last executing test programs: 2m11.81447197s ago: executing program 1 (id=1625): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{0x1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f00000000c0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xb, 0x9, &(0x7f0000000140)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x69, 0x11, 0x65}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @call, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) 2m11.681108779s ago: executing program 1 (id=1628): r0 = socket$unix(0x1, 0x5, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000340)='GPL\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, &(0x7f0000000680)="6e396043c7f73cdb24daad17f83ce74b34cd63b8facb5c284d61010075bfdbc35cfe8116ba2125d355b852159de6df41715a3e9d41970b39c9293403d0e740dd1fd8e8b590936714c68252a41c8876cefdd8a3b4e05edd64fafd10e7ab0feabc0e", 0x0, 0x0, 0x2}, 0x50) (async) bind$unix(r0, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) (async) listen(r0, 0x402) r2 = socket$unix(0x1, 0x5, 0x0) connect$unix(r2, &(0x7f0000000000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) (async, rerun: 64) accept(r0, 0x0, 0x0) (rerun: 64) 2m10.706190167s ago: executing program 1 (id=1640): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000000240)='syzkaller\x00', 0x4, 0xff0, &(0x7f000062b000)=""/4080, 0x0, 0x0, '\x00', 0x0, @xdp=0x25}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r0, 0xa0001f98, 0xfe71, 0x1f00, &(0x7f0000000440)="85f17444c5a569f1e21b08c0f264", 0x0, 0xa70a, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000001c0)={{r1, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000040)='%ps \x00'}, 0x20) (async) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) (async) r4 = socket(0x21, 0xa, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) r5 = socket(0x2b, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r5) (async) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001100)=ANY=[@ANYRESOCT=r1, @ANYRES32=r3, @ANYRESHEX=r2], 0x3c}}, 0x4008005) sendmsg$nl_route_sched(r4, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}}]}, 0x78}}, 0x0) (async) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000012c0)=@newtfilter={0x30, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0xd, 0xe}}, [@filter_kind_options=@f_bpf={{0x8}, {0x4}}]}, 0x30}}, 0x0) (async) r7 = socket$inet6(0xa, 0x805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private1}]}, &(0x7f00000002c0)=0x10) (async) getsockopt$bt_hci(r3, 0x84, 0x81, &(0x7f0000000080)=""/4076, &(0x7f00000010c0)=0xfec) r8 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r8, 0x890b, 0x0) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000280)={r2}, 0x4) (async) r9 = socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000380)={'vxcan1\x00', 0x0}) r11 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r11, &(0x7f0000000080)={0x1d, r10}, 0x18) sendmsg$can_j1939(r11, &(0x7f00000001c0)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x2}}, 0x18, &(0x7f0000000180)={&(0x7f0000001300)="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", 0x1ba}, 0x1, 0x0, 0x0, 0x400c4}, 0xee) setsockopt$SO_J1939_FILTER(r11, 0x6b, 0x1, &(0x7f00000003c0), 0x0) (async) sendmsg$nl_route_sched(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=@newtfilter={0x24, 0x11, 0x101, 0x70bd27, 0xfffff, {0x0, 0x0, 0x74, r10, {0xa, 0xc}, {0x5, 0xfff3}, {0xfff5, 0x6}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0xc4) (async) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) close(0x4) 1m55.650745537s ago: executing program 32 (id=1640): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000000240)='syzkaller\x00', 0x4, 0xff0, &(0x7f000062b000)=""/4080, 0x0, 0x0, '\x00', 0x0, @xdp=0x25}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r0, 0xa0001f98, 0xfe71, 0x1f00, &(0x7f0000000440)="85f17444c5a569f1e21b08c0f264", 0x0, 0xa70a, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000001c0)={{r1, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000040)='%ps \x00'}, 0x20) (async) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) (async) r4 = socket(0x21, 0xa, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) r5 = socket(0x2b, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r5) (async) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001100)=ANY=[@ANYRESOCT=r1, @ANYRES32=r3, @ANYRESHEX=r2], 0x3c}}, 0x4008005) sendmsg$nl_route_sched(r4, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}}]}, 0x78}}, 0x0) (async) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000012c0)=@newtfilter={0x30, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0xd, 0xe}}, [@filter_kind_options=@f_bpf={{0x8}, {0x4}}]}, 0x30}}, 0x0) (async) r7 = socket$inet6(0xa, 0x805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private1}]}, &(0x7f00000002c0)=0x10) (async) getsockopt$bt_hci(r3, 0x84, 0x81, &(0x7f0000000080)=""/4076, &(0x7f00000010c0)=0xfec) r8 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r8, 0x890b, 0x0) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000280)={r2}, 0x4) (async) r9 = socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000380)={'vxcan1\x00', 0x0}) r11 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r11, &(0x7f0000000080)={0x1d, r10}, 0x18) sendmsg$can_j1939(r11, &(0x7f00000001c0)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x2}}, 0x18, &(0x7f0000000180)={&(0x7f0000001300)="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", 0x1ba}, 0x1, 0x0, 0x0, 0x400c4}, 0xee) setsockopt$SO_J1939_FILTER(r11, 0x6b, 0x1, &(0x7f00000003c0), 0x0) (async) sendmsg$nl_route_sched(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=@newtfilter={0x24, 0x11, 0x101, 0x70bd27, 0xfffff, {0x0, 0x0, 0x74, r10, {0xa, 0xc}, {0x5, 0xfff3}, {0xfff5, 0x6}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0xc4) (async) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) close(0x4) 59.750343731s ago: executing program 2 (id=2642): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c0000001d00070f"], 0x1c}}, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) write$bt_hci(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="0000000208"], 0xe) r1 = socket$netlink(0x10, 0x3, 0xc) sendmmsg(r0, &(0x7f0000000180), 0x0, 0x200040c1) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000200), 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c0002800500010000000000080007"], 0x98}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100"/64], 0x98}}, 0x0) r4 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r4, &(0x7f0000001000)={&(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001640)="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", 0x62b}, {&(0x7f0000000600)="3001fb90647586f4601659c5ad2644b99bfd65452e947b394c96c29278d097c5f170d77283a744139d2ce2a2f4bb5bb37e7396e7bac14056f25d17145e73bc2461b20ea3fce771f1b32d1585e8a456763cfafcf7189145a6e261af6232014cbf8a0f898bf6d14136874b6a1fd7caf8ec9966b0419be0420dc6e247d1a44f038ae29eb4bc67d6a04e80dfb7715ebafaa20fcbc57ade23cba05da1fbe4bba675b742472eebaabf356adc99866930e146125a272cef5baf5dfad4a28a01208d9908183ab2085a781e531f1bed4ac9c245ec19be383047656a7d857d364e6f69eccea5aca3964f", 0xe5}, {&(0x7f0000000e40)="79dfe4263f037de282e588f3c773eca5f0c383e7425d1573aa90a44223bfeced3ff85afe9d0c0b3b5a7ed7fcdb96a3934fe7af73ee25d5d36ba42e2a858c3d134299abc0393e031db435b2156e55eb2b2b2e2300e0706dfc5c4ec73ba929ffe8a7bb7ce55d95fb6e58560c45d96a58a13aa944b98c481a82927ec071b272b4592616116116527fd2dbc0dfd540810275770aa531098c572f714f6852063afc8358fb33cc7ef5c52565d58643e6805bb8a95460b32b4e26bea604e534d8983790b5e2a180fed88108b0f5a499d5f80b4e4047d9ecc03d21856a4ec0d0d41496d99dddfa9098d327d9559e82fceb2b1b1c7be309200691488d6616780cd4e9020865ef41a22175dc52d35dac1232ae1164d7fee64a50651978436207fca4a9026a8a903e7857324458b7e8a143e6fdac0823c8d1a3ac864ad2d0402344aee2511247e716436fe118e65455da74ef25627785638dfa4bf365840fe12fbf73f0d42bcc66efc8693855156f6151e49471e1b7cccbfb01344f76cca177551c73147c32615b53f74a0b7c7ac25b86a01ce36d8fe202d505", 0x194}, {&(0x7f0000000cc0)="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"/349, 0x15d}, {&(0x7f0000000700)="15c84609b06c6d85a5ca6f3a9a242f214aee4e7093161b717090c0c852a05393abd8992d91576f57bbd3488e85d8456d6c6c09de5c5228ee18819665861f01a2823a7cfa8e9260a5fe3921638db2dc5156149f86916810f913a944e1c8cd7fccb63f37900c5b287016e512b050ca214125b2217260c9ce3019e88b80985402ff7ca34be17e0dbda4f028cec9973a2b9eed83eee86f35f2c0adf50a04296e99c0f709fb", 0xa3}], 0x5, &(0x7f00000001c0)=[@ip_tos_int={{0x14, 0x0, 0x1, 0xe1}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x19}}, @ip_retopts={{0xc0, 0x0, 0x7, {[@timestamp_addr={0x44, 0x24, 0x28, 0x1, 0x5, [{@broadcast, 0x2122}, {@multicast1, 0xc36}, {@remote, 0x7}, {@broadcast, 0x80000000}]}, @timestamp_prespec={0x44, 0x44, 0x5, 0x3, 0xa, [{@dev={0xac, 0x14, 0x14, 0x23}, 0x8001}, {@local, 0x5}, {@empty, 0x4}, {@empty, 0x10}, {@broadcast, 0x1}, {@multicast1, 0x5}, {@private=0xa010102, 0x3c5}, {@broadcast, 0x10001}]}, @ssrr={0x89, 0x23, 0x99, [@multicast1, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @multicast1, @multicast2, @empty, @empty]}, @lsrr={0x83, 0x23, 0x3d, [@private=0xa010101, @multicast2, @local, @multicast1, @multicast2, @multicast1, @multicast1, @loopback]}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x9}}, @ip_ttl={{0x14, 0x0, 0x2, 0xfb5}}, @ip_ttl={{0x14, 0x0, 0x2, 0x7fff}}], 0x138}, 0x0) 59.590065419s ago: executing program 2 (id=2645): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x28, r4, 0xcc071acbf25dbf8f, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x28}}, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r5, &(0x7f0000000580)=ANY=[@ANYBLOB="4300000002"], 0x8) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000300)={'sit0\x00', &(0x7f0000000280)={'erspan0\x00', 0x0, 0x8, 0x10, 0xfffffffb, 0x2, {{0xf, 0x4, 0x2, 0x5, 0x3c, 0x66, 0x0, 0x9, 0x29, 0x0, @broadcast, @loopback, {[@noop, @timestamp={0x44, 0x24, 0xc5, 0x0, 0x1, [0x3, 0x7ff6, 0x3, 0x3ff, 0x1, 0x8, 0xcef, 0xa]}, @end]}}}}}) sendmsg$nl_route_sched(r6, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000340)={&(0x7f00000005c0)=@deltfilter={0x145c, 0x2d, 0x200, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, {0xa, 0xfff7}, {0xffe0, 0x5}, {0x3, 0x10}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x141c, 0x2, [@TCA_CGROUP_ACT={0x11ac, 0x1, [@m_bpf={0x1074, 0x1c, 0x0, 0x0, {{0x8}, {0x4c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x4, 0x3, 0x4, 0x8000000, 0x5}}, @TCA_ACT_BPF_FD={0x8, 0x5, r2}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x8}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}]}, {0x1004, 0x6, "aac0c88771ed26e1a0832c6dce7d5b6217eaa114f0104ff55b88fa17af7ee4610837dc5ae31b6c103f558a8d510ea1e26c0ad08d30cd0aa0cb36a8189da8a1dda10eeeeca69f483e66f4ed162e53066f1ac380488bf0f57c1f1cfdbdf02228c18d867d434841ec8598e9e1b4c17a60776c7889111627b495ee36ebe2d8b6a00223ea27dd95be9cca1aa06b9ddb19a2db4cd4fb98728af7eff4445efa71377283f5a11b8976c85e843457eabea1bb0d2203cf5461b2fa8db14272a7a35e9c56d199be5dfdc6f6c70b0ac4ca60b7b5cfbb9c3aa1fc5545778dceb9015a20c09fa47b125a9611e4b70d7195b91914d9172eaa51356210fe9cb7d6f11f63cfbe716f840ccee5d4e1adab2530271356dfac6da39a78e1873f9e47fe001682dd81f88f48072630ed6f7f3f95196f75c1c569f58ca1011fa97f5204c95623f874596eac62838e0a8de43e74af6309eb7f3a7301ab1c473cb051a3efcac6083b26dd0678d4b598c9d215ffc4171882bdfea557b0018805729efa3c61540122d2faf4bf8847e4318a08f52adae5c3afdece967b161114399173dbacee35c1be53b7b9df716841795014e3ec8f8be5abd2fdb467ebd74691d0c3e95f570a9c2c334f20256f13f9944a8b761be8807ade13e296486e2f2289a33f58df3c3ea7a9a2957ab06e2bc9a6f103e9855cda6df3f5f8a96ea1fbb2b0b90b5c55ad494c63dd06b8cb670a9786730317048cf6b67b6c99838ccd85bc2d8127a4b0715ebcfb6ab0deedad8839563fab3d06ee050a79111c1081cfd16920e0d5ef5adae628dabb329685020a57913e07d30b43b806db52302083a90789d283c4edf3a69384366435125c1ec274a3b92ad7334372f734d6b882401e6276ca89da210a5b4d112f323ce3065fe7dde2e98e0b0a7bb6df8e73e19cd62b92187262581396f5118edc4c866f731d240001e031bb1a12e323d7eca6bd28f935e88904400a5f0bac89a39bf42575f5715489d911b06ff840ec51edadb09792e79c0bab713f0c0a1e6c5cb6ca82996c5857ff1e62dc22faddaa4485bc3856fc422762187bfad879a03867652d6a2d6442173c26826ae18904340b049914dacf375ef8396d90c847ff9e59da09f055268be2b9f477eeb0ba36291cb31f7f9a8ae82a36ab8523cad5a8066499d2bbb4fce22bff32c48cfdcc709f42ee944ac52f543fbaa13da38ae134d869ab10a28f08b6d56fa765719919d7bb988c44e28000b83b552af8c91e3144897a1158b111882688a7b8f85961a074bd87f1f7a6d89200e9fc8b69e110d4d1d9d803cd4f4838af21230047978745591a795c86fa711f396b3db231d4abe5d8eb5ffecaad35fdafceb15c1940ce76242f46a2404bd6777d77c728d34d11c4fa63be4be16c39df77192714a19c1af2cdcd4a2a4c4699aa8192e873fa0fcb58bc9cfdfb3e9caabe3ebc7776fb6889645f4b0b651a945504aad3e70010e2c1eb2631675a25bf83edc9cba883af897949c1ddb13c70515e85481486f94c572bee62e0ccb22dd0eec6538e1b39950a80a4429bfc5c43405db0af92e40b8e193a4618d47c48a660b1cfc7dab3bdb941308197b044032e9d6f15c5e457964c15e3f8d5d326486b3190093a0f7a0167ffb7233bbd9b9722da81e3f246697ca7533447c94f79b9887da9e3ea9227045e7424c8dbad2b092351f950c282a4e7ee3b3e1bca8f7faf6ee2183393dc25678965181edd0cc218800acb98747a578b7d249b1b885461838546abbe545f605533dec9c8a389d79fe7b898ccf8e97c802737912b80aa1ad19ac063bdab82721a2f1521ae7c9388a4b96795dfa7c8c1b8805b7436ee02e6008a8f8ac75934acf9b080db02d7771e140bbd516a8ad47619c3bc9397b51e947bbe09beb7dc4833e9d56f520898a66589ea84cd31edb5a797346e8420dda90129c770a59fc7ebb967766fa33e7b24d8165d8130e82dbf14204d81892f1ff18a4df484c3faf77ed8ce84fcd01a22f28645c805bb783370bbff2531d45f2aa0576d52d7d7630ef1782d09a51fa4e60b3d0e044dacfd23a43464a8e95559a144583cabb359af25312a0a58875515d7621bc391eee3d16fe9061d30a7975ca7571e1bc99293f1211b324fe5dfc410d80f4559295dd9aca751eac93743b39ba27c8ca4ef30f047ed1beac318af7dea46fa06a0cb0bdf9d29e834a4eedbfafa9adb925352ef6545ad5824daf94fd2986535a4264c6107073e215c8046c245d56596c30081449dc984b1e818b5ddae61650049e0c258b43f4ac4bb2ef8a0c80ea596a2a42594420bed642ca3ffbed3e36ce80e1bbe1d744f73afebca49385bc96fe27efed5e06ff9b4d543c4aac7cb4a0dd02dfb9f53090c0f7e782526afeb32faeea4b416b7cb0f074eaa500aa5d616fb26fd9aaeb08786f6f2fd074743eb38786353e46eb51c73d8d662eda6d86aed0ae64887da1bc81e937cc8761f3c802ae8fdab87f421f71de0e9ea6e1de8cbd21a43ee40f54a7585388a97daa219268d6051c9ced6d241c33ecf56493d5b0c8e48cd85b0f6e880b3ca9202d8ff56ca487ac5a97583e43f72794e50bd0a07f9d8075cf3135e1d87dabf04e4a2fe956a5becc6b8296df71f5c669f77905f108ae95f3c36aab8191095b300310f4f47092f0b80d1e3a125155fc1bddeeb431a4f44a22e3a5b0cbb74ead3ae1dadfe73f4c1e652e899ab48e4ce8420a89c4b243a33418ef789bb274bf9cd2bef06803d5f8068a14cec045d0be55443684d9478b883d860778f38e3e8b8c5aee5debe8ec5b4c0fc4fc50a534f4e72b0597477ea82675c5179b1659f9e4933ecf7b06e2f0889de94343c0b9d15bf9d6c4b4d73ef56a21d6f43748cb0992a8d9be90fa0f148f57371b04117ccae8477b1b7a17fc2bd0d989d5fcd1b82cf64687233fe3393b5add3a10a31634f98a6e5f49c5b60546ba1ab96893a6366b5ae5c806c8064a164a12f2578bda6f20fa8f5f154c981c2a6436a321fe18747a3c6ad5168aed412ab2c65ece126dba961fdb09dc44abecd324f2912209dee80c33e47f562cdc63e14e92034818c4b71002142f78916fcd10b59f68b7935fbb24f23efe1a0ef5e90faa0c9048f79ce59f0d0abb643a4e42f9ec480b1820e44b89d55aa107161ee5c875d197a049c237beed61df151e59c9272319ccf180de27fa3c3fe5e7aa3acd3b4f249da504f91d498531f76b1a177397a155a0c8fd38f15aa253e159172fd5e215190c123592b58bfa07938ecf3b47708441c700c5ef19e53a47775b9ffe46bfa3671ec81ce8338f6a83bca5fdad79e80bf941b28e44c2b6e2c22ad6bbc98e07f549f561d7d5b5b83969746ef896930747fe41e656d081c7848328dcbf7e2a84f06953400f6b4c90ae296039ba609e0a1f3faeb9cd70e5b5c2c90b375c3a08915ac15d287a3812ef33c8d97b36cd5c0171b451348dfaad24cc026279988ab672cf820aeb4e72c1a0eb6c2667100ffe87959dd00af4893deeea3d0dcc693ecee5eaa44519523345a175e1289fcb57b3da1298b54d611589865c2853b9f5058915358848569c355c74e27e3a6fac5c7e706f68041640c76ddcd667f0e7d31dfd6bae3b7a6f994319afafe68a76326ebb6e2fab108505b3c1411844f5f17ab817a2bc9416b3516b241edc554d1e930e967d25687eb9de76e22822995327bce0ae0285f54c857348261eb0b986efbdfacee829cc3e2caaa2ef586113280568f7ab125e7f0955f7c3ab6a0f0faea2e4ab9a0b6e8a3f5021c78842d7354c902ce3abe8e7494051c0027a70141202c0fd5170c2bc0429e0deb0a37dc4fbdf918170d39614641bdd1eed2ba7b41b17af11b4b51aa972a40903c2ed0e1bc072b144512aa15de46bf268af1f4dc9f41952685601e3e88bd65ee84a4f7995f547556c2f49026c15e0de1218358b9a8ba0f519b2164ea49e3feba6476a5ea3d0883965955c288d0fa0fba326567ad791cc2b361617d9b3a9539b53d4ccef0a40fda0851837214fc75b6a574d72beb2f76a044b33df4acc898597918965504eb23cf7496049e591c31d73a2fbb0676a1a046d4f20884f6826be49ce74a2d862a212ae1f83ece3f135ee63bf602ed95ff4a1e740b0683f54158fcf3511b8d5b1765b3e913b5b4d627d425c386546f2c683eb4a4da6dba7d238fbde9682b96d324ef8ce9a7b59661ca17601c69468dcd7496ac82824881b84664a62bd90a4a02aece7d72d3c39b5740cc2b36440539b277c0a3d11e26b39e0fc9e29635e54e216c53b658c70e75cb535b440970b2983426f707e12c820cac6cd5a6ed8bf4cf18e0cf5497fd034e5c0bf898e6e77e845bada47a839541cf1c65d0aa584d11540b7e55e356a04fc028e08c2a5dea97642d022d0b90848e249ca0514bc7fd0d3ced706a15f19c45904d314d021ccfdfe47de7921e943c7e0a95da5d96e3b10d896df5b01d78b3c8c267ad296478cd82442befd18450ccae20c8f11baf42770a1472e45f61c9f685314c36ad8e13a6920852b0e84fe4d37a880a5e12720c31a8d698c19bb982aeba951ad2ebe7f26cca17a16c93ea6b9596383324ace20a4a5ecd9ffff5ec3cfc336d69a9dbc4236590aa3afc99fdc82b747983fb35ce47afc833ad0641c2720bdcb5273214e6e2bedce7904299638c70d33a360ef2683013a78ee8f21f101fee66e452ed29a695bf457010ca5ac06fe24faee6874b88d514b7604163d8b8bf964057ad6224f7344942edf34c137c68b6bf8d48e5457bae01e131c4817784ce8414b4e6fbad326d4a56c6e4a780bcb1130030da303008669375ca22856b2877eafe06db90ea18c84918ba028ab8637fd93163fdfce6dea2c59c72e93bc9dad6d33fc21d3da7c12419a3f543e885a31507ea31f9e59027a6aafb96f4767f5de6e872d4a43c364ca1c8381e7738076fac8a32b01785b687ce3c995141c39674e2a963d64b910be7d80d38f4cce91e69f7437f29afc1a6cf153ff2ebc2a0b082107edf4aa15821f9549b1ef49cebbbe59cdfc65ad8b7f0fe4e0e54b00c7fce820b420634044e6f0ed177a174037e9ea19267701e2bb79355809f09481edf48cc94327da7eeb2b281ccda4e69d70106a9d7e64ade667744bb2c1a98635947036c44762c8ae1a32a4eec609a1657bb8859b05190c021bba29abd61196fa6b4fc17bab4615d3bd2c916efe517d077c600efbeb9b91b6cac3a4266d99d2339586d0e04cf995943892743c83a2ac9751747595e65f8db636e896fbe31569066aefd76405a98376347e7adf7868e787e8795149964f307ae01d21afeae52a51428558022744d9a5d40ea2e555081c5401248e74091ca2cc767404e5fe321aad92b4ae85f7d74cc605c50b976a747459baaf094568b06eaa9b3ca2e2afd71b6b537a53d945774e02cc49ee26b1825f61c9f693918a17a3959b13079592f444074f86bdb9ec6d4dac8077cb7ba104a4445b8dc11f808ac01a22380f931940efb7019c478b5b49c72117b5d277a090128a6f3aa8fdc18b06299d30b5a6193ef820877cca7481636e3ad4a62375a03d22a3901756bfa096247e4875b9e2aa74558334f7fc085fe10677d91a36e8ba8c7916f4cd5d5c4c35ce23f8905d545aa6bee4bed9c15de7319ded710a1f6b914f83b38e66aae89418a726893504d406c51b1feeaaf0dfe986bce97981a9a6316695430cc8cd55954d84a97441f8df3f1c36a0109ec1ebb8054e8696e28646702d865925ecf60ef4aaf6eb1f083f763713e3cbc1b08d67dc85faa26df006bf6631ce9efbd"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_nat={0x134, 0x5, 0x0, 0x0, {{0x8}, {0xcc, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x8, 0x0, 0x8, 0x9, 0x8}, @broadcast, @remote, 0xff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x4, 0x4, 0x10000000, 0x0, 0xffff}, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffff00, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x5, 0x5, 0x1, 0x3d, 0xdec51f1}, @multicast2, @remote, 0xff000000}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x3, 0x7, 0x5, 0x3, 0xffff0001}, @remote, @local, 0xff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x7, 0x6, 0xffffffffffffffff, 0xfffffffa, 0x8}, @dev={0xac, 0x14, 0x14, 0x3a}, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffff00, 0x1}}]}, {0x41, 0x6, "cac6156165cd5011a0bda0caaa79029b54deada73e2d0bb3f8eca93cfd3c757ac1e093ea50e0eb284d393ef298b7d58a917896c2fc0123f247d207063f"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}, @TCA_CGROUP_EMATCHES={0x26c, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x4}}, @TCA_EMATCH_TREE_LIST={0x1ec, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x14, 0x3, 0x0, 0x0, {{0x4, 0x2, 0x7}, {0x9, 0x3, 0x0, ':v{'}}}, @TCF_EM_NBYTE={0x18, 0x1, 0x0, 0x0, {{0x1, 0x2, 0xc}, {0x8, 0x5, 0x2, "be5f6cd81f"}}}, @TCF_EM_CONTAINER={0xdc, 0x1, 0x0, 0x0, {{0x5, 0x0, 0x2}, "92330c06251e5e41be9d9233c8f8e897fb8df9cc257d3e5f5044faeaa606e6dde7cea3e8a7735f2e39a63e66a6c6935c15849e39fd9d1a971e9e5ff8a9eddd0492800bccb4662157d5329511ad55701bfbc50ece5c0bd56a0b8f029b4164e38bbe787bafb3bfac0759d741e9db028fe9abeff0f5fc89dd325ac059c21e843503e92fc27f8ac15e9109cf13e80bffea0acc30276e0f4cd1a1d615662e6c40a9ef08ef2d8e88e4d2239f6699d217914f268944315aad367f0b2b19b76cef6ce920969299f4278a39d5797eb204f0f3"}}, @TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0x7, 0x7, 0x3}, {{0x2, 0x1, 0x1}, {0x1, 0x0, 0x0, 0x1}}}}, @TCF_EM_META={0x84, 0x3, 0x0, 0x0, {{0x9, 0x4, 0x4}, [@TCA_EM_META_RVALUE={0xc, 0x3, [@TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_VAR, @TCF_META_TYPE_INT=0x1]}, @TCA_EM_META_RVALUE={0x11, 0x3, [@TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_VAR, @TCF_META_TYPE_VAR="8d1517b1a5"]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x401, 0xb5, 0x2}, {0x1, 0x8, 0x1}}}, @TCA_EM_META_RVALUE={0x1a, 0x3, [@TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_VAR="2527132f", @TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_VAR="b10d41f4bef8d6b3092d"]}, @TCA_EM_META_LVALUE={0x16, 0x2, [@TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_VAR="e4", @TCF_META_TYPE_VAR="ba6262", @TCF_META_TYPE_VAR="222d8f8413e7", @TCF_META_TYPE_INT=0x9]}, @TCA_EM_META_LVALUE={0xc, 0x2, [@TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_INT=0x9]}, @TCA_EM_META_HDR={0xc, 0x1, {{0xff, 0xd, 0x2}, {0x5, 0x3, 0x1}}}]}}, @TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0x4, 0x3, 0xa8}, {0xe, 0x0, 0x140000, 0x800}}}, @TCF_EM_CMP={0x18, 0x3, 0x0, 0x0, {{0xfff3, 0x1, 0x3}, {0x4, 0x8, 0x8, 0x0, 0x6, 0x0, 0x2}}}, @TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x2, 0x7, 0x1}, {{0x3, 0x1}, {0x1, 0x0, 0x1, 0x1}}}}]}, @TCA_EMATCH_TREE_LIST={0x74, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0xfffb, 0x8, 0x7}, {0x1, 0x6, 0x1}}}, @TCF_EM_CONTAINER={0x18, 0x3, 0x0, 0x0, {{0x2, 0x0, 0x100}, "88c1d7a1caa8bff6d6e823bd"}}, @TCF_EM_CMP={0x18, 0x3, 0x0, 0x0, {{0x8, 0x1, 0x5}, {0x9, 0x3, 0x7, 0x2, 0x8, 0x1, 0x1}}}, @TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0x2450, 0x1, 0x200}, {0x0, 0x2, 0x56, 0x1, 0x2, 0x1, 0x1}}}, @TCF_EM_IPT={0x18, 0x3, 0x0, 0x0, {{0x0, 0x9, 0xfff9}, [@TCA_EM_IPT_MATCH_NAME={0xb}]}}]}]}]}}, @TCA_CHAIN={0x8, 0xb, 0x3}, @TCA_CHAIN={0x8, 0xb, 0x80000000}]}, 0x145c}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="240000001e000100d50000000000200002002b1d1500"/36], 0x24}, 0x1, 0x0, 0x0, 0x2}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000005e000100"/20, @ANYRES64=r1, @ANYRES8=r3], 0x1c}}, 0x97) 59.317589336s ago: executing program 2 (id=2649): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYINDEX(r0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x44, 0xf, 0x6, 0x801, 0x0, 0x0, {0xd, 0x0, 0x9}, [@IPSET_ATTR_INDEX={0x6, 0xb, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x2}, @IPSET_ATTR_INDEX={0x6, 0xb, 0xffffffffffffffff}]}, 0x44}}, 0x20000000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x3}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x23}, @NFTA_SET_EXPR={0x20, 0x11, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8}]}}}]}], {0x14, 0x10}}, 0xa4}}, 0x0) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000240)={&(0x7f00000000c0)={0x164, 0x1, 0x1, 0x3, 0x0, 0x0, {0xa, 0x0, 0x8}, [@CTA_SEQ_ADJ_REPLY={0x1c, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x22}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x8}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x8}]}, @CTA_TUPLE_REPLY={0x74, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x17}}, {0x14, 0x4, @private2}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010101}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x38}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}]}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x6}, @CTA_PROTOINFO={0x28, 0x4, 0x0, 0x1, @CTA_PROTOINFO_TCP={0x24, 0x1, 0x0, 0x1, [@CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0x4, 0x1}}, @CTA_PROTOINFO_TCP_WSCALE_ORIGINAL={0x5, 0x2, 0x6}, @CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0x86, 0x8}}, @CTA_PROTOINFO_TCP_FLAGS_ORIGINAL={0x6, 0x4, {0x5a, 0xc}}]}}, @CTA_PROTOINFO={0x18, 0x4, 0x0, 0x1, @CTA_PROTOINFO_DCCP={0x14, 0x2, 0x0, 0x1, [@CTA_PROTOINFO_DCCP_ROLE={0x5, 0x2, 0x6e}, @CTA_PROTOINFO_DCCP_STATE={0x5}]}}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x4}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x7}, @CTA_SEQ_ADJ_REPLY={0x54, 0x10, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x81}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x1}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x7}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x5}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0xfffffff7}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0xffff}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0xff}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x7}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0xffffffff}]}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x9}, @CTA_SEQ_ADJ_REPLY={0xc, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x8001}]}]}, 0x164}, 0x1, 0x0, 0x0, 0x4010}, 0x40812) 59.269207671s ago: executing program 2 (id=2651): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x1, 0x6, 0x8, 0x8}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$DEVLINK_CMD_SB_POOL_GET(0xffffffffffffffff, 0x0, 0x10) (async) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, 0x0}, 0x0) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x10, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8f, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@alu={0x7, 0x0, 0x1, 0x9, 0x0, 0x0, 0xfffffffffffffffc}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x5}, 0x94) accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x80800) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'veth0_vlan\x00', 0x0}) (async) r4 = gettid() (async) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f00000002c0)={0x1f, 0x0, 0x1}, 0x6) (async) r6 = socket(0x10, 0x803, 0x0) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x403, 0xfffffff9, 0x25dfdbfb, {0x0, 0x0, 0x74, r3, 0x19c04, 0x55007}, [@IFLA_NET_NS_PID={0x8, 0x13, r4}]}, 0x28}, 0x1, 0x0, 0x0, 0x4802}, 0x0) 59.126380712s ago: executing program 2 (id=2655): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000001480)={@local, @multicast, @void, {@ipv4={0x800, @udp={{0x8, 0x4, 0x0, 0x3, 0x30, 0x67, 0x0, 0x5, 0x11, 0x0, @private=0xa010101, @local, {[@generic={0x44, 0x5, "ff6852"}, @ra={0x94, 0x4}]}}, {0x4e23, 0x4e22, 0x10, 0x0, @gue={{0x2, 0x0, 0x0, 0x6, 0x0, @val=0x80}}}}}}}, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="300000002b000b00000000ff0f00000007000000040003000c00018006000000e948ef000c000200070001"], 0x30}}, 0x4000) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xe, 0xb}}}, 0x24}}, 0x800) 58.813271629s ago: executing program 2 (id=2660): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f0000000180)={0x2, 'vlan0\x00', {0x5}}) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)={0x34, r2, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_RINGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}]}, @ETHTOOL_A_RINGS_TX={0x8}]}, 0x34}}, 0x0) recvmmsg(r0, &(0x7f0000000200)=[{{&(0x7f0000000280), 0x80, &(0x7f0000000140)=[{&(0x7f0000000080)=""/20, 0x14}], 0x1, &(0x7f0000001040)=""/4096, 0x1000}, 0x7}], 0x1, 0x10000, &(0x7f0000000300)={0x0, 0x3938700}) socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_SEC_PARAMS(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x7fffffff}, 0x10) sendmsg$kcm(r4, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="2e0000004a008102e00f80ecdb4cb9020a", 0xffffffb5}, {&(0x7f0000001700)="0c7cc75350f4a590e15c61c7942348092734fe1863473bbce6798a60e9", 0x1d}], 0x2, 0x0, 0x0, 0x10}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r6, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) (async) bind$netlink(r6, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) socket$inet6(0xa, 0x3, 0x7) (async) r7 = socket$inet6(0xa, 0x3, 0x7) socket$key(0xf, 0x3, 0x2) connect$inet6(r7, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) (async) connect$inet6(r7, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@dev, @in=@empty, 0x0, 0x0, 0x4e22, 0x4, 0xa}, {0xbd1, 0x0, 0x3}, {0x81, 0x2}, 0x2000000, 0x0, 0x1}, {{@in=@local, 0x8000, 0x2b}, 0x0, @in6=@empty, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x10000}}, 0xe8) sendmmsg(r7, &(0x7f0000000480), 0x2e9, 0xffe0) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a50000000060a0b04000000000000000002000000240004802000018007b954940c9231f5802955f8ec5c0001006374000014000280080002400000000808000140000000000900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a"], 0x78}}, 0x0) unshare(0x22020600) (async) unshare(0x22020600) socket$nl_route(0x10, 0x3, 0x0) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r9, &(0x7f00000003c0)="99faa91785b47c245a50c1a6fe690e8bd2724fd14563208b3850a6f151315863c7957c38826892fd8f6b117a058de4932caeb8e9dfcedfda8e4940362c63b62c5258db43d493526a4c32491962d337e20cf952dccb54b041052906f3d9c2f54ae5d829f63259320acd54e403bd9065214eab5d8933f91f7d7d0fec5fe2151453b07a14355e15be6aeae3bcf2c68efdb214e94e95dde2fea5e6ff7775", 0x9c, 0x8040, &(0x7f0000000480)={0xa, 0x4e21, 0x60, @mcast2, 0x4}, 0x1c) r10 = syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/net\x00') socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r11, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"}) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c00000010003b1500000000000000000000000050564b91d4f4c803b986fafc857ec3af84b8c82e602959c9bda6f4c3939f516aecb17e06df4b1f7115fdeb97ea2db535b88083a8bbec3ebc5dfaef40d705958f67363c5e9c4925f0c85ad8e7755f61d4c05c40661b12a0e803f3974f85d4d53b4a98a859c71d8f66bb956e780ab8b346ca8856b60d1dcb99f0506409c811eb7f9575291ec97dc90febca6fce352368d0081405d453d2d7dd195308c741564bc8cbac5490879f6bc8df097dae689bc02c0dc45a53888ca293e1db4a0cd8306458099851bdf9e42c2e8ffc80d14c13f259f2276c86693bbdb9e577774df7691e9cbcf6095a2d392bc6c3412314d969c1ca6d79253ab827f9459dbec50f118841ba728c6615cec0ac10daaa7ed1f6e20153a46598398b92882eccd1c652a7b5d4", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e0000006700028008001c00", @ANYRES32=r10, @ANYBLOB], 0x3c}}, 0x0) (async) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e0000006700028008001c00", @ANYRES32=r10, @ANYBLOB], 0x3c}}, 0x0) 58.45307831s ago: executing program 33 (id=2660): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f0000000180)={0x2, 'vlan0\x00', {0x5}}) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)={0x34, r2, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_RINGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}]}, @ETHTOOL_A_RINGS_TX={0x8}]}, 0x34}}, 0x0) recvmmsg(r0, &(0x7f0000000200)=[{{&(0x7f0000000280), 0x80, &(0x7f0000000140)=[{&(0x7f0000000080)=""/20, 0x14}], 0x1, &(0x7f0000001040)=""/4096, 0x1000}, 0x7}], 0x1, 0x10000, &(0x7f0000000300)={0x0, 