last executing test programs: 2m20.69796478s ago: executing program 1 (id=2415): r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$inet_opts(r0, 0x0, 0x1a, &(0x7f0000000780)="e9", 0x1) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_group_source_req(r2, 0x0, 0x2c, &(0x7f0000000100)={0x5e2b, {{0x2, 0x4e24, @multicast2}}, {{0x2, 0x4e22, @broadcast}}}, 0x108) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000000000000000000090000003c0003800800010001000000140002007663616e3000000000000000000000000800030000000000140006"], 0x50}}, 0x0) ioctl$TUNSETOFFLOAD(r1, 0x5421, 0x110e22ffff) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$bt_BT_FLUSHABLE(r5, 0x112, 0x4, 0x0, &(0x7f0000000000)) 2m20.621128134s ago: executing program 1 (id=2417): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_LIST_DEV(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r1, 0x8, 0x70bd25, 0x25dfdbfd, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0xc0}, 0x7) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_int(r3, 0x11e, 0x1, 0x0, &(0x7f0000000000)) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000bc0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffff7, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) getsockopt$inet6_tcp_int(r5, 0x6, 0x25, 0x0, &(0x7f0000000240)) 2m20.448430247s ago: executing program 1 (id=2419): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r1, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)=ANY=[@ANYBLOB="90000000", @ANYRES16=r2, @ANYBLOB="00042dbd7000fcdbdf257f00000008000300", @ANYRES32=r3, @ANYBLOB="0a00f500d2da59ee09f20000060048001200000014005500df7c9fb790d8552aee4432d1581749d3140055003e419dfb6ac7031ee3ce8e15bb27e40050505050505000000a00f50023387df3046d00000a00f5000802110000000000060048006a0000000a00f5006268c22de8d6000000000000"], 0x90}}, 0x4044800) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=@newtfilter={0x48, 0x2c, 0xd27, 0x70bd25, 0xa000, {0x0, 0x0, 0x0, r6, {0xe, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x14, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x5}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x4}]}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 2m20.28944028s ago: executing program 1 (id=2424): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MCAST_RATE(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x34, r0, 0x820, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xa}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x37}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x3c}]}, 0x34}}, 0xc0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$inet(0x2, 0x802, 0x1) write(r3, &(0x7f0000000080)="08008edf773c8000", 0xfd) r4 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x25dddbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xffff}, {0xffff, 0xffff}, {0x1, 0xd}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r2, 0x84, 0x70, &(0x7f00000004c0)={0x0, @in6={{0xa, 0x4e23, 0xff, @private2={0xfc, 0x2, '\x00', 0x1}, 0xfffffffb}}, [0x5, 0x101, 0x4, 0x1, 0x37, 0x5, 0xdbdf, 0xfffffffeffffffff, 0x6, 0x0, 0x1b, 0xfff, 0x5, 0x2, 0x8]}, &(0x7f0000000600)=0x100) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x73, &(0x7f0000000640)={r6, 0x5, 0x20, 0x6, 0x8}, &(0x7f0000000680)=0x18) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r5, {0x0, 0xa}, {}, {0xa}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x2}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_DIR={0x5, 0x3, 0x1}]}]}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x220008e8}, 0x800) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r8, &(0x7f0000000100)=ANY=[], 0x32600) openat$cgroup_procs(r8, &(0x7f0000000480)='cgroup.procs\x00', 0x2, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r7, 0x0, 0x81, &(0x7f0000000140)={'nat\x00', 0x0, 0x4, 0x3f, [0x4, 0x8, 0x2, 0x4, 0xf, 0x297], 0x1, &(0x7f0000000000)=[{}], &(0x7f00000000c0)=""/63}, &(0x7f00000001c0)=0x78) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) (async) sendmsg$NL80211_CMD_SET_MCAST_RATE(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x34, r0, 0x820, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xa}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x37}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x3c}]}, 0x34}}, 0xc0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) socket(0x400000000010, 0x3, 0x0) (async) socket$inet(0x2, 0x802, 0x1) (async) write(r3, &(0x7f0000000080)="08008edf773c8000", 0xfd) (async) socket$inet_sctp(0x2, 0x5, 0x84) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x25dddbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xffff}, {0xffff, 0xffff}, {0x1, 0xd}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) (async) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r2, 0x84, 0x70, &(0x7f00000004c0)={0x0, @in6={{0xa, 0x4e23, 0xff, @private2={0xfc, 0x2, '\x00', 0x1}, 0xfffffffb}}, [0x5, 0x101, 0x4, 0x1, 0x37, 0x5, 0xdbdf, 0xfffffffeffffffff, 0x6, 0x0, 0x1b, 0xfff, 0x5, 0x2, 0x8]}, &(0x7f0000000600)=0x100) (async) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x73, &(0x7f0000000640)={r6, 0x5, 0x20, 0x6, 0x8}, &(0x7f0000000680)=0x18) (async) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r5, {0x0, 0xa}, {}, {0xa}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x2}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_DIR={0x5, 0x3, 0x1}]}]}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x220008e8}, 0x800) (async) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async) write$cgroup_subtree(r8, &(0x7f0000000100)=ANY=[], 0x32600) (async) openat$cgroup_procs(r8, &(0x7f0000000480)='cgroup.procs\x00', 0x2, 0x0) (async) getsockopt$EBT_SO_GET_ENTRIES(r7, 0x0, 0x81, &(0x7f0000000140)={'nat\x00', 0x0, 0x4, 0x3f, [0x4, 0x8, 0x2, 0x4, 0xf, 0x297], 0x1, &(0x7f0000000000)=[{}], &(0x7f00000000c0)=""/63}, &(0x7f00000001c0)=0x78) (async) 2m20.123838618s ago: executing program 1 (id=2427): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000480)={0x1c, r1, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4040080}, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_int(r3, &(0x7f0000000080)='hugetlb.2MB.rsvd.limit_in_bytes\x00', 0x2, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r7, {0x0, 0x1}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0x1c, 0x2, [@TCA_FLOW_BASECLASS={0x8, 0x3, {0xffe0, 0xd}}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x15625}]}}]}, 0x4c}}, 0x0) sendfile(r4, r3, &(0x7f0000000040)=0xfffffffffffeffff, 0x4) write$cgroup_subtree(r4, &(0x7f0000000180)=ANY=[@ANYBLOB='-1'], 0x27) 2m19.609570261s ago: executing program 1 (id=2434): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000980)='sys_exit\x00', r1}, 0x10) 2m19.377333523s ago: executing program 32 (id=2434): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000980)='sys_exit\x00', r1}, 0x10) 2.434737885s ago: executing program 0 (id=3775): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x3, 0x1}, 0x50) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x3, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x23}, 0x38) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x9, 0x3, 0xc4f, 0x1, r1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000100), 0x6c7, r2, 0x0, 0x200000000000000}, 0x38) (async) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000100), 0x6c7, r2, 0x0, 0x200000000000000}, 0x38) 2.211876924s ago: executing program 0 (id=3777): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r2 = socket(0x10, 0x803, 0x0) sendto(r2, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000540), 0x0, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x2, &(0x7f0000003700)={0x77359400}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x10001, 0x7fff, 0x82, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000880)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYBLOB="43d099a6ef5206e96143378267d09360cef7b7808e047d03632e1e4f48f186f2eff280ffef97ef8415c482777610d525d8f97c10567e1ce65451f79dd09d2b440b7d3d83cb08047995d1b325850465fa155aabf3857f5b896bd717354f17031f75b61c181a1793859f961be674e08b89ebb33e6160262aed6c37ea6853969b973a28c381b4ced3f3c7ab745650225ee9eba8b77a0c5f6825f22846a7584f4a2de071eda4963e09ef7e4083e14687", @ANYRES64=r0, @ANYRES32=r1, @ANYBLOB="18005e800800060000000000040009"], 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4000) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_udp_int(r3, 0x11, 0x67, &(0x7f00000003c0)=0x4, 0x4) sendmsg(r3, &(0x7f0000005c80)={&(0x7f0000005c00)=@in={0x2, 0x4e24, @empty}, 0x80, 0x0}, 0x0) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f0000000000)={0x2}, 0x4) 2.035487728s ago: executing program 0 (id=3780): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f00000000c0)=0x400) r2 = getpid() r3 = socket$netlink(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000040)=@ethtool_link_settings={0x2, 0x0, 0x0, 0x0, 0x7, 0x80, 0x0, 0x4c, 0xf3, 0x48, [0x4, 0x9, 0x0, 0x2, 0x5, 0x0, 0x0, 0x40000002]}}) socket$netlink(0x10, 0x3, 0x0) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000380), 0x98) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)={0x5c, 0x9, 0x6, 0x801, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private0}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0xe1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x88}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e1f}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) r5 = accept$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000080)) sendmsg$inet6(r5, &(0x7f0000000180)={&(0x7f0000000100)={0xa, 0x4e23, 0x9, @rand_addr=' \x01\x00', 0x2}, 0x1c, &(0x7f0000001580)=[{&(0x7f0000000200)="b0492af43a0fa5e4e2d71e0cb1a95b545e6dd846d48204d582d3eea3fdec0d61b2ccdd3205c5b130c9cdc2f32c0f1c552f35e10782d830a39bc5236d04696b96cdaffe932c7c8c8a22d2ba98478a070462244949863d6f15c8178d2d870c8d0c88", 0x61}, {&(0x7f0000000280)="e81626809e22cfbc7ac2fcd4288ac79954068686b65f2ea74dcd833c72fc07186ed0f77b02d9ac0ec0c674a78e56b161981928aacf57ccfd275cddd7fcfe399c7f66d82a36817d03e0f3d93db1fd59f5d5a154cd9a76c592750eb2063ea4bcb0d5861093c278250d7d0a26e1c78a79dc2d48e157d72d82b1134b2475ba7010", 0x7f}, {&(0x7f0000000300)="ccfb248a7524deee6653bdf7e23cc1b32a29521530c98364068d6b71d20051ba9a4dc0567954e57f534131ce7d317b992cffeeb13eafbcfae2146df43db0a88c066137e26e4c742b4fa76eb28a8ac4926d2e1ba8e80ac0704ce1a33d7508c708abc7ad09a9b90f832220b7252c2aede8370c3a0ed4af2b4be64d958fec51b8c761b3b2ed43eefd2c5420806fe3d0b99f8f1926cf26497634ef55f3c6ab53a606f51ff48d4b4a86caca211bfc954c6421ca59c00fe9294cbf12c726c9edc8539b08c9184ef5c71196c902da", 0xcb}, {&(0x7f0000000500)="619f645a97677608df897c2164f80714504e8b1091da4da9385a22e5ddaf8ad863bbd76dbbc9a2655e3072e483c465e9f77288d8368c1c40a884402b9b947ba3b9a4e03dbe77fec860f4fefbf9175d89a2eb882909926521bb2a3ecb25f4850a0f868ee27f3f6f91b983014196d5a4a6ade85c261619ef3875b7c536e31405e234c92770317e8d5240da178f3e4f45b9a000df8ff55d3b6626ade13d5f392cfe9aebe9cd85a037dea070e5d36ae119663a92cc1ae3591a8658879f44bb6ed5c1d3bd9de386a19041db0b8d06ec5ea2e8956bd058e6e8c3535993891f8ad5ce2e2cd7a991e418fa4fb4f16097d11a8fc1c8f0acec2c7aa831b453c474eb6f137306c3b1d1e1a67b7cd49fa35152ec17a3b5881f037d6624f0cbdc5ea4ac2c925c1ad7d4416fc0829a77bb9695e1e5c7f8a95b37da4667d7632bd3d7003a3426fe02201d57300389439c855b3d29d530fb0a92ce17bf3b7bdebc3a32aff9530c332bf6b8229fce24da2f6e307d6fe1a45a901f19515aa54dec9ce064c9cb0fb2d2ef8e40335398ca03839a2d80a6f3cbf0ad01c54cfba6a36c41a62ed587208b076ccb2932a42526becb2c3a4caf313a7db93438aa23fff41c5ef4b217a1e71395006692bbcc2109d7813b9b0d38f81e7e4dd91fd4c6f5ee056c2bb2fcb977e8667b039aec00cef384c4a5752c5d00de9537d79e579a8ed20ad3d71218bcfd447ca900fce6fa012ad47c9aa05903d8c1cb3b677664be259579a828bf24c036bdd14244a146d2a4b09b25ba31526b5780386310f6c8ceba0a086541ddb29177312c1a73b4f8e9309124223d9bfeca28fc7a9a0be936a625cb9bda668836d6e474919b6fec657e35445b67385b96a700675c82b6064afded785c3552530e2cfaba0816688cd41bfd0aac1c0fc5e88d31f9aa44786677c070d87287c4c5c914229784958e3e83c4f96f03613fa228ece5aa2df2f5f532c40946e2e809f85f41343b49034816b8ea9390aea0603549ed458ec07e5c8ca8d5bb5a7e8f47717f213dda5347754a505353482ee083baf14cfe3088675a928f493c351931a5e3d56689fe788021a423f7d16d727ab8aa7cf9d6647e0f761be0401587825b1cde5cc7d9999489d84afd064e667084362fac82631e523d129d872f95f8092faedabc273985ac0f0da1dbe1c90abffac6d9aecc2139fa1dc65fe07392614577e6b1866edd9c023d4bdccbdc21a19f3a7db7da23ed872919ba7269cca3260f38c6dd07c33a5d823356f7760a7f88ef18cce834f3f4f263634e43d33cf2603680f40f001cb42ffcca62cf977a4ab375f7e302ef9e451ea21664a6fdbe40d72b3d93ef9b7bf819d524ab179501e8e4765019866741e68fcc691c9a715d377f2d8f052901599f177e4ebe90e0419fbedd19bcc71772ed2e88540dc145f6f6c089d50e594212d8059d54918c37b570fa00456bf29206a006b8acb9cbc822eceecb672dcf4b640c6c64e5a232e70249ec08bdf62a1754e657e76ea8ac10f3f453d29b3733e8236ac99a55d7ff9e55221abcaea4db37bd05cebd83ae653b69b3d4dd960dde96ac109ee3fb19ad5ae29d66dde0183fb55f2fa9d769b4af9af0719a4ac8faa17810e0bfca6eba01450e7c3e4bca6918485f4372c092291fc6301587ed31f57e7aac25200dd618462d03ce1682731bf2da29192fc907b49975bc45e58ddb8019d8d312d6b91102c92432039b3f64992a979ce2549b8b2af514837a4519c8a327b362fbeea534f6f1b56e67e39b3c55edb732534a5cf6b53551501a1246a2de85db3a0a71c3179290853f66f921c877364527bc05f8924ac45040fb52e3093ecb33c742e90a01c371b65cb39b8f2b9c76bd91f3cceac1724b07a25cc77b4f2f754b552f399f5cb8f9ff643b23345656287fe754f331f4e86648da8b3b4b62927941c1bb7e4fde28d25c0dd7264e964089d76c118fae5916faee6f691fc1fabf74078ff9c433afb4b2b6e957e21f80f8a623db2f32fcdd0c4230db06856dfaa4263f81e5ef82cd330500903bd482b40aa44b9be5203dd436f9b9bf65148e6925a260b8c51b6c15e37f75975ee5200a935a3cc55b3cf074846c96c85912d30542a1edd1f96588f183a100940c695de5b1d81ba7555f51f378c92ea8ce9d63904b550a6b624f14bfc64cb09b038f0a29a4cd232158ac8828bd904fc5179237b4b813b13e41922aa3a9dfc5392572a3fc90a60d19570e53279c34ceeddbe02a94549ed05ca9711aa851528ca6613ae0381747e83983b78dac1efef0f524c4f842b0983a57edf147c2811f1bb9d58b81b7542580e1c7742a08a9f1f549fba28d7c668ceee4d87674508bfdfd375b72ddb824d6c9ede7e032db5cc4a5aa3d2a7d56b3e1ca8ea5c988d3dcab9752f5c23412d5dce34550a27330326f6fb464186b8f92a0515c39c81b578190db562542f4a7a8db0190619c8521c57e70e732a8ad1aac0c6b1c8525aaab75c97a1206a4dd3d1d8a003044b9f7b2104ad1151cf99b53642b8441c76235693aa5cdfcbf51117f82267e239a2b57c9583c09f581916b8a427ca135f711be8bf2e2c3526156f7d0df4faf9493dc1e5598be633f7e3e3a462443080908fc43491851a236d1771d7f820bd023a70668d0dea2a3a6b9a8dcbfbdf381f3aa47cf1f3da43d56ef458d7078f6c0f75de5839286d260170cb895bf8288ecc2cbd276ed795f4da8e48bce2af3231de1b1c237e69b93a05affd7c20d2d6f2bf926863debd45b28e1ce7181d47f33c81e81d6be713a2586238e4025c68b169d9fc3a0809c028f7c46dab3afab196a0d62ebe72231516fff4476e63cb31cb06afa54944c3ad37b67c7c95229a6c1d0e89a4f8102b7eda5a58097739f82645d0ce620c6872bb711da0dea9eada6f8b0c66a6104366c62f36432104eba3721e3de433f07403a48cdd467daa29bffe57f42fc71e88542f788aa1c65355c3971cc20a8f91bcda2f699536fa9dc24eb1f40ea5d6859f0bb1347fa70d4350768d58c773372bbc52e1c8e3ea736c3d1818de014da9f336f8cb08c6a54e826fa45832a34018987882d714c0b8589afb526658fa243d01ef91222484d29890f1f23c8c380c753cc6b8939283a0295e00fd95416a8afb1b3335ce9c5514da6c6b3316db98ab60fc999409056de5bae0ff779eb0cf86514eea82a8ef7d978e9682f1537084ee5d86038ae2f4fa75bb7549e6089e59d51db8770a8fe7925a4f147a8dc878b5e8e64d855de6285f89a43cc85745e48a35d8893f7ba9a27c53e26552e4047490c00327d5bb8fc3e4a897505f56212227440e0c52805b9b9b5070f88bd470b509cc7221c94fb0b729ab0c142727ac472fc6462f1cedeecc8af6f68452f8916a482b2c09ec32a60e143b9c2e6b4898f54af125fc9841d6b2584c038a24e14fd2f160ceb5dbe616e73dfcbabe0f7d99533bec7dea8dd21ecd48c8ac4c4f5da696e98aa4014681163c47f1fa0a68fa22e99e727cdbb9c4a2cddcff3aa719fcdccd60953f780d37000271b419233372c272db0e79b935b2012f16eea1444cf7a02d8cec4378adc228adca0be03b793233955e9ffa81047d341d0a9a6337962ccd0b5dec3d819724504275bf315731b270f50a9df6523499004e8a886db6893118bfbe766fd082ff949176da0f1d50147aa54acf8e854aead28fc82c16fb2b811137d1dc8d42cfffc8120817f59392f7e18f4ebeb4924d381a0b0f3322460c5d6d7d0581c2bea1c85efc7d59a0d16eb2739dd0ee3b6f60a261ec41354077c1dd56d6d98ee199f04cdeb3f8d5f63d4a13393402c88f4719fb6e9198f4400071968a6b5dcb8e3ac4ad3bb3f433566e9b0151b54cb010331cf7b595d355354a70f642ea6cc59e393eab8d86a8505b77bf32daee0b0a986660c83fd6a7b04688d79ba565c2f3a6f24c1cd6c1e77f899ca6a350aa41c9fe2309cfe6bd8052acd23da5be7ba1c3dcb149980fb7bd23e864352b6e3796490770b755c0a567401bac9a489e19a06b9a9fe63dae7e2435795d3e27e1e8360fc55a633bef1238f570821eb394ff83a84582002defccf5839160e1342f7b0cff94f45d4fe76a7c473c60115b60976824fc39e033607984b37feaad5231e7a2ee1b022a4b7adb405fbef3c57327046de416012af0764684d8959fddf30f8e1ad78b342a5bd87a1469ce7201cad832f074ea5886cab2984c951877381dddba31a3ea9b18a369b6aaeac7b9573c7b99d078b9fc75c2f5c9c17f73a09319fb8ddb82b2368b056de5c2bbea80590f15cc5ed9c0745c87bf6dc3627e45f670eed14230de24c46aea2f8a83bbc8fa5d4a3a34e5db34b4200c3eaf7a5d15cc509f5cee1eaf9675ec65eca6e7cb026101f8deccd5b104a7c768326970735f1f5ccb79282a24d041e75cb55cd589c654de457ec47988632c8bd9a92e1930e9b45258e39f8e3959ff344aea6768bb378dae4f8d673a713c18ad825d19bdae6e2292506b356e7720d2f071eb01e269f91bc601f06e12beae01ceece1a54f7d0f18301871c3ec6950fc0d803e72abd3c120ef2ad16a982a4b33f27de08209fd5169e34a16e1b5173790a0d5c1cb6eeb14d4a59ae34c04529c6377afd7004bcc366bdaca5c781bd82aaee7af470f11e7357df9e0d50ccd2cb28369c956bbb8e9349382331894ee10da7fbb2948621362efec80dc4c9cc07ba2d1f01ede52e0f256da4c0296ea4528e82c69b5ef83e4b4ce1c1f3b0c228c57de4203630e4d025f8a354bf003d9654c21dcd79e0ff2aff94aeac4b28e6cdf1c70ed28a94424d6622079a5789748c2ac8233033959fbdafb7e9f72cdfab77c3f72f20efbf80e4fccf052fbd5d5d66ebb3891e952e9ad255a38b6b0abf0d6cffe5d6e716ea6208b4f98210dae4800237d21d9e0e125e715d19bc2ad3fac1a196e698eebca85c2140cc4f5406a27c10f9c879b1b5cea27ce6a1ebcda8ab23bedfef76af12a5a753b598867069d3dc157068ce7ee42e036cf4f81b992df28309e1d032b153e342fa4a1b5288d87fbac9801571e6bd3ddc08a3afaff7bb5339d7f36a7a5224365ed7a9aab0dca3b0de0876b84463bb6c9c92a9a598345e5d30fa441aebb2233875f078547d817ad169ee4c2d2e3aff935ca2782a8894b184edd99d998b98c45616260f5efbbd9a5f4cf4af3e0ebc74833d7e0af6c7dc3dfbd7d13f750a23f31e8d458f0b7cf2edfac095712b55f57fb92efd9523e025bcaa2bb977352fffa1bbc6a207479857229d41afb904044cb36bb7baa419476768c72c1889699bdb38a0f3f280f95ee1b90df2a43736dadd9c631ee7d4b8a6344ddd162424bb5252d686697c62c9cb11d45b010a31ec1f7ecec2c4cef34655e7906fb508ff5084bd4dff83fb3de57c1c204a31499ff1900ab53a0d00365c2a4535ee293d6e335498c4c65d7cdeba4de4982a6f8a4a6d7587ae41ed4d89f7f4098bd87024323defbe612c705956106245d925deee7def0865a794299464d0341c8ecb9e3cba7463cad06a4feb35c163acc63ad2cfe744943d2d4a784d540d260981642c53aedc5e0faa59b14ca4779a8805ac9f2a60c23ca581ec5cd89171cd70a3b0228613554c8c26638a54f639779f26fa417f7b9403a9dfa0e5c636b6f4e37f096a3376c8d68ee0f5b91dddabb49ff0dc5357e0ac99ce71d85ea2a96af18ac06585b69c6657ca9c1d481bb7dae86492aa4401d7add9e8817159be20ed34d6d1e1c801f007d3356830cb79c775572fcc1072ecda1def92cfab71e115f9105017e2ecc83037df4d", 0x1000}, {&(0x7f0000000400)="4dcc86b131e7b2ff2205e7e40a676742441eca88f68fbce84f7ac11c872d5694a2e610675ddd67ede08c00bbd4ed6598655271a990385c2fc0beb0a05b48e98f73b0b7580c9b48941f512c5b2108ac73f39ae5b81e00ff11c63962", 0x5b}, {&(0x7f0000001500)="8c2222f805eacab95f6ca30bf340197c47ec5bf23cacf8e536a7e4444b7560def7dcd52d0ff247420c9e6eb441904b208205027f7ece282413d3de19072cc7fff6c7f52432738e43ccfd1a7184854a121e74c414a588f19ac8ad92cdebd08dedfe1dedae255cdf8481fbf6e2f25cd683cb1add3e", 0x74}], 0x6, &(0x7f0000001600)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x5}}, @rthdr={{0x28, 0x29, 0x39, {0x0, 0x2, 0x1, 0x4, 0x0, [@remote]}}}, @rthdr_2292={{0x38, 0x29, 0x39, {0x8, 0x4, 0x1, 0x10, 0x0, [@mcast1, @empty]}}}, @rthdr={{0x88, 0x29, 0x39, {0x2b, 0xe, 0x1, 0x6, 0x0, [@private1, @mcast2, @remote, @local, @empty, @empty, @local]}}}, @rthdr={{0x68, 0x29, 0x39, {0x16, 0xa, 0x0, 0x2a, 0x0, [@private1={0xfc, 0x1, '\x00', 0x1}, @rand_addr=' \x01\x00', @mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private2={0xfc, 0x2, '\x00', 0x1}]}}}], 0x168}, 0x0) ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f0000000140)=r2) sendmsg$inet(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000001c0)='l', 0x1}], 0x1}, 0x400c941) 2.025884759s ago: executing program 0 (id=3782): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000380)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000200)='veno', 0xfe01) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000000), 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0), 0x4) socket$kcm(0x29, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x20, 0x10, 0x100, 0x70bd27}, 0x20}}, 0x4) 1.455457895s ago: executing program 4 (id=3791): r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a5c000000060a0b040000000000000000020000002c0004802800018007000100637400001c0002800800014000000002080002400000000405000300070000000900010073797a30000000000900020073797a32"], 0x84}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x40, r5, 0x1, 0x70bd27, 0x0, {{0x2}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x41, 0x60}}}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x5}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}]]}, 0x40}}, 0x0) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) socket$inet_tcp(0x2, 0x1, 0x0) recvmmsg(r6, &(0x7f00000037c0)=[{{0x0, 0x0, 0x0}, 0x500}, {{0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000000980)=""/4096, 0x1000}], 0x1}}], 0x2, 0x40010101, 0x0) r7 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000180)='devices.deny\x00', 0x2, 0x0) openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000200)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r7, &(0x7f0000000240)={'a', ' *:* ', 'w\x00'}, 0x8) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x3fc}, 0x0, r1}) 1.246275287s ago: executing program 2 (id=3797): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x15, 0x5, 0x0) getsockopt(r1, 0x200000000114, 0x2710, 0x0, &(0x7f0000000000)) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'team_slave_1\x00', 0x0}) r3 = syz_genetlink_get_family_id$team(&(0x7f0000000100), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0xe0, r3, 0x1, 0x0, 0x25dfdbfd, {}, [{{0x8, 0x1, r4}, {0xc4, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8}}}]}}]}, 0xe0}, 0x1, 0x400000000000000}, 0x40000) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8001000}, 0xc, &(0x7f0000000140)={&(0x7f0000000340)={0x114, r3, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [{{0x8, 0x1, r2}, {0xf8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xfff}}, {0x8, 0x6, r4}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffffc}}, {0x8}}}]}}]}, 0x114}, 0x1, 0x0, 0x0, 0xc081}, 0x880) r5 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_ADD_MIF(r5, 0x29, 0xca, &(0x7f0000000080)={0x1, 0x0, 0x8, r4, 0x4}, 0xc) 1.188434502s ago: executing program 4 (id=3798): ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000140)={0xffffffffffffffff, 0x8001, 0x0, 0x6}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) ioctl$sock_netdev_private(r2, 0x89f0, &(0x7f0000000540)="329ac18b5b0463109f74862a90b728d0fe5bbbdfb8d879f1b5ec65355f4166c321") getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x8) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000640)={r3, @in={{0x2, 0x4e20, @empty}}}, &(0x7f0000000080)=0x84) getsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000180)={r3, 0x1}, &(0x7f00000001c0)=0x8) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x2c, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_ADT={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x100000c6}, 0x24000010) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x3e8, 0x200, 0x200, 0x300, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2}}, {@mac}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'erspan0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x2, 0x4}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x0, 0x2}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local}, {@mac=@multicast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x2, 0x4}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3800000056000100000000000000000007020000", @ANYRES32, @ANYBLOB="200001"], 0x38}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NODE_GET(r6, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xfea78ce4d58dcd44}, 0xc, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[], 0x204}, 0x1, 0x0, 0x0, 0x400c0}, 0x8000) 1.186911707s ago: executing program 3 (id=3800): bind$netlink(0xffffffffffffffff, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) (async) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f00000000c0)={@dev={0xfe, 0x80, '\x00', 0x3a}, 0x800, 0x1, 0xff, 0x8, 0x0, 0xfa}, 0x20) (async) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000700)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="000000004004000128001280090001007665746800080000000000000000010000000000", @ANYRES32, @ANYBLOB="130000000008000008000a00", @ANYRES32=r3], 0x50}}, 0x0) 1.136635414s ago: executing program 2 (id=3801): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) recvmmsg(r0, &(0x7f0000009400)=[{{&(0x7f0000000040)=@can, 0x80, &(0x7f00000016c0)=[{&(0x7f0000000340)=""/254, 0xfe}, {&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f00000000c0)=""/133, 0x85}, {&(0x7f0000001440)=""/171, 0xab}, {&(0x7f0000001500)=""/149, 0x95}, {&(0x7f00000015c0)=""/244, 0xf4}], 0x6, &(0x7f0000001740)=""/160, 0xa0}, 0x9}, {{&(0x7f0000001800)=@pppol2tpv3, 0x80, &(0x7f0000002a40)=[{&(0x7f0000001880)=""/246, 0xf6}, {&(0x7f0000001980)=""/4096, 0x1000}, {&(0x7f0000002980)=""/52, 