(0x7f0000000340)={'syztnl1\x00', r2, 0x1, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x9, 0x0, 0x0, @empty, @empty}}}}) 36.358011387s ago: executing program 4 (id=2275): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$netlink(0x10, 0x3, 0x0) (async) r2 = socket$netlink(0x10, 0x3, 0x0) (async) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) (async) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="6c00000010001fff109e00008000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000003f0000440012800b00010067656e6576650000340002800500030003000000060005004e20000005000400ab000000050009000100000005000a0001000000050009000100000008000a00", @ANYRES32=r4], 0x6c}, 0x1, 0x0, 0x0, 0x1}, 0x0) (async) r5 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r5) (async) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r6, @ANYBLOB="01"], 0x3c}}, 0x0) (async) r7 = socket(0x10, 0x3, 0x0) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/syz1\x00', 0x1ff) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r9, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x4c, r8, 0x1, 0x0, 0x0, {0x3d}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd, 0x82}, {0x5, 0x87}}]}, 0x4c}}, 0x0) sendmsg$nl_route(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="300000001c000104000000000000000002000000", @ANYRES32=r4, @ANYBLOB="000014000a000100aaaaaaaeaaaa000008000f000100"], 0x30}, 0x1, 0x0, 0x0, 0x20000}, 0x0) 36.283236101s ago: executing program 4 (id=2276): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="1400000026000900010008008000000006000000"], 0x14}, 0x1, 0x0, 0x0, 0x400c801}, 0x4000000) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001040)={0x20, 0x52, 0x1, 0x0, 0x0, {0x1c}, [@typed={0xc, 0x1, 0x0, 0x0, @u64=0x2}]}, 0x20}}, 0x0) sendmsg$key(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000007c0)={0x2, 0x58, 0x0, 0x9, 0x11, 0x0, 0x70bd28, 0x25dfdbfb, [@sadb_x_nat_t_type={0x1, 0x14, 0x7}, @sadb_spirange={0x2, 0x10, 0x4d6, 0x4d4}, @sadb_x_kmaddress={0x8, 0x19, 0x0, @in6={0xa, 0x4e20, 0x81, @dev={0xfe, 0x80, '\x00', 0x2e}, 0x8b}, @in6={0xa, 0x4e23, 0x1, @initdev={0xfe, 0x88, '\x00', 0x3, 0x0}, 0x9}}, @sadb_lifetime={0x4, 0x2, 0x6, 0x2, 0x4, 0x7}]}, 0x88}}, 0x2c004810) write$rfkill(r1, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1800000040000703fcffffff0000010003"], 0x18}, 0x1, 0x0, 0x0, 0x4008011}, 0xc000) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DAEMON(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r5, 0x301, 0x70bd2a, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x20000090}, 0x20000080) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="480000001000370400"/20, @ANYRES32=0x0, @ANYBLOB="8b04040000000000280012800b00010065727370616e000018000280040012000600020001ab"], 0x48}}, 0x88890) r7 = socket$igmp(0x2, 0x3, 0x2) r8 = socket(0x2a, 0x2, 0x0) r9 = socket(0x1e, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000600)={'veth0\x00'}) connect$tipc(r9, &(0x7f0000000040)=@id, 0x10) shutdown(r9, 0x2) r10 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r10, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x670, 0x5, 0x4c0, 0x290, 0x0, 0xffffffff, 0x0, 0x290, 0x428, 0x428, 0xffffffff, 0x428, 0x428, 0x5, 0x0, {[{{@ip={@rand_addr=0x64010100, @local, 0xff0000ff, 0xffffff00, 'veth1_to_bridge\x00', 'veth0_macvtap\x00', {}, {0xff}, 0x16}, 0x0, 0x168, 0x1a0, 0x48, {}, [@common=@unspec=@string={{0xc0}, {0xa, 0xc, 'kmp\x00', "4801d3e4c6b2bfd892aa7400051624fa86999b13d39b99407a9b7abe75a728baa18da576811985de44110b8602025e1298ea55f1c5087ab16f67b18ca90ac68f0b3d6a068f727f7d23fa5fad26a59a5da2651212bdf9d29248ae63e2349b2470915eea2c39ade5129ff26b6fe772493180cfda2cdd49412e9469d85abdb467ba", 0x76, 0x6, {0x1}}}, @common=@unspec=@devgroup={{0x38}, {0x3, 0x79e8ccad, 0x3, 0x3, 0x81}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0xae, {0xf, @multicast1, @broadcast, @port=0x4e22, @port=0x4e24}}}}, {{@uncond, 0x0, 0xc0, 0xf0, 0x0, {}, [@common=@inet=@multiport={{0x50}, {0x2, 0x1, [0x4e22, 0x4e21, 0x4e23, 0x4e22, 0x4e24, 0x4e22, 0x4e23, 0x4e23, 0x4e22, 0x4e20, 0x4e22, 0x4e21, 0x4e24, 0x4e22, 0x4e22], [0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x6, 0x1, 0x1], 0x1}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xfffd, 0xd, 0x1}, {0x2, 0x4, 0x3}, 0x1000, 0x100}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x11, @ipv4=@rand_addr=0x64010102, @ipv4=@private=0xa010101, @icmp_id=0x68, @icmp_id=0x64}}}, {{@ip={@loopback, @remote, 0xff, 0x0, 'batadv_slave_1\x00', 'ip_vti0\x00', {}, {0xff}, 0x6, 0x1, 0x5}, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@icmp={{0x28}, {0x4, '\\Q', 0x1}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x4, @ipv6=@local, @ipv4=@rand_addr=0x64010101, @icmp_id=0x67, @port=0x4e22}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x520) getsockname$packet(r8, 0x0, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r7, 0x80049367, &(0x7f0000000680)) r11 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0x8, &(0x7f0000000040)=@framed={{0x18, 0x8}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r11}}]}, 0x0}, 0x94) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'vxcan1\x00', 0x0}) bind$can_j1939(r9, &(0x7f00000005c0)={0x1d, r12, 0x0, {0x2, 0x0, 0x6}, 0xff}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000006b113e00000000008510000002000000850000000500000095003300000000009500250500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x6}, 0x94) 36.064635714s ago: executing program 3 (id=2277): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1400000026000100000000000000000006"], 0x14}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r2, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r3, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) bind$alg(0xffffffffffffffff, &(0x7f0000000140)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes128\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_int(r4, 0x0, 0xa, &(0x7f0000000040)=0xc, 0x4) r5 = socket$igmp6(0xa, 0x3, 0x2) sendmmsg$inet6(r5, &(0x7f0000003d40)=[{{&(0x7f00000001c0)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}}, {{&(0x7f0000000140)={0xa, 0x4e24, 0x8, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x752}, 0x1c, 0x0}}], 0x2, 0x0) 21.182515938s ago: executing program 32 (id=2276): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="1400000026000900010008008000000006000000"], 0x14}, 0x1, 0x0, 0x0, 0x400c801}, 0x4000000) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001040)={0x20, 0x52, 0x1, 0x0, 0x0, {0x1c}, [@typed={0xc, 0x1, 0x0, 0x0, @u64=0x2}]}, 0x20}}, 0x0) sendmsg$key(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000007c0)={0x2, 0x58, 0x0, 0x9, 0x11, 0x0, 0x70bd28, 0x25dfdbfb, [@sadb_x_nat_t_type={0x1, 0x14, 0x7}, @sadb_spirange={0x2, 0x10, 0x4d6, 0x4d4}, @sadb_x_kmaddress={0x8, 0x19, 0x0, @in6={0xa, 0x4e20, 0x81, @dev={0xfe, 0x80, '\x00', 0x2e}, 0x8b}, @in6={0xa, 0x4e23, 0x1, @initdev={0xfe, 0x88, '\x00', 0x3, 0x0}, 0x9}}, @sadb_lifetime={0x4, 0x2, 0x6, 0x2, 0x4, 0x7}]}, 0x88}}, 0x2c004810) write$rfkill(r1, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1800000040000703fcffffff0000010003"], 0x18}, 0x1, 0x0, 0x0, 0x4008011}, 0xc000) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DAEMON(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r5, 0x301, 0x70bd2a, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x20000090}, 0x20000080) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="480000001000370400"/20, @ANYRES32=0x0, @ANYBLOB="8b04040000000000280012800b00010065727370616e000018000280040012000600020001ab"], 0x48}}, 0x88890) r7 = socket$igmp(0x2, 0x3, 0x2) r8 = socket(0x2a, 0x2, 0x0) r9 = socket(0x1e, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000600)={'veth0\x00'}) connect$tipc(r9, &(0x7f0000000040)=@id, 0x10) shutdown(r9, 0x2) r10 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r10, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x670, 0x5, 0x4c0, 0x290, 0x0, 0xffffffff, 0x0, 0x290, 0x428, 0x428, 0xffffffff, 0x428, 0x428, 0x5, 0x0, {[{{@ip={@rand_addr=0x64010100, @local, 0xff0000ff, 0xffffff00, 'veth1_to_bridge\x00', 'veth0_macvtap\x00', {}, {0xff}, 0x16}, 0x0, 0x168, 0x1a0, 0x48, {}, [@common=@unspec=@string={{0xc0}, {0xa, 0xc, 'kmp\x00', "4801d3e4c6b2bfd892aa7400051624fa86999b13d39b99407a9b7abe75a728baa18da576811985de44110b8602025e1298ea55f1c5087ab16f67b18ca90ac68f0b3d6a068f727f7d23fa5fad26a59a5da2651212bdf9d29248ae63e2349b2470915eea2c39ade5129ff26b6fe772493180cfda2cdd49412e9469d85abdb467ba", 0x76, 0x6, {0x1}}}, @common=@unspec=@devgroup={{0x38}, {0x3, 0x79e8ccad, 0x3, 0x3, 0x81}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0xae, {0xf, @multicast1, @broadcast, @port=0x4e22, @port=0x4e24}}}}, {{@uncond, 0x0, 0xc0, 0xf0, 0x0, {}, [@common=@inet=@multiport={{0x50}, {0x2, 0x1, [0x4e22, 0x4e21, 0x4e23, 0x4e22, 0x4e24, 0x4e22, 0x4e23, 0x4e23, 0x4e22, 0x4e20, 0x4e22, 0x4e21, 0x4e24, 0x4e22, 0x4e22], [0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x6, 0x1, 0x1], 0x1}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xfffd, 0xd, 0x1}, {0x2, 0x4, 0x3}, 0x1000, 0x100}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x11, @ipv4=@rand_addr=0x64010102, @ipv4=@private=0xa010101, @icmp_id=0x68, @icmp_id=0x64}}}, {{@ip={@loopback, @remote, 0xff, 0x0, 'batadv_slave_1\x00', 'ip_vti0\x00', {}, {0xff}, 0x6, 0x1, 0x5}, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@icmp={{0x28}, {0x4, '\\Q', 0x1}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x4, @ipv6=@local, @ipv4=@rand_addr=0x64010101, @icmp_id=0x67, @port=0x4e22}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x520) getsockname$packet(r8, 0x0, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r7, 0x80049367, &(0x7f0000000680)) r11 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0x8, &(0x7f0000000040)=@framed={{0x18, 0x8}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r11}}]}, 0x0}, 0x94) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'vxcan1\x00', 0x0}) bind$can_j1939(r9, &(0x7f00000005c0)={0x1d, r12, 0x0, {0x2, 0x0, 0x6}, 0xff}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000006b113e00000000008510000002000000850000000500000095003300000000009500250500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x6}, 0x94) 21.024244461s ago: executing program 33 (id=2277): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1400000026000100000000000000000006"], 0x14}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r2, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r3, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) bind$alg(0xffffffffffffffff, &(0x7f0000000140)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes128\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_int(r4, 0x0, 0xa, &(0x7f0000000040)=0xc, 0x4) r5 = socket$igmp6(0xa, 0x3, 0x2) sendmmsg$inet6(r5, &(0x7f0000003d40)=[{{&(0x7f00000001c0)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}}, {{&(0x7f0000000140)={0xa, 0x4e24, 0x8, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x752}, 0x1c, 0x0}}], 0x2, 0x0) 5.809486774s ago: executing program 5 (id=2577): ioctl$XFS_IOC_START_COMMIT(0xffffffffffffffff, 0x80585882, &(0x7f0000000680)={0xffffffffffffffff}) ioctl$XFS_IOC_DIOINFO(r0, 0x800c581e, &(0x7f0000000700)) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001480), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r2, &(0x7f0000001800)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f0000000000)={0x18, r3, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x4}]}, 0x18}}, 0x20004010) (async) sendmsg$IPVS_CMD_DEL_DEST(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0xa4, r3, 0x800, 0x70bd2c, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_SERVICE={0x40, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x3}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'sed\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x1}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x800}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x8}]}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x7}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xe1ef}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x18000000}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4011}, 0x20000010) (async) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$inet6(0xa, 0x3, 0x8000000003c) (async) socket(0x26, 0x1, 0x8) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x6, 0x0, 0x2000000) (async) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000300)={@in={{0x2, 0x4e22, @multicast2}}, 0x0, 0x0, 0x15, 0x0, "2b20a9a47cddc63b223be606d7fa19f22a369ae751de81ca4dee06ec021fec72e73b382d54ba4bb57a219cad5ddfc1e4fe760a1ce2ca6419e92a07b3937730a33b6deca160d8c2fbff48eb96428300"}, 0xd8) (async) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r7) r8 = socket$nl_route(0x10, 0x3, 0x0) (async) preadv(r0, &(0x7f0000004500)=[{&(0x7f0000000740)=""/216, 0xd8}, {&(0x7f0000000840)=""/94, 0x5e}, {&(0x7f0000003500)=""/4096, 0x1000}], 0x3, 0xffffff7f, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6364, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=@gettfilter={0x64, 0x2e, 0x100, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, r9, {0xfff1, 0xfff1}, {0xe, 0xe}, {0x10, 0xd}}, [{0x8, 0xb, 0xfffffffe}, {0x8, 0xb, 0xa}, {0x8, 0xb, 0x1}, {0x8, 0xb, 0x48000000}, {0x8, 0xb, 0x20649}, {0x8, 0xb, 0x6}, {0x8, 0xb, 0xb}, {0x8, 0xb, 0x8}]}, 0x64}, 0x1, 0x0, 0x0, 0x240048e4}, 0x14854) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r10 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) (async) r12 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_IPV6_IPSEC_POLICY(r12, 0x29, 0x22, &(0x7f0000000440)={{{@in=@remote, @in6=@ipv4={""/10, ""/2, @private}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private1}, 0x0, @in6=@private2}}, &(0x7f0000000540)=0xe8) sendto$packet(r10, &(0x7f0000000280)="05ac2d814e83ea34af2c63a528e9a1a201019a86d63e4169e2d99357c73e5cd0a506462420b097d21e4420966e8ef2848e7577043ac0e5770000000020347d2d11b4eaa017c7b52ceeb6ed3d86505ea0865865211d9c208b17beae6233e7e25b39950398d4ef2583f754bae1ce21fb2282e4ed2cc017a2c3f3c6499edce996f4a48ff0597b381ab5b50835753ad657ac3b1b7a13ce9c59516dafca38f660be98da9967912901f721d6a4912c638bd69b9425b849edfd70f0fbde1ae027acebc2212a900dda4a8e06793308421125cc1cd2032b543e6c2409da023278635e98aa", 0xe0, 0x4009, &(0x7f0000000140)={0x11, 0x86dd, r11, 0x1, 0x3, 0x6, @remote}, 0x14) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r0, 0x8982, &(0x7f00000005c0)={0x1, 'veth0\x00', {}, 0x9}) (async) sendmsg$inet(r5, &(0x7f00000034c0)={&(0x7f0000000200)={0x2, 0x4e20, @local}, 0x10, &(0x7f0000003380)=[{&(0x7f00000022c0)="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", 0x1000}, {&(0x7f00000032c0)="631c8580cfe4e3211423db19dcefc22c389079d259592bd0269ff4c3b3b64591e4e333a60bf3c9c8c813ce91afdf7999adc1564df73a65a0a2f9022a3de64e51bbb442e01fe73b83748c988b3ad390fbbcecbd0c2771cc7947cef17a3b6770150b4dad409af4533848aac864db486070886274741f97d1a94bbeea6ca6fda7d1e2d161e1a156dbafcae15566c8debfca26ea07907135d0f95c365a48de0a0e7661d9a3763d3a23ed71018c6643c7e98e835af09582b938363d63ef6a04", 0xbd}], 0x2, &(0x7f00000033c0)=ANY=[@ANYBLOB="4c00000000000000000000000700000001070b7a0a01010064010101820244205360000007ff0000000700000001fffffffb00000007000000080000000500890789ffffffff94040000000000000000140000000000000000000000020000000300000000000000110000000000000000000000010000ea070000000000000014000000000000000000000002000000020000000000000014e500256181a477de000000010000000900000000000000140000000000000000000000010000000000008000000000100000000000000000000000070000001c000000000000000029300008000000", @ANYRES32=r13, @ANYBLOB="ac1e0001ac1e010100000000"], 0xf8}, 0x8080) accept4$inet6(r4, &(0x7f0000000180)={0xa, 0x0, 0x0, @empty}, &(0x7f00000001c0)=0x1c, 0x80800) 5.38465888s ago: executing program 5 (id=2583): r0 = socket(0x10, 0x5, 0x1) socket$kcm(0x23, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x4) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_generic(0x10, 0x3, 0x10) socket$can_bcm(0x1d, 0x2, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000404000009"], 0x50) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) socket$inet_mptcp(0x2, 0x1, 0x106) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r1, &(0x7f00000004c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40010b0}, 0xc, &(0x7f0000000480)={&(0x7f0000000380)=ANY=[@ANYBLOB="d4000000", @ANYRES16=0x0, @ANYBLOB="000425bd7000fddbdf251c0000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000b00040000000e0001006e657464657673696d0000000f0002006e757464657673696d30000008000b00faffffff080001007063690011000200303030303a30303a31302e300000000008000b0009000000080001007063690011000200303030303a30303a31302e300000000008000b00f7ffffff0e0001006e657464657673696d0000000f0002006e657464657673696d30000008000b0008000000"], 0xd4}, 0x1, 0x0, 0x0, 0x80}, 0x404c810) socket$l2tp6(0xa, 0x2, 0x73) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000000)) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x1b, 0x0, &(0x7f0000000200)="083972bdb3a605c4c1188e9986dd02ff4284860186ddba71f16b7d", 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x30000000}, 0x50) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r2], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x8044) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x19a) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1a00000000da0600002ee9771f12e5000200"/28], 0x1c}}, 0x40000) 5.269380685s ago: executing program 0 (id=2585): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000300)={0x48, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x2c, 0x33, @reassoc_resp={{{0x0, 0x0, 0x8}, {}, @broadcast}, 0x0, 0x0, @default, @val, @void, [{0xdd, 0x6, "5d923d4bdfcf"}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x3aeb359a15da3ab0}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0xfffffffffffffe59, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x9, 0x2, 0x7, 0x0, 0xfff, 0x7fffffff}, {0x96, 0x2, 0x9, 0x7f, 0x80d8, 0x7}, 0x8, 0x9, 0x17eb}}]}}]}, 0x58}}, 0x50) 5.149639467s ago: executing program 5 (id=2587): socket$key(0xf, 0x3, 0x2) (async) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x2, 0xd, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x2, 0x2, 0x0, 0x0, 0x0, {0x10, 0x32, 0x3, 0x0, 0x0, 0x0, 0x0, @in=@rand_addr=0x10003300, @in6=@private2}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @local}}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @private}}]}, 0x80}}, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) (async) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000040)={0x81, 0x2, 0x80, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8, 0x0, 0x9, 0x0, 0x22}, 0xe) (async) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000040)={0x81, 0x2, 0x80, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8, 0x0, 0x9, 0x0, 0x22}, 0xe) shutdown(r1, 0x0) r2 = socket(0x10, 0x803, 0x0) sendto(r2, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x4e22, @local}]}, &(0x7f0000000440)=0x10) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x4e22, @local}]}, &(0x7f0000000440)=0x10) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000300)={r3, 0x0, 0x9, 0x8, 0x7, 0x9}, 0x14) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000004900010000000000000000000a006000", @ANYRES32=0x0, @ANYBLOB="000000000800020000000000140001"], 0x38}}, 0x0) 5.061913977s ago: executing program 2 (id=2588): unshare(0x20000600) (async) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.stat\x00', 0x275a, 0x0) read(r0, 0x0, 0x0) (async) r1 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) (async) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x8c, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r2, {}, {0xffff, 0xffff}, {0x5}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1], 0x0, [0x8, 0x4, 0x2, 0x0, 0x8, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}}]}}]}, 0x8c}}, 0x0) 5.061182586s ago: executing program 0 (id=2589): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)=0x0) ioctl$BTRFS_IOC_WAIT_SYNC(r0, 0x40089416, &(0x7f0000000040)=r1) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r0, 0x8010671f, &(0x7f00000000c0)={&(0x7f0000000080)=""/13, 0xd}) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), r0) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0xe0, r2, 0x10, 0x70bd2b, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @empty}]}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x400}, @IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x31}}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}]}, @IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'gretap0\x00'}]}, @IPVS_CMD_ATTR_DAEMON={0x48, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'wg1\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'wlan1\x00'}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x8}]}]}, 0xe0}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x2c, 0x0, 0x200, 0x70bd26, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x100, 0x22}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000810}, 0x400c811) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000400)={0x77, 0xe, 0xb, 0x5}) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000440)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x3ff, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x4, 0x1}, 0x50) ioctl$XFS_IOC_FSGEOMETRY_V1(r4, 0x80705864, &(0x7f00000004c0)) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$bt_hci(r5, &(0x7f0000000540)={0x1, @le_ext_create_conn={{0x2043, 0x100a}, {0x29, 0x7, 0x9, @any, 0xa, "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"}}}, 0x100e) write$bt_hci(r5, &(0x7f0000001580)={0x1, @read_rssi={{0x1405, 0x2}, {0xc8}}}, 0x6) r6 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPCONNADD(r6, 0x400442c8, &(0x7f00000015c0)={0xffffffffffffffff, 0x0, 0x0, "efc6b7b8e1d6dd991c19f70f9ec38bbd1257ac82f6f84364"}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001640), r0) sendmsg$NL80211_CMD_RELOAD_REGDB(r0, &(0x7f0000001700)={&(0x7f0000001600)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000016c0)={&(0x7f0000001680)={0x14, r7, 0x800, 0x70bd29, 0x25dfdbfb, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4001}, 0x1) r8 = accept4$nfc_llcp(0xffffffffffffffff, 0x0, &(0x7f0000001740), 0x80800) setsockopt$nfc_llcp_NFC_LLCP_RW(r8, 0x118, 0x0, &(0x7f0000001780)=0x9, 0x4) nanosleep(&(0x7f00000017c0), &(0x7f0000001800)) r9 = syz_open_procfs$namespace(0x0, &(0x7f0000001840)='ns/net\x00') ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r8, 0x81f8943c, &(0x7f0000001880)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r9, 0xd000943e, &(0x7f0000001a80)={r10, 0x0, "341cf632cade675c5f13ece605b17bdc05574d500650ca5e172954670d539237887e2820df7fe71710b51b5d3edc5fa9acc22a4293b562c614798bae69c1263daf9b1a3106bfb822dfcbb2cd56f9f4bd6503d7c25202c51fdb6274c284f7fb311219bd0c7e5f5df02d5dbc8d2b3a9e62aa92d4776d495ff3c7c9d50f985cd78718cc1cc50643f6e6ecd1b3ba5c23a7b3aa689ec602aa01f11c1a398b1a3d3558bda45b0fba7dff3b9f75fbd303b7a0e490cfb6fa9c228365a4475bd1591faca109a5013df6847733ffd7b5514b796f11ebe5dd09c3f744e679bde8d9e6bb42e2889ebe1901659565a8b7176a7b65ecb23c96cc49b7b4b8154280e2bdda05211a", "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"}) ioctl$sock_SIOCDELRT(r6, 0x890c, &(0x7f0000002a80)={0x0, @rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xe}, @qipcrtr={0x2a, 0x4, 0x3fff}, @sco, 0x5, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb8, 0x1, 0xc00}) r11 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SCUDMATCHLEN(r11, 0x89e7, &(0x7f0000002b00)={0x2}) getsockopt$IP_VS_SO_GET_SERVICE(r3, 0x0, 0x483, &(0x7f0000002b40), &(0x7f0000002bc0)=0x68) r12 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) splice(r12, &(0x7f0000002c00)=0x5, 0xffffffffffffffff, &(0x7f0000002c40)=0xff, 0x8001, 0x0) 4.996847276s ago: executing program 5 (id=2591): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, 0x0, 0x0) shutdown(r0, 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480f0000005e140602000000000e0003002f00000002800000121f", 0x2e}], 0x1}, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000440)=@framed={{0x18, 0x2, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x97}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x41}, 0x94) socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0xa}, 0x94) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r6, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4096, 0x1e67}, {&(0x7f00000000c0)=""/250, 0x4}], 0x2, 0x0, 0xd64}}], 0x300, 0x34000, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=ANY=[@ANYBLOB="18000000", @ANYRES16=r5, @ANYBLOB="a787000000ff000000000b00000404000180"], 0x18}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x44, 0x2c, 