0x3938700}) socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_SEC_PARAMS(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x7fffffff}, 0x10) sendmsg$kcm(r4, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="2e0000004a008102e00f80ecdb4cb9020a", 0xffffffb5}, {&(0x7f0000001700)="0c7cc75350f4a590e15c61c7942348092734fe1863473bbce6798a60e9", 0x1d}], 0x2, 0x0, 0x0, 0x10}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r6, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) (async) bind$netlink(r6, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) socket$inet6(0xa, 0x3, 0x7) (async) r7 = socket$inet6(0xa, 0x3, 0x7) socket$key(0xf, 0x3, 0x2) connect$inet6(r7, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) (async) connect$inet6(r7, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@dev, @in=@empty, 0x0, 0x0, 0x4e22, 0x4, 0xa}, {0xbd1, 0x0, 0x3}, {0x81, 0x2}, 0x2000000, 0x0, 0x1}, {{@in=@local, 0x8000, 0x2b}, 0x0, @in6=@empty, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x10000}}, 0xe8) sendmmsg(r7, &(0x7f0000000480), 0x2e9, 0xffe0) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a50000000060a0b04000000000000000002000000240004802000018007b954940c9231f5802955f8ec5c0001006374000014000280080002400000000808000140000000000900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a"], 0x78}}, 0x0) unshare(0x22020600) (async) unshare(0x22020600) socket$nl_route(0x10, 0x3, 0x0) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r9, &(0x7f00000003c0)="99faa91785b47c245a50c1a6fe690e8bd2724fd14563208b3850a6f151315863c7957c38826892fd8f6b117a058de4932caeb8e9dfcedfda8e4940362c63b62c5258db43d493526a4c32491962d337e20cf952dccb54b041052906f3d9c2f54ae5d829f63259320acd54e403bd9065214eab5d8933f91f7d7d0fec5fe2151453b07a14355e15be6aeae3bcf2c68efdb214e94e95dde2fea5e6ff7775", 0x9c, 0x8040, &(0x7f0000000480)={0xa, 0x4e21, 0x60, @mcast2, 0x4}, 0x1c) r10 = syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/net\x00') socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r11, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"}) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e0000006700028008001c00", @ANYRES32=r10, @ANYBLOB], 0x3c}}, 0x0) (async) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e0000006700028008001c00", @ANYRES32=r10, @ANYBLOB], 0x3c}}, 0x0) 51.694832758s ago: executing program 3 (id=2750): syz_init_net_socket$x25(0x9, 0x5, 0x0) (async) syz_init_net_socket$x25(0x9, 0x5, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) (async) r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) socket$kcm(0x10, 0x2, 0x0) (async) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="100000002d000b02d25a806f8c6394f9101a04000a", 0x15}], 0x1}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_merged\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) socket$kcm(0x2, 0xa, 0x2) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r2}, &(0x7f00000001c0), &(0x7f0000000300)=r3}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r3, 0x5, 0xd50, 0x0, &(0x7f00000003c0)="000000000000000000000001e370", 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x50) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081044e81f782db44b9040a1d08030e000000e8fea4a1180015000600142603600e1208000f1000810401a80016000a0001", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0, 0x0, 0x0, 0x5c8}, 0x0) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0, 0x0, 0x0, 0x5c8}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33) (async) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0xfe33) socket(0x2000000015, 0x80005, 0x0) (async) r4 = socket(0x2000000015, 0x80005, 0x0) ioctl$SIOCSIFMTU(r4, 0x8922, &(0x7f0000000080)={'veth0_to_bond\x00', 0x57e6}) r5 = socket(0x10, 0x3, 0x0) sendto$inet6(r5, &(0x7f0000000080)="7800000018002507b9409b14ffff00000204be04020b06050e020909430009003f00064c0a0000000d0085a168d0bf46d32345653600648d04000500eb16000049935ade4a460c89b6ec0cff3959547f509058ba86c902000000004a23000400180004000a0000000000e000e218d1ddf66ed538f2523250", 0x78, 0x0, 0x0, 0x0) setsockopt$X25_QBITINCL(r4, 0x106, 0x1, &(0x7f0000000000), 0x4) ioctl$sock_inet_SIOCGIFBRDADDR(r0, 0x8919, 0x0) 51.33046676s ago: executing program 3 (id=2755): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newsa={0xec, 0x10, 0x200, 0x70bd28, 0x0, {{@in=@initdev={0xac, 0x1e, 0x9, 0x0}, @in=@local, 0x4e23, 0x1, 0x0, 0x2000, 0xa, 0x0, 0x0, 0x33}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x32}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', {0x0, 0x0, 0x8, 0x100000001, 0x6}, {0x0, 0x0, 0x2, 0xfffffffffffffffc}, {0xc, 0xfffffffc}, 0x70bd27, 0x0, 0x2, 0x0, 0x2}}, 0xec}, 0x1, 0x0, 0x0, 0xc0}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000240)={'syztnl1\x00', &(0x7f00000001c0)={'ip6gre0\x00', 0x0, 0x4, 0x5, 0x1, 0xd, 0x11, @dev={0xfe, 0x80, '\x00', 0xb}, @mcast1, 0x700, 0x700, 0x7b2, 0x1}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=@newqdisc={0x16c, 0x24, 0x10, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0x2, 0xf}, {0x4, 0x10}, {0xf, 0x8}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x10001}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x81}, @TCA_STAB={0x130, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xa5, 0xa, 0x3, 0x4, 0x1, 0x8, 0x2, 0x9}}, {0x16, 0x2, [0x3, 0x9, 0x3, 0xfff7, 0x2, 0x8, 0x2, 0x8, 0xdd87]}}, {{0x1c, 0x1, {0x1, 0x9, 0x0, 0x9, 0x0, 0x2, 0x7}}, {0x4}}, {{0x1c, 0x1, {0x0, 0x7, 0x9, 0xfffffff9, 0x2, 0x8, 0x7, 0x6}}, {0x10, 0x2, [0x3, 0x6, 0x9, 0x401, 0x200, 0x1]}}, {{0x1c, 0x1, {0xe0, 0x4, 0x702, 0x9b, 0x0, 0xb, 0x0, 0x9}}, {0x16, 0x2, [0x5975, 0x10, 0xec, 0xfff7, 0x4, 0x4, 0x1, 0x2, 0x6]}}, {{0x1c, 0x1, {0x0, 0x5, 0x6ef, 0xffffffff, 0x0, 0xb6, 0x80000001, 0x3}}, {0xa, 0x2, [0x8, 0x3, 0x3]}}, {{0x1c, 0x1, {0x2, 0x6, 0x8, 0x6, 0x2, 0x7, 0x1, 0x3}}, {0xa, 0x2, [0xff, 0x1f, 0x3]}}, {{0x1c, 0x1, {0x4, 0x6, 0x34b, 0xc599, 0x2, 0x1, 0xffffffff, 0x3}}, {0xa, 0x2, [0x8, 0x7, 0x5]}}]}, @TCA_RATE={0x6, 0x5, {0x5, 0x9}}]}, 0x16c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000040)=@RTM_NEWMDB={0x38, 0x54, 0x1, 0x1, 0x0, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x0, 0x3, {@ip4=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x86dd}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000001440)={0x184, 0x19, 0x1, 0x0, 0x0, {0x1d, 0xd601, 0x9}, [@nested={0x4d, 0x12, 0x0, 0x1, [@generic="25b57e3561934efacde0a223b473fe77f3e5ba760d3793b2f943b7528ea30683bc4a506cf756740574b88d396af9b596387005002e0ccb26a568000005006f88d6e1db9b2bf7cbfa3c"]}, @nested={0x120, 0x6, 0x0, 0x1, [@typed={0x119, 0x0, 0x0, 0x0, @binary="0f46f1849e80333a72c47c602d9970739272ca25d0ed59ba325be2bda24a9d7bdfe830ec5ca57e2d54f2dbf1ce1d4305d0ef433df7b8370107edbc85bfb216efdc1b2b64d6a716ab6d8204ff7498a0d528471596a2bffd9f39f5d68ca46f729302ab4cb1bca132d999b0a04b1ddb2404cb28de890a87617e79217b4cafbcb340e885260db96e23db715cecc61ce445adffffffff29e6fb925cc6f1c5db000000004f582f94a84bf0152dfada7b9826bbbfd394d745fd122010a19f7c2e459f59c5e8882dc1043dec61df7983901630639c97157316c9285b79ba1991bc3c26eac94685926b8724edd1909877656caeb279bfb485282a7e32882ec6a67dd14e4d3d7d150ab8ca34b14e958ae0b4c89727b0a52fdcf8"}]}]}, 0x184}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r3) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f00000000c0)={0x2, &(0x7f0000000180)=[{0x3c}, {0x6}]}, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r3) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r5) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x30, r6, 0x1, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_STA_VLAN={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x24000000) sendmsg$NL80211_CMD_SET_BSS(r3, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x28, r4, 0x2, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x2, 0x7d}}}}}, 0x28}}, 0x20008000) 51.124602172s ago: executing program 3 (id=2758): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000380)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32=r3, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005000000100004006cef770aaa898bfffddb23aed73c6f6164"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x44084) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000000)={0x27}, 0x62) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x2, &(0x7f0000000140)=ANY=[@ANYBLOB="9110b6000000000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) bind$bt_hci(r4, &(0x7f0000000180)={0x27}, 0x6) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000000)) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010003b1500"/20, @ANYRES32=0x0, @ANYBLOB="000000000000020014001280090001007665746800000000040000000000000000000000e51c232e9f3625344ab2117dfd3aec8f67b2b5de985f7af2b5ce89754dedc807d5bf117d12b90bfb2fbe020162ba1912d954cd9dd51f602fcd1d7809592b6c1569156431bd384674b39d79af6e302158e40f9f20c4e8f41e6b22d5f82afc83fc1ceb3febb3fc271f99efdfcf4b3c2a016c4e302c419e371130661fb01d7badf3c52cca5ead7f8d3cd1b495082440b5cf76f02fde14222924128cc3cd36f654295b66e8ac8ae06a6432b493e035f301583edfbd0513a5afe77746436569ea41b135404ef6b88a0331eebda62d1a78b3e810d9a4fbf8752d0276f5e209f58e61e851d1cb84d0a90b1db1d2c4a1486f1c2088a502e1"], 0x3c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) (async) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000240)) (async) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000380)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32=r3, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005000000100004006cef770aaa898bfffddb23aed73c6f6164"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x44084) (async) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) (async) bind$bt_hci(r4, &(0x7f0000000000)={0x27}, 0x62) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x2, &(0x7f0000000140)=ANY=[@ANYBLOB="9110b6000000000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) (async) bind$bt_hci(r4, &(0x7f0000000180)={0x27}, 0x6) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000000)) (async) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010003b1500"/20, @ANYRES32=0x0, @ANYBLOB="000000000000020014001280090001007665746800000000040000000000000000000000e51c232e9f3625344ab2117dfd3aec8f67b2b5de985f7af2b5ce89754dedc807d5bf117d12b90bfb2fbe020162ba1912d954cd9dd51f602fcd1d7809592b6c1569156431bd384674b39d79af6e302158e40f9f20c4e8f41e6b22d5f82afc83fc1ceb3febb3fc271f99efdfcf4b3c2a016c4e302c419e371130661fb01d7badf3c52cca5ead7f8d3cd1b495082440b5cf76f02fde14222924128cc3cd36f654295b66e8ac8ae06a6432b493e035f301583edfbd0513a5afe77746436569ea41b135404ef6b88a0331eebda62d1a78b3e810d9a4fbf8752d0276f5e209f58e61e851d1cb84d0a90b1db1d2c4a1486f1c2088a502e1"], 0x3c}}, 0x0) (async) 50.7993709s ago: executing program 3 (id=2762): r0 = socket(0x2a, 0x400000000080803, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000140)=@ethtool_regs={0x4, 0x0, 0x79, "05db33088722365a8416040c894c72e43b6ea4e7a2f687a3bea49d07269ccbdbb7be62c0b45ec41990e06ee9a0d22fa00f12cb5b4f656b12346f30314309a9c1d27edc5097f32323c05125caff0f819532e6808f2c246c2428529de38546c4f7f0bba2675ca667c7879081e21d11a5fafb970b99e36faff189"}}) 50.737094031s ago: executing program 3 (id=2763): socket$inet_sctp(0x2, 0x1, 0x84) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet6(0xa, 0x3, 0x87) bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) bind$unix(r2, &(0x7f0000000040)=@abs={0x1, 0x0, 0x4e22}, 0x6e) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000100)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x94) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000940)) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@remote, @in=@multicast1, 0xfffd, 0x0, 0x4e20, 0x0, 0x2}, {0x0, 0x4, 0x1, 0x0, 0x0, 0x9}, {0x1fe, 0xffffffffe, 0x4053e5, 0x20}, 0x6, 0x1, 0x1, 0x0, 0x0, 0x1}, {{@in=@empty, 0x1, 0x32}, 0x2, @in6=@private0, 0x3502, 0x5, 0x0, 0x0, 0x6, 0xfffffffd}}, 0xe8) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt(r3, 0x84, 0x7f, &(0x7f0000000040)="020000000980ffff", 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x0, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000003c0)={0x0, 0x0, 0x401}, 0x10}, 0x94) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "00ed6a", 0xb, 0x2c, 0x0, @remote, @local, {[], {{0x2c00, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r0, 0x0) bind$rds(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) r4 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r4, &(0x7f0000000180)={0xa, 0x3, 0x3, @dev={0xfe, 0x80, '\x00', 0xd}, 0x9}, 0x1c) sendmmsg$unix(r4, &(0x7f0000007b80)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2404c054}}], 0x1, 0x2000c080) sendmsg(r4, &(0x7f00000000c0)={0x0, 0x33, &(0x7f0000000100)=[{&(0x7f0000000000)=',', 0x584}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="68000000100001002fbd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0201000000000000140003006e657464657673696d30000000000000"], 0x68}}, 0x24040800) 47.687760645s ago: executing program 0 (id=2803): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r2 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r2, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000100)='a', 0x1}], 0x1, 0x0, 0x0, 0x44}], 0x1, 0x0) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x3f, &(0x7f0000000240)=0x4ab8a40e, 0x4) setsockopt$inet_sctp_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000180)={0x0, 0x20, 0x8f, 0x2, 0x0, 0x0, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x4}, 0xe) sendmmsg$inet_sctp(r2, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="300000000000000084000000010000000000000004"], 0x30}], 0x1, 0x0) recvfrom$rxrpc(r2, 0x0, 0x0, 0x10000, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000740)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0xe8, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_EXPR={0x48, 0x11, 0x0, 0x1, @connlimit={{0xe}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8}, @NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_CONNLIMIT_FLAGS={0x8}, @NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x4}]}}}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_USERDATA={0x75, 0xd, 0x1, 0x0, "3d09101b2d836398eee4d59521b4008bc477fb48dab2637af6ce92d191e5b1c8e4d86dc57b2f794f330553fffd2c8d0ef4e5c83dc2b61c7a2fef2f794817ebe1dde9f12ab856da95f80ffed8e2e549fd8f6ba87b7e408ef1cbc8ae0b538788bb0591f9c49287c295e0275bea7266a6a68a"}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0xa}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x150}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000000d0a010300000a000001000000000000"], 0x14}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) close(r3) recvfrom(r4, 0x0, 0x0, 0x40002062, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000340)=0x0) sendmsg$NFC_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000480)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="200026bd7000f7021b0000010000e408001100", @ANYRES32=r5, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0xc004}, 0xc000) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="0000000000004a641c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="40000000000d0000000000000000000000000000642e0d06e962e1b096f260ae9003e8783e0e99cad8", @ANYRESDEC, @ANYBLOB="0005000000000000180012800b0001006772657461700000080002800400120008000a00", @ANYRES32=r9], 0x40}, 0x1, 0x0, 0x0, 0x24000804}, 0x0) r10 = socket$l2tp(0x2, 0x2, 0x73) recvfrom$l2tp(r10, 0x0, 0x0, 0x40000060, 0x0, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000580)=ANY=[@ANYBLOB="9feb01001800130000000000400000004000000009000000000000000000000905000000070000000000000e0100000000000000000000000000000d02000000000000000000000d00000000000000000000000200000000000000000000005f00"], 0x0, 0x61}, 0x20) sendmsg$nl_route(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00030000000000001c0012800c0001006d6163766c616e000c000280080001000800000008000500", @ANYRES32=r12, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r12, @ANYBLOB], 0x4c}}, 0x0) 47.284734119s ago: executing program 0 (id=2804): r0 = socket$alg(0x26, 0x5, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x4, 0x80000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3, 0x3}, {0xa, 0xffe0}, {0x0, 0x1}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_TUPDATE={0x8, 0x4, 0x12000000}, @TCA_FQ_PIE_BYTEMODE={0x8, 0xb, 0x1}]}}]}, 0x44}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x4, 0x80000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3, 0x3}, {0xa, 0xffe0}, {0x0, 0x1}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_TUPDATE={0x8, 0x4, 0x12000000}, @TCA_FQ_PIE_BYTEMODE={0x8, 0xb, 0x1}]}}]}, 0x44}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00"], 0x50}}, 0x4008840) r1 = socket(0x10, 0x80002, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[], 0x64}, 0x1, 0x0, 0x0, 0x4004001}, 0x0) sendmmsg$alg(r1, &(0x7f00000000c0), 0x492492492492627, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'essiv(cbc(aes),sha256)\x00'}, 0x58) (async) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'essiv(cbc(aes),sha256)\x00'}, 0x58) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_subtree(r5, &(0x7f0000000140), 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f0000000080)={[{0x2d, 'pids'}]}, 0x6) (async) write$cgroup_subtree(r6, &(0x7f0000000080)={[{0x2d, 'pids'}]}, 0x6) sendmsg$NL80211_CMD_SET_CQM(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x38, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x5, 0x5, 0x4d}, @NL80211_ATTR_CQM_TXE_PKTS={0x23, 0x6, 0x2}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x337}]}]}, 0xfffffffffffffe02}}, 0x0) r7 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r7, &(0x7f0000000680)=[{{&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}}], 0x1, 0x4000000) r8 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r7, 0x84, 0x10, &(0x7f00000000c0)=@sack_info={r9, 0x3, 0x7}, 0xc) (async) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r7, 0x84, 0x10, &(0x7f00000000c0)=@sack_info={r9, 0x3, 0x7}, 0xc) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000240)="ad56b6c5820fa69d38723924091d000000", 0x11) (async) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000240)="ad56b6c5820fa69d38723924091d000000", 0x11) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$SO_ATTACH_FILTER(r10, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000400)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x40}, {0x6}]}, 0x10) (async) setsockopt$SO_ATTACH_FILTER(r10, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000400)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x40}, {0x6}]}, 0x10) sendmsg$IPSET_CMD_GET_BYNAME(r10, &(0x7f0000001280)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000000e0601020000000000009a92e42a0900020073797a0a495e906779cb075009a93be16118fb320000000005000100070000000000"], 0x28}}, 0x28000000) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r2, 0x8010661b, &(0x7f0000000080)) (async) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r2, 0x8010661b, &(0x7f0000000080)) 47.038176729s ago: executing program 0 (id=2806): syz_emit_ethernet(0x8e, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaa1acd1f78800d86dd608a37f200587300fe80000b0000000000000000000000bbfe8000000000000000000000000000aa00000000", @ANYRES8=0x0], 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd010000000000140000006000000003082f00fe88a43de1a400000000000000007d01ff0200000000000000000000000000010000883e"], 0xfdef) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=@ipv6_getnexthop={0x18, 0x6a, 0x903, 0x70bd2b, 0x25dfdbfb}, 0x18}, 0x1, 0x0, 0x0, 0x8000}, 0x4040) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000024001280090001006281dcd2b5e2440fe86f6e6400000000140000000100000000000000"], 0x44}}, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000640), r5) r6 = openat$cgroup_ro(r4, &(0x7f0000000080)='blkio.bfq.sectors_recursive\x00', 0x0, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)) preadv(r6, &(0x7f00000000c0)=[{&(0x7f0000000200)=""/113, 0x71}], 0x1, 0x2, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$IPVS_CMD_DEL_DAEMON(r6, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000440)={&(0x7f0000000680)=ANY=[@ANYRESHEX=r0, @ANYRES8=r4, @ANYBLOB="e488fc0ef2b4435de94fb3675f9824b0c467b465508761f1063b54ccaf8126dc769a61d729a20971bebf77ae3351cab2d1bae38914e9c6b76c2156a4682bf37557e82ff488eb5c7355c2ad2366b664641dc84e9e98d787502b7e326b12a32bc2e076e3755b41ca05fd5993faf34fc235ceaf8e1f4ecd1136b0f63bd97c79e6101f90ca45d4d0b7f195ebbaf8a20c", @ANYRES32, @ANYRESDEC=r1], 0x50}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = openat$cgroup_ro(r4, &(0x7f0000000400)='freezer.parent_freezing\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r8, 0x0) socket$packet(0x11, 0x2, 0x300) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_PROTOCOLS(r7, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000240)={&(0x7f0000000740)=ANY=[@ANYBLOB="0a080000ab85070296581dafd2ec561fb9f80c6a93fe6f4bae436a861306d35274ac95cd32c98bd4e5bf2965b8d5bfaf0ade7f5ca2ba5d70d2433ba33b60e87b104a43f06eb6c001280ad5b0e986c0ef2418eb756e", @ANYBLOB="82e19f069f0bbbb18c9fedfec82869fae50898fa6b2c151d6f4f570d243063dbec3e71c42c5b6376f8790aafa03004c675c4d7f7080adfa4ee8bf86309a29581333deccec8b9876aca69a40f3c8065f162148150bcc79951ac6b00569544521876bef2fa9fe2c8cec94320efea61d64ce38ae6c6a0a8ce7d34aa5478436e030a9e1e47757c3bac1a86f834eedf5bca6e74269015c91ea813d5377073eb7b14559cb2052552720d970a8172eca541ddcf2814cfb0a43cf22e43f69bbf00f4515da2eb791bc28af5e48cf454ee38ce9dec9d58d4eff62013c788f6154549d381a2f575cf2ab9c698dd5ddc", @ANYBLOB="55e12cbd7000fcdbdf25070000000500010000000000050001000000000014000500fe80000000000000000000000000003f"], 0x38}, 0x1, 0x0, 0x0, 0x20000041}, 0x20000000) r9 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r8, 0x84, 0x6e, &(0x7f00000004c0)=[@in={0x2, 0x4e22, @remote}, @in6={0xa, 0x4e24, 0xb8c6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x6}], 0x2c) setsockopt$inet6_udp_int(r9, 0x11, 0x67, &(0x7f0000000940)=0x28, 0x4) sendto$inet6(r9, 0x0, 0x0, 0x400ad80, &(0x7f0000000080)={0xa, 0x4621, 0x0, @local}, 0x1c) sendmmsg$inet6(r9, &(0x7f0000006780)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="b3ab706204ee39c9dae21a1718ee351ebc92d2f0d482a863ae5c0b4d768ffe745af2c53a083d9b761b", 0xfff7}], 0x1}, 0xb00}], 0x1, 0x0) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r8, 0x84, 0x77, &(0x7f00000002c0)={0x0, 0x8, 0x5, [0xe00, 0x1, 0x1, 0x3, 0x101]}, &(0x7f0000000300)=0x12) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x1, 0x2, &(0x7f0000000140)=ANY=[@ANYBLOB], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x13}, 0x94) 46.45054483s ago: executing program 0 (id=2812): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r1, 0x84, 0x4, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=@delchain={0x64, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0xa, 0x2}}, [@TCA_RATE={0x6}, @filter_kind_options=@f_basic={{0xa}, {0x2c, 0x2, [@TCA_BASIC_EMATCHES={0x28, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x24, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x20, 0x0, 0x0, 0x0, {{}, [@TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_NFPROTO={0x5}]}}]}]}]}}]}, 0x64}}, 0x0) 46.423875111s ago: executing program 0 (id=2814): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_TOKEN={0x8}]}, 0x1c}}, 0x0) (async) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, r2, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x6f0}]}, 0x24}, 0x1, 0x0, 0x0, 0x4088091}, 0x400040c4) syz_emit_ethernet(0x46, &(0x7f0000000400)={@local, @random='\x00 \x00\x00\x00\b', @void, {@ipv4={0x800, @tcp={{0x9, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x6, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0xc}, {[@ssrr={0x89, 0x7, 0xa2, [@broadcast]}, @cipso={0x86, 0x6, 0xffffffffffffffff}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 46.150082015s ago: executing program 0 (id=2817): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=@newlink={0x28, 0x10, 0x401, 0x70bd2b, 0xfffffffe, {0x0, 0x0, 0x0, 0x0, 0xd07, 0xc041}, [@IFLA_MASTER={0x8}]}, 0x28}}, 0x0) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={0x20, 0x0, 0x0, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}]}, 0x20}}, 0x0) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="140100001e000504000000000000000004"], 0x114}], 0x1}, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000200)="2026a49d763516d6ce87f67b10f735cdb4499a3de10748dfd552386ab6c408eff88efe55aceb06b45660405eeb4dc1250eb8e2169ea99904bac1e3dc67293a8fe67d2d419c806853422d14a46ed94077f372d8e7928646a2ea8128e08fbd7b1f7d285c8b9fccd5a6effcd9ecd07b4d4ea142f477fefffd4375433ed26415bd3264514599e7398cb1e9c710e3148f1819ff2fcf54d96018cf4285c7faf9fbf0b77f76787cf84626d6ef5f308b428e01f2b66a01b9d9baf2dee8af72cb3d6892", 0xbf) 45.713457267s ago: executing program 34 (id=2817): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=@newlink={0x28, 0x10, 0x401, 0x70bd2b, 0xfffffffe, {0x0, 0x0, 0x0, 0x0, 0xd07, 0xc041}, [@IFLA_MASTER={0x8}]}, 0x28}}, 0x0) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={0x20, 0x0, 0x0, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}]}, 0x20}}, 0x0) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="140100001e000504000000000000000004"], 0x114}], 0x1}, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000200)="2026a49d763516d6ce87f67b10f735cdb4499a3de10748dfd552386ab6c408eff88efe55aceb06b45660405eeb4dc1250eb8e2169ea99904bac1e3dc67293a8fe67d2d419c806853422d14a46ed94077f372d8e7928646a2ea8128e08fbd7b1f7d285c8b9fccd5a6effcd9ecd07b4d4ea142f477fefffd4375433ed26415bd3264514599e7398cb1e9c710e3148f1819ff2fcf54d96018cf4285c7faf9fbf0b77f76787cf84626d6ef5f308b428e01f2b66a01b9d9baf2dee8af72cb3d6892", 0xbf) 45.669132234s ago: executing program 3 (id=2769): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e24, 0x0, @loopback}, 0x1c) (async) shutdown(r0, 0x0) (async) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000000)={0x1, 0x3, 0x401, 0x102}, 0x10) (async) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x0, @any, 0x4}, 0xe) (async) connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, @none, 0x7ff, 0x2}, 0xe) setsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f00000000c0)={0x3, 0x67}, 0x2) (async) r2 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_JOIN_FILTERS(r2, 0x65, 0x6, 0x0, &(0x7f00000029c0)=0xfffffffffffffdcc) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000001580), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_GET(r3, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000100)=ANY=[@ANYBLOB="ee7ca2fd78df5b2322eb807db1a1984fc17dda7dbb7fb81a3e5e28094738a831b3e50f48ffac0ab46fb3c93ef50cdd761259c9218dc46fe304e011c12f19aa1d54cf2b8d0a268ea74655b17818e2bc675f5d19cdb4bacb34849806787f034e565f2c14f6a17473e45fb7252d6e9cb16596d45f89", @ANYRES16=r4, @ANYBLOB="050327bd7000fedbdf2501000000"], 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000280)={0xa, 0x2, 0x0, @empty}, 0x1c) (async) listen(r5, 0x2) (async) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) r7 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet_sctp(r7, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@sndinfo={0x20, 0x84, 0x2, {0xd, 0x10000}}, @authinfo={0x18, 0x84, 0x6, {0x8}}], 0x38, 0x40040}, 0x4004000) (async) close(0xffffffffffffffff) (async) setsockopt$inet6_tcp_int(r6, 0x6, 0x2000000000000022, &(0x7f0000000240)=0x1, 0x4) (async) sendto$inet6(r6, &(0x7f0000001180)=',', 0x1, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x2}, 0x1c) 45.668147417s ago: executing program 35 (id=2769): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e24, 0x0, @loopback}, 0x1c) (async) shutdown(r0, 0x0) (async) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000000)={0x1, 0x3, 0x401, 0x102}, 0x10) (async) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x0, @any, 0x4}, 0xe) (async) connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, @none, 0x7ff, 0x2}, 0xe) setsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f00000000c0)={0x3, 0x67}, 0x2) (async) r2 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_JOIN_FILTERS(r2, 0x65, 0x6, 0x0, &(0x7f00000029c0)=0xfffffffffffffdcc) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000001580), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_GET(r3, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000100)=ANY=[@ANYBLOB="ee7ca2fd78df5b2322eb807db1a1984fc17dda7dbb7fb81a3e5e28094738a831b3e50f48ffac0ab46fb3c93ef50cdd761259c9218dc46fe304e011c12f19aa1d54cf2b8d0a268ea74655b17818e2bc675f5d19cdb4bacb34849806787f034e565f2c14f6a17473e45fb7252d6e9cb16596d45f89", @ANYRES16=r4, @ANYBLOB="050327bd7000fedbdf2501000000"], 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000280)={0xa, 0x2, 0x0, @empty}, 0x1c) (async) listen(r5, 0x2) (async) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) r7 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet_sctp(r7, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@sndinfo={0x20, 0x84, 0x2, {0xd, 0x10000}}, @authinfo={0x18, 0x84, 0x6, {0x8}}], 0x38, 0x40040}, 0x4004000) (async) close(0xffffffffffffffff) (async) setsockopt$inet6_tcp_int(r6, 0x6, 0x2000000000000022, &(0x7f0000000240)=0x1, 0x4) (async) sendto$inet6(r6, &(0x7f0000001180)=',', 0x1, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x2}, 0x1c) 29.903586505s ago: executing program 4 (id=2950): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$MRT_ADD_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd2, &(0x7f0000000080)={@local, @multicast1, 0xffffffffffffffff, "e1e8ed8a18124e47892c00e575108a8d13cf4e1fd3d6888f35257c1d1cf4b395", 0x8, 0x5, 0x8, 0x3}, 0x3c) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[], 0x5c}}, 0x40091) r1 = socket$igmp(0x2, 0x3, 0x2) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) sendmmsg$inet(r2, &(0x7f00000086c0)=[{{&(0x7f00000000c0)={0x2, 0x4e22, @rand_addr=0x64010102}, 0x10, 0x0}}], 0x1, 0x0) setsockopt$MRT_FLUSH(r1, 0x0, 0xd4, &(0x7f0000000000)=0x3, 0x4) 28.485645742s ago: executing program 4 (id=2952): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000100)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000140), 0x4) getsockopt$bt_hci(r1, 0x11a, 0x2, 0x0, &(0x7f0000000300)) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000001a000100000000000200000081800000faffff0400000000"], 0x1c}}, 0x0) r2 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) recvmsg(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000004700)=""/4098, 0x1002}, {&(0x7f0000003700)=""/4081, 0xff1}, {&(0x7f0000005740)=""/4153, 0x1039}, {&(0x7f0000000200)=""/115, 0x73}, {&(0x7f0000000780)=""/198, 0xc6}, {&(0x7f0000000140)=""/165, 0xa5}], 0x6}, 0x0) 28.258349564s ago: executing program 4 (id=2956): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) (async, rerun: 32) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) (rerun: 32) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r3}, &(0x7f00000006c0), &(0x7f0000000700)=r2}, 0x20) recvmsg$unix(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000002380)=[{&(0x7f0000002480)=""/195, 0xc3}], 0x1}, 0x2000) shutdown(r1, 0x1) (async) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'veth0_to_batadv\x00', 0x0}) (async) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x200}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ENCRYPT={0x5, 