0x34}, {&(0x7f00000029c0)=""/82, 0x52}], 0x4}, 0xffffffff}, {{&(0x7f0000002a80)=@l2, 0x80, &(0x7f0000002bc0)=[{&(0x7f0000002b00)=""/30, 0x1e}, {&(0x7f0000002b40)=""/98, 0x62}], 0x2, &(0x7f0000002c00)=""/80, 0x50}, 0x4e01d28f}, {{0x0, 0x0, &(0x7f0000002f80)=[{&(0x7f0000002c80)=""/36, 0x24}, {&(0x7f0000002cc0)=""/161, 0xa1}, {&(0x7f0000002d80)=""/58, 0x3a}, {&(0x7f0000002dc0)=""/9, 0x9}, {&(0x7f0000002e00)=""/123, 0x7b}, {&(0x7f0000002e80)=""/196, 0xc4}], 0x6, &(0x7f0000009680)=""/4096, 0x1000}, 0x3}, {{0x0, 0x0, &(0x7f0000006380)=[{&(0x7f0000004000)=""/4096, 0x1000}, {&(0x7f0000005000)=""/223, 0xdf}, {&(0x7f0000005100)=""/4096, 0x1000}, {&(0x7f0000006100)=""/134, 0x86}, {&(0x7f00000061c0)=""/22, 0x16}, {&(0x7f0000006200)=""/138, 0x8a}, {&(0x7f00000062c0)=""/97, 0x61}, {&(0x7f0000006340)=""/20, 0x14}], 0x8, &(0x7f0000006400)=""/55, 0x37}, 0x9}, {{&(0x7f0000006440)=@alg, 0x80, &(0x7f0000006a40)=[{&(0x7f00000064c0)=""/111, 0x6f}, {&(0x7f0000006540)=""/162, 0xa2}, {&(0x7f0000006600)=""/98, 0x62}, {&(0x7f0000006680)=""/223, 0xdf}, {&(0x7f0000006780)=""/249, 0xf9}, {&(0x7f0000006880)=""/17, 0x11}, {&(0x7f00000068c0)=""/53, 0x35}, {&(0x7f0000006900)=""/236, 0xec}, {&(0x7f0000006a00)=""/34, 0x22}], 0x9}, 0x10}, {{&(0x7f0000006b00)=@can, 0x80, &(0x7f0000006c40)=[{&(0x7f0000006b80)=""/150, 0x96}], 0x1, &(0x7f0000006c80)=""/250, 0xfa}, 0x8}, {{&(0x7f0000006d80)=@l2={0x1f, 0x0, @fixed}, 0x80, &(0x7f0000008180)=[{&(0x7f0000006e00)=""/127, 0x7f}, {&(0x7f0000006e80)=""/59, 0x3b}, {&(0x7f0000006ec0)=""/254, 0xfe}, {&(0x7f0000006fc0)=""/221, 0xdd}, {&(0x7f00000070c0)=""/3, 0x3}, {&(0x7f0000007100)=""/76, 0x4c}, {&(0x7f000000a680)=""/4098, 0x1002}], 0x7, &(0x7f0000008200)=""/25, 0x19}, 0x38e}, {{&(0x7f0000008240)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, 0x80, &(0x7f00000083c0)=[{&(0x7f00000082c0)=""/204, 0xcc}], 0x1, &(0x7f0000008400)=""/4096, 0x1000}, 0x200}], 0x9, 0x2, &(0x7f0000009640)) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="84010000100013070000000000000000ffffffff000000000000000000000000fe8000000000000000000000000000bb00"/64, @ANYRES32=0x0, @ANYRES64=r0, @ANYBLOB="fe8000000000000000000000000000bb0000000032000000ac14140000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004800020063626328616573290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004c001400636d61632861657329"], 0x184}, 0x1, 0x0, 0x0, 0x7357c62519e4c56b}, 0x0) socket$alg(0x26, 0x5, 0x0) 1.061509613s ago: executing program 0 (id=3802): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$bt_hci(r1, 0x0, 0x2, 0x0, &(0x7f00000002c0)) (async, rerun: 64) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x46c, 0x4) (rerun: 64) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'pim6reg0\x00'}) (async, rerun: 32) socket(0x10, 0x3, 0x0) (async, rerun: 32) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) (async) r4 = accept(r0, &(0x7f0000000180)=@llc, &(0x7f0000000200)=0x80) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x20, 0x70bd29, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x0, 0xffe0}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x72}]}, 0x2c}}, 0x0) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, &(0x7f0000000000)) (async) r5 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x1e8, 0xb8, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x150, 0xffffffff, 0xffffffff, 0x150, 0xffffffff, 0x7fffffe, 0x0, {[{{@uncond, 0x6, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0xb8, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}, {{@ip={@local, @local, 0xff, 0x0, 'hsr0\x00', 'veth1_virt_wifi\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE0={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x248) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000002c0)={@private2={0xfc, 0x2, '\x00', 0x1}, @empty, @private1={0xfc, 0x1, '\x00', 0x1}, 0x80000, 0x6, 0x0, 0x0, 0x6, 0x900066}) (async) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) (async) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'macvtap0\x00', 0x0}) sendto$packet(r6, &(0x7f00000002c0)="14042bfdd3fc03fc01004788031c09100628", 0xfd35, 0x4, &(0x7f0000000140)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @multicast}, 0x14) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000200012800e0001006970366772657461700000000c00028008000100", @ANYRES32, @ANYBLOB="080001"], 0x48}}, 0x0) 947.747175ms ago: executing program 3 (id=3803): socket(0x2a, 0x2, 0x0) (async) r0 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) (async) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=@gettfilter={0x24, 0x2e, 0x0, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xe, 0x5}, {0x8}, {0xb, 0xffe0}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@newtfilter={0x34, 0x2c, 0x8, 0xffffffff, 0xfffffffc, {0x0, 0x0, 0x0, r1, {0x4, 0x9}, {}, {0x1c, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000080}, 0x20054004) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 917.915886ms ago: executing program 4 (id=3804): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f00000000c0)=@abs={0x1, 0x0, 0x4e24}, 0x6e) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/46, 0xffffffffff600000, 0x1000, 0x0, 0x1}, 0x20) listen(r0, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r3, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x268, 0x0, 0x43, 0xa0, 0x100, 0x98, 0x1d0, 0x178, 0x178, 0x1d0, 0x178, 0x49, 0x0, {[{{@ip={@private=0xa010100, @private=0xa010101, 0xffffffff, 0x0, 'ip_vti0\x00', 'wg1\x00', {}, {0xff}, 0x2, 0x2, 0x54}, 0x12a, 0xe0, 0x100, 0x0, {0x0, 0x7a010000}, [@common=@inet=@ecn={{0x28}, {0x20, 0x30, 0x6, 0x7}}, @common=@unspec=@helper={{0x48}, {0x0, 'Q.931\x00'}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, [0xff], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2c8) connect$unix(r4, &(0x7f0000000000)=@abs={0x1, 0x0, 0x4e24}, 0x6e) socket$unix(0x1, 0x1, 0x0) (async) bind$unix(r0, &(0x7f00000000c0)=@abs={0x1, 0x0, 0x4e24}, 0x6e) (async) socket$xdp(0x2c, 0x3, 0x0) (async) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/46, 0xffffffffff600000, 0x1000, 0x0, 0x1}, 0x20) (async) listen(r0, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl802154(&(0x7f0000000440), 0xffffffffffffffff) (async) sendmsg$NL802154_CMD_NEW_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r3, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async) socket$unix(0x1, 0x1, 0x0) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x268, 0x0, 0x43, 0xa0, 0x100, 0x98, 0x1d0, 0x178, 0x178, 0x1d0, 0x178, 0x49, 0x0, {[{{@ip={@private=0xa010100, @private=0xa010101, 0xffffffff, 0x0, 'ip_vti0\x00', 'wg1\x00', {}, {0xff}, 0x2, 0x2, 0x54}, 0x12a, 0xe0, 0x100, 0x0, {0x0, 0x7a010000}, [@common=@inet=@ecn={{0x28}, {0x20, 0x30, 0x6, 0x7}}, @common=@unspec=@helper={{0x48}, {0x0, 'Q.931\x00'}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, [0xff], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2c8) (async) connect$unix(r4, &(0x7f0000000000)=@abs={0x1, 0x0, 0x4e24}, 0x6e) (async) 911.752769ms ago: executing program 2 (id=3805): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_TESTMODE(r0, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f0000000080)={0x2a0, r1, 0x200, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_TESTDATA={0x4}, @NL80211_ATTR_TESTDATA={0x42, 0x45, "0c12f48e17bbeefa265e5a9f13d7bc1fd1d442126e2f4004ab0e481380f823f373c4079f871a2b2f81ccd3187ebf539ae7f8ed5f25a99e285f7e00494225"}, @NL80211_ATTR_TESTDATA={0xf3, 0x45, "6b3025592d50062e8e16f700bd4b1612ceb3944e852e8023bd3075e499fe8dc1f74e4916a070044f37fa6af68038b1ac6827e23f3d36b816d3d9f1a14e91d818a2488951983303b1f2d0fd2f61f3d3af5fbf42db8c74ab5a979011ebbe8d67957afd0025bbe133f0bd127ad689788bea44c7f67e73ad0397968a9be8e3a4ca1fdb9ce34cb44b4b5c75a2d4468faf3d85398df8e6d3c36ffd04f1fcf3662dc266d6550fdac7cd800a4d44b57e53b15195c798fb4195c401b8c8edea39a84af2c5a6b53689fa211632359fbc6703da0335c01c44ba70146a707aac83e6d7be7961d340bd6f88bd88f06e1861e61ef22f"}, @NL80211_ATTR_TESTDATA={0xad, 0x45, "c29f360fde646ece1527836fc69bc3d5206d23f28611c076b5ceb7f701302ad89363849965d278082c4af8a808428366cd66a9d409bbb9e999070c488c92dce0faf4409c598ab073dae2a3cb176d8d89141df38e96a766c495b459060f839d0b4bd79c64d42c9ad724db81fa9cb911487b0eced13d804318a359de6f9f1a09bf52a3097826ca295b4a5819ad16428c20b0bfc67661338a53130aa4f61c5cfeac61f0455c963cd9673d"}, @NL80211_ATTR_TESTDATA={0x9e, 0x45, "a3b874a451831700c6b1b37cb6bfddf3b6ab7cbc1985034a2d5a3f6f01848fb5ef6cc62ed8a6ba69e13b7ec69744a0684c49559e71b9c96be6b25a6fe012dbe08e708549b35efe9ddcc66131506f47f5fdf042a8a86b71c137fe9191547696a0b2a2b35081d25d60cde80f8f57da647a15b3668348b6c51dd36a44e672e5fb56883232765b5585a44c4b3eb828e80cee92aee0e6a1f7fc2f7ef0"}]}, 0x2a0}, 0x1, 0x0, 0x0, 0x8000}, 0x80040) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) read(r2, &(0x7f00000003c0)=""/92, 0x5c) ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, &(0x7f0000000440)=0xffffffffffffffff) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r3, 0x84, 0x79, &(0x7f0000000480)={0x0, 0xfffc, 0x7}, 0x8) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x40, 0x0, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_SERVICE={0x4}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1000}]}, 0x40}, 0x1, 0x0, 0x0, 0x40040}, 0x4005) r4 = accept4$rose(0xffffffffffffffff, &(0x7f00000005c0)=@short={0xb, @remote, @bcast, 0x1, @bcast}, &(0x7f0000000600)=0x1c, 0x80000) ioctl$sock_rose_SIOCRSCLRRT(r4, 0x89e4) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000640)={0x0, 0x0, 0x0}, &(0x7f0000000680)=0xc) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f00000006c0)=r5) r7 = socket$inet(0x2, 0x3, 0xd888) sendmsg$netlink(r0, &(0x7f0000000e80)={&(0x7f0000000700)=@kern={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000d80)=[{&(0x7f0000000740)={0x64, 0x3f, 0x200, 0x70bd28, 0x25dfdbfe, "", [@generic="9513cb85d4dd1630e6dfb27713510ca57373d4bb000ab449b2aeddbf9596b46f043f338e93902544afc2d8ae1dde94e1cc542847cfc817d08432bc711e7940094c78b742f49dc2a8bce704caa676c41d1d"]}, 0x64}, {&(0x7f00000007c0)={0xcc, 0x37, 0x400, 0x70bd26, 0x25dfdbfd, "", [@typed={0xba, 0xd6, 0x0, 0x0, @binary="a4dd02617d20679623768ae5b9749c6718a2bf0c52b018177e1be3f7635300ba403a1414f0a8181fb1f995ddb904a7972be33422f8d6ed40298645fae5f7b1a7f1cb5756ec70057b52468117dd972edcf03c570a227c1823c3f7fc813fdb5585eec447bb70c41619b23f1d924ae52d078a986cf5afc52caa97603c84326243c854fcf508ab4810962e1df5611c10df7376c7f1695029212855e80ec8bf66a6ffed8b156bd1ea7efbedd8d9229ad43e4ac8e2052e2701"}]}, 0xcc}, {&(0x7f00000008c0)={0x2c4, 0x39, 0x800, 0x70bd2a, 0x25dfdbfc, "", [@typed={0xd4, 0xc6, 0x0, 0x0, @binary="e72cdf39396f824e3a688e52f7f77ce41fc3cddc1382eff948fc79b459e3c36f1a0dddc43dd1e4b4abecca87f25b261beda3838b861f130283eb7a23d7217b283e465dab9599dcfd28ea56790aa8707d6cd16435318de0bc689b9b899da8b095e4999b83e9c08b3aab494ebb0c9d56458b29b2e6425a108c3b2c497a78075c8847b750fb7d5ccb4e9fd3807db1a6a63537a0ad0b696d4a754ae26306d6d901b571ec594da5cae890fe6faef120f9267441e7363220ab01887cd21722ebcfa5ad8be7d467e1f4205511c19e3c8a184aec"}, @typed={0x8, 0x113, 0x0, 0x0, @u32=0x6c}, @nested={0xff, 0x14f, 0x0, 0x1, [@generic="1711c8b465675e21cd3a84a968430b71d905698b40", @nested={0x4, 0x110}, @generic="1803a96d", @typed={0x8, 0xe8, 0x0, 0x0, @ipv4=@multicast2}, @generic="dda1b28b87ea921080aff05ef4b439423e3450c4de955f6b8f51c589c6a1095e6c8dc702a226521378295980e9a0de6bd9a365275487a456cfab11036e8b5516498aa69247fce9ecfaa83ac8f14f26501c8abdbedcaf9f3dcbfbcfacf354ce0887cab8749fc5d233f3e1afcc09df0e9592a14ebe55e99943e92272f20d76c59728ceafeff59a729e478bc29938ef3a06470c6a2bef942db749fd432f646c0f6e2d0d4cbed14fdfd1e921d076daff85e6f8fadd6005bf6be39cd604cb07351fa2e0e330b994206f128d4c459bf7bc", @nested={0x4, 0x4a}, @nested={0x4, 0x10f}]}, @generic="cf31400416c84290c3aa6f7208b7b0b1cd4263cb8c72fcad88c9fd69af6ebbcd3cc935806aaf9fbc1dea1e23daa06ea5d2fde9af233817ca612b4ed8e851e27e5babc92a8a2689d55eaf2e825f8c82fb7794e878f2d663568884ea2264b8d9bfa45affe840aff90cfac09f24c027bedf5ce5b5bbd719ac43a6aa61603a265cdefe52986d78a62a02f3f6bafc7167cdcfded7b66059183d031fbb90ba1fcbd0c9deda8ea8006240d8649388911e5b5fd2c56de286aa46a49e52f655a27a7012598a7f5cae", @typed={0x8, 0x79, 0x0, 0x0, @pid=r5}, @typed={0x9, 0xeb, 0x0, 0x0, @str='*^\x15\\\x00'}]}, 0x2c4}, {&(0x7f0000000bc0)={0x100, 0x27, 0x200, 0x70bd26, 0x25dfdbfb, "", [@generic="e18d7cd0d6347c95d64db078c999b6c0dd899711d7d372ca5214fca56b4ac491c0adc8845a343bec68230b395b0a7c5ebcc033a436c0b1edba6dbf72367d0249ffb54ae3df0d10768587147a3e5546785dee6292e85db1197a798d3184c8b61d51ac9881aa313441d6ae3d519aeefe164dfc078540c1cbca782268c5f3a1cce434f204961c0d0fe990274fc77895cb33bca22a73423411ef76e2cc4d65e3be4a", @typed={0x8, 0xf0, 0x0, 0x0, @u32=0x5}, @typed={0x8, 0x35, 0x0, 0x0, @u32=0x9}, @generic="3ddd80794f58f010d8db5c85ff9af6b4f6c2d959c6730263c42bd18e3c178cb6a09f0f153245acf5cc6e9d362f339110abfaaa1bc1765f2e1f2e9a0a8891"]}, 0x100}, {&(0x7f0000000cc0)={0xc0, 0x3f, 0x1, 0x70bd2a, 0x25dfdbff, "", [@generic, @generic="f3610a5410641acc6a19e73eb51a40b7e517811cb3e96a8ac43c2b4053b1899fff764c4545d9c360b955e8c5c02852ca7746cac84326e5b75ffb98cc6de7b742c2b2ee7856d96f97b6a585d1a3e7a8ab2700be2615e0af27565d2812ae49d3cd32ef7ec856b992a233187c9a92e408bc38406b6b2e8945271595a6edeaae1a3ccc36a593b857e7a70ad050993bf8617f50739421830b770dbe8fe11b3c256a349eec4bd1e2724524b831c9af220d1c"]}, 0xc0}], 0x5, &(0x7f0000000e00)=[@rights={{0x18, 0x1, 0x1, [r0, r4]}}, @cred={{0x1c, 0x1, 0x2, {r5, 0xffffffffffffffff, r6}}}, @rights={{0x34, 0x1, 0x1, [r4, r0, r0, r3, r2, r0, r4, r7, r0]}}], 0x70, 0x20008005}, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f00), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000f40)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_ADD_TX_TS(r0, &(0x7f0000001000)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f80)={0x38, r8, 0x400, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x5}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0x3}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x20000080) r10 = socket$netlink(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) getsockopt$SO_BINDTODEVICE(r10, 0x1, 0x19, &(0x7f0000001040), 0x10) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000001080), 0x12b100, 0x0) ioctl$SIOCSIFHWADDR(r11, 0x8924, &(0x7f00000010c0)={'bond_slave_1\x00', @local}) r12 = accept$inet6(0xffffffffffffffff, &(0x7f0000001100)={0xa, 0x0, 0x0, @empty}, &(0x7f0000001140)=0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r12, 0x84, 0x1d, &(0x7f0000001180)={0xa, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f00000011c0)=0x2c) r13 = socket$netlink(0x10, 0x3, 0x4) shutdown(r13, 0x1) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r12, 0x84, 0x1d, &(0x7f0000001200)={0x3, [0x0, 0x0, 0x0]}, &(0x7f0000001240)=0x10) getsockopt$SO_COOKIE(r7, 0x1, 0x39, &(0x7f0000001280), &(0x7f00000012c0)=0x8) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r2, &(0x7f0000001300)={0x2000}) 852.57259ms ago: executing program 5 (id=3806): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=@newlink={0x34, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x8168}, [@IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_TX_RATE={0xc, 0x3, {0x80000001, 0x7}}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000044}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a5c000000060a0b040000000000000000020000002800048024000180090081006d6574610000000014000280080003400000000008000240000000000900010073030000000000000900020073797a3200000000050007405500000014000000110001000000000000ffffffe100000a"], 0x84}}, 0x0) 849.202911ms ago: executing program 3 (id=3807): bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1d, 0x4, 0x2, 0x0, 0x201, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0xffffffff}, 0x48) r0 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, 0x0, 0x5f) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x9c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x6c, 0x2, {{}, [@TCA_NETEM_LOSS={0x30, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x18}, @NETEM_LOSS_GI={0x18, 0x1, {0x10}}]}, @TCA_NETEM_RATE={0x14, 0xd}, @TCA_NETEM_CORRUPT={0xc, 0x2}]}}}]}, 0x9c}}, 0x0) write$cgroup_type(r0, &(0x7f0000000040), 0x9) syz_emit_ethernet(0x4e, &(0x7f0000000080)=ANY=[@ANYBLOB="0180c2000003c200000086dd6012000800183a0100000000000000000000000000000000ff8000000000000000000000000000aa3edb907800090000ff010000000000000000000000000001c7a2e90d550f2f688c3e4789e8e284c9cd8c923faefb14da5d"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="dc01000010000000180000000000000000000000000000009500"], &(0x7f00000003c0)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000013c0)=ANY=[@ANYBLOB="b702000026000000bfa300000000000007030000007effff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065060400010000050404000001007d60b7030000000000006a0a00fe000000008500000028000000b7000000000000009500000000000000496cf27fb6d2c643db7e2d5fb4b0936cdf827fb43a431ca711fcd0cdfa146ed3d09a6175037958e27106e225b7937f02008b5e5a076d83923dd29c034055b67dafe6c8dc525d78c07f34e4d5b3185b310efcfa89147a09000000f110026e6d2ef831ab7ea0c34f17e3ad6eecbb622003b538dfd8e012e79578e51bc53099e90f4580d760551b5b0a341a2d7cbdb9cd38bdb2ca8e050000003a14817ac61e4dd11183a13477bf7e060e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c214733a18c8b6619f28d9961b626c57c2691208173656d60a17e3c184b751c51160fbcbbdb5b1e7be6148ba532e60a0ac346dfebd31a08060000000200000000000000334d83239dd27080e71113610e10d858e8327ef01fb6c86acac12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e957bc73ddc4eabba08ab1e1ad828267d4eadd3964663e88535c133f7130856f756436303767d2e24f29e5dad9796edb697a6ea0183babc190ae2ebf8aad34732181feb215139f15ea7e8cb0bae7c34d5ac5e7c805210600000000000000c3dec04b25dfc17975238345d4f71ab158c36657b7218baa0700f781c0a99bd50499ccc421ace5e845885efb5b9964e4beba3da8223fe5308e4e65ee93e107000000f8ddebf70132a4d0175b989b8eccf707882042e716df9b57b290c661d4e85031086197bcc5cb0e221a0c34323c129102b6ff0100002e88a1940b3c02ed9c92d6f64b1282dc51bb0015982730711c599e1c72ffa11ed8be1a6830d7507005154c46bd3ca96318c570f0721fc7aa2a5836ba99fe1f86468694f22cdf550ef091a78098534f0d973059594119d06d5ea9a8d0857382ec6e2a071474cfc12346e47ad97f4ead7cf70a9d1cdac944779dc08a705414888700a30e2366c6a06b3367a389ca39059787790017b0689a173db9c24db65c1e00015c1d093dab18fd0699fe3304000000323e9c7080397bc49d70c060d57bc88fbe3bbaa058b040362ab926150363fb099408885afc2bf9a46a076b7babfcddeff8c35030669ea69f5e4be1b8e0d6697e97186f9ae97d5670dba6623279f73db9dec75070cd9ab0fda6b069ef6d2857ca3e4effcf7462710d133d541da86e0477e4a6cc999dc21c3ef408e6b178e7c9f274d7fafc8d757d33dfa35aa2000034837d365e63845f3c1092f8dde8af3904ea0f4b82649b83ed4fa0f873339c4cadecc13219ba7518aa4f7db34ead13484742067ab743c1d82a5687f2ed690000000000000000000000000000000000000000000099d4fa0000000000003f0ecdc7c82e72919c91d2039afe17e95edeeeba72205beff7771bcb293747b88486cacee403000000a2919a4bff2ed893f2c814679fa69fc7e0cf761f918725704a01c56009a9f748e5aaf30a10bd8c409b1870c1f75e26b45264e3d3f8e0048e55ae289ce2ad779ce71d4dc30cbb2cc4289d2f884d66cddc76eb7f601110ff39053c262279f4ef00fbdb8c328615a9ec84f27a9f3938ae736138b8c1ec220c1540bf3d162dc1c27fa30f0dc60b9f257db5d1c7ed2e152cb2cf06f8edb30177fead735a952ffce676a93110904d5ee2abdab2ef3ff84c4d61443f73552195c7ccfbf9f03c44432eaa3b7501d4239354da8de21eada75d3a3afb2c76ff0700007981699b6c0f0e946766f57544ff52cef0dd811bec4e3c0a30f2d7d19d26d2503a3ea376721b8eded3bc475958dd498ee2b2d6146e33fc0de1dc2e0516ac565ddb1d4ae89e6712824a85eb9ee0a3b68c9e209756623adf685dd715d68ed11e4b4d5502f5124948f8f98c615cac3666c58f785c3f758be352a71871d5c081197d37980e4f4e26b5476fb20407ff7098b7174bef66fa03a99b5c0c20b378065fac4ef9ac2d0d804b9400000060e5d3f1749f6aecf69ba83a71caa9bdddc679f1b826f54b6563a4be1fd82b73c8c2bc65f63982b951fb058fd3c7b6341c4580376b6c16bd94d2da66059de81abfa15eeeb88b6ae5882ad341032c73f1285e21fff5a1d138e061b1dc7bbda199b5fab8e0719e9cd69b47dcb52b0be6a3a73afdf328132e1d4f21065716be0c53a23940d07188b015fa341dbc92231c8b5e5717eac184f46c9f61b69f55cd2231bcf821052429a1f250e8b734be0605a15f25923d599544b319319ff0a32621019347df460a098119a6f47eb1bac47946d7a009cbc6ec74c19a93cc7c7138b28c95270116181fd5f553573c48104d2ad0e10d3663488e664401453f22f0d76d2162635365258af61ae1f46f4a7862f302d91e3f7c2781f602220522e84602a939a8d5e4137ae31ccd397404dc72e06715a6503d4d865182803ee6725da7293b23daeebefd6fce7411c9624a7e8d5ba5a13e1c32adc4f3274497c6882a72475e4280a4d9a47c003c6ed3071330c58145be813a10788a720a6b5a498ca2b42496c479a0a71e2f6f9bad8c84bc6be20281bde0b348cf2c60538a505ad4a0510eebb023e4954c9eb6cd70627f5c03d867dbf3ad5d1f1dc852064dd0efafc3df20ec8faf3d194db76127f88f284fa1b71ab964fdd2474471da76373e65e9a8bf844bdfdd348bc7d00c4c7e7afe8a1f8cde79b7a6c5aafe954b8ba37818e40c14b37c23f9f614576b689436fef2f27f8b1e756e00262e22bca49c43fd73e7e99b2fa44a8c1db99c2cf2735ad6c5fabf082e0df0f8ba7e24272165f2f5b28230c02b53d44bd84bf6770157e96bbb96b5e1f165c87e7ad68a3600b3d357fa9a7d53c281d88ebb175a4dbb82130e6870982947913110f091d21760d985afd3163f2e6880682432f9b3b97d57a9f980edfa1116a3d04d58872a07d6a7e12db673acd2f7b8988d833e71943fe2c1c65a3cf36b955c56b55bfd3ecf0af694c71a03f2996c15b1ba971de1cb9c7e6a0000000000000014783ef54c51199317413f98dca8ff3d0bda50f6c0af58dbd6c031b1a5a7512c5896514adfa17d31429c68db50a93d88199defd3b4625fea426ff9293a28a544a6a9e2a79b55daa1b3c6b14c4ec6d164e902ce4913843d65d841973468729ea12bf6d3499036dbb66718f3497855c3baa6cc07c0fa388ec9df0617c1a28ef5a595ee267a76175b8a057e6efaf4fefe46def451f2858fe71a53e77b1a44e98843bb3a40102da3703dfb9f61bdcea2fb810b32d52e2157a150a63ea6135d1cf6f864c2e68884d7245bc5d61dc5a114d10ffb22e76678bbfc1e3865d17d128306d1b81884a934cb00000000000000000098a4526e6468987dbc63bff7590eb388afaba43d811996333eef7e9f472bee293f0c40d434b8be07cbd52325296e22802493edb5c590ad208bac683a8b2d4c9d2d57ff846ae8c422e0b28546671f11d8157bb762c91f3fbcca8e21589c92446ae65d408c0637ffcc2d44d715ce003dd1e12b085e186d069a55c2e96efbe5024d61a56a36d988c0f51a973a6c238e545b28211a92000000001501aed8d72af0fcd540a9d4e293690c5e697b3a1480e46df5071bca1cfb28a57c1b3c956ec81397e81fbf870a67385fea04220423f52ad8178b9fd04bdc7e5fee4bd52db996e633792118efdb6b88023e80da74fdf723c7f0"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r5, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000380)="7c53310100f9ff61efd106939fc1", 0x0, 0x4000, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x48) 762.603896ms ago: executing program 2 (id=3808): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="100000002d000b02d25a806f8c6394f9101a04000a", 0x15}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081044e81f782db44b9040a1d08030e000000e8fea4a1180015000600142603600e1208000f1000810401a80016000a0001", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0, 0x0, 0x0, 0x5c8}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="563f000019"], 0xfe33) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)={0xa0, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x44, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x4}]}, 0xa0}}, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_STARTDAEMON(r2, 0x0, 0x48b, &(0x7f0000000000)={0xfae8c6dba0c23c23, 'dvmrp0\x00', 0x4}, 0x18) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xffffffed, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x810) sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x7fffe, {0x0, 0x0, 0x0, r5, {}, {0xb, 0xb}, {0x2, 0xb}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x6, 0x808, 0x205, 0x1, 0xc}, 0xb, 0x0, 0x5, 0x5, 0x9, 0x2, 0x9, 0xd, 0x1, 0x1, {0xffff1c72, 0x3, 0x1000, 0xfd, 0xfffffffe, 0x7583}}}}]}, 0x78}}, 0x8000) getsockopt$sock_timeval(r3, 0x1, 0x14, &(0x7f0000000100), &(0x7f0000000140)=0x10) 752.914472ms ago: executing program 5 (id=3809): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a80)={0x6, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000340)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000580)={'veth0_macvtap\x00', 0x0}) r4 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000100)={r0, r3, 0x25, 0x4, @val=@kprobe_multi=@addrs={0x0, 0x0, 0x0, 0x0, 0x2}}, 0x30) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000000)={r4, r1, 0x4, r0}, 0x6) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f00000004c0)={r4, r1, 0x4, r0}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="4000000068000100030010000000008000000000000000000c000200010000001500000014000c80080003000700000006000100d90100000600030001000000dbd5f8f8362148c4cde8b70ba89ab6e8a137ff2595f79135ecd90d1d386e43e8312936122985a6f73f7442165892772babc2278e4bce6eeb614230236b82f58d8b7a38b5721de451091fa6b610857eecf3af2f31f3eb3c80c1763dd8fa842df0b3b9e2fd51071c402110b49ca1107f3ce1993dbf2fcc1f7b24e3e2"], 0x40}, 0x1, 0x0, 0x0, 0x4008000}, 0x4000) 659.890006ms ago: executing program 4 (id=3810): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x0, 0x0, @remote}}, 0x0, 0x0, 0x50, 0x0, "3f114438efdaca16d374b49a365be44d5e860ea3ba676c0b5047b80e2c3535d5bd9db3c8572560f4d1be5cd41f7716082ee3589f099942e6f1c395ddb8160381baadf27900"}, 0xd8) socket$kcm(0x29, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000100)={@in6={{0xa, 0x4e24, 0x20000000, @rand_addr=' \x01\x00'}}, 0x0, 0x0, 0x3, 0x0, "ddfd3b7ed7c6a1c172a987ae5ce3cafd64c9a736831a5912d606798fb75c9981c4b3ac0e06891ff18bc5543ed57215a3c45f9154dfa319e52a15a2b9acf80c07fb1a854dad742eef6187f2304844c296"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000000)={@in6={{0xa, 0x4e23, 0x5, @loopback, 0x8}}, 0x0, 0x0, 0x4, 0x0, "61236b90dcdfe3ce2bb54fa6c4654e6c39d7ddcc4501330078eb7bf1597d638c7d4315210fb34d4c84c2f976071138016e8934b34d8b9cff05cd33c159c2c5a51f1bbe5b7d758286a3c82392b39a1d3f"}, 0xd8) r1 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r1, 0x84, 0x23, &(0x7f0000000100)={0x0, 0xa11c}, 0x8) close(r0) 598.354031ms ago: executing program 3 (id=3811): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x88, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x2c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback=0x7f000015}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_SEQ_ADJ_ORIG={0x1c, 0xf, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8}, @CTA_SEQADJ_OFFSET_AFTER={0x8}, @CTA_SEQADJ_OFFSET_BEFORE={0x8}]}]}, 0x88}}, 0x0) r4 = socket$inet6(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x401, 0x1000004, 0x0, {0x0, 0x0, 0x0, 0x0, 0x503, 0x20000}, [@IFLA_LINK_NETNSID={0x8, 0x25, 0x1}, @IFLA_GROUP={0x8, 0x1b, 0x3ff}]}, 0x30}, 0x1, 0x0, 0x0, 0x20004800}, 0x4000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c000000190001000000000000000000021800000000fd000000ed0008000100ac141400340008"], 0x2c}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x18, 0x25, 0x109, 0x70bd1f, 0xfffffffc, {0xe}, [@typed={0x4, 0x14e, 0x0, 0x0, @binary}]}, 0x18}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendto$inet6(r4, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, 'X.'