0xf3f, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xb, 0xfff3}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x14, 0x2, [@TCA_BASIC_EMATCHES={0x10, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8}, @TCA_EMATCH_TREE_LIST={0x4}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x200010d0}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000001100000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a03000000000000000000050000000900010073797a30000000000900030073797a300000000008000c40000000032800048008000240000000120800014000000000140004"], 0xa4}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0xe, 0x0, &(0x7f0000000000)="e0b9547ed387dbe9abc89b6f4bec", 0x0, 0x4e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r1, 0x8983, &(0x7f0000000000)={0x6, 'dvmrp0\x00', {0x10}, 0xcbb2}) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r1, 0x8982, &(0x7f0000000040)={0x0, 'veth1_to_hsr\x00', {0x4}, 0x1}) 4.901400417s ago: executing program 2 (id=2592): getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB="1e000000010000000000000000000000650c"], 0x1c}}, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x25dddbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0xffff, 0xffff}, {0x1, 0xd}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r3, {0x0, 0x8}, {}, {0xa}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x20, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x1c, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x2}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_HWID={0x5, 0x4, 0x2}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_DIR={0x5, 0x3, 0x1}]}]}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x220008e8}, 0x804) 4.893150517s ago: executing program 0 (id=2593): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) r2 = socket(0x2a, 0x2, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x34, r1, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x10008890}, 0x20000000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={0xffffffffffffffff, 0x0, 0x0, 0xcb, 0x0, &(0x7f0000000a80)=""/203, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000500)="84", 0x2, 0x0, 0x4}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{0x1, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000480)=@bpf_lsm={0x1d, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x41000, 0x68, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000240)=[{0x1, 0x5, 0x5, 0x1}], 0x10, 0x5}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={r5, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0}}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r4}, &(0x7f00000000c0), &(0x7f0000000100)=r5}, 0x20) 4.770002201s ago: executing program 0 (id=2595): socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0xffffffffffffffa2, &(0x7f0000000140)={&(0x7f0000000000)={0x14, 0x3a, 0x301, 0x20000, 0x0, {0x1}}, 0x14}}, 0x4000) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c0000002000010000000000fbdbdf250a106b00000000031f00020014000200fc020000000000000000000000000001140001fb1f010000000000000000000000000000080018004e214e22"], 0x4c}}, 0x40000) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=@newlink={0x5c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private2}]}}}]}, 0x5c}}, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=@newlink={0x5c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private2}]}}}]}, 0x5c}}, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000340), r0) 4.670182688s ago: executing program 1 (id=2596): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r2, 0x800448d4, &(0x7f0000000000)={0x0, 0x2, '\b\x00', 0xff, 0x7b}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={0xffffffffffffffff, 0xe0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0], 0x0, 0xdc, &(0x7f0000000280)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000300), &(0x7f0000000340), 0x8, 0xed, 0x8, 0x8, &(0x7f0000000380)}}, 0x10) r7 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000500)='ns/user\x00') sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@bridge_dellink={0x44, 0x11, 0x2, 0x70bd29, 0x25dfdbfc, {0x7, 0x0, 0x0, r6, 0x1000, 0x404}, [@IFLA_NET_NS_FD={0x8, 0x1c, r7}, @IFLA_WEIGHT={0x8, 0xf, 0x1000}, @IFLA_PROTO_DOWN={0x5, 0x27, 0x8}, @IFLA_AF_SPEC={0xc, 0x1a, 0x0, 0x1, [@AF_MPLS={0x4}, @AF_BRIDGE={0x4}]}]}, 0x44}}, 0x0) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r8, 0x800448f0, &(0x7f00000004c0)={0x1, 0x2, "ff9edf", 0x6c, 0x2}) write$cgroup_pid(r4, &(0x7f0000000c40), 0x12) r9 = openat$cgroup_procs(r3, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0) pread64(r9, &(0x7f0000001840)=""/4096, 0x1000, 0x1) 4.565195659s ago: executing program 6 (id=2597): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000000), r0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r2) getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x38, 0x10, 0x437, 0x800000, 0x0, {0x0, 0x0, 0x0, r3, 0x504c3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD0={0x8, 0x1, @udp6}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000c014}, 0x0) sendmsg$GTP_CMD_DELPDP(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="03002cbd70000e0000000100000008000100", @ANYRES32=r3, @ANYBLOB="0800020000000800"], 0x34}, 0x1, 0x0, 0x0, 0x44800}, 0x20000000) r4 = socket(0x2, 0x80805, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r5, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r5, 0x84, 0x7a, &(0x7f0000000340)={r6, @in={{0x2, 0x4e21, @rand_addr=0x64010102}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r4, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r4, 0x84, 0x10, &(0x7f0000000300)=@assoc_value={r7, 0x1ff}, &(0x7f0000000400)=0x8) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000100)=@bridge_getneigh={0x20, 0x1e, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x10004}}, 0x20}}, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r10 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r12 = socket(0x10, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$nl_route_sched(r12, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r11, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r13 = socket(0x400000000010, 0x3, 0x0) r14 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r14, 0x890b, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r14, 0x890c, &(0x7f0000000000)) sendmsg$nl_route_sched(r13, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=@newqdisc={0x70, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffbffff, {0x0, 0x0, 0x0, r11, {0x0, 0x8}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x1c, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x8001}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0xb}]}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x8, 0x3, 0xa15, 0x7, 0x1, 0x5, 0x80000000}}, {0x4}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x40001}, 0x8010) 4.534523245s ago: executing program 1 (id=2598): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000000c0)={0x24, 0x2e, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @uid}, @nested={0x9, 0x0, 0x0, 0x1, [@generic="976b640868"]}]}, 0x24}], 0x1}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r1, &(0x7f0000000440)=[{{&(0x7f0000000280)={0x2, 0x4e22, @private=0xa010101}, 0x10, &(0x7f0000000980)=[{&(0x7f0000000200)="9c", 0x1}], 0x1}}, {{&(0x7f0000000080)={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10, &(0x7f0000000180)=[{&(0x7f00000000c0)="99", 0x1}], 0x1}}], 0x2, 0x48000) close(0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x581, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x4d014}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_DOWNDELAY={0x8, 0x1f, 0x7fffffff}, @IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0x8}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20004002}, 0x0) 4.497431494s ago: executing program 0 (id=2599): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x4, 0x6, 0xff, 0x42}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000080), 0x619, r1}, 0x38) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x7cf, 0x1}, 0x38) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x2, &(0x7f0000000200)=@raw=[@call, @exit], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffff8a}, 0x90) 4.400947243s ago: executing program 2 (id=2600): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x20) 4.359415891s ago: executing program 0 (id=2601): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x70) (async, rerun: 32) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000800)=[@rdma_map={0x30, 0x114, 0x3, {{0x0}, 0x0}}], 0x30}, 0x0) (async, rerun: 32) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$packet(0x11, 0x2, 0x300) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180)=r3, 0x4) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000002c0)={'gre0\x00', &(0x7f0000000200)={'tunl0\x00', 0x0, 0x80, 0x80, 0x2, 0xad6, {{0x23, 0x4, 0x0, 0x3, 0x8c, 0x66, 0x0, 0x6, 0x4, 0x0, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@timestamp_prespec={0x44, 0x54, 0x69, 0x3, 0xe, [{@multicast1, 0x3}, {@multicast1, 0x3}, {@dev={0xac, 0x14, 0x14, 0x26}, 0x5}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x8000}, {@remote, 0x7b2}, {@multicast2, 0x9}, {@remote, 0x10}, {@multicast1, 0x3}, {@rand_addr=0x64010100, 0x1}, {@empty, 0x401}]}, @timestamp={0x44, 0x10, 0x46, 0x0, 0x1, [0x9ee, 0x9, 0x2]}, @timestamp_prespec={0x44, 0xc, 0x40, 0x3, 0x2, [{@multicast1, 0x4d}]}, @ssrr={0x89, 0x7, 0xff, [@remote]}]}}}}}) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000400)={@cgroup, 0x3, 0x0, 0x5, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) (async, rerun: 32) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (rerun: 32) write$cgroup_subtree(r6, &(0x7f0000000100)=ANY=[], 0x32600) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0) (async) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000440)={r3, r4, 0x25, 0x4, @val=@tcx={@void, @value=r6, @void, @void, r5}}, 0x1c) (async) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYRESDEC=r1], 0x44}}, 0x0) 4.315525566s ago: executing program 1 (id=2602): r0 = socket$inet_tcp(0x2, 0x1, 0x0) (async, rerun: 64) r1 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) sendmsg$nl_route_sched(r1, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000b80)=@newtaction={0x6c, 0x30, 0x109, 0x0, 0x0, {}, [{0x58, 0x1, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x10}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{}, @rand_addr, @private}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) (async, rerun: 64) pipe(&(0x7f0000000040)={0xffffffffffffffff}) (rerun: 64) read(r2, 0x0, 0x0) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) (async, rerun: 64) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4050000d62b00006110600000000000c6000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) (async, rerun: 64) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000000c0)={@map=r5, r4, 0x5}, 0x10) (async, rerun: 64) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000780)={'syztnl1\x00', &(0x7f00000006c0)={'syztnl0\x00', 0x0, 0x20, 0x20, 0x6, 0x200, {{0x21, 0x4, 0x0, 0x9, 0x84, 0x67, 0x0, 0x51, 0x2f, 0x0, @local, @multicast1, {[@rr={0x7, 0xb, 0x97, [@private=0xa010100, @private=0xa010101]}, @generic={0x88, 0xf, "bd53d0baf389c4fc4d2c7e1c5c"}, @rr={0x7, 0xb, 0x56, [@dev={0xac, 0x14, 0x14, 0x30}, @broadcast]}, @timestamp_addr={0x44, 0x3c, 0x7, 0x1, 0x8, [{@empty, 0x8}, {@loopback, 0x9}, {@remote, 0x3}, {@empty, 0xa}, {@empty, 0x4}, {@rand_addr=0x64010101, 0xfffffff0}, {@local, 0x1}]}, @ssrr={0x89, 0xf, 0xf8, [@loopback, @multicast1, @remote]}]}}}}}) (async, rerun: 64) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r7, 0x0) (async, rerun: 32) r8 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000c00)=@bpf_lsm={0x1d, 0x16, &(0x7f0000000900)=@framed={{0x18, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x7}, [@printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1ff}}, @btf_id={0x18, 0x2, 0x3, 0x0, 0x4}, @btf_id={0x18, 0x2, 0x3, 0x0, 0x3}, @generic={0x0, 0x6, 0xd, 0xe, 0x3}, @generic={0x40, 0x1, 0x4, 0x8, 0x1}, @call={0x85, 0x0, 0x0, 0x56}, @map_val={0x18, 0x4, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2}, @initr0={0x18, 0x0, 0x0, 0x0, 0xfffffff9, 0x0, 0x0, 0x0, 0x3ff}]}, &(0x7f00000009c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000a00)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000a40)={0x3, 0x8, 0x8, 0xffff}, 0x10, 0xffffffffffffffff, 0x0, 0x6, &(0x7f0000000a80)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff, 0x1], &(0x7f0000000ac0)=[{0x0, 0x2, 0xe, 0x7}, {0x4, 0x3, 0xf, 0x6}, {0x1, 0x2, 0x5, 0x1}, {0x5, 0x3, 0x4, 0xb}, {0x1, 0x2, 0xb, 0x4}, {0x1, 0x5, 0x4}], 0x10, 0x8b}, 0x94) (async, rerun: 32) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r9, &(0x7f00000001c0)='4', 0x1) r10 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000d00)=@bpf_ext={0x1c, 0x24, &(0x7f00000004c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@map_val={0x18, 0x0, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x6}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x5}, @exit, @jmp={0x5, 0x0, 0x6, 0x8, 0x1, 0xc, 0x1}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x4}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x55}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000600)='GPL\x00', 0x1, 0x5d, &(0x7f0000000640)=""/93, 0x40f00, 0x14, '\x00', r6, 0x0, r7, 0x8, &(0x7f00000007c0)={0x8, 0x5}, 0x8, 0x10, &(0x7f0000000800)={0x5, 0x3, 0xffffffff, 0x401}, 0x10, 0x1b3fa, r8, 0x0, &(0x7f0000000cc0)=[0x1, r9, 0xffffffffffffffff], 0x0, 0x10, 0x7}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x49, &(0x7f0000000040)=r10, 0x4) 4.176697534s ago: executing program 5 (id=2603): r0 = socket(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r2, &(0x7f00000004c0)={0x1f, 0x4, @none, 0x0, 0x2}, 0xe) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r3, &(0x7f0000000000)={0x1f, 0xf7, @none, 0x0, 0x1}, 0xe) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) (async, rerun: 32) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) (rerun: 32) close(r6) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000800)=@newqdisc={0x88, 0x24, 0x400, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {}, {0x1, 0xffff}, {0x6, 0x6}}, [@qdisc_kind_options=@q_red={{0x8}, {0x5c, 0x2, [@TCA_RED_MARK_BLOCK={0x8, 0x6, 0xd}, @TCA_RED_PARMS={0x14, 0x1, {0x17, 0xa2, 0x99aeafe, 0xb, 0xb, 0xf, 0x5}}, @TCA_RED_PARMS={0x14, 0x1, {0x5d, 0x6, 0x4, 0x16, 0x10, 0x1a, 0x7}}, @TCA_RED_PARMS={0x14, 0x1, {0x2, 0x9, 0x4, 0x1b, 0x1, 0x0, 0x2}}, @TCA_RED_FLAGS={0xc, 0x4, {0x0, 0x18}}, @TCA_RED_MAX_P={0x8}]}}]}, 0x88}, 0x1, 0x0, 0x0, 0x48}, 0x0) (async) r10 = socket(0x400000000010, 0x3, 0x0) r11 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) (async) r13 = socket(0x840000000002, 0x3, 0xff) (async) r14 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000440)={r14, 0x0, 0x2d, 0x0, @val=@netkit={@void, @value=r14}}, 0x1c) (async, rerun: 32) sendmsg$inet(r13, &(0x7f0000000900)={&(0x7f00000006c0)={0x2, 0x4e23, @multicast1}, 0x10, &(0x7f00000007c0)=[{&(0x7f0000000940)="974501000000000001008cc5595c4a9b8f52ac8e5c7fe70a3326491f", 0x1c}], 0x1, &(0x7f0000000140)}, 0x400c804) (async, rerun: 32) sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000700)=@newtfilter={0x44, 0x2c, 0xd3f, 0x70b524, 0x25dfdbfc, {0x0, 0x0, 0x0, r12, {0xfff3, 0xffe0}, {}, {0x7, 0xfff2}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0xe338}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4008848}, 0xc884) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r15, 0x4000003e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000280)="19", 0x1}], 0x1}, 0x4) recvmmsg(r0, &(0x7f0000001400)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x10000, &(0x7f00000015c0)) (async) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x21dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0xe, 0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x4004040) (async) r16 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r16, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=ANY=[], 0xd8}}, 0x20004080) 3.994084077s ago: executing program 1 (id=2605): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="5800000000000104000000000300000000000000fd0015116c3ef94ac5844309f1e742e33dc10f0110be097aee940b611e321bab2f7b5d5e96aab198c9fa28836b82b43cb5ae5cec8aeca151a700afc88baa8745eefc88557518d9131966f780922a3a643eab20145b2664b79c019503e9ee1be7635b200a7c9c4600b6cbf24b316989c25e95b206", @ANYRES32=0x0, @ANYBLOB="fab0817dbcb5f31a24001280110001006272696467655f736c617665000000000c00058005001c0000000000140003006272696467655f736c6176655f300000"], 0x58}, 0x1, 0x0, 0x0, 0x20044010}, 0x4004) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000000c0)={0x5, 0x0}, 0x8) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0)=r3, 0x4) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$sock_timeval(r4, 0x1, 0x14, &(0x7f0000000040)={0x0, 0x2710}, 0x10) read(r4, &(0x7f0000000100)=""/41, 0x29) ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f0000000100)) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r1, 0x4058587a, &(0x7f0000000440)={{r4, &(0x7f0000000140)='syz0\x00', 0xadad8840fb0ffe, &(0x7f0000000300)={@align=0x101, {0xd3f, 0xd6c, 0x5, 0x72}}, 0x97b, &(0x7f0000000340), &(0x7f0000000380)=0x8}, {[0xffffd76b, 0x9, 0x7f, 0x2]}, 0x1000, 0x72, &(0x7f00000003c0)=""/114}) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x14, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0xb, 0x9, 0x0, 0x1, 0x20000000}, {0x66, 0x0, 0x0, 0x256c6c64}}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r5}}], {{0x7, 0x1, 0x3, 0x3}, {0x5, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000000)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x64, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)={0x14, 0x0, 0x8, 0x201, 0x0, 0x0, {0x7, 0x0, 0x7}}, 0x14}}, 0x0) 798.461736ms ago: executing program 1 (id=2606): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000980)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff4f}, 0x48) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r1, &(0x7f0000000100)=[{{&(0x7f0000000440)={0xa, 0x4e20, 0x3d66, @local, 0x5}, 0x1c, &(0x7f0000000280)}}, {{&(0x7f0000000480)={0xa, 0x4e23, 0xc4e8, @rand_addr=' \x01\x00', 0xf0}, 0x1c, &(0x7f0000000500)=[{&(0x7f00000004c0)='~', 0x1}], 0x1}}], 0x2, 0x931766f6319eed40) shutdown(r1, 0x1) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000040)={0xfa, 0x81, 0x8, 0x7, 0x2d, 0xb8, 0x5, 0x8, 0x9, 0x3, 0x3, 0xa, 0x6, 0xe}, 0xe) setsockopt$sock_int(r1, 0x1, 0x1, &(0x7f00000002c0)=0xffff, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af0ff00000000bfa200000000000007020000f5ffffffb703000008000000b70400008000000085000000aa00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="76389e147583ddd0569ba56a5cfd", 0x0, 0x1fc2, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000000080)=@newtaction={0x68, 0x30, 0x9, 0x0, 0x0, {}, [{0x54, 0x1, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0x5}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PRIORITY={0x8, 0x8, {0xfff2}}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x80000000}}]}, {0x4}, {0xc, 0xa}, {0xc, 0x9, {0x3b}}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) 717.453213ms ago: executing program 2 (id=2607): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="30000000190001000000000000000000021800000000ff000000000008000100ac1414000c0009", @ANYRESOCT=r0], 0x30}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000080)="390000001300090468fe0700000000000000ff3f08000000480100100000000019002b000a0001000500000000000072080003000500000000", 0x39}], 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r2) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000000400)={{{@in=@remote, @in=@loopback}}, {{}, 0x0, @in=@local}}, &(0x7f0000000500)=0xe8) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_NOACK_MAP(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002dbd7000ffdbdf255700000008000300", @ANYRES32=r5, @ANYBLOB="1b009700faff0000"], 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x40) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x40, r3, 0x8, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x55}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x5b}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0xe}]}, 0x40}, 0x1, 0x0, 0x0, 0x21}, 0x90) 567.885009ms ago: executing program 6 (id=2608): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r0) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x34, r1, 0x1, 0xfffffffe, 0xfffffffc, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0x14, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x7d}]}, @ETHTOOL_A_DEBUG_MSGMASK={0xc, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x200c4011}, 0x0) (async, rerun: 32) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0), 0x48) (rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async, rerun: 64) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c0000001d00070f2cbd70000000000007000000", @ANYRES32=r5, @ANYBLOB="408052"], 0x1c}}, 0x0) (async) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x54, 0x10, 0x200, 0x70bd2a, 0x4, {}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0x24, 0x2, 0x0, 0x1, [@IFLA_XFRM_LINK={0x8, 0x1, 0x1}, @IFLA_XFRM_LINK={0x8, 0x1, 0x2}, @IFLA_XFRM_LINK={0x8, 0x1, 0x1}, @IFLA_XFRM_LINK={0x8, 0x1, 0x2}]}}}]}, 0x54}, 0x1, 0x2000000000000000, 0x0, 0x44000}, 0x0) (async) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)={0x14, 0x20, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x4, 0xf2}]}, 0x14}], 0x1, 0x0, 0x0, 0x20008001}, 0x0) (async, rerun: 64) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x208000, 0x0) (rerun: 64) 457.635762ms ago: executing program 1 (id=2609): r0 = socket$inet_icmp(0x2, 0x2, 0x1) recvfrom(r0, &(0x7f0000000000)=""/181, 0xb5, 0x100, &(0x7f00000000c0)=@llc={0x1a, 0x110, 0x3, 0x8, 0x5d, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3d}}, 0x80) r1 = socket$kcm(0x29, 0x0, 0x0) sendmsg$kcm(r1, &(0x7f0000000400)={&(0x7f0000000140)=@tipc=@id={0x1e, 0x3, 0x1, {0x4e22, 0x2}}, 0x80, &(0x7f0000000380)=[{&(0x7f00000001c0)="e9e7bd1e678606c66afe03eeecf7ab884fbf3dfe3079bdf2fa34330dbe7367954e1068ed44fc4e3c8b6e382710447b0da6c6eefb306d070f6fbcec509d95c369d6b4d8f68a05163f58c44cb5cc1713d92b9d04e38ebaae9dca6966326d86b8fdb10b5d4c39f5b07fb04730a6696ea7b84a31e5734ea41779c469df8eaf1e7900d6a40565", 0x84}, {&(0x7f0000000280)="65cf006f792cbf32fdaddc4f367d501ed817c0ff3f68c0da259e84e723e6beee662a0eb48bc0a348e517574096cfff67739bb57a2e6db7f3d87381c5de34d860ee1da701bc82c6a30688824984215e8c27e11039f3edb31866d63f6b4486a96a3e70be5f427ea99383f54c3f7bcc4b24ab78ec23ec70f605081aba305cca5b1c5f3bff844432cd1f975af3ed171c46ccfd8b3a57e9a7a37f3e558cc24cb5aa7ffa501d4c6f528d44b95f6e097420183cecb78dd9cec0e1389a6902ca4c44b78627b92bb1e8e3e6f9e531049628ff289c57ed2296237b069ac4", 0xd9}], 0x2, &(0x7f00000003c0)=[{0x30, 0x115, 0x6, "1d93e257202e2ec92246b6aa09e8f2c06d9daa15b184208a92a948d260"}], 0x30}, 0x400c021) setsockopt$sock_int(r0, 0x1, 0x1e, &(0x7f0000000440)=0x3db, 0x4) r2 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000480)={0x0, 0x3, 0x0, 0x1, 0x4}, &(0x7f00000004c0)=0x18) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f0000000500)={r3, 0xf}, &(0x7f0000000540)=0x8) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000580)) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000640)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_PMK(r4, &(0x7f0000000700)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x34, r5, 0x1, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x34}, 0x1, 0x0, 0x0, 0x24000010}, 0x4000010) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000008c0)={&(0x7f0000000740)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x49, 0x49, 0x6, [@volatile={0x2, 0x0, 0x0, 0x9, 0x5}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x4, 0x9be}}, @datasec={0x9, 0x1, 0x0, 0xf, 0x1, [{0x1, 0x3, 0x2}], "a6"}, @type_tag={0x8, 0x0, 0x0, 0x12, 0x2}]}, {0x0, [0x61, 0x30, 0x5f, 0x0]}}, &(0x7f00000007c0)=""/237, 0x6a, 0xed, 0x0, 0xfffffffc}, 0x28) recvmsg(r0, &(0x7f0000000cc0)={&(0x7f0000000900)=@xdp, 0x80, &(0x7f0000000c00)=[{&(0x7f0000000980)=""/220, 0xdc}, {&(0x7f0000000a80)=""/234, 0xea}, {&(0x7f0000000b80)=""/89, 0x59}], 0x3, &(0x7f0000000c40)=""/116, 0x74}, 0x40002121) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000d40), r4) sendmsg$IPVS_CMD_SET_DEST(r8, &(0x7f0000000e00)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d80)={0x1c, r9, 0x4, 0x70bd2b, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000800}, 0x40001) r10 = syz_genetlink_get_family_id$tipc(&(0x7f0000000e80), r8) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r4, &(0x7f0000000f40)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000f00)={&(0x7f0000000ec0)={0x28, r10, 0x100, 0x70bd29, 0x25dfdbff, {{}, {}, {0xc, 0x14, 'syz0\x00'}}, ["", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x40084) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000010c0)={r7, 0x20, &(0x7f0000001080)={&(0x7f0000000f80)=""/175, 0xaf, 0x0, &(0x7f0000001040)=""/22, 0x16}}, 0x10) syz_emit_ethernet(0x7c, &(0x7f0000001100)={@broadcast, @local, @val={@val={0x88a8, 0x5, 0x0, 0x3}, {0x8100, 0x6, 0x1, 0x4}}, {@generic={0xa14, "e7d96675fc0752b349a38078d9de6b05e6229d157c0bdc042a4ba6dfc5c7dd8fe1fc7ade82e9f0321608e84152c8530742b86c24738a41597a99202dc764228d7ec0baf1ac40c23108ce6f4a55a1b5b648f41abb82744156db49011556b81f80ac027cde184f"}}}, 0x0) r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000001180), 0xc200, 0x0) ioctl$TUNSETQUEUE(r12, 0x400454d9, &(0x7f00000011c0)={'veth0_to_hsr\x00'}) r13 = accept4$llc(0xffffffffffffffff, &(0x7f0000001200)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000001240)=0x10, 0x80000) getsockopt$llc_int(r13, 0x10c, 0x3, &(0x7f0000001280), &(0x7f00000012c0)=0x4) r14 = socket$inet6_icmp(0xa, 0x2, 0x3a) setsockopt$inet6_icmp_ICMP_FILTER(r14, 0x1, 0x1, &(0x7f0000001300)={0x2}, 0x4) r15 = openat$cgroup_ro(r7, &(0x7f0000001340)='memory.swap.current\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001780)={0x11, 0x25, &(0x7f0000001500)=@raw=[@map_idx={0x18, 0x5, 0x5, 0x0, 0x9}, @tail_call={{0x18, 0x2, 0x1, 0x0, r15}}, @alu={0x4, 0x0, 0x7, 0x0, 0x6, 0x1, 0xfffffffffffffff0}, @generic={0x9, 0x3, 0x8, 0x8001, 0x21a}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x800}}, @exit, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}}, @call={0x85, 0x0, 0x0, 0xbc}], &(0x7f0000001640)='GPL\x00', 0x7, 0x3, &(0x7f0000001680)=""/3, 0x41000, 0x6, '\x00', 0x0, @fallback=0x2a, r7, 0x8, &(0x7f00000016c0)={0x8, 0x2}, 0x8, 0x10, 0x0, 0x0, r11, 0xffffffffffffffff, 0x3, &(0x7f0000001700), &(0x7f0000001740)=[{0x0, 0x1, 0xc, 0x3}, {0x3, 0x3, 0x7, 0x2}, {0x5, 0x2, 0xe, 0xc}], 0x10, 0x9}, 0x94) 345.080246ms ago: executing program 6 (id=2610): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001580)=@ipv6_newaddrlabel={0x38, 0x48, 0x3, 0x0, 0x0, {}, [@IFAL_LABEL={0x8}, @IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x38}}, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x12}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) 344.542302ms ago: executing program 5 (id=2611): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) r1 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0xf, &(0x7f0000000000), 0x4) r2 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000000b00020076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) close(r4) bind$can_j1939(r2, &(0x7f0000000380)={0x1d, r3, 0x1, {0x0, 0x1, 0x3}, 0xfe}, 0x18) sendmsg$kcm(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)='6', 0x1}], 0x1}, 0x400c000) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x801, 0x0, 0x0, {0x5, 0x0, 0x7}, [@NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}, @NFTA_RULE_CHAIN_ID={0xfffffffffffffe42}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x2}, @NFTA_RULE_POSITION_ID={0x8}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0xc5}, 0x80) sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000180)=@hci={0x1f, 0x0, 0x5}, 0x80, &(0x7f0000002400)=[{&(0x7f0000000240)="27050200340f14000600002fb96dbcf706060000170000005f45f491bdd54ec5ff1144ee162fd4b8bf7256da82f600102c21880b00000000010040570000000600000000000000805db1", 0x4a}, {&(0x7f00000004c0)="1c393502dda1a67d93b1ceccbe972c4fef9c33ecf2d824f3a33513f45f472bbdc8e3a2275f2587f0da0b3ae419bed996116448f90d113ce98aa985f379d729430858f5cb9a668a1800bf2354b33cdff88580a3080d7f4cc2406e071138439e1566dd17983ee153ab672f362d3292e24a9952f18ec3d8cf811eee6448a7c2db438b06b37bb3391096c1d4442a754899299321c03cbcfb98a26994b2a072c2b9d9c70d619545e5f61b050e40166d2ff57dcc008f24fd5339e7bc21e25863f80d2487c30b6bf781608a31d68e9319ab1712d8f5bdde849c040417c864cbfd3923dcb9fc6bdc2ea53334184b03efcb631dc68f0a7b6e13eea4b80d4237120e32932ca4e2b50bad0a35496d36a191d91f03b477b9587bc0ba489932e34f819fa1524ebad53a3d94b46c6aeff4f42fa067729fbb2862c09d337a75e0c8429d4bfe0dee2e1e23e8c22787178600ecca135623731e4701f35bd4e7c936a8ee274120e7662328a5aba1161b05889b045696721c79bff0547efe051f3c5de77fdd3c77afd41a1a7747a982b7efb013c9d6bac7d3ad1f9b7c3a5a1448b35696f03bca1c875e346edc55b7a271c3e5f3c0df72c8e4d7cccfa2e9b598f0ae06efbc1a5d5bd91aed6b32deccf7755cef50fab72633c802533b9d94f17f9be978f2514c47671575ee528fbdddc6194328e605e4d10e293756d20eb8a545f2bfe48df5d1d98a270458392a0a57647dcb8ee005e78877a072d12d0429b9b9957a695c3289b4a59469691115e6ba204181708b9d1ae47418ed594b8128f20c100f5485a84e60d73ab818da73fab78caf42afd1f89cdb29dfdd6676c55ea00d35321bc4878170c62b056b4e03ae556ac804026cabcbc8e79e7a18f2f56442cd650aa2bc88f62ebb65bfafd3e5b4c62ac2e720ff0fdf03c46889df55ff91058319c953f90cd6e7f7b15d56a58ff6128357510c4c618aa25434881d58c39092969ba1f7c444465f16d1f2561991e357bda928f2a50422f774f318fb41169a0d0324a8efd19b940a17c28cda06b750cd02155dbdbd1dc695e190a997ae8f4bb8766983d8db8678a78ae8f044b868549e9c60f7ce25a36300ce07f304e75d285e914b3aec703969df969b2736dd99fcab1944c751f8ef4c34cbb86d5f27ef9982be245949d5579b540750d1eac428b0cd2541295b577573b27e9ecac3934987e85b44bc85e6e307cf6f5683bf1c817369d556a368bc5560a1737aa2bec3cac4689e04fbe851ed4b6c1a355950522f8918af3855fe97ec285da15a20e8119483e7419fa2b0639d5add10b396a8033ec2b98d9a9fca3fc4202d0a6bcfa55798eacafa4c8efafb73a2ab89bb58b0c20364a6ad9c7c3dfb1bdbb87b8f91e3ab9790e876f906107183419aa7480e327388c01dc5f2d5bcb8a7565cddc4e1275741116416b66bf3adf9e7e31c3fc518740446ed2a394e7699baf9408c62b4c0e7a11dec8f4a67e78a3f00bedae9f55f36c52a1fd4ee3a8be7285f9ca898ee63d3718a7c4603bcb9a24537b34a41a6c0eee4cc609b014d3f4fb928aa7e3fa7a4f97dcef5c0e526b650284ffeda82f603ed9ea1eb6627d29d8bcd6c7e6fe128b1c4463b2cfe50c0ff9a46090635dde4b4d4a984e5a91f7486856cd2bf85088fa4d27b219628be8cdba7004d00985a73fb5b0b4b0f96844e73a8ff7884bdee1a0d6e62decfeebfb56351c135e6580fd61ea806ee5592fe4ffba5c73b8a4a04d44aa52645320cb73fe0c5f14a971d3b3f64c85f5ebaab5e1a061f5186050230286331048e43368e45cfc88e8f4d0d3b1b86b64d5394bc68c2b754389b3c18a45c1edb0496dd88cb3113bbdf1a0f127eb8cd52caf8da95b83d0decad3775b2f2e43776d0d32d447cdd0b267b32775e3473f51a233f8c91a4c07ad669da1844f3d9554f399d43ca1eda29c5c761b3936f845f0c4d1c6a56b8b34b5ab3291e06cd86de6116fc3236a11343d6f4ad02199717054ac1f15471c5a2b8efe67bd4bea33c0ca36e2c4209026849de21c1da1057f353cc824947d75119e4501b98cb9e621d0644e3f4a75353093557afcee7da41ad368fe1cbb426922772b9b262a861fbce9ae86d6e8c5a8de6a1e8f03456c0a354277a2f3ff46a62b6d6cdee4febf23e2350f94b47a05a4d0e7da37a2e97b899d92ca1f3bd1cded5588593e8bb99b9dce0731fa1174de14b63be2bf7e424f870551f213fab437aac092c2e9798959fa3616465e2b36fd49cc9af902d47debec02558c036ed991f1a3895b37cd70f3c405cca362c885542fd976e73be4cf7580a0c4d5a9527c77c189573e3be07ed15472f6b012939abb5be9f3e8a5b720307fb2dbca48b35d121702cfb6b3690559b08fbeb77d53d37582d7f44fe269ac51665632bf070cfc7445741b70306cb3f19b7fbecd19a78092dfd086a0da019734d95660ba4e5ce5bcf25f09403c32e3ec902f3717cca0eca05e791c2b8c2b8988645afa2446d5218abce136c0dbbafb95e4f4727a29cc567b3f73d5dbc1aeee746653a7f5c445add24a9c1b67d1bfeec85d2a6478e80c3acdb9439aa46c8cf14a98ffa89790ef7a94b3146088566812e28ccbafb466772b7fbb98dcf1e792eb6d0de0829c3c49c5ecdeea3e80017324a0fe724565c4e7a242764e9012442cae44b57c7121889c044be05b5eca70efb649bb528e751f072af93ae2c5053fdce196cce158136f904cf64f2cb8becc2d024f5ec32a38d78b87a4dfe7c53769dadef890efd160eb662cedb18a756aed83edfb9efbbb3648eb399e61f80077e64b95eae9d17083aed05cfc2e148621e36be1f41d373c721a11804fce269c688b0c647d6e1083e336d1f7f90a7a080a83397773cc351531070af5c1a1418f28dce95c01052a314a9ebe39cb9cddb8e7855e58c4a636b7f6250ecad312ede18668130ab897dfc9adda67502444c03d92e330935295a35ea3e0306f25ca971300f782ae2f6e79a513732d22ef9b9bc41d17df3352a855cdd19b18f5abd6e6420f4f42f01750a64f6acdb6b46622fafebe3e913c64a1a6a59f980e97deae0dc83c126533f0630d7a28f21c3e0e38b32f3d5f1d44927fc34ed5c9ddb5be8eb936dbdcd327b63ea69d86c2da15cb834a18ee51a44f2da7b11d79486942fd04eade92fe5d93342970ca4cc73861b15facf97e9c53c15488c5630b17b9364c58652cfa6de0918327498ba8d6120d3be9139c51a6e9017525772397529ddd4fd1905614fd1cc7f1370a577ad10ec9ea742f9aedc9fee42c3df38f4b35ccb1cf8590eaf770b3f74af21f5119ac238e82e92c83321b06f106530abbbd321c3e1dc948accdc21a586ff37253ad1d0c5bfb51541f876be1b6e4f490046204b9edfe9a9721b9019a495d1efed10d4570f4c75ac56aa862f738b46cfe8899f6d92e862611b35be8931a2460dc646ed332b3046baf48613bbb543f4abda22d3d62a484665ba5bbf8fec1bb199b430a6e96cfad417a1644cc5f7f640004836c60f15a174eb7eb1750a71a141549f393c7d88b8729a33f841f7f8f2bd03dccaaa825f2e29105f6b4c11ac8e06bb3be9dfdecce66294a0be9dbc5f40123644fcac59ed0c968eb62fb14d111e900ad1c038f17d5471ab088f704de7db35753f818f55669a76e621b29d975253d177791e1434644a81b2b8bc4c8e147961b4f1b7f3e225571fecb10906957791b27d35a89e3ce84c91a2dc60aee460d8f41eb7b5e171516ef34d8c7dbbc8122cdeffa51b5a393d2cae7f69826d342d4d81b58ca7ddb0e688a15b39a00ef1aed5db337d1ab87e86f835663a4968c8bf5afd7cf80549a33b4025b8ea04ff3d9eac2b8ffd1155a504230103a68bd8b3c416a10d76cee236442a68393896587bc66c01a5f7f411325578d023d7619a89d0bcbbacae99b925fb72994e1ef4240cddad2294a56bec6d6243b95b04345c215bd48a3aa89786ba39b4d2f5015d8bd038c32a7b0eb02a4eb5a640371d9b4af540eb99a1e26547cc214da21e9538754a802972411a0bf416707b95457d0b77daac9bdf27a82b9aa7992ad1d3815f9a56a746eefa6f7e1913b6e3e859b2cc7797adcae825b7aad17c11e66597042c327a6473489a9664c5ce0ff8b1ecfb691daa0bd50c17f4597826553686bc2ee08eaca8dd6f77c626691699141a698e5b517e02130587ee503c7b5f638cbf32166b0d4ebe9222b6c9d50fb3db9d1ab060c31aabeef52cd51e5cf485eecc741e37a47c4996068f1d4b25f182b9d7bee4bec5cb070d3cea2f9762a41bb8d9ec5896ebcb2b17ca82f29bcce456412d8ed531afda50d259fcb7794216b6a9a873b6c3c4493c0c6d3e6a4f81f3b40dcc745a4e2383c678c472b1d5bf02002992bfe893a5bc96824039da1ee3cf8593e7d616d62f6e3c3e2c4e0cc58d5445998cf5b1c91c2468b2571b118709668efbbe72911f1bfa96b97c32f71cd7071f4c729e88631a89b53dd4bae6ef9c4ed082916e267479195599e9871b26b92c6885ded29f990070fddc4d8535088ddc70d6e83f797b6fa2260a92602eb90800000001cb7394f0c90fb5913b2f8d8d24c8f1056920e1facbe643dd49d8983b277da7282a986c28d5468aed9a4730579a20346d35f78b6bd2cacb4b9237fbfb0b7a2314105ff3b074a0e340b904e715e99c501e1435c15eaa262893c2883c90f26d2ff91792d46e4d867b62570e0c1e4739b8ac4fff8f778960de1ae40d4c85c51e1c47040bb2caeaf0c71dbb67c30715b8c14d6921831d7678522eeed29444df421ee206ca3be20d1b5fd2d2baf832f08efef590290eea77f8f3ed00b39841421b61f1c0d01def54bec0348be2216a8dad60838f3ad3595a744edeb6202dbcbd9c73a126a79cbefa43c7db0493103c2aa8fecb5cde1773ad0cdd03f5b0cfb0270642a96a9e14d116e9140501df48cdbf725611b398eb2b9e93f8da49e601099e0b2e880a955205000000dd74ae9d664a1f2e932493b61634ab53a1e2f3bf56add0a7f09c16853814b03a4212b9a0119420948da26bb171b288a66a2f0a4063754c2910512aa1cead69b94b498b5d4c44ce0a4aaa7855ee1a3b7ca738756a00a435062ccb86a40cc01f666d372f323e087ef5db2bc2d17ed1f72db14c52ca6723ce92ada6ff0c4f498d42d4218a9f799a216facb7377a1532e0755b894bfc0ee99a4072ac54ee5727846631574f348bf650e7d54b0ef3a1b5cc8233e660a2615bb7401f6c23e08ff0ddb488b9d504fc42508449b8fdd70afb387016e8c9206482c334f37d26fa3bdb6063f8147db9363e22c4b43b89ba0f68d06646fc1eb74fec0be4f59a17b274e0db67b2c0398250da219c9caf7e0f6cb1f828b6f89a67cacfd0fe0132bd94261410f8d8d7eb819bc783b8e66a1786285e1e429b71ccc22f7f4c216001375c7a816719e29abc98652b6752923132256cb5f047", 0xf0d}, {&(0x7f0000002440)="695c2769ae3b858d658ad07815e2166a6e87fdc9deb33bfb70854bac80fbca51c07e6b84fbe0506218b5a5764fd30823019a062c15f00618895b", 0x3a}], 0x3}, 0x4004000) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000001a00010000000000000000000a8000000000000000000000080001"], 0x24}}, 0x0) 291.159567ms ago: executing program 6 (id=2612): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f00000000c0), &(0x7f0000000300)=0xe) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001a0001000000000014000200"/32], 0x30}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[], 0x32600) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r5 = accept4$x25(r4, 0x0, &(0x7f0000000340), 0x80800) ioctl$SIOCX25SCUDMATCHLEN(r5, 0x89e7, &(0x7f0000000380)={0x7f}) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_netprio_ifpriomap(r6, &(0x7f0000000040), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r7, &(0x7f0000000200)=ANY=[@ANYBLOB='gretap0 8'], 0xa) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) bpf$BPF_PROG_TEST_RUN(0xe, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x508d, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$nl_route(r4, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)=@bridge_newneigh={0x6c, 0x1c, 0x200, 0x70bd2a, 0x25dfdbff, {0x7, 0x0, 0x0, r1, 0x8, 0x4, 0x8}, [@NDA_DST_IPV4={0x8, 0x1, @local}, @NDA_LLADDR={0xa, 0x2, @local}, @NDA_PROBES={0x8, 0x4, 0x2}, @NDA_NH_ID={0x8, 0xd, 0xc9b}, @NDA_PROBES={0x8, 0x4, 0xfffffffc}, @NDA_VLAN={0x6, 0x5, 0x4}, @NDA_PROBES={0x8, 0x4, 0x10}, @NDA_CACHEINFO={0x14, 0x3, {0x943c, 0x4, 0x4830b118, 0x9}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40004}, 0x4000000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x6, 0xf, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x9}, {}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', r1, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) 256.181661ms ago: executing program 2 (id=2613): r0 = socket$inet_tcp(0x2, 0x1, 0x0) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x69, 0x10, 0x9c}, [@ldst={0x4}]}, &(0x7f0000000080)='GPL\x00', 0x2, 0xc5, &(0x7f0000000180)=""/197, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x3d5b7d11}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r3, 0x1}, 0x1c}}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000001c0)={0x2c, r6, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r7}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1711}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0xd}]]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) r8 = syz_genetlink_get_family_id$gtp(&(0x7f0000000100), 0xffffffffffffffff) r9 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000280)='ns/time_for_children\x00') ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000002c0)={'vxcan0\x00', 0x0}) sendmsg$GTP_CMD_GETPDP(r2, &(0x7f0000000380)={&(0x7f0000000000), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x40, r8, 0x300, 0x70bd29, 0x25dfdbfb, {}, [@GTPA_TID={0xc, 0x3, 0x2}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_NET_NS_FD={0x8, 0x7, r9}, @GTPA_LINK={0x8, 0x1, r10}, @GTPA_FLOW={0x6, 0x6, 0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x10094) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x5, 0xffffffff, 0x3, 0x0, 0x144, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x48) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000006c0), r11) sendmsg$IEEE802154_LLSEC_SETPARAMS(r4, &(0x7f0000000780)={0x0, 0xfffffffffffffcb7, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r12, 0x1, 0x0, 0x0, {0x22}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x23, @remote, 0x23}, 0x1c) r13 = socket$packet(0x11, 0x3, 0x300) r14 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000400)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r14, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r15, {0x0, 0xffe1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x7, 0xe}}]}}]}, 0x48}}, 0xc840) sendmsg$nl_route_sched(r14, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000800)=@newtfilter={0x38, 0x2c, 0xd2b, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, r15, {0x2}, {}, {0x7, 0xfff1}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x80000000}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4084}, 0x0) setsockopt$packet_fanout(r13, 0x107, 0x12, &(0x7f0000000200)={0xfff7, 0x2}, 0x4) syz_emit_ethernet(0x3e, &(0x7f0000000180)=ANY=[], 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, &(0x7f0000000040)) 92.602244ms ago: executing program 6 (id=2614): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="5c0000000206010100000000000000000000000005000100070000000900020073797a32000000000500050000000000050004000000000014000780080008400000009008000640000000030d0003006c6973743a736574"], 0x5c}}, 0x0) ioctl$sock_ifreq(r0, 0x8990, &(0x7f0000000180)={'bond0\x00', @ifru_names='lo\x00'}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r0, 0x4048587b, &(0x7f0000000c80)={{r0, &(0x7f0000000000)='[\x00', 0x151100, &(0x7f00000000c0)={@align=0x6, {0x7, 0x2, 0x3c8d, 0x7ff}}, 0x7, &(0x7f0000000100), &(0x7f00000001c0)=0x6}, 0xa, &(0x7f0000000b40)=[{0x2, 0x5, &(0x7f0000000200)='\x00', &(0x7f0000000240)="8a0152d6a80436696bd9", 0xa, 0x30}, {0x1, 0x401, &(0x7f0000000280)='syz0\x00', &(0x7f00000002c0)="b129ac03992653050579fed0192f5fdede5953fb5e", 0x15}, {0x0, 0xb27, &(0x7f0000000300)='syz0\x00', &(0x7f0000000340)="93f3c97af6054a726a2f6908736a85c1f6e4de6f31bb2f60116542e45fe3f3ec640fb7f20b9b691a24b10e81151cd6cf76b8ee0aa79e5b88a3ca049267a076560cca99e168c36a3f87d0f714740d369645afc267a9c0fba17369141ea64b0b947f89ceca8ff18577008aa5c516a7b477", 0x70, 0x20}, {0x3, 0x9, &(0x7f00000003c0)='-{*\x00', &(0x7f0000000400)="8c5d16063a81823defc30f848d57e2575609dbb1dd157fe305a0a61244914b890c574efe35840a5bbea6d0a431d9e22d01e6407cf12f824ddfa06b6096498e50873bc6eb570feac97fc1d07a5a1ceaf2a0dfa4c5e15194ab089dd6afb8eccd5c2f84b9885824131f6485188730103f2d41520f8e1b529455a13f587890f65657a0fed891d65300a0b56512e94450c002428ff0b84eef040f96", 0x99, 0x10}, {0x3, 0x1000, &(0x7f00000004c0)='@,\x00', &(0x7f0000000500)="16c2643226f3146e91353dbc6128f10704975df36543087164ca9eda4793f62b5999ac8c318bb43ce61ae225494b500815b27b8b316e8d8aebe2ab6a2c37e1c11fbcf19f4ea7b404e1f549a8dcbcbba3c9efa6fca4c334b55208394f700fd14ac21503f4438ed8819c42d242d1c687a0b7b6a91d122418d930688d426c9259b9da37946928caa53f703d27ece34597fa69072f0625275a5b5582b5ac470962329c975afb6b402f0d0ec0508554d94747b65490f75c2cc24dd5aa9a2a25aed1b8ea190897aba62cd5e884407f38cc546164c356cabe0c18b448df60e9ca7722d4af98", 0xe2, 0x10}, {0x3, 0x3, &(0x7f0000000600)='lo\x00', &(0x7f0000000640)="4d2d8d9360502b4ee64855457b6b6e6a7a1531c9ce764617a2e6c35c7865464a8817076d6999e57b619984face1154f9afb573a0cdd31245cc55ec103709de4760ebc6a128fe41093c38b518cda586279a89b13bfa63c187030658790dc7993eaa3057cfe587b1485213c86d62d00fbf0f03bb86491dad5da6a517fa847cacb53e2f4cebb161798edc5a0729858039", 0x8f, 0x4}, {0x1, 0x40, &(0x7f0000000700)='lo\x00', &(0x7f0000000740)="8371bbe4b669e84654a1c17b2e6e3259fe1b42095e0f9db41fd449be7bc5bd65f117a78f2f8b245c36389598033e07df2034a78273ac063cf475c73d7b4b5eafcab2416578484691e711366a2a6caefed630e725906279e49a622ceb6c936b39eedf025b015e7276bb7022b265fce67960bc7faf076fa17a599acff48201454208fcb79926300116f0ce0685a201a8fec4c13ae354f36fd8fa6ec7b90c98fac461d016a13585a3dc14479f0406de9aec20734b630c7caea68967066cf98579ce2e15a7b0", 0xc4, 0x10}, {0x3, 0x3ff, &(0x7f0000000840)='lo\x00', &(0x7f0000000880)="11ad38697a1567cdd6aac5dfe570baa410b2a79c2387fb10415adccbe129355dfcfdf65230d7080d2b4e779f5a32d8ed504684afe4c13b924d8b51dba8d2b2b71418d897fd61003734e86e17d042da06534ab9b1dd6f706d63a039db2c873ed15e9d92e2bbbc9cd6b79586fc73b24ec0ee365ec585c231b48378f088c2fe113f95ce6d1b79a22b897433dba34814c706b3cc4f75b3d290148ae22d80bf59bb82f145752158eac9", 0xa7, 0x20}, {0x1, 0x80000000, &(0x7f0000000940)='bond0\x00', &(0x7f0000000980)="0529a30885240ae0ca299ce626de2dae325aab68f629d6ed329371fa3c4bc232ac61c22a11f8d180812a4e4844752d4997ed429581248976a45a862b26f11d4a73bf55e5711e4fe4083c213559366a319540e236ba85590e242f1b3e660fe0e7fd94fe3d5f2b374d314e5e815fd2c85de2235b36fdf63aa826aa00bd90be74a08a68c795a8fc1055876b6a0b5840ab32f7f3a3572f64c95607e4e81261b0c3c5c91ef9c75b3f63e355ca41459d114dc143", 0xb1, 0x8}, {0x1, 0x5, &(0x7f0000000a40)='syz0\x00', &(0x7f0000000a80)="06ef826965cdf8dfc04cf68dd60026771ee688544932d8de944330036367c8a44aff9b4bd08e7c93f3c5bc0c55da87fc4e304a2ec1c18007b47cc3edaccc33197dd6a425b77f4c551fb946d31c137f0d3d6bb210767435628ac529392e0ca4d167d819dc3ce9180dd2b7bbfac9a24edb1bc5e1ed5482c76c5744fc0e537a9803326387a92b774d594aec60d5723ee3984f5438d85c7c020083056fd8a0b6391cf67d5a895fedbe1b3cb2b273ed63ac3b87a5659730d2ab1c8c", 0xb9, 0x10}]}) setsockopt$MRT6_INIT(r3, 0x29, 0xc8, &(0x7f0000000d00), 0x4) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x68, 0x2, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0x2}}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x20}}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x68}, 0x1, 0x0, 0x0, 0x80}, 0x8000) 17.537412ms ago: executing program 2 (id=2615): setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e01, 0x5, @mcast1, 0x4}}, 0x0, 0x0, 0x3d, 0x0, "bb02a3c364ca41d6357e544524474804000b42a21d7214bf92494925208a0e2f964e0000c534a6324d6193fcf19b2df3ee818afaa4ff1f56da4dc46dc2767bbe00"}, 0x6c) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) socket(0x14, 0xa, 0x4) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000002700090025bd7000ffd3008001000000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x4000811}, 0x4000) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x50) r1 = socket$kcm(0x23, 0x5, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@cgroup, 0x5, 0x0, 0x1, &(0x7f00000000c0), 0x31, 0x0, 0x0, 0x0, 0x0}, 0x40) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c00000044000900000092000000000305000000080002"], 0x1c}, 0x1, 0x0, 0x0, 0xc1}, 0x4000040) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000240)=0x9, 0x4) listen(r1, 0x800) r4 = socket$kcm(0x2, 0xa, 0x2) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv4_newrule={0x24, 0x20, 0x1, 0x0, 0x0, {}, [@FRA_GENERIC_POLICY=@FRA_IP_PROTO={0x5, 0x19, 0x3c}]}, 0x24}}, 0x48850) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f0000000380)=ANY=[@ANYBLOB="1c0000f500000000000000862dfdff000000"], 0x78) unshare(0x22020400) r6 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) r7 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100), 0x4) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x34, 0x10, 0x801, 0x41, 0x25dfdbf7, {0x0, 0x0, 0x0, 0x0, 0x2202e}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_EXPECTED_FD={0x8, 0x8, r7}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20048050}, 0x40014) 0s ago: executing program 6 (id=2616): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e20, @private=0xa010103}]}, &(0x7f0000000380)=0x10) setsockopt(r0, 0x84, 0x7f, &(0x7f0000000140)="010000000980ffff", 0x8) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000080)=0x2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1, 0x1}, &(0x7f00000000c0)=0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b0af8ff00000000bda100000000000026010000f8ffffffb70200000800755d000000850000000800000018010000202070250000000000202020dd1af5ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xfffffffffffffdbc, &(0x7f0000000080)=[{&(0x7f0000000040)="180000006a00f96b1324", 0x18}], 0x1}, 0x4080) r4 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1f) bind$pptp(r4, &(0x7f00000018c0)={0x18, 0x2, {0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1e) r5 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000005280), 0x1, 0x0) poll(&(0x7f00000052c0)=[{r5, 0x24}], 0x1, 0x9) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) syz_emit_ethernet(0x2e, &(0x7f0000000000)={@link_local, @dev, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x2, 0x0, @initdev={0xac, 0x1e, 0xff, 0x0}, @multicast1}, {0x11, 0x0, 0x0, @private=0xa010100, "fd0c0000"}}}}}, 0x0) r7 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000080)=ANY=[@ANYBLOB="18030000000000000000000000000000851000000600000018100000", @ANYRES32=r7, @ANYBLOB="00000000000000005f00000000000000180000001800000000000000000000009500000000000000640300000000000095"], &(0x7f0000001300)='GPL\x00'}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020200600000000000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000073000000180100002020642500000000002020207b1ae8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x1}, 0x94) socket$kcm(0x10, 0x2, 0x4) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='io.stat\x00', 0x26e1, 0x0) close(r8) ioctl$BTRFS_IOC_DEFRAG(r2, 0x50009402, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000006c0)=ANY=[@ANYBLOB="3400000018000100000000000000000002000000100016800c00018008000100", @ANYRES32, @ANYBLOB], 0x34}}, 0x0) r10 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x8901, 0x0) ioctl$TUNSETOFFLOAD(r10, 0xc004743e, 0x110c23003f) write$cgroup_devices(r8, &(0x7f0000000080)=ANY=[@ANYBLOB="80fd", @ANYRES64=r8], 0xa) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000000000000020000002c0004802800018007000100637400001c00028005000300000000000800014000000001080002400000000c0900010073797a30000000000900020073797a320000000014000000110001"], 0x80}}, 0x0) kernel console output (not intermixed with test programs): set [1, 1] type 2 family 0 port 20004 - 0 [ 147.121261][ T8777] netlink: 'syz.0.807': attribute type 1 has an invalid length. [ 147.130702][ T8777] netlink: 'syz.0.807': attribute type 2 has an invalid length. [ 147.144246][ T8777] netlink: 'syz.0.807': attribute type 1 has an invalid length. [ 147.161132][ T8777] netlink: 'syz.0.807': attribute type 3 has an invalid length. [ 147.298768][ T8788] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 147.307409][ T8788] IPv6: NLM_F_CREATE should be set when creating new route [ 147.314930][ T8788] IPv6: NLM_F_CREATE should be set when creating new route [ 147.806401][ T8816] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 147.819002][ T8816] xt_SECMARK: invalid mode: 9 [ 147.866809][ T8807] netlink: 'syz.2.817': attribute type 1 has an invalid length. [ 148.526106][ T8855] syzkaller0: entered promiscuous mode [ 148.532335][ T8855] syzkaller0: entered allmulticast mode [ 148.675514][ T8864] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 148.781564][ T8867] openvswitch: netlink: Unknown nsh attribute 0 [ 148.951977][ T8882] __nla_validate_parse: 89 callbacks suppressed [ 148.951994][ T8882] netlink: 24 bytes leftover after parsing attributes in process `syz.2.840'. [ 149.216391][ T8894] xt_CT: You must specify a L4 protocol and not use inversions on it [ 149.251078][ T8896] netlink: 4 bytes leftover after parsing attributes in process `syz.4.843'. [ 149.353357][ T8907] netlink: 4 bytes leftover after parsing attributes in process `syz.4.843'. [ 149.933418][ T8926] validate_nla: 3 callbacks suppressed [ 149.933436][ T8926] netlink: 'syz.2.851': attribute type 12 has an invalid length. [ 150.078932][ T8924] syzkaller0: entered promiscuous mode [ 150.103473][ T8924] syzkaller0: entered allmulticast mode [ 152.302968][ T8945] sit3: entered promiscuous mode [ 152.309325][ T8945] sit3: entered allmulticast mode [ 152.614088][ T8984] netlink: 8 bytes leftover after parsing attributes in process `syz.2.865'. [ 152.639431][ T8967] 8021q: adding VLAN 0 to HW filter on device bond1 [ 152.660875][ T8967] 8021q: adding VLAN 0 to HW filter on device bond2 [ 152.751646][ T8967] 8021q: adding VLAN 0 to HW filter on device bond3 [ 152.838697][ T8993] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 152.965948][ T9000] sctp: [Deprecated]: syz.3.870 (pid 9000) Use of struct sctp_assoc_value in delayed_ack socket option. [ 152.965948][ T9000] Use struct sctp_sack_info instead [ 152.998710][ T1101] bond4: (slave veth3): link status definitely up, 10000 Mbps full duplex [ 153.033631][ T1101] bond4: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 153.093959][ T1101] bond4: active interface up! [ 153.152718][ T9008] netlink: 8 bytes leftover after parsing attributes in process `syz.1.872'. [ 153.166557][ T9011] netlink: 4 bytes leftover after parsing attributes in process `syz.0.869'. [ 153.291276][ T9011] team0 (unregistering): Port device team_slave_0 removed [ 153.303993][ T9011] team0 (unregistering): Port device team_slave_1 removed [ 153.408212][ T9027] netlink: 20 bytes leftover after parsing attributes in process `syz.3.876'. [ 153.442639][ T9027] netlink: 'syz.3.876': attribute type 1 has an invalid length. [ 153.453132][ T5761] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 153.481816][ T9032] netlink: 27 bytes leftover after parsing attributes in process `syz.1.877'. [ 153.502875][ T9027] 8021q: adding VLAN 0 to HW filter on device bond8 [ 153.525102][ T9035] netlink: 'syz.2.878': attribute type 29 has an invalid length. [ 153.533089][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 153.542389][ T9035] netlink: 8 bytes leftover after parsing attributes in process `syz.2.878'. [ 153.553651][ T9027] netlink: 'syz.3.876': attribute type 12 has an invalid length. [ 153.575457][ T9027] netlink: zone id is out of range [ 153.593203][ T9027] netlink: zone id is out of range [ 153.600890][ T9027] netlink: zone id is out of range [ 153.617195][ T9027] netlink: zone id is out of range [ 153.622645][ T9027] netlink: zone id is out of range [ 153.629980][ T9027] netlink: zone id is out of range [ 153.635427][ T9027] netlink: zone id is out of range [ 153.743961][ T8997] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 154.033618][ T9062] netlink: 44 bytes leftover after parsing attributes in process `syz.1.886'. [ 154.194766][ T9073] netlink: 20 bytes leftover after parsing attributes in process `syz.4.890'. [ 154.221475][ T9075] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 154.308014][ T9079] netlink: 36 bytes leftover after parsing attributes in process `syz.2.893'. [ 154.472775][ T9085] netlink: 'syz.2.895': attribute type 83 has an invalid length. [ 154.480853][ T9088] netlink: 'syz.2.895': attribute type 83 has an invalid length. [ 154.859665][ T9094] netlink: 'syz.3.898': attribute type 11 has an invalid length. [ 155.025361][ T9100] netlink: 'syz.1.901': attribute type 11 has an invalid length. [ 155.203080][ T9110] x_tables: duplicate underflow at hook 2 [ 155.298892][ T9114] netlink: 4 bytes leftover after parsing attributes in process `syz.3.906'. [ 155.416081][ T9120] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 155.480064][ T9120] xt_HMARK: spi-set and port-set can't be combined [ 155.766732][ T9142] bridge0: port 2(bridge_slave_1) entered disabled state [ 155.774172][ T9142] bridge0: port 1(bridge_slave_0) entered disabled state [ 155.792415][ T9143] tipc: Enabled bearer , priority 0 [ 155.801506][ T9144] syzkaller0: entered promiscuous mode [ 155.812092][ T9144] syzkaller0: entered allmulticast mode [ 155.881194][ T9144] tipc: Resetting bearer [ 155.904511][ T9144] tipc: Disabling bearer [ 155.977214][ T9153] netlink: 4 bytes leftover after parsing attributes in process `syz.0.918'. [ 156.128419][ T9159] workqueue: Failed to create a rescuer kthread for wq "nfc4_nci_rx_wq": -EINTR [ 156.416185][ T9184] netlink: 36 bytes leftover after parsing attributes in process `syz.0.926'. [ 156.532372][ T9195] netlink: 28 bytes leftover after parsing attributes in process `syz.4.927'. [ 156.712470][ T9202] bridge0: port 2(bridge_slave_1) entered disabled state [ 156.720348][ T9202] bridge0: port 1(bridge_slave_0) entered disabled state [ 156.821211][ T9209] netlink: 8 bytes leftover after parsing attributes in process `syz.0.932'. [ 156.890309][ T9210] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 157.029300][ T9214] netlink: 4 bytes leftover after parsing attributes in process `syz.2.934'. [ 157.968624][ T9259] netlink: 12 bytes leftover after parsing attributes in process `syz.3.946'. [ 158.008970][ T9261] syzkaller1: entered promiscuous mode [ 158.017366][ T9261] syzkaller1: entered allmulticast mode [ 158.169860][ T9262] vcan0 (unregistering): left allmulticast mode [ 158.647203][ T5751] net_ratelimit: 57 callbacks suppressed [ 158.647222][ T5751] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 158.726969][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 159.687599][ T5761] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 159.766791][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 160.364553][ T9242] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 160.383735][ T9261] netlink: 'syz.0.947': attribute type 11 has an invalid length. [ 160.396771][ T9261] netlink: 'syz.0.947': attribute type 11 has an invalid length. [ 160.412567][ T9261] __nla_validate_parse: 6 callbacks suppressed [ 160.412582][ T9261] netlink: 224 bytes leftover after parsing attributes in process `syz.0.947'. [ 160.492160][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 160.524341][ T9296] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 160.729090][ T5761] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 160.791941][ T9311] netlink: 20 bytes leftover after parsing attributes in process `syz.4.962'. [ 160.806589][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 160.844380][ T9305] tipc: Started in network mode [ 160.856973][ T9305] tipc: Node identity ca699b0a43c4, cluster identity 4711 [ 160.874868][ T9305] tipc: Enabled bearer , priority 0 [ 160.932175][ T9305] syzkaller0: entered promiscuous mode [ 160.938854][ T9305] syzkaller0: entered allmulticast mode [ 160.946412][ T9305] tipc: Resetting bearer [ 160.954428][ T9311] tunl0: entered promiscuous mode [ 160.963132][ T9311] netlink: 'syz.4.962': attribute type 3 has an invalid length. [ 160.973521][ T9311] netlink: 9 bytes leftover after parsing attributes in process `syz.4.962'. [ 160.988119][ T9303] tipc: Resetting bearer [ 161.009320][ T9321] xt_hashlimit: overflow, rate too high: 0 [ 161.768604][ T5751] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 161.841565][ T9336] openvswitch: netlink: Flow actions attr not present in new flow. [ 161.917457][ T9337] netlink: 'syz.0.968': attribute type 4 has an invalid length. [ 161.971212][ T9338] netlink: 'syz.0.968': attribute type 4 has an invalid length. [ 162.730777][ T9303] tipc: Disabling bearer [ 162.740948][ T9321] netlink: 156 bytes leftover after parsing attributes in process `syz.3.965'. [ 162.750493][ T9321] netlink: 156 bytes leftover after parsing attributes in process `syz.3.965'. [ 162.809278][ T5751] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 162.868540][ T5637] tipc: Node number set to 2309856010 [ 162.886911][ T5627] Bluetooth: hci4: command 0x0405 tx timeout [ 163.058934][ T9359] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 163.096627][ T9359] batadv_slave_1: entered promiscuous mode [ 163.186601][ T9362] xt_CT: You must specify a L4 protocol and not use inversions on it [ 163.358907][ T9365] bond10: Removing last arp target with arp_interval on [ 163.685450][ T9389] netlink: 8 bytes leftover after parsing attributes in process `syz.3.983'. [ 163.744121][ T9390] netlink: 108 bytes leftover after parsing attributes in process `syz.4.982'. [ 163.772781][ T9390] netlink: 108 bytes leftover after parsing attributes in process `syz.4.982'. [ 163.783196][ T9390] netlink: 84 bytes leftover after parsing attributes in process `syz.4.982'. [ 163.805776][ T9396] netlink: 4 bytes leftover after parsing attributes in process `syz.3.983'. [ 163.848387][ T5637] net_ratelimit: 2 callbacks suppressed [ 163.849089][ T5637] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 163.945895][ T9396] team0 (unregistering): Port device team_slave_0 removed [ 164.001016][ T9396] team0 (unregistering): Port device team_slave_1 removed [ 164.057334][ T9388] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 164.576696][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 164.594206][ T9438] syz_tun: entered allmulticast mode [ 164.748414][ T9437] syz_tun: left allmulticast mode [ 164.889215][ T5761] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 165.039501][ T29] audit: type=1804 audit(1779527976.785:2): pid=9456 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.1001" name="/newroot/196/cgroup.controllers" dev="tmpfs" ino=1013 res=1 errno=0 [ 165.120915][ T29] audit: type=1800 audit(1779527976.825:3): pid=9456 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1001" name="cgroup.controllers" dev="tmpfs" ino=1013 res=0 errno=0 [ 165.402783][ T9464] syzkaller0: entered promiscuous mode [ 165.410751][ T9464] syzkaller0: entered allmulticast mode [ 165.606648][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 165.927930][ T5761] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 166.153014][ T9521] __nla_validate_parse: 3 callbacks suppressed [ 166.153032][ T9521] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1022'. [ 166.184170][ T9511] netlink: 576 bytes leftover after parsing attributes in process `syz.1.1020'. [ 166.479322][ T9535] netlink: 'syz.3.1026': attribute type 1 has an invalid length. [ 166.503008][ T9538] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1028'. [ 166.506010][ T9540] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1027'. [ 166.522794][ T9535] netlink: 'syz.3.1026': attribute type 7 has an invalid length. [ 166.547461][ T9535] netlink: 'syz.3.1026': attribute type 8 has an invalid length. [ 166.568518][ T9535] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1026'. [ 166.571396][ T993] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 166.614209][ T9541] gtp0: entered promiscuous mode [ 166.627709][ T9541] gtp0: entered allmulticast mode [ 166.648057][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 166.911432][ T9564] netlink: 666 bytes leftover after parsing attributes in process `syz.1.1035'. [ 166.968310][ T5761] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 166.984383][ T9564] bridge0: port 2(bridge_slave_1) entered blocking state [ 166.991679][ T9564] bridge0: port 2(bridge_slave_1) entered forwarding state [ 166.999324][ T9564] bridge0: port 1(bridge_slave_0) entered blocking state [ 167.007051][ T9564] bridge0: port 1(bridge_slave_0) entered forwarding state [ 167.568609][ T9591] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1042'. [ 167.587883][ T9591] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1042'. [ 167.598618][ T9591] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1042'. [ 167.658560][ T9596] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1044'. [ 167.686582][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 167.845954][ T9601] tipc: Enabling of bearer rejected, failed to enable media [ 167.887612][ T1101] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 167.898980][ T1101] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 167.917697][ T993] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 167.957426][ T993] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 168.009309][ T5761] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 168.041757][ T9611] syz_tun: entered allmulticast mode [ 168.070741][ T9607] syz_tun: left allmulticast mode [ 168.282255][ T9623] netlink: 'syz.3.1055': attribute type 1 has an invalid length. [ 168.410069][ T10] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 168.462829][ T9623] bond11: entered promiscuous mode [ 168.474958][ T9638] IPv6: NLM_F_CREATE should be specified when creating new route [ 168.490492][ T9623] 8021q: adding VLAN 0 to HW filter on device bond11 [ 168.508277][ T9631] 8021q: adding VLAN 0 to HW filter on device bond11 [ 168.515953][ T9631] bond11: (slave ip6gre2): The slave device specified does not support setting the MAC address [ 168.527718][ T9631] bond11: (slave ip6gre2): Setting fail_over_mac to active for active-backup mode [ 168.541915][ T9631] bond11: (slave ip6gre2): making interface the new active one [ 168.549872][ T9631] ip6gre2: entered promiscuous mode [ 168.556344][ T9631] bond11: (slave ip6gre2): Enslaving as an active interface with an up link [ 168.673676][ T9639] bond5: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 168.709051][ T9639] bond5: (slave lo): Enslaving as an active interface with an up link [ 168.724375][ T9648] netlink: 'syz.0.1064': attribute type 1 has an invalid length. [ 168.798738][ T9637] bridge4: entered promiscuous mode [ 168.814887][ T9637] bridge4: entered allmulticast mode [ 168.871298][ T9653] netlink: 'syz.0.1067': attribute type 5 has an invalid length. [ 169.047360][ T24] net_ratelimit: 2 callbacks suppressed [ 169.047377][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 169.621770][ T993] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 169.766747][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 169.777338][ T9708] pim6reg1: entered promiscuous mode [ 169.801435][ T9708] pim6reg1: entered allmulticast mode [ 170.089341][ T5637] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 170.557546][ T9759] netlink: 'syz.2.1094': attribute type 1 has an invalid length. [ 170.816610][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 170.868558][ T9764] bond4: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 170.881195][ T9764] bond4: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 170.899374][ T9764] bond4: (slave ip6gre1): making interface the new active one [ 170.907826][ T9764] bond4: (slave ip6gre1): Enslaving as an active interface with an up link [ 170.933805][ T9769] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.941260][ T9769] bridge0: port 1(bridge_slave_0) entered disabled state [ 171.147119][ T5637] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 171.283527][ T9779] netlink: 'syz.3.1102': attribute type 4 has an invalid length. [ 171.372937][ T9782] ip6t_srh: unknown srh match flags 4000 [ 171.396965][ T9786] ip6t_srh: unknown srh match flags 4000 [ 171.420134][ T9782] __nla_validate_parse: 18 callbacks suppressed [ 171.420151][ T9782] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1104'. [ 171.455756][ T9786] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1104'. [ 171.495270][ T9787] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1104'. [ 171.528683][ T9790] netlink: 'syz.2.1107': attribute type 11 has an invalid length. [ 171.545152][ T9790] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1107'. [ 171.563053][ T9791] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1106'. [ 171.755992][ T9799] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1109'. [ 171.763781][ T9797] syzkaller1: entered promiscuous mode [ 171.776777][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 171.799824][ T9797] syzkaller1: entered allmulticast mode [ 171.846996][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 172.032470][ T9799] bridge3: port 1(veth0_to_bond) entered blocking state [ 172.047938][ T9814] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1114'. [ 172.065907][ T9799] bridge3: port 1(veth0_to_bond) entered disabled state [ 172.091178][ T9817] sctp: [Deprecated]: syz.1.1113 (pid 9817) Use of int in maxseg socket option. [ 172.091178][ T9817] Use struct sctp_assoc_value instead [ 172.095483][ T9799] veth0_to_bond: entered allmulticast mode [ 172.148319][ T9799] veth0_to_bond: entered promiscuous mode [ 172.155432][ T9799] bridge3: port 1(veth0_to_bond) entered blocking state [ 172.162621][ T9799] bridge3: port 1(veth0_to_bond) entered forwarding state [ 172.167080][ T5637] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 172.241111][ T9823] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 172.657456][ T5730] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 173.207460][ T5637] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 174.247063][ T5637] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 174.407209][ T8425] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 175.286982][ T5761] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 175.456709][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 175.687792][ T993] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 176.328025][ T5637] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 176.486688][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 177.370571][ T5637] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 177.526849][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 178.407028][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 179.447044][ T5637] net_ratelimit: 2 callbacks suppressed [ 179.447063][ T5637] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 179.526807][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 179.606689][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 180.487139][ T5637] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 180.646890][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 181.526901][ T5761] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 181.686679][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 181.766796][ T5730] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 182.567853][ T5637] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 182.727062][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 183.609512][ T5637] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 184.007724][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 184.648301][ T24] net_ratelimit: 1 callbacks suppressed [ 184.648320][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 184.806743][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 184.815600][ T5730] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 185.686947][ T5637] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 185.846680][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 186.737244][ T5637] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 186.886852][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 187.767633][ T5637] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 187.847841][ T993] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 187.926662][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 189.850184][ T5637] net_ratelimit: 2 callbacks suppressed [ 189.850198][ T5637] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 190.006897][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 190.887730][ T5751] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 190.895923][ T5730] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 191.046661][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 191.208644][ T5638] Bluetooth: hci1: command 0x0406 tx timeout [ 191.208994][ T5627] Bluetooth: hci0: command 0x0406 tx timeout [ 191.222988][ T5638] Bluetooth: hci2: command 0x0406 tx timeout [ 191.224535][ T50] Bluetooth: hci3: command 0x0406 tx timeout [ 191.927536][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 192.086744][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 192.967364][ T5637] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 193.126875][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 193.926916][ T5730] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 194.250293][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 194.253916][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.264310][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.048142][ T5751] net_ratelimit: 2 callbacks suppressed [ 195.048161][ T5751] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 195.216665][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 196.088348][ T5751] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 196.246845][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 196.968018][ T5730] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 197.129701][ T5751] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 197.286689][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 198.166887][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 198.326713][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 199.208413][ T5751] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 200.249854][ T24] net_ratelimit: 2 callbacks suppressed [ 200.249868][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 200.406625][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 201.292373][ T5751] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 201.446627][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 202.327930][ T5751] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 202.487076][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 203.046968][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 203.368516][ T5751] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 203.526659][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 204.411757][ T5637] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 205.448469][ T5751] net_ratelimit: 1 callbacks suppressed [ 205.448488][ T5751] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 205.616812][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 206.086894][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 206.488307][ T5751] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 206.646712][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 207.527851][ T5751] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 207.686679][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 208.568338][ T5751] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 208.726817][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 209.127198][ T993] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 210.648525][ T5751] net_ratelimit: 3 callbacks suppressed [ 210.648544][ T5751] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 210.806690][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 211.698804][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 211.846929][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 212.646763][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 212.726937][ T5751] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 212.886681][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 213.769879][ T5751] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 213.926718][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 214.817814][ T5637] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 215.686956][ T5730] net_ratelimit: 1 callbacks suppressed [ 215.686975][ T5730] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 215.847169][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 216.006789][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 216.889542][ T5751] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 217.046701][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 217.928003][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 218.086819][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 218.726871][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 218.966884][ T5637] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 219.126672][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 221.046844][ T24] net_ratelimit: 6 callbacks suppressed [ 221.046862][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 221.206869][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 222.089897][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 222.246687][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 222.406848][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 222.887115][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 223.129570][ T5637] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 223.286837][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 224.169001][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 224.221287][ T9842] netlink: 332 bytes leftover after parsing attributes in process `syz.2.1119'. [ 224.238257][ T9845] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 224.275775][ T9845] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 224.402452][ T9851] netlink: 'syz.4.1122': attribute type 1 has an invalid length. [ 224.532385][ T9866] x_tables: unsorted entry at hook 3 [ 224.609722][ T9872] netlink: 'syz.2.1127': attribute type 3 has an invalid length. [ 224.640563][ T9877] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1124'. [ 224.782219][ T9851] 8021q: adding VLAN 0 to HW filter on device bond2 [ 224.835446][ T9866] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 224.850047][ T9866] bond2: (slave batadv1): making interface the new active one [ 224.860343][ T9866] bond2: (slave batadv1): Enslaving as an active interface with an up link [ 224.897170][ T9889] IPv6: NLM_F_CREATE should be specified when creating new route [ 224.906899][ T9889] netlink: 'syz.0.1131': attribute type 1 has an invalid length. [ 225.086421][ T9899] netlink: 108 bytes leftover after parsing attributes in process `syz.0.1133'. [ 225.104278][ T9899] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1133'. [ 225.329402][ T9912] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1137'. [ 225.342064][ T9903] syzkaller1: entered promiscuous mode [ 225.355323][ T9915] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1138'. [ 225.362858][ T9903] syzkaller1: entered allmulticast mode [ 225.545685][ T9915] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1138'. [ 225.612412][ T9915] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1138'. [ 225.660657][ T9930] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1143'. [ 225.731835][ T9934] netlink: 'syz.3.1144': attribute type 23 has an invalid length. [ 225.900502][ T9938] netlink: 'syz.3.1147': attribute type 1 has an invalid length. [ 225.918206][ T9938] netlink: 'syz.3.1147': attribute type 1 has an invalid length. [ 226.249833][ T24] net_ratelimit: 4 callbacks suppressed [ 226.249850][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 226.406563][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 226.474661][ T9972] netlink: 212232 bytes leftover after parsing attributes in process `syz.0.1158'. [ 226.583855][ T9976] syzkaller0: entered promiscuous mode [ 226.597188][ T9976] syzkaller0: entered allmulticast mode [ 226.726165][ T9985] netlink: 'syz.4.1163': attribute type 39 has an invalid length. [ 226.794278][ T9985] syz_tun (unregistering): left allmulticast mode [ 226.810380][ T9985] syz_tun (unregistering): left promiscuous mode [ 226.822877][ T9985] bridge0: port 3(syz_tun) entered disabled state [ 227.120363][T10006] IPVS: sync thread started: state = MASTER, mcast_ifn = lo, syncid = 3, id = 0 [ 227.142875][T10004] netlink: 'syz.1.1167': attribute type 1 has an invalid length. [ 227.286870][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 227.534798][T10030] xt_CT: You must specify a L4 protocol and not use inversions on it [ 227.677597][T10038] netlink: 'syz.0.1171': attribute type 24 has an invalid length. [ 228.133893][T10067] netlink: 'syz.2.1180': attribute type 1 has an invalid length. [ 228.173351][ T8426] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 228.198514][T10067] 8021q: adding VLAN 0 to HW filter on device bond5 [ 228.259421][T10070] bond5: (slave veth0_to_bond): making interface the new active one [ 228.291477][T10070] bond5: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 228.327365][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 228.366374][T10067] 8021q: adding VLAN 0 to HW filter on device bond6 [ 228.378233][T10067] bond5: (slave bond6): Enslaving as an active interface with a down link [ 228.967058][ T993] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 229.206616][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 229.367259][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 229.548941][T10120] validate_nla: 52 callbacks suppressed [ 229.548961][T10120] netlink: 'syz.3.1195': attribute type 1 has an invalid length. [ 229.562771][T10116] bond0: entered promiscuous mode [ 229.562794][T10116] bond_slave_0: entered promiscuous mode [ 229.563004][T10116] bond_slave_1: entered promiscuous mode [ 229.565946][T10116] netdevsim netdevsim2 netdevsim1: entered promiscuous mode [ 229.659057][T10116] bond0: left promiscuous mode [ 229.683150][T10116] bond_slave_0: left promiscuous mode [ 229.707989][T10116] bond_slave_1: left promiscuous mode [ 229.719887][T10116] netdevsim netdevsim2 netdevsim1: left promiscuous mode [ 230.021183][T10120] 8021q: adding VLAN 0 to HW filter on device bond12 [ 230.102540][T10121] bond3: (slave veth0_to_bond): Releasing active interface [ 230.143147][T10121] veth0_to_bond: left allmulticast mode [ 230.186878][T10121] bond12: (slave veth0_to_bond): making interface the new active one [ 230.217601][T10121] bond12: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 230.246754][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 230.272337][T10154] __nla_validate_parse: 9 callbacks suppressed [ 230.272355][T10154] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1199'. [ 230.307798][T10124] bond12: entered promiscuous mode [ 230.327131][T10124] veth0_to_bond: entered promiscuous mode [ 230.344746][T10124] bond12: entered allmulticast mode [ 230.363881][T10124] veth0_to_bond: entered allmulticast mode [ 230.403051][T10130] macvlan5: entered promiscuous mode [ 230.407146][ T5751] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 230.421198][T10130] macvlan5: entered allmulticast mode [ 230.441108][T10130] 8021q: adding VLAN 0 to HW filter on device macvlan5 [ 230.451057][T10130] bond12: (slave macvlan5): the slave hw address is in use by the bond; giving it the hw address of veth0_to_bond [ 230.487522][T10137] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1198'. [ 231.003387][T10177] netlink: 'syz.1.1206': attribute type 63 has an invalid length. [ 231.044727][T10177] netlink: 'syz.1.1206': attribute type 63 has an invalid length. [ 231.286946][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 231.352448][T10189] syzkaller0: entered promiscuous mode [ 231.367477][T10189] syzkaller0: entered allmulticast mode [ 231.406440][T10191] netdevsim netdevsim3 : renamed from netdevsim0 [ 231.434715][T10189] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1210'. [ 231.444034][T10192] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1211'. [ 231.461215][ T5637] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 231.476088][T10189] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1210'. [ 231.605554][T10198] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 231.624817][T10201] netlink: 'syz.3.1214': attribute type 3 has an invalid length. [ 231.661309][T10201] netlink: 'syz.3.1214': attribute type 1 has an invalid length. [ 231.692828][T10201] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1214'. [ 231.989413][T10215] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1218'. [ 232.016721][ T5730] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 232.133784][T10215] veth5: entered allmulticast mode [ 232.164279][T10231] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1220'. [ 232.202968][ T5636] block nbd0: Receive control failed (result -32) [ 232.233513][T10231] netlink: 'syz.1.1220': attribute type 3 has an invalid length. [ 232.326695][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 232.445563][T10240] IPVS: set_ctl: invalid protocol: 58 172.20.20.48:20003 [ 232.488195][ T5637] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 232.609811][T10246] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1224'. [ 232.740979][T10253] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1226'. [ 232.851374][T10257] xt_hashlimit: size too large, truncated to 1048576 [ 232.878547][T10260] netlink: 'syz.0.1228': attribute type 1 has an invalid length. [ 232.970772][T10262] netlink: 'syz.3.1229': attribute type 1 has an invalid length. [ 232.988554][T10260] 8021q: adding VLAN 0 to HW filter on device bond2 [ 232.992569][T10262] netlink: 'syz.3.1229': attribute type 3 has an invalid length. [ 233.003452][T10262] netlink: 'syz.3.1229': attribute type 7 has an invalid length. [ 233.017207][T10262] NCSI netlink: No device for ifindex 131092 [ 233.032824][T10261] bond2: (slave team_slave_0): Enslaving as a backup interface with an up link [ 233.366645][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 233.526786][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 233.598053][T10292] xt_NFQUEUE: number of total queues is 0 [ 234.408184][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 234.568338][ T5637] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 234.662574][T10329] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 234.774496][T10325] syzkaller0: entered promiscuous mode [ 234.799585][T10325] syzkaller0: entered allmulticast mode [ 235.020844][T10345] lo: entered allmulticast mode [ 236.486756][ C1] net_ratelimit: 3 callbacks suppressed [ 236.486775][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 236.647677][ T5761] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 236.851106][T10343] lo: left allmulticast mode [ 236.872164][T10356] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 236.983714][T10371] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 237.174053][T10388] xt_NFQUEUE: number of total queues is 0 [ 237.258618][T10396] xt_NFQUEUE: number of total queues is 0 [ 237.464446][T10403] __nla_validate_parse: 4 callbacks suppressed [ 237.464464][T10403] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1257'. [ 237.482995][T10404] netlink: 88 bytes leftover after parsing attributes in process `syz.3.1258'. [ 237.526926][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 237.642076][T10403] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1257'. [ 237.708265][ T5637] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 237.806162][T10417] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1261'. [ 237.952073][T10417] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1261'. [ 237.985978][T10417] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1261'. [ 238.052672][T10432] validate_nla: 2 callbacks suppressed [ 238.052691][T10432] netlink: 'syz.3.1264': attribute type 1 has an invalid length. [ 238.087418][ T993] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 238.144706][T10438] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1267'. [ 238.260642][T10432] bond13: entered promiscuous mode [ 238.286436][T10432] 8021q: adding VLAN 0 to HW filter on device bond13 [ 238.390238][T10433] 8021q: adding VLAN 0 to HW filter on device bond13 [ 238.401222][T10433] bond13: (slave vti0): The slave device specified does not support setting the MAC address [ 238.412476][T10433] bond13: (slave vti0): Setting fail_over_mac to active for active-backup mode [ 238.433446][T10433] bond13: (slave vti0): making interface the new active one [ 238.441225][T10433] vti0: entered promiscuous mode [ 238.453129][T10433] bond13: (slave vti0): Enslaving as an active interface with an up link [ 238.566712][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 238.727277][ T5761] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 238.822319][T10475] netlink: 16178 bytes leftover after parsing attributes in process `syz.4.1277'. [ 238.851976][T10472] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 238.864080][T10476] syzkaller0: entered promiscuous mode [ 238.870870][T10476] syzkaller0: entered allmulticast mode [ 238.939254][T10481] netlink: 'syz.1.1279': attribute type 2 has an invalid length. [ 238.947758][T10481] netlink: 'syz.1.1279': attribute type 2 has an invalid length. [ 238.967080][T10478] syzkaller0: entered promiscuous mode [ 238.975587][T10478] syzkaller0: entered allmulticast mode [ 239.170058][T10492] Bluetooth: MGMT ver 1.23 [ 239.184803][T10492] syzkaller0: entered promiscuous mode [ 239.196218][T10492] syzkaller0: entered allmulticast mode [ 239.311796][T10503] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1286'. [ 239.336049][T10497] syzkaller0: entered promiscuous mode [ 239.342376][T10497] syzkaller0: entered allmulticast mode [ 239.533949][T10514] netlink: 'syz.0.1288': attribute type 10 has an invalid length. [ 239.558636][T10517] netlink: 'syz.4.1289': attribute type 10 has an invalid length. [ 239.579253][T10514] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1288'. [ 239.606660][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 239.643682][T10520] vlan0: entered allmulticast mode [ 239.654967][T10520] bond0: entered allmulticast mode [ 239.667043][T10520] bond_slave_0: entered allmulticast mode [ 239.672933][T10520] bond_slave_1: entered allmulticast mode [ 239.679846][T10520] netdevsim netdevsim2 netdevsim1: entered allmulticast mode [ 239.743965][ T29] audit: type=1804 audit(1779528051.495:4): pid=10531 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.1291" name="/newroot/267/cgroup.controllers" dev="tmpfs" ino=1378 res=1 errno=0 [ 239.760494][T10517] team0: Port device dummy0 added [ 239.823146][ T29] audit: type=1800 audit(1779528051.525:5): pid=10531 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1291" name="cgroup.controllers" dev="tmpfs" ino=1378 res=0 errno=0 [ 239.891966][ T29] audit: type=1800 audit(1779528051.525:6): pid=10530 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1291" name="cgroup.controllers" dev="tmpfs" ino=1378 res=0 errno=0 [ 239.968057][T10524] syzkaller1: entered promiscuous mode [ 239.998511][T10536] Can't find ip_set type bitmap:ip,mac [ 240.000336][T10524] syzkaller1: entered allmulticast mode [ 240.115438][T10548] syzkaller1: entered promiscuous mode [ 240.131505][T10548] syzkaller1: entered allmulticast mode [ 240.253380][T10557] netlink: 'syz.3.1296': attribute type 33 has an invalid length. [ 240.505407][T10570] RDS: rds_bind could not find a transport for ::ffff:172.30.0.4, load rds_tcp or rds_rdma? [ 240.569858][T10565] : entered promiscuous mode [ 240.675254][T10573] bond6: option min_links: invalid value (18446744073709551614) [ 240.722455][T10573] bond6: option min_links: allowed values 0 - 2147483647 [ 240.740541][T10586] sctp: [Deprecated]: syz.4.1305 (pid 10586) Use of struct sctp_assoc_value in delayed_ack socket option. [ 240.740541][T10586] Use struct sctp_sack_info instead [ 240.780894][T10573] bond6 (unregistering): Released all slaves [ 241.034705][T10600] Cannot find add_set index 46338 as target [ 241.269025][T10612] bridge0: port 1(bridge_slave_0) entered disabled state [ 241.302522][T10612] bridge0: port 2(bridge_slave_1) entered disabled state [ 241.621934][T10641] net_ratelimit: 9 callbacks suppressed [ 241.621951][T10641] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 241.686677][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 241.761302][T10647] team1: entered promiscuous mode [ 241.774076][T10647] team1: entered allmulticast mode [ 241.839963][T10654] openvswitch: netlink: Unexpected mask (mask=200240, allowed=10048) [ 241.849351][ T5751] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 241.865744][T10652] xt_hashlimit: size too large, truncated to 1048576 [ 242.654323][T10697] syzkaller0: entered promiscuous mode [ 242.668669][T10697] syzkaller0: entered allmulticast mode [ 242.726712][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 242.751184][T10697] __nla_validate_parse: 8 callbacks suppressed [ 242.751202][T10697] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1334'. [ 242.889883][ T5751] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 242.924629][T10709] 8021q: adding VLAN 0 to HW filter on device bond2 [ 242.940171][T10709] 8021q: adding VLAN 0 to HW filter on device bond3 [ 242.949417][T10709] 8021q: adding VLAN 0 to HW filter on device bond4 [ 242.959988][T10709] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 242.973290][T10709] 8021q: adding VLAN 0 to HW filter on device team1 [ 242.980909][ T5637] team_slave_0: entered promiscuous mode [ 242.988054][ T5637] team_slave_1: entered promiscuous mode [ 243.001537][T10711] pimreg: entered allmulticast mode [ 243.397839][T10689] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 243.407191][T10699] netlink: 840 bytes leftover after parsing attributes in process `syz.3.1337'. [ 243.626987][T10733] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 243.886920][T10755] netlink: 'syz.2.1351': attribute type 1 has an invalid length. [ 243.898100][T10755] netlink: 'syz.2.1351': attribute type 3 has an invalid length. [ 243.905878][T10755] netlink: 'syz.2.1351': attribute type 7 has an invalid length. [ 243.928236][T10754] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 243.931169][T10755] netlink: 'syz.2.1351': attribute type 8 has an invalid length. [ 243.945704][ T5637] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 243.962885][ T8425] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 243.988154][T10760] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1353'. [ 244.009895][T10764] ipt_REJECT: TCP_RESET invalid for non-tcp [ 244.016137][T10763] netlink: 'syz.2.1351': attribute type 1 has an invalid length. [ 244.035983][T10755] netlink: 184 bytes leftover after parsing attributes in process `syz.2.1351'. [ 244.075251][T10768] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1351'. [ 244.095019][T10769] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 244.119504][T10755] NCSI netlink: No device for ifindex 131092 [ 244.182605][T10763] 8021q: adding VLAN 0 to HW filter on device bond7 [ 244.205144][T10774] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1356'. [ 244.229879][T10774] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1356'. [ 244.510531][T10793] netlink: 'syz.0.1362': attribute type 8 has an invalid length. [ 244.510985][T10794] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.1359'. [ 244.539829][T10797] netlink: 'syz.0.1362': attribute type 8 has an invalid length. [ 244.654180][T10799] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1360'. [ 244.686247][T10799] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1360'. [ 244.897499][T10807] syzkaller0: entered promiscuous mode [ 244.921374][T10807] syzkaller0: entered allmulticast mode [ 245.859560][T10864] bond8: (slave 00ªX¹¦Dö»): Device is not bonding slave [ 245.867695][T10864] bond8: option active_slave: invalid value (00ªX¹¦Dö») [ 245.892820][T10864] bond8 (unregistering): Released all slaves [ 246.498408][T10915] netlink: 'syz.2.1392': attribute type 12 has an invalid length. [ 246.507213][T10915] netlink: 'syz.2.1392': attribute type 11 has an invalid length. [ 246.601576][T10923] xfrm0 speed is unknown, defaulting to 1000 [ 246.613037][T10923] xfrm0 speed is unknown, defaulting to 1000 [ 246.632068][T10923] xfrm0 speed is unknown, defaulting to 1000 [ 246.829287][ T5751] xfrm0 speed is unknown, defaulting to 1000 [ 246.839229][T10923] infiniband syz1: set active [ 246.845356][T10923] infiniband syz1: added xfrm0 [ 246.863409][T10923] smbdirect: ib_dev[syz1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 246.879224][T10923] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 246.898916][T10923] smbdirect: ib_dev[syz1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 246.938101][T10923] RDS/IB: syz1: added [ 246.942717][T10923] smc: adding ib device syz1 with port count 1 [ 246.949215][T10923] smc: ib device syz1 port 1 has no pnetid [ 246.960206][ T5637] xfrm0 speed is unknown, defaulting to 1000 [ 246.980066][T10923] xfrm0 speed is unknown, defaulting to 1000 [ 247.176118][T10923] xfrm0 speed is unknown, defaulting to 1000 [ 247.307297][T10923] xfrm0 speed is unknown, defaulting to 1000 [ 247.450256][T10923] xfrm0 speed is unknown, defaulting to 1000 [ 247.578400][T10923] xfrm0 speed is unknown, defaulting to 1000 [ 249.342340][T10905] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 249.502578][T10946] __nla_validate_parse: 4 callbacks suppressed [ 249.502597][T10946] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1397'. [ 249.563506][T10946] netlink: 'syz.2.1397': attribute type 3 has an invalid length. [ 249.717623][T10957] netlink: 'syz.4.1400': attribute type 1 has an invalid length. [ 249.761265][T10957] netlink: 228 bytes leftover after parsing attributes in process `syz.4.1400'. [ 249.809338][T10965] netlink: 'syz.0.1402': attribute type 29 has an invalid length. [ 249.830399][T10977] net_ratelimit: 5 callbacks suppressed [ 249.830418][T10977] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 249.866120][T10968] netlink: 'syz.0.1402': attribute type 29 has an invalid length. [ 250.043909][T10987] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1407'. [ 250.118371][T10991] netlink: 'syz.1.1409': attribute type 10 has an invalid length. [ 250.164845][T10987] 8021q: adding VLAN 0 to HW filter on device bond3 [ 250.192599][T10992] macvlan2: entered promiscuous mode [ 250.198114][T10992] macvlan2: entered allmulticast mode [ 250.207375][T10992] bond3: entered promiscuous mode [ 250.222999][T10992] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 250.233348][T10992] bond3: left promiscuous mode [ 250.304056][T10995] geneve1: entered allmulticast mode [ 250.399813][T10993] syzkaller0: entered promiscuous mode [ 250.405378][T10993] syzkaller0: entered allmulticast mode [ 250.532024][T11010] netlink: 'syz.0.1413': attribute type 1 has an invalid length. [ 252.144977][T11010] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 252.149376][T11015] netlink: 'syz.1.1415': attribute type 29 has an invalid length. [ 252.165615][T11015] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1415'. [ 252.246503][T11019] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 252.274031][T11019] bond0: (slave lo): Error: Device can not be enslaved while up [ 252.435148][T11040] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1418'. [ 252.558571][T11031] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1417'. [ 252.718902][T11058] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1424'. [ 252.982032][T11072] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1427'. [ 253.012148][T11072] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1427'. [ 254.537989][T11064] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1426'. [ 254.549671][T11075] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1430'. [ 254.584638][T11072] geneve2: entered promiscuous mode [ 254.608981][T11072] geneve2: entered allmulticast mode [ 254.768434][T11085] netlink: 'syz.0.1432': attribute type 1 has an invalid length. [ 254.792630][T11088] openvswitch: netlink: Message has 1 unknown bytes. [ 254.819370][T11088] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 254.829186][T11094] netlink: 'syz.2.1436': attribute type 1 has an invalid length. [ 254.902579][T11085] 8021q: adding VLAN 0 to HW filter on device bond4 [ 254.940910][T11092] bond4: (slave gretap2): making interface the new active one [ 254.952205][T11092] bond4: (slave gretap2): Enslaving as an active interface with an up link [ 255.514688][T11091] team0: No ports can be present during mode change [ 255.540990][T11094] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 