0xf, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r5}]}, 0x44}}, 0x4000000) (async) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x40, 0x10, 0x401, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x1b}}, @IFLA_IPTUN_6RD_RELAY_PREFIXLEN={0x6, 0xe, 0x8200}]}}}]}, 0x40}}, 0x0) 27.969912376s ago: executing program 4 (id=2961): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f0000006580)={0x0, 0x0, &(0x7f0000006540)={&(0x7f0000006480)={0x40, 0x0, 0x7, 0x401, 0x0, 0x0, {0x1, 0x0, 0x6}, [@NFACCT_FILTER={0x4}, @NFACCT_FILTER={0x14, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x1}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x1}]}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_FLAGS={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x24040004) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x4}}}]}]}], {0x14}}, 0xb8}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x18}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) 27.752865863s ago: executing program 4 (id=2964): r0 = socket$igmp(0x2, 0x3, 0x2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r2, 0x84, 0x20, &(0x7f0000000100)=0xf, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f0000000080)=[@in={0x2, 0x4e21, @private=0xa010102}], 0x10) readv(r2, &(0x7f0000000600)=[{&(0x7f0000000180)=""/135, 0x87}], 0x1) setsockopt(r2, 0x84, 0x7f, &(0x7f0000000040)="020000000980ffff", 0x8) ioctl$SIOCSIFHWADDR(r1, 0x8971, &(0x7f0000000000)={'veth0_vlan\x00', @random="010000201000"}) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, 0x0, 0x0) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000340)={0x800, 0x1, 0x0, 0x0, @vifc_lcl_addr=@rand_addr=0xc0000201, @private}, 0x10) setsockopt$MRT_FLUSH(r0, 0x0, 0xd4, &(0x7f0000000040)=0x9, 0x4) 20.849587573s ago: executing program 8 (id=3020): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), 0xffffffffffffffff) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x40, &(0x7f0000000080)=0x1003, 0x4) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x30, r1, 0x1, 0x70bd2a, 0x40000, {{}, {}, {0x14, 0x19, {0x3, 0x1, 0x1}}}}, 0x30}}, 0x4) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000780)="d80000001a0081044e81f782db4cb9040a1d0800fe007c05e8fe55a115001c000200142603600e12080005007a010401a8001600200003400d000000035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400080002ed04a5e7ae4e32c708e17f00000000975224858353489c455e0089a32e96537520ac57774513aa5ae10400000000000000b65fd8ca9ceab47eb97f9c91a177e0b9182aa1cbb0ccffb521cfdddc18e5ca"], 0x14}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=@newtaction={0x64, 0x30, 0x9, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x1}}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYRESHEX=r0], 0x7c}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r7, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000008c0)={0x14, 0x8, 0x6, 0x801}, 0x14}}, 0x0) r8 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)="4c0000001200ff09ff3a150099a283ff07b8008000f0ffff000000060040150024001d00120511a09798bc593ab6821148a730cc33a49868c62b2ca654a6613b6aab9d25bf46050d3c3a2b04", 0x4c}], 0x1}, 0x4008000) recvfrom(r9, 0x0, 0x0, 0x40000000, 0x0, 0x0) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r10, 0x801c581f, 0x30000002000005c) setsockopt$X25_QBITINCL(r8, 0x106, 0x1, &(0x7f0000001380)=0x1, 0x4) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x31, &(0x7f0000000040)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x301, 0x0, 0x0, {0x2}, [@NFTA_RULE_COMPAT={0x0, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_FLAGS, @NFTA_RULE_COMPAT_PROTO_IPV6={0x0, 0x1, 0x1, 0x0, 0x2b}, @NFTA_RULE_COMPAT_FLAGS={0x0, 0x2, 0x1, 0x0, 0x2}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @flow_offload={{}, @void}}]}]}], {0x14}}, 0x94}}, 0x0) 20.786963179s ago: executing program 7 (id=3021): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYRES32=0x0], 0xb8}, 0x1, 0x0, 0x0, 0x4}, 0x20000080) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000000c0)={0x0, @dev, @dev}, &(0x7f0000000140)=0xc) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x2, 0x0, 0x25dfdbfe, {{@in6=@private0, @in=@remote, 0x0, 0x400, 0x0, 0x0, 0xa, 0x60, 0x0, 0x3b, r1, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xffffffffffffffff}, {0x3}, 0x6}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x275a, 0x0) writev(r4, &(0x7f0000000100)=[{&(0x7f00000002c0)="a609a89c9edd34187123b5adceb3968557f4e107445a53c0815c9636d00f896d1e8cd8de77a79f1e3e2c53ddf1bb9f8ac5cb5257ff4e8b960026bc4244c4b09179a97dffdf02563e23546d3e78f944e7e2fee2a00b6313048fe354223318badb21d8c086669c5f7772f4a6d90d0997babdf79f7d557e055b3e6f2e4f41ec06a39a57b9ccc00bbca22395e41f9e9652af665f0e1603fb85d4799d54d44c706ff8df9bb805b182a1260b5936ae44f649b5e2fdca240984dcd0033ec28aeaaa686608c5c50538eea153", 0xc8}, {&(0x7f00000004c0)="7ee25c099579d92f8da721f68a8100b6adf04e0cd543f7d26019d57e6a3ecf7ef34486da35c482845d517dc801cca9e4f248b15413a7e252b00a3878a791f64bd79d1d7cc97eed1cb0ad91426115a3b3bf2738347b0acfb01a5aeb09818f35ba6f394fcc023050ec0fab5b7405e7ce33e50e3efb3f9373ce372307160e67a6ab876630aa7d83b5f9cc93a11ddb6849c9cc173c0f9592e1c14ee8c687710260aefc1ce06038fa1b8b2e76f29703bb5fc7549318f6f4287daef439fd58863abc71e3b186e7998b8e60aba2a4bcc76eb07d365afc639fd8b115", 0xd8}, {&(0x7f0000000180)="a0a94f8518f2e7d417de2318f9700d66104c6a93da76b8fcaa99404227f34808d6ae2a7990b2c398", 0x28}, {&(0x7f0000000000)="1aa8906070117b653eda123ec46475d65ca8b7792e6da36191f93da265e6ec803be1248a4164a7335d78a67992bd88f1a0e3b7f48636ac498ba5f4f8b47248af", 0x40}], 0x4) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r4, 0x0) nanosleep(&(0x7f0000000200), 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e99900000000fedbdf25fc000000000000000000000000000000ac1414bb00000000000000000000000000000400000000000a0060", @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\t\x00'/110], 0xb8}, 0x1, 0x0, 0x0, 0xc0}, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x9}, {0x0, 0x0, 0x1}}}, 0xb8}}, 0x4000) 20.712555447s ago: executing program 7 (id=3023): r0 = socket$key(0xf, 0x3, 0x2) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r1, 0x0, 0x0) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="0207e80702"], 0x10}}, 0x40044) r2 = socket$inet6(0xa, 0x3, 0x1) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000280)={{{@in=@dev={0xac, 0x14, 0x14, 0x39}, @in6=@remote, 0x800, 0x56, 0x2, 0x0, 0x2}, {0xffffffffffffffff, 0xad76, 0x0, 0x0, 0xdffffffffffffffb, 0x9, 0xfffffffffffffffe}, {0x7, 0x0, 0x20000000000004}, 0x1, 0x0, 0x1, 0x0, 0x2}, {{@in=@empty, 0x0, 0x2b}, 0xa, @in=@multicast1, 0x3507, 0x4, 0x0, 0x0, 0xffffffff, 0x0, 0x7}}, 0xe8) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xff}}}, 0x1c) 20.292875574s ago: executing program 8 (id=3027): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x40000, 0x0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r3) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) getsockopt$inet_sctp_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f00000003c0), &(0x7f0000000440)=0xe) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r5) r6 = socket$unix(0x1, 0x1, 0x0) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)={0x114, 0x2b, 0x1, 0x0, 0x25dfdbff, "", [@nested={0x101, 0x0, 0x0, 0x1, [@typed={0xc, 0x2, 0x0, 0x0, @u64}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@loopback={0x100000000000000}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd"]}]}, 0x114}], 0x1}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@delchain={0x9c, 0x65, 0x800, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, r9, {0x2, 0xf}, {0x5, 0xfff2}, {0x8, 0xb}}, [@filter_kind_options=@f_cgroup={{}, {0x0, 0x2, [@TCA_CGROUP_EMATCHES={0x0, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x0, 0x1, {0xcc2}}, @TCA_EMATCH_TREE_HDR={0x0, 0x1, {0xc}}]}]}}, @TCA_RATE={0x6, 0x5, {0x0, 0x5}}, @TCA_CHAIN={0x8, 0xb, 0x7}, @filter_kind_options=@f_flow={{0x9}, {0x2c, 0x2, [@TCA_FLOW_XOR={0x8, 0x7, 0x8}, @TCA_FLOW_XOR={0x8, 0x7, 0x6c00}, @TCA_FLOW_RSHIFT={0x8, 0x4, 0x9}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_PERTURB={0x8, 0xc, 0x5374}]}}, @TCA_CHAIN={0x8, 0xb, 0x857}, @TCA_CHAIN={0x8, 0xb, 0xfff}, @TCA_RATE={0x6, 0x5, {0x7, 0xe}}, @TCA_RATE={0x6, 0x5, {0x7, 0x6}}, @TCA_CHAIN={0x8, 0xb, 0x40}]}, 0x9c}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) ioctl$SIOCSIFHWADDR(r5, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x50) r10 = socket$inet6_sctp(0xa, 0x801, 0x84) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.stat\x00', 0x275a, 0x0) write$cgroup_subtree(r11, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r11, 0x0) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r12, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r12, 0x0) getsockopt$bt_hci(r10, 0x84, 0x2, 0x0, &(0x7f0000000700)) 19.91735641s ago: executing program 6 (id=3032): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_LISTDEF(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x64, r1, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_MGMT_A_DOMAIN={0x9, 0x1, '\x85#)}\x00'}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private2}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x28}, @NLBL_MGMT_A_DOMAIN={0x6, 0x1, '%\x00'}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0xffffffffffffffff}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}]}, 0x64}, 0x1, 0x0, 0x0, 0x20004000}, 0x22004001) r2 = accept(0xffffffffffffffff, 0x0, &(0x7f0000000180)) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f00000001c0)={0x4, [0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000200)=0x14) getsockname$llc(r2, &(0x7f0000000240)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000000280)=0x10) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f00000002c0)={r3, 0xe000}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000000340)={r5, 0x1, 0x80000000, 0x8001}, 0x10) r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000003c0), r0) sendmsg$NLBL_MGMT_C_VERSION(r0, &(0x7f0000000480)={&(0x7f0000000380), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x24, r6, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_DOMAIN={0x6, 0x1, '%\x00'}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x40000) getsockopt$IP_SET_OP_VERSION(r2, 0x1, 0x53, &(0x7f00000004c0), &(0x7f0000000500)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000540)={r4, @in6={{0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x28}}, 0x9}}, 0x2, 0x6, 0x8, 0x4, 0x0, 0x41, 0x7}, 0x9c) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), r2) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000680)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(r2, &(0x7f0000000800)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000007c0)={&(0x7f00000006c0)={0xc4, r7, 0x100, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x9, 0x31}}}}, [@NL80211_ATTR_KEY={0x50, 0x50, 0x0, 0x1, [@NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "6f41a09794"}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "839ab269f529261a4d2a7ffb14"}, @NL80211_KEY_DEFAULT_TYPES={0x20, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}]}, @NL80211_ATTR_KEY={0x38, 0x50, 0x0, 0x1, [@NL80211_KEY_MODE={0x5}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_MODE={0x5}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_TYPE={0x8, 0x7, 0x1}]}, @NL80211_ATTR_KEY_SEQ={0x8, 0xa, "3f31e517"}, @NL80211_ATTR_KEY={0x8, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT={0x4}]}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}]}, 0xc4}, 0x1, 0x0, 0x0, 0x40001}, 0x8000) ioctl$SIOCX25SCALLUSERDATA(r2, 0x89e5, &(0x7f0000000840)={0x22, "7eed38c651886fec59d24f07c4b599a20e0d18600ddeda1c6e402fce21f4a296ef76181d73aadb822734e43152764af1078e820f6bcffc8707cad65e7d0d91c8dc82177345f2ffbc38523e4abebacff3e1b89bff7d4dbadb4d50d20e308f81abb14e476f38cb9a205f3bc38f8a4498a732fccdb392fe3a32cc4eba590b4c634c"}) r9 = bpf$ITER_CREATE(0x21, &(0x7f0000000900), 0x8) getsockname$llc(r9, &(0x7f0000000940)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f0000000980)=0x10) r10 = accept(r2, &(0x7f00000009c0)=@xdp, &(0x7f0000000a40)=0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000e80)={r9, 0xe0, &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000bc0)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, &(0x7f0000000c00)=[0x0], &(0x7f0000000c40)=[0x0, 0x0], 0x0, 0xd4, &(0x7f0000000c80)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000000cc0), &(0x7f0000000d00), 0x8, 0xc7, 0x8, 0x8, &(0x7f0000000d40)}}, 0x10) sendmsg$inet(r10, &(0x7f0000000f00)={&(0x7f0000000a80)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000b80)=[{&(0x7f0000000ac0)="326f23eda76bd93825756255d6fe0099b114ed44391c4b90fe699d7d9bc0a043caa39f619ef317c5b43460bbbbe25de789d60ffd87d34ceecc2684a086338d78baaecbe90985384c81a934f1637381edf563d4e0aeb526c22f23900e5157dffd0ce462b5e1c236b9438c8617947d424ec41ec74d76e62bf8824f6503df43cbcf9096531d5c5d8f", 0x87}], 0x1, &(0x7f0000000ec0)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x2}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r11, @multicast2, @broadcast}}}], 0x38}, 0x20000091) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DEL_MPATH(r12, &(0x7f0000001000)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f80)={0x40, r7, 0x400, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000405}, 0x4004000) r13 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000001080), r0) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000001140)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001100)={&(0x7f00000010c0)={0x24, r13, 0x2, 0x70bd25, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x40500c0) r14 = syz_genetlink_get_family_id$tipc2(&(0x7f00000011c0), r9) sendmsg$TIPC_NL_BEARER_DISABLE(r12, &(0x7f00000013c0)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001380)={&(0x7f0000001200)={0x164, r14, 0x8, 0x70bd26, 0x25dfdbff, {}, [@TIPC_NLA_NODE={0x24, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7a}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x400}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x200}]}, @TIPC_NLA_LINK={0x84, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xa3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x40}]}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x82f}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x17f}]}, @TIPC_NLA_NODE={0x58, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY={0x43, 0x4, {'gcm(aes)\x00', 0x1b, "0761e502cc3bfb8e918266d78c2120369d92bfd7198e07fed58491"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xd9}]}, @TIPC_NLA_MON={0x3c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7fff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x200}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}]}]}, 0x164}, 0x1, 0x0, 0x0, 0x8000}, 0x800) r15 = socket$isdn(0x22, 0x3, 0x1) ppoll(&(0x7f0000001400)=[{r15, 0x1922}, {0xffffffffffffffff, 0x511}], 0x2, &(0x7f0000001440)={0x0, 0x3938700}, &(0x7f0000001480)={[0xa]}, 0x8) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f00000015c0)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001580)={&(0x7f0000001500)={0x50, r6, 0x800, 0x70bd29, 0x25dfdbfd, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private1={0xfc, 0x1, '\x00', 0x1}}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x1}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}]}, 0x50}}, 0x24008080) 19.546372733s ago: executing program 7 (id=3034): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6(0xa, 0x80003, 0xff) setsockopt$inet6_int(r2, 0x29, 0x11, 0x0, 0x0) socket(0x22, 0x2, 0x6) setsockopt$sock_attach_bpf(r1, 0x1, 0x2c, &(0x7f0000000100), 0x4) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000840), 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ipvlan1\x00'}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newlink={0x48, 0x10, 0xc09, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x50081}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc}, @IFLA_BR_MCAST_STATS_ENABLED={0x5, 0x2a, 0x1}]}}}]}, 0x48}}, 0x0) 19.543743947s ago: executing program 6 (id=3035): r0 = socket(0x1d, 0x2, 0x6) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r1) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x20, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0x4}]}, 0x20}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000140)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x34, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x5c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) socket$inet6(0xa, 0x2, 0x0) r5 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x98, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r6, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x68, 0x2, [@TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x2}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x5, 0x4, 0x2, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x3], [0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x1}]}}]}, 0x98}}, 0x0) r8 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r8) getsockname$packet(r8, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) socket$inet6_sctp(0xa, 0x1, 0x84) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0e00000004000000080000000b"], 0x50) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002300000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='contention_end\x00', r11, 0xe4}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xe, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1804"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r12) r13 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r13, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r12, 0x4010744d, &(0x7f0000000180)) sendmsg$nl_route(r8, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=@newlink={0x48, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r9, 0x50483}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @gre={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x8, 0x6, @remote}, @IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x1}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x4bb7}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) syz_emit_ethernet(0x2e, &(0x7f0000000a00)={@multicast, @local, @void, {@ipv4={0x800, @icmp={{0x6, 0x4, 0x1, 0x6, 0x20, 0x66, 0x0, 0x7, 0x1, 0x0, @remote, @private=0xa010100, {[@generic={0x82, 0x2}]}}, @echo_reply={0x0, 0x0, 0x0, 0x66, 0x4}}}}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x1, 0x8, 0x8}, 0x50) 19.32646456s ago: executing program 8 (id=3037): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) close(0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1f00000000000000000000000100002000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/19], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000000000000850000006d00000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000000000000850000006d00000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = socket(0x10, 0x3, 0x0) r3 = socket(0x1d, 0x2, 0x6) bind$unix(r3, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e20}, 0x6e) (async) bind$unix(r3, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e20}, 0x6e) socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0xc, &(0x7f0000000580)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x79, 0x10, 0x7d}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@newlink={0x48, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x5}, @IFLA_BR_GROUP_ADDR={0xa, 0x14, @link_local}]}}}]}, 0x48}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x4c, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r6, {0x0, 0xfff2}, {0xffff, 0xffff}, {0x0, 0xfff7}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x1c, 0x2, [@TCA_CAKE_NAT={0x8}, @TCA_CAKE_RAW={0x8, 0xc, 0x1}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x2}]}}]}, 0x4c}}, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000240)={{0x62, @remote, 0x4e22, 0x3, 'wrr\x00', 0x18, 0x5, 0x47}, {@rand_addr=0x64010102, 0x4e23, 0x3, 0x830f, 0x7, 0x8}}, 0x44) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0xa0, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_TUPLE_MASTER={0x4}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0xc0000000}]}, 0xa0}, 0x1, 0xfffff000}, 0x0) setsockopt$packet_add_memb(r7, 0x107, 0x1, &(0x7f0000000000)={r8, 0x1, 0x6, @random="5597dc6a8564"}, 0x10) (async) setsockopt$packet_add_memb(r7, 0x107, 0x1, &(0x7f0000000000)={r8, 0x1, 0x6, @random="5597dc6a8564"}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0x10, 0x0, 0x4, 0x1, 0x8, 0xffffffffffffffff, 0xfffffffd, '\x00', 0x0, 0xffffffffffffffff, 0x4}, 0x50) (async) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0x10, 0x0, 0x4, 0x1, 0x8, 0xffffffffffffffff, 0xfffffffd, '\x00', 0x0, 0xffffffffffffffff, 0x4}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r10}, 0x0, &(0x7f0000000880)}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r10}, 0x0, &(0x7f0000000880)}, 0x20) setsockopt$packet_add_memb(r7, 0x107, 0x1, &(0x7f00000004c0)={r8, 0x3, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x29}}, 0x10) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@getchain={0x24, 0x11, 0x1, 0x0, 0x2000001, {0x0, 0x0, 0x0, r8, {0x7}, {0xd, 0xc}, {0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x4010}, 0x20048054) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x67) (async) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x67) r12 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x1, &(0x7f00000000c0)=[{0xfff7, 0x2, 0x4, 0xed02}]}) bind$bt_hci(r12, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) bind$bt_hci(r12, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r12, &(0x7f0000000040)=ANY=[], 0x6) (async) write$bt_hci(r12, &(0x7f0000000040)=ANY=[], 0x6) 19.254290732s ago: executing program 7 (id=3038): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c000000020601030000000000000000000000000500010007ba0000050004000000000005000500000000000900020073797a3100000000120003006269746d61703a69702c6d61630000f1"], 0x4c}}, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MCAST_RATE(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x34, r2, 0x200, 0x70bd26, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x3c}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x3c}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xf0}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x14}]}, 0x2b}, 0x1, 0x0, 0x0, 0x80}, 0x4400) bind$rds(r1, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) socket(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r3], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="ffffffff0000ff00000000000000002000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="04000000040000000300"/28], 0x50) sendmsg$rds(r1, &(0x7f0000000000)={&(0x7f0000000040)={0x2, 0x0, @private=0xa010100}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f0000000300)=[{&(0x7f0000002640)=""/102389, 0x18ff5}], 0x1, 0x1903d}}], 0x48}, 0x0) 18.9587336s ago: executing program 6 (id=3040): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x6, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b704000000000000850000001c00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0x53, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r4, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x3}, 0x1c) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r5, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000040)=0xfffffffc, 0x4) getsockname$packet(r5, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x28, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r6, 0x69801}, [@IFLA_GROUP={0x8, 0x1b, 0x7}]}, 0x28}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), r5) sendmsg$L2TP_CMD_SESSION_DELETE(r5, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x38, r7, 0x2, 0x70bd2c, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @mcast2}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x40001}, 0x4000008) sendto$packet(r0, &(0x7f0000000000)='1', 0x1, 0x40081, &(0x7f0000000200)={0x11, 0x88a8, r6, 0x1, 0x4, 0x6, @local}, 0x14) 18.810331447s ago: executing program 8 (id=3041): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newqdisc={0x68, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x3c, 0x2, [@TCA_TBF_PBURST={0x8, 0x7, 0xb86}, @TCA_TBF_PARMS={0x28, 0x1, {{0xa, 0x2, 0xffff, 0x7, 0xcc, 0x3}, {0x0, 0x1, 0x7, 0x8, 0x7f, 0x9}, 0xa6, 0x7, 0x1bb6}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r3, {}, {0x2, 0xb}, {0xd, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x1}}]}}]}, 0x48}}, 0x4008000) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000100)={@rand_addr=' \x01\x00', 0x41, r3}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x7, 0xa, &(0x7f0000000540)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x3c}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xee, &(0x7f0000000340)=""/238}, 0x94) 18.787759899s ago: executing program 6 (id=3042): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f00000016c0)={0x10, 0x0, 0x25dfdbfb, 0x40000044}, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWSET={0x58, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x11c}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x90}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x80}, 0x1, 0x0, 0x0, 0x4000850}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='rss_stat\x00', r3, 0x0, 0x40}, 0x18) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWSET={0x28, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}], {0x14, 0x14}}, 0x50}}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000040)={0x10000802, 0x80, 0x0, 0x40000}, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="280000005200010004000000000000001c0000001400", @ANYRES16=r5], 0x28}, 0x1, 0x0, 0x0, 0x10040000}, 0x0) sendmsg$inet(r6, &(0x7f0000000980)={&(0x7f0000000080)={0x2, 0x4e23, @multicast2}, 0x10, &(0x7f0000000900)=[{&(0x7f00000001c0)="3e19ab322f63eaed3acfbc74e729b53f4887e2ba7932d044eb8e627034fea94028115fc34e8eb7877023b06aeba5d993f279d0e3d71fa654639a82df17f54feb01cdbb858eb373dcc69874ef91c3c853b84f7aea98f95bb2fa0a29691a77d7d81d674e790e309ade6b6f2f5e784074f6729cc4d2136c102518aad45b4796a714144415", 0x83}, {&(0x7f0000000340)="5e100eb5c0264a3d741d99f836276e55c1990d535b570104ff762ab09ce558d6d49fb91915ab27a49cd96c793e77743f6a54aaa5a3c36090061ca3226c760f4631b7aaa206b00185a3cdf062ebe6fa64716b5fed36d26516dc5e1de1cd4bb6eda981fc81c81adbb031fa63a27fa3e2d518a45089d203c164105108a302b298c48ca8cd2952e9fba1bb94fd17c9a3cf767c8d871fc1003bf27f5ffe38f8beed17be19ae195379835a7902c73ce93e0a39e8a0a861fdf2cb8b97576b3f62f32f75829d6d80cdc0aa", 0xc7}, {&(0x7f0000000440)="e749d26d06ce7ed75d1ce19f88a36cfc77d18d330f4d1710e8b0407c9f663dd61fa8a715ac3795085f295551a146e0f6347f1da140887500baf82490c3fa400cc5f8eab236ea067ac08c7e1b17a0d0d74661b1f57fbfada1a5e6c2b4266e27f6bdc0abd0f027a876487d1abf31437adb3afb432a9e76e007db4ec7f3e8107b4c71c6fbc6fe9c25e893398d2f18d056c31cf89f87ae5226697376e9ba3e6338ada4415a484ede8144b9b52ceaa59a74b65264a05795a3bbbf3be322b2a942c52553238847472d1c87c245c5e42eddf2d8379d6d2817a9f252c4c470fe", 0xdc}, {&(0x7f0000000540)="2f96c0e2c643cb2e43592f8e3d06da66b003372476126ac84f8b3f21064f9310822b7744210a5ec27ae0a7b49a7bcb98bdf6927b01d1f1bbb9a71991c9c93de2b583598b0666df91029f4b20757b49a765e77e6bf6a464be052c0f9441f77bd9d36f0562f5c0e7ddd99b3dd83b8513e642d9817d7966a9c6cd13347c10dedff38927c14c4aeedb72a7acce50dd2bfe46455d0b39b9018a0513e578db9300a53aec78ffcd5696ae9cf8b2b0aa0f898f258f91876d5a8e5cad339e", 0xba}, {&(0x7f0000000600)="6c8deeefbc521f0edd70eb33bdcecdebbf3dd9635e4027b21e237e3b5ece60548f4174e02f91db1596fff76665dea78242af5e6947bf9a978e79e4c629c8f6c669d1abe23b2283678d8814523ffb96d51538acd810640b98b3ec4d2bc421496aed38d5c95383db074b2b0f19d95d43e26a60e418262d29dde596068fa33291b03b365f96d5c0354b784d7e42d96919cdbb489de1ed7c18781e24f9401bf2c4a4cff44b6fa2d0bd76308c04676729015fcc8ed34513d1f9926a43844b5a68fe835004f0cd8bacee8447e58123e9f4d304b34adb6a5ab4f45c", 0xd8}, {&(0x7f0000000700)="5a57ed4bf04468d466ed0521e6f09693643d3bca7dd9e19b6f6c96a00ddf0caf56f1d6406e09ca9ceb887c3aa34494d76dc01c6f77783d6534516d489fce8a1190197f83f459e7349624091117dac799c7b9788e91980a1daedb72bb7a8b7706d3b52cd18f92befcd03043869934b36178ffb7f80f97bf95c8dbdaaa31b9b3f287c829b5d5394de551196aac5a76353106e1f10cef0561ee282ef4da70ab07eb4afdfb10ec253086383cae75710a021dc9d56916bf8e2d0e973342e94cf46b9f43064968751b757734a1cf425b444d67526faa30cb7f35a44fa6c747d0e0f8db90a6883051f3dd11ffbc57", 0xeb}, {&(0x7f0000000800)="2cbd64f20e02794fe9c2e66006adbf75039e293d7bbd9d4296ff5fc4e5ba5a3c29088ba57862c639ebcebbe559fcc64baf9cc074d27dc1f9b2b40b74cf8b61f5bce54a94ca11c681f00c756c05f5a04c0b61eba13d2c4d566cc68cf59eb7367a4031be5f6a5caef2a02c92a25ec212a2e0db7f3f950b8f37d2f796aea9c952292770b8835f3b5b1eb74d8d589d9d14f6e1e7ffcc5f8f649c85af511afae887a2a5e6af569514751312b14491411dcb7ef4718fd542459c3079421eb90a09716fa26d5029a47d539c8399cdf8d74603eaefc84792cb30809139104abab7aa76d509bddf3f9d1f7daec84d8898ad68f648", 0xf0}], 0x7, &(0x7f0000000a00)=[@ip_tos_int={{0x14, 0x0, 0x1, 0xb}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xfff}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x9}}, @ip_retopts={{0x90, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x2c, 0x5e, 0x3, 0x7, [{@loopback, 0x377}, {@multicast2, 0x5}, {@dev={0xac, 0x14, 0x14, 0xe}, 0x8001}, {@dev={0xac, 0x14, 0x14, 0x31}, 0x10}, {@private=0xa010101, 0x30d}]}, @cipso={0x86, 0x26, 0x2, [{0x7, 0xa, "e09732d62140e9fa"}, {0x0, 0xc, "5ba017c7061a98c345b3"}, {0x0, 0xa, "e570d342632c4eb7"}]}, @cipso={0x86, 0x1a, 0x3, [{0x1, 0xb, "099240e1a9ce4ea81c"}, {0x0, 0x9, "bf639ab611b335"}]}, @lsrr={0x83, 0x13, 0x8e, [@broadcast, @private=0xa010102, @private=0xa010100, @multicast1]}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xffffffff}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xcb}}], 0x108}, 0x2000c084) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) 18.526069338s ago: executing program 6 (id=3044): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) socket(0x10, 0x3, 0x0) (async) r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r4, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x25dfdbfc, {0x60, 0x0, 0x0, r4, {}, {0x1, 0x2}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8001, 0x6}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40004}, 0x40000) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x25dfdbfc, {0x60, 0x0, 0x0, r4, {}, {0x1, 0x2}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8001, 0x6}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40004}, 0x40000) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f0000000000)={0x0, 0x5}, &(0x7f0000000080)=0x8) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto(r1, &(0x7f0000000500)="71a1", 0x2, 0x8080, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000340)=[@timestamp, @window={0x3, 0x6, 0x7}, @mss={0x2, 0x7}, @window={0x3, 0x0, 0x4}, @window={0x3, 0x8, 0x6}, @timestamp, @window={0x3, 0xfffe}, @sack_perm], 0x2000000000000061) (async) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000340)=[@timestamp, @window={0x3, 0x6, 0x7}, @mss={0x2, 0x7}, @window={0x3, 0x0, 0x4}, @window={0x3, 0x8, 0x6}, @timestamp, @window={0x3, 0xfffe}, @sack_perm], 