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x68}, 0x1, 0x0, 0x0, 0x4004850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c0001800600010000"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 537.913943ms ago: executing program 5 (id=3812): r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x14, 0x4, 0x4, 0x6}, 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000200)={r0, &(0x7f0000000040)="f0", &(0x7f0000000080)=""/13}, 0x20) (async) r1 = socket$kcm(0x11, 0x6, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000000440)=@caif, 0xffffffffffffff1c, &(0x7f0000000080)=[{&(0x7f0000000240)="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", 0xfc}], 0x1}, 0x20004004) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=ANY=[@ANYBLOB="3c0000001800dd8d000000000000000002000000000000060000000006001500010000001800168014000100800000000000000000001000000011"], 0x3c}, 0x1, 0x0, 0x0, 0x20000010}, 0x200000a0) sendmmsg(r3, &(0x7f0000000000), 0x400000000000235, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) (async) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x18, 0x10, 0x3}, @TCA_FQ_FLOW_MAX_RATE={0x2, 0x2}, @TCA_FQ_QUANTUM={0x2, 0x2}]}}]}, 0x48}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=@getnetconf={0x14, 0x52, 0x400, 0x70bd26, 0x25dfdbfe, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) 484.012518ms ago: executing program 4 (id=3813): ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000000)={'xfrm0\x00', @broadcast}) 407.653256ms ago: executing program 4 (id=3814): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), r2) sendmsg$TIPC_CMD_SHOW_STATS(r3, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r4, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40001}, 0x40) (async) sendmsg$TIPC_CMD_SHOW_STATS(r3, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r4, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40001}, 0x40) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0xb4, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x84, 0x2, [@TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x1}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1], 0x0, [0x8, 0x6, 0x3c, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x401]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x1}, @TCA_TAPRIO_ATTR_TXTIME_DELAY={0x8, 0xb, 0x1}]}}]}, 0xb4}}, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0xb4, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x84, 0x2, [@TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x1}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1], 0x0, [0x8, 0x6, 0x3c, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x401]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x1}, @TCA_TAPRIO_ATTR_TXTIME_DELAY={0x8, 0xb, 0x1}]}}]}, 0xb4}}, 0x0) 368.390216ms ago: executing program 5 (id=3815): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), r0) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000300)={0x14, r1, 0x1}, 0x14}}, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x100, 0x70bd2c, 0x25dfdbff, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40080}, 0x51) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f0000000d00)=@nat={'nat\x00', 0x19, 0x1, 0x21e, [0x200000002300, 0x0, 0x0, 0x2000000024be, 0x2000000024ee], 0x20, 0x0, &(0x7f0000002300)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff01000000050000006b0000000016636169663000000000000000e3ff00007665746831000000000000000000000073797a5f74756e0039da0000f8ff0000000076657468310000000000000000001000aaaaaaaaaa3d000000ff00000180c2000003ff00ffffff00ae000000560100008e0100006f776e6572000000000000000000000000000000001800"/198, @ANYRES32, @ANYRES32, @ANYRES32=0xee00, @ANYRES32, @ANYBLOB="02040000000000004e464c4f4700000000000000000000000000000000000000000000000000000050000000000000000100000007000300000000005cae641872319dfae5a988272763a36abcf1f74cfd4bf988531a30a528c1c044813d8205fd8b1fdf1c2ccd79b5fb7f9e096fbd1c7eeee4b6646c0b2fc39d3fe20000000072656469726563740000000000000000000000000000000000000000000000000800000000000000feffffff00000000736e6174000000000000000000000000000000000000000000000000000000001000000000000000ffffffffffff0000fcffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000001000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000001000000feffffff00000000"]}, 0x296) setsockopt$inet6_udp_int(r2, 0x11, 0x65, &(0x7f0000000000)=0x6, 0x4) 251.812135ms ago: executing program 2 (id=3816): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_VERDICT(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000080)={&(0x7f0000000340)={0x2b8, 0x1, 0x3, 0x801, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFQA_EXP={0x1d0, 0xf, 0x0, 0x1, [@CTA_EXPECT_HELP_NAME={0xe, 0x6, 'snmp_trap\x00'}, @CTA_EXPECT_HELP_NAME={0xe, 0x6, 'ftp-20000\x00'}, @CTA_EXPECT_FLAGS={0x8}, @CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x1}, @CTA_EXPECT_MASK={0x60, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010102}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @rand_addr=0x64010100}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}]}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x900}, @CTA_EXPECT_HELP_NAME={0xa, 0x6, 'H.245\x00'}, @CTA_EXPECT_MASTER={0x68, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @private=0xa010100}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010102}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010101}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_ZONE={0x6}]}, @CTA_EXPECT_MASTER={0xc0, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x35}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x14, 0x4, @local}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @broadcast}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x14, 0x4, @mcast1}}}]}]}, @NFQA_EXP={0x34, 0xf, 0x0, 0x1, [@CTA_EXPECT_MASK={0x30, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x2b}}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}]}]}, @NFQA_CT={0x38, 0xb, 0x0, 0x1, [@CTA_FILTER={0x2c, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x64d}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x11a}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x846}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x20}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x810}]}, @CTA_LABELS={0x8, 0x16, 0x1, 0x0, [0x9]}]}, @NFQA_PAYLOAD={0x5a, 0xa, "3919d4e4f0a9b4a46077cb324509715547c7d43611b26a8193ae94a610a3e0faa160e2a4ed62dbabb78ff5d68c658b4337915f6e4d4476708abcedb956004237ee8e959283c42b707bfa0e105e9b241848b878303c73"}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x8000}, @NFQA_PAYLOAD={0x4}]}, 0x2b8}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x10, 0x11, 0x0, 0x1, @payload={{0xc}, @void}}]}], {0x14, 0x10}}, 0x94}}, 0x0) 250.9832ms ago: executing program 3 (id=3817): ioctl$AUTOFS_IOC_PROTOSUBVER(0xffffffffffffffff, 0x80049367, &(0x7f0000000000)) (async) r0 = socket$kcm(0x29, 0x2, 0x0) (async) r1 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) (async) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x6, &(0x7f0000000040)=@raw=[@ldst={0x2, 0x3, 0x2, 0x0, 0x3, 0x58, 0x1}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}], &(0x7f0000000080)='GPL\x00', 0xbb, 0x52, &(0x7f00000000c0)=""/82, 0x40f00, 0x2a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000140)={0x0, 0x1, 0x4, 0x9e}, 0x10, 0x0, 0x0, 0x8, &(0x7f0000000180)=[0xffffffffffffffff, 0xffffffffffffffff], &(0x7f00000001c0)=[{0x4, 0x3, 0xb, 0x3}, {0x4, 0x4, 0x10, 0x3}, {0x3, 0x2, 0xe, 0x4}, {0x5, 0x2, 0x6, 0x8}, {0x3, 0x2, 0xd, 0x3e8443fa0a6772f1}, {0x3, 0x1, 0x9, 0x1}, {0x5, 0x5, 0x9, 0x3}, {0x2, 0x1, 0x3, 0x8}]}, 0x94) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000300)={r1, r2}) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000003c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000340), &(0x7f0000000380)='%pI4 \x00'}, 0x20) (async) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f0000000400)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xcf, 0xcf, 0x6, [@var={0x10, 0x0, 0x0, 0xe, 0x5}, @datasec={0xb, 0x3, 0x0, 0xf, 0x3, [{0x1, 0x8, 0x1}, {0x4, 0x2, 0x80d8}, {0x5, 0x1, 0xffff8001}], '\rNN'}, @type_tag={0x2, 0x0, 0x0, 0x12, 0x2}, @union={0x8, 0x1, 0x0, 0x5, 0x0, 0xe, [{0xb, 0x4, 0x10000}]}, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x6, 0x1}]}, @enum64={0xd, 0x6, 0x0, 0x13, 0x1, 0x8, [{0x6, 0x8, 0x7fffffff}, {0x10, 0x95, 0xb}, {0x5, 0x1ff, 0xc}, {0x3, 0x8a, 0x8cd8}, {0xd, 0xe396}, {0xe, 0x5, 0x4d4c}]}]}, {0x0, [0x2e, 0x2e, 0x30, 0x5f]}}, &(0x7f0000000500)=""/62, 0xee, 0x3e, 0x0, 0x6}, 0x28) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000580)={0x3, 0x4, 0x4, 0xa, 0x0, r3, 0x2, '\x00', 0x0, r4, 0x3, 0x4}, 0x50) (async) r6 = socket$alg(0x26, 0x5, 0x0) (async) r7 = bpf$ITER_CREATE(0x21, &(0x7f0000000600), 0x8) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000640)={'nr0\x00', 0x2}) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000680)={r7, 0xffffffffffffffff}, 0x4) getsockopt$inet_mreq(r7, 0x0, 0x24, &(0x7f00000006c0)={@broadcast, @loopback}, &(0x7f0000000700)=0x8) (async) ioctl$PPPIOCGNPMODE(r7, 0xc008744c, &(0x7f0000000740)={0x283}) r9 = accept4$bt_l2cap(r7, &(0x7f0000000780)={0x1f, 0x0, @fixed}, &(0x7f00000007c0)=0xe, 0x80800) sendmmsg(r6, &(0x7f0000002040)=[{{&(0x7f0000000800)=@pppol2tpin6={0x18, 0x1, {0x0, r9, 0x4, 0x3, 0x3, 0x3, {0xa, 0x4e22, 0x2, @ipv4={'\x00', '\xff\xff', @multicast2}, 0xcfb}}}, 0x80, &(0x7f0000000980)=[{&(0x7f0000000880)="210edcbb8a7fb23c367601b2cabaeadcd6ec372dbe10614cec7932f729c0a245102c8e46595952e5bf649a2bf4fbc242cf61bb693aeef573e495f82e381f713a0f87d5f8136cd527cb7c4337aca52b7ec8ea4a553b1c3e4a56687f14f5ce42819941610774ad1f5b0acbdd58cee647e2cfc7d54fa56af655b0bdccf4b6f2e9f18e90c014afb0bcb220481d9b8d336435d2323f6f38735dc3738660665da53d470b4f49c140a984d76d11c2c7ef543e23ccce4ee97fe1b8281972ea8b262f6b65d07959a0eb4444c27b908cb42368a2f86339a3c9e03486af8c0e0f5fd3b5248d1a4f4043f14c767a4dfeaf7e2b02727ddd112e1621948274b8", 0xf9}], 0x1}}, {{&(0x7f00000009c0)=@phonet={0x23, 0x10, 0x2, 0x9}, 0x80, &(0x7f0000000cc0)=[{&(0x7f0000000a40)="26f9b2af259f90364db650c1bdaa9d22738410bcccc2f44b4742c8c749feeb236e788e78001af7ff9a095e159f84022b07d3c0aa9d919042f5e1a6794d7e10cdf660a098b2dec1e457bfaf359ac670180f", 0x51}, {&(0x7f0000000ac0)="57812a540d5f99e433343fdaf8fa673105e840abe4ba879af3a93138658f2d1275f4f32e5886d47f87505571393ae548a9da82b497855190b87a7a02ffc73b32a5b037a8f37d68eadcc920034ea68f88673267166f72f4b77f707b66bb64bab00716c219b862002f0b6fac1f9fba8cf1fc1b96332ad6e54ad3f0a43262dcea554ed4df92a6d6809f7c8e7911bfdc5d738e593484e5344fe12f7b6667a2ddce9af26576e974f6a69085ca9f1424779b0835520fb9562108d6f3d67dc444303b458d0be9f107ef0d35eaf6aff1fc7948a08100d5e2e90db83e8ee1cc11aee5bc15e789fbd4cb0a282752b4dbe9ce1e7b", 0xef}, {&(0x7f0000000bc0)="1f931d070d3f8947a01eaab1eb1f4bef1537e6098a6920769c5c4f3ce65951a46ea4870588598679446c683e54c184eba8a44510ae825d357992f3cec91c08e9d9892686bff3f1c260dd47324d511dd1a5fff7ce31f7bc3743654c54025771f007a0280772372c5d626265551a3ca8c33c33f4c741dbff613f433b0a0a25a65cc67fe5ac19f218fdfd3ddfb36a3caeae3bdf50c56419ae09c3d671d2155eb3124865f20c3326dcc39ac85a811d06f765c74547ac24a320534735b68b5cb0531b7ee9d3ff1dd5fbeb9a196dc562df4df8cd9f460b447079eb3ab6670d1070cb3c98f80167c2c25a7710ff3140", 0xec}], 0x3, &(0x7f0000000d00)=[{0x50, 0x10a, 0xfff, "c40651975c429e4c9f2595d4213630ffb896d30a5708a27cf819003ebd98c7175d6110bfdb2563ee36ca4713bd9910e060f9b31b45f0b5e74fccd258729db3e5"}, {0x1010, 0xff, 0xa0, "5f608066b47967ad982cce6bcdff0d720190563de7cbff30deb6fcbfa604ccbd2d4f528d954459d99b4415ffc1eca66c6c385a5dcd872025e86e21ee7b6234843199a5d2691c7f199a8a1e06b92ca0436e6f3677c5fc14173162d364a1561c93280bc29dac04bb0eeaba3be35bf70feffcc7e86fea0a85395f7c36b73b64a3139bb90399703b63c71534364cd42e2844a80a39d3f9b75efae42bf8762b5518601d1d9d9352625f45aacf3ece81063f50d388cfdc8fb3f9ee4b803307e14a6935177461ba0f5ff9b60e45b695f230ab5f74355ba79ac1cb2519105fc485cf0cd6bc81ddf853a2ef1ca9cd2c52fb6cb43dc3af968a29007ab3f028dac39f8d5bb324834b99a10c9eddd650b64dd6ca7803e3482e9ee2295e54cd2c49d6780c8954131f3b08280716ee45169c06490f24425a899f8f74ee95fe4840cb1a881b721fb0d9a099b18e0b0cce8db3319dfebf69fdc48d749c852569f223b1a5c5ad1d63a34cb669c41619e5bc3059a195981354d68d57179f0475ab158be2425593246d515f2c3d8927b248759370fef916640453dff50da495e2bf8e951ae365c6472642e5eaed3e36660c36c37bbeda44032124f48f6fa8b015718d10c14b02a8e203eb9ce351f996ab5fb690c7e02b846abc7d4c2aed16c0b31435f819b6b2c82b96fa8da321097a0ec4f3b9566a09f548f81172e8ea09c36d2bb4a1ce9315bec62b4dc2e1d6f6be187601c4ba43fd5a3d687202c410a0f3a4fa1f759c56726b9f993a1348e734b534b55c70a942ef794b46edda37986a39c6f214a904d3d09023e2dc6b6a00882709dbeffe271be65a73e4bc64bf9751056987f7103b5756eb061eca7e2a41ed0333bd95c18e7ea4d2201ef3f9899e34c447f89bb9efffa5615540a3291aec5cf9de11ef2a8aa42efcff91a5acbcf9c5aa4d9ab79681ec602d9b959ef8b15e2a24af7c4aad9cd40f0609b695795dafea524d976e09271d15f7d82b2ce6923c7463bf002cc8f31d421197dfcad30cce5b7ecf0bdbed480344cf97067681e69b297a87c9496c45ede4db0dd3a134609dd96874f2f0ec3082bf22556615ae063a4d680818fbf3705099540f9ab41d9f708af0ad63f735cb9b8d669055dcd4bcd36f99a9b340d60a8f861dcb14ce95bbe2a800db4ec6bc342e11fc5007c8cad28a3b59556fc041fb004084cee79172f5930003dafa03c9c1c7a8420e986808fe60a4efe33fd7ae5d1122ceefe966f91c0d6b4c5800e9df98078b2e27343e2f02b2a54bb38d0e38bf390fcaa4b0ca43b88edbf2f82652bb4513bfa11bb06a46466d87d1b61b286bc71eea209798592b6d4de44f8da2a0fc5261822d69ac024ce221c603370ac8c8abbdb5284cafb984fe3140e90fd48b0f0b49b0667ee83ef71195f50dc7449e4cec411aa9d4eae56b8f8a310c3a165f634faab42c014fb98c219ed34075aab56baa0bc7c3437a5aa51dafeb62da9529bc3e72f87c58fa37986f9907365063f4bf15f71ff7220ea107c2d39422aedfac598cbd57b1b4c5a171b7c55db6c5cf081d263e235af4617ab1b5db4da8850a118fd510bf07b01caa7349ec511979dcbebe0cbe21e6aa809a2d189e5449ea03b57404d07dc26729fdafe051c3a002b47092218780d674150e75c76ceb6c3ec736130b8fca33ac811b344340b6e5cee72479d62b6d3286d81429de9773f158ad2c63c21e0af13e6117846d5b51170d23642e7af634a34b5da68bea17e60efcd3c3b8c8511e0b69efd8d3705a2b1ffbffff16b33a45aff72495fbf0d64042a87edb20384c6fb53e72e397cabaaee08884c3fb385fb1bee297c8163b0cf121d7e3b4dd88bf039fee7060ece19113aa63075e1dd980838f5c22cd4366ca17d6422c513cc25ac7b7fe998f87a2eb4e1cebf74bf1467199658555f9020f912dd1a9b5bb39a0e66079c00a0f81ec024456c180fd81df6f65cea2653a49e4d4ddfe7c70118a599925b13b865557018738fdfc2bd9c0038bee49d636bfb89288529eeec971a5c03383d0de3ddfe1ff02c541dcfe0932144c14981a3ef410c7444391dfd1b1e6407f6d7bcaefe0138a82875731305b8a75e4edf9daa55b3491d9a8a918f602fc3505255bd78a8ca83e9062999b0a0b82f1d71bc3bb333291624b4c24464dba442972db615f626adc6878a7f65ed0e9a33f226d064e979e51e4af0a3c822880155dba8c1a6ae4e3ab380210282ca0ac5f9a3ee84f4ea8f45f1e227b227fef16696689e702789a19dfd95cd8de1be1783d7edc039ba1e3051e12d3f788324a5b9a9bfb9d9bb43ee11ba1e2d1a27c5f21654467a9a4f31aaf2c30d7651febea3c3bf4d8ebbdc8d9fea9e2eb0a2d6271302682799148bfdd8e172b95aae6dca984657e5b3ca30e77a8777def3f186df7e797e4e48d783159ef95bd4dab4b4ced8dde43d353c5b4c5b13dfd195dbd6d9e8fbda5626518fc651cf8b1decc725ae6a5605af3a65523d7543b855579ab5e88892384b6dc9a70e6ff54142afda061d11e1612bb0bc744d66776d219301b0b6ac7917097a56239748c4874dc6a00a38a34acc14913ab68651b0cac36c6175fe757fb0c915dd8781170cec21e100cfbef5874b0b949513f277c65b94a4177217f05caa3ac38de270e950ab6199f805df601b08aed92410e857acfd9c1b4800df54693f94cb980327d551d279204a986303caa2448069815540791be4382c927490716bc786847e0961d6573fac14c59b3adf28149308fe14f65300279b196de289acbd617c1c2f90879b708abc0e8cd2830877e445d4d8240dadb9702a36dcb496f6d4da8a1f52bef0e9511da17da2e7e29e957ca13a19e51bc1d80eadcc99d33a6a9eb483c7c8be290e6c4d8f36774cf2e4a570886bbd750c7ff57da6bd99f6a0432632653260639e72fba16aa10ecbc510710de1370511a8717cbfb339b31ff14a990af43ee50c399ade555e0de0e61e38d0131ed356205baae5f24b8ab160672494ccb7c048572b8deb1066e87c4dcc42f3c7f0d984191eafe835d0ffd51479a40d3f7f4e0d9add65f7ee3fd36a98e0aa34e8667246416288d1f37ba3049328fd7e80d9755400ab326b33a6601b83db26ea0a37be1e2fa76f6c14bd9dd2dd1f12ccf84e5d273e66d7704fa01e3e03ac236c674b27501db231b9ad94e3d47ee8e74ef28e95068326d0ab3fd228f570885634638666acf2998f1801c077a4b5ea5ab62e912d37f2d68e8b32ad1b9722299250428eb4bf434590ed503f0615e5c67122ee480b714c6e6854d0225b7c62c484705b6ec08ebb777e44817d317ae7c7af66a76f60fd56e1339f6976e8e81d65f6e9c370466c6a5ff1f025e003e6797856743ddcb5e1b6259ced85cc5197d341d84045793c1dbece88af8e2217af28c6d34c6e2e1470cceda5fdaed5eb38885f35c8ae6a25d45f5b9839645fa5c1e00891734ac5ee035d4e5eaab3043b620a1a63f90315ed67cbc706d70f5b18780bd08561bd982a2f078052c0f61cc36d42f817b1a61c6f357edb64639b87b0ed827cebc827ff4e5f356f84bad9f82d46e8498b3bdf5c0ffa570c32c4e35c649d85f1e41dbae804601ec8e0ceb4269602df95127f59279f422e45e6b6164c0b0e10cee703cc5eae4536eec62b996ecbd8a8fe3e6578b3203f8eea27d88f06ff101369a95efa7ab17f7f94d89bf5ff10296d766d2c17e189561928c9323d2600cc1287f4bb7d9b49049578bc3f7f6c6740e95e2dc6fc999a3afe361b0a943366484816780ab587d99fac21ba2a0a2f30e3744947e13d952336293e5a55a0e898fb39c2e840bcdd5f320dfa39fd8762409bd018e8a4821e1c1e5ef82450f64dc5abd92ebf30b0d36e348359b2274df7d766344ec44d52971c434db76898a1f5e1d7e6e7054720e419fa12e4d342a36ef249ce3ca1d43eaa459fc1ce3188368d0cc07fd5b81c0544b010958967767b4367e878bcebfe45690624077e25058c52097321e2520abda64ecda905c62666348a1eaa442b4e5ef3bebbf7789863b07d434ac1804d20e40dc9b3566f9557baa80c7f98699e0ce56117a4090ebcda5c6da3d603c83c8bbd45197c2ca7a3fbef58cd32f5b4d8473a324a8c4a26561c7e85825d176a810c0f081ad6a9568afb3cffbfd91cdc96c379761685171a764ba74b9a28bb23afef509e928a175ccdb3dc99c0a66120bcbbc10339c9920fea5fed8b58ca14269d168147ffd233ebe5aa2d57e598fdb17f04a9fce12d031c0930496597002d179b226b6707d920e3a5177e8d2e6a272cbfa3b156b87955bb1e37a25920d2526fafec9a2cad92de2068f48c71ef06eae3debb31f2bc8bd7ac6076c183bb73c8fe1e99867f980da46a3f2b124fbf4c6b39a3f8172cebcda90d7951ae17121c8b861c534d9d52f41b8c23725bedc42b845ccc1c8ce40810bf993478a41f4592618c8758f4f9c1367cf9dd6100e270736b163795b35c9747c2035dba47fa56ddf1dcc8a4a5d887717b1051ff7b3a6e2b4b55cff9bf2f37a9b0c13f19f22c0fd332b63b914e3ae59629efa66c4ac76507af184fc7c0d9f4aba2d08f0ae9ed55e33e55dc3a470a07cf324e4f69cc44dc422831ed99b01b72ee085ef689ed83902dbf65bc248c838c9d4ecd36035f8a490b496508c8c79e9d21177b4946000788583d1f7d7c711098c6638fa895a9f2e4f0fb3b14320ab63afc9b02716f32421dc8359a149f9e90274fd599c3ae6ea8f9ffb28d4b712092b2d5b51cf2e1110417a6336080d4ec31270ea27c501cb0a050e0493d6a4afd832d14b25d1459ff58be33f14c68c1514cf4ad9a271fafbc1c07be4f5d7adcc1fb1dd8a4920f59b30a559265cd20f54c021a305d8839c3fec20901221d1b179864948eea0374027cce853fbb8886a40788d29e094628e9b20eab984cc0c310f265eefe94d6ca02d9ee9d78cfdba40d1cea46214356dc6e63a7104b98169d167c819651f5986abdef4ea1e3aca93dfc91caf21c44834a2379ad5cbcfa4639359a9318a3b7c508ed5ef9a3043ef95459675a18b48de52f25efc0bde988e9cb3e7fbada2ac64def9620f2bcf9278841a57a0a887ee870ac9eb717eb0b79a49ebe8c7fcd3a5bdeca1d0405a927175dbfb6d8387bd3b95a24616e4f7e4ec2e304322ba4ba7cb9b0b40265d172b35ff929f467ab260b352b41a0cbee6f9917d0079ab41dc8dc49fa9dd133778fc0bc6de6f14c5a08c232e3cd11997256c0dc09c5482237cfb34dc6e9e7db10ee94974e7068b4eb58b01b1d75dff040ea198c779503980f9992374dceccf907911d14c429b81ac39c5bf86247daf54a52089f07715759a4220834a1111468ba85122860bb42fef40301624787e5f84d69ed397c92fd2bd974a2ed739d4c5f79708f7335d77760802932936e2143a4b3f1422c7eb115336c05cb950cf0191345b3fc4f65241248878a0c7915b7abdb0d34e52b0511f1c0fcf890cddf0a9a125745aa7135d92b42191d1bf791e229975d00e29c102677457569935f02a02468f6a7ab5e405f8542c46b1dfc62565df55ad27dee643b24baa297b10db69a73e2e9a695232c7f963aeb5dae660da8fc8a2d67424df7ef17940f2fbddf35c4ee25b1289a215cdea1794936623f9de39a883bf127d1f1896dfbe2001b0d2f777538ae74eb55e548f6409cad33b946ed7ae900b5d06a8f90eba3289c30fdf7bc0ae55aecc7c5b00cbd6963e47f906e650fe671cbb73f437853a78382fd14e65a04a47d7d2575b0109a75fe678df9065d5f4afb11bd503656d9dd4f8ece195"}, {0xd0, 0x84, 0x9, "dff798d4912617b53b033914c02dc7b90a3eee98f94d3c396ea8ce0d18e5901b3ccb3193d24180274377f144ff0aa6b63be5abcc4d0f07f31134a513fdbe0798dd16e39e7787e288ff526d03095297edf302cef316bebf87740b243f9f63009a53f43118031ba45419bddf52049c1eafc15f815a98d201aacf223547e900daeb7401fd2d9180397332d93fffb8d359f0a4633b5e012e3a0597c0aef4120fbf5f10911ed45365ec0435398379cbb6d8ffd041968e73e472810e268c1624"}, {0xc8, 0x10f, 0x3, "9558d4c1bc8d18af82ee5292722467a464010c50652f5afac2d4ef0439e1a9ab65a458e97099d1ac3b8aa0f90aecbb7d35656dc08268189ee619d699b773061385645844acbd89f37d5721181b1fa2385d41e4545b9bcce2f6a94b6f04bc72cc9cbe4547a2a5e21562d8d4165f6a0c15451edb80e8775d821dbf3e78d5033024423f5149c8dbe9cf5acf9e729cef468973bd5a9131fa5b93bc756ca2968471387c38485976f0f1821caa227d3df5f3c446"}, {0x108, 0x110, 0xffffe648, "9b1fa0315e09eb684f43cb9a321dbc8380029d53f4e3becbae1ceb141b242794195a45e78ddb55c10a093a0d2eafbc0d2b32d0a3d6ac92af3bae861b7cef4d743a24e59ab0f6a2d5924ec5569da14f9993f06b5d64d25b03c71681b8b56c02a14de7c11fce8447f1da80f5f0b50cd820fef08ca69ecfed6111445573349e5a932bc571cbc62b61265919a29aa897eec7c1db1324c107bd55c9149669122105f237c45d9fc84fd2521c6fe27a4153221316e496189efda6ecbcc1bf4cf5efcfe10af5d0f756ebdcca20f1b82a5a6bd940d667621e5ba5e3a7ae52677303c307fcc476f66f525fc1149efb63049ce4c1aba7250656"}, {0x30, 0x10b, 0x9, "07bd6bd217910c186ab77c1f7e50dcaa06cfc5b42f1c1084456526"}], 0x1330}}], 0x2, 0x800) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000003240)={0x4, 0x11, &(0x7f00000020c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [@cb_func={0x18, 0x3, 0x4, 0x0, 0x8}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000002180)='GPL\x00', 0x4, 0x1000, &(0x7f00000021c0)=""/4096, 0x41100, 0x21, '\x00', 0x0, @fallback, r4, 0x8, 0x0, 0x0, 0x10, &(0x7f00000031c0)={0x4, 0xd, 0x80, 0x5}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000003200)=[r7], 0x0, 0x10, 0x6}, 0x94) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000003400)={@fallback=r0, 0x26, 0x1, 0xfffffffc, &(0x7f0000003300)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f0000003340)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000003380)=[0x0, 0x0], &(0x7f00000033c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000003740)={0x18, 0x14, &(0x7f0000003480)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xc}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [@alu={0x7, 0x3382c2bae0e029b, 0xa, 0xa, 0x6, 0x1, 0xfffffffffffffffc}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r7}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000003540)='syzkaller\x00', 0x796e, 0xa4, &(0x7f0000003580)=""/164, 0x41100, 0x1, '\x00', 0x0, 0x0, r7, 0x8, &(0x7f0000003640)={0x2, 0x1}, 0x8, 0x10, &(0x7f0000003680)={0x3, 0xc, 0x8a, 0x400}, 0x10, 0x0, 0x0, 0x3, &(0x7f00000036c0)=[r8, r7], &(0x7f0000003700)=[{0x1, 0x4, 0xe, 0x9}, {0x0, 0x3, 0xa, 0x2}, {0x2, 0x3, 0xd, 0x1}], 0x10, 0x5}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000003440)={@cgroup=r7, r10, 0x9, 0x2, r2, @void, @value=r12, @void, @void, r11}, 0x20) syz_init_net_socket$netrom(0x6, 0x5, 0x0) (async) r13 = bpf$ITER_CREATE(0x21, &(0x7f0000003800)={r7}, 0x8) ioctl$PPPIOCATTCHAN(r13, 0x40047438, &(0x7f0000003840)=0x1) (async) pipe(&(0x7f0000003880)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PPPIOCSFLAGS1(r15, 0x40047459, &(0x7f00000038c0)=0x8050090) r16 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000003c00)={0x6, 0x15, &(0x7f0000003900)=@framed={{0x18, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x28e}, [@printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x23}}, @map_val={0x18, 0x9, 0x2, 0x0, r5}, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9}}]}, &(0x7f00000039c0)='syzkaller\x00', 0x3, 0x6a, &(0x7f0000003a00)=""/106, 0x0, 0x0, '\x00', 0x0, 0x25, r13, 0x8, &(0x7f0000003a80)={0x1, 0x2}, 0x8, 0x10, &(0x7f0000003ac0)={0x0, 0xe, 0x7ff, 0x6}, 0x10, 0x0, 0x0, 0x9, &(0x7f0000003b00)=[r14, r6, r3, r8], &(0x7f0000003b40)=[{0x1, 0x5, 0xf, 0x2}, {0x1, 0x5, 0xc, 0x6}, {0x5, 0x2, 0x8, 0x8}, {0x3, 0x2, 0xe, 0x4}, {0x0, 0x1, 0x4, 0xc}, {0x3, 0x3, 0xe, 0x2}, {0x2, 0x2, 0xc, 0x9}, {0x2, 0x2, 0x6, 0x5}, {0x4, 0x1, 0x10, 0xb}], 0x10, 0x3}, 0x94) r17 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000003d00)={0xd6, 0x0}, 0x8) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000003cc0)={@fallback=r17, r16, 0x0, 0x28, 0x0, @void, @void, @void, @value=r18, r11}, 0x20) (async) recvfrom$x25(r15, &(0x7f0000003d40)=""/219, 0xdb, 0x60, &(0x7f0000003e40)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x2}}, 0x12) 220.664757ms ago: executing program 5 (id=3818): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000000)={0x0, 0x55, "97481557b3111949102c0cf4db1eaba7d4d2f13412980ca64240b425a2b3cf77e189094370afd3673dcde34a54e1671f1880f7268e352e0fb0939bb8edb2a526d1c96e80b2642c13329d3bccca02330938c1c500c9"}, &(0x7f0000000080)=0x5d) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f00000000c0)={r1, 0x9}, &(0x7f0000000100)=0x8) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x23, 0x6, 0x4) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000140)={r1, 0x7}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r4, 0x84, 0x1, &(0x7f00000001c0)={r5, 0x3, 0x6, 0xfa, 0x7, 0x8}, 0x14) getsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000200), &(0x7f0000000240)=0xe) bind$netlink(r4, &(0x7f0000000280)={0x10, 0x0, 0x25dfdbfb, 0x20000}, 0xc) ioctl$FS_IOC_GETFSUUID(r0, 0x80111500, &(0x7f00000002c0)) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x3b3300, 0x0) ioctl$TUNSETPERSIST(r6, 0x400454cb, 0x0) getsockname$packet(r4, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000380)=0x14) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f00000003c0), 0x0) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000400), &(0x7f0000000440)=0x4) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r4, 0x84, 0x5, &(0x7f0000000480)={r1, @in6={{0xa, 0x4e23, 0x7, @remote, 0x7}}}, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000600)={r2, 0x84, &(0x7f0000000540)=[@in6={0xa, 0x4e21, 0x2, @private0, 0x3}, @in6={0xa, 0x4e23, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @in6={0xa, 0x4e21, 0x100, @remote, 0xb270}, @in={0x2, 0x4e21, @local}, @in={0x2, 0x4e20, @broadcast}, @in={0x2, 0x8, @private=0xa010102}]}, &(0x7f0000000640)=0x10) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(0xffffffffffffffff, 0x114, 0xa, &(0x7f0000000680), 0x1) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f00000006c0)={r7, 0x0, 0x3, 0xfffffa97}, 0x10) setsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000700)=@int=0x5, 0x4) socketpair(0xb, 0x802, 0x1, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$PNPIPE_HANDLE(r8, 0x113, 0x3, &(0x7f0000000780), &(0x7f00000007c0)=0x4) sendmsg$IPSET_CMD_RENAME(r0, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x60, 0x5, 0x6, 0x201, 0x0, 0x0, {0x1, 0x0, 0xa}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}]}, 0x60}}, 0x40080) setsockopt$RDS_CONG_MONITOR(r4, 0x114, 0x6, &(0x7f0000000940), 0x4) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000980)={0x9}, 0x8) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r9, 0x84, 0x70, &(0x7f00000009c0)={r1, @in6={{0xa, 0x4e20, 0x4, @private0, 0x800}}, [0xfff, 0x140000000, 0x7, 0x1, 0x1, 0x8, 0xb, 0x9, 0x3, 0xa05, 0xbd, 0x9, 0x0, 0x6, 0x8]}, &(0x7f0000000ac0)=0x100) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r3, 0x40049366, &(0x7f0000000b00)) r10 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b40)='blkio.bfq.io_merged_recursive\x00', 0x0, 0x0) r11 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000bc0), r8) sendmsg$IPVS_CMD_NEW_DAEMON(r10, &(0x7f0000000d00)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c00)={0x88, r11, 0x10, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x80}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xf}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e23}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x4b29}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_DEST={0x28, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x1}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@remote}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1800}]}, 0x88}, 0x1, 0x0, 0x0, 0x40800}, 0x4) 142.172709ms ago: executing program 3 (id=3819): r0 = socket$nl_audit(0x10, 0x3, 0x9) (async) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) (async) listen(r1, 0x0) (async) connect$unix(r1, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x3, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000008000000000000000000910095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r4 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={r3, r3, 0x2f, 0x0, @void}, 0x10) (async) writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000340)="8a226ff432407a7f5fd09590d734f795e12e57ce9fed3f0300eb6368ed559a85603b0080", 0x24}], 0x2) (async) r5 = syz_init_net_socket$rose(0xb, 0x5, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1}, 0x50) (async) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r6, 0x80047210, &(0x7f00000000c0)) (async) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8b36, &(0x7f0000000000)={'wlan0\x00'}) bpf$LINK_DETACH(0x22, &(0x7f0000000140)=r4, 0x4) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000240)={r4, 0x0, 0x0}, 0x10) getpeername(r2, 0x0, 0x0) (async) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="18000000690003050000000000001c5200000006"], 0x18}, 0x1, 0x0, 0x0, 0x4a014}, 0x4000040) splice(r7, 0x0, r8, 0x0, 0x800, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89b0, &(0x7f0000000080)={'bond0\x00', &(0x7f0000000100)=@ethtool_rx_ntuple={0x35, {0x11, @udp_ip4_spec={@multicast1, @dev={0xac, 0x14, 0x14, 0x17}, 0x4e23, 0x4e21, 0x9}, @hdata="f048af3cf944daf56d12564f851c645533d4938cc42228115e041f526bf820fac0722f55421240c7d4bbbe1d83daa02069dd6b7a347b0f35802ef2ce2f5fa0d92a7d13eb04281c1b", 0x5dfe, 0x200, 0x8000000000000001, 0x6a2a, 0xfffffffffffffffe}}}) 83.757841ms ago: executing program 2 (id=3820): socket(0x24, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x58, 0x9, 0xa, 0x409, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x28}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x31}, @NFTA_SET_EXPR={0x20, 0x11, 0x0, 0x1, @quota={{0xa}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x8}]}}}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xa0}, 0x1, 0x0, 0x0, 0x4008084}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), r1) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000340)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x24, r3, 0x101, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x24}, 0x1, 0x0, 0x0, 0x4040084}, 0x4040) sendmsg$NL802154_CMD_DEL_SEC_DEV(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r3, 0x10, 0x70bd25, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008855}, 0x20000000) r5 = socket$can_bcm(0x1d, 0x2, 0x2) socket$inet6(0xa, 0x2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b707000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r6}, &(0x7f0000000080), &(0x7f0000000240)=r7}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x14, 0x3a, 0x107, 0xfffffffc, 0x25dfdbfd, {0x2, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0x488c0}, 0xc050) socket$kcm(0x2, 0x3, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r9, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r8, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d800", 0x2}], 0x1}, 0x0) r10 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r10, &(0x7f0000000000)=ANY=[], 0xfe33) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000180)={'vxcan1\x00', 0x0}) connect$can_bcm(r5, &(0x7f00000001c0)={0x1d, r11}, 0x10) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x20, 0x0, 0x1, 0x101, 0x0, 0x0, {0x3, 0x0, 0x1}, [@CTA_NAT_SRC={0xc, 0x6, 0x0, 0x1, [@CTA_NAT_V4_MINIP={0x8, 0x1, @rand_addr=0x64010101}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x60040000}, 0x8001) 36.284994ms ago: executing program 0 (id=3821): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdirat$cgroup(r0, &(0x7f0000000080)='syz1\x00', 0x1ff) r1 = openat$cgroup(r0, &(0x7f0000000180)='syz1\x00', 0x200002, 0x0) r2 = openat$cgroup_type(r1, &(0x7f00000000c0), 0x2, 0x0) write$cgroup_type(r2, &(0x7f0000000100), 0x9) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_netrom_SIOCADDRT(r3, 0x890b, &(0x7f00000001c0)={0x1, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bpq0, 0xffff, 'syz0\x00', @null, 0xfffffdba, 0x80002, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @default, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}]}) ioctl$sock_netrom_SIOCADDRT(r3, 0x890b, &(0x7f0000000440)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x8, 'syz1\x00', @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x7, 0x4, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}) mmap(&(0x7f0000071000/0x4000)=nil, 0x4000, 0x0, 0x30, 0xffffffffffffffff, 0x9efbf000) r4 = socket(0x840000000002, 0x3, 0x9) setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x4001, 0x3, 0x250, 0x0, 0x700001b, 0x148, 0x0, 0x148, 0x1b8, 0x206, 0x240, 0x1b8, 0x240, 0x7fffffe, 0x0, {[{{@ip={@loopback, @empty, 0xffffffff, 0x0, 'tunl0\x00', 'veth0_to_bond\x00', {0xff}, {}, 0x1}, 0x1ea, 0xc0, 0x120, 0x0, {0x390, 0x8f00}, [@common=@inet=@socket3={{0x28}, 0x1}, @common=@icmp={{0x28}, {0x12, "e07c", 0x1}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x2, 0x2, 0x3, 0x1, 0x2, 0x7], 0x2, 0x5}, {0x0, [0x3, 0x6f455bfb4ce26171, 0x6, 0x6, 0x2, 0x21debfafc4f76fce], 0x3}}}}, {{@ip={@remote, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xe2002454fb7b9fcc, 0xff, 'team0\x00', 'gre0\x00', {}, {0xff}, 0x8, 0x2, 0x5}, 0x0, 0x70, 0x98}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x10, 0x9, 0xf9}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2b0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) 0s ago: executing program 5 (id=3822): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed}, 0xe) listen(r0, 0x0) ioctl$sock_SIOCINQ(r0, 0x541b, 0x0) (async) socket(0x27, 0x2, 0x4) kernel console output (not intermixed with test programs): st mode [ 241.761747][T13521] netlink: 'syz.3.2146': attribute type 9 has an invalid length. [ 241.961725][T13542] netlink: 'syz.1.2151': attribute type 1 has an invalid length. [ 242.011356][T13542] bond10: (slave ip6gretap2): making interface the new active one [ 242.020947][T13542] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 242.033373][T13542] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 242.041389][T13542] bond10: (slave ip6gretap2): Enslaving as an active interface with an up link [ 242.138849][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 242.147194][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 242.323452][T13563] : entered promiscuous mode [ 242.405293][T13567] erspan0: entered promiscuous mode [ 242.414598][T13567] vlan1: entered promiscuous mode [ 242.509453][T13575] netlink: 'syz.3.2161': attribute type 27 has an invalid length. [ 242.681586][T13582] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode [ 242.689146][T13582] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode [ 242.743492][T13589] block nbd0: Unsupported socket: should be TCP or UNIX. [ 243.001567][T13555] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 243.284120][T13629] syzkaller0: entered promiscuous mode [ 243.334427][T13629] syzkaller0: left promiscuous mode [ 243.635643][T13651] netlink: 'syz.2.2191': attribute type 1 has an invalid length. [ 243.803128][T13651] netlink: 'syz.2.2191': attribute type 1 has an invalid length. [ 243.826620][T13653] bond11: (slave bridge8): making interface the new active one [ 243.837648][T13653] bond11: (slave bridge8): Enslaving as an active interface with an up link [ 243.861640][T13653] bond11: (slave bridge9): Enslaving as an active interface with a down link [ 243.886070][T13653] bond11: (slave bridge10): Enslaving as an active interface with a down link [ 243.897659][T13651] netlink: 'syz.2.2191': attribute type 1 has an invalid length. [ 243.936803][T13653] bond11: (slave bridge11): Enslaving as an active interface with a down link [ 243.947260][T13651] netlink: 'syz.2.2191': attribute type 1 has an invalid length. [ 243.962122][T13653] bond11: (slave bridge12): Enslaving as an active interface with a down link [ 244.015420][T13653] bond11: (slave bridge13): Enslaving as an active interface with a down link [ 244.030453][T13674] __nla_validate_parse: 21 callbacks suppressed [ 244.030471][T13674] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2198'. [ 244.053613][T13653] bond11: (slave bridge14): Enslaving as an active interface with a down link [ 244.105961][T13651] netlink: 'syz.2.2191': attribute type 1 has an invalid length. [ 244.126296][T13651] netlink: 'syz.2.2191': attribute type 1 has an invalid length. [ 244.161551][T13653] bond11: (slave bridge15): Enslaving as an active interface with a down link [ 244.188958][T13651] netlink: 'syz.2.2191': attribute type 1 has an invalid length. [ 244.189123][T13676] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2200'. [ 244.211248][T13676] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.2200'. [ 244.219067][T13653] bond11: (slave bridge16): Enslaving as an active interface with a down link [ 244.281240][T13653] bond11: (slave bridge17): Enslaving as an active interface with a down link [ 244.316399][T13653] bond11: (slave bridge18): Enslaving as an active interface with a down link [ 244.373666][T13693] netlink: 80 bytes leftover after parsing attributes in process `syz.3.2203'. [ 244.396229][T13653] bond11: (slave bridge19): Enslaving as an active interface with a down link [ 244.407773][T13687] syzkaller1: entered promiscuous mode [ 244.414193][T13687] syzkaller1: entered allmulticast mode [ 244.438694][T13653] bond11: (slave bridge20): Enslaving as an active interface with a down link [ 244.905846][T13737] sctp: [Deprecated]: syz.2.2215 (pid 13737) Use of struct sctp_assoc_value in delayed_ack socket option. [ 244.905846][T13737] Use struct sctp_sack_info instead [ 244.929308][T13738] sctp: [Deprecated]: syz.2.2215 (pid 13738) Use of struct sctp_assoc_value in delayed_ack socket option. [ 244.929308][T13738] Use struct sctp_sack_info instead [ 245.009078][T13744] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2217'. [ 245.039651][T13748] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20002 [ 245.122569][T13750] netlink: 100 bytes leftover after parsing attributes in process `syz.1.2219'. [ 245.233501][T13757] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2221'. [ 245.258722][T13764] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2222'. [ 245.302360][T13764] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2222'. [ 245.363210][T13770] netlink: 401 bytes leftover after parsing attributes in process `syz.4.2226'. [ 245.498675][ T24] net_ratelimit: 45 callbacks suppressed [ 245.498694][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 245.512728][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 246.209989][T13837] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 246.218704][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 246.459751][ T5907] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 246.468091][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 246.491171][ T5907] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 246.499557][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 246.541510][ T5844] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 246.549911][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 246.712124][T13868] tipc: Enabled bearer , priority 0 [ 246.720445][T13868] syzkaller0: entered promiscuous mode [ 246.726016][T13868] syzkaller0: entered allmulticast mode [ 246.750603][T13868] sch_tbf: burst 4 is lower than device syzkaller0 mtu (1514) ! [ 246.770922][T13876] validate_nla: 36 callbacks suppressed [ 246.770940][T13876] netlink: 'syz.0.2255': attribute type 1 has an invalid length. [ 246.806419][T13868] tipc: Resetting bearer [ 246.821812][T13876] netlink: 'syz.0.2255': attribute type 2 has an invalid length. [ 246.834750][T13865] tipc: Resetting bearer [ 246.851549][T13880] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 246.852404][T13881] netlink: 'syz.0.2255': attribute type 1 has an invalid length. [ 246.866610][T13881] netlink: 'syz.0.2255': attribute type 2 has an invalid length. [ 246.877224][T13865] tipc: Disabling bearer [ 247.069496][T13888] bond12: Unable to set down delay as MII monitoring is disabled [ 247.100657][T13888] bond12 (unregistering): Released all slaves [ 247.166541][ T7933] nci: nci_rx_work: unknown MT 0x6 [ 248.233401][T13938] syzkaller0: entered promiscuous mode [ 248.248939][T13938] syzkaller0: entered allmulticast mode [ 248.830757][T13971] netlink: 'syz.1.2280': attribute type 29 has an invalid length. [ 249.005213][T13985] dvmrp0: entered allmulticast mode [ 249.163073][T14001] sctp: [Deprecated]: syz.2.2289 (pid 14001) Use of int in maxseg socket option. [ 249.163073][T14001] Use struct sctp_assoc_value instead [ 249.197165][T14002] __nla_validate_parse: 9 callbacks suppressed [ 249.197184][T14002] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2288'. [ 249.423236][T14008] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 249.626494][T14033] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2298'. [ 249.643441][T14033] netlink: 'syz.3.2298': attribute type 7 has an invalid length. [ 249.654787][T14037] lo: entered allmulticast mode [ 249.662888][T14039] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2300'. [ 249.672709][T14037] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2300'. [ 249.683400][T14033] netlink: 'syz.3.2298': attribute type 8 has an invalid length. [ 249.689425][T14036] lo: left allmulticast mode [ 249.718833][T14033] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2298'. [ 249.766455][T14045] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2302'. [ 249.775737][T14045] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2302'. [ 249.881859][T14052] netlink: 207952 bytes leftover after parsing attributes in process `syz.1.2304'. [ 249.951283][T14056] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2306'. [ 250.046829][T14061] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2308'. [ 250.257534][T14076] bridge0: port 1(bridge_slave_0) entered disabled state [ 250.269108][T14076] bond0: left promiscuous mode [ 250.273898][T14076] bond_slave_0: left promiscuous mode [ 250.280322][T14076] bond_slave_1: left promiscuous mode [ 250.310676][T14076] wg1: left promiscuous mode [ 250.315293][T14076] wg1: left allmulticast mode [ 250.548114][T14090] net_ratelimit: 63 callbacks suppressed [ 250.554251][T14090] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 250.618951][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 250.627126][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 250.635539][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 250.643734][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 250.651873][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 250.660595][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 250.698477][ T5844] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 250.706970][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 251.007407][T14117] netlink: 'syz.3.2327': attribute type 10 has an invalid length. [ 251.016471][T14117] team0: entered promiscuous mode [ 251.029422][T14117] team_slave_0: entered promiscuous mode [ 251.036281][T14117] team_slave_1: entered promiscuous mode [ 251.043336][T14117] bridge0: port 3(team0) entered blocking state [ 251.050851][T14120] openvswitch: netlink: Flow key attr not present in new flow. [ 251.050932][T14117] bridge0: port 3(team0) entered disabled state [ 251.065485][T14117] team0: entered allmulticast mode [ 251.074963][T14117] team_slave_0: entered allmulticast mode [ 251.083039][T14117] team_slave_1: entered allmulticast mode [ 251.094911][T14117] bridge0: port 3(team0) entered blocking state [ 251.101346][T14117] bridge0: port 3(team0) entered forwarding state [ 251.150495][T14119] bond11: peer notification delay (1164) is not a multiple of miimon (100), value rounded to 1100 ms [ 251.172230][T14119] bond11: entered promiscuous mode [ 251.177451][T14119] bond11: entered allmulticast mode [ 251.238761][T14119] 8021q: adding VLAN 0 to HW filter on device bond11 [ 251.475896][T14148] syzkaller1: entered promiscuous mode [ 251.481571][T14148] syzkaller1: entered allmulticast mode [ 251.977233][T14179] tipc: Started in network mode [ 251.991444][T14179] tipc: Node identity 36d246e176e9, cluster identity 4711 [ 252.013252][T14179] tipc: Enabled bearer , priority 0 [ 252.037780][T14180] syzkaller0: entered promiscuous mode [ 252.053301][T14180] syzkaller0: entered allmulticast mode [ 252.092628][T14179] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 252.149192][T14189] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 252.208794][T14179] tipc: Resetting bearer [ 252.219034][T14178] tipc: Resetting bearer [ 252.252437][T14178] tipc: Disabling bearer [ 252.284049][T14201] x_tables: duplicate underflow at hook 2 [ 252.352132][T14203] netlink: 'syz.2.2354': attribute type 1 has an invalid length. [ 252.360063][T14203] netlink: 'syz.2.2354': attribute type 11 has an invalid length. [ 252.390162][T14203] bond3: option mode: unable to set because the bond device has slaves [ 252.687717][T14223] : entered promiscuous mode [ 252.937330][T14247] geneve4: entered promiscuous mode [ 252.963446][T14247] geneve4: entered allmulticast mode [ 252.994069][T14254] tc_dump_action: action bad kind [ 253.027589][T14247] netlink: 'syz.1.2369': attribute type 28 has an invalid length. [ 253.035684][T14247] netlink: 'syz.1.2369': attribute type 3 has an invalid length. [ 253.219356][T14262] bond8: invalid ARP target 0.0.0.0 specified for addition [ 253.226814][T14262] bond8: option arp_ip_target: invalid value (0) [ 253.236700][T14262] bond8 (unregistering): Released all slaves [ 253.572277][T14290] syzkaller1: entered promiscuous mode [ 253.586533][T14290] syzkaller1: entered allmulticast mode [ 253.616205][T14290] bridge0: port 2(batadv1) entered blocking state [ 253.623692][T14290] bridge0: port 2(batadv1) entered disabled state [ 253.631395][T14290] batadv1: entered allmulticast mode [ 253.639013][T14290] batadv1: entered promiscuous mode [ 253.837022][T14314] sch_tbf: burst 0 is lower than device lo mtu (1294) ! [ 253.857069][T14310] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 253.870461][T14310] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 253.922211][T14320] x_tables: duplicate underflow at hook 2 [ 254.110572][ T3478] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 254.120678][ T3478] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 254.767351][T14361] netlink: 'syz.2.2407': attribute type 39 has an invalid length. [ 254.958577][T14368] __nla_validate_parse: 27 callbacks suppressed [ 254.958597][T14368] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2409'. [ 255.176735][T14378] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2413'. [ 255.313794][T14393] !: renamed from bond_slave_0 [ 255.624364][T14412] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2423'. [ 255.659823][T14416] bridge: RTM_NEWNEIGH with invalid ether address [ 255.743086][T14402] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2423'. [ 255.898597][ T5844] net_ratelimit: 19 callbacks suppressed [ 255.898615][ T5844] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 255.912976][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 255.961474][T14433] syzkaller0: entered promiscuous mode [ 255.967136][T14433] syzkaller0: entered allmulticast mode [ 256.173411][T14439] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2433'. [ 256.196149][T14439] netlink: 212356 bytes leftover after parsing attributes in process `syz.2.2433'. [ 256.211150][ T2111] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 256.249485][ T2111] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.284808][T14442] netlink: 64985 bytes leftover after parsing attributes in process `syz.2.2433'. [ 256.352216][ T2111] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 256.362271][ T2111] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.459097][ T2111] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 256.469210][ T2111] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.547565][ T2111] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 256.563436][ T2111] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.699782][ T5836] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 256.709396][ T5836] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 256.718270][ T5836] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 256.751546][ T5836] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 256.760014][ T5836] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 256.901719][ T2111] batadv1: left allmulticast mode [ 256.907159][ T2111] batadv1: left promiscuous mode [ 256.939831][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 256.948118][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 256.975791][T14472] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2444'. [ 256.988332][ T2111] bridge0: port 2(batadv1) entered disabled state [ 257.029518][ T2111] bridge_slave_0: left allmulticast mode [ 257.035251][ T2111] bridge_slave_0: left promiscuous mode [ 257.068518][ T2111] bridge0: port 1(bridge_slave_0) entered disabled state [ 257.109616][T14483] netlink: 'syz.2.2448': attribute type 58 has an invalid length. [ 257.133141][T14483] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2448'. [ 257.516601][T14501] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2450'. [ 257.604289][ T2111] bond7 (unregistering): (slave ip6gretap1): Releasing active interface [ 257.643875][ T2111] bond10 (unregistering): (slave