255.639582][T11111] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1438'. [ 255.671438][T11085] bond5: option mode: invalid value (133) [ 255.680267][T11112] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1437'. [ 255.700561][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.707595][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.715675][T11085] bond5 (unregistering): Released all slaves [ 255.840805][T11115] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1438'. [ 255.860862][T11117] tipc: Enabling of bearer rejected, failed to enable media [ 256.001651][T11123] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1440'. [ 256.156310][T11133] netlink: 'syz.3.1442': attribute type 9 has an invalid length. [ 256.227948][T11140] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1440'. [ 256.362384][T11118] netlink: 'syz.2.1439': attribute type 3 has an invalid length. [ 256.400451][T11118] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1439'. [ 256.828877][T11161] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1449'. [ 257.274041][T11183] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 257.817702][T11208] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1461'. [ 258.108347][T11227] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 258.437846][T11230] netlink: 'syz.1.1468': attribute type 12 has an invalid length. [ 258.666577][T11245] netlink: 'syz.3.1474': attribute type 1 has an invalid length. [ 259.070358][T11257] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 259.481167][T11269] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 259.706436][T11302] __nla_validate_parse: 8 callbacks suppressed [ 259.742118][T11302] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1490'. [ 259.781282][T11302] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1490'. [ 259.975735][T11310] xt_hashlimit: overflow, try lower: 3/0 [ 259.994526][T11316] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1495'. [ 260.137563][T11310] can: request_module (can-proto-0) failed. [ 260.224423][T11329] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 260.250357][T11329] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1497'. [ 260.343345][T11333] xt_hashlimit: max too large, truncated to 1048576 [ 260.386311][T11320] syzkaller1: entered promiscuous mode [ 260.397986][T11320] syzkaller1: entered allmulticast mode [ 260.495286][T11340] netlink: 'syz.2.1501': attribute type 11 has an invalid length. [ 260.582083][T11346] tipc: Failed to remove unknown binding: 66,0,0/3332698469:1332797354/1332797355 [ 260.596133][T11346] tipc: Failed to remove unknown binding: 66,0,0/3332698469:1332797354/1332797355 [ 260.698292][T11349] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1505'. [ 260.770197][T11351] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1505'. [ 260.798713][T11357] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1507'. [ 260.808779][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 260.841614][T11361] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1508'. [ 261.002000][T11368] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1510'. [ 261.215376][ T43] nci: nci_rx_work: unknown MT 0x1 [ 261.383785][T11395] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1515'. [ 263.901236][T11373] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 264.377444][T11432] netlink: 'syz.1.1526': attribute type 1 has an invalid length. [ 264.416176][T11434] netlink: 'syz.3.1527': attribute type 29 has an invalid length. [ 264.472619][T11436] team0: Port device team_slave_0 removed [ 264.601999][T11432] 8021q: adding VLAN 0 to HW filter on device bond6 [ 264.706157][T11435] netlink: 'syz.3.1527': attribute type 29 has an invalid length. [ 264.732873][T11458] netlink: 'syz.4.1532': attribute type 1 has an invalid length. [ 264.747999][T11459] __nla_validate_parse: 2 callbacks suppressed [ 264.748016][T11459] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1532'. [ 264.834111][T11462] netlink: zone id is out of range [ 264.848971][T11463] netlink: 212360 bytes leftover after parsing attributes in process `syz.0.1533'. [ 264.863868][T11462] netlink: zone id is out of range [ 264.879469][T11462] netlink: zone id is out of range [ 264.903160][T11462] netlink: zone id is out of range [ 264.929815][T11462] netlink: zone id is out of range [ 264.942843][T11472] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1535'. [ 264.955204][T11468] netlink: 92 bytes leftover after parsing attributes in process `syz.2.1536'. [ 264.959931][T11462] netlink: zone id is out of range [ 264.995581][T11462] netlink: zone id is out of range [ 265.005047][T11462] netlink: zone id is out of range [ 265.017215][T11462] netlink: zone id is out of range [ 265.029690][T11462] netlink: zone id is out of range [ 265.514035][T11496] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1543'. [ 265.601036][T11507] nbd: illegal input index 2958377 [ 265.747811][T11517] netlink: 332 bytes leftover after parsing attributes in process `syz.1.1552'. [ 268.574930][T11508] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 268.765394][T11536] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1558'. [ 268.850121][T11545] netlink: 'syz.0.1559': attribute type 1 has an invalid length. [ 268.885782][T11545] netlink: 'syz.0.1559': attribute type 1 has an invalid length. [ 268.904542][T11544] netlink: 'syz.0.1559': attribute type 1 has an invalid length. [ 268.919534][T11551] netlink: 'syz.2.1562': attribute type 10 has an invalid length. [ 268.929407][T11544] netlink: 'syz.0.1559': attribute type 1 has an invalid length. [ 268.953380][T11553] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1561'. [ 269.064680][T11559] netlink: 7064 bytes leftover after parsing attributes in process `syz.2.1564'. [ 269.159524][T11562] netlink: 'syz.0.1565': attribute type 11 has an invalid length. [ 269.622297][T11572] bond3 (unregistering): Released all slaves [ 269.754235][T11576] bond3: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 269.785934][T11576] bond3 (unregistering): Released all slaves [ 270.098611][T11616] netlink: 'syz.3.1579': attribute type 83 has an invalid length. [ 270.144957][T11616] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1579'. [ 270.170950][T11616] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1579'. [ 270.266778][T11619] raw_sendmsg: syz.1.1581 forgot to set AF_INET. Fix it! [ 270.755550][T11650] IPv6: sit2: Disabled Multicast RS [ 270.761870][T11650] sit2: entered allmulticast mode [ 270.826066][T11654] IPv6: sit2: Disabled Multicast RS [ 270.833919][T11654] sit2: entered allmulticast mode [ 271.035288][T11662] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1596'. [ 271.054170][T11666] netlink: 88 bytes leftover after parsing attributes in process `syz.2.1599'. [ 271.243885][T11679] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1603'. [ 271.269902][T11680] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1602'. [ 271.270231][T11681] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1604'. [ 271.288772][T11681] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1604'. [ 271.400260][T11690] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1605'. [ 271.538938][T11690] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 271.590184][T11690] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 271.639379][T11690] bond0 (unregistering): Released all slaves [ 271.764263][ T8426] nci: nci_rf_intf_activated_ntf_packet: unsupported rf_interface 0x7 [ 272.029639][T11720] sctp: [Deprecated]: syz.4.1617 (pid 11720) Use of int in maxseg socket option. [ 272.029639][T11720] Use struct sctp_assoc_value instead [ 272.545578][T11747] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1624'. [ 272.572430][T11747] netlink: 'syz.0.1624': attribute type 4 has an invalid length. [ 273.357440][T11790] netlink: 'syz.1.1638': attribute type 1 has an invalid length. [ 274.096421][T11823] syzkaller0: entered promiscuous mode [ 274.116893][T11823] syzkaller0: entered allmulticast mode [ 274.150657][T11823] netlink: 'syz.1.1643': attribute type 1 has an invalid length. [ 274.504135][T11853] RDS: rds_bind could not find a transport for ::ffff:100.1.1.2, load rds_tcp or rds_rdma? [ 275.202739][T11884] __nla_validate_parse: 9 callbacks suppressed [ 275.202757][T11884] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1657'. [ 275.255918][T11884] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1657'. [ 275.274020][T11889] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1657'. [ 275.377692][T11889] veth1_to_team: entered promiscuous mode [ 275.385705][T11895] sctp: [Deprecated]: syz.4.1660 (pid 11895) Use of int in maxseg socket option. [ 275.385705][T11895] Use struct sctp_assoc_value instead [ 275.409506][T11889] gretap0: entered promiscuous mode [ 275.458418][T11889] hsr1: entered promiscuous mode [ 276.155519][T11932] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1672'. [ 276.199596][T11938] tipc: Enabled bearer , priority 11 [ 276.415344][T11953] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1674'. [ 276.444096][T11953] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1674'. [ 276.485756][T11947] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1674'. [ 276.573991][T11960] net_ratelimit: 45 callbacks suppressed [ 276.574008][T11960] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 276.623436][T11956] syzkaller0: entered promiscuous mode [ 276.642185][T11956] syzkaller0: entered allmulticast mode [ 276.860694][T11972] syzkaller0: entered promiscuous mode [ 276.871160][T11972] syzkaller0: entered allmulticast mode [ 276.881419][T11977] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.1684'. [ 276.926964][T11977] netlink: 256 bytes leftover after parsing attributes in process `syz.2.1684'. [ 277.080762][T11986] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1688'. [ 277.290909][T12000] xt_hashlimit: size too large, truncated to 1048576 [ 277.420398][ T5637] IPVS: starting estimator thread 0... [ 277.450052][T11995] macvtap0: entered promiscuous mode [ 277.455554][T11995] vlan0: entered promiscuous mode [ 277.462279][T11995] macvtap0: entered allmulticast mode [ 277.480723][T11995] vlan0: entered allmulticast mode [ 277.495977][T11995] veth0_vlan: entered allmulticast mode [ 277.523979][ T5816] tipc: Node number set to 2199317811 [ 277.536904][T12011] IPVS: using max 37 ests per chain, 88800 per kthread [ 277.642615][T12018] syzkaller0: entered promiscuous mode [ 277.658677][T12018] syzkaller0: entered allmulticast mode [ 278.220389][T12043] tipc: Invalid UDP bearer configuration [ 278.220441][T12043] tipc: Enabling of bearer rejected, failed to enable media [ 278.473982][T12063] netlink: 'syz.4.1711': attribute type 1 has an invalid length. [ 278.643523][T12070] netlink: 'syz.4.1714': attribute type 1 has an invalid length. [ 278.693280][T12070] vlan2: entered allmulticast mode [ 278.708484][T12070] bond0: entered allmulticast mode [ 278.714898][T12070] bond_slave_0: entered allmulticast mode [ 278.731556][T12070] bond_slave_1: entered allmulticast mode [ 278.789855][T12079] netlink: 'syz.1.1716': attribute type 4 has an invalid length. [ 278.791430][T12080] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 278.820374][T12080] IPVS: set_ctl: invalid protocol: 8 224.0.0.2:17956 [ 279.482401][T12106] netdevsim netdevsim4 : renamed from netdevsim0 (while UP) [ 279.762864][T12115] gre1: entered promiscuous mode [ 279.783446][T12115] gre1: entered allmulticast mode [ 280.404140][T12147] netlink: 'syz.1.1732': attribute type 62 has an invalid length. [ 280.770214][T12154] netlink: 'syz.0.1733': attribute type 1 has an invalid length. [ 281.128850][T12172] xt_l2tp: invalid flags combination: 8 [ 281.286664][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 281.322858][T12179] netlink: 'syz.1.1740': attribute type 12 has an invalid length. [ 281.358641][T12179] __nla_validate_parse: 14 callbacks suppressed [ 281.358659][T12179] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1740'. [ 282.194536][T12212] veth5: entered allmulticast mode [ 282.264896][T12215] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1751'. [ 282.301386][T12212] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1750'. [ 282.706261][T12237] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1756'. [ 282.735250][T12237] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1756'. [ 283.053543][T12251] blkio.reset_stats is deprecated [ 283.228232][T12265] netlink: 92 bytes leftover after parsing attributes in process `syz.2.1764'. [ 283.243172][T12266] netlink: 92 bytes leftover after parsing attributes in process `syz.2.1764'. [ 283.272398][T12272] netlink: 'syz.0.1763': attribute type 1 has an invalid length. [ 283.295617][T12272] netlink: 'syz.0.1763': attribute type 4 has an invalid length. [ 283.310998][T12272] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.1763'. [ 283.512820][T12284] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 283.643325][T12291] syzkaller0: entered promiscuous mode [ 283.655168][T12291] syzkaller0: entered allmulticast mode [ 283.928228][T12305] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1777'. [ 284.052611][T12312] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1776'. [ 284.880666][ T29] audit: type=1107 audit(1779528096.625:7): pid=12346 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='Ù‹5ž÷Œ•%èÍUýAÊÃËÙ ë0ä™l…t¿Ý•/Öÿ Ž6òŠ¨Šç›' [ 284.947932][T12364] netlink: 'syz.0.1790': attribute type 21 has an invalid length. [ 285.315788][T12379] netlink: 'syz.0.1796': attribute type 9 has an invalid length. [ 285.831839][T12407] Cannot find add_set index 0 as target [ 285.996279][T12418] netlink: 'syz.0.1805': attribute type 1 has an invalid length. [ 286.115661][T12418] bond8: entered promiscuous mode [ 286.147513][T12418] 8021q: adding VLAN 0 to HW filter on device bond8 [ 286.484660][T12453] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 286.535284][T12459] __nla_validate_parse: 5 callbacks suppressed [ 286.535301][T12459] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1816'. [ 286.576096][T12462] netlink: 'syz.2.1811': attribute type 6 has an invalid length. [ 286.597858][T12459] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1816'. [ 286.905390][T12475] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1821'. [ 286.926300][T12467] vlan0 (unregistering): left allmulticast mode [ 286.935640][T12467] veth0_vlan (unregistering): left allmulticast mode [ 286.943937][T12467] vlan0 (unregistering): left promiscuous mode [ 288.497535][ T5632] Bluetooth: hci4: command 0x0405 tx timeout [ 289.284465][T12444] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 289.474982][T12502] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1830'. [ 289.499073][T12503] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1828'. [ 289.561876][T12513] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1831'. [ 289.631469][T12506] bond0: option arp_all_targets: invalid value (18446744073709551613) [ 289.644082][T12506] bond0 (unregistering): Released all slaves [ 289.819142][T12524] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1834'. [ 289.868938][T12524] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1834'. [ 289.923954][T12529] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1836'. [ 290.097073][T12538] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1839'. [ 290.200997][T12544] netlink: 'syz.3.1841': attribute type 1 has an invalid length. [ 290.428092][T12552] x_tables: unsorted underflow at hook 4 [ 290.750322][T12568] bond3: entered promiscuous mode [ 290.755625][T12568] bond3: entered allmulticast mode [ 290.764089][T12568] 8021q: adding VLAN 0 to HW filter on device bond3 [ 290.772568][T12562] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 291.356349][T12602] nbd: must specify a size in bytes for the device [ 291.492726][T12606] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 291.863340][T12625] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 292.069162][T12631] __nla_validate_parse: 5 callbacks suppressed [ 292.069181][T12631] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1869'. [ 292.195183][T12634] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1870'. [ 292.396071][T12652] syzkaller1: entered promiscuous mode [ 292.412435][T12652] syzkaller1: entered allmulticast mode [ 292.428137][T12656] lo: entered promiscuous mode [ 292.444599][T12656] tunl0: entered promiscuous mode [ 292.456051][T12656] gre0: entered promiscuous mode [ 292.472176][T12656] erspan0: entered promiscuous mode [ 292.483332][T12661] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1877'. [ 292.488588][T12656] erspan0: left allmulticast mode [ 292.500440][T12656] ip_vti0: entered promiscuous mode [ 292.697542][T12666] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 292.704880][T12666] IPv6: NLM_F_CREATE should be set when creating new route [ 292.712186][T12666] IPv6: NLM_F_CREATE should be set when creating new route [ 292.723033][T12666] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1880'. [ 292.765985][T12666] bond0 (unregistering): Released all slaves [ 292.843993][T12666] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1880'. [ 292.895389][ T993] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 292.959412][T12682] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1883'. [ 293.167652][ T993] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 293.269019][T12694] vlan1: entered allmulticast mode [ 293.692904][T12726] vxcan0: tx address claim with different name [ 293.866027][T12744] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1900'. [ 293.892410][T12746] netlink: 'syz.3.1901': attribute type 1 has an invalid length. [ 293.919220][T12742] gre1: entered promiscuous mode [ 293.926237][T12746] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1901'. [ 293.949257][T12739] ip6tnl0: entered promiscuous mode [ 293.959322][T12739] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1899'. [ 293.980215][T12744] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 294.120838][T12758] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 294.133704][T12761] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1906'. [ 294.295670][T12772] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 294.332403][T12773] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 294.535569][T12782] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 294.680828][T12787] Cannot find del_set index 3 as target [ 294.694899][T12787] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 294.783387][T12794] netlink: 'syz.1.1915': attribute type 5 has an invalid length. [ 294.804636][T12794] netlink: 'syz.1.1915': attribute type 6 has an invalid length. [ 294.874536][T12799] openvswitch: netlink: Key type 305 is out of range max 32 [ 296.065321][T12863] ieee802154 phy0 wpan0: encryption failed: -22 [ 296.105829][T12863] Cannot find add_set index 0 as target [ 296.141962][T12863] netlink: 'syz.2.1932': attribute type 1 has an invalid length. [ 296.262299][T12870] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 296.859652][T12907] syzkaller1: entered promiscuous mode [ 296.872147][T12907] syzkaller1: entered allmulticast mode [ 296.886855][T12908] openvswitch: netlink: VXLAN extension message has 1 unknown bytes. [ 296.961783][T12911] netlink: 'syz.2.1942': attribute type 11 has an invalid length. [ 297.081976][T12913] __nla_validate_parse: 17 callbacks suppressed [ 297.081996][T12913] netlink: 192 bytes leftover after parsing attributes in process `syz.4.1941'. [ 297.114145][T12915] netlink: 'syz.3.1943': attribute type 10 has an invalid length. [ 297.173006][T12920] netlink: 'syz.3.1943': attribute type 10 has an invalid length. [ 297.213091][T12920] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 297.240463][T12920] netdevsim netdevsim3 netdevsim1: entered allmulticast mode [ 297.259501][T12920] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 297.451315][T12932] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1947'. [ 297.473596][T12932] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1947'. [ 297.825244][T12954] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1953'. [ 298.069772][T12964] veth9: entered allmulticast mode [ 298.129070][T12973] rdma_rxe: rxe_newlink: failed to add xfrm0 [ 298.748893][T13000] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1972'. [ 298.854769][T13005] syzkaller0: entered promiscuous mode [ 298.870216][T13005] syzkaller0: entered allmulticast mode [ 298.901879][T13005] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 298.961337][T13012] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1976'. [ 299.056373][T13017] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1978'. [ 299.102724][T13020] netlink: 'syz.0.1979': attribute type 11 has an invalid length. [ 299.268653][T13030] netlink: 'syz.0.1983': attribute type 11 has an invalid length. [ 299.278601][T13030] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1983'. [ 299.289445][T13033] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1980'. [ 299.290203][T13031] netlink: 'syz.0.1983': attribute type 11 has an invalid length. [ 299.310232][T13031] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1983'. [ 299.959894][T13056] xfrm0 speed is unknown, defaulting to 1000 [ 300.688259][T13092] netlink: 'syz.4.2000': attribute type 5 has an invalid length. [ 300.764785][T13096] sctp: [Deprecated]: syz.0.2001 (pid 13096) Use of struct sctp_assoc_value in delayed_ack socket option. [ 300.764785][T13096] Use struct sctp_sack_info instead [ 300.811584][T13098] veth0: entered promiscuous mode [ 300.867235][T13100] netlink: 'syz.4.2003': attribute type 11 has an invalid length. [ 300.889786][T13098] netlink: 'syz.1.2002': attribute type 10 has an invalid length. [ 300.961856][T13098] team0 (unregistering): Port device team_slave_1 removed [ 300.987613][T13098] veth1_vlan: left allmulticast mode [ 301.012740][T13098] team0 (unregistering): Port device macvlan1 removed [ 301.124528][T13097] veth0: left promiscuous mode [ 301.455668][T13115] netlink: 'syz.0.2006': attribute type 3 has an invalid length. [ 301.493260][T13115] IPv6: NLM_F_CREATE should be specified when creating new route [ 301.535031][T13115] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 301.586266][T13121] ip6tnl1: entered promiscuous mode [ 301.939958][T13140] veth0: entered promiscuous mode [ 302.016118][T13143] netlink: 'syz.1.2016': attribute type 39 has an invalid length. [ 302.193654][T13153] __nla_validate_parse: 6 callbacks suppressed [ 302.193672][T13153] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2018'. [ 302.239011][T13153] netem: invalid attributes len -5 [ 302.262004][T13153] netem: change failed [ 302.320039][T13157] netlink: 'syz.2.2019': attribute type 10 has an invalid length. [ 302.341446][ T29] audit: type=1800 audit(1779528114.085:8): pid=13155 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.2018" name="memory.events" dev="tmpfs" ino=1919 res=0 errno=0 [ 302.382627][ T5750] IPVS: starting estimator thread 0... [ 302.459763][T13155] bond4: option resend_igmp: invalid value (32767) [ 302.478321][T13159] IPVS: using max 31 ests per chain, 74400 per kthread [ 302.487033][T13155] bond4: option resend_igmp: allowed values 0 - 255 [ 302.496116][T13155] bond4 (unregistering): Released all slaves [ 302.762901][T13139] veth0: left promiscuous mode [ 302.801479][T13179] openvswitch: netlink: Unexpected mask (mask=40040, allowed=10048) [ 303.084238][T13188] sctp: [Deprecated]: syz.2.2028 (pid 13188) Use of int in maxseg socket option. [ 303.084238][T13188] Use struct sctp_assoc_value instead [ 303.233821][T13191] netlink: 1044 bytes leftover after parsing attributes in process `syz.4.2030'. [ 303.772249][T13221] batadv0: entered promiscuous mode [ 303.807908][T13221] macsec0: entered promiscuous mode [ 303.858150][T13221] 8021q: adding VLAN 0 to HW filter on device macsec0 [ 303.952359][T13221] batadv0: left promiscuous mode [ 304.305149][T13247] syzkaller0: entered promiscuous mode [ 304.329831][T13247] syzkaller0: entered allmulticast mode [ 304.711627][T13274] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2054'. [ 304.833769][T13280] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2056'. [ 304.866398][T13279] netlink: 640 bytes leftover after parsing attributes in process `syz.2.2055'. [ 304.878665][T13279] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 304.989465][T13280] bond4: entered promiscuous mode [ 305.001779][T13280] 8021q: adding VLAN 0 to HW filter on device bond4 [ 305.071193][T13301] sctp: Trying to GSO but underlying device doesn't support