0x2000000000000061) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0), 0x4) (async) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r1, &(0x7f00000004c0)='<', 0x381, 0x805, 0x0, 0x0) getsockopt$packet_int(r0, 0x107, 0xb, 0x0, &(0x7f0000000100)=0x2be628de19587dbc) recvmsg(r3, &(0x7f0000000300)={&(0x7f0000000380)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x80, &(0x7f00000008c0)=[{&(0x7f0000000400)=""/68, 0x44}, {&(0x7f0000000540)=""/214, 0xd6}, {&(0x7f0000000640)=""/242, 0xf2}, {&(0x7f00000007c0)=""/252, 0xfc}, {&(0x7f0000000240)=""/12, 0xc}], 0x5, &(0x7f0000000940)=""/118, 0x76}, 0x10000) accept(r1, &(0x7f00000009c0)=@rc={0x1f, @none}, &(0x7f0000000480)=0x80) (async) r5 = accept(r1, &(0x7f00000009c0)=@rc={0x1f, @none}, &(0x7f0000000480)=0x80) setsockopt$bt_hci_HCI_TIME_STAMP(r5, 0x0, 0x3, &(0x7f0000000740), 0x4) 18.474704691s ago: executing program 8 (id=3045): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000001500000000000000000000000200000000000000000008"], 0x1c}, 0x1, 0x0, 0x0, 0x20040091}, 0x800) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001880)=ANY=[@ANYBLOB="680300002400010026bd7000fedbdf25550300800c0001000200000000000000650264808d002180d9b45c1c72ea0f6ec741f650e5d8f1c76e4d6e6f78dffc221296c2686a3b0e577e85e2d42ec6795d0f76e5ed0f31909e6bed6e29fb89f169f2f3f03481b87cf2a83e3bc132072ed4ee7ab77002f80ddf0b8c819b047e1a70ad821d12b62ac2e3a2ccd666b54ee507ea702cd16bf1df7c22f67f542e5f0d71bc806d38880d00fa00", @ANYRES32=r0, @ANYBLOB="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", @ANYRES32=r0, @ANYBLOB="040030800000000c005600120600000000000000000050bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe8101000000010000008b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd000000"], 0x368}], 0x1}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000002b80)={0x6, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000001000000000000000000000097000300ffffffff9500000000f9ff00fa4e728e8d450a70c74164b3b93cc3a8ca02ad4cb93c0fe165fb38284ba23d461d6685a8ab59832040f26778012e532f4c"], &(0x7f0000001a40)='GPL\x00', 0x7}, 0x94) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000340)=ANY=[], 0x1c) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb010918"], &(0x7f00000002c0)=""/7, 0x33, 0x7, 0x1}, 0x20) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r2, 0x29, 0x33, &(0x7f0000000000)=0x8000, 0x4) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000008c0)={0x8c, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x8c}}, 0x0) recvmmsg(r2, &(0x7f0000002a40)=[{{0x0, 0x0, 0x0}, 0x10}], 0x1, 0x0, 0x0) r4 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r4, 0x800442d2, &(0x7f0000000000)={0x0, 0x0}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0e001e00040000040000000100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r6 = socket(0x840000000002, 0x3, 0x100) getsockopt$inet_mreqn(r6, 0x0, 0x33, 0x0, &(0x7f0000000740)=0x2) connect$rose(r6, &(0x7f0000000180)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, 0x6, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null]}, 0x40) bpf$MAP_UPDATE_CONST_STR(0x4, &(0x7f0000000680)={{r5}, &(0x7f0000000540), 0x0}, 0x20) syz_emit_ethernet(0x3b6, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], 0x0) setsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f0000000080)=0xf, 0x4) r7 = socket$netlink(0x10, 0x3, 0x0) ioctl$FAT_IOCTL_GET_VOLUME_ID(r7, 0x80047213, &(0x7f0000000240)) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_TOL(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="01002bbd700000000000010000000000000007410000001400180000000069623a6e6963766630def4fd"], 0x30}}, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f00000008c0)={0x1, {{0x2, 0x0, @multicast2}}}, 0x88) 18.431936424s ago: executing program 7 (id=3046): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000180), r3) sendmsg$NFC_CMD_GET_TARGET(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x14, r4, 0x301, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x1c080}, 0x804) (async) sendmsg$NFC_CMD_GET_TARGET(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x14, r4, 0x301, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x1c080}, 0x804) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010800000000000000000100000a0900010073797a300000000048000000090a010100000000000000000100000808000a40000000000900020073797a32000000000900010073797a300000000008000540000000020c000b4000000000000009212c0000000e0a01080000000000000000010000000900020073797a32000000000900010073797a30"], 0xbc}, 0x1, 0x0, 0x0, 0x801}, 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x1c, 0x0, 0x0, 0x0, 0x4, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x408c4) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x8, 0x4, 0x4, 0x4}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b80)={0x11, 0xc, &(0x7f00000006c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}}]}, &(0x7f0000000780)='syzkaller\x00'}, 0x90) ioctl$sock_SIOCBRDELBR(r0, 0x89a2, &(0x7f0000000000)='bridge0\x00') syz_emit_ethernet(0x2e, &(0x7f0000000200)={@link_local, @dev, @val={@void, {0x8100, 0x7, 0x0, 0x4}}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x4, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1}, @address_request={0x11, 0x0, 0x0, 0x1}}}}}, 0x0) (async) syz_emit_ethernet(0x2e, &(0x7f0000000200)={@link_local, @dev, @val={@void, {0x8100, 0x7, 0x0, 0x4}}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x4, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1}, @address_request={0x11, 0x0, 0x0, 0x1}}}}}, 0x0) 18.36714495s ago: executing program 4 (id=2973): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)={0x3c, r1, 0x100, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0xfc}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x64}]}, 0x3c}}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_CALIPSO_C_ADD(r2, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x0, 0x0, 0x70bd2a, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8}, 0x8001) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000180)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r3, 0x10, 0x70bd28, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x1c}}, 0x24000800) 17.958915552s ago: executing program 36 (id=2973): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)={0x3c, r1, 0x100, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0xfc}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x64}]}, 0x3c}}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_CALIPSO_C_ADD(r2, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x0, 0x0, 0x70bd2a, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8}, 0x8001) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000180)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r3, 0x10, 0x70bd28, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x1c}}, 0x24000800) 17.914412961s ago: executing program 7 (id=3048): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f00000010c0)={0x0, 0x2, 0x4, "5b5157dc"}, 0xc) (async) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000000000000000000400000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000500000ac4010000060a0b040000000000000000020000004c000480340001800b000100746172676574000024000280090001004d41524b000000000c00030002b51112d439c5920800024000000002140001800b0001006c6f6f6b75700000040002800900010073797a30000000000900020073797a32"], 0x1ec}, 0x1, 0x0, 0x0, 0x4000840}, 0x0) 17.911632827s ago: executing program 6 (id=3049): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)={0x48, r3, 0x1, 0x70bd2b, 0x25dfdbfe, {0x7}, [@L2TP_ATTR_IFNAME={0x14}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0xff}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @private=0xa018102}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x4}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_ro(r4, &(0x7f0000000480)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x92018042}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="05e3020a", @ANYRES16=r3, @ANYBLOB="000825bd7000fedbdf25080000000c0010003898000000000000"], 0x20}, 0x1, 0x0, 0x0, 0x20048000}, 0x20000001) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r6, 0x6, 0x1, &(0x7f0000000000)={0x0, 0x100, 0x0, 0x4}, 0xc) getsockopt$bt_l2cap_L2CAP_OPTIONS(r6, 0x6, 0x1, 0x0, &(0x7f0000000040)) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r7, &(0x7f00000024c0)=[{&(0x7f0000000240)="0d850ecd33a42b86f08a86e396e0af7133653b85edbd976c2a338c922a667eae1c94c629c93d8fda25f9670238c3ed769485a3df4c091e882367ad5d9caedcd48a", 0x41}], 0x1) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="740000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b030040000000004c0012800b00010067656e65766500003c0002800800050001000000140007000000000000000005000000000000000108000f"], 0x74}}, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r7, 0x0) r9 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_SIOCINQ(r10, 0x541b, &(0x7f0000000040)) setsockopt$llc_int(r9, 0x10c, 0x3, &(0x7f0000000040), 0x4) sendmsg$NL80211_CMD_DEL_INTERFACE(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2100d0}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r1, 0x300, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @void}}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8011}, 0x8080) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)={0x20, r1, 0x1, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) 17.909880133s ago: executing program 8 (id=3050): r0 = socket$kcm(0x2, 0x922000000001, 0x106) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x25, &(0x7f00000002c0)=r1, 0x8) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'ipvlan1\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xe315}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f00000022c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)=@updsa={0x148, 0x10, 0x1, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20, 0x0, 0x5c}, {@in=@remote, 0x0, 0x33}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, {0x0, 0xffffffffffffffff}, {0x0, 0xfffffffffffffffd, 0x1900000000000000}, {}, 0x0, 0x0, 0xa, 0x2, 0x80}, [@algo_auth_trunc={0x4c, 0x14, {{'sm3\x00'}}}, @mark={0xc, 0x15, {0x350759, 0x9}}]}, 0x148}, 0x1, 0x0, 0x0, 0x20004001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000c00)=@newtfilter={0x48, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r8, {0x0, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_bpf={{0x8}, {0x1c, 0x2, [@TCA_BPF_FLAGS={0x8, 0x8, 0x1}, @TCA_BPF_FD={0x8, 0x6, r5}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x2}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) r10 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="660a00000000000061114c0000000000850000005500000095"], &(0x7f0000000080)='syzkaller\x00'}, 0x90) writev(r10, &(0x7f00000005c0)=[{&(0x7f00000000c0)="67a99e21324ddb79b7b719f6a82e5be5024ac743cd7f5ddc80ddb57d3f686875bb265adab099934c7abc72dd0f6e2434cc30a6e689353fa89cc00cc16d4455f2516de3f24e052532ce00464f6b122a4e615a408a7071e5f134ff1451e9c85afc4a85dbe8524fcad25270461b1d3aa46a59f2b74b954369c7165cc27d159bb9bc1d8c888082d0f04d7e5d65ea8f2c41d3ca448e893eca565aa24f029ea52fc68c80facdbb9286fa6a51199cc3aee178b7b49abd3e411a7ff5", 0xb8}, {&(0x7f0000000180)="30affb72ba3891244d15dc5c86e9daceccfa5ba39e4f78cf58f03f5590f5cc933304000000000000002a53fba313634cb79668a8e50a1a0baf2d2f46f6bec99d320f017bca3be0f9f237179c6ae4499b75a50c3a06173c67bec35291cc45cb07df7744b0049db736c859cf0607649a9fbf30efc089a63ffacf81809787f1c7499f6ce878d11c8bd2c93c4967203248e301b84ddde5223d4323012e114b3ee63af238193d513812e3c9c651a579849c731cc6f4bb46c868", 0xb7}, {&(0x7f00000003c0)="ba4d5c9bce0a6770d04136e24370465aba51447bede66a2b84d495ad3d8249664d30bf21f44aaf9ae433e6fd650764b676ea318ad20ba8d2c6546baf46b73ed2e92983565379f4ab2dc82258be7c80e2d64e9dc558424456ea497d5eff07a64440f689d994f71168a4aef9b79ac765de1cf54795783927d3fb290d82cb3c2c3afa7b12188a1adeb1ec6c60f45bb3538a2e2dedea36ea9a8e4dd1973f974604a523ea556103ade23a28b2cc6d6c3a58c060af93faa174968631fb37cae6fac0f7821c75e34cb518d97e", 0xc9}, {&(0x7f0000000280)="a5353d79aaf35cbcaa81dd7961ee478b05198b31e5e789537f235cb86f66dce32194fe409b0055b149242d26573919b2852f69776d22433df6c498b90a4b3367d48b057dfa6134e6d10db20431dc03a426986397c89e4492801319392ccb2400c068d0abc18dbb2f92da3be399f884cfc6bf04af3c52d384da9ddefa430d", 0x7e}, {&(0x7f00000004c0)="eb2297c5a1751899bd400a08f04637f477389d6f5ece1f95488fc3b450340d8b41da7088ce80c8a3ea51b4b8a64c9ee76154e5d8eab1d91c73a479ec97ecbb6443f3e1d4b8ba53330a0f671dae9d10efcd6e8b1b527b02c7927184691c9d919a3ae5531ef24345a0593dd807bce696078eab68e9f959bd4e9d5923128eda9ead5bbae9a6252fd82f044b9181635f408a54626dc0a0b2255add91dff52b2a2884f751a2cd4fcbd2eef5c969f3767d184bdf5851d1684520b8299b72d6a8d7d1e94d88387d7486dddcb5f5887993f17261a40c85148153fc2f717a9b7c02f98e76f0d4acffe8d08c7581", 0xe9}, {&(0x7f0000000000)="6704000000b908bea45782803854bf7f0d154bc48206cc18c8af04d018ebb6", 0x1f}], 0x6) 17.494790704s ago: executing program 37 (id=3050): r0 = socket$kcm(0x2, 0x922000000001, 0x106) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x25, &(0x7f00000002c0)=r1, 0x8) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'ipvlan1\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xe315}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f00000022c0)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000f0ffffff7a0af0ff0200000079a4f0ff00000000b706000000000081ad64020000000000450404000100ff0f1704000001130a00b7050000030000006a0af2fe000000008500000009000000b700000000000000950000000000000000e154cd8445974b26c933f7ffffffffe4fbffffff55bb2007ee51050512b5b42128aa090a79507df79f298129daa7a6b2f91af50342115e17392ac627c87881c000006146001e04aeacea799a22a2fa798b5adc43eb27d53319d0ad229e5752548300000000dbc2777df150b7cdd77b85b941092314fd085f028f2ed1a4535550614e09d6378198a6097a670838337af2abd55a87ac0394b2f92ffab7d153d62058d0a413b2173619ccf55520f22c9ca8b6712f3024b7041b1df65b3e1b9bf115646d14ce53d13d0ccacda1ef0900094fa737c28b99938512c816fdcceaede3faedc51d29a47fc813a2ec00f4c7a53ac271d6d7f4ea6bf97f2f33e2ea2e534300bcb3fdc4b4861004eefbda7f54f82a804da4f85db47a4a69bf9bc5fa96ee293fbd165a5a68488e40b030166565a097b1b44b451de736bb6d43db8db03d4b7745fef1d04ec633dee254a6d491b849a5a787e814c4fd21a18986252a70f8f92eb6f0e8c7db4bf23242a1f2c28159f09943b1b0452d1b72183aacf4a84f9130b775dd4e9e3070756f97ad791fa99dac06b57479321a0574fb30ff0000001989425f5d0b79f6584d0416d7c4bb9f547b328c8ddc20ea011bf5742e0e0d4334db8b20ce3f9f16cb7fc20fb4791ec85821d0c48fb657c29b309c73f0977e7cde65a82b94c461d7962b0d2277a84af326f37f3e2c25a61ec45c3af97a8f17da954aff3fc8c108755f01000000010000006e7dac1aba4b20dc7de058a4dfa7e85a8bdf1d41a2d8bda74d66f47cc180f82c5f573c6d294d3665016ac59dda0fde4745db06753a7ac74a2d32f7528751313694bf5700b20ef0c248ddd3da32396a614cacad4aff2066bb5d4045c958559b7dcb98a6273b8c651e24d9f679e4fbe948dfb4cc4a389469608241730459f0123fd39206000000000000eb55dad46de56ef907b059b90b8aa49afb9a79ae5498f6589880ed6eea7f9c670012be05e7de0940313c5870786554df26236ebced9390cb6941b8375d936a7d2120eca291963eb2d537d8ee4de5c183c960119451c31539b22809e1d7f0cda06a9fa87d64cb77872a2cd8a104e16bb1a2bacf13464ca03aff14a9aa4bd9539f5096412b92012e095b84c20243ff98df3347f0e399d1b9f27e3c33269c0e153b28b2d4410572bc45b98d2de10c21d3ea02208d304d455c36300000000022320178b00cc6ed7966130b547dbf8b497af002000000cd1d000000200008000000000000001abc11c800000000000000000000000928ee53595a779d243a48cea769470424d20a04c04b2c4324ab7f4a5c81921f0128dfd70b438af60b060000000000000056642b49b745f3bf2c4af38ffb7d748308eea09fc361b4735efbf3411718d6ee7aebf9ef679dbfae9fb4a79f8a836804ed3a1079b0282a12043408cd60b687dcff91af19010000000000000000456f7d2a42bd13da202274f20675eb781925441578e93046aaddea8ec4ca37f71c2710a7ea8ae0dc214e1cc275b26adfa892e6de92000000000000000000ddff004cff9ec7ffff35e62f4eeee50e5bafecea4d4134f9d006c8d6883eca5c9c58c9e93311ab5009c68c73de2f04f15d005387577f480000ea65559eb00e76e9d0ada201bcbb5c252b28a60ca770663da451790cc36000906d5a9fad98c308e39bd5ffb6151d79c1cee1cd102e3c8e63e9fba05e3633be3f00000015762e5f5a3a0bc33fdbe28a5ffc83f2b485185cc92fe7f791e8f6429309d6adab4b7e508e5bf024ed8f8a005f2bbf96c89739f5cf1e750d50517a59a3ad09e8802e8f4f535447cc0fc9d5f99a73145dfcedad69da9cd4375c624600e78f4458542b14f29611f95d4a31838eeb20c20bb82aa31771cd379ec83554cea5e6539db7384e1f58d81f2f2653c4d9818708e27c89b552d7fcd116bce9c764c714c9402c21d181aac59efb28d4f91652f6750b6ec962802c0320f8059195729d60c534ee8e8ff0755b67fe4c25edb85bcff24c757aa8090000000000008c420eb4304f66e3a37aaf000000c42a570f0e9dd5fd545470f862f8c3c14fa9ecd1e877b0d8ca84c044859e85e6158f9184bc61a9a284db80e4636c25b96174327d82761c26e329555f9290af4100000000000000749efd3763655500344bae34137f5ab0d534b8d63e4ca3b671f2de1cdf519192c6b59a601fd419adc16e2055b85058f793484305d7a1759782e4c571ee855a47bc00edf5e9020c09ab004321610b857e8717764b633b21cb32f0eb3280e09758bd445ab91d20baca005472b79d7b574a247f1d2fe45b3c4e93da3d51de647c10dd49944dc87c92fe8bad99ca332af00f191b66b6a6f732a91f0e2e9190e4b448da7de018c58e950767f9b320be61e58c79d497247d278888901d442ad7f8536605a644e9e3d769db497c3960dfde12182334caee994adc38a436367a54b9e182b78e9a0ceb9a2c4f63902c1ad1a7c5a08d0920a23c2a86abbdf357849a651733e57f31019876026888c8ccb85c86b4f8ffffff7f000000002c331fca0e541b7ca211c28ed61c52573d9308a13d115b43f8b1894c8fa8a14dc4810f61ae96bf704526a8919bc700002100000000000000000001000027c9a46157a3609b6fd9843ee19ec647249a9375de5858818f3c4a4fa6ce46f4d42b07199de8b99231ace58c77819ee214e49666c464d35ca9b5143ed3b3dc8c17a23692759ccf5a205311b7ab22532697b861dfb54609fd88e6043bd52ae84c1bb0c8a6c769f952283a1f4e3842edb3d42c68a27ef6a1296dfff4a979369b0e8ebc62887aa46e820a74f91381ccc198e353047db70686d147357024eb3cb94f1e89cb5ba0a56aa046b4dc521a3d9356b4b8b5917c4c860495b240e80063bde261fd00000000007271e28ef6806bc8e139c49b91c76bea3858f78fbd8d31330d89069f9648a2ff93060ff073b3a113e47edf76f7d116d2b0976cf2ec447c030931651dd315003b7a6a5433a2bb3c035fc6846abe389b25c988f0bbb889560ae99ec4b227eda2e63a1c31a2c2bd48a822cbe92b6524e0cd8020ecaa34e19e7141d5e221509342bfe7d294d1eb3de6a50ca0301f89c2ee627e949c68b3a4a426a9b7d503a26e9a714ee5f72d8805dd1bfbd081f6a5d1f1289dfe14cb9194e26a44fac273461fc5c0e0a33db7f2d43ea8086cf059f40fa2640b6bfb74dd35f5a31059c01517cf4b6641fce9a24b96767b837ca037a1199735c375c705c798e0e208e4a5259d0bfa526b462af45a6eab34000000000000000000000000c4426344ec1a3366515dee221e747f55d7dd02534bc503b9b28277c253e410986bef2111a99cc448d652929f8a67a6a1d3f00dcad91aff428aade3f85714a1d3ef29acd4d49b62339c10c2ec0dac4728288e78980c1184d8223edbccbf9258b7374e79a1f8bf3fb73cfd1e76982f3d899f71e495f0ba8c6dbb7bbdfc399847a11921f97eba0ea14c4fed9a71eedb97c02461792e4a48dac16c60c3fcaab222025d78963c3ac899fa8b63f58a30212c9b2d7fe751e2046b78f86e22861b6504c667350244dd6d9189a8b9c45f8aaff9db694811ca86ed978f23eed7459c0382074170cf1e25b0e9ba3d1cc309353eea4cd8ab96bafda393276bdd8d32ead8db9e1b54d2d3d50e2815268fc1a6ec566981bc8ca2a4583f3d40e817433d0f4f25cfe6cc1897449ba5f26a9d66ac73e6f5c401376f23a314e0b9ff997d22f3e34b7524642c248aa813edaa626f00000021f8547d393dabe616fbbde21c90be00b5a22671395c7a69c6dd4d022ffc97ddb6aa025131652d409da1d8cfc3d219d4b1c1b7b8170d7c33d91db2b73f7ae02485a209a2474b5d0790d05c01bec623056e4d3f4d3149373a28b26a15a1fcce73d57e6eaf7e6f315fe275ebc9ef7aeca277dde01dde724f419803a2172a7833ceab38d21ca4f1dea5e1f4d8824167b21dd289dd4e6ecfba9e163bdbc48e1e758ecde05c10809c9edfa6d77c652fd742e6dad13d2a397bebe3ea8bc087d3720e2202f36c7719ae34f042e19dc08a3323a3d94098a7ec171469352bab1662c3e4d4803c565cfcce32dad628fade43a4844abb230ce608726fd87e93c405a96cf638c41510f26e9da5f316"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)=@updsa={0x148, 0x10, 0x1, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20, 0x0, 0x5c}, {@in=@remote, 0x0, 0x33}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, {0x0, 0xffffffffffffffff}, {0x0, 0xfffffffffffffffd, 0x1900000000000000}, {}, 0x0, 0x0, 0xa, 0x2, 0x80}, [@algo_auth_trunc={0x4c, 0x14, {{'sm3\x00'}}}, @mark={0xc, 0x15, {0x350759, 0x9}}]}, 0x148}, 0x1, 0x0, 0x0, 0x20004001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000c00)=@newtfilter={0x48, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r8, {0x0, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_bpf={{0x8}, {0x1c, 0x2, [@TCA_BPF_FLAGS={0x8, 0x8, 0x1}, @TCA_BPF_FD={0x8, 0x6, r5}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x2}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) r10 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="660a00000000000061114c0000000000850000005500000095"], &(0x7f0000000080)='syzkaller\x00'}, 0x90) writev(r10, &(0x7f00000005c0)=[{&(0x7f00000000c0)="67a99e21324ddb79b7b719f6a82e5be5024ac743cd7f5ddc80ddb57d3f686875bb265adab099934c7abc72dd0f6e2434cc30a6e689353fa89cc00cc16d4455f2516de3f24e052532ce00464f6b122a4e615a408a7071e5f134ff1451e9c85afc4a85dbe8524fcad25270461b1d3aa46a59f2b74b954369c7165cc27d159bb9bc1d8c888082d0f04d7e5d65ea8f2c41d3ca448e893eca565aa24f029ea52fc68c80facdbb9286fa6a51199cc3aee178b7b49abd3e411a7ff5", 0xb8}, {&(0x7f0000000180)="30affb72ba3891244d15dc5c86e9daceccfa5ba39e4f78cf58f03f5590f5cc933304000000000000002a53fba313634cb79668a8e50a1a0baf2d2f46f6bec99d320f017bca3be0f9f237179c6ae4499b75a50c3a06173c67bec35291cc45cb07df7744b0049db736c859cf0607649a9fbf30efc089a63ffacf81809787f1c7499f6ce878d11c8bd2c93c4967203248e301b84ddde5223d4323012e114b3ee63af238193d513812e3c9c651a579849c731cc6f4bb46c868", 0xb7}, {&(0x7f00000003c0)="ba4d5c9bce0a6770d04136e24370465aba51447bede66a2b84d495ad3d8249664d30bf21f44aaf9ae433e6fd650764b676ea318ad20ba8d2c6546baf46b73ed2e92983565379f4ab2dc82258be7c80e2d64e9dc558424456ea497d5eff07a64440f689d994f71168a4aef9b79ac765de1cf54795783927d3fb290d82cb3c2c3afa7b12188a1adeb1ec6c60f45bb3538a2e2dedea36ea9a8e4dd1973f974604a523ea556103ade23a28b2cc6d6c3a58c060af93faa174968631fb37cae6fac0f7821c75e34cb518d97e", 0xc9}, {&(0x7f0000000280)="a5353d79aaf35cbcaa81dd7961ee478b05198b31e5e789537f235cb86f66dce32194fe409b0055b149242d26573919b2852f69776d22433df6c498b90a4b3367d48b057dfa6134e6d10db20431dc03a426986397c89e4492801319392ccb2400c068d0abc18dbb2f92da3be399f884cfc6bf04af3c52d384da9ddefa430d", 0x7e}, {&(0x7f00000004c0)="eb2297c5a1751899bd400a08f04637f477389d6f5ece1f95488fc3b450340d8b41da7088ce80c8a3ea51b4b8a64c9ee76154e5d8eab1d91c73a479ec97ecbb6443f3e1d4b8ba53330a0f671dae9d10efcd6e8b1b527b02c7927184691c9d919a3ae5531ef24345a0593dd807bce696078eab68e9f959bd4e9d5923128eda9ead5bbae9a6252fd82f044b9181635f408a54626dc0a0b2255add91dff52b2a2884f751a2cd4fcbd2eef5c969f3767d184bdf5851d1684520b8299b72d6a8d7d1e94d88387d7486dddcb5f5887993f17261a40c85148153fc2f717a9b7c02f98e76f0d4acffe8d08c7581", 0xe9}, {&(0x7f0000000000)="6704000000b908bea45782803854bf7f0d154bc48206cc18c8af04d018ebb6", 0x1f}], 0x6) 17.301934825s ago: executing program 38 (id=3048): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f00000010c0)={0x0, 0x2, 0x4, "5b5157dc"}, 0xc) (async) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000000000000000000400000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000500000ac4010000060a0b040000000000000000020000004c000480340001800b000100746172676574000024000280090001004d41524b000000000c00030002b51112d439c5920800024000000002140001800b0001006c6f6f6b75700000040002800900010073797a30000000000900020073797a32"], 0x1ec}, 0x1, 0x0, 0x0, 0x4000840}, 0x0) 17.275291246s ago: executing program 39 (id=3049): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)={0x48, r3, 0x1, 0x70bd2b, 0x25dfdbfe, {0x7}, [@L2TP_ATTR_IFNAME={0x14}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0xff}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @private=0xa018102}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x4}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_ro(r4, &(0x7f0000000480)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x92018042}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="05e3020a", @ANYRES16=r3, @ANYBLOB="000825bd7000fedbdf25080000000c0010003898000000000000"], 0x20}, 0x1, 0x0, 0x0, 0x20048000}, 0x20000001) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r6, 0x6, 0x1, &(0x7f0000000000)={0x0, 0x100, 0x0, 0x4}, 0xc) getsockopt$bt_l2cap_L2CAP_OPTIONS(r6, 0x6, 0x1, 0x0, &(0x7f0000000040)) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r7, &(0x7f00000024c0)=[{&(0x7f0000000240)="0d850ecd33a42b86f08a86e396e0af7133653b85edbd976c2a338c922a667eae1c94c629c93d8fda25f9670238c3ed769485a3df4c091e882367ad5d9caedcd48a", 0x41}], 0x1) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="740000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b030040000000004c0012800b00010067656e65766500003c0002800800050001000000140007000000000000000005000000000000000108000f"], 0x74}}, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r7, 0x0) r9 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_SIOCINQ(r10, 0x541b, &(0x7f0000000040)) setsockopt$llc_int(r9, 0x10c, 0x3, &(0x7f0000000040), 0x4) sendmsg$NL80211_CMD_DEL_INTERFACE(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2100d0}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r1, 0x300, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @void}}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8011}, 0x8080) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)={0x20, r1, 0x1, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) 2.0264696s ago: executing program 5 (id=3099): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000040)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) r1 = socket(0x10, 0x3, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x14, 0x0, 0x4}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000004) syz_genetlink_get_family_id$nfc(&(0x7f00000003c0), r3) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000fc0), r3) sendmsg$NL802154_CMD_GET_WPAN_PHY(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x14, r4, 0xb15}, 0x14}}, 0x80) syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r2) socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@newqdisc={0x1a0, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x170, 0x2, [@TCA_GRED_LIMIT={0x8}, @TCA_GRED_DPS={0x10}, @TCA_GRED_STAB={0xfffffffffffffdaa, 0x2, "9ffe2b337685d6c62f148c806e5059b783f6f41b531d60250867ae03fd97e13d4cf520900107e5d7c0213877eb58f8279c529e67715fb04803db949412a38c6d9d02fd8b04ab2d8e666b94f36ec2af9912030e517e6b73aed0316b43df04e72844a49cea10b019fa406a1e6892e25a7549230fdd218023523aebe5cdd186008f46a0f071fb5b934ec50ede5ee2ea5a75895e2d45ac82bd20af920bce940ac6d53a80acccbf6b5a96ce439b317e645b263247372ca78dcb0e753d5b19769601a8976bfc4001a33aa241749564dd9bb04b33f84e0bc38517f6922294b8113662c67564baa978278fecb027c372dfc9dffaca502c57efc2726b2855587876a0e646"}, @TCA_GRED_DPS={0x10}, @TCA_GRED_PARMS={0x38}, @TCA_GRED_LIMIT={0x8}]}}]}, 0x1a0}}, 0x0) setsockopt$inet_sctp_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f00000000c0)=0xfff, 0x4) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), r2) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000200)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_GET_WPAN_PHY(r3, &(0x7f0000000580)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000540)={&(0x7f0000000240)={0x34, r6, 0x10, 0x70bd27, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0xa7871c10797df2e9}, 0x10) sendto$inet6(r0, 0x0, 0xffffffffffffff64, 0x800, 0x0, 0x0) 1.035768853s ago: executing program 5 (id=3100): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb010018000000000000005400000054000000080000000000000000000003000000000100000003000000020000000200000000000008"], 0x0, 0x74, 0x0, 0x1, 0x8}, 0x28) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3032, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c0000001a000100000000000000000002200000000000000000000008000100ac"], 0x2c}}, 0x8800) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000001400791048000000000069001c000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0xa3}, 0x21) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x35c, 0x0) 514.072111ms ago: executing program 5 (id=3101): unshare(0x26020480) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffce6, &(0x7f0000000780)={&(0x7f00000005c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x10, "000000000000000000000000034000dc"}}}]}, 0x48}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x2c, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_ADT={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x100000c6}, 0x24000010) bpf$ITER_CREATE(0x21, 0x0, 0x0) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f00000000c0)='pmap_register\x00', r5, 0x0, 0x3}, 0x18) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in, @in6=@remote, 0x0, 0x0, 0x4e22, 0x0, 0x2, 0x0, 0x0, 0x11}, {0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x200000000000}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@rand_addr=' \x01\x00', 0x2, 0x2b}, 0xa, @in=@local, 0x0, 0x1, 0x0, 0x0, 0x4}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r7, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r7, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r3, &(0x7f0000000240), 0x0, 0x4000bb8) sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) r8 = socket$inet(0xa, 0x801, 0x84) connect$inet(r8, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r8, 0x8) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) r9 = accept4(r8, 0x0, 0x0, 0x0) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r10, &(0x7f0000000140)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r10, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r9, 0x84, 0x6c, &(0x7f0000000280), &(0x7f0000000380)=0x8) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000000c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x0, 0x0, 0xa}, 0x48) 512.462882ms ago: executing program 1 (id=3057): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = gettid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0}, &(0x7f00000000c0)=0xc) r3 = getgid() r4 = getpid() r5 = getuid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xc) r7 = socket$kcm(0x29, 0x0, 0x0) r8 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000180), 0x2, 0x0) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r10 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r11 = socket$inet_mptcp(0x2, 0x1, 0x106) r12 = socket$inet(0x2, 0xa, 0xfffffffb) r13 = accept$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000200)=0x14) r14 = accept$alg(0xffffffffffffffff, 0x0, 0x0) r15 = socket$rxrpc(0x21, 0x2, 0xa) r16 = getgid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0}, &(0x7f0000000280)=0xc) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@local}}, &(0x7f00000003c0)=0xe8) sendmsg$netlink(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)={0x20, 0x1c, 0x8, 0x70bd28, 0x25dfdbfe, "", [@nested={0x10, 0x6, 0x0, 0x1, [@nested={0x4, 0x128}, @typed={0x8, 0x80, 0x0, 0x0, @ipv4=@remote}]}]}, 0x20}], 0x1, &(0x7f0000000400)=[@cred={{0x1c, 0x1, 0x2, {r1, r2, r3}}}, @cred={{0x1c, 0x1, 0x2, {r4, r5, r6}}}, @rights={{0x38, 0x1, 0x1, [r7, r8, r9, r10, r11, r12, r13, r14, r15, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01, r16}}}, @cred={{0x1c, 0x1, 0x2, {r17, r19, 0xffffffffffffffff}}}], 0xb8, 0x800}, 0x40800) getsockopt$inet6_buf(r13, 0x29, 0x2b, &(0x7f0000000500)=""/100, &(0x7f0000000580)=0x64) r20 = syz_genetlink_get_family_id$tipc(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_TOL(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f00000005c0), 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x38, r20, 