ip6gretap2): Releasing active interface [ 257.659426][ T7018] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 257.668026][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 257.863246][ T2111] dvmrp0 (unregistering): left allmulticast mode [ 257.905713][ T2111] bond3 (unregistering): (slave geneve2): Releasing active interface [ 257.979236][ T128] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 257.987578][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 258.162443][ T2111] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 258.173358][ T2111] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 258.184223][ T2111] bond0 (unregistering): Released all slaves [ 258.269456][ T2111] bond1 (unregistering): (slave veth11): Releasing backup interface [ 258.279717][ T2111] bond1 (unregistering): Released all slaves [ 258.291941][ T2111] bond2 (unregistering): Released all slaves [ 258.299351][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 258.313098][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 258.400754][ T2111] bond3 (unregistering): Released all slaves [ 258.413768][ T2111] bond4 (unregistering): (slave bond5): Releasing backup interface [ 258.422450][ T2111] bond4 (unregistering): Released all slaves [ 258.512209][ T2111] bond5 (unregistering): Released all slaves [ 258.524202][ T2111] bond6 (unregistering): Released all slaves [ 258.536180][ T2111] bond7 (unregistering): Released all slaves [ 258.550051][ T2111] bond8 (unregistering): Released all slaves [ 258.637139][ T2111] bond9 (unregistering): (slave veth15): Releasing active interface [ 258.646916][ T2111] bond9 (unregistering): Released all slaves [ 258.659846][ T2111] bond10 (unregistering): Released all slaves [ 258.752815][T14515] vcan0: entered promiscuous mode [ 258.759812][T14515] vcan0: entered allmulticast mode [ 258.832025][ T2111] tipc: Disabling bearer [ 258.859793][ T5836] Bluetooth: hci2: command tx timeout [ 258.866867][ T2111] tipc: Disabling bearer [ 258.883404][ T2111] tipc: Left network mode [ 258.902978][T14456] lo speed is unknown, defaulting to 1000 [ 259.234908][T14540] netlink: 'syz.2.2457': attribute type 1 has an invalid length. [ 259.490823][T14549] 8021q: adding VLAN 0 to HW filter on device bond13 [ 259.500671][T14549] bond12: (slave bond13): making interface the new active one [ 259.509364][T14549] bond12: (slave bond13): Enslaving as an active interface with an up link [ 259.532029][T14553] xt_CT: No such helper "pptp" [ 259.799565][T14568] bond12: invalid ARP target 0.0.0.0 specified for addition [ 259.807036][T14568] bond12: option arp_ip_target: invalid value (0) [ 259.821666][T14568] bond12 (unregistering): Released all slaves [ 259.931614][T14456] chnl_net:caif_netlink_parms(): no params data found [ 260.164796][ T2111] hsr_slave_0: left promiscuous mode [ 260.172053][ T2111] hsr_slave_1: left promiscuous mode [ 260.177995][ T2111] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 260.196062][T14600] __nla_validate_parse: 5 callbacks suppressed [ 260.196081][T14600] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2469'. [ 260.202802][ T2111] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 260.226997][ T2111] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 260.248228][ T2111] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 260.270890][ T2111] veth1_macvtap: left promiscuous mode [ 260.276667][ T2111] veth0_macvtap: left promiscuous mode [ 260.283456][ T2111] veth1_vlan: left promiscuous mode [ 260.602650][T14604] IPVS: set_ctl: invalid protocol: 1 255.255.255.255:20004 [ 260.881792][ T2111] team0 (unregistering): Port device team_slave_1 removed [ 260.917107][ T2111] team0 (unregistering): Port device team_slave_0 removed [ 260.938293][ T5836] Bluetooth: hci2: command tx timeout [ 261.099661][ T5844] net_ratelimit: 11 callbacks suppressed [ 261.099676][ T5844] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 261.113737][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 261.330737][T14618] netlink: 164 bytes leftover after parsing attributes in process `syz.3.2471'. [ 261.463904][T14622] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2473'. [ 261.465084][T14627] openvswitch: netlink: IPv6 tunnel dst address is zero [ 261.507454][T14456] bridge0: port 1(bridge_slave_0) entered blocking state [ 261.545739][T14456] bridge0: port 1(bridge_slave_0) entered disabled state [ 261.579197][T14456] bridge_slave_0: entered allmulticast mode [ 261.591103][T14456] bridge_slave_0: entered promiscuous mode [ 261.609196][T14456] bridge0: port 2(bridge_slave_1) entered blocking state [ 261.622428][T14456] bridge0: port 2(bridge_slave_1) entered disabled state [ 261.641218][T14456] bridge_slave_1: entered allmulticast mode [ 261.660098][T14456] bridge_slave_1: entered promiscuous mode [ 261.797310][T14647] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2480'. [ 261.853900][T14456] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 261.894244][T14456] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 261.925934][T14647] IPv6: Can't replace route, no match found [ 262.029333][T14647] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2480'. [ 262.070683][T14647] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2480'. [ 262.107687][T14456] team0: Port device team_slave_0 added [ 262.128837][T14657] Cannot find del_set index 2 as target [ 262.131746][T14456] team0: Port device team_slave_1 added [ 262.145588][ T5844] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 262.154317][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 262.224411][T14653] bond12: option packets_per_slave: invalid value (18446744073709551615) [ 262.242092][T14653] bond12: option packets_per_slave: allowed values 0 - 65535 [ 262.265804][T14653] bond12 (unregistering): Released all slaves [ 262.350939][T14658] : renamed from hsr0 [ 262.372299][T14456] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 262.390694][T14456] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 262.446699][T14456] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 262.461487][T14456] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 262.468988][T14456] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 262.496055][T14456] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 262.572406][T14456] hsr_slave_0: entered promiscuous mode [ 262.579469][T14456] hsr_slave_1: entered promiscuous mode [ 262.585542][T14456] debugfs: 'hsr0' already exists in 'hsr' [ 262.592005][T14456] Cannot create hsr debugfs directory [ 263.020477][ T5836] Bluetooth: hci2: command tx timeout [ 263.152812][T14456] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 263.179572][ T7933] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 263.187878][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 263.202837][T14456] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 263.247812][T14456] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 263.267605][T14714] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2492'. [ 263.292914][T14456] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 263.292918][T14711] netlink: 'syz.0.2493': attribute type 4 has an invalid length. [ 263.322812][T14715] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2492'. [ 263.323799][T14711] netlink: 'syz.0.2493': attribute type 4 has an invalid length. [ 263.421665][ T1089] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 263.430426][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 263.444795][ T1037] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 263.483762][T14711] netlink: 'syz.0.2493': attribute type 11 has an invalid length. [ 263.612816][T14730] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2496'. [ 263.663895][T14730] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2496'. [ 263.713904][T14456] 8021q: adding VLAN 0 to HW filter on device bond0 [ 263.811362][T14456] 8021q: adding VLAN 0 to HW filter on device team0 [ 263.819996][T14744] netlink: 'syz.0.2497': attribute type 1 has an invalid length. [ 263.914585][T14744] bond12: entered promiscuous mode [ 263.920748][T14744] 8021q: adding VLAN 0 to HW filter on device bond12 [ 263.960786][ T1037] bridge0: port 1(bridge_slave_0) entered blocking state [ 263.968000][ T1037] bridge0: port 1(bridge_slave_0) entered forwarding state [ 264.036199][T14757] bond12: (slave bridge3): making interface the new active one [ 264.045172][T14757] bridge3: entered promiscuous mode [ 264.055030][T14757] bridge3: left promiscuous mode [ 264.195849][ T3430] bridge0: port 2(bridge_slave_1) entered blocking state [ 264.203060][ T3430] bridge0: port 2(bridge_slave_1) entered forwarding state [ 264.510551][T14782] netlink: 'syz.0.2505': attribute type 1 has an invalid length. [ 264.884243][T14456] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 264.903345][T14809] netlink: 'syz.0.2513': attribute type 3 has an invalid length. [ 264.911685][T14809] netlink: 'syz.0.2513': attribute type 2 has an invalid length. [ 264.919590][T14810] netlink: 'syz.0.2513': attribute type 3 has an invalid length. [ 264.927318][T14810] netlink: 'syz.0.2513': attribute type 2 has an invalid length. [ 265.020083][T14810] lo speed is unknown, defaulting to 1000 [ 265.103934][ T5836] Bluetooth: hci2: command tx timeout [ 265.274257][T14824] lo: entered promiscuous mode [ 265.312436][T14824] netlink: 'syz.3.2516': attribute type 2 has an invalid length. [ 265.354669][ T5844] lo speed is unknown, defaulting to 1000 [ 265.369176][ T5844] syz2: Port: 1 Link DOWN [ 265.639939][T14838] __nla_validate_parse: 12 callbacks suppressed [ 265.639959][T14838] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2518'. [ 265.668746][T14456] veth0_vlan: entered promiscuous mode [ 265.702999][T14840] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2518'. [ 265.734272][T14843] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2520'. [ 265.747140][T14456] veth1_vlan: entered promiscuous mode [ 265.830652][T14456] veth0_macvtap: entered promiscuous mode [ 265.862887][T14456] veth1_macvtap: entered promiscuous mode [ 265.890930][T14847] macvlan0: entered promiscuous mode [ 265.910268][T14847] netlink: 256 bytes leftover after parsing attributes in process `syz.0.2521'. [ 265.935671][T14456] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 266.009023][T14456] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 266.052638][ T13] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.079147][ T13] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.104485][ T13] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.142945][ T13] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.227338][T14868] ipvlan4: entered allmulticast mode [ 266.244062][T14868] batadv_slave_1: entered allmulticast mode [ 266.275223][T14868] batman_adv: batadv0: Adding interface: ipvlan4 [ 266.304241][T14868] batman_adv: batadv0: The MTU of interface ipvlan4 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 266.318767][T14879] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2530'. [ 266.357011][T14880] netlink: 'syz.4.2531': attribute type 8 has an invalid length. [ 266.376876][T14868] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 266.408366][T14868] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 266.435047][T14868] batman_adv: batadv0: Interface activated: ipvlan4 [ 266.472722][T14878] tipc: New replicast peer: 255.255.255.255 [ 266.491889][T14878] tipc: Enabled bearer , priority 10 [ 266.703308][T14897] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2535'. [ 266.745893][ T7929] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 266.769087][ T7929] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 266.900479][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 266.913083][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 267.182966][T14931] net_ratelimit: 10 callbacks suppressed [ 267.182982][T14931] openvswitch: netlink: IP tunnel dst address not specified [ 267.278122][T14935] netlink: 'syz.3.2542': attribute type 16 has an invalid length. [ 267.295040][T14935] netlink: 'syz.3.2542': attribute type 17 has an invalid length. [ 267.295335][T14936] netlink: 'syz.5.2546': attribute type 17 has an invalid length. [ 267.314336][T14936] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2546'. [ 267.317503][T14930] bridge0: port 3(team0) entered disabled state [ 267.325926][T14936] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2546'. [ 267.347961][T14930] bridge0: port 1(bridge_slave_0) entered disabled state [ 267.361574][T14930] bridge0: port 2(bridge_slave_1) entered disabled state [ 267.446534][T14935] lo: left promiscuous mode [ 267.497251][T14935] bridge0: port 3(team0) entered blocking state [ 267.503697][T14935] bridge0: port 3(team0) entered forwarding state [ 267.554972][T14935] bridge0: port 1(bridge_slave_0) entered blocking state [ 267.562209][T14935] bridge0: port 1(bridge_slave_0) entered forwarding state [ 267.573553][ T5907] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 267.581987][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 267.592137][ T5962] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 267.600532][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 267.613168][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 267.613818][T14935] bridge0: port 2(bridge_slave_1) entered blocking state [ 267.621586][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 267.628636][T14935] bridge0: port 2(bridge_slave_1) entered forwarding state [ 267.806664][T14935] veth1_macvtap: entered promiscuous mode [ 267.841041][T14935] veth3: left allmulticast mode [ 267.853305][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 267.862202][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 267.878395][T14935] gretap1: left promiscuous mode [ 267.883506][T14935] gretap1: left allmulticast mode [ 267.891545][T14935] vlan2: left promiscuous mode [ 267.896451][T14935] geneve1: left promiscuous mode [ 267.904127][T14935] vlan2: left allmulticast mode [ 267.910194][T14935] geneve1: left allmulticast mode [ 267.917299][T14935] bond1: left promiscuous mode [ 267.922250][T14935] bridge2: left promiscuous mode [ 267.970415][T14935] 8021q: adding VLAN 0 to HW filter on device bond4 [ 267.977871][T14935] A link change request failed with some changes committed already. Interface t may have been left with an inconsistent configuration, please check. [ 268.045857][ T5914] lo speed is unknown, defaulting to 1000 [ 268.053776][ T5914] syz2: Port: 1 Link ACTIVE [ 268.089180][ T5984] tipc: Node number set to 1873328370 [ 268.199606][T14965] tipc: Enabling of bearer rejected, failed to enable media [ 268.404955][T14979] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2555'. [ 268.848760][T15010] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 269.276630][T15034] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2572'. [ 269.687501][T15060] syzkaller0: entered promiscuous mode [ 269.695231][T15060] syzkaller0: entered allmulticast mode [ 269.787214][T15068] bond0: entered promiscuous mode [ 269.792887][T15068] bond_slave_0: entered promiscuous mode [ 269.800148][T15068] bond_slave_1: entered promiscuous mode [ 269.817861][ T5844] syz1: Port: 1 Link DOWN [ 269.839242][T15068] ip6t_srh: unknown srh invflags 4000 [ 269.857186][T15068] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input8 [ 269.924462][T15021] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 269.962296][T15076] validate_nla: 1 callbacks suppressed [ 269.962316][T15076] netlink: 'syz.3.2587': attribute type 4 has an invalid length. [ 270.018791][T15079] netlink: 'syz.2.2584': attribute type 1 has an invalid length. [ 270.159584][T15085] ipt_REJECT: TCP_RESET invalid for non-tcp [ 270.447877][T15110] netlink: 'syz.0.2597': attribute type 1 has an invalid length. [ 270.464650][T15109] xt_hashlimit: size too large, truncated to 1048576 [ 270.525959][T15110] 8021q: adding VLAN 0 to HW filter on device bond13 [ 270.586433][T15112] bridge0: port 3(team0) entered disabled state [ 270.629705][T15127] netlink: 'syz.3.2598': attribute type 1 has an invalid length. [ 270.672184][T15127] netlink: 'syz.3.2598': attribute type 16 has an invalid length. [ 270.695733][T15112] bridge0: port 1(bridge_slave_0) entered disabled state [ 270.724647][T15127] netlink: 'syz.3.2598': attribute type 17 has an invalid length. [ 270.730450][T15112] bridge0: port 2(bridge_slave_1) entered disabled state [ 270.808069][T15120] bond13: up delay (35976) is not a multiple of miimon (100), value rounded to 35900 ms [ 270.823455][T15120] bond13: entered allmulticast mode [ 270.844155][T15110] bond13: (slave ip6gretap2): Enslaving as an active interface with an up link [ 270.910438][T15127] bond0: left promiscuous mode [ 270.915256][T15127] bond_slave_0: left promiscuous mode [ 270.923091][T15127] bond_slave_1: left promiscuous mode [ 270.942352][T15127] 8021q: adding VLAN 0 to HW filter on device bond0 [ 270.974508][T15127] bridge0: port 1(bridge_slave_0) entered blocking state [ 270.981701][T15127] bridge0: port 1(bridge_slave_0) entered forwarding state [ 270.990867][T15143] __nla_validate_parse: 7 callbacks suppressed [ 270.990884][T15143] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2604'. [ 270.994020][T15127] bridge0: port 2(bridge_slave_1) entered blocking state [ 271.013254][T15127] bridge0: port 2(bridge_slave_1) entered forwarding state [ 271.118000][ T7933] bridge0: port 3(team0) entered blocking state [ 271.124435][ T7933] bridge0: port 3(team0) entered forwarding state [ 271.407169][T15160] x_tables: duplicate underflow at hook 1 [ 271.466973][T15163] xt_limit: Overflow, try lower: 604147548/4200216962 [ 271.485325][T15163] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2610'. [ 271.505987][T15163] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 271.575882][T15163] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 271.914027][T15197] netlink: 'syz.3.2621': attribute type 1 has an invalid length. [ 271.981597][T15204] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2620'. [ 271.991225][T15197] 8021q: adding VLAN 0 to HW filter on device bond8 [ 272.046028][T15205] bond8: (slave veth11): Enslaving as an active interface with a down link [ 272.213735][T15217] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2624'. [ 272.252317][T15217] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2624'. [ 272.415737][T15239] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2628'. [ 272.540729][T15243] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2631'. [ 272.570819][T15243] syzkaller0: entered promiscuous mode [ 272.580578][T15243] syzkaller0: entered allmulticast mode [ 272.726988][T15256] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2638'. [ 272.813786][T15263] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2640'. [ 272.841392][T15265] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2641'. [ 273.008238][T15273] netlink: 'syz.0.2643': attribute type 11 has an invalid length. [ 273.021390][ T5914] net_ratelimit: 61 callbacks suppressed [ 273.021405][ T5914] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 273.035422][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 273.043799][ T5907] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 273.052111][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 273.071361][T15280] netlink: 'syz.2.2642': attribute type 10 has an invalid length. [ 273.085148][T15280] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 273.581210][T15313] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 273.598795][T15313] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 273.759951][T15322] tipc: Enabled bearer , priority 0 [ 273.770812][T15319] syzkaller0: entered promiscuous mode [ 273.771179][T15323] netlink: 'syz.0.2656': attribute type 10 has an invalid length. [ 273.777359][T15319] syzkaller0: entered allmulticast mode [ 273.871555][T15323] batman_adv: batadv0: Adding interface: netdevsim0 [ 273.888371][T15323] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 273.944345][T15323] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active [ 273.979237][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 273.988191][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 274.026903][T15319] tipc: Resetting bearer [ 274.129667][T15319] tipc: Disabling bearer [ 274.219208][ T7933] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 274.227594][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 274.298921][ T2111] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 274.307209][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 274.337986][T15344] bridge9: entered promiscuous mode [ 274.344505][T15344] bridge9: entered allmulticast mode [ 274.428287][ T5914] IPVS: starting estimator thread 0... [ 274.528270][T15361] IPVS: using max 30 ests per chain, 72000 per kthread [ 274.574201][T15367] IPVS: set_ctl: invalid protocol: 50 224.0.0.1:20003 [ 274.633227][T15370] syzkaller1: entered promiscuous mode [ 274.635144][T15374] netlink: 'syz.4.2672': attribute type 1 has an invalid length. [ 274.651206][T15370] syzkaller1: entered allmulticast mode [ 274.678744][T15374] NCSI netlink: No device for ifindex 131092 [ 275.301241][T15419] syzkaller0: entered promiscuous mode [ 275.306750][T15419] syzkaller0: entered allmulticast mode [ 275.916063][T15461] validate_nla: 3 callbacks suppressed [ 275.916079][T15461] netlink: 'syz.5.2690': attribute type 1 has an invalid length. [ 276.332171][T15482] syzkaller0: entered promiscuous mode [ 276.351431][T15482] syzkaller0: entered allmulticast mode [ 276.561503][T15494] netlink: 'syz.4.2699': attribute type 2 has an invalid length. [ 276.601646][T15494] 9: entered promiscuous mode [ 276.742306][T15504] xt_recent: Unsupported userspace flags (000000b1) [ 276.880198][T15511] netlink: 'syz.4.2702': attribute type 1 has an invalid length. [ 276.919852][T15511] 8021q: adding VLAN 0 to HW filter on device bond13 [ 277.102425][T15523] bond13: (slave geneve2): making interface the new active one [ 277.140830][T15523] bond13: (slave geneve2): Enslaving as an active interface with an up link [ 277.182958][ T1089] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.200910][ T1089] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.219145][ T1089] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.237606][ T1089] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.457042][T15541] syzkaller0: entered promiscuous mode [ 277.462629][T15541] syzkaller0: entered allmulticast mode [ 277.656635][T15556] netlink: 'syz.3.2712': attribute type 7 has an invalid length. [ 277.725937][T15556] netlink: 'syz.3.2712': attribute type 7 has an invalid length. [ 277.759791][T15556] netlink: 'syz.3.2712': attribute type 7 has an invalid length. [ 277.782642][T15556] netlink: 'syz.3.2712': attribute type 7 has an invalid length. [ 277.931115][T15556] netlink: 'syz.3.2712': attribute type 7 has an invalid length. [ 277.961804][T15556] netlink: 'syz.3.2712': attribute type 7 has an invalid length. [ 277.997645][T15556] netlink: 'syz.3.2712': attribute type 7 has an invalid length. [ 278.060768][T15577] IPVS: set_ctl: invalid protocol: 103 172.20.20.187:20003 [ 278.614654][T15611] __nla_validate_parse: 10 callbacks suppressed [ 278.614673][T15611] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2723'. [ 278.643145][T15611] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2723'. [ 278.880708][T15624] batman_adv: batadv0: Adding interface: dummy0 [ 278.889689][T15624] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 278.940066][T15624] batman_adv: batadv0: Interface activated: dummy0 [ 279.033053][T15624] net_ratelimit: 12 callbacks suppressed [ 279.033075][T15624] batadv0: mtu less than device minimum [ 279.057024][T15624] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 279.068971][T15624] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 279.072306][T15636] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2725'. [ 279.080657][T15624] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 279.099903][T15624] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 279.110983][T15624] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 279.122006][T15624] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 279.133045][T15624] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 279.144284][T15624] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 279.155320][T15624] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 279.247061][T15634] dvmrp0: entered allmulticast mode [ 279.495100][T15654] bond14: entered promiscuous mode [ 279.560587][T15654] 8021q: adding VLAN 0 to HW filter on device bond14 [ 279.630555][T15663] bond14: (slave bridge10): making interface the new active one [ 279.642335][T15671] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2734'. [ 279.652002][T15663] bridge10: entered promiscuous mode [ 279.658767][T15663] bond14: (slave bridge10): Enslaving as an active interface with an up link [ 279.686410][T15671] vlan4: entered allmulticast mode [ 279.692014][T15671] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 279.893078][T15676] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 280.104488][T15702] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2740'. [ 280.215213][T15702] ip6gre1: entered promiscuous mode [ 280.233793][T15702] ip6gre1: entered allmulticast mode [ 280.293523][T15713] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 280.778852][T15742] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2749'. [ 280.831310][T15745] syzkaller0: create flow: hash 3409046212 index 1 [ 280.905173][T15751] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2751'. [ 280.927597][ T148] syzkaller0: tun_net_xmit 76 [ 280.935124][ T148] syzkaller0: tun_net_xmit 48 [ 280.948761][ T10] syzkaller0: tun_net_xmit 76 [ 280.966288][T15751] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2751'. [ 280.977635][T15742] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2749'. [ 280.996236][ T10] syzkaller0: tun_net_xmit 76 [ 281.003703][T15751] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2751'. [ 281.297324][T15739] syzkaller0: delete flow: hash 3409046212 index 1 [ 281.659849][ T5836] Bluetooth: hci2: command tx timeout [ 282.839772][T15788] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 282.863660][T15788] gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 282.880961][T15788] gretap2: entered promiscuous mode [ 282.881596][T15797] validate_nla: 29 callbacks suppressed [ 282.881612][T15797] netlink: 'syz.0.2760': attribute type 21 has an invalid length. [ 282.886206][T15788] gretap2: entered allmulticast mode [ 283.124267][T15803] block nbd1: Unsupported socket: should be TCP or UNIX. [ 283.399386][T15827] netlink: 'syz.5.2769': attribute type 1 has an invalid length. [ 283.407179][T15827] netlink: 'syz.5.2769': attribute type 1 has an invalid length. [ 283.536944][T15833] nbd: socks must be embedded in a SOCK_ITEM attr [ 283.774033][T15848] __nla_validate_parse: 4 callbacks suppressed [ 283.774052][T15848] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2776'. [ 283.808562][T15848] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2776'. [ 283.828035][T15848] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2776'. [ 283.855109][T15848] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2776'. [ 283.871874][T15848] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2776'. [ 283.875145][T15854] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2778'. [ 283.887408][T15848] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2776'. [ 283.900563][T15848] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2776'. [ 283.910537][T15848] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2776'. [ 283.922488][T15848] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2776'. [ 284.105893][T15866] syzkaller0: entered promiscuous mode [ 284.112179][T15866] syzkaller0: entered allmulticast mode [ 284.131331][T15873] netlink: 'syz.2.2783': attribute type 1 has an invalid length. [ 285.037775][T15931] netlink: 'syz.0.2796': attribute type 1 has an invalid length. [ 285.199626][T15937] bond14: (slave geneve2): making interface the new active one [ 285.216968][T15937] bond14: (slave geneve2): Enslaving as an active interface with an up link [ 285.658389][ T5836] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 286.613219][ T7018] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 20004 - 0 [ 286.738690][ T7018] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 20004 - 0 [ 286.760397][ T7018] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 20004 - 0 [ 286.963340][T15972] netlink: 'syz.3.2803': attribute type 1 has an invalid length. [ 287.060966][ T5961] hid-generic 0005:0C49:1012.0001: unknown main item tag 0x1 [ 287.064678][T15972] bond10: (slave bridge7): making interface the new active one [ 287.079674][T15981] net_ratelimit: 10 callbacks suppressed [ 287.079693][T15981] openvswitch: netlink: Missing key (keys=40, expected=80) [ 287.085887][ T5961] hid-generic 0005:0C49:1012.0001: ignoring exceeding usage max [ 287.096885][T15972] bond10: (slave bridge7): Enslaving as an active interface with an up link [ 287.110922][T15981] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 287.139913][ T5961] hid-generic 0005:0C49:1012.0001: unknown main item tag 0x4 [ 287.154931][ T5961] hid-generic 0005:0C49:1012.0001: unknown main item tag 0x5 [ 287.194796][ T5961] hid-generic 0005:0C49:1012.0001: reserved main item tag 0xd [ 287.213318][ T5961] hid-generic 0005:0C49:1012.0001: item fetching failed at offset 31/106 [ 287.234218][ T5961] hid-generic 0005:0C49:1012.0001: probe with driver hid-generic failed with error -22 [ 287.451802][T16004] netlink: 'syz.2.2811': attribute type 32 has an invalid length. [ 287.580034][T16009] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not security [ 287.585282][T16014] netlink: 'syz.3.2814': attribute type 12 has an invalid length. [ 287.744911][T16020] gtp0: entered promiscuous mode [ 287.782818][T16020] gtp0: entered allmulticast mode [ 288.065700][ T3478] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 288.076548][T16038] netlink: 'syz.2.2819': attribute type 5 has an invalid length. [ 288.088167][ T3478] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 288.949886][T16071] netlink: zone id is out of range [ 288.955041][T16071] netlink: zone id is out of range [ 288.978531][T16071] netlink: zone id is out of range [ 288.987789][T16071] netlink: zone id is out of range [ 289.006944][T16071] netlink: zone id is out of range [ 289.037791][T16071] netlink: zone id is out of range [ 289.055900][T16071] netlink: zone id is out of range [ 289.071599][T16071] netlink: zone id is out of range [ 289.268292][T16096] netlink: 'syz.3.2837': attribute type 3 has an invalid length. [ 289.645721][T16117] ip6gre1: left allmulticast mode [ 289.661326][T16117] gretap2: left allmulticast mode [ 289.674477][T16117] gtp0: left allmulticast mode [ 289.866933][T16140] __nla_validate_parse: 138 callbacks suppressed [ 289.866955][T16140] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2847'. [ 289.889365][T16140] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2847'. [ 289.999986][T16142] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2849'. [ 303.197122][T16181] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2864'. [ 303.207314][T16183] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2865'. [ 303.221516][T16180] netlink: 'syz.4.2863': attribute type 1 has an invalid length. [ 303.227523][T16183] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2865'. [ 303.435039][T16195] xt_CT: You must specify a L4 protocol and not use inversions on it [ 303.536334][T16204] syzkaller0: entered promiscuous mode [ 303.569411][T16204] syzkaller0: entered allmulticast mode [ 303.745323][T16204] netlink: 11 bytes leftover after parsing attributes in process `syz.4.2869'. [ 303.778604][T16204] netlink: 11 bytes leftover after parsing attributes in process `syz.4.2869'. [ 303.792236][T16204] netlink: 11 bytes leftover after parsing attributes in process `syz.4.2869'. [ 303.821994][T16204] netlink: 11 bytes leftover after parsing attributes in process `syz.4.2869'. [ 303.876428][T16204] tipc: Enabled bearer , priority 0 [ 303.889863][T16201] tipc: Resetting bearer [ 303.909084][T16183] infiniband sy: set active [ 303.913936][T16183] infiniband sy: added bond_slave_0 [ 303.984531][T16201] tipc: Disabling bearer [ 304.042278][T16183] RDS/IB: sy: added [ 304.047218][T16183] smc: adding ib device sy with port count 1 [ 304.055430][T16183] smc: ib device sy port 1 has no pnetid [ 304.072049][T16230] gtp0: entered promiscuous mode [ 304.077147][T16230] gtp0: entered allmulticast mode [ 304.232617][T16240] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.2877'. [ 304.867628][ T5832] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 304.877938][ T5832] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 304.886418][ T5832] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 304.896444][ T5832] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 304.905081][ T5832] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 305.129855][T16272] lo speed is unknown, defaulting to 1000 [ 305.155156][T16289] netlink: 'syz.4.2886': attribute type 1 has an invalid length. [ 305.401755][T16300] netlink: 1 bytes leftover after parsing attributes in process `syz.0.2888'. [ 305.523322][ T5832] Bluetooth: hci2: link tx timeout [ 305.532698][ T5832] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 305.543940][ T5832] Bluetooth: hci2: link tx timeout [ 305.549563][ T5832] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 305.557428][ T5832] Bluetooth: hci2: link tx timeout [ 305.562843][ T5832] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 305.564077][T16308] netlink: 280 bytes leftover after parsing attributes in process `syz.4.2889'. [ 305.589109][T16308] net_ratelimit: 8 callbacks suppressed [ 305.589127][T16308] openvswitch: netlink: Flow key attr not present in new flow. [ 305.982234][T16322] netlink: 'syz.5.2894': attribute type 1 has an invalid length. [ 305.982885][T16272] chnl_net:caif_netlink_parms(): no params data found [ 306.042437][T16322] 8021q: adding VLAN 0 to HW filter on device bond1 [ 306.283074][T16272] bridge0: port 1(bridge_slave_0) entered blocking state [ 306.318669][T16272] bridge0: port 1(bridge_slave_0) entered disabled state [ 306.326155][T16272] bridge_slave_0: entered allmulticast mode [ 306.366976][T16272] bridge_slave_0: entered promiscuous mode [ 306.382395][T16272] bridge0: port 2(bridge_slave_1) entered blocking state [ 306.411687][T16272] bridge0: port 2(bridge_slave_1) entered disabled state [ 306.428802][T16272] bridge_slave_1: entered allmulticast mode [ 306.455700][T16272] bridge_slave_1: entered promiscuous mode [ 306.639181][T16272] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 306.695469][T16272] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 306.803897][T16272] team0: Port device team_slave_0 added [ 306.832551][T16272] team0: Port device team_slave_1 added [ 306.940679][ T5832] Bluetooth: hci5: command tx timeout [ 307.000094][T16272] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 307.007094][T16272] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 307.051035][ T30] audit: type=1800 audit(1767643325.258:2): pid=16370 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2908" name="memory.events" dev="tmpfs" ino=409 res=0 errno=0 [ 307.051054][T16272] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 307.065844][T16272] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 307.111786][ T30] audit: type=1804 audit(1767643325.258:3): pid=16370 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.2908" name="/newroot/76/memory.events" dev="tmpfs" ino=409 res=1 errno=0 [ 307.127319][T16272] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 307.187319][T16272] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 307.233439][T16370] netlink: 'syz.5.2908': attribute type 13 has an invalid length. [ 307.509807][T16272] hsr_slave_0: entered promiscuous mode [ 307.540573][T16272] hsr_slave_1: entered promiscuous mode [ 307.559584][T16272] debugfs: 'hsr0' already exists in 'hsr' [ 307.575570][T16272] Cannot create hsr debugfs directory [ 307.583470][ T5832] Bluetooth: hci2: command 0x0406 tx timeout [ 308.080687][T16416] sctp: [Deprecated]: syz.4.2919 (pid 16416) Use of int in maxseg socket option. [ 308.080687][T16416] Use struct sctp_assoc_value instead [ 308.117029][T16422] netlink: 'syz.3.2918': attribute type 1 has an invalid length. [ 309.032151][ T5836] Bluetooth: hci5: command tx timeout [ 309.360988][T16422] workqueue: Failed to create a rescuer kthread for wq "bond11": -EINTR [ 309.498705][T16437] netlink: 'syz.5.2922': attribute type 1 has an invalid length. [ 309.643358][T16437] 8021q: adding VLAN 0 to HW filter on device bond2 [ 309.663188][T16443] bond2: (slave veth0_to_bond): making interface the new active one [ 309.673090][T16443] bond2: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 309.775214][T16434] 8021q: adding VLAN 0 to HW filter on device bond3 [ 309.791040][T16454] __nla_validate_parse: 8 callbacks suppressed [ 309.791058][T16454] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2926'. [ 309.800531][T16434] bond2: (slave bond3): Enslaving as an active interface with a down link [ 309.945503][T16460] netlink: 'syz.3.2928': attribute type 15 has an invalid length. [ 309.976285][T16272] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 309.989157][T16460] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2928'. [ 310.000669][T16465] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 310.010771][T16272] netdevsim netdevsim2 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 310.011830][T16466] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 310.061799][T16460] netlink: 'syz.3.2928': attribute type 15 has an invalid length. [ 310.087872][T16460] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2928'. [ 310.131259][T16272] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 310.154515][T16272] netdevsim netdevsim2 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 310.179346][T16476] netlink: zone id is out of range [ 310.302195][T16272] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 310.329929][T16272] netdevsim netdevsim2 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 310.403699][T16272] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 310.438324][T16272] netdevsim netdevsim2 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 310.467545][T16499] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2935'. [ 310.540036][T16499] macvtap1: entered promiscuous mode [ 310.545480][T16499] macvtap1: entered allmulticast mode [ 310.567475][T16499] veth1_vlan: entered allmulticast mode [ 310.838860][T16515] pim6reg1: entered promiscuous mode [ 310.844521][T16515] pim6reg1: entered allmulticast mode [ 310.888341][T16517] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input9 [ 311.079091][T16272] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 311.099966][ T5836] Bluetooth: hci5: command tx timeout [ 311.146726][T16272] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 311.191650][T16272] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 311.232827][T16539] netlink: 'syz.5.2949': attribute type 12 has an invalid length. [ 311.242591][T16529] lo speed is unknown, defaulting to 1000 [ 311.242742][T16272] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 311.261567][T16539] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2949'. [ 311.385437][ T3430] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 311.386034][T16547] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2950'. [ 311.417976][T16546] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2950'. [ 311.428244][ T3430] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 311.437002][ T3430] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 311.448111][ T3430] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 311.450476][T16559] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2951'. [ 311.639117][T16272] 8021q: adding VLAN 0 to HW filter on device bond0 [ 311.701833][T16272] 8021q: adding VLAN 0 to HW filter on device team0 [ 311.736885][ T3735] bridge0: port 1(bridge_slave_0) entered blocking state [ 311.744094][ T3735] bridge0: port 1(bridge_slave_0) entered forwarding state [ 311.772111][ T3735] bridge0: port 2(bridge_slave_1) entered blocking state [ 311.779292][ T3735] bridge0: port 2(bridge_slave_1) entered forwarding state [ 312.133687][T16590] netlink: zone id is out of range [ 312.141841][T16591] netlink: zone id is out of range [ 312.146983][T16591] netlink: del zone limit has 4 unknown bytes [ 312.158348][T16590] netlink: del zone limit has 4 unknown bytes [ 312.437234][T16612] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2961'. [ 312.543653][T16272] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 312.728636][T16624] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2967'. [ 312.732302][T16272] veth0_vlan: entered promiscuous mode [ 312.796986][T16624] bridge0: port 1(bridge_slave_0) entered disabled state [ 312.925735][T16624] bridge_slave_0 (unregistering): left allmulticast mode [ 312.940616][T16624] bridge_slave_0 (unregistering): left promiscuous mode [ 312.947923][T16624] bridge0: port 1(bridge_slave_0) entered disabled state [ 313.133814][T16629] 8021q: adding VLAN 0 to HW filter on device bond4 [ 313.170395][T16272] veth1_vlan: entered promiscuous mode [ 313.179458][ T5836] Bluetooth: hci5: command tx timeout [ 313.309352][T16272] veth0_macvtap: entered promiscuous mode [ 313.347180][T16272] veth1_macvtap: entered promiscuous mode [ 313.626694][T16272] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 313.696254][T16272] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 313.764770][ T4342] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 313.788653][ T4342] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 313.812053][T16678] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 313.844131][ T4342] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 313.934082][ T4342] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.256247][ T3430] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 314.271673][ T3430] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 314.401891][ T7020] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 314.430026][ T7020] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 314.601244][T16727] netlink: 'syz.0.2994': attribute type 21 has an invalid length. [ 314.628572][T16728] netlink: 'syz.4.2995': attribute type 13 has an invalid length. [ 314.670604][T16728] macvtap0: entered allmulticast mode [ 314.695824][T16728] macvtap0: refused to change device tx_queue_len [ 314.790595][T16730] nbd1: detected capacity change from 0 to 127 [ 314.809946][ T5836] block nbd1: Receive control failed (result -104) [ 314.908949][T16746] xt_l2tp: wrong L2TP version: 0 [ 315.121820][ T5832] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 315.131839][ T5832] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 315.156263][ T5832] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 315.165442][ T5832] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 315.173483][ T5832] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 315.463696][T16777] __nla_validate_parse: 5 callbacks suppressed [ 315.463715][T16777] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3006'. [ 315.479467][T16777] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 315.554396][T16780] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3005'. [ 315.574016][T16783] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3008'. [ 315.615754][T16784] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 316.765163][T16780] netlink: 'syz.2.3005': attribute type 1 has an invalid length. [ 316.773204][T16780] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3005'. [ 316.793236][T16757] lo speed is unknown, defaulting to 1000 [ 316.940210][T16793] delete_channel: no stack [ 316.962455][T16798] netlink: 'syz.2.3011': attribute type 1 has an invalid length. [ 316.967087][T16802] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3012'. [ 317.263275][ T5832] Bluetooth: hci0: command tx timeout [ 317.444373][T16822] Bluetooth: hci2: Opcode 0x0401 failed: -4 [ 317.692605][T16757] chnl_net:caif_netlink_parms(): no params data found [ 317.919722][T16859] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3029'. [ 317.979760][T16757] bridge0: port 1(bridge_slave_0) entered blocking state [ 318.002210][T16757] bridge0: port 1(bridge_slave_0) entered disabled state [ 318.019087][T16757] bridge_slave_0: entered allmulticast mode [ 318.030011][T16757] bridge_slave_0: entered promiscuous mode [ 318.053616][T16757] bridge0: port 2(bridge_slave_1) entered blocking state [ 318.064820][T16870] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3032'. [ 318.079199][T16757] bridge0: port 2(bridge_slave_1) entered disabled state [ 318.096245][T16757] bridge_slave_1: entered allmulticast mode [ 318.108094][T16757] bridge_slave_1: entered promiscuous mode [ 318.215555][T16757] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 318.241702][T16757] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 318.316559][T16880] bond5: (slave lo): Device is not bonding slave [ 318.336380][T16880] bond5: option active_slave: invalid value (lo) [ 318.355590][T16880] bond5 (unregistering): Released all slaves [ 318.466098][T16757] team0: Port device team_slave_0 added [ 318.507546][T16757] team0: Port device team_slave_1 added [ 318.596538][T16894] netlink: 'syz.2.3040': attribute type 7 has an invalid length. [ 318.611772][T16757] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 318.618902][T16757] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 318.626758][T16894] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3040'. [ 318.645606][T16757] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 318.739514][T16757] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 318.758208][T16757] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 318.791726][T16757] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 318.803922][T16899] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3041'. [ 318.882182][T16899] chnl_net:caif_netlink_parms(): no params data found [ 318.956510][T16912] netlink: 'syz.4.3046': attribute type 1 has an invalid length. [ 318.993385][T16757] hsr_slave_0: entered promiscuous mode [ 319.021845][T16757] hsr_slave_1: entered promiscuous mode [ 319.036794][T16757] debugfs: 'hsr0' already exists in 'hsr' [ 319.046079][T16917] netlink: 'syz.2.3045': attribute type 1 has an invalid length. [ 319.053380][T16757] Cannot create hsr debugfs directory [ 319.078116][T16917] netlink: 228 bytes leftover after parsing attributes in process `syz.2.3045'. [ 319.338445][ T5832] Bluetooth: hci0: command tx timeout [ 319.508413][ T5832] Bluetooth: hci2: command 0x0406 tx timeout [ 319.600535][T16948] netlink: 'syz.3.3055': attribute type 12 has an invalid length. [ 319.609517][T16949] netlink: 'syz.3.3055': attribute type 12 has an invalid length. [ 319.701277][T16757] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 319.713169][T16757] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 319.849384][T16757] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 319.868338][T16757] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 319.927210][T16971] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 319.975927][T16757] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 320.008227][T16757] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 320.039862][T16970] netlink: 'syz.5.3062': attribute type 64 has an invalid length. [ 320.066682][T16970] vxcan1: tx address claim with different name [ 320.069757][T16977] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 320.082697][T16976] bond12: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 320.105768][T16976] bond12: (slave lo): Enslaving as a backup interface with an up link [ 320.154758][T16976] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 320.171270][ T5984] lo speed is unknown, defaulting to 1000 [ 320.186702][T16986] netlink: 'syz.2.3066': attribute type 75 has an invalid length. [ 320.210000][T16757] batman_adv: batadv0: Removing interface: netdevsim0 [ 320.251336][ T5878] lo speed is unknown, defaulting to 1000 [ 320.257170][ T128] lo speed is unknown, defaulting to 1000 [ 320.482072][T16996] __nla_validate_parse: 7 callbacks suppressed [ 320.482091][T16996] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3071'. [ 320.517413][T17000] netlink: 'syz.2.3072': attribute type 1 has an invalid length. [ 320.546936][T16757] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 320.667444][T16757] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 320.687589][T16757] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 320.732384][T16757] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 320.814220][T17026] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3079'. [ 320.825322][T17026] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3079'. [ 320.835078][T17026] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3079'. [ 320.844370][T17026] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3079'. [ 320.935961][T17030] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3080'. [ 321.418407][ T5832] Bluetooth: hci0: command tx timeout [ 321.910157][T17071] netlink: 60 bytes leftover after parsing attributes in process `syz.5.3087'. [ 321.953719][T16757] 8021q: adding VLAN 0 to HW filter on device bond0 [ 321.984680][T16757] 8021q: adding VLAN 0 to HW filter on device team0 [ 322.000350][ T148] bridge0: port 1(bridge_slave_0) entered blocking state [ 322.007531][ T148] bridge0: port 1(bridge_slave_0) entered forwarding state [ 322.099474][ T148] bridge0: port 2(bridge_slave_1) entered blocking state [ 322.106674][ T148] bridge0: port 2(bridge_slave_1) entered forwarding state [ 322.323543][T17086] SET target dimension over the limit! [ 322.337315][T17080] netlink: 340 bytes leftover after parsing attributes in process `syz.4.3090'. [ 322.356879][T17086] af_packet: tpacket_rcv: packet too big, clamped from 39 to 4294967272. macoff=96 [ 322.546158][T17101] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3097'. [ 322.558989][T17101] netlink: 'syz.4.3097': attribute type 13 has an invalid length. [ 322.577111][T17101] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3097'. [ 