it. [ 305.217939][T13291] bond8 (unregistering): Released all slaves [ 305.612483][T13335] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2072'. [ 305.761191][T13328] syzkaller0: entered promiscuous mode [ 305.788324][T13328] syzkaller0: entered allmulticast mode [ 305.975063][T13348] openvswitch: netlink: IP tunnel TTL not specified. [ 306.043288][T13347] bond8: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 306.363653][T13365] netlink: 'syz.2.2082': attribute type 1 has an invalid length. [ 306.390944][T13370] openvswitch: netlink: IP tunnel TTL not specified. [ 306.412341][T13365] openvswitch: netlink: IP tunnel TTL not specified. [ 306.428751][T13370] openvswitch: netlink: IP tunnel TTL not specified. [ 306.446176][T13365] openvswitch: netlink: IP tunnel TTL not specified. [ 306.449059][T13370] openvswitch: netlink: IP tunnel TTL not specified. [ 306.465662][T13365] openvswitch: netlink: IP tunnel TTL not specified. [ 306.486040][T13375] xt_CT: You must specify a L4 protocol and not use inversions on it [ 306.505727][T13365] openvswitch: netlink: IP tunnel TTL not specified. [ 306.641005][T13379] vlan1: entered promiscuous mode [ 306.666544][T13379] bridge0: entered promiscuous mode [ 307.054189][T13414] netlink: 212344 bytes leftover after parsing attributes in process `syz.2.2094'. [ 307.237252][T13422] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2096'. [ 307.551925][T13430] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2100'. [ 307.590703][T13430] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2100'. [ 307.603435][T13430] netlink: 'syz.0.2100': attribute type 12 has an invalid length. [ 307.611661][T13430] netlink: 'syz.0.2100': attribute type 11 has an invalid length. [ 307.643490][T13441] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2102'. [ 307.776141][T13453] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2105'. [ 309.108960][T13486] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2114'. [ 310.393593][T13439] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 310.507654][T13492] netlink: 'syz.0.2116': attribute type 29 has an invalid length. [ 310.537393][T13492] netlink: 'syz.0.2116': attribute type 29 has an invalid length. [ 310.719965][T13501] bond5: (slave lo): Releasing backup interface [ 310.741630][T13501] bond5: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 310.749357][T13505] netlink: 'syz.0.2121': attribute type 1 has an invalid length. [ 310.792038][T13501] bridge_slave_0: left allmulticast mode [ 310.803018][T13501] bridge_slave_0: left promiscuous mode [ 310.815546][T13501] bridge0: port 1(bridge_slave_0) entered disabled state [ 310.859618][T13501] bridge_slave_1: left allmulticast mode [ 310.899022][T13501] bridge_slave_1: left promiscuous mode [ 310.918994][T13507] can: request_module (can-proto-0) failed. [ 310.927225][T13501] bridge0: port 2(bridge_slave_1) entered disabled state [ 310.966602][T13518] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2123'. [ 311.055124][T13501] bond4: (slave veth3): Removing an active aggregator [ 311.082537][T13501] bond4: (slave veth3): Releasing backup interface [ 311.207327][T13507] veth5: entered allmulticast mode [ 311.381869][T13534] "syz.3.2127" (13534) uses obsolete ecb(arc4) skcipher [ 311.415937][T13510] bridge6: entered promiscuous mode [ 311.423569][T13510] bridge6: entered allmulticast mode [ 311.747397][T13543] bond18: option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 311.794411][T13543] bond18 (unregistering): Released all slaves [ 312.098047][T13565] netlink: 'syz.2.2135': attribute type 83 has an invalid length. [ 312.132276][T13563] : entered promiscuous mode [ 312.213137][T13572] ¾x9ÿ: renamed from bridge_slave_0 (while UP) [ 312.344082][T13578] netlink: 666 bytes leftover after parsing attributes in process `syz.0.2140'. [ 312.471962][T13582] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2142'. [ 313.224852][T13612] netlink: 7064 bytes leftover after parsing attributes in process `syz.2.2151'. [ 313.248133][T13612] net_ratelimit: 58 callbacks suppressed [ 313.248152][T13612] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 313.439016][T13622] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2154'. [ 313.705669][T13629] syzkaller0: entered promiscuous mode [ 313.724013][T13629] syzkaller0: entered allmulticast mode [ 313.732982][T13634] openvswitch: netlink: IP tunnel TTL not specified. [ 313.892023][T13639] netlink: 'syz.2.2160': attribute type 6 has an invalid length. [ 313.942133][T13636] 8021q: VLANs not supported on vcan0 [ 314.057214][T13640] block nbd2: server does not support multiple connections per device. [ 314.097474][T13640] block nbd2: shutting down sockets [ 314.206755][T13648] netlink: 100 bytes leftover after parsing attributes in process `syz.0.2164'. [ 314.371781][T13656] netlink: 212360 bytes leftover after parsing attributes in process `syz.1.2165'. [ 314.819874][T13672] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2173'. [ 314.893277][T13674] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2174'. [ 315.205400][T13682] vcan1: entered promiscuous mode [ 315.239426][T13682] vcan1: entered allmulticast mode [ 315.494436][T13699] »»»»»»: renamed from virt_wifi0 [ 315.711873][T13709] netlink: 'syz.0.2184': attribute type 30 has an invalid length. [ 315.950454][T13724] sctp: [Deprecated]: syz.2.2187 (pid 13724) Use of int in max_burst socket option. [ 315.950454][T13724] Use struct sctp_assoc_value instead [ 316.193485][T13735] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2191'. [ 316.216166][T13740] netlink: 124 bytes leftover after parsing attributes in process `syz.1.2193'. [ 316.269691][ T42] IPVS: starting estimator thread 0... [ 316.367956][T13743] IPVS: using max 26 ests per chain, 62400 per kthread [ 316.716151][T13762] x_tables: duplicate underflow at hook 1 [ 316.838949][T13767] netlink: 'syz.0.2202': attribute type 3 has an invalid length. [ 317.144865][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.334392][T13786] netlink: 'syz.2.2207': attribute type 1 has an invalid length. [ 317.351790][T13786] netlink: 'syz.2.2207': attribute type 3 has an invalid length. [ 317.379283][T13786] __nla_validate_parse: 3 callbacks suppressed [ 317.379301][T13786] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2207'. [ 317.430318][T13792] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2209'. [ 317.625806][T13795] bond9 (unregistering): Released all slaves [ 318.034634][T13815] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2216'. [ 318.192732][T13823] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2219'. [ 318.285312][T13823] hsr_slave_1 (unregistering): left promiscuous mode [ 318.320363][T13829] RDS: rds_bind could not find a transport for ::ffff:100.1.1.2, load rds_tcp or rds_rdma? [ 318.336283][T13830] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2220'. [ 318.373138][T13830] openvswitch: netlink: IPv4 frag type 127 is out of range max 2 [ 318.473143][T13833] openvswitch: netlink: nsh attr 6 is out of range max 3 [ 318.490721][T13833] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 318.655133][T13839] bond0: option mode: invalid value (9) [ 318.678804][T13839] bond0 (unregistering): Released all slaves [ 318.863806][T13853] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2227'. [ 319.013774][T13855] bond0: Removing last ns target with arp_interval on [ 319.152511][T13861] openvswitch: netlink: IPv4 tun info is not correct [ 319.583284][T13869] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2233'. [ 319.616280][T13869] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2233'. [ 319.773128][T13872] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1500) ! [ 319.987268][T13884] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 320.010379][T13883] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2237'. [ 320.030540][T13876] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 320.042399][T13882] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2237'. [ 320.051339][T13886] IPVS: set_ctl: invalid protocol: 135 255.255.255.255:20004 [ 320.075656][T13886] netlink: 'syz.2.2238': attribute type 18 has an invalid length. [ 320.250697][T13893] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 320.490635][T13908] tunl0: entered promiscuous mode [ 320.524039][T13908] netlink: 'syz.2.2243': attribute type 3 has an invalid length. [ 320.580436][T13911] syzkaller0: entered promiscuous mode [ 320.616555][T13911] syzkaller0: entered allmulticast mode [ 321.028054][T13931] veth7: entered allmulticast mode [ 321.733875][T13968] openvswitch: netlink: IP tunnel dst address not specified [ 321.854659][T13985] netlink: 'syz.4.2261': attribute type 1 has an invalid length. [ 321.933013][T13988] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 322.025893][T13985] 8021q: adding VLAN 0 to HW filter on device bond6 [ 322.118748][T13985] bond6: (slave geneve4): making interface the new active one [ 322.135024][T13985] bond6: (slave geneve4): Enslaving as an active interface with an up link [ 322.480604][ T42] hsr0: entered promiscuous mode [ 322.486347][T14014] __nla_validate_parse: 5 callbacks suppressed [ 322.486359][T14014] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2270'. [ 322.592203][T14019] netlink: 1024 bytes leftover after parsing attributes in process `syz.4.2272'. [ 322.645339][T14021] syzkaller0: entered promiscuous mode [ 322.651837][T14021] syzkaller0: entered allmulticast mode [ 322.760632][T14029] netlink: 'syz.4.2275': attribute type 1 has an invalid length. [ 322.773598][T14031] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2275'. [ 322.982734][T14039] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2276'. [ 323.132425][T14050] netlink: 'syz.1.2278': attribute type 16 has an invalid length. [ 323.148592][T14050] netlink: 'syz.1.2278': attribute type 17 has an invalid length. [ 323.399235][T14050] erspan0: left promiscuous mode [ 323.415766][T14050] erspan0: left allmulticast mode [ 323.535143][T14050] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 323.706077][T14036] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 323.731970][T14036] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 323.824948][T14036] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 323.841568][T14036] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 323.868664][T14036] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 323.900108][T14036] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 323.943768][T14036] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 323.986003][T14036] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 324.179589][T14095] IPVS: set_ctl: invalid protocol: 60 0.0.0.0:20001 [ 324.873378][T14126] sctp: [Deprecated]: syz.2.2290 (pid 14126) Use of int in max_burst socket option. [ 324.873378][T14126] Use struct sctp_assoc_value instead [ 325.034859][T14133] Unsupported ieee802154 address type: 0 [ 325.202531][T14144] netlink: 212336 bytes leftover after parsing attributes in process `syz.2.2293'. [ 326.057400][T14177] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2300'. [ 326.797494][T14220] netlink: 'syz.2.2308': attribute type 1 has an invalid length. [ 327.093963][T14236] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2311'. [ 327.122651][T14236] tc_dump_action: action bad kind [ 327.865808][T14272] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2317'. [ 327.895529][T14272] openvswitch: netlink: Flow actions attr not present in new flow. [ 328.034230][T14281] netlink: 84 bytes leftover after parsing attributes in process `syz.2.2320'. [ 328.070432][T14284] x_tables: duplicate underflow at hook 3 [ 329.189446][T14324] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2327'. [ 329.624515][T14348] netlink: 'syz.1.2332': attribute type 9 has an invalid length. [ 329.640595][T14351] sctp: [Deprecated]: syz.2.2333 (pid 14351) Use of int in max_burst socket option. [ 329.640595][T14351] Use struct sctp_assoc_value instead [ 329.881074][T14370] netlink: zone id is out of range [ 329.888527][T14362] netdevsim netdevsim1: Direct firmware load for .. failed with error -2 [ 329.892296][T14370] netlink: zone id is out of range [ 329.909017][T14362] netdevsim netdevsim1: Falling back to sysfs fallback for: .. [ 329.913153][T14370] netlink: zone id is out of range [ 329.941649][T14370] netlink: zone id is out of range [ 329.966839][T14370] netlink: zone id is out of range [ 329.974544][T14370] netlink: zone id is out of range [ 329.980562][T14370] netlink: zone id is out of range [ 329.981357][T14373] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2338'. [ 329.985915][T14370] netlink: set zone limit has 4 unknown bytes [ 330.105249][T14379] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2339'. [ 330.222973][T14384] vcan1: entered promiscuous mode [ 330.228938][T14384] vcan1: entered allmulticast mode [ 330.755074][T14415] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2351'. [ 330.777046][T14415] netlink: 'syz.2.2351': attribute type 1 has an invalid length. [ 330.785062][T14415] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2351'. [ 330.799603][T14415] netlink: 658 bytes leftover after parsing attributes in process `syz.2.2351'. [ 330.814701][T14415] netlink: 'syz.2.2351': attribute type 1 has an invalid length. [ 330.985481][T14431] netlink: 'syz.0.2356': attribute type 2 has an invalid length. [ 331.159386][T14440] xt_l2tp: unknown flags: 10 [ 331.167587][T14440] netlink: 'syz.2.2359': attribute type 21 has an invalid length. [ 331.175720][T14440] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2359'. [ 331.651882][T14462] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2366'. [ 331.741943][T14476] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 331.751119][T14476] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 331.763436][ T29] audit: type=1804 audit(1779528143.495:9): pid=14474 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.2368" name="/newroot/465/cgroup.controllers" dev="tmpfs" ino=2388 res=1 errno=0 [ 331.795757][T14479] tipc: Started in network mode [ 331.804772][ T29] audit: type=1800 audit(1779528143.495:10): pid=14474 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2368" name="cgroup.controllers" dev="tmpfs" ino=2388 res=0 errno=0 [ 331.811125][T14479] tipc: Node identity fe800000000000000000000000000014, cluster identity 4711 [ 331.853065][T14479] tipc: Enabled bearer , priority 10 [ 332.968473][ T5816] tipc: Node number set to 4269801492 [ 333.016157][T14542] tipc: Enabling of bearer rejected, failed to enable media [ 333.134873][T14551] __nla_validate_parse: 3 callbacks suppressed [ 333.134891][T14551] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2389'. [ 333.255428][T14555] netlink: 'syz.2.2390': attribute type 1 has an invalid length. [ 333.268318][T14555] netlink: 'syz.2.2390': attribute type 1 has an invalid length. [ 333.413334][T14563] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2395'. [ 333.634328][T14577] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2400'. [ 333.644190][T14578] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2400'. [ 333.659371][T14575] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2399'. [ 333.670033][T14579] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2399'. [ 333.682678][T14575] tipc: Enabled bearer , priority 0 [ 333.748995][T14575] syzkaller0: entered promiscuous mode [ 333.754501][T14575] syzkaller0: entered allmulticast mode [ 333.762726][T14575] tipc: Resetting bearer [ 333.802807][T14574] tipc: Resetting bearer [ 333.889206][T14588] netlink: 'syz.0.2402': attribute type 29 has an invalid length. [ 335.568285][T14574] tipc: Disabling bearer [ 337.497714][T14597] 8021q: VLANs not supported on wg0 [ 337.662524][T14613] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2407'. [ 337.738030][T14619] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2409'. [ 337.791697][T14619] : entered promiscuous mode [ 337.908995][T14624] netlink: 830 bytes leftover after parsing attributes in process `syz.0.2411'. [ 338.208519][ T5632] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 338.224192][ T5632] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 338.237023][ T5632] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 338.256913][ T5632] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 338.266324][ T5632] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 338.293265][ T5636] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 338.302265][ T5636] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 338.311390][ T5636] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 338.319765][ T5636] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 338.330619][ T5636] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 338.333436][ T5646] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 338.357175][ T5646] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 338.365312][ T5646] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 338.378940][ T5646] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 338.393813][ T5636] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 338.482159][T14651] 8021q: VLANs not supported on vxcan1 [ 338.589202][T14663] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2419'. [ 338.608919][T14662] netdevsim netdevsim2: Firmware load for './file0/file0/..' refused, path contains '..' component [ 338.880892][T14678] netlink: 'syz.2.2422': attribute type 2 has an invalid length. [ 339.049792][T14684] gre1: entered promiscuous mode [ 339.055065][T14684] gre1: entered allmulticast mode [ 339.411989][T14646] xfrm0 speed is unknown, defaulting to 1000 [ 339.506128][T14708] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2428'. [ 339.557835][T14711] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2430'. [ 339.614801][T14708] netlink: 'syz.2.2428': attribute type 1 has an invalid length. [ 339.807295][T14718] netlink: 'syz.1.2431': attribute type 1 has an invalid length. [ 339.831255][T14718] netlink: 15766 bytes leftover after parsing attributes in process `syz.1.2431'. [ 339.926329][T14641] xfrm0 speed is unknown, defaulting to 1000 [ 340.240257][T14730] bridge0: port 2(bridge_slave_1) entered blocking state [ 340.247488][T14730] bridge0: port 2(bridge_slave_1) entered listening state [ 340.254875][T14730] bridge0: port 1(bridge_slave_0) entered blocking state [ 340.262086][T14730] bridge0: port 1(bridge_slave_0) entered listening state [ 340.357843][T14730] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 340.377323][T14730] netdevsim netdevsim0 netdevsim0: left allmulticast mode [ 340.407906][ T5632] Bluetooth: hci5: command tx timeout [ 340.487587][ T5632] Bluetooth: hci6: command tx timeout [ 340.762002][T14744] netlink: 'syz.0.2439': attribute type 27 has an invalid length. [ 340.789131][T14746] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 340.811904][T14744] netlink: 'syz.0.2439': attribute type 4 has an invalid length. [ 340.825917][T14746] netlink: 'syz.2.2441': attribute type 1 has an invalid length. [ 340.830955][T14744] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2439'. [ 340.874543][T14746] bond9: entered promiscuous mode [ 340.880818][T14746] 8021q: adding VLAN 0 to HW filter on device bond9 [ 340.914149][T14752] bond9: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 340.931198][T14752] bond9: (slave ipvlan0): The slave device specified does not support setting the MAC address [ 340.945616][T14754] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2442'. [ 340.947543][T14752] bond9: (slave ipvlan0): Setting fail_over_mac to active for active-backup mode [ 341.001057][T14754] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2442'. [ 341.083850][T14646] bridge0: port 1(bridge_slave_0) entered blocking state [ 341.091654][T14646] bridge0: port 1(bridge_slave_0) entered disabled state [ 341.100481][T14646] bridge_slave_0: entered allmulticast mode [ 341.114161][T14646] bridge_slave_0: entered promiscuous mode [ 341.129011][T14760] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 341.169962][T14754] bond10: option mode: invalid value (133) [ 341.177738][T14754] bond10 (unregistering): Released all slaves [ 341.223345][T14646] bridge0: port 2(bridge_slave_1) entered blocking state [ 341.234415][T14646] bridge0: port 2(bridge_slave_1) entered disabled state [ 341.237464][T14764] netlink: 'syz.2.2444': attribute type 1 has an invalid length. [ 341.242701][T14646] bridge_slave_1: entered allmulticast mode [ 341.257376][T14646] bridge_slave_1: entered promiscuous mode [ 341.388927][T14646] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 341.428932][T14646] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 341.494621][T14774] netlink: 'syz.0.2446': attribute type 13 has an invalid length. [ 341.523076][T14774] erspan0: refused to change device tx_queue_len [ 341.529954][T14774] net_ratelimit: 6659 callbacks suppressed [ 341.529971][T14774] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 341.555334][T14646] team0: Port device team_slave_0 added [ 341.577658][T14646] team0: Port device team_slave_1 added [ 341.692343][T14646] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 341.701573][T14646] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 341.731338][T14646] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 341.732587][T14783] netlink: 'syz.0.2447': attribute type 1 has an invalid length. [ 341.742736][T14641] bridge0: port 1(bridge_slave_0) entered blocking state [ 341.742917][T14641] bridge0: port 1(bridge_slave_0) entered disabled state [ 341.743119][T14641] bridge_slave_0: entered allmulticast mode [ 341.744966][T14641] bridge_slave_0: entered promiscuous mode [ 341.781145][T14646] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 341.788319][T14646] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 341.815579][T14646] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 341.838553][T14641] bridge0: port 2(bridge_slave_1) entered blocking state [ 341.846211][T14641] bridge0: port 2(bridge_slave_1) entered disabled state [ 341.860229][T14641] bridge_slave_1: entered allmulticast mode [ 341.869058][T14641] bridge_slave_1: entered promiscuous mode [ 341.907232][T14783] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2447'. [ 341.925069][T14783] netlink: 'syz.0.2447': attribute type 29 has an invalid length. [ 341.943950][T14783] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2447'. [ 341.957312][T14641] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 341.970668][T14641] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 341.990672][T14646] hsr_slave_0: entered promiscuous mode [ 341.999161][T14646] hsr_slave_1: entered promiscuous mode [ 342.006142][T14646] debugfs: 'hsr0' already exists in 'hsr' [ 342.014815][T14646] Cannot create hsr debugfs directory [ 342.101779][T14641] team0: Port device team_slave_0 added [ 342.155328][T14641] team0: Port device team_slave_1 added [ 342.280483][T14641] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 342.290400][T14641] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 342.319290][T14641] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 342.343123][T14641] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 342.360538][T14641] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 342.410937][T14641] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 342.425863][T14798] netlink: 84 bytes leftover after parsing attributes in process `syz.1.2453'. [ 342.488390][ T5632] Bluetooth: hci5: command tx timeout [ 342.567959][ T5632] Bluetooth: hci6: command tx timeout [ 342.678298][T14810] pim6reg527: entered allmulticast mode [ 342.773138][T14641] hsr_slave_0: entered promiscuous mode [ 342.781088][T14641] hsr_slave_1: entered promiscuous mode [ 342.787713][T14641] debugfs: 'hsr0' already exists in 'hsr' [ 342.793457][T14641] Cannot create hsr debugfs directory [ 343.609202][T14646] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 343.627036][T14646] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 343.635892][T14646] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 343.653586][T14646] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 343.677410][T14646] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 343.701042][T14646] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 343.722551][T14646] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 343.748606][T14859] __nla_validate_parse: 13 callbacks suppressed [ 343.748627][T14859] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2473'. [ 343.773865][T14646] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 