0x400, 0x70bd2c, 0x25dfdbfb, {{}, {}, {0x1c, 0x18, {0x6, @bearer=@l2={'ib', 0x3a, 'veth1_macvtap\x00'}}}}, ["", ""]}, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) pipe(&(0x7f0000000700)={0xffffffffffffffff, 0xffffffffffffffff}) r23 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000780), r12) sendmsg$ETHTOOL_MSG_COALESCE_GET(r22, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x30, r23, 0x300, 0x70bd27, 0x25dfdbfe, {}, [@HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r18}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r18}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x80d0}, 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001b40)={0x18, 0x29, &(0x7f0000000880)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xb20}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xa7c}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r22}}, @generic={0x0, 0x2, 0xe, 0x1000}, @ldst={0x0, 0x0, 0x2, 0x2, 0x9, 0x10, 0xffffffffffffffff}, @initr0={0x18, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0xab5}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xf9}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r22}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r21}}, @map_fd={0x18, 0x5, 0x1, 0x0, r10}]}, &(0x7f0000000a00)='syzkaller\x00', 0x18, 0x1000, &(0x7f0000000a40)=""/4096, 0x41100, 0x43, '\x00', 0x0, 0x0, r21, 0x8, &(0x7f0000001a40)={0x2, 0x2}, 0x8, 0x10, &(0x7f0000001a80)={0x2, 0x6, 0x6, 0x5}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000001ac0)=[r21, r21, r22], &(0x7f0000001b00)=[{0x0, 0x5, 0x5, 0x2}, {0x3, 0x2, 0xe, 0x4}, {0x2, 0x4, 0x2}], 0x10, 0x2}, 0x94) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000001c00), &(0x7f0000001c40)=0xc) socket$vsock_stream(0x28, 0x1, 0x0) ioctl$PPPIOCGIDLE64(r22, 0x8010743f, &(0x7f0000001c80)) 290.097616ms ago: executing program 1 (id=3102): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f00000001c0)='g', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0x0, 0x1c9ae7fffe9a6f34}, 0x2}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f00000000c0)={0x0, 0x4, 0xfe, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x5}, 0xe) shutdown(r0, 0x1) ioctl$SIOCGSTAMPNS(r0, 0x8907, 0x0) recvmmsg(r0, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x414, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x891) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f00000001c0)={0x80000006}, 0x10) sendmsg$kcm(r1, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="1c0000004a008102e00f80ecdb4cb9020a", 0x4a}, {&(0x7f0000001700)="0c74c75350f4a590e15c61c7942348092734fe1863473bbce6798a60e9", 0x1d}], 0x2, 0x0, 0x0, 0x10}, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(r1, 0x8934, &(0x7f0000000000)={'team_slave_0\x00', 0x4}) 197.720381ms ago: executing program 5 (id=3103): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0xf, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x44}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x6}}}, &(0x7f0000000980)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, 0x0, 0x10448) ioctl$BTRFS_IOC_QUOTA_RESCAN(r0, 0x4040942c, &(0x7f0000000200)={0x0, 0x8001, [0x4, 0x0, 0x80000000, 0x8001, 0x8000000000000001, 0xffffffffffffff81]}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000001c0)={r1, 0x20, &(0x7f0000000180)={&(0x7f0000000000)=""/137, 0x89, 0x0, &(0x7f00000000c0)=""/151, 0x97}}, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) 143.777454ms ago: executing program 1 (id=3104): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdirat$cgroup(r0, &(0x7f0000000080)='syz1\x00', 0x1ff) r1 = openat$cgroup_freezer_state(r0, &(0x7f00000000c0), 0x2, 0x0) write$cgroup_freezer_state(r1, &(0x7f00000001c0)='FROZEN\x00', 0x7) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) r2 = openat$cgroup_subtree(r0, &(0x7f0000000180), 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f00000002c0)={[{0x2d, 'perf_event'}, {0x2b, 'net_cls'}, {0x2d, 'freezer'}, {0x2b, 'cpuacct'}, {0x2d, 'perf_event'}]}, 0x33) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000004800000001"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000001c0)={r3, &(0x7f00000000c0), &(0x7f0000000200)=""/108}, 0x20) write$cgroup_freezer_state(r1, &(0x7f0000000140)='THAWED\x00', 0x7) 46.548362ms ago: executing program 5 (id=3105): r0 = socket$isdn(0x22, 0x2, 0x24) (async) r1 = socket$igmp6(0xa, 0x3, 0x2) close(r1) (async) close(r0) 0s ago: executing program 5 (id=3106): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = epoll_create1(0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000000)={0x2000001c}) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000040)) syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_SET(r3, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r2, &(0x7f0000000040)={0x2000000f}) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r0, 0x8982, &(0x7f0000000380)={0x8, 'wlan0\x00', {'veth1_virt_wifi\x00'}, 0x2}) ioctl$sock_SIOCETHTOOL(r4, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000440)=@ethtool_perm_addr={0x20, 0x7f, "62e2b6fbff1cd2d9e6c6902c2e8cf216e0ef726f679915fa8f53aa4bd36ba9bfafbd92e2451e1289b5a42b88f37a017d336ffd13bde16cb6dbbcc1beca3c5779f9af039b483e740da9baa5152501a9913da9eb21731427359323e02175fc7a5016847ee8aefcc9043ccc051c2a65d4b0c077a2e8fed06c41688d795813f752"}}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="190000000400000004000000ff07000000000000", @ANYRES32, @ANYBLOB="7f00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000008b004871cc2f8aaeed69fc992ea813b7c19c5ddb3767e36d02f52bf2a7e0e4356095babe3bdb4628e8ee2d72f038651234d244ee8b4d1eaea9bfa4658b1f43cd2a64552b742b1cb334975846851c05728207225c3d39b5fe1a152793924e837e3c226fa9a261385c94ef2e281827e463421f46027ac9746bb5dc30acede7db821f6276"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000004340)={0x6, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000540)={r6, 0x8, 0x25, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff27, 0x0, 0x0}, 0x19) getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, 0x0, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x200, 0x0, 0x3}, 0x10}, 0x94) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) pwrite64(r7, &(0x7f0000000180)="6e0f7456271f7eeef8edd89d33abaf1b5c5fa636661e4e", 0x17, 0xa) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r7, 0x84, 0x7, &(0x7f0000000000)={0x40}, 0x4) listen(r7, 0x401) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r4, &(0x7f0000000580)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000540)={&(0x7f0000000400)={0x20, 0x140c, 0x200, 0x70bd28, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0xc000) sendto$inet6(r7, &(0x7f0000000500)="a4", 0x34000, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_opts(r8, 0x0, 0xd, &(0x7f00000001c0)="01", 0x1) setsockopt$inet_opts(r8, 0x0, 0xc, &(0x7f0000000000)="c1", 0x1) getsockopt$inet_opts(r8, 0x0, 0x9, &(0x7f0000000680)=""/17, &(0x7f00000000c0)=0x11) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="60060000400009ab66000000000000250100000099001f00460601", @ANYBLOB="07fd35041f5a19454558c31c40280dbf5712ee258198114439a5c7e19439c604adf63dd32f6775a62183f7f21d2fd363be52781167da4fcf6fffd59e9237ed29ee186d99918e3378f2199ee39b3421d265c267d13841d6057583a8e1b9bcf38b66ca820b25598273f6f1"], 0x660}, 0x1, 0x0, 0x0, 0x40045}, 0x40010) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000340)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0xb2}]}, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) kernel console output (not intermixed with test programs): tlink: 'syz.0.1492': attribute type 2 has an invalid length. [ 194.181896][T11372] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 194.347339][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.354218][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.573552][T11394] netlink: 'syz.4.1501': attribute type 3 has an invalid length. [ 194.694070][T11399] netlink: 'syz.2.1503': attribute type 83 has an invalid length. [ 194.713943][T11403] netlink: 'syz.2.1503': attribute type 83 has an invalid length. [ 194.895310][T11413] tipc: Enabling of bearer rejected, already enabled [ 194.969329][T11422] __nla_validate_parse: 19 callbacks suppressed [ 194.969347][T11422] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1511'. [ 194.977394][T11415] 8021q: adding VLAN 0 to HW filter on device bond3 [ 194.994253][T11415] team0: Failed to send port change of device bond3 via netlink (err -105) [ 195.004499][T11415] team0: Failed to send options change via netlink (err -105) [ 195.004743][T11423] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1509'. [ 195.012176][T11415] team0: Port device bond3 added [ 195.273417][T11436] netlink: 'syz.4.1516': attribute type 1 has an invalid length. [ 195.286378][T11438] tipc: Enabling of bearer rejected, already enabled [ 195.327577][T11436] netlink: 'syz.4.1516': attribute type 4 has an invalid length. [ 195.341628][T11436] netlink: 9354 bytes leftover after parsing attributes in process `syz.4.1516'. [ 195.547610][T11453] nbd: must specify an index to disconnect [ 195.646456][T11458] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1524'. [ 195.701376][T11464] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1524'. [ 196.046040][T11458] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 196.064658][T11458] bond0 (unregistering): Released all slaves [ 196.249763][T11496] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1535'. [ 196.363772][T11509] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 197.332227][T11519] openvswitch: netlink: VXLAN extension 173 out of range max 1 [ 197.385477][T11525] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1541'. [ 197.871410][T11548] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1553'. [ 198.374032][T11572] rose0: entered promiscuous mode [ 198.648109][T11587] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1565'. [ 198.672034][T11589] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1566'. [ 198.720134][T11599] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 198.735309][T11587] veth9: entered allmulticast mode [ 198.742736][T11599] netlink: 'syz.4.1568': attribute type 1 has an invalid length. [ 199.042819][T11618] netlink: 'syz.2.1569': attribute type 1 has an invalid length. [ 199.081925][T11618] netlink: 'syz.2.1569': attribute type 1 has an invalid length. [ 199.154175][T11599] 8021q: adding VLAN 0 to HW filter on device bond8 [ 199.232277][T11610] bond5: (slave veth0_to_bond): Releasing active interface [ 199.268171][T11610] bond8: (slave veth0_to_bond): making interface the new active one [ 199.338771][T11610] bond8: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 199.441764][T11613] bond8: (slave veth5): Enslaving as an active interface with a down link [ 199.512128][T11631] netlink: 'syz.3.1572': attribute type 9 has an invalid length. [ 199.701723][T11635] tc_dump_action: action bad kind [ 199.719369][T11635] delete_channel: no stack [ 199.855120][T11633] syzkaller0: entered promiscuous mode [ 199.882025][T11633] syzkaller0: entered allmulticast mode [ 200.210102][T11668] __nla_validate_parse: 4 callbacks suppressed [ 200.210120][T11668] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1583'. [ 202.019986][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 202.560445][ C1] vcan0: j1939_tp_rxtimer: 0xffff888057f6f400: rx timeout, send abort [ 202.570291][ C1] vcan0: j1939_tp_rxtimer: 0xffff888028ff1c00: rx timeout, send abort [ 202.578823][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888057f6f400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 202.593349][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888028ff1c00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 202.776591][T11681] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1586'. [ 203.256048][T11714] netlink: 14560 bytes leftover after parsing attributes in process `syz.2.1596'. [ 204.144188][T11754] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1605'. [ 204.279565][T11763] netlink: 'syz.4.1608': attribute type 10 has an invalid length. [ 204.291559][T11765] netlink: 'syz.4.1608': attribute type 10 has an invalid length. [ 204.604582][T11790] netlink: 'syz.2.1615': attribute type 1 has an invalid length. [ 204.706038][T11791] lo speed is unknown, defaulting to 1000 [ 205.360935][T11831] netlink: 788 bytes leftover after parsing attributes in process `syz.3.1629'. [ 205.384066][T11791] lo speed is unknown, defaulting to 1000 [ 205.789176][T11847] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 205.904148][T11854] netlink: 4388 bytes leftover after parsing attributes in process `syz.3.1635'. [ 206.033041][T11859] openvswitch: netlink: VXLAN extension 1 has unexpected len 0 expected 4 [ 206.196843][T11864] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1639'. [ 206.221210][T11867] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1640'. [ 206.394831][T11876] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 206.449526][T11876] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 206.545623][T11881] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1645'. [ 206.582091][T11881] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1645'. [ 206.914184][T11902] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1653'. [ 206.984501][T11908] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1654'. [ 207.484794][T11938] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1662'. [ 207.845311][T11956] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1666'. [ 208.124109][T11972] netlink: 'syz.3.1674': attribute type 25 has an invalid length. [ 208.506059][T11999] sit0: entered promiscuous mode [ 208.520897][T11999] netlink: 'syz.3.1681': attribute type 1 has an invalid length. [ 208.863071][T12020] netlink: 'syz.0.1690': attribute type 1 has an invalid length. [ 208.874051][T12020] netlink: 'syz.0.1690': attribute type 2 has an invalid length. [ 208.886264][T12020] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048) [ 209.809080][T12054] netlink: 'syz.3.1702': attribute type 16 has an invalid length. [ 209.881832][T12058] wireguard: wg1: Could not create IPv4 socket [ 210.156969][T12071] (unnamed net_device) (uninitialized): option all_slaves_active: invalid value (222) [ 210.189392][T12073] bond0: entered allmulticast mode [ 210.195168][T12073] bond_slave_0: entered allmulticast mode [ 210.206991][T12073] bond_slave_1: entered allmulticast mode [ 210.218980][T12073] bridge_slave_1: entered allmulticast mode [ 210.563832][T12100] netlink: 'syz.0.1716': attribute type 4 has an invalid length. [ 210.958470][T12121] netlink: 'syz.3.1724': attribute type 11 has an invalid length. [ 211.141401][T12130] netlink: 'syz.3.1726': attribute type 1 has an invalid length. [ 211.149170][T12130] __nla_validate_parse: 5 callbacks suppressed [ 211.149186][T12130] netlink: 232 bytes leftover after parsing attributes in process `syz.3.1726'. [ 211.176105][T12130] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1726'. [ 211.216792][T12130] delete_channel: no stack [ 211.227422][T12130] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1726'. [ 211.405612][T12144] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1731'. [ 211.522051][T12149] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1731'. [ 211.845805][T12178] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1737'. [ 212.040546][T12189] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1741'. [ 212.076471][T12189] netlink: 43 bytes leftover after parsing attributes in process `syz.3.1741'. [ 212.089356][T12189] netlink: 'syz.3.1741': attribute type 6 has an invalid length. [ 212.102158][T12189] netlink: 'syz.3.1741': attribute type 5 has an invalid length. [ 212.111894][T12189] netlink: 43 bytes leftover after parsing attributes in process `syz.3.1741'. [ 212.617369][T12241] tipc: Enabled bearer , priority 0 [ 212.652912][T12241] syzkaller0: entered promiscuous mode [ 212.678630][T12241] syzkaller0: entered allmulticast mode [ 212.817449][T12253] tipc: Resetting bearer [ 212.875343][T12261] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1757'. [ 213.004061][T12267] netlink: 'syz.0.1758': attribute type 1 has an invalid length. [ 213.117999][T12273] netlink: 'syz.0.1760': attribute type 1 has an invalid length. [ 213.450265][T12240] tipc: Resetting bearer [ 213.503173][T12240] tipc: Disabling bearer [ 214.107145][T12353] ieee802154 phy0 wpan0: encryption failed: -22 [ 214.381384][T12366] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 214.911535][T12405] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 214.965699][T12406] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 214.989731][T12406] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.183874][T12422] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 215.202564][T12423] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 215.302101][T12427] netlink: 'syz.2.1808': attribute type 1 has an invalid length. [ 215.409086][T12431] syzkaller0: entered promiscuous mode [ 215.415233][T12431] syzkaller0: entered allmulticast mode [ 216.296850][T12486] netlink: 'syz.0.1823': attribute type 8 has an invalid length. [ 216.532101][T12505] unsupported nlmsg_type 40 [ 216.544487][T12506] __nla_validate_parse: 23 callbacks suppressed [ 216.544487][T12507] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1827'. [ 216.544504][T12506] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1827'. [ 216.544518][T12506] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 216.554135][T12507] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 216.728156][T12515] netdevsim netdevsim0 : renamed from netdevsim0 [ 216.737698][T12515] netdevsim netdevsim0 : left promiscuous mode [ 216.844858][T12521] netlink: 'syz.0.1833': attribute type 2 has an invalid length. [ 217.009370][ T982] IPVS: starting estimator thread 0... [ 217.043014][T12535] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1835'. [ 217.140162][T12533] IPVS: using max 30 ests per chain, 72000 per kthread [ 217.159625][T12541] netlink: 'syz.3.1836': attribute type 8 has an invalid length. [ 217.525898][T12567] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 217.536937][T12567] netlink: 'syz.4.1846': attribute type 10 has an invalid length. [ 217.547368][T12567] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1846'. [ 217.584298][T12569] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1847'. [ 217.629866][T12569] tipc: Invalid UDP bearer configuration [ 217.629926][T12569] tipc: Enabling of bearer rejected, failed to enable media [ 217.753954][T12576] netlink: 'syz.3.1850': attribute type 1 has an invalid length. [ 217.762659][T12576] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1850'. [ 217.774009][T12576] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1850'. [ 217.804011][T12562] lo: entered allmulticast mode [ 217.816803][T12561] lo: left allmulticast mode [ 218.117166][T12594] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1856'. [ 218.164436][T12594] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1856'. [ 218.488011][T12620] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1861'. [ 218.516851][T12623] tipc: Enabled bearer , priority 0 [ 218.525062][T12625] netlink: 'syz.0.1863': attribute type 1 has an invalid length. [ 218.533043][T12625] nbd: couldn't find device at index 1048576 [ 218.540887][T12623] syzkaller0: entered promiscuous mode [ 218.546509][T12623] syzkaller0: entered allmulticast mode [ 218.661837][T12633] tipc: Resetting bearer [ 218.695337][T12621] tipc: Resetting bearer [ 218.742397][T12621] tipc: Disabling bearer [ 218.921306][T12649] netlink: 'syz.2.1866': attribute type 1 has an invalid length. [ 219.078156][T12658] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 219.111900][T12658] netlink: 'syz.3.1871': attribute type 3 has an invalid length. [ 219.341631][T12666] syzkaller0: entered promiscuous mode [ 219.347180][T12666] syzkaller0: entered allmulticast mode [ 219.409218][T12673] ieee802154 phy0 wpan0: encryption failed: -22 [ 219.783662][T12681] nbd: couldn't find a device at index -373156329 [ 221.344464][T12700] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 221.535975][T12709] lo speed is unknown, defaulting to 1000 [ 221.881739][T12709] lo speed is unknown, defaulting to 1000 [ 222.199004][ T5872] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 222.209030][ T5872] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 222.219145][ T5872] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 222.228426][ T5872] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 222.236326][ T5872] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 222.243789][T12744] netlink: 'syz.0.1896': attribute type 39 has an invalid length. [ 222.253343][ T5875] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 222.290231][ T5875] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 222.299621][ T5875] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 222.310970][ T5875] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 222.318899][ T5875] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 222.411318][T12740] lo speed is unknown, defaulting to 1000 [ 222.457134][T12757] __nla_validate_parse: 5 callbacks suppressed [ 222.457153][T12757] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1898'. [ 222.719457][T12763] 8021q: adding VLAN 0 to HW filter on device bond10 [ 222.735355][T12763] bond0: (slave bond10): Enslaving as an active interface with an up link [ 222.815903][T12740] lo speed is unknown, defaulting to 1000 [ 222.884895][T12786] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1906'. [ 223.015856][T12789] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1906'. [ 223.100952][T12785] delete_channel: no stack [ 223.264823][T12799] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1909'. [ 223.707328][T12813] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1914'. [ 224.128620][T12740] chnl_net:caif_netlink_parms(): no params data found [ 224.346885][ T5875] Bluetooth: hci5: command tx timeout [ 224.355552][T12740] bridge0: port 1(bridge_slave_0) entered blocking state [ 224.378066][T12740] bridge0: port 1(bridge_slave_0) entered disabled state [ 224.391533][T12740] bridge_slave_0: entered allmulticast mode [ 224.405567][T12740] bridge_slave_0: entered promiscuous mode [ 224.427460][T12740] bridge0: port 2(bridge_slave_1) entered blocking state [ 224.434813][T12740] bridge0: port 2(bridge_slave_1) entered disabled state [ 224.443021][T12740] bridge_slave_1: entered allmulticast mode [ 224.451445][T12740] bridge_slave_1: entered promiscuous mode [ 224.707344][T12861] tunl0: entered promiscuous mode [ 224.727068][T12861] netlink: 'syz.3.1925': attribute type 3 has an invalid length. [ 224.750493][T12861] netlink: 9 bytes leftover after parsing attributes in process `syz.3.1925'. [ 224.781146][T12869] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1927'. [ 224.795426][T12871] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1926'. [ 224.805379][T12871] netlink: 'syz.2.1926': attribute type 7 has an invalid length. [ 224.816594][T12871] netlink: 'syz.2.1926': attribute type 8 has an invalid length. [ 224.837425][T12740] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 224.839923][T12871] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1926'. [ 224.931435][T12740] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 225.055748][T12740] team0: Port device team_slave_0 added [ 225.103692][T12740] team0: Port device team_slave_1 added [ 225.110978][T12884] netlink: 168 bytes leftover after parsing attributes in process `syz.3.1931'. [ 225.265115][T12740] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 225.283324][T12740] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 225.340426][T12740] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 225.362597][T12740] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 225.369582][T12740] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 225.444384][T12740] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 225.637328][T12740] hsr_slave_0: entered promiscuous mode [ 225.645775][T12740] hsr_slave_1: entered promiscuous mode [ 225.653154][T12740] debugfs: 'hsr0' already exists in 'hsr' [ 225.665159][T12740] Cannot create hsr debugfs directory [ 225.844083][T12930] netlink: 'syz.2.1945': attribute type 4 has an invalid length. [ 226.061845][T12947] netlink: 'syz.3.1950': attribute type 11 has an invalid length. [ 226.278789][T12967] syzkaller1: entered promiscuous mode [ 226.294209][T12967] syzkaller1: entered allmulticast mode [ 226.407631][T12970] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 226.420817][ T5875] Bluetooth: hci5: command tx timeout [ 226.432790][T12740] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 226.454229][T12740] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 226.508543][T12740] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 226.573521][T12740] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 226.620330][T12983] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 226.833852][T12740] 8021q: adding VLAN 0 to HW filter on device bond0 [ 226.879123][T12740] 8021q: adding VLAN 0 to HW filter on device team0 [ 226.918107][ T7802] bridge0: port 1(bridge_slave_0) entered blocking state [ 226.925322][ T7802] bridge0: port 1(bridge_slave_0) entered forwarding state [ 226.973965][ T7802] bridge0: port 2(bridge_slave_1) entered blocking state [ 226.982120][ T7802] bridge0: port 2(bridge_slave_1) entered forwarding state [ 227.124451][T12740] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 227.519311][T12740] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 227.588224][T13046] __nla_validate_parse: 11 callbacks suppressed [ 227.588246][T13046] netlink: 64138 bytes leftover after parsing attributes in process `syz.0.1976'. [ 227.895605][T13059] nbd: nbd0 already in use [ 227.912086][T13059] block nbd0: NBD_DISCONNECT [ 227.924336][T13059] block nbd0: Send disconnect failed -32 [ 227.942189][T13059] block nbd0: shutting down sockets [ 228.144755][T12740] veth0_vlan: entered promiscuous mode [ 228.225917][T12740] veth1_vlan: entered promiscuous mode [ 228.231456][T13076] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 228.247388][T13072] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 228.277094][T13072] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 228.415707][T12740] veth0_macvtap: entered promiscuous mode [ 228.431341][T13084] netlink: 'syz.4.1985': attribute type 1 has an invalid length. [ 228.446899][T12740] veth1_macvtap: entered promiscuous mode [ 228.455427][T13084] netlink: 236 bytes leftover after parsing attributes in process `syz.4.1985'. [ 228.510846][T12740] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 228.511151][ T5875] Bluetooth: hci5: command tx timeout [ 228.525622][T12740] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 228.564345][ T1170] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.607503][ T1170] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.666383][ T1170] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.677032][ T1170] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.788528][T13100] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1991'. [ 228.823697][ T1142] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 228.846964][ T1142] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 228.905784][ T1142] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 228.927218][ T1142] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 228.936351][T13107] erspan0: entered allmulticast mode [ 229.054297][T13112] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1880'. [ 229.076492][T13112] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1880'. [ 229.197393][T13123] openvswitch: netlink: IP tunnel dst address not specified [ 229.221436][T13123] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 229.478161][T13144] netlink: 'syz.0.2004': attribute type 10 has an invalid length. [ 229.526270][T13144] team0: Device hsr_slave_0 failed to register rx_handler [ 229.590527][ T78] nci: nci_rf_intf_activated_ntf_packet: unsupported rf_interface 0x82 [ 229.820994][T13155] netlink: 'syz.5.2005': attribute type 13 has an invalid length. [ 229.837754][T13154] netlink: 'syz.5.2005': attribute type 13 has an invalid length. [ 230.032168][T13155] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 230.150848][T13154] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 230.358047][T13146] infiniband syz!: set down [ 230.363150][T13146] infiniband syz!: added team_slave_0 [ 230.382535][T13146] syz!: rxe_create_cq: returned err = -12 [ 230.403083][T13146] infiniband syz!: Couldn't create ib_mad CQ [ 230.408137][T13177] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 230.409386][T13146] infiniband syz!: Couldn't open port 1 [ 230.443079][T13177] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2012'. [ 230.481550][T13146] RDS/IB: syz!: added [ 230.485648][T13146] smc: adding ib device syz! with port count 1 [ 230.538506][T13146] smc: ib device syz! port 1 has pnetid [ 230.580473][ T5875] Bluetooth: hci5: command tx timeout [ 231.403753][T13216] sctp: [Deprecated]: syz.5.2025 (pid 13216) Use of int in max_burst socket option deprecated. [ 231.403753][T13216] Use struct sctp_assoc_value instead [ 231.455669][T13216] netlink: 'syz.5.2025': attribute type 1 has an invalid length. [ 231.468365][T13217] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 231.794841][T13231] netlink: 184 bytes leftover after parsing attributes in process `syz.0.2031'. [ 231.898890][T13237] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2034'. [ 231.927786][T13237] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.2034'. [ 232.061038][T13243] netlink: 'syz.4.2037': attribute type 21 has an invalid length. [ 232.366789][T13260] netlink: 'syz.0.2043': attribute type 10 has an invalid length. [ 232.378816][T13262] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2044'. [ 232.707273][T13277] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 232.777491][T13278] netlink: 'syz.0.2047': attribute type 10 has an invalid length. [ 232.792306][T13278] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 232.987919][T13288] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 233.031472][T13291] __nla_validate_parse: 1 callbacks suppressed [ 233.031493][T13291] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2052'. [ 233.296957][T13297] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2054'. [ 233.467174][T13299] lo speed is unknown, defaulting to 1000 [ 233.486446][T13303] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2056'. [ 233.510433][T13305] netlink: 64 bytes leftover after parsing attributes in process `syz.5.2057'. [ 233.536574][T13303] netlink: 'syz.4.2056': attribute type 1 has an invalid length. [ 233.559392][T13303] netlink: 'syz.4.2056': attribute type 2 has an invalid length. [ 233.703913][ T30] audit: type=1800 audit(1755397692.745:2): pid=13313 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2059" name=4996AE17DFFC2E43C8174B54B620636894AAACF28FF62616363C70A440AEC4014CAF28C0ADC04308 