322.607358][T17101] netlink: 'syz.4.3097': attribute type 13 has an invalid length. [ 322.624288][T16757] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 322.772306][T16757] veth0_vlan: entered promiscuous mode [ 322.806397][T16757] veth1_vlan: entered promiscuous mode [ 322.881494][T16757] veth0_macvtap: entered promiscuous mode [ 322.897575][T17117] netlink: 'syz.2.3102': attribute type 2 has an invalid length. [ 322.914287][T16757] veth1_macvtap: entered promiscuous mode [ 322.977493][T16757] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 322.978525][T17120] openvswitch: netlink: Multiple metadata blocks provided [ 323.015720][T16757] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 323.025568][T17121] netlink: 'syz.3.3104': attribute type 11 has an invalid length. [ 323.060846][ T3735] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.109461][ T3735] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.192694][ T3735] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.221157][T17138] netlink: zone id is out of range [ 323.243615][ T3735] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.250323][T17142] netlink: 'syz.5.3109': attribute type 11 has an invalid length. [ 323.352634][ T4342] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 323.379640][ T4342] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 323.426478][T17145] team0: Device ip6gre2 is of different type [ 323.501956][ T5832] Bluetooth: hci0: command tx timeout [ 323.533884][ T2111] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 323.551715][ T2111] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 323.764410][T17164] bond16: option packets_per_slave: invalid value (18446744073709551615) [ 323.848060][T17164] bond16: option packets_per_slave: allowed values 0 - 65535 [ 323.882017][T17164] bond16 (unregistering): Released all slaves [ 323.952390][ T5886] IPVS: starting estimator thread 0... [ 324.068415][T17188] IPVS: using max 35 ests per chain, 84000 per kthread [ 324.413596][T17208] tipc: Started in network mode [ 324.451635][T17208] tipc: Node identity ea5b5ff9d2b9, cluster identity 4711 [ 324.479383][T17208] tipc: Enabled bearer , priority 0 [ 324.512852][ T5836] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 324.522474][ T5836] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 324.531144][ T5836] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 324.542112][ T5836] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 324.568466][ T5836] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 324.748354][T17212] syzkaller0: entered promiscuous mode [ 324.754019][T17212] syzkaller0: entered allmulticast mode [ 324.764655][T17212] tipc: Resetting bearer [ 324.810892][T17207] tipc: Resetting bearer [ 324.821046][T17235] xt_HMARK: proto mask must be zero with L3 mode [ 326.179721][T17207] tipc: Disabling bearer [ 326.194177][T17237] bridge11: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 326.304995][ T5961] tipc: Node number set to 954359801 [ 326.321876][T17214] lo speed is unknown, defaulting to 1000 [ 326.357912][T17242] bond1: entered promiscuous mode [ 326.363757][T17242] bond1: entered allmulticast mode [ 326.370491][T17242] 8021q: adding VLAN 0 to HW filter on device bond1 [ 326.387426][T17251] __nla_validate_parse: 41 callbacks suppressed [ 326.387444][T17251] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3134'. [ 326.619144][ T5836] Bluetooth: hci1: command tx timeout [ 326.676986][T17267] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3137'. [ 326.689234][T17267] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3137'. [ 326.827633][T17275] mac80211_hwsim hwsim38 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 326.926843][T17272] netlink: 284 bytes leftover after parsing attributes in process `syz.2.3140'. [ 327.027176][T17214] chnl_net:caif_netlink_parms(): no params data found [ 327.156619][T17292] ipvlan0: mtu less than device minimum [ 327.243384][T17296] openvswitch: netlink: IP tunnel dst address not specified [ 327.311332][T17214] bridge0: port 1(bridge_slave_0) entered blocking state [ 327.321072][T17214] bridge0: port 1(bridge_slave_0) entered disabled state [ 327.328644][T17214] bridge_slave_0: entered allmulticast mode [ 327.337871][T17214] bridge_slave_0: entered promiscuous mode [ 327.347661][T17214] bridge0: port 2(bridge_slave_1) entered blocking state [ 327.380947][T17306] netlink: 10 bytes leftover after parsing attributes in process `syz.0.3149'. [ 327.385192][T17214] bridge0: port 2(bridge_slave_1) entered disabled state [ 327.407573][T17214] bridge_slave_1: entered allmulticast mode [ 327.415629][T17214] bridge_slave_1: entered promiscuous mode [ 327.561549][T17214] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 327.622900][T17214] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 327.790606][T17214] team0: Port device team_slave_0 added [ 327.814180][T17324] openvswitch: netlink: IP tunnel dst address not specified [ 327.824171][T17214] team0: Port device team_slave_1 added [ 328.069627][T17214] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 328.086836][T17214] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 328.153503][T17214] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 328.176799][T17214] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 328.198491][T17214] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 328.274636][ T5886] hid-generic 0005:15C2:FFF9.0002: item fetching failed at offset 0/1 [ 328.307298][T17364] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3164'. [ 328.324927][ T5886] hid-generic 0005:15C2:FFF9.0002: probe with driver hid-generic failed with error -22 [ 328.336268][T17214] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 328.556321][T17381] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3166'. [ 328.633769][T17214] hsr_slave_0: entered promiscuous mode [ 328.639796][T17393] netlink: 64 bytes leftover after parsing attributes in process `syz.5.3166'. [ 328.656346][T17214] hsr_slave_1: entered promiscuous mode [ 328.670748][T17214] debugfs: 'hsr0' already exists in 'hsr' [ 328.676515][T17214] Cannot create hsr debugfs directory [ 328.706419][ T5836] Bluetooth: hci1: command tx timeout [ 328.903102][T17399] netlink: 'syz.2.3171': attribute type 12 has an invalid length. [ 328.939580][T17371] wlan1: Trigger new scan to find an IBSS to join [ 328.975886][T17403] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 329.366429][T17427] sctp: [Deprecated]: syz.2.3178 (pid 17427) Use of struct sctp_assoc_value in delayed_ack socket option. [ 329.366429][T17427] Use struct sctp_sack_info instead [ 329.392233][T17214] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 329.408864][T17214] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 329.506612][T17433] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3179'. [ 329.517852][T17433] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3179'. [ 329.532500][T17433] syzkaller0: entered promiscuous mode [ 329.538036][T17433] syzkaller0: entered allmulticast mode [ 329.594431][T17214] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 329.606115][T17214] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 329.721951][T17214] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 329.754710][T17214] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 329.996911][T17214] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 330.013149][T17214] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 330.047644][T17453] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 330.393668][T17466] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 330.474290][T17214] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 330.508829][T17214] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 330.549552][T17214] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 330.572548][T17214] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 330.625720][T17487] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 330.643192][T17491] xt_hashlimit: size too large, truncated to 1048576 [ 330.779768][ T5836] Bluetooth: hci1: command tx timeout [ 330.835687][T17214] 8021q: adding VLAN 0 to HW filter on device bond0 [ 330.897797][T17214] 8021q: adding VLAN 0 to HW filter on device team0 [ 330.933692][T17374] bridge0: port 1(bridge_slave_0) entered blocking state [ 330.940956][T17374] bridge0: port 1(bridge_slave_0) entered forwarding state [ 330.969422][ T7020] bridge0: port 2(bridge_slave_1) entered blocking state [ 330.976636][ T7020] bridge0: port 2(bridge_slave_1) entered forwarding state [ 331.404189][T17214] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 331.494183][T17214] veth0_vlan: entered promiscuous mode [ 331.522330][T17214] veth1_vlan: entered promiscuous mode [ 331.590032][T17214] veth0_macvtap: entered promiscuous mode [ 331.616655][T17214] veth1_macvtap: entered promiscuous mode [ 331.692808][T17540] __nla_validate_parse: 6 callbacks suppressed [ 331.692826][T17540] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3205'. [ 331.724621][T17214] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 331.780120][T17214] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 331.812725][T17543] syzkaller1: entered promiscuous mode [ 331.828298][T17543] syzkaller1: entered allmulticast mode [ 331.851072][ T7020] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.862859][ T7020] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.894892][T17549] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3208'. [ 331.906314][ T7020] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.916833][ T7020] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 332.119531][T17556] netlink: 72 bytes leftover after parsing attributes in process `syz.4.3211'. [ 332.134761][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 332.180007][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 332.200837][T17556] bond16 (unregistering): Released all slaves [ 332.281155][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 332.315093][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 332.471348][ T24] IPVS: starting estimator thread 0... [ 332.578550][T17575] IPVS: using max 33 ests per chain, 79200 per kthread [ 332.615959][T17579] netlink: 'syz.2.3216': attribute type 11 has an invalid length. [ 332.719488][T17586] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 332.858431][ T5836] Bluetooth: hci1: command tx timeout [ 333.139431][ T5832] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 333.151049][ T5832] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 333.163436][ T5832] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 333.190518][ T5832] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 333.205590][ T5832] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 333.294440][T17600] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 333.343511][T17600] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 333.504413][T17612] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.3225'. [ 333.520027][T17600] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 333.544889][T17600] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 333.562266][T17614] xt_nfacct: accounting object `\$9ZM#mU|^c\F9YⳈ' does not exist [ 333.672490][T17604] lo speed is unknown, defaulting to 1000 [ 333.713399][T17600] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 333.725503][T17600] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 333.761813][T17616] netlink: 'syz.2.3227': attribute type 3 has an invalid length. [ 333.775191][T17616] netlink: 204 bytes leftover after parsing attributes in process `syz.2.3227'. [ 333.840722][T17600] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 333.869061][T17600] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 333.910022][T17374] wlan1: Trigger new scan to find an IBSS to join [ 334.149234][ T148] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 334.167370][ T148] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.212903][ T148] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 334.232454][ T148] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.297450][T17371] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 334.329133][T17371] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.455020][ T7020] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 334.485047][ T7020] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.815878][T17662] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3236'. [ 334.848419][T17348] wlan1: Creating new IBSS network, BSSID 8a:3c:1c:15:60:99 [ 335.093721][T17604] chnl_net:caif_netlink_parms(): no params data found [ 335.258614][ T5832] Bluetooth: hci4: command tx timeout [ 335.395044][T17704] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3247'. [ 335.444582][T17704] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3247'. [ 335.630613][T17604] bridge0: port 1(bridge_slave_0) entered blocking state [ 335.648346][T17604] bridge0: port 1(bridge_slave_0) entered disabled state [ 335.666812][T17604] bridge_slave_0: entered allmulticast mode [ 335.691766][T17604] bridge_slave_0: entered promiscuous mode [ 335.710227][T17604] bridge0: port 2(bridge_slave_1) entered blocking state [ 335.743270][T17604] bridge0: port 2(bridge_slave_1) entered disabled state [ 335.761177][T17604] bridge_slave_1: entered allmulticast mode [ 335.790580][T17604] bridge_slave_1: entered promiscuous mode [ 335.811833][T17747] netlink: 92 bytes leftover after parsing attributes in process `syz.2.3256'. [ 335.844386][T17747] netlink: 'syz.2.3256': attribute type 1 has an invalid length. [ 335.992205][T17756] netlink: 'syz.0.3257': attribute type 4 has an invalid length. [ 336.002935][T17739] bridge0: port 1(bridge_slave_0) entered disabled state [ 336.006872][T17756] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3257'. [ 336.020322][T17739] bridge0: port 2(bridge_slave_1) entered disabled state [ 336.155950][T17604] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 336.194049][T17604] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 336.278038][T17765] netem: unknown loss type 0 [ 336.287472][T17765] netem: change failed [ 336.329366][T17604] team0: Port device team_slave_0 added [ 336.355477][T17604] team0: Port device team_slave_1 added [ 336.455232][T17604] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 336.477582][T17604] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 336.558602][T17604] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 336.590497][T17604] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 336.597928][T17604] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 336.654992][T17604] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 336.825546][T17604] hsr_slave_0: entered promiscuous mode [ 336.836201][T17604] hsr_slave_1: entered promiscuous mode [ 336.845578][T17604] debugfs: 'hsr0' already exists in 'hsr' [ 336.854564][T17604] Cannot create hsr debugfs directory [ 337.145905][T17604] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 337.156919][T17604] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.245328][T17604] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 337.272127][T17604] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.324878][T17604] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 337.337044][T17604] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.348375][ T5832] Bluetooth: hci4: command tx timeout [ 337.417017][T17604] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 337.427742][T17604] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.530786][T17604] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 337.542288][T17604] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 337.552397][T17604] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 337.562546][T17604] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 337.624052][T17604] 8021q: adding VLAN 0 to HW filter on device bond0 [ 337.646695][T17604] 8021q: adding VLAN 0 to HW filter on device team0 [ 337.657903][ T7018] bridge0: port 1(bridge_slave_0) entered blocking state [ 337.665022][ T7018] bridge0: port 1(bridge_slave_0) entered forwarding state [ 337.684635][ T7018] bridge0: port 2(bridge_slave_1) entered blocking state [ 337.691756][ T7018] bridge0: port 2(bridge_slave_1) entered forwarding state [ 337.846773][T17604] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 338.031200][T17604] veth0_vlan: entered promiscuous mode [ 338.043717][T17604] veth1_vlan: entered promiscuous mode [ 338.082524][T17604] veth0_macvtap: entered promiscuous mode [ 338.093835][T17604] veth1_macvtap: entered promiscuous mode [ 338.111320][T17604] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 338.124125][T17604] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 338.138476][ T7020] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 338.147690][ T7020] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 338.163330][ T7020] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 338.174979][ T7020] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 338.252740][T17360] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 338.264040][T17360] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 338.292727][ T7020] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 338.302803][ T7020] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 338.394810][T17827] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 339.418520][ T5832] Bluetooth: hci4: command tx timeout [ 341.498647][ T5832] Bluetooth: hci4: command tx timeout [ 345.349603][ T25] block nbd1: Possible stuck request ffff8880254c8000: control (read@0,1024B). Runtime 30 seconds [ 345.362112][ T25] block nbd1: Possible stuck request ffff8880254c8200: control (read@1024,1024B). Runtime 30 seconds [ 345.373458][ T25] block nbd1: Possible stuck request ffff8880254c8400: control (read@2048,1024B). Runtime 30 seconds [ 345.384591][ T25] block nbd1: Possible stuck request ffff8880254c8600: control (read@3072,1024B). Runtime 30 seconds [ 347.921032][T17360] team0: left allmulticast mode [ 347.925941][T17360] team_slave_0: left allmulticast mode [ 347.933065][T17360] team_slave_1: left allmulticast mode [ 347.940375][T17360] team0: left promiscuous mode [ 347.945176][T17360] team_slave_0: left promiscuous mode [ 347.953218][T17360] team_slave_1: left promiscuous mode [ 347.960837][T17360] bridge0: port 3(team0) entered disabled state [ 347.973270][T17360] bridge_slave_1: left allmulticast mode [ 347.984962][T17360] bridge_slave_1: left promiscuous mode [ 347.992159][T17360] bridge0: port 2(bridge_slave_1) entered disabled state [ 348.262845][T17360] bond2 (unregistering): (slave ip6gretap1): Releasing active interface [ 348.732390][T17360] bond1 (unregistering): (slave bridge2): Releasing backup interface [ 348.948095][T17360] bond10 (unregistering): (slave bridge7): Releasing active interface [ 349.096824][T17360] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 349.121352][T17360] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 349.134498][T17360] bond0 (unregistering): Released all slaves [ 349.234171][T17360] bond1 (unregistering): Released all slaves [ 349.326510][T17360] bond2 (unregistering): Released all slaves [ 349.416126][T17360] bond3 (unregistering): Released all slaves [ 349.504309][T17360] bond4 (unregistering): Released all slaves [ 349.594382][T17360] bond5 (unregistering): (slave veth9): Releasing active interface [ 349.605452][T17360] bond5 (unregistering): Released all slaves [ 349.617572][T17360] bond6 (unregistering): Released all slaves [ 349.632162][T17360] bond7 (unregistering): Released all slaves [ 349.730208][T17360] bond8 (unregistering): (slave veth11): Releasing active interface [ 349.745605][T17360] bond8 (unregistering): Released all slaves [ 349.757556][T17360] bond9 (unregistering): Released all slaves [ 349.771838][T17360] bond10 (unregistering): Released all slaves [ 349.784429][T17360] bond11 (unregistering): Released all slaves [ 349.801235][T17360] bond12 (unregistering): (slave lo): Releasing backup interface [ 349.810841][T17360] bond12 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 349.829821][T17360] bond12 (unregistering): Released all slaves [ 349.844022][ T5907] lo speed is unknown, defaulting to 1000 [ 349.850310][ T5914] lo speed is unknown, defaulting to 1000 [ 349.856054][ T5914] syz2: Port: 1 Link DOWN [ 349.860584][ T128] sy: Port: 1 Link DOWN [ 349.941114][T17360] 9: left promiscuous mode [ 350.026055][T17360] tipc: Left network mode [ 350.052613][T17360] IPVS: stopping master sync thread 12285 ... [ 350.639486][T17360] hsr_slave_1: left promiscuous mode [ 350.646974][T17360] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 350.654829][T17360] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 350.694211][T17360] veth1_macvtap: left promiscuous mode [ 350.700644][T17360] veth0_macvtap: left promiscuous mode [ 350.706454][T17360] veth1_vlan: left promiscuous mode [ 350.712676][T17360] veth0_vlan: left promiscuous mode [ 350.835738][T17360] pimreg (unregistering): left allmulticast mode [ 351.210989][T17360] team0 (unregistering): Port device team_slave_1 removed [ 351.247966][T17360] team0 (unregistering): Port device team_slave_0 removed [ 351.312516][ T50] smc: removing ib device sy [ 352.494655][T17360] IPVS: stop unused estimator thread 0... [ 362.254186][T17893] netlink: 'syz.5.3270': attribute type 25 has an invalid length. [ 362.469024][T17902] tipc: Started in network mode [ 362.491706][T17902] tipc: Node identity , cluster identity 4711 [ 362.499340][T17902] tipc: Failed to obtain node identity [ 362.504952][T17902] tipc: Enabling of bearer rejected, failed to enable media [ 362.514297][T17903] tipc: Started in network mode [ 362.519747][T17903] tipc: Node identity , cluster identity 4711 [ 362.526936][T17903] tipc: Failed to obtain node identity [ 362.534353][T17903] tipc: Enabling of bearer rejected, failed to enable media [ 362.584147][T17902] syzkaller0: entered promiscuous mode [ 362.590584][T17902] syzkaller0: entered allmulticast mode [ 362.667405][T17912] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3277'. [ 364.056343][T17916] tipc: New replicast peer: 255.255.255.255 [ 364.065537][T17916] tipc: Enabled bearer , priority 10 [ 364.169975][T17934] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3284'. [ 364.197800][T17938] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3283'. [ 364.201035][T17937] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 364.278336][T17938] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 364.317095][T17945] netlink: 22 bytes leftover after parsing attributes in process `syz.5.3287'. [ 364.364986][T17943] netem: change failed [ 364.766288][T17972] netlink: 248 bytes leftover after parsing attributes in process `syz.4.3296'. [ 364.870540][T17983] Cannot find map_set index 0 as target [ 364.887532][T17348] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 365.112537][T17987] !: renamed from dummy0 (while UP) [ 365.115676][T17989] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3302'. [ 365.158780][T17989] netlink: 2 bytes leftover after parsing attributes in process `syz.0.3302'. [ 365.342505][T17999] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3307'. [ 365.399027][T17999] bond2: Invalid ad_actor_system MAC address. [ 365.405754][T17999] bond2: option ad_actor_system: invalid value (1) [ 365.444594][T17999] bond2 (unregistering): Released all slaves [ 365.498747][T18009] netlink: 240 bytes leftover after parsing attributes in process `syz.3.3305'. [ 365.597409][T18014] rdma_op ffff8880787df9f0 conn xmit_rdma 0000000000000000 [ 365.776959][T18027] sctp: [Deprecated]: syz.4.3314 (pid 18027) Use of struct sctp_assoc_value in delayed_ack socket option. [ 365.776959][T18027] Use struct sctp_sack_info instead [ 365.841213][T18034] netlink: 'syz.0.3317': attribute type 1 has an invalid length. [ 366.009016][T18045] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3321'. [ 366.196220][T18051] tipc: Failed to remove unknown binding: 66,1,1/0:2093867792/2093867794 [ 366.226174][T18058] No such timeout policy "syz0" [ 366.307079][T18065] netlink: 'syz.2.3329': attribute type 1 has an invalid length. [ 366.338292][T18065] netlink: 'syz.2.3329': attribute type 2 has an invalid length. [ 366.485741][T18075] netlink: 'syz.5.3331': attribute type 1 has an invalid length. [ 366.523385][T18077] netlink: 'syz.2.3332': attribute type 1 has an invalid length. [ 366.576809][T18075] 8021q: adding VLAN 0 to HW filter on device bond5 [ 366.652949][T18077] 8021q: adding VLAN 0 to HW filter on device bond2 [ 366.771198][T18087] bond2: (slave veth5): Enslaving as an active interface with a down link [ 366.799891][T18083] vlan2: entered allmulticast mode [ 366.813336][T18083] bond2: entered allmulticast mode [ 366.820915][T18083] bond2: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 366.879956][T18101] vcan0: tx drop: invalid sa for name 0x0200000000000000 [ 367.166570][T18106] netlink: 'syz.5.3337': attribute type 39 has an invalid length. [ 367.265096][T18120] wireguard: wg2: Could not create IPv4 socket [ 367.554468][T18148] bridge_slave_0: invalid flags given to default FDB implementation [ 367.673635][T18153] __nla_validate_parse: 10 callbacks suppressed [ 