344.043022][T14878] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2476'. [ 344.214257][T14883] lo: left promiscuous mode [ 344.219796][T14885] netlink: set zone limit has 4 unknown bytes [ 344.227302][T14883] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 344.382424][T14641] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 344.401420][T14641] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 344.413076][T14641] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 344.424599][T14641] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 344.443357][T14646] 8021q: adding VLAN 0 to HW filter on device bond0 [ 344.453718][T14641] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 344.465513][T14641] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 344.484889][T14641] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 344.498437][T14641] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 344.543536][T14646] 8021q: adding VLAN 0 to HW filter on device team0 [ 344.566805][ T5632] Bluetooth: hci5: command tx timeout [ 344.595382][ T8424] bridge0: port 1(bridge_slave_0) entered blocking state [ 344.602599][ T8424] bridge0: port 1(bridge_slave_0) entered forwarding state [ 344.625229][ T8424] bridge0: port 2(bridge_slave_1) entered blocking state [ 344.632437][ T8424] bridge0: port 2(bridge_slave_1) entered forwarding state [ 344.647421][ T5632] Bluetooth: hci6: command tx timeout [ 344.867584][T14641] 8021q: adding VLAN 0 to HW filter on device bond0 [ 344.908931][T14641] 8021q: adding VLAN 0 to HW filter on device team0 [ 344.939834][ T753] bridge0: port 1(bridge_slave_0) entered blocking state [ 344.947093][ T753] bridge0: port 1(bridge_slave_0) entered forwarding state [ 344.995175][ T8414] bridge0: port 2(bridge_slave_1) entered blocking state [ 345.002452][ T8414] bridge0: port 2(bridge_slave_1) entered forwarding state [ 345.278342][T14927] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 345.294015][T14927] syzkaller1: linktype set to 823 [ 345.604620][T14943] openvswitch: netlink: IPv4 tun info is not correct [ 345.734086][T14948] netlink: 108 bytes leftover after parsing attributes in process `syz.0.2487'. [ 345.786189][T14948] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2487'. [ 346.000856][T14965] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2491'. [ 346.189215][T14970] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.2493'. [ 346.203433][T14646] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 346.446355][T14641] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 346.647957][ T5632] Bluetooth: hci5: command tx timeout [ 346.726985][ T5632] Bluetooth: hci6: command tx timeout [ 347.173485][T14646] veth0_vlan: entered promiscuous mode [ 347.241149][T14646] veth1_vlan: entered promiscuous mode [ 347.325956][T15023] bridge8: entered promiscuous mode [ 347.334734][T15023] bridge8: entered allmulticast mode [ 347.377515][T15023] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2503'. [ 347.443064][T14646] veth0_macvtap: entered promiscuous mode [ 347.522383][T14646] veth1_macvtap: entered promiscuous mode [ 347.604720][T14641] veth0_vlan: entered promiscuous mode [ 347.614505][T15039] openvswitch: netlink: IP tunnel TTL not specified. [ 347.708622][T14641] veth1_vlan: entered promiscuous mode [ 347.764327][T14646] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 347.876053][T14646] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 347.899443][T15045] syzkaller0: entered promiscuous mode [ 347.913024][T15045] syzkaller0: entered allmulticast mode [ 347.997358][T15050] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 348.014457][T15050] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.044580][T15051] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 348.150462][ T1174] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.160164][ T1174] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.184230][T15060] bond7: option lp_interval: invalid value (0) [ 348.190631][T15060] bond7: option lp_interval: allowed values 1 - 2147483647 [ 348.200276][T15060] bond7 (unregistering): Released all slaves [ 348.240428][T15050] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 348.252757][T15050] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.288180][ T1174] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.297409][ T1174] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.383158][T14641] veth0_macvtap: entered promiscuous mode [ 348.458681][T15050] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 348.469144][T15050] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.525189][T14641] veth1_macvtap: entered promiscuous mode [ 348.795983][T15083] netlink: 'syz.1.2515': attribute type 4 has an invalid length. [ 348.798404][T14641] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 348.877312][ T1101] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 348.888566][T15083] netlink: 'syz.1.2515': attribute type 4 has an invalid length. [ 348.890204][T14641] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 348.902533][ T1101] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 348.981693][ T8414] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.057392][ T8414] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.091803][ T1101] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 349.093420][ T8414] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.115761][ T1101] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 349.156169][ T8414] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.283608][ T1174] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 349.297841][ T1174] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.349364][T15100] netlink: 208 bytes leftover after parsing attributes in process `syz.1.2519'. [ 349.481825][ T13] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 349.505814][ T13] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.666915][ T1101] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 349.687988][ T1101] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.747519][T15114] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2521'. [ 349.760133][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 349.774929][ T8414] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 349.786224][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 349.798954][ T8414] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.915621][ T1174] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 349.945178][ T1174] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 350.075775][T15129] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2525'. [ 350.122938][T15129] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2525'. [ 350.284748][T15135] xt_policy: too many policy elements [ 350.479683][ T1174] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 350.492143][T15142] x_tables: unsorted underflow at hook 4 [ 350.660325][T15156] syzkaller0: entered promiscuous mode [ 350.677933][T15156] syzkaller0: entered allmulticast mode [ 350.723953][T15156] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2534'. [ 350.867165][T15170] nbd: socks must be embedded in a SOCK_ITEM attr [ 350.894012][T15173] netlink: 276 bytes leftover after parsing attributes in process `syz.6.2537'. [ 350.941804][T15172] pim6reg: entered allmulticast mode [ 350.980057][T15172] pim6reg: left allmulticast mode [ 351.430196][T15208] netlink: 80 bytes leftover after parsing attributes in process `syz.0.2546'. [ 351.794059][T15225] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2552'. [ 351.837535][T15233] x_tables: duplicate underflow at hook 1 [ 352.042326][T15247] netlink: 'syz.5.2558': attribute type 1 has an invalid length. [ 352.270932][T15263] netlink: 'syz.5.2563': attribute type 1 has an invalid length. [ 352.363279][T15270] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2564'. [ 352.412276][T15270] netdevsim netdevsim6: Direct firmware load for  failed with error -2 [ 352.460445][T15270] netdevsim netdevsim6: Falling back to sysfs fallback for:  [ 353.121899][T15301] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2572'. [ 353.194162][T15314] tipc: Enabling of bearer rejected, failed to enable media [ 353.241252][T15316] 8021q: VLANs not supported on ip_vti0 [ 353.483482][T15325] syzkaller0: entered promiscuous mode [ 353.498949][T15325] syzkaller0: entered allmulticast mode [ 353.674332][T15338] netlink: 'syz.0.2581': attribute type 5 has an invalid length. [ 354.322321][T15376] x_tables: duplicate underflow at hook 4 [ 354.617695][T15391] __nla_validate_parse: 6 callbacks suppressed [ 354.617730][T15391] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2597'. [ 354.662119][T15391] sctp: [Deprecated]: syz.6.2597 (pid 15391) Use of struct sctp_assoc_value in delayed_ack socket option. [ 354.662119][T15391] Use struct sctp_sack_info instead [ 354.715039][T15393] bond7: Removing last ns target with arp_interval on [ 354.873145][T15402] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2602'. [ 354.896652][T15402] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2602'. [ 355.525847][ T5636] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 355.588671][ T5636] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 355.603209][ T5636] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 355.619326][ T5636] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 355.628758][ T5636] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 357.777681][ T5632] Bluetooth: hci4: command tx timeout [ 358.435888][T15428] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2606'. [ 358.458025][T15430] sit0: entered promiscuous mode [ 358.472646][T15429] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2607'. [ 358.498183][T15430] netlink: 'syz.2.2607': attribute type 1 has an invalid length. [ 358.548215][T15430] netlink: 1 bytes leftover after parsing attributes in process `syz.2.2607'. [ 359.003008][T15458] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 359.017858][T15458] bond0: (slave lo): Error: Device can not be enslaved while up [ 359.027828][T15422] xfrm0 speed is unknown, defaulting to 1000 [ 359.232017][T15465] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2616'. [ 359.354223][T15460] ip6gretap0: left promiscuous mode [ 359.360943][T15460] ip6gretap0: left allmulticast mode [ 359.847611][ T5632] Bluetooth: hci4: command tx timeout [ 359.903037][T15484] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2618'. [ 360.021573][T15484] xfrm1: entered promiscuous mode [ 360.037354][T15484] xfrm1: entered allmulticast mode [ 360.151362][T15422] bridge0: port 1(bridge_slave_0) entered blocking state [ 360.174473][T15422] bridge0: port 1(bridge_slave_0) entered disabled state [ 360.204129][T15422] bridge_slave_0: entered allmulticast mode [ 360.230463][T15422] bridge_slave_0: entered promiscuous mode [ 360.309173][T15422] bridge0: port 2(bridge_slave_1) entered blocking state [ 360.341101][T15422] bridge0: port 2(bridge_slave_1) entered disabled state [ 360.358595][T15422] bridge_slave_1: entered allmulticast mode [ 360.375278][T15422] bridge_slave_1: entered promiscuous mode [ 360.522918][T15422] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 360.559278][T15422] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 360.651049][T15503] tipc: Enabled bearer , priority 0 [ 360.670187][T15422] team0: Port device team_slave_0 added [ 360.685133][T15516] pimreg3: entered allmulticast mode [ 360.698093][T15422] team0: Port device team_slave_1 added [ 360.711916][T15502] tipc: Disabling bearer [ 360.763191][T15422] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 360.778955][T15422] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 360.816275][T15422] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 360.833575][T15422] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 360.840854][T15422] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 360.868346][T15422] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 360.932525][T15422] hsr_slave_0: entered promiscuous mode [ 360.941486][T15422] hsr_slave_1: entered promiscuous mode [ 360.948894][T15422] debugfs: 'hsr0' already exists in 'hsr' [ 360.954665][T15422] Cannot create hsr debugfs directory [ 361.135777][T15422] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 361.149447][T15422] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 361.212385][T15422] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 361.222839][T15422] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 361.283114][T15422] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 361.304509][T15422] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 361.381454][T15422] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 361.391737][T15422] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 361.641222][T15422] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 361.652674][T15422] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 361.664111][T15422] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 361.675365][T15422] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 361.684225][T15422] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 361.697484][T15422] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 361.708162][T15422] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 361.723979][T15422] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 361.835272][T15422] 8021q: adding VLAN 0 to HW filter on device bond0 [ 361.864109][T15422] 8021q: adding VLAN 0 to HW filter on device team0 [ 361.886023][ T1101] bridge0: port 1(bridge_slave_0) entered blocking state [ 361.893304][ T1101] bridge0: port 1(bridge_slave_0) entered forwarding state [ 361.912982][ T8425] bridge0: port 2(bridge_slave_1) entered blocking state [ 361.920194][ T8425] bridge0: port 2(bridge_slave_1) entered forwarding state [ 361.942753][ T5632] Bluetooth: hci4: command tx timeout [ 362.465140][T15422] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 362.528980][T15422] veth0_vlan: entered promiscuous mode [ 362.545920][T15422] veth1_vlan: entered promiscuous mode [ 362.595268][T15422] veth0_macvtap: entered promiscuous mode [ 362.609865][T15422] veth1_macvtap: entered promiscuous mode [ 362.636316][T15422] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 362.665101][T15422] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 362.685708][ T1101] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 362.704040][ T1101] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 362.731456][ T1101] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 362.776259][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 362.853371][ T8425] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 362.872666][ T8425] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 362.914198][ T8425] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 362.926019][ T8425] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 364.006625][ T5632] Bluetooth: hci4: command tx timeout [ 370.887954][ C0] bridge0: port 1(bridge_slave_0) entered learning state [ 370.895630][ C0] bridge0: port 2(bridge_slave_1) entered learning state [ 400.967111][ C0] bridge0: port 2(bridge_slave_1) entered forwarding state [ 400.974359][ C0] bridge0: topology change detected, propagating [ 400.981268][ C0] bridge0: port 1(bridge_slave_0) entered forwarding state [ 400.988514][ C0] bridge0: topology change detected, propagating [ 404.169296][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 409.287136][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 462.567334][ T5632] Bluetooth: hci5: command 0x0406 tx timeout [ 472.647061][ T30] INFO: task syz.3.2277:14043 blocked for more than 143 seconds. [ 472.655359][ T30] Not tainted syzkaller #0 [ 472.660498][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 472.669692][ T30] task:syz.3.2277 state:D stack:27176 pid:14043 tgid:14042 ppid:5634 task_flags:0x400140 flags:0x00080002 [ 472.683467][ T30] Call Trace: [ 472.687006][ T30] [ 472.690104][ T30] __schedule+0x1821/0x5740 [ 472.694778][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 472.699814][ T30] ? __pfx_clockevents_program_event+0x10/0x10 [ 472.706539][ T30] ? __pfx___schedule+0x10/0x10 [ 472.711443][ T30] ? schedule+0x90/0x360 [ 472.715689][ T30] schedule+0x164/0x360 [ 472.720679][ T30] schedule_preempt_disabled+0x13/0x30 [ 472.726199][ T30] __mutex_lock+0x7f7/0x1550 [ 472.731121][ T30] ? __pfx_stack_trace_save+0x10/0x10 [ 472.736591][ T30] ? __mutex_lock+0x608/0x1550 [ 472.741397][ T30] ? nfsd_nl_listener_set_doit+0x141/0x1670 [ 472.747849][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 472.752890][ T30] ? __asan_memset+0x22/0x50 [ 472.757679][ T30] ? __nla_validate_parse+0x2480/0x2dc0 [ 472.763260][ T30] nfsd_nl_listener_set_doit+0x141/0x1670 [ 472.769657][ T30] ? __pfx___nla_validate_parse+0x10/0x10 [ 472.775444][ T30] ? __pfx_nfsd_nl_listener_set_doit+0x10/0x10 [ 472.782106][ T30] ? __nla_parse+0x40/0x60 [ 472.786689][ T30] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 472.793123][ T30] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 472.799715][ T30] genl_family_rcv_msg_doit+0x22a/0x330 [ 472.807970][ T5632] Bluetooth: hci6: command 0x0406 tx timeout [ 472.816510][ T30] ? __asan_memcpy+0x40/0x70 [ 472.821181][ T30] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 472.828577][ T30] ? bpf_lsm_capable+0x9/0x20 [ 472.833293][ T30] ? security_capable+0x7e/0x2c0 [ 472.838916][ T30] genl_rcv_msg+0x61c/0x7a0 [ 472.843491][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 472.848588][ T30] ? __pfx_nfsd_nl_listener_set_doit+0x10/0x10 [ 472.854959][ T30] netlink_rcv_skb+0x232/0x4b0 [ 472.859880][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 472.864934][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 472.872667][ T30] ? down_read+0x270/0x2e0 [ 472.877459][ T30] ? genl_rcv+0xd/0x40 [ 472.881581][ T30] genl_rcv+0x28/0x40 [ 472.885754][ T30] netlink_unicast+0x75c/0x8e0 [ 472.891072][ T30] netlink_sendmsg+0x813/0xb40 [ 472.895978][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 472.901875][ T30] ? aa_sock_msg_perm+0xf1/0x1b0 [ 472.906955][ T30] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 472.912485][ T30] ____sys_sendmsg+0x972/0x9f0 [ 472.917693][ T30] ? __might_fault+0xaf/0x130 [ 472.922444][ T30] ? __pfx_____sys_sendmsg+0x10/0x10 [ 472.928179][ T30] ? import_iovec+0x73/0xa0 [ 472.932698][ T30] ___sys_sendmsg+0x2a5/0x360 [ 472.937489][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 472.942645][ T30] ? __pfx____sys_sendmsg+0x10/0x10 [ 472.947973][ T30] ? futex_wait+0x2a2/0x390 [ 472.952567][ T30] ? __fget_files+0x2a/0x420 [ 472.957752][ T30] ? __fget_files+0x3a0/0x420 [ 472.962439][ T30] __x64_sys_sendmsg+0x1bd/0x2a0 [ 472.967575][ T30] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 472.973370][ T30] ? rcu_is_watching+0x15/0xb0 [ 472.978262][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 472.984630][ T30] do_syscall_64+0x15f/0xf80 [ 472.989914][ T30] ? trace_irq_disable+0x3b/0x140 [ 472.995163][ T30] ? clear_bhb_loop+0x40/0x90 [ 472.999921][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 473.005830][ T30] RIP: 0033:0x7f06a2f9ce59 [ 473.010919][ T30] RSP: 002b:00007f06a3eb7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 473.019784][ T30] RAX: ffffffffffffffda RBX: 00007f06a3215fa0 RCX: 00007f06a2f9ce59 [ 473.028060][ T30] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000005 [ 473.036618][ T30] RBP: 00007f06a3032d6f R08: 0000000000000000 R09: 0000000000000000 [ 473.044866][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 473.054319][ T30] R13: 00007f06a3216038 R14: 00007f06a3215fa0 R15: 00007fffc982a778 [ 473.062367][ T30] [ 473.068105][ T30] [ 473.068105][ T30] Showing all locks held in the system: [ 473.075877][ T30] 1 lock held by khungtaskd/30: [ 473.081542][ T30] #0: ffffffff8e95cca0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 473.091876][ T30] 2 locks held by kworker/u8:9/1174: [ 473.097941][ T30] 2 locks held by getty/5379: [ 473.102691][ T30] #0: ffff888036e5f0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 473.113750][ T30] #1: ffffc900032332e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13a0 [ 473.123978][ T30] 2 locks held by syz.4.2276/14035: [ 473.129299][ T30] #0: ffffffff8fe40d28 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 473.138258][ T30] #1: ffffffff8ec8b220 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x141/0x1670 [ 473.148723][ T30] 2 locks held by syz.3.2277/14043: [ 473.153976][ T30] #0: ffffffff8fe40d28 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 473.162533][ T30] #1: ffffffff8ec8b220 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x141/0x1670 [ 473.173702][ T30] [ 473.176166][ T30] ============================================= [ 473.176166][ T30] [ 473.185546][ T30] NMI backtrace for cpu 1 [ 473.185561][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 473.185573][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 473.185580][ T30] Call Trace: [ 473.185584][ T30] [ 473.185589][ T30] dump_stack_lvl+0xe8/0x150 [ 473.185606][ T30] nmi_cpu_backtrace+0x274/0x2d0 [ 473.185620][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 473.185632][ T30] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 473.185655][ T30] sys_info+0x135/0x170 [ 473.185665][ T30] watchdog+0xfd3/0x1030 [ 473.185684][ T30] ? watchdog+0x1c9/0x1030 [ 473.185702][ T30] kthread+0x389/0x470 [ 473.185715][ T30] ? __pfx_watchdog+0x10/0x10 [ 473.185728][ T30] ? __pfx_kthread+0x10/0x10 [ 473.185741][ T30] ret_from_fork+0x514/0xb70 [ 473.185754][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 473.185765][ T30] ? __switch_to+0xc79/0x1410 [ 473.185781][ T30] ? __pfx_kthread+0x10/0x10 [ 473.185794][ T30] ret_from_fork_asm+0x1a/0x30 [ 473.185813][ T30] [ 473.185817][ T30] Sending NMI from CPU 1 to CPUs 0: [ 473.301123][ C0] NMI backtrace for cpu 0 [ 473.301142][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) [ 473.301161][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 473.301172][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 473.301201][ C0] Code: 7b 7d 02 e9 93 f7 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d f3 21 20 00 fb f4 cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 [ 473.301216][ C0] RSP: 0018:ffffffff8e607dc0 EFLAGS: 00000246 [ 473.301230][ C0] RAX: 0000000000217bb1 RBX: ffffffff819a958a RCX: 0000000080000001 [ 473.301243][ C0] RDX: 0000000000000001 RSI: ffffffff8dface60 RDI: ffffffff8c28b660 [ 473.301254][ C0] RBP: ffffffff8e607eb0 R08: ffff8880b86339db R09: 1ffff110170c673b [ 473.301267][ C0] R10: dffffc0000000000 R11: ffffed10170c673c R12: 0000000000000000 [ 473.301278][ C0] R13: 1ffffffff1cd25d8 R14: 0000000000000000 R15: 1ffffffff1cd25d8 [ 473.301290][ C0] FS: 0000000000000000(0000) GS:ffff888125287000(0000) knlGS:0000000000000000 [ 473.301303][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 473.301314][ C0] CR2: 0000562eef53fa38 CR3: 000000000e74a000 CR4: 00000000003526f0 [ 473.301329][ C0] Call Trace: [ 473.301335][ C0] [ 473.301342][ C0] default_idle+0x9/0x20 [ 473.301358][ C0] default_idle_call+0x72/0xb0 [ 473.301376][ C0] do_idle+0x36a/0x5f0 [ 473.301394][ C0] ? asm_sysvec_call_function_single+0x1a/0x20 [ 473.301415][ C0] ? __pfx_do_idle+0x10/0x10 [ 473.301438][ C0] cpu_startup_entry+0x43/0x60 [ 473.301456][ C0] rest_init+0x2de/0x300 [ 473.301475][ C0] start_kernel+0x38a/0x3e0 [ 473.301499][ C0] x86_64_start_reservations+0x24/0x30 [ 473.301517][ C0] x86_64_start_kernel+0x143/0x1c0 [ 473.301535][ C0] common_startup_64+0x13e/0x147 [ 473.301564][ C0] [ 473.491166][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 473.498045][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 473.507316][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 473.517369][ T30] Call Trace: [ 473.520674][ T30] [ 473.523782][ T30] vpanic+0x56c/0xa60 [ 473.527863][ T30] ? __pfx_vpanic+0x10/0x10 [ 473.532385][ T30] ? irqentry_exit+0x218/0x760 [ 473.537157][ T30] panic+0xc5/0xd0 [ 473.541021][ T30] ? __pfx_panic+0x10/0x10 [ 473.545442][ T30] ? __pfx_panic+0x10/0x10 [ 473.549869][ T30] watchdog+0x102c/0x1030 [ 473.554246][ T30] ? watchdog+0x1c9/0x1030 [ 473.558779][ T30] kthread+0x389/0x470 [ 473.562906][ T30] ? __pfx_watchdog+0x10/0x10 [ 473.567597][ T30] ? __pfx_kthread+0x10/0x10 [ 473.572333][ T30] ret_from_fork+0x514/0xb70 [ 473.577014][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 473.582240][ T30] ? __switch_to+0xc79/0x1410 [ 473.586927][ T30] ? __pfx_kthread+0x10/0x10 [ 473.591882][ T30] ret_from_fork_asm+0x1a/0x30 [ 473.596746][ T30] [ 473.600173][ T30] Kernel Offset: disabled [ 473.604794][ T30] Rebooting in 86400 seconds..