dev="tmpfs" ino=2118 res=0 errno=0 [ 233.771689][T13299] lo speed is unknown, defaulting to 1000 [ 233.941809][T13320] tipc: Enabled bearer , priority 0 [ 233.949537][T13320] syzkaller0: entered promiscuous mode [ 233.982874][T13320] syzkaller0: entered allmulticast mode [ 234.012178][T13322] netlink: 'syz.4.2062': attribute type 1 has an invalid length. [ 234.030213][T13322] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2062'. [ 234.094260][T13319] tipc: Resetting bearer [ 234.144236][T13319] tipc: Disabling bearer [ 234.385614][T13334] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2066'. [ 234.448087][T13337] ieee802154 phy0 wpan0: encryption failed: -22 [ 234.652986][T13349] netlink: 'syz.2.2072': attribute type 28 has an invalid length. [ 234.668896][T13351] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2071'. [ 234.688707][T13349] netlink: 'syz.2.2072': attribute type 3 has an invalid length. [ 234.701808][T13351] netlink: 'syz.5.2071': attribute type 2 has an invalid length. [ 234.747545][T13349] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2072'. [ 234.850212][T13356] dvmrp0: entered allmulticast mode [ 234.955342][T13361] (unnamed net_device) (uninitialized): Unable to set down delay as MII monitoring is disabled [ 234.983234][T13363] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2077'. [ 235.005989][T13363] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2077'. [ 235.224759][T13382] sctp: [Deprecated]: syz.4.2081 (pid 13382) Use of struct sctp_assoc_value in delayed_ack socket option. [ 235.224759][T13382] Use struct sctp_sack_info instead [ 235.692898][T13402] bond1: entered promiscuous mode [ 235.698210][T13402] bond1: entered allmulticast mode [ 235.704082][T13402] 8021q: adding VLAN 0 to HW filter on device bond1 [ 235.939997][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 236.446706][T13426] gretap1: entered promiscuous mode [ 236.675913][T13442] netlink: 'syz.5.2100': attribute type 10 has an invalid length. [ 236.692563][T13442] team0: Port device dummy0 added [ 236.713225][T13442] netlink: 'syz.5.2100': attribute type 10 has an invalid length. [ 236.893466][T13442] team0: Port device dummy0 removed [ 236.905444][T13442] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 237.344934][T13479] 8021q: adding VLAN 0 to HW filter on device bond0 [ 237.377184][T13479] bond0: (slave rose0): Enslaving as an active interface with an up link [ 237.551151][T13497] syz_tun: entered allmulticast mode [ 237.670659][T13502] syz_tun: left allmulticast mode [ 238.879497][T13550] __nla_validate_parse: 8 callbacks suppressed [ 238.879516][T13550] netlink: 108 bytes leftover after parsing attributes in process `syz.2.2127'. [ 239.499666][T13557] syzkaller0: entered promiscuous mode [ 239.505649][T13557] syzkaller0: entered allmulticast mode [ 239.662865][T13594] tipc: Enabling of bearer rejected, failed to enable media [ 239.702068][T13596] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2136'. [ 239.872461][T10972] IPVS: starting estimator thread 0... [ 239.963728][T13606] IPVS: using max 31 ests per chain, 74400 per kthread [ 240.227796][T13623] netlink: 'syz.5.2140': attribute type 1 has an invalid length. [ 240.681654][T13604] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 241.831738][T13621] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2140'. [ 242.391031][T13681] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2152'. [ 242.397096][T13678] syzkaller1: entered promiscuous mode [ 242.417171][T13678] syzkaller1: entered allmulticast mode [ 242.709352][T13702] IPv6: addrconf: prefix option has invalid lifetime [ 242.723089][T13703] IPv6: addrconf: prefix option has invalid lifetime [ 242.829043][T13709] netlink: 184 bytes leftover after parsing attributes in process `syz.2.2160'. [ 242.849191][T13708] netlink: 184 bytes leftover after parsing attributes in process `syz.2.2160'. [ 242.884093][T13711] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2161'. [ 242.932776][T13715] netlink: 'syz.0.2162': attribute type 1 has an invalid length. [ 242.959659][T13716] netlink: 'syz.2.2163': attribute type 29 has an invalid length. [ 242.970478][T13716] netlink: 'syz.2.2163': attribute type 29 has an invalid length. [ 243.064473][T13715] veth5: entered promiscuous mode [ 243.073827][T13715] bond0: (slave veth5): Enslaving as a backup interface with a down link [ 243.086914][T13715] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2162'. [ 243.118052][T13715] netlink: 'syz.0.2162': attribute type 1 has an invalid length. [ 243.356796][T13738] IPVS: set_ctl: invalid protocol: 24 172.20.20.170:20001 [ 243.813218][T13768] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2179'. [ 243.839569][T13768] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2179'. [ 243.929541][T13773] bridge0: port 1(batadv1) entered blocking state [ 243.956781][T13773] bridge0: port 1(batadv1) entered disabled state [ 243.974416][T13773] batadv1: entered allmulticast mode [ 243.985521][T13773] batadv1: entered promiscuous mode [ 244.143442][T13788] netlink: 5 bytes leftover after parsing attributes in process `syz.4.2187'. [ 244.163087][T13788] 0ªî{X¹¦: renamed from gretap0 [ 244.203398][T13791] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 244.239044][T13788] 0ªî{X¹¦: left promiscuous mode [ 244.249997][T13788] 0ªî{X¹¦: entered allmulticast mode [ 244.259100][T13788] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 244.432970][ T1106] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 244.442699][ T1106] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 244.597402][T13820] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2196'. [ 244.917656][T13837] netlink: 'syz.2.2201': attribute type 10 has an invalid length. [ 244.941253][T13837] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2201'. [ 244.960830][T13837] team0: Port device geneve0 added [ 244.969453][T13837] netlink: 248 bytes leftover after parsing attributes in process `syz.2.2201'. [ 244.975847][ T1106] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.992786][ T1106] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.005117][ T1106] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.022901][ T1106] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.099856][T13842] netlink: 'syz.4.2204': attribute type 1 has an invalid length. [ 245.107624][T13842] netlink: 232 bytes leftover after parsing attributes in process `syz.4.2204'. [ 245.210019][T13842] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2204'. [ 245.319287][T13858] tipc: Started in network mode [ 245.327441][T13858] tipc: Node identity 46fe5b21faa4, cluster identity 4711 [ 245.338001][T13858] tipc: Enabled bearer , priority 0 [ 245.353464][T13858] syzkaller0: entered promiscuous mode [ 245.367399][T13858] syzkaller0: entered allmulticast mode [ 245.517077][T13861] tipc: Resetting bearer [ 245.581035][T13856] tipc: Resetting bearer [ 245.643041][T13856] tipc: Disabling bearer [ 246.040313][T13904] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2220'. [ 246.098455][T13890] lo speed is unknown, defaulting to 1000 [ 246.237741][T13915] netem: change failed [ 246.248131][T13913] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2224'. [ 246.513655][T13924] sctp: [Deprecated]: syz.3.2228 (pid 13924) Use of struct sctp_assoc_value in delayed_ack socket option. [ 246.513655][T13924] Use struct sctp_sack_info instead [ 246.602771][T13921] sctp: [Deprecated]: syz.3.2228 (pid 13921) Use of struct sctp_assoc_value in delayed_ack socket option. [ 246.602771][T13921] Use struct sctp_sack_info instead [ 246.682840][T13937] openvswitch: netlink: Key type 60 is out of range max 32 [ 246.692164][T13937] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 246.772903][T13894] lo speed is unknown, defaulting to 1000 [ 246.818936][T13890] lo speed is unknown, defaulting to 1000 [ 246.829015][T13944] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2233'. [ 246.846754][T13944] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2233'. [ 247.043544][T13953] bridge0: port 1(bridge_slave_0) entered blocking state [ 247.050771][T13953] bridge0: port 1(bridge_slave_0) entered forwarding state [ 247.240651][T13964] netlink: 'syz.4.2240': attribute type 83 has an invalid length. [ 247.315602][T13969] netlink: 'syz.0.2242': attribute type 12 has an invalid length. [ 247.370782][T13973] netlink: 'syz.0.2242': attribute type 12 has an invalid length. [ 247.378700][T13973] netlink: 'syz.0.2242': attribute type 11 has an invalid length. [ 247.403103][T13969] netlink: 'syz.0.2242': attribute type 11 has an invalid length. [ 247.504070][T13975] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 247.682407][T13987] netlink: 'syz.2.2248': attribute type 13 has an invalid length. [ 247.809393][T13987] 8021q: adding VLAN 0 to HW filter on device team0 [ 247.816598][T10969] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 247.827936][T13987] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 247.872616][T13894] lo speed is unknown, defaulting to 1000 [ 247.896471][T13993] dvmrp0: entered allmulticast mode [ 247.918406][T13994] dvmrp0: left allmulticast mode [ 247.955132][T13996] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 247.992513][T13998] netlink: 'syz.2.2252': attribute type 23 has an invalid length. [ 248.037716][ T7802] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 248.048382][ T7802] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 248.071659][T14000] macsec0: entered promiscuous mode [ 248.076917][T14000] macsec0: entered allmulticast mode [ 248.102749][T14000] veth1_macvtap: entered promiscuous mode [ 248.108781][T14000] veth1_macvtap: entered allmulticast mode [ 248.127449][T14000] macsec0: left promiscuous mode [ 248.134674][T14000] macsec0: left allmulticast mode [ 248.139738][T14000] veth1_macvtap: left allmulticast mode [ 248.192172][T14000] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 248.210313][ T982] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 248.230273][T14000] netlink: 'syz.4.2253': attribute type 21 has an invalid length. [ 248.240254][T14000] netlink: 'syz.4.2253': attribute type 4 has an invalid length. [ 248.248014][T14000] netlink: 'syz.4.2253': attribute type 5 has an invalid length. [ 248.334051][T14000] netdevsim netdevsim4 ÿÿÿÿÿÿ: renamed from netdevsim0 [ 248.419569][T14015] (unnamed net_device) (uninitialized): option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 248.673037][T14022] tipc: Enabled bearer , priority 0 [ 248.698029][T14022] syzkaller0: entered promiscuous mode [ 248.712719][T14022] syzkaller0: entered allmulticast mode [ 248.742008][T14022] tipc: Resetting bearer [ 248.876270][T14022] tipc: Resetting bearer [ 248.902416][T14022] tipc: Disabling bearer [ 248.918546][T10974] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 249.115996][T14044] macvlan0: entered allmulticast mode [ 249.151761][T14044] bond0: (slave macvlan0): Error -98 calling set_mac_address [ 249.207792][T14053] __nla_validate_parse: 7 callbacks suppressed [ 249.207812][T14053] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2270'. [ 249.432513][T14061] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2272'. [ 249.470780][T14065] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2273'. [ 249.612564][T14075] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2276'. [ 249.774185][T14075] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2276'. [ 250.159505][T14103] Unsupported ieee802154 address type: 0 [ 250.251980][T14094] delete_channel: no stack [ 250.459361][T14115] IPv6: Can't replace route, no match found [ 250.530891][T14121] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 250.593792][T14121] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 251.228432][T14158] netlink: 4552 bytes leftover after parsing attributes in process `syz.0.2294'. [ 251.286273][T14158] netlink: 4552 bytes leftover after parsing attributes in process `syz.0.2294'. [ 251.560006][T14169] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2297'. [ 251.630559][T14144] macvtap0: left allmulticast mode [ 251.656266][T14144] gretap1: left promiscuous mode [ 251.671348][T14144] gretap1: left allmulticast mode [ 251.679651][T14144] bond0: left promiscuous mode [ 251.689378][T14144] bond2: left promiscuous mode [ 251.703212][T14144] bridge2: left allmulticast mode [ 251.708423][T14144] ip6erspan0: left promiscuous mode [ 251.737667][ T13] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.797432][ T13] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.923918][T14182] netlink: 1196 bytes leftover after parsing attributes in process `syz.3.2302'. [ 251.937891][ T13] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.938046][T14182] netlink: 1196 bytes leftover after parsing attributes in process `syz.3.2302'. [ 252.019205][T14180] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 252.033547][T14180] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.066036][ T13] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.195015][T14180] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 252.205535][T14180] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.333341][T14180] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 252.336475][T14203] netlink: 'syz.3.2306': attribute type 12 has an invalid length. [ 252.349570][T14180] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.429235][T14198] lo speed is unknown, defaulting to 1000 [ 252.611572][ T7802] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 252.627447][ T7802] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.651307][ T7802] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 252.666116][ T7802] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.698414][ T7802] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 252.707358][ T7802] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.787401][ T7802] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 252.837537][ T7802] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.855208][T14198] lo speed is unknown, defaulting to 1000 [ 253.464881][T14252] netlink: 'syz.2.2319': attribute type 5 has an invalid length. [ 253.487548][T14252] geneve2: entered promiscuous mode [ 253.494029][T14252] geneve2: entered allmulticast mode [ 253.574781][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 256 - 0 [ 253.623696][ T1106] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 256 - 0 [ 253.660822][ T1106] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 256 - 0 [ 253.675411][ T1106] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 256 - 0 [ 253.802733][T14266] netlink: 'syz.0.2326': attribute type 3 has an invalid length. [ 254.807625][T14313] __nla_validate_parse: 41 callbacks suppressed [ 254.807646][T14313] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2336'. [ 255.115158][T14329] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2339'. [ 255.149154][T14328] netlink: 'syz.0.2340': attribute type 1 has an invalid length. [ 255.197631][T14334] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2341'. [ 255.203487][T14318] lo speed is unknown, defaulting to 1000 [ 255.267001][T14333] gretap1: entered promiscuous mode [ 255.466733][T14337] macvlan2: entered promiscuous mode [ 255.477699][T14337] macvlan2: entered allmulticast mode [ 255.487383][T14337] bond4: entered promiscuous mode [ 255.500860][T14337] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 255.516007][T14337] bond4: left promiscuous mode [ 255.549431][T14334] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 255.568273][T14334] gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 255.576655][T14334] gretap2: entered promiscuous mode [ 255.592962][T14334] gretap2: entered allmulticast mode [ 255.780065][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 255.793112][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.799459][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.863997][T14318] lo speed is unknown, defaulting to 1000 [ 256.500181][T14385] netlink: 'syz.2.2356': attribute type 1 has an invalid length. [ 256.587556][T14390] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2358'. [ 256.643051][T14396] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2358'. [ 256.677629][T14397] veth1_to_bond: entered allmulticast mode [ 256.765531][T14402] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2360'. [ 256.909000][T14402] veth1_to_bond (unregistering): left allmulticast mode [ 257.168270][T14404] syzkaller0: entered promiscuous mode [ 257.174934][T14404] syzkaller0: entered allmulticast mode [ 257.195033][T14426] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2365'. [ 257.401967][T14436] netlink: 'syz.4.2370': attribute type 24 has an invalid length. [ 258.916761][T14450] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2373'. [ 259.008484][T14457] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2373'. [ 259.019220][T14458] netlink: 'syz.4.2375': attribute type 1 has an invalid length. [ 259.166705][T14468] netlink: 'syz.3.2378': attribute type 11 has an invalid length. [ 259.179072][T14468] netlink: 228 bytes leftover after parsing attributes in process `syz.3.2378'. [ 259.198988][T14467] netlink: 'syz.3.2378': attribute type 1 has an invalid length. [ 259.752459][T14483] syzkaller0: entered promiscuous mode [ 259.774969][T14483] syzkaller0: entered allmulticast mode [ 259.941235][T14498] __nla_validate_parse: 2 callbacks suppressed [ 259.941256][T14498] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2387'. [ 260.307709][T14515] netlink: 'syz.0.2391': attribute type 2 has an invalid length. [ 260.317807][T14515] netlink: 244 bytes leftover after parsing attributes in process `syz.0.2391'. [ 261.617766][T14526] netlink: 'syz.2.2395': attribute type 1 has an invalid length. [ 261.929503][T14543] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2399'. [ 261.959339][T14543] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2399'. [ 262.010554][T14551] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2399'. [ 262.025603][T14549] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2403'. [ 262.045970][ T13] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 262.086361][ T13] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 262.103525][T14557] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 262.127699][ T13] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 262.157023][ T1106] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 262.228042][T14564] netlink: 'syz.0.2407': attribute type 4 has an invalid length. [ 262.367254][T14572] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2409'. [ 262.435691][T14578] rdma_op ffff88807aa051f0 conn xmit_rdma 0000000000000000 [ 263.246973][T14607] netlink: 52 bytes leftover after parsing attributes in process `syz.5.2417'. [ 263.284513][T14609] netlink: 204 bytes leftover after parsing attributes in process `syz.4.2422'. [ 263.367464][T14613] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2423'. [ 263.427567][T14613] batadv_slave_1: entered promiscuous mode [ 263.466178][T14612] batadv_slave_1: left promiscuous mode [ 263.569971][T14619] netlink: 'syz.4.2426': attribute type 3 has an invalid length. [ 263.935673][T14643] IPVS: Unknown mcast interface: vcan0 [ 264.077184][T14648] batadv2: entered allmulticast mode [ 264.443666][T14665] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 264.965485][T14694] bond0: (slave bond_slave_0): Error -34 calling ndo_bpf [ 264.988343][T14694] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 265.082887][T14696] tipc: Enabled bearer , priority 0 [ 265.119425][T14696] syzkaller0: entered promiscuous mode [ 265.146924][T14696] syzkaller0: entered allmulticast mode [ 265.182772][T14696] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 265.264924][T14705] tipc: Resetting bearer [ 265.297663][T14695] tipc: Resetting bearer [ 265.326177][T14716] __nla_validate_parse: 4 callbacks suppressed [ 265.326198][T14716] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2452'. [ 265.376876][T14695] tipc: Disabling bearer [ 265.396165][T14719] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2453'. [ 265.411482][T14719] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2453'. [ 265.664268][T14739] syzkaller0: entered promiscuous mode [ 265.670261][T14739] syzkaller0: entered allmulticast mode [ 265.787986][T14749] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2463'. [ 265.798696][T14752] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2464'. [ 265.811495][T14752] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2464'. [ 265.931036][T14752] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2464'. [ 265.993172][T14759] lo speed is unknown, defaulting to 1000 [ 266.161977][T14775] syzkaller1: entered promiscuous mode [ 266.182280][T14775] syzkaller1: entered allmulticast mode [ 266.211281][T14779] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2470'. [ 266.337403][T14781] netlink: 96 bytes leftover after parsing attributes in process `syz.5.2470'. [ 266.786505][T14759] lo speed is unknown, defaulting to 1000 [ 266.819467][T14804] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2474'. [ 266.847803][T14804] openvswitch: netlink: nsh attribute has 1 unknown bytes. [ 266.876166][T14804] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 267.176960][T14821] delete_channel: no stack [ 267.524922][T14842] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc. [ 267.573135][ T982] hid (null): unknown global tag 0xe [ 267.604798][ T982] hid (null): nested delimiters [ 267.629981][T14845] netlink: 'syz.4.2488': attribute type 21 has an invalid length. [ 267.643196][ T982] hid (null): global environment stack underflow [ 267.686481][T14845] netlink: 'syz.4.2488': attribute type 1 has an invalid length. [ 268.139634][T14881] netlink: 'syz.4.2496': attribute type 21 has an invalid length. [ 269.343599][ T982] hid-generic 0005:0D45:1012.0001: unknown global tag 0xe [ 269.390525][ T982] hid-generic 0005:0D45:1012.0001: item 0 2 1 14 parsing failed [ 269.398903][ T982] hid-generic 0005:0D45:1012.0001: probe with driver hid-generic failed with error -22 [ 269.511925][T14917] netlink: 'syz.4.2504': attribute type 7 has an invalid length. [ 269.585442][T14927] netlink: 'syz.2.2507': attribute type 1 has an invalid length. [ 269.595096][T14927] netlink: 'syz.2.2507': attribute type 4 has an invalid length. [ 269.615815][T14927] netlink: 'syz.2.2507': attribute type 83 has an invalid length. [ 269.747913][T14935] batadv2: entered allmulticast mode [ 270.535208][T14977] netlink: 'syz.4.2522': attribute type 13 has an invalid length. [ 270.547954][T14977] veth0_macvtap: left promiscuous mode [ 270.558607][T14977] macvtap0: entered allmulticast mode [ 270.590800][T14977] macvtap0: refused to change device tx_queue_len [ 270.689420][T14984] __nla_validate_parse: 8 callbacks suppressed [ 270.689439][T14984] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2524'. [ 270.763769][T14984] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2524'. [ 270.944563][T15001] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap0 [ 270.958925][T15001] gretap0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 270.967561][T15001] gretap0: entered promiscuous mode [ 270.973664][T15001] gretap0: entered allmulticast mode [ 271.200124][T15021] netlink: 'syz.4.2533': attribute type 18 has an invalid length. [ 271.577865][T15031] veth0_to_bond: entered allmulticast mode [ 271.685462][T15037] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2540'. [ 271.762896][T15041] netlink: 'syz.2.2543': attribute type 1 has an invalid length. [ 271.777455][T15041] netlink: 220 bytes leftover after parsing attributes in process `syz.2.2543'. [ 271.789702][T15041] netlink: 'syz.2.2543': attribute type 1 has an invalid length. [ 271.801660][T15041] wg1: entered promiscuous mode [ 271.817220][T15041] wg1: entered allmulticast mode [ 272.206889][T15072] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2554'. [ 272.266353][T15074] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2553'. [ 272.284099][T15076] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 272.453044][T15084] tipc: Enabled bearer , priority 0 [ 272.491300][T15084] syzkaller0: entered promiscuous mode [ 272.496809][T15084] syzkaller0: entered allmulticast mode [ 272.579339][T15084] tipc: Resetting bearer [ 272.618964][T15083] tipc: Resetting bearer [ 272.671113][T15083] tipc: Disabling bearer [ 272.712272][T15095] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2560'. [ 272.731813][T15095] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 272.754774][T15095] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 272.821837][T15100] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 272.948583][T15108] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2566'. [ 273.078866][T15111] bond0: (slave dummy0): Releasing backup interface [ 273.099394][T15115] netlink: 'syz.2.2569': attribute type 1 has an invalid length. [ 273.120514][T15111] bridge_slave_0: left allmulticast mode [ 273.126282][T15111] bridge_slave_0: left promiscuous mode [ 273.140235][T15111] bridge0: port 1(bridge_slave_0) entered disabled state [ 273.142585][T15115] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2569'. [ 273.173327][T15111] bridge_slave_1: left allmulticast mode [ 273.179017][T15111] bridge_slave_1: left promiscuous mode [ 273.193872][T15111] bridge0: port 2(bridge_slave_1) entered disabled state [ 273.216865][T15111] bond0: (slave bond_slave_0): Releasing backup interface [ 273.236654][T15111] bond0: (slave bond_slave_1): Releasing backup interface [ 273.264568][T15111] team0: Port device team_slave_0 removed [ 273.274863][T15111] team0: Port device team_slave_1 removed [ 273.282499][T15111] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 273.290803][T15111] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 273.299405][T15111] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 273.307681][T15111] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 273.463502][T15129] netlink: 'syz.5.2571': attribute type 1 has an invalid length. [ 273.721984][T15147] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2576'. [ 273.835989][T15152] (unnamed net_device) (uninitialized): up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 274.294819][T15190] RDS: rds_bind could not find a transport for 400:0:1200:0:1030:0:ffff:ffff, load rds_tcp or rds_rdma? [ 274.625744][T15213] unknown channel width for channel at 909000KHz? [ 274.684620][T15216] validate_nla: 3 callbacks suppressed [ 274.684640][T15216] netlink: 'syz.5.2599': attribute type 18 has an invalid length. [ 274.708247][T15216] netlink: 'syz.5.2599': attribute type 18 has an invalid length. [ 275.101635][T15244] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 275.116665][T15242] erspan0: entered promiscuous mode [ 275.448916][T15269] sctp: [Deprecated]: syz.2.2615 (pid 15269) Use of struct sctp_assoc_value in delayed_ack socket option. [ 275.448916][T15269] Use struct sctp_sack_info instead [ 275.661233][T15282] netlink: 'syz.4.2621': attribute type 30 has an invalid length. [ 275.690696][T15285] __nla_validate_parse: 19 callbacks suppressed [ 275.690714][T15285] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2622'. [ 275.761159][T15280] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 275.983929][T15298] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2624'. [ 276.180942][T15287] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 276.439189][T15320] netlink: 'syz.2.2629': attribute type 29 has an invalid length. [ 276.480150][T15320] netlink: 'syz.2.2629': attribute type 29 has an invalid length. [ 276.517905][T15320] netlink: 500 bytes leftover after parsing attributes in process `syz.2.2629'. [ 276.650100][T15325] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2631'. [ 276.831330][T15340] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2634'. [ 277.182688][T15369] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2642'. [ 277.193988][T15369] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2642'. [ 277.313813][T15377] netlink: 'syz.4.2646': attribute type 4 has an invalid length. [ 277.347248][T15379] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2647'. [ 277.359524][T15375] netlink: 22 bytes leftover after parsing attributes in process `syz.3.2644'. [ 277.371628][T15375] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2644'. [ 277.381206][T15375] netlink: 'syz.3.2644': attribute type 5 has an invalid length. [ 278.170274][T15420] syzkaller0: refused to change device tx_queue_len [ 278.511449][T15440] netlink: 'syz.4.2666': attribute type 21 has an invalid length. [ 278.538947][T15440] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode broadcast(3) [ 279.234045][ T5872] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 279.245407][ T5872] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 279.254018][ T5872] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 279.264471][ T5872] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 279.279436][ T5872] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 279.364957][T15481] lo speed is unknown, defaulting to 1000 [ 279.484812][T15492] netlink: 'syz.0.2680': attribute type 11 has an invalid length. [ 279.881948][T15481] lo speed is unknown, defaulting to 1000 [ 280.183289][T15538] netlink: 'syz.0.2692': attribute type 13 has an invalid length. [ 280.214232][T15538] veth0_macvtap: left promiscuous mode [ 280.235874][T15538] macvtap0: entered allmulticast mode [ 280.248611][T15538] macvtap0: refused to change device tx_queue_len [ 280.856300][T15573] IPVS: Error connecting to the multicast addr [ 281.008321][T15579] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 281.106547][T15585] __nla_validate_parse: 10 callbacks suppressed [ 281.106566][T15585] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2708'. [ 281.141854][T15585] netlink: 72 bytes leftover after parsing attributes in process `syz.5.2708'. [ 281.152069][T15585] netlink: 72 bytes leftover after parsing attributes in process `syz.5.2708'. [ 281.238283][T15588] team0: No ports can be present during mode change [ 281.300932][ T5872] Bluetooth: hci3: command tx timeout [ 281.342191][T15481] chnl_net:caif_netlink_parms(): no params data found [ 281.346337][T15593] IPVS: set_ctl: invalid protocol: 41 224.0.0.1:20004 [ 281.578148][T15481] bridge0: port 1(bridge_slave_0) entered blocking state [ 281.585930][T15481] bridge0: port 1(bridge_slave_0) entered disabled state [ 281.593347][T15481] bridge_slave_0: entered allmulticast mode [ 281.634087][T15481] bridge_slave_0: entered promiscuous mode [ 281.646158][T15481] bridge0: port 2(bridge_slave_1) entered blocking state [ 281.657752][T15481] bridge0: port 2(bridge_slave_1) entered disabled state [ 281.676813][T15481] bridge_slave_1: entered allmulticast mode [ 281.689296][T15481] bridge_slave_1: entered promiscuous mode [ 281.720422][T15615] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2715'. [ 281.737612][T15615] netlink: 'syz.4.2715': attribute type 1 has an invalid length. [ 281.786173][T15481] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 281.905496][T15621] bond11: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 281.931162][T15481] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 281.936931][T15621] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2715'. [ 281.975105][T15615] veth9: entered promiscuous mode [ 281.985524][T15615] bond11: (slave veth9): Enslaving as a backup interface with a down link [ 282.003376][T15621] 8021q: adding VLAN 0 to HW filter on device bond11 [ 282.012315][ T78] bond11: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 282.043463][T15631] !: renamed from dummy0 (while UP) [ 282.066004][T15620] lo speed is unknown, defaulting to 1000 [ 282.098569][T15481] team0: Port device team_slave_0 added [ 282.151847][ T13] bond11: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 282.182591][T15481] team0: Port device team_slave_1 added [ 282.306180][T15481] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 282.334469][T15481] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 282.485717][T15481] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 282.532792][T15481] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 282.540886][T15481] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 282.587970][T15481] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 282.604759][T15620] lo speed is unknown, defaulting to 1000 [ 282.714952][T15653] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2726'. [ 282.725365][T15653] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2726'. [ 282.775478][T15654] net veth1_virt_wifi .: renamed from virt_wifi0 [ 282.837617][T15481] hsr_slave_0: entered promiscuous mode [ 282.852218][T15481] hsr_slave_1: entered promiscuous mode [ 282.858820][T15481] debugfs: 'hsr0' already exists in 'hsr' [ 282.900538][T15481] Cannot create hsr debugfs directory [ 282.973140][T15665] netlink: 'syz.5.2729': attribute type 10 has an invalid length. [ 283.032936][T15665] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 283.278222][T15674] netlink: 'syz.5.2734': attribute type 10 has an invalid length. [ 283.357325][T15674] team0: Device hsr_slave_0 failed to register rx_handler [ 283.380386][ T5872] Bluetooth: hci3: command tx timeout [ 283.601096][T15681] netlink: 92 bytes leftover after parsing attributes in process `syz.3.2737'. [ 283.633646][T15481] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 283.650458][T15681] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2737'. [ 283.689421][T15481] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 283.708215][T15481] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 283.741776][T15481] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 283.831072][T15690] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 284.014626][T15704] veth1_macvtap: left promiscuous mode [ 284.045540][T15704] macsec0: entered promiscuous mode [ 284.060038][T15704] macsec0: entered allmulticast mode [ 284.096640][T15701] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2743'. [ 284.115624][T15705] veth1_macvtap: entered promiscuous mode [ 284.122250][T15705] veth1_macvtap: entered allmulticast mode [ 284.128520][T15705] macsec0: left promiscuous mode [ 284.150028][T15705] macsec0: left allmulticast mode [ 284.155412][T15705] veth1_macvtap: left allmulticast mode [ 284.179917][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 284.273796][T15481] 8021q: adding VLAN 0 to HW filter on device bond0 [ 284.382416][T15712] pim6reg1: entered promiscuous mode [ 284.387930][T15712] pim6reg1: entered allmulticast mode [ 284.484684][T15481] 8021q: adding VLAN 0 to HW filter on device team0 [ 284.513320][ T78] bridge0: port 1(bridge_slave_0) entered blocking state [ 284.520594][ T78] bridge0: port 1(bridge_slave_0) entered forwarding state [ 284.565048][ T78] bridge0: port 2(bridge_slave_1) entered blocking state [ 284.572265][ T78] bridge0: port 2(bridge_slave_1) entered forwarding state [ 284.643077][T15481] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 284.882804][T15481] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 285.098349][T15481] veth0_vlan: entered promiscuous mode [ 285.109536][T15481] veth1_vlan: entered promiscuous mode [ 285.145037][T15481] veth0_macvtap: entered promiscuous mode [ 285.169476][T15481] veth1_macvtap: entered promiscuous mode [ 285.220849][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 285.238796][T15481] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 285.272158][T15734] netlink: 'syz.3.2750': attribute type 1 has an invalid length. [ 285.281593][T15481] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 285.282148][T15736] netlink: 'syz.0.2748': attribute type 1 has an invalid length. [ 285.302729][ T7802] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 285.332948][ T7802] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 285.354544][T15734] netlink: 'syz.3.2750': attribute type 4 has an invalid length. [ 285.378993][ T7802] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 285.427268][ T7802] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 285.460567][ T5872] Bluetooth: hci3: command tx timeout [ 285.546805][ T1170] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 285.598070][ T1170] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 285.668929][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 285.687185][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 285.872062][T15757] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-tlb(5) [ 286.213292][T15789] __nla_validate_parse: 7 callbacks suppressed [ 286.213310][T15789] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2764'. [ 286.259948][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 286.480358][T15800] openvswitch: netlink: Geneve opt len 62 is not a multiple of 4. [ 286.696854][T15814] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2772'. [ 286.696878][T15812] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2772'. [ 286.717957][T15815] netlink: 'syz.6.2770': attribute type 12 has an invalid length. [ 286.747548][T15813] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2771'. [ 286.775484][T15815] (unnamed net_device) (uninitialized): option primary_reselect: invalid value (255) [ 287.021196][T15822] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2774'. [ 287.105522][T15826] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2777'. [ 287.299828][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 287.340761][T15837] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2779'. [ 287.410749][T15837] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2779'. [ 287.458639][T15837] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2779'. [ 287.503246][T15847] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2781'. [ 287.514900][ T5875] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 287.529682][ T5875] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 287.540172][ T5875] Bluetooth: hci3: command tx timeout [ 287.545870][ T5875] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 287.555451][ T5875] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 287.564050][ T5875] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 287.658275][T15846] lo speed is unknown, defaulting to 1000 [ 287.758958][T15858] vlan2: entered allmulticast mode [ 287.969150][T15869] sctp: [Deprecated]: syz.5.2788 (pid 15869) Use of int in max_burst socket option. [ 287.969150][T15869] Use struct sctp_assoc_value instead [ 288.101870][T15876] netlink: 'syz.6.2790': attribute type 18 has an invalid length. [ 288.169460][ T13] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 288.197776][T15846] lo speed is unknown, defaulting to 1000 [ 288.204098][T15876] netlink: 'syz.6.2790': attribute type 18 has an invalid length. [ 288.212680][ T13] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 288.226486][ T7802] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 288.255923][ T7802] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 288.339933][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 288.369091][T15882] netlink: 'syz.4.2792': attribute type 1 has an invalid length. [ 288.423609][T15882] workqueue: Failed to create a rescuer kthread for wq "bond12": -EINTR [ 288.730303][T15901] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 289.281058][T15919] netlink: 'syz.0.2803': attribute type 1 has an invalid length. [ 289.379814][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 289.619947][ T5875] Bluetooth: hci4: command tx timeout [ 289.649593][T15928] netlink: 'syz.0.2804': attribute type 11 has an invalid length. [ 290.174328][T15846] chnl_net:caif_netlink_parms(): no params data found [ 290.419815][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 290.545401][T15968] netdevsim netdevsim5: Direct firmware load for /.€ failed with error -2 [ 290.564096][T15968] netdevsim netdevsim5: Falling back to sysfs fallback for: /.€ [ 290.645085][T15972] siw: device registration error -23 [ 290.699463][T15974] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 290.766792][ T1142] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 290.793676][ T1142] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.898158][ T1142] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 290.924845][ T1142] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.024905][ T1142] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 291.058400][ T1142] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.155753][ T1142] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 291.187309][ T1142] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.253726][T15980] unknown channel width for channel at 909000KHz? [ 291.260840][T15980] unknown channel width for channel at 909000KHz? [ 291.459920][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 291.583979][T15993] __nla_validate_parse: 15 callbacks suppressed [ 291.583999][T15993] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2824'. [ 291.721288][T15997] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2825'. [ 291.804514][T16002] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2826'. [ 292.043956][ T5872] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 292.055770][ T5872] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 292.064506][ T5872] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 292.075323][ T5879] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 292.094660][ T5879] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 292.105515][ T5872] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 292.114411][ T5879] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 292.115804][ T5872] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 292.132449][ T5872] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 292.144727][ T5872] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 292.295145][T16011] openvswitch: netlink: IPv6 tunnel dst address is zero [ 292.389128][ T1142] dvmrp0 (unregistering): left allmulticast mode [ 292.509815][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 292.780960][ T1142] bond1 (unregistering): Released all slaves [ 292.889025][ T1142] bond2 (unregistering): Released all slaves [ 292.904632][ T1142] bond3 (unregistering): Released all slaves [ 292.918412][ T1142] bond0 (unregistering): (slave veth5): Releasing backup interface [ 292.932421][ T1142] bond0 (unregistering): Released all slaves [ 292.945924][ T1142] bond4 (unregistering): Released all slaves [ 292.963866][ T1142] bond5 (unregistering): Released all slaves [ 293.127858][T16006] lo speed is unknown, defaulting to 1000 [ 293.150179][ T1142] tipc: Left network mode [ 293.163851][T16017] netlink: ct family unspecified [ 293.174977][T16017] openvswitch: netlink: Actions may not be safe on all matching packets [ 293.539958][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 293.807537][T16040] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 293.817511][T16052] ip6gre1: entered allmulticast mode [ 293.838142][T16052] netlink: 248 bytes leftover after parsing attributes in process `syz.5.2840'. [ 293.840226][T16006] lo speed is unknown, defaulting to 1000 [ 293.862066][T16004] lo speed is unknown, defaulting to 1000 [ 294.091103][T16068] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 294.181463][ T51] Bluetooth: hci4: command tx timeout [ 294.181475][ T5875] Bluetooth: hci0: command tx timeout [ 294.311115][T16004] lo speed is unknown, defaulting to 1000 [ 294.412719][T16081] netlink: 'syz.5.2848': attribute type 24 has an invalid length. [ 294.579812][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 294.869563][T16105] netlink: 'syz.5.2856': attribute type 4 has an invalid length. [ 295.180167][T16118] netlink: 'syz.5.2859': attribute type 10 has an invalid length. [ 295.197278][T16118] syz_tun: entered promiscuous mode [ 295.231962][T16118] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 295.619921][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 295.750818][T16133] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2865'. [ 295.789166][T16133] geneve2: entered promiscuous mode [ 295.923027][T16141] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2867'. [ 295.978570][T16141] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2867'. [ 296.260792][ T51] Bluetooth: hci4: command tx timeout [ 296.267660][ T51] Bluetooth: hci0: command tx timeout [ 296.422177][T16156] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2870'. [ 296.508469][ T1142] hsr_slave_0: left promiscuous mode [ 296.527726][ T1142] hsr_slave_1: left promiscuous mode [ 296.563822][ T1142] veth1_macvtap: left promiscuous mode [ 296.580418][ T1142] veth1_vlan: left promiscuous mode [ 296.660175][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 297.558167][T16006] chnl_net:caif_netlink_parms(): no params data found [ 297.699808][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 298.088237][T16170] lo: entered allmulticast mode [ 298.149717][T16170] lo: left allmulticast mode [ 298.343557][ T51] Bluetooth: hci0: command tx timeout [ 298.352520][ T5875] Bluetooth: hci4: command tx timeout [ 298.426930][T16006] bridge0: port 1(bridge_slave_0) entered blocking state [ 298.442293][T16006] bridge0: port 1(bridge_slave_0) entered disabled state [ 298.457415][T16006] bridge_slave_0: entered allmulticast mode [ 298.466750][T16006] bridge_slave_0: entered promiscuous mode [ 298.478952][T16006] bridge0: port 2(bridge_slave_1) entered blocking state [ 298.486733][T16006] bridge0: port 2(bridge_slave_1) entered disabled state [ 298.495249][T16006] bridge_slave_1: entered allmulticast mode [ 298.503447][T16006] bridge_slave_1: entered promiscuous mode [ 298.621099][T16006] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 298.674690][T16006] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 298.708801][T16004] chnl_net:caif_netlink_parms(): no params data found [ 298.739826][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 298.882410][ T1142] IPVS: stop unused estimator thread 0... [ 298.915087][T16006] team0: Port device team_slave_0 added [ 298.960898][T16006] team0: Port device team_slave_1 added [ 299.042369][T16218] netlink: 'syz.4.2884': attribute type 4 has an invalid length. [ 299.121092][T16006] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 299.128078][T16006] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 299.183728][T16006] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 299.186684][T16233] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.2887'. [ 299.196664][T16006] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 299.215020][T16006] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 299.244632][T16006] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 299.342957][T16004] bridge0: port 1(bridge_slave_0) entered blocking state [ 299.357200][T16004] bridge0: port 1(bridge_slave_0) entered disabled state [ 299.365849][T16004] bridge_slave_0: entered allmulticast mode [ 299.387825][T16004] bridge_slave_0: entered promiscuous mode [ 299.396573][T16223] tipc: Started in network mode [ 299.410667][T16223] tipc: Node identity 06ccce9e1359, cluster identity 4711 [ 299.428865][T16223] tipc: Enabled bearer , priority 0 [ 299.444901][T16236] syzkaller0: entered promiscuous mode [ 299.451373][T16236] syzkaller0: entered allmulticast mode [ 299.458291][T16238] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2887'. [ 299.469262][T16240] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 299.494788][T16004] bridge0: port 2(bridge_slave_1) entered blocking state [ 299.503220][T16004] bridge0: port 2(bridge_slave_1) entered disabled state [ 299.511568][T16004] bridge_slave_1: entered allmulticast mode [ 299.519665][T16004] bridge_slave_1: entered promiscuous mode [ 299.530643][T16223] tipc: Resetting bearer [ 299.702899][ T1142] bond0 (unregistering): Released all slaves [ 299.715587][T16246] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 299.747214][T16222] tipc: Resetting bearer [ 299.792629][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 299.802746][T16222] tipc: Disabling bearer [ 299.916012][T16006] hsr_slave_0: entered promiscuous mode [ 299.943480][T16006] hsr_slave_1: entered promiscuous mode [ 300.107316][T16264] (unnamed net_device) (uninitialized): ARP target 1.0.0.0 is already present [ 300.116902][T16264] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (1) [ 300.263138][T16004] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 300.305060][T16004] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 300.420836][ T51] Bluetooth: hci0: command tx timeout [ 300.427901][ T5875] Bluetooth: hci4: command tx timeout [ 300.548635][T16278] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2896'. [ 300.819988][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 300.952999][T16004] team0: Port device team_slave_0 added [ 301.079425][T16295] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2901'. [ 301.083274][T16004] team0: Port device team_slave_1 added [ 301.088786][T16295] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2901'. [ 301.451458][T16304] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 301.547191][T16004] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 301.562862][T16004] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 301.594072][T16004] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 301.613880][T16004] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 301.632384][T16004] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 301.668879][T16004] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 301.752223][T16324] netlink: 'syz.5.2910': attribute type 1 has an invalid length. [ 301.763695][T16316] netlink: 'syz.4.2908': attribute type 5 has an invalid length. [ 301.774890][T16322] netlink: 'syz.4.2908': attribute type 5 has an invalid length. [ 301.860006][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 301.869991][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 301.905367][T16004] hsr_slave_0: entered promiscuous mode [ 301.912927][T16004] hsr_slave_1: entered promiscuous mode [ 301.919331][T16004] debugfs: 'hsr0' already exists in 'hsr' [ 301.925264][T16004] Cannot create hsr debugfs directory [ 302.257365][T16345] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2916'. [ 302.267564][T16345] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2916'. [ 302.364237][T16350] netlink: 'syz.4.2917': attribute type 4 has an invalid length. [ 302.373888][T16006] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 302.398190][T16343] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2913'. [ 302.508319][T16006] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 302.605333][T16006] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 302.676254][T16006] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 302.873956][T16362] netlink: 'syz.5.2919': attribute type 1 has an invalid length. [ 302.894828][T16362] netlink: 220 bytes leftover after parsing attributes in process `syz.5.2919'. [ 302.903988][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 302.999669][T16004] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 303.043831][T16004] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 303.081460][T16004] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 303.115857][T16004] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 303.315901][T16006] 8021q: adding VLAN 0 to HW filter on device bond0 [ 303.321189][T16378] netlink: 76 bytes leftover after parsing attributes in process `syz.6.2922'. [ 303.387191][T16006] 8021q: adding VLAN 0 to HW filter on device team0 [ 303.543073][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 303.550278][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 303.587067][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 303.594422][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 303.778408][T16006] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 303.939880][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 304.004551][T16004] 8021q: adding VLAN 0 to HW filter on device bond0 [ 304.177414][T16004] 8021q: adding VLAN 0 to HW filter on device team0 [ 304.219113][ T1142] bridge0: port 1(bridge_slave_0) entered blocking state [ 304.226331][ T1142] bridge0: port 1(bridge_slave_0) entered forwarding state [ 304.429392][ T1142] bridge0: port 2(bridge_slave_1) entered blocking state [ 304.436640][ T1142] bridge0: port 2(bridge_slave_1) entered forwarding state [ 304.547345][T16006] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 304.649525][T16004] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 304.706030][T16411] erspan0: entered promiscuous mode [ 304.738147][T16410] erspan0: left promiscuous mode [ 304.980343][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 305.347445][T16006] veth0_vlan: entered promiscuous mode [ 305.359370][T16004] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 305.394743][T16006] veth1_vlan: entered promiscuous mode [ 305.603903][T16006] veth0_macvtap: entered promiscuous mode [ 305.694473][T16006] veth1_macvtap: entered promiscuous mode [ 305.713725][T16449] syz.5.2938 uses old SIOCAX25GETINFO [ 305.789846][T16006] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 305.831724][T16006] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 305.918882][ T12] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.934828][ T12] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.946714][T16465] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 305.976835][ T12] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.987078][T16465] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2941'. [ 306.002244][ T12] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.011951][T16465] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2941'. [ 306.021196][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 306.234844][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 306.247883][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 306.363269][T16004] veth0_vlan: entered promiscuous mode [ 306.379980][T16483] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 306.386398][ T7802] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 306.420708][ T7802] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 306.488398][T16484] syzkaller0: entered promiscuous mode [ 306.494165][T16484] syzkaller0: entered allmulticast mode [ 307.064517][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 308.100088][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 308.250066][T16004] veth1_vlan: entered promiscuous mode [ 308.366747][T16004] veth0_macvtap: entered promiscuous mode [ 308.424461][T16004] veth1_macvtap: entered promiscuous mode [ 308.473137][T16504] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2953'. [ 308.496976][T16504] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2953'. [ 308.552993][T16004] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 308.634178][T16004] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 308.642581][T16515] IPVS: sync thread started: state = BACKUP, mcast_ifn = batadv0, syncid = 0, id = 0 [ 308.718460][ T1170] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.728556][ T1170] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.754098][ T1142] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.795195][ T7802] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.839074][T16533] sctp: [Deprecated]: syz.6.2959 (pid 16533) Use of int in max_burst socket option deprecated. [ 308.839074][T16533] Use struct sctp_assoc_value instead [ 309.059172][T16527] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 309.093565][T16527] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 309.139961][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 309.189395][T16527] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 309.209205][T16527] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 309.275299][T16551] netlink: 64 bytes leftover after parsing attributes in process `syz.6.2965'. [ 309.779636][T16578] netlink: 168 bytes leftover after parsing attributes in process `syz.8.2972'. [ 310.180095][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 310.526165][ T51] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 310.536417][ T51] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 310.545295][ T51] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 310.561979][ T51] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 310.572483][ T51] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 310.986072][T16573] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2969'. [ 311.012592][T16573] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2969'. [ 311.219866][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 311.251633][T16591] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2977'. [ 311.372759][T16593] netlink: 'syz.7.2978': attribute type 25 has an invalid length. [ 311.426156][T16593] netlink: 'syz.7.2978': attribute type 25 has an invalid length. [ 311.503648][T16582] lo speed is unknown, defaulting to 1000 [ 311.924132][T16622] netlink: 48 bytes leftover after parsing attributes in process `syz.7.2984'. [ 311.943238][ T7802] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 311.987188][ T7802] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.998387][T16623] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2986'. [ 312.019017][T16615] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 312.051934][T16630] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2986'. [ 312.095207][T16582] lo speed is unknown, defaulting to 1000 [ 312.214553][T16636] netlink: 212376 bytes leftover after parsing attributes in process `syz.5.2991'. [ 312.246471][T16640] netlink: 'syz.7.2990': attribute type 21 has an invalid length. [ 312.258968][ T7802] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 312.269918][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 312.307157][ T7802] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.338799][T16643] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2993'. [ 312.364154][T16632] wg1: entered promiscuous mode [ 312.369055][T16632] wg1: entered allmulticast mode [ 312.411289][T16640] netlink: 132 bytes leftover after parsing attributes in process `syz.7.2990'. [ 312.485398][T16527] bridge0: port 1(bridge_slave_0) entered disabled state [ 312.618760][ T7802] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 312.659486][ T7802] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.681572][ T5875] Bluetooth: hci6: command tx timeout [ 312.835123][ T7802] netdevsim netdevsim4 ÿÿÿÿÿÿ (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 312.864631][ T7802] netdevsim netdevsim4 ÿÿÿÿÿÿ (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.091712][T16671] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2999'. [ 313.152779][T16670] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2999'. [ 313.299897][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 313.344753][ T7802] batadv1: left allmulticast mode [ 313.401329][ T7802] batadv1: left promiscuous mode [ 313.408459][ T7802] bridge0: port 1(batadv1) entered disabled state [ 314.047583][ T7802] bond11 (unregistering): (slave ip6gretap1): Removing an active aggregator [ 314.061630][ T7802] bond11 (unregistering): (slave ip6gretap1): Releasing backup interface [ 314.074816][ T7802] bond11 (unregistering): (slave ip6gretap1): the permanent HWaddr of slave - 8e:cf:de:22:56:29 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 314.341098][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 314.740037][ T5875] Bluetooth: hci6: command tx timeout [ 314.868844][ T7802] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 314.879613][ T7802] bond_slave_0: left allmulticast mode [ 314.887917][ T7802] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 314.896945][ T7802] bond_slave_1: left allmulticast mode [ 314.907861][ T7802] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 314.922773][ T7802] bond0 (unregistering): Released all slaves [ 315.037227][ T7802] team0: Port device bond1 removed [ 315.044236][ T7802] bond1 (unregistering): Released all slaves [ 315.058072][ T7802] bond2 (unregistering): Released all slaves [ 315.073837][ T7802] bond3 (unregistering): Released all slaves [ 315.088598][ T7802] bond4 (unregistering): Released all slaves [ 315.205856][ T7802] bond5 (unregistering): Released all slaves [ 315.330577][ T7802] bond6 (unregistering): Released all slaves [ 315.381227][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 315.458890][ T7802] bond7 (unregistering): Released all slaves [ 315.577873][ T7802] bond8 (unregistering): (slave veth0_to_bond): Releasing active interface [ 315.589582][ T7802] bond8 (unregistering): (slave veth5): Releasing active interface [ 315.602302][ T7802] bond8 (unregistering): Released all slaves [ 315.615532][ T7802] bond9 (unregistering): Released all slaves [ 315.628459][ T7802] bond10 (unregistering): Released all slaves [ 315.746362][ T7802] bond11 (unregistering): (slave veth9): Releasing backup interface [ 315.756194][ T7802] bond11 (unregistering): Released all slaves [ 315.775064][ T7802] bond12 (unregistering): Released all slaves [ 315.789654][ T7802] bond13 (unregistering): Released all slaves [ 316.009602][T16734] 8021q: VLANs not supported on ipvlan1 [ 316.121345][T16742] netlink: 'syz.5.3022': attribute type 21 has an invalid length. [ 316.153113][T16739] netlink: 'syz.8.3020': attribute type 28 has an invalid length. [ 316.168522][T16742] netlink: 'syz.5.3022': attribute type 6 has an invalid length. [ 316.194676][T16739] netlink: 'syz.8.3020': attribute type 3 has an invalid length. [ 316.195345][T16742] netlink: 132 bytes leftover after parsing attributes in process `syz.5.3022'. [ 316.254678][T16739] netlink: 132 bytes leftover after parsing attributes in process `syz.8.3020'. [ 316.303274][T16753] netlink: 'syz.8.3020': attribute type 29 has an invalid length. [ 316.312308][T16753] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3020'. [ 316.391235][T16753] netlink: 88 bytes leftover after parsing attributes in process `syz.8.3020'. [ 316.419903][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 316.437211][T16739] netlink: 'syz.8.3020': attribute type 29 has an invalid length. [ 316.445885][T16739] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3020'. [ 316.695365][T16772] tipc: Started in network mode [ 316.733597][T16772] tipc: Node identity 46d884017f4e, cluster identity 4711 [ 316.760896][T16772] tipc: Enabled bearer , priority 0 [ 316.783703][T16777] syzkaller0: entered promiscuous mode [ 316.800684][T16777] syzkaller0: entered allmulticast mode [ 316.820016][ T5875] Bluetooth: hci6: command tx timeout [ 316.854400][T16582] chnl_net:caif_netlink_parms(): no params data found [ 316.874516][T16777] netlink: 'syz.8.3027': attribute type 1 has an invalid length. [ 316.910557][T16777] netlink: 224 bytes leftover after parsing attributes in process `syz.8.3027'. [ 316.963138][T16777] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3027'. [ 317.038224][T16777] tipc: Resetting bearer [ 317.256734][ T1305] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 317.266406][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.422886][T16770] tipc: Resetting bearer [ 317.443736][T16770] tipc: Disabling bearer [ 317.459908][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 317.463735][T16807] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 317.481501][T16582] bridge0: port 1(bridge_slave_0) entered blocking state [ 317.497632][T16582] bridge0: port 1(bridge_slave_0) entered disabled state [ 317.505513][T16582] bridge_slave_0: entered allmulticast mode [ 317.523136][T16582] bridge_slave_0: entered promiscuous mode [ 317.571182][T16809] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3035'. [ 317.622758][ T7802] tipc: Disabling bearer [ 317.648558][ T7802] tipc: Left network mode [ 317.679245][T16582] bridge0: port 2(bridge_slave_1) entered blocking state [ 317.711575][T16582] bridge0: port 2(bridge_slave_1) entered disabled state [ 317.718865][T16582] bridge_slave_1: entered allmulticast mode [ 317.749151][T16582] bridge_slave_1: entered promiscuous mode [ 317.784505][T16824] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3039'. [ 317.812781][T16821] veth0: entered promiscuous mode [ 317.985529][T16817] veth0: left promiscuous mode [ 317.995830][T16582] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 318.031740][T16582] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 318.447562][T16846] netlink: 'syz.8.3045': attribute type 1 has an invalid length. [ 318.473664][T16846] netlink: 224 bytes leftover after parsing attributes in process `syz.8.3045'. [ 319.755587][T16857] netlink: 'syz.5.3052': attribute type 11 has an invalid length. [ 320.219629][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 320.238307][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 320.247253][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 320.256537][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 320.264550][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 320.413603][ T7802] hsr_slave_0: left promiscuous mode [ 320.429483][ T51] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 320.439485][ T51] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 320.447907][ T7802] hsr_slave_1: left promiscuous mode [ 320.449366][ T51] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 320.463729][ T51] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 320.470895][ T7802] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 320.502461][ T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 320.567419][ T5875] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 320.577824][ T5875] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 320.586718][ T5875] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 320.594838][ T5875] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 320.604117][ T5875] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 320.650089][ T7802] vlan0: left allmulticast mode [ 320.655036][ T7802] veth0_vlan: left allmulticast mode [ 320.661474][ T7802] vlan0: left promiscuous mode [ 320.666850][ T7802] veth1_macvtap: left promiscuous mode [ 320.672630][ T7802] veth1_vlan: left promiscuous mode [ 320.678127][ T7802] veth0_vlan: left promiscuous mode [ 320.743359][ T5875] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 320.756854][ T5875] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 320.768462][ T5875] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 320.779147][ T5875] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 320.787458][ T5875] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 321.646065][ T7802] team0 (unregistering): Port device team_slave_1 removed [ 321.695282][ T7802] team0 (unregistering): Port device team_slave_0 removed [ 322.149710][T16859] lo speed is unknown, defaulting to 1000 [ 322.347682][ T51] Bluetooth: hci0: command tx timeout [ 322.488919][T16859] lo speed is unknown, defaulting to 1000 [ 322.489107][T16861] lo speed is unknown, defaulting to 1000 [ 322.580287][ T51] Bluetooth: hci2: command tx timeout [ 322.660597][ T51] Bluetooth: hci3: command tx timeout [ 322.820191][ T51] Bluetooth: hci4: command tx timeout [ 322.837393][T16861] lo speed is unknown, defaulting to 1000 [ 322.837436][T16863] lo speed is unknown, defaulting to 1000 [ 323.283127][T16863] lo speed is unknown, defaulting to 1000 [ 323.283138][T16868] lo speed is unknown, defaulting to 1000 [ 323.484396][T16859] chnl_net:caif_netlink_parms(): no params data found [ 323.812601][T16859] bridge0: port 1(bridge_slave_0) entered blocking state [ 323.822998][T16859] bridge0: port 1(bridge_slave_0) entered disabled state [ 323.830947][T16859] bridge_slave_0: entered allmulticast mode [ 323.847266][T16859] bridge_slave_0: entered promiscuous mode [ 323.859555][T16859] bridge0: port 2(bridge_slave_1) entered blocking state [ 323.870286][T16859] bridge0: port 2(bridge_slave_1) entered disabled state [ 323.879187][T16859] bridge_slave_1: entered allmulticast mode [ 323.898249][T16859] bridge_slave_1: entered promiscuous mode [ 323.953781][T16868] lo speed is unknown, defaulting to 1000 [ 324.004344][T16859] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 324.063780][T16859] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 324.145597][ T7802] IPVS: stop unused estimator thread 0... [ 324.240609][T16859] team0: Port device team_slave_0 added [ 324.327050][T16859] team0: Port device team_slave_1 added [ 324.430625][ T51] Bluetooth: hci0: command tx timeout [ 324.554602][ T7802] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 324.632403][T16859] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 324.639452][T16859] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 324.666347][ T51] Bluetooth: hci2: command tx timeout [ 324.674091][T16859] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 324.724127][T16859] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 324.739046][T16859] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 324.768605][ T51] Bluetooth: hci3: command tx timeout [ 324.774221][T16859] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 324.811730][ T7802] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 324.902094][ T51] Bluetooth: hci4: command tx timeout [ 324.984340][ T7802] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.009632][T16904] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3064'. [ 325.026720][T16859] hsr_slave_0: entered promiscuous mode [ 325.037176][T16859] hsr_slave_1: entered promiscuous mode [ 325.045703][T16859] debugfs: 'hsr0' already exists in 'hsr' [ 325.057477][T16859] Cannot create hsr debugfs directory [ 325.124380][ T7802] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.244603][T16911] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3066'. [ 325.389060][T16861] chnl_net:caif_netlink_parms(): no params data found [ 325.923228][T16861] bridge0: port 1(bridge_slave_0) entered blocking state [ 325.930799][T16861] bridge0: port 1(bridge_slave_0) entered disabled state [ 325.939101][T16861] bridge_slave_0: entered allmulticast mode [ 325.949136][T16861] bridge_slave_0: entered promiscuous mode [ 326.007923][T16861] bridge0: port 2(bridge_slave_1) entered blocking state [ 326.021171][T16861] bridge0: port 2(bridge_slave_1) entered disabled state [ 326.036833][T16861] bridge_slave_1: entered allmulticast mode [ 326.046806][T16861] bridge_slave_1: entered promiscuous mode [ 326.175218][ T7802] netdevsim netdevsim6 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 326.187070][ T7802] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.246697][T16859] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 326.258443][T16859] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.283695][T16863] chnl_net:caif_netlink_parms(): no params data found [ 326.308577][T16868] chnl_net:caif_netlink_parms(): no params data found [ 326.368980][T16952] netlink: 'syz.5.3075': attribute type 1 has an invalid length. [ 326.386599][T16861] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 326.429660][ T7802] netdevsim netdevsim6 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 326.440770][ T7802] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.474572][T16859] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 326.492401][T16859] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.502880][ T51] Bluetooth: hci0: command tx timeout [ 326.516301][T16952] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 326.532124][T16861] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 326.592885][T16953] vlan2: entered allmulticast mode [ 326.598049][T16953] veth1: entered allmulticast mode [ 326.622864][ T7802] netdevsim netdevsim6 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 326.633672][ T7802] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.711596][T16861] team0: Port device team_slave_0 added [ 326.737127][T16859] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 326.748893][ T51] Bluetooth: hci2: command tx timeout [ 326.756195][T16859] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.813008][ T7802] netdevsim netdevsim6 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 326.824162][ T51] Bluetooth: hci3: command tx timeout [ 326.830466][ T7802] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.846245][T16861] team0: Port device team_slave_1 added [ 326.902970][T16859] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 326.914297][T16859] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.964386][T16861] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 326.971841][T16861] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 327.000279][ T5875] Bluetooth: hci4: command tx timeout [ 327.006690][T16861] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 327.068569][T16861] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 327.076990][T16861] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 327.106518][T16861] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 327.153719][T16868] bridge0: port 1(bridge_slave_0) entered blocking state [ 327.161677][T16868] bridge0: port 1(bridge_slave_0) entered disabled state [ 327.171013][T16868] bridge_slave_0: entered allmulticast mode [ 327.178788][T16868] bridge_slave_0: entered promiscuous mode [ 327.239070][T16868] bridge0: port 2(bridge_slave_1) entered blocking state [ 327.257939][T16868] bridge0: port 2(bridge_slave_1) entered disabled state [ 327.267997][T16868] bridge_slave_1: entered allmulticast mode [ 327.282388][T16868] bridge_slave_1: entered promiscuous mode [ 327.298980][T16863] bridge0: port 1(bridge_slave_0) entered blocking state [ 327.308319][T16863] bridge0: port 1(bridge_slave_0) entered disabled state [ 327.321448][T16863] bridge_slave_0: entered allmulticast mode [ 327.330487][T16863] bridge_slave_0: entered promiscuous mode [ 327.357808][T16861] hsr_slave_0: entered promiscuous mode [ 327.364800][T16861] hsr_slave_1: entered promiscuous mode [ 327.381178][T16861] debugfs: 'hsr0' already exists in 'hsr' [ 327.386961][T16861] Cannot create hsr debugfs directory [ 327.422294][T16863] bridge0: port 2(bridge_slave_1) entered blocking state [ 327.429645][T16863] bridge0: port 2(bridge_slave_1) entered disabled state [ 327.437963][T16863] bridge_slave_1: entered allmulticast mode [ 327.446376][T16863] bridge_slave_1: entered promiscuous mode [ 327.664871][T16868] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 327.730230][T16977] netlink: 'syz.5.3080': attribute type 1 has an invalid length. [ 327.738644][T16868] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 327.765941][T16863] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 327.784707][T16978] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3080'. [ 327.843474][T16863] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 327.953439][ T7802] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.078445][ T6051] IPVS: starting estimator thread 0... [ 328.093905][T16859] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 328.204522][T16859] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 328.212109][T16984] IPVS: using max 34 ests per chain, 81600 per kthread [ 328.248524][ T7802] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.270653][T16868] team0: Port device team_slave_0 added [ 328.279638][T16868] team0: Port device team_slave_1 added [ 328.288501][T16863] team0: Port device team_slave_0 added [ 328.318765][T16859] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 328.353130][ T7802] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.385063][T16863] team0: Port device team_slave_1 added [ 328.442929][T16859] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 328.528422][ T7802] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.574248][T16868] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 328.581251][ T5875] Bluetooth: hci0: command tx timeout [ 328.588685][T16868] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 328.621046][T16868] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 328.634047][T16868] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 328.641679][T16868] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 328.669569][T16868] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 328.691882][T16863] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 328.698949][T16863] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 328.726207][T16863] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 328.789188][T16863] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 328.797397][T16863] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 328.823908][ T5875] Bluetooth: hci2: command tx timeout [ 328.833731][T16863] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 328.902223][ T5875] Bluetooth: hci3: command tx timeout [ 328.950987][T16868] hsr_slave_0: entered promiscuous mode [ 328.957682][T16868] hsr_slave_1: entered promiscuous mode [ 328.965015][T16868] debugfs: 'hsr0' already exists in 'hsr' [ 328.966075][T17000] netlink: 'syz.5.3084': attribute type 10 has an invalid length. [ 328.971120][T16868] Cannot create hsr debugfs directory [ 329.038185][T17000] bond0: (slave dummy0): Releasing backup interface [ 329.046037][T17000] bond0: (slave dummy0): the permanent HWaddr of slave - aa:aa:aa:aa:aa:24 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 329.064225][ T5875] Bluetooth: hci4: command tx timeout [ 329.076525][T17000] team0: Port device dummy0 added [ 329.094268][T17000] netlink: 'syz.5.3084': attribute type 10 has an invalid length. [ 329.119037][T16863] hsr_slave_0: entered promiscuous mode [ 329.126019][T16863] hsr_slave_1: entered promiscuous mode [ 329.132677][T16863] debugfs: 'hsr0' already exists in 'hsr' [ 329.138520][T16863] Cannot create hsr debugfs directory [ 329.182678][T17000] team0: Port device dummy0 removed [ 329.191606][T17000] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 329.364165][ T7802] bridge_slave_1: left allmulticast mode [ 329.371227][ T7802] bridge_slave_1: left promiscuous mode [ 329.376956][ T7802] bridge0: port 2(bridge_slave_1) entered disabled state [ 329.389596][ T7802] bridge_slave_0: left allmulticast mode [ 329.396781][ T7802] bridge_slave_0: left promiscuous mode [ 329.402648][ T7802] bridge0: port 1(bridge_slave_0) entered disabled state [ 329.421447][ T7802] bridge_slave_1: left allmulticast mode [ 329.427373][ T7802] bridge_slave_1: left promiscuous mode [ 329.433601][ T7802] bridge0: port 2(bridge_slave_1) entered disabled state [ 329.445105][ T7802] bridge0: port 1(bridge_slave_0) entered disabled state [ 329.461884][ T7802] bridge_slave_1: left allmulticast mode [ 329.467573][ T7802] bridge_slave_1: left promiscuous mode [ 329.473831][ T7802] bridge0: port 2(bridge_slave_1) entered disabled state [ 329.485620][ T7802] bridge_slave_0: left allmulticast mode [ 329.491785][ T7802] bridge_slave_0: left promiscuous mode [ 329.497564][ T7802] bridge0: port 1(bridge_slave_0) entered disabled state [ 329.508661][ T7802] bridge_slave_1: left allmulticast mode [ 329.514873][ T7802] bridge_slave_1: left promiscuous mode [ 329.523344][ T7802] bridge0: port 2(bridge_slave_1) entered disabled state [ 329.532917][ T7802] bridge_slave_0: left allmulticast mode [ 329.538749][ T7802] bridge_slave_0: left promiscuous mode [ 329.545731][ T7802] bridge0: port 1(bridge_slave_0) entered disabled state [ 330.129484][ T7802] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 330.145410][ T7802] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 330.156172][ T7802] bond0 (unregistering): Released all slaves [ 330.547222][ T7802] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 330.558413][ T7802] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 330.569183][ T7802] bond0 (unregistering): Released all slaves [ 330.582968][ T7802] bond1 (unregistering): Released all slaves [ 330.972940][ T7802] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 330.984685][ T7802] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 330.995937][ T7802] bond0 (unregistering): Released all slaves [ 331.097640][ T7802] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 331.112515][ T7802] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 331.125239][ T7802] bond0 (unregistering): Released all slaves [ 331.341196][ T7802] tipc: Left network mode [ 331.350480][T17011] IPVS: set_ctl: invalid protocol: 59 10.1.1.2:20004 [ 331.479054][ T7802] tipc: Left network mode [ 331.518681][ T7802] IPVS: stopping backup sync thread 16515 ... [ 331.612621][T16861] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 331.658300][T16859] 8021q: adding VLAN 0 to HW filter on device bond0 [ 331.668793][T16861] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 331.683448][T16861] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 331.694105][T16861] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 331.850973][T16859] 8021q: adding VLAN 0 to HW filter on device team0 [ 331.894887][T16863] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 331.921825][T16868] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 331.934294][T16868] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 331.969655][T16868] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 331.981341][T16868] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 332.037857][T16863] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 332.061445][T16525] bridge0: port 1(bridge_slave_0) entered blocking state [ 332.068601][T16525] bridge0: port 1(bridge_slave_0) entered forwarding state [ 332.110331][T16525] bridge0: port 2(bridge_slave_1) entered blocking state [ 332.117497][T16525] bridge0: port 2(bridge_slave_1) entered forwarding state [ 332.211677][T16863] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 332.363243][T16863] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 332.485767][T16859] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 332.517749][T16859] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 332.636933][T16861] 8021q: adding VLAN 0 to HW filter on device bond0 [ 332.949031][T16861] 8021q: adding VLAN 0 to HW filter on device team0 [ 333.028407][T16525] bridge0: port 1(bridge_slave_0) entered blocking state [ 333.035602][T16525] bridge0: port 1(bridge_slave_0) entered forwarding state [ 333.126331][T16525] bridge0: port 2(bridge_slave_1) entered blocking state [ 333.133545][T16525] bridge0: port 2(bridge_slave_1) entered forwarding state [ 333.190051][T17046] netlink: 64 bytes leftover after parsing attributes in process `syz.5.3093'. [ 333.204869][T16868] 8021q: adding VLAN 0 to HW filter on device bond0 [ 333.403679][T16868] 8021q: adding VLAN 0 to HW filter on device team0 [ 333.414543][T16859] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 333.450080][T16863] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 333.508753][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 333.515994][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 333.555395][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 333.562599][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 333.584481][T16863] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 333.621350][T16863] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 333.642646][T16863] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 333.697037][T16861] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 333.818323][T16859] veth0_vlan: entered promiscuous mode [ 334.027376][T16859] veth1_vlan: entered promiscuous mode [ 334.083406][T16868] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 334.314088][T16859] veth0_macvtap: entered promiscuous mode [ 334.390783][T16859] veth1_macvtap: entered promiscuous mode [ 334.561124][T17072] bond0: (slave dummy0): Releasing backup interface [ 334.567776][T17072] bond0: (slave dummy0): the permanent HWaddr of slave - aa:aa:aa:aa:aa:24 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 334.643559][T17072] batman_adv: batadv0: Adding interface: dummy0 [ 334.676034][T17072] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 334.712172][T17072] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 334.861767][T16868] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 334.876788][T16859] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 334.924846][T16863] 8021q: adding VLAN 0 to HW filter on device bond0 [ 334.967482][T17078] netlink: 340 bytes leftover after parsing attributes in process `syz.5.3099'. [ 335.016876][T16859] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 335.049551][T16861] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 335.124036][T16863] 8021q: adding VLAN 0 to HW filter on device team0 [ 335.132634][ T1142] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.184992][ T1142] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.224849][ T1142] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.303604][T16525] bridge0: port 1(bridge_slave_0) entered blocking state [ 335.310904][T16525] bridge0: port 1(bridge_slave_0) entered forwarding state [ 335.348446][T16525] bridge0: port 2(bridge_slave_1) entered blocking state [ 335.355718][T16525] bridge0: port 2(bridge_slave_1) entered forwarding state [ 335.365439][ T1142] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.797930][T16861] veth0_vlan: entered promiscuous mode [ 335.868782][ T1170] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 335.887824][ T1170] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 335.899405][T16861] veth1_vlan: entered promiscuous mode [ 336.109515][T17090] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3100'. [ 336.158231][T16868] veth0_vlan: entered promiscuous mode [ 336.181293][ T7808] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 336.201850][ T7808] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 336.248074][T16868] veth1_vlan: entered promiscuous mode [ 336.265294][T16861] veth0_macvtap: entered promiscuous mode [ 336.332434][T16863] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 336.347925][T16861] veth1_macvtap: entered promiscuous mode [ 336.568666][T16861] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 336.611761][T16868] veth0_macvtap: entered promiscuous mode [ 336.636254][ T7802] hsr_slave_0: left promiscuous mode [ 336.643170][ T7802] hsr_slave_1: left promiscuous mode [ 336.649312][ T7802] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 336.670750][ T7802] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 336.689346][ T7802] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 336.714212][ T7802] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 336.740484][ T7802] hsr_slave_0: left promiscuous mode [ 336.760807][ T7802] hsr_slave_1: left promiscuous mode [ 336.771955][ T7802] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 336.779386][ T7802] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 336.791640][ T7802] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 336.799041][ T7802] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 336.827421][ T7802] hsr_slave_0: left promiscuous mode [ 336.827813][T17110] delete_channel: no stack [ 336.841846][ T7802] hsr_slave_1: left promiscuous mode [ 336.847927][ T7802] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 336.865245][ T7802] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 336.878023][ T7802] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 336.889239][ T7802] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 336.958767][ T7802] veth1_macvtap: left promiscuous mode [ 336.964786][ T7802] veth0_macvtap: left promiscuous mode [ 336.970869][ T7802] veth1_vlan: left promiscuous mode [ 336.976195][ T7802] veth0_vlan: left promiscuous mode [ 336.983244][ T7802] veth1_macvtap: left promiscuous mode [ 336.988767][ T7802] veth0_macvtap: left promiscuous mode [ 336.998193][ T7802] veth1_vlan: left promiscuous mode [ 337.006314][ T7802] veth0_vlan: left promiscuous mode [ 337.013440][ T7802] veth1_macvtap: left promiscuous mode [ 337.019126][ T7802] veth0_macvtap: left promiscuous mode [ 337.025057][ T7802] veth1_vlan: left promiscuous mode [ 337.031104][ T7802] veth0_vlan: left promiscuous mode [ 337.753489][ T7802] team0 (unregistering): Port device team_slave_1 removed [ 337.797546][ T7802] team0 (unregistering): Port device team_slave_0 removed [ 338.654801][ T7802] team0 (unregistering): Port device team_slave_1 removed [ 338.703202][ T7802] team0 (unregistering): Port device team_slave_0 removed [ 339.291645][ C0] ------------[ cut here ]------------ [ 339.297378][ C0] kernel BUG at arch/x86/mm/physaddr.c:28! [ 339.303270][ C0] Oops: invalid opcode: 0000 [#1] SMP KASAN PTI [ 339.309720][ C0] CPU: 0 UID: 0 PID: 15 Comm: ksoftirqd/0 Not tainted 6.17.0-rc1-syzkaller-00127-g715c7a36d59f #0 PREEMPT(full) [ 339.321739][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 339.331784][ C0] RIP: 0010:__phys_addr+0x16b/0x180 [ 339.336985][ C0] Code: 8d ae 00 e9 45 ff ff ff e8 c2 24 4b 00 48 c7 c7 50 cf fa 8d 48 89 de 4c 89 f2 e8 50 a0 8a 03 e9 4d ff ff ff e8 a6 24 4b 00 90 <0f> 0b e8 9e 24 4b 00 90 0f 0b e8 96 24 4b 00 90 0f 0b 0f 1f 00 90 [ 339.356579][ C0] RSP: 0018:ffffc90000147878 EFLAGS: 00010246 [ 339.362827][ C0] RAX: ffffffff817486ea RBX: 00007780ffff0000 RCX: ffff88801ce9bc00 [ 339.370874][ C0] RDX: 0000000000000100 RSI: 000000017fff0000 RDI: 00007780ffff0000 [ 339.378920][ C0] RBP: ffffc90000147b50 R08: 0000000000000000 R09: ffffffff81a7f827 [ 339.386888][ C0] R10: dffffc0000000000 R11: ffffffff8a01d780 R12: ffffffff8a01d780 [ 339.394850][ C0] R13: ffffffff81a7f827 R14: 000000017fff0000 R15: dffffc0000000000 [ 339.402890][ C0] FS: 0000000000000000(0000) GS:ffff888125c1c000(0000) knlGS:0000000000000000 [ 339.411889][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 339.418544][ C0] CR2: 000000110c25fd24 CR3: 0000000033bc0000 CR4: 00000000003526f0 [ 339.426502][ C0] Call Trace: [ 339.429765][ C0] [ 339.432676][ C0] ? in_dev_free_rcu+0x49/0x60 [ 339.437453][ C0] kfree+0x77/0x440 [ 339.441274][ C0] ? __pfx_in_dev_free_rcu+0x10/0x10 [ 339.446561][ C0] ? rcu_core+0xc37/0x1770 [ 339.450997][ C0] in_dev_free_rcu+0x49/0x60 [ 339.455582][ C0] rcu_core+0xcab/0x1770 [ 339.459907][ C0] ? __lock_acquire+0xab9/0xd20 [ 339.464776][ C0] ? __pfx_rcu_core+0x10/0x10 [ 339.469555][ C0] ? kvm_sched_clock_read+0x11/0x20 [ 339.474741][ C0] ? sched_clock_cpu+0x74/0x430 [ 339.479582][ C0] ? __pfx_sched_clock_cpu+0x10/0x10 [ 339.484953][ C0] ? __local_bh_disable_ip+0xf1/0x190 [ 339.490327][ C0] ? __pfx___local_bh_disable_ip+0x10/0x10 [ 339.496231][ C0] handle_softirqs+0x283/0x870 [ 339.501074][ C0] ? run_ksoftirqd+0x9b/0x100 [ 339.505737][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 339.511027][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 339.516038][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 339.521128][ C0] run_ksoftirqd+0x9b/0x100 [ 339.525641][ C0] ? __pfx_run_ksoftirqd+0x10/0x10 [ 339.530736][ C0] smpboot_thread_fn+0x53f/0xa60 [ 339.535742][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 339.540786][ C0] kthread+0x70e/0x8a0 [ 339.544964][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 339.550468][ C0] ? __pfx_kthread+0x10/0x10 [ 339.555051][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 339.560250][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 339.565562][ C0] ? __pfx_kthread+0x10/0x10 [ 339.570233][ C0] ret_from_fork+0x3f9/0x770 [ 339.574861][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 339.580394][ C0] ? __switch_to_asm+0x39/0x70 [ 339.585145][ C0] ? __switch_to_asm+0x33/0x70 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 339.589894][ C0] ? __pfx_kthread+0x10/0x10 [ 339.594558][ C0] ret_from_fork_asm+0x1a/0x30 [ 339.599338][ C0] [ 339.602345][ C0] Modules linked in: [ 339.606397][ C0] ---[ end trace 0000000000000000 ]--- [ 339.611883][ C0] RIP: 0010:__phys_addr+0x16b/0x180 [ 339.617107][ C0] Code: 8d ae 00 e9 45 ff ff ff e8 c2 24 4b 00 48 c7 c7 50 cf fa 8d 48 89 de 4c 89 f2 e8 50 a0 8a 03 e9 4d ff ff ff e8 a6 24 4b 00 90 <0f> 0b e8 9e 24 4b 00 90 0f 0b e8 96 24 4b 00 90 0f 0b 0f 1f 00 90 [ 339.636826][ C0] RSP: 0018:ffffc90000147878 EFLAGS: 00010246 [ 339.643039][ C0] RAX: ffffffff817486ea RBX: 00007780ffff0000 RCX: ffff88801ce9bc00 [ 339.651081][ C0] RDX: 0000000000000100 RSI: 000000017fff0000 RDI: 00007780ffff0000 [ 339.659069][ C0] RBP: ffffc90000147b50 R08: 0000000000000000 R09: ffffffff81a7f827 [ 339.667121][ C0] R10: dffffc0000000000 R11: ffffffff8a01d780 R12: ffffffff8a01d780 [ 339.675768][ C0] R13: ffffffff81a7f827 R14: 000000017fff0000 R15: dffffc0000000000 [ 339.683796][ C0] FS: 0000000000000000(0000) GS:ffff888125c1c000(0000) knlGS:0000000000000000 [ 339.692784][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 339.699470][ C0] CR2: 000000110c25fd24 CR3: 0000000033bc0000 CR4: 00000000003526f0 [ 339.707493][ C0] Kernel panic - not syncing: Fatal exception in interrupt [ 339.715031][ C0] Kernel Offset: disabled [ 339.719351][ C0] Rebooting in 86400 seconds..