367.673656][T18153] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3352'. [ 367.697032][T18155] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3353'. [ 367.713617][T18158] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_team, syncid = 4, id = 0 [ 367.714633][T18157] openvswitch: netlink: Message has 8 unknown bytes. [ 367.734720][T18157] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 368.064370][T18184] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3361'. [ 368.118571][T18184] syztnl2: entered promiscuous mode [ 368.214985][T18195] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3363'. [ 368.604408][T18217] syzkaller0: entered promiscuous mode [ 368.634511][T18217] syzkaller0: entered allmulticast mode [ 368.741347][T18223] netlink: 'syz.2.3371': attribute type 29 has an invalid length. [ 368.750529][T18223] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3371'. [ 368.779640][T18231] netlink: 207952 bytes leftover after parsing attributes in process `syz.0.3373'. [ 368.805189][T18228] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3372'. [ 368.861107][T18234] netlink: 48 bytes leftover after parsing attributes in process `syz.5.3374'. [ 368.954571][T18239] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3375'. [ 369.000115][T18242] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3376'. [ 369.097061][T18246] netlink: 'syz.3.3378': attribute type 1 has an invalid length. [ 369.122613][T18243] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 369.136338][T18246] 8021q: adding VLAN 0 to HW filter on device bond1 [ 369.201003][T18246] xt_CT: You must specify a L4 protocol and not use inversions on it [ 369.724980][T18287] netlink: 'syz.0.3386': attribute type 1 has an invalid length. [ 369.758016][T18286] netlink: 'syz.0.3386': attribute type 1 has an invalid length. [ 369.768051][T18287] netlink: 'syz.0.3386': attribute type 1 has an invalid length. [ 369.886353][T18289] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 370.238455][ T5962] IPVS: starting estimator thread 0... [ 370.293042][T18325] netlink: 'syz.5.3401': attribute type 1 has an invalid length. [ 370.328803][T18319] IPVS: using max 27 ests per chain, 64800 per kthread [ 370.379568][T18330] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 370.666861][T18343] vlan2: entered allmulticast mode [ 370.678262][T18343] mac80211_hwsim hwsim41 wlan0: entered allmulticast mode [ 370.905887][T18357] bond0: entered promiscuous mode [ 370.913018][T18357] bond_slave_0: entered promiscuous mode [ 370.923616][T18357] bond_slave_1: entered promiscuous mode [ 370.961080][T18357] bond0: left promiscuous mode [ 370.970817][T18357] bond_slave_0: left promiscuous mode [ 370.976433][T18357] bond_slave_1: left promiscuous mode [ 371.329866][T18377] netlink: 'syz.3.3417': attribute type 25 has an invalid length. [ 371.360392][T18393] syzkaller0: entered promiscuous mode [ 371.365916][T18393] syzkaller0: entered allmulticast mode [ 371.375969][T18393] tipc: Started in network mode [ 371.382122][T18393] tipc: Node identity 9612544cc1fe, cluster identity 4711 [ 371.420713][T18393] tipc: Enabled bearer , priority 0 [ 371.559638][T18384] tipc: Resetting bearer [ 371.602091][T18384] tipc: Disabling bearer [ 371.622806][T18403] delete_channel: no stack [ 372.476250][T18470] netlink: 'syz.3.3452': attribute type 1 has an invalid length. [ 372.505572][T18467] can: request_module (can-proto-0) failed. [ 372.522889][T18472] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 372.765545][T18487] __nla_validate_parse: 86 callbacks suppressed [ 372.765564][T18487] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3458'. [ 372.819618][T18497] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 372.840177][T18487] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3458'. [ 372.851527][T18499] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3462'. [ 373.006700][T18511] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3466'. [ 373.016481][T18511] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3466'. [ 373.054291][T18511] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3466'. [ 373.088729][T18511] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3466'. [ 373.106382][T18513] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 373.149133][T18518] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3467'. [ 373.244757][T18520] netlink: 'syz.4.3472': attribute type 10 has an invalid length. [ 373.260108][T18520] bridge0: port 2(bridge_slave_1) entered disabled state [ 373.278827][T18520] bridge_slave_1: left allmulticast mode [ 373.284594][T18520] bridge_slave_1: left promiscuous mode [ 373.301798][T18520] bridge0: port 2(bridge_slave_1) entered disabled state [ 373.324827][T18520] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 373.386688][T18526] bond3: option arp_all_targets: invalid value (18446744073709551613) [ 373.397407][T18533] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3473'. [ 373.436867][T18526] bond3 (unregistering): Released all slaves [ 373.483856][T18524] bond0: entered promiscuous mode [ 373.490545][T18524] bond_slave_0: entered promiscuous mode [ 373.496445][T18524] bond_slave_1: entered promiscuous mode [ 373.511402][T18524] batadv0: entered promiscuous mode [ 373.518848][T18524] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 373.702555][T18540] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3478'. [ 373.781303][T18553] netlink: 'syz.4.3480': attribute type 1 has an invalid length. [ 373.859445][T18553] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 373.984281][T18564] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1340 [ 374.029294][T18569] IPVS: length: 8 != 1152 [ 374.159321][T18572] netlink: 'syz.4.3487': attribute type 1 has an invalid length. [ 374.288368][T17351] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 374.314205][T17351] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 374.338467][T17351] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 374.358388][T17351] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 374.972726][T18642] netlink: 'syz.3.3505': attribute type 17 has an invalid length. [ 375.003238][T18642] gretap0: entered promiscuous mode [ 375.017038][T18642] gretap0: left promiscuous mode [ 375.126461][T18648] syzkaller1: entered promiscuous mode [ 375.132449][T18648] syzkaller1: entered allmulticast mode [ 375.425639][ T25] block nbd1: Possible stuck request ffff8880254c8000: control (read@0,1024B). Runtime 60 seconds [ 375.438024][ T25] block nbd1: Possible stuck request ffff8880254c8200: control (read@1024,1024B). Runtime 60 seconds [ 375.449660][ T25] block nbd1: Possible stuck request ffff8880254c8400: control (read@2048,1024B). Runtime 60 seconds [ 375.461013][ T25] block nbd1: Possible stuck request ffff8880254c8600: control (read@3072,1024B). Runtime 60 seconds [ 375.485963][T18657] hsr_slave_0 (unregistering): left promiscuous mode [ 375.512988][T18673] syzkaller1: entered promiscuous mode [ 375.529218][T18673] syzkaller1: entered allmulticast mode [ 375.691904][T18685] syzkaller0: entered promiscuous mode [ 375.719161][T18685] syzkaller0: entered allmulticast mode [ 375.931711][T18702] netlink: 'syz.4.3521': attribute type 3 has an invalid length. [ 375.958271][T18702] netlink: 'syz.4.3521': attribute type 3 has an invalid length. [ 376.089781][T18711] netlink: 'syz.5.3523': attribute type 2 has an invalid length. [ 376.985848][T18756] netlink: 'syz.4.3535': attribute type 1 has an invalid length. [ 376.994901][T18758] netlink: 'syz.2.3534': attribute type 1 has an invalid length. [ 377.052971][T18756] 8021q: adding VLAN 0 to HW filter on device bond1 [ 377.118857][T18763] netlink: 'syz.2.3534': attribute type 1 has an invalid length. [ 377.190647][T18766] netlink: 'syz.0.3538': attribute type 1 has an invalid length. [ 377.330001][T18766] 8021q: adding VLAN 0 to HW filter on device bond3 [ 377.512011][T18775] bond3: (slave veth3): Enslaving as an active interface with a down link [ 378.131067][T18818] xt_hashlimit: invalid interval [ 378.158916][T18813] xt_hashlimit: invalid interval [ 378.232506][T18826] __nla_validate_parse: 72 callbacks suppressed [ 378.232526][T18826] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.3554'. [ 378.278502][T18829] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3555'. [ 378.317944][T18829] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3555'. [ 378.632019][ T5201] udevd[5201]: worker [16354] /devices/virtual/block/nbd1 is taking a long time [ 378.709723][T18855] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3564'. [ 378.952368][T18845] batman_adv: batadv0: Interface deactivated: dummy0 [ 379.244105][T18845] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 379.296149][T18845] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 379.704569][T18845] veth1_vlan: left allmulticast mode [ 379.804205][T18855] vlan2: entered allmulticast mode [ 379.809738][T18855] mac80211_hwsim hwsim37 wlan0: entered allmulticast mode [ 379.833652][ T13] netdevsim netdevsim5 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 379.861954][T18862] netlink: 212368 bytes leftover after parsing attributes in process `syz.5.3565'. [ 379.871525][ T13] netdevsim netdevsim5 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 379.890088][ T13] netdevsim netdevsim5 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 379.916888][ T13] netdevsim netdevsim5 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 379.938954][T18864] batman_adv: batadv0: adding TT local entry ba:e1:05:00:07:00 to non-existent VLAN 1280 [ 379.950068][ T13] netdevsim netdevsim5 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 379.968229][ T13] netdevsim netdevsim5 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 380.050381][T18866] bridge0: port 2(bridge_slave_1) entered disabled state [ 380.057842][T18866] bridge0: port 1(bridge_slave_0) entered disabled state [ 380.109338][T18866] bridge_slave_0: left allmulticast mode [ 380.115128][T18866] bridge_slave_0: left promiscuous mode [ 380.125082][T18866] bridge0: port 1(bridge_slave_0) entered disabled state [ 380.129710][T18880] Bluetooth: MGMT ver 1.23 [ 380.149738][T18866] bridge_slave_1: left allmulticast mode [ 380.155407][T18866] bridge_slave_1: left promiscuous mode [ 380.162483][T18866] bridge0: port 2(bridge_slave_1) entered disabled state [ 380.176258][T18866] bond0: (slave bond_slave_0): Releasing backup interface [ 380.190607][T18866] bond0: (slave bond_slave_1): Releasing backup interface [ 380.204964][T18866] team0: Port device team_slave_0 removed [ 380.217343][T18866] team0: Port device team_slave_1 removed [ 380.226471][T18866] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 380.239322][T18866] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 380.251180][T18866] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 380.263676][T18866] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 380.278701][T18866] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 380.295274][ T13] netdevsim netdevsim5 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 380.304437][ T13] netdevsim netdevsim5 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 380.315376][T18868] validate_nla: 2 callbacks suppressed [ 380.315393][T18868] netlink: 'syz.0.3568': attribute type 7 has an invalid length. [ 380.409711][T18887] netlink: 'syz.4.3572': attribute type 2 has an invalid length. [ 380.587391][T18889] syzkaller0: entered promiscuous mode [ 380.602067][T18889] syzkaller0: entered allmulticast mode [ 382.187571][T18919] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3579'. [ 382.208078][T18918] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3579'. [ 382.229834][T18919] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3579'. [ 382.280589][T18926] 8021q: adding VLAN 0 to HW filter on device bond0 [ 382.295608][T18926] 8021q: adding VLAN 0 to HW filter on device team0 [ 382.311979][T18926] batman_adv: batadv0: Interface activated: dummy0 [ 382.336611][T18926] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 382.341398][T18931] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.3584'. [ 382.374307][T18919] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3579'. [ 382.638470][T18952] bond4: entered allmulticast mode [ 382.666840][T18952] 8021q: adding VLAN 0 to HW filter on device bond4 [ 382.720869][T18958] tipc: Started in network mode [ 382.725792][T18958] tipc: Node identity 9, cluster identity 4711 [ 382.768219][T18958] tipc: Node number set to 9 [ 382.793846][T18958] syzkaller1: entered promiscuous mode [ 382.799939][T18958] syzkaller1: entered allmulticast mode [ 383.649939][T19022] sctp: [Deprecated]: syz.3.3614 (pid 19022) Use of struct sctp_assoc_value in delayed_ack socket option. [ 383.649939][T19022] Use struct sctp_sack_info instead [ 383.704024][T19019] syz_tun: entered allmulticast mode [ 383.727531][T19028] ip6t_srh: unknown srh match flags 5F28 [ 383.831496][T19031] __nla_validate_parse: 65 callbacks suppressed [ 383.831515][T19031] netlink: 288 bytes leftover after parsing attributes in process `syz.5.3616'. [ 383.902590][T19034] syzkaller0: entered promiscuous mode [ 383.908099][T19034] syzkaller0: entered allmulticast mode [ 384.047673][T19041] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3618'. [ 384.102978][T19041] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 384.149679][T19041] netlink: 148 bytes leftover after parsing attributes in process `syz.0.3618'. [ 384.274040][T19007] syz_tun: left allmulticast mode [ 384.410043][T19059] syz.2.3622 (19059) used obsolete PPPIOCDETACH ioctl [ 384.707952][T19080] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 384.715280][T19080] IPv6: NLM_F_CREATE should be set when creating new route [ 384.722593][T19080] IPv6: NLM_F_CREATE should be set when creating new route [ 384.729869][T19080] IPv6: NLM_F_CREATE should be set when creating new route [ 384.787202][T19086] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3629'. [ 385.166002][T19115] netlink: 'syz.5.3638': attribute type 10 has an invalid length. [ 385.185568][T19115] netlink: 228 bytes leftover after parsing attributes in process `syz.5.3638'. [ 385.196454][T19112] bond2 (unregistering): Released all slaves [ 385.477251][T19131] netlink: 'syz.4.3641': attribute type 33 has an invalid length. [ 385.491231][T19121] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3639'. [ 385.582474][T19131] bond2: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 385.619713][T19131] bond2 (unregistering): Released all slaves [ 385.632339][T19146] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3643'. [ 385.646663][T19147] netlink: 'syz.5.3642': attribute type 10 has an invalid length. [ 385.698065][T19147] batman_adv: batadv0: Interface deactivated: dummy0 [ 385.729157][T19147] batman_adv: batadv0: Removing interface: dummy0 [ 385.754622][T19147] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 385.940007][T19162] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3645'. [ 386.154956][T19175] netlink: 'syz.4.3650': attribute type 1 has an invalid length. [ 386.293226][T19175] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 386.379950][T19183] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3651'. [ 386.441657][T19192] netlink: 48 bytes leftover after parsing attributes in process `syz.5.3652'. [ 386.899247][T19226] lo speed is unknown, defaulting to 1000 [ 386.914049][T19226] lo speed is unknown, defaulting to 1000 [ 386.966104][T19226] lo speed is unknown, defaulting to 1000 [ 387.085982][T19226] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 387.207000][T19226] lo speed is unknown, defaulting to 1000 [ 387.256404][T19226] lo speed is unknown, defaulting to 1000 [ 387.286677][T19226] lo speed is unknown, defaulting to 1000 [ 387.321648][T19226] lo speed is unknown, defaulting to 1000 [ 387.340685][T19226] lo speed is unknown, defaulting to 1000 [ 387.358559][T19226] lo speed is unknown, defaulting to 1000 [ 387.400326][T19226] lo speed is unknown, defaulting to 1000 [ 387.436245][T19226] lo speed is unknown, defaulting to 1000 [ 387.618442][T19275] netlink: 'syz.4.3673': attribute type 13 has an invalid length. [ 387.643051][T19275] syz_tun: refused to change device tx_queue_len [ 387.660837][T19275] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 387.699506][T19279] netem: unknown loss type 0 [ 387.704526][T19279] netem: change failed [ 387.763565][T19287] netlink: 'syz.4.3678': attribute type 1 has an invalid length. [ 387.771589][T19286] netlink: 'syz.3.3677': attribute type 21 has an invalid length. [ 387.781127][T19289] netlink: 'syz.4.3678': attribute type 1 has an invalid length. [ 387.867777][T19289] bond2: (slave veth0_to_bond): making interface the new active one [ 387.891137][T19289] bond2: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 387.916640][T19298] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 387.936401][T19292] bond2: entered promiscuous mode [ 387.958433][T19292] veth0_to_bond: entered promiscuous mode [ 387.968389][T19292] bond2: entered allmulticast mode [ 387.973661][T19292] veth0_to_bond: entered allmulticast mode [ 388.084958][T19308] nbd: must specify a device to reconfigure [ 388.435782][T19317] netlink: 'syz.2.3686': attribute type 21 has an invalid length. [ 388.557043][T19327] netlink: 'syz.2.3689': attribute type 16 has an invalid length. [ 388.565745][T19327] netlink: 'syz.2.3689': attribute type 17 has an invalid length. [ 388.653544][T19327] 8021q: adding VLAN 0 to HW filter on device bond0 [ 388.662455][T19327] 8021q: adding VLAN 0 to HW filter on device team0 [ 388.673137][T19327] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 388.815479][T19339] team0: mtu less than device minimum [ 388.986712][T19342] team0: Port device bridge1 added [ 389.046941][T19355] __nla_validate_parse: 14 callbacks suppressed [ 389.046961][T19355] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3698'. [ 389.097041][T19355] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3698'. [ 389.132163][T19355] netlink: 216 bytes leftover after parsing attributes in process `syz.4.3698'. [ 389.149512][T19359] macvlan0: entered promiscuous mode [ 389.179979][T19355] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3698'. [ 389.349739][T19369] netlink: zone id is out of range [ 389.354900][T19369] netlink: del zone limit has 4 unknown bytes [ 389.419341][T19369] netlink: 412 bytes leftover after parsing attributes in process `syz.0.3703'. [ 389.611178][T19378] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3706'. [ 389.668618][T19380] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3707'. [ 389.789758][T19384] netlink: 212328 bytes leftover after parsing attributes in process `syz.4.3710'. [ 389.817493][T19384] netlink: ct family unspecified [ 389.839609][T19387] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3711'. [ 390.072856][T19397] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 390.339969][T19408] bond3: option all_slaves_active: invalid value (222) [ 390.356066][T19408] bond3 (unregistering): Released all slaves [ 390.512289][T19414] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3719'. [ 390.571603][T19420] validate_nla: 2 callbacks suppressed [ 390.571623][T19420] netlink: 'syz.4.3721': attribute type 3 has an invalid length. [ 390.624870][T19414] bond0: entered promiscuous mode [ 390.659968][T19414] bond_slave_0: entered promiscuous mode [ 390.677863][T19414] bond_slave_1: entered promiscuous mode [ 390.707118][T19414] dummy0: entered promiscuous mode [ 390.741537][T19414] veth1: entered promiscuous mode [ 390.747174][T19414] debugfs: 'hsr1' already exists in 'hsr' [ 390.766961][T19414] Cannot create hsr debugfs directory [ 390.774254][T19414] hsr1: entered promiscuous mode [ 390.783931][T19425] netlink: 'syz.4.3721': attribute type 3 has an invalid length. [ 391.631798][T19498] netlink: 'syz.3.3741': attribute type 1 has an invalid length. [ 391.671346][T19498] bond2: entered promiscuous mode [ 391.676405][T19498] bond2: entered allmulticast mode [ 391.682296][T19498] 8021q: adding VLAN 0 to HW filter on device bond2 [ 391.701164][T19498] macvlan2: entered promiscuous mode [ 391.706483][T19498] macvlan2: entered allmulticast mode [ 391.713661][T19498] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 391.946880][T19514] IPv6: Can't replace route, no match found [ 392.235301][T19537] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not filter [ 392.549265][T19559] netlink: 'syz.0.3760': attribute type 25 has an invalid length. [ 392.660669][T19559] netlink: 'syz.0.3760': attribute type 25 has an invalid length. [ 392.699291][T19560] lo speed is unknown, defaulting to 1000 [ 393.031611][T19587] vcan0: entered allmulticast mode [ 393.289364][T19597] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 394.065570][T19634] __nla_validate_parse: 14 callbacks suppressed [ 394.065588][T19634] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3784'. [ 394.199325][T19638] Bluetooth: MGMT ver 1.23 [ 394.218947][T19638] Bluetooth: hci1: expected 19 bytes, got 2 bytes [ 394.229321][T19642] netlink: 'syz.4.3787': attribute type 1 has an invalid length. [ 394.303293][T19651] netlink: 'syz.2.3789': attribute type 3 has an invalid length. [ 394.356990][T19653] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3790'. [ 394.396232][T19657] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3791'. [ 394.673452][T19678] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3800'. [ 394.813941][T19687] netlink: 148 bytes leftover after parsing attributes in process `syz.2.3801'. [ 395.011656][T19701] xt_ecn: cannot match TCP bits for non-tcp packets [ 395.087837][T19706] netem: unknown loss type 0 [ 395.106066][T19706] netem: change failed [ 395.156128][T19715] netlink: 'syz.2.3808': attribute type 1 has an invalid length. [ 395.184117][T19715] netlink: 'syz.2.3808': attribute type 4 has an invalid length. [ 395.207664][T19715] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.3808'. [ 395.237621][T19715] IPVS: Unknown mcast interface: dvmrp0 [ 395.304875][T19722] netlink: 'syz.3.3811': attribute type 1 has an invalid length. [ 395.334357][T19722] netlink: 7 bytes leftover after parsing attributes in process `syz.3.3811'. [ 395.374677][T19728] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3811'. [ 395.435458][T19728] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3811'. [ 395.729606][T19750] sctp: [Deprecated]: syz.5.3818 (pid 19750) Use of int in max_burst socket option deprecated. [ 395.729606][T19750] Use struct sctp_assoc_value instead [ 395.874342][T19761] [ 395.876702][T19761] ====================================================== [ 395.883710][T19761] WARNING: possible circular locking dependency detected [ 395.890747][T19761] syzkaller #0 Not tainted [ 395.895147][T19761] ------------------------------------------------------ [ 395.902145][T19761] syz.0.3821/19761 is trying to acquire lock: [ 395.908195][T19761] ffffffff8f473cf8 (nr_neigh_list_lock){+...}-{3:3}, at: nr_remove_neigh+0x25/0xe0 [ 395.917536][T19761] [ 395.917536][T19761] but task is already holding lock: [ 395.924889][T19761] ffff888051f00470 (&nr_node->node_lock){+...}-{3:3}, at: nr_add_node+0xcce/0x2570 [ 395.934184][T19761] [ 395.934184][T19761] which lock already depends on the new lock. [ 395.934184][T19761] [ 395.944573][T19761] [ 395.944573][T19761] the existing dependency chain (in reverse order) is: [ 395.953587][T19761] [ 395.953587][T19761] -> #2 (&nr_node->node_lock){+...}-{3:3}: [ 395.960254][T19768] SET target dimension over the limit! [ 395.961578][T19761] _raw_spin_lock_bh+0x36/0x50 [ 395.972322][T19761] nr_rt_device_down+0x12a/0x720 [ 395.977954][T19761] nr_device_event+0x137/0x150 [ 395.983241][T19761] notifier_call_chain+0x19d/0x3a0 [ 395.988886][T19761] __dev_notify_flags+0x18d/0x2e0 [ 395.994449][T19761] netif_change_flags+0xe8/0x1a0 [ 395.999910][T19761] dev_change_flags+0x130/0x260 [ 396.005277][T19761] dev_ioctl+0x7b4/0x1150 [ 396.010117][T19761] sock_do_ioctl+0x22c/0x300 [ 396.015221][T19761] sock_ioctl+0x576/0x790 [ 396.020062][T19761] __se_sys_ioctl+0xfc/0x170 [ 396.025167][T19761] do_syscall_64+0xec/0xf80 [ 396.030178][T19761] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 396.036579][T19761] [ 396.036579][T19761] -> #1 (nr_node_list_lock){+...}-{3:3}: [ 396.044393][T19761] _raw_spin_lock_bh+0x36/0x50 [ 396.049686][T19761] nr_rt_device_down+0xa9/0x720 [ 396.055070][T19761] nr_device_event+0x137/0x150 [ 396.060352][T19761] notifier_call_chain+0x19d/0x3a0 [ 396.065982][T19761] __dev_notify_flags+0x18d/0x2e0 [ 396.071536][T19761] netif_change_flags+0xe8/0x1a0 [ 396.076986][T19761] dev_change_flags+0x130/0x260 [ 396.082349][T19761] dev_ioctl+0x7b4/0x1150 [ 396.087192][T19761] sock_do_ioctl+0x22c/0x300 [ 396.092295][T19761] sock_ioctl+0x576/0x790 [ 396.097138][T19761] __se_sys_ioctl+0xfc/0x170 [ 396.102236][T19761] do_syscall_64+0xec/0xf80 [ 396.107249][T19761] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 396.113660][T19761] [ 396.113660][T19761] -> #0 (nr_neigh_list_lock){+...}-{3:3}: [ 396.121574][T19761] __lock_acquire+0x15a6/0x2cf0 [ 396.126946][T19761] lock_acquire+0x107/0x340 [ 396.132048][T19761] _raw_spin_lock_bh+0x36/0x50 [ 396.137329][T19761] nr_remove_neigh+0x25/0xe0 [ 396.142430][T19761] nr_add_node+0x1d9f/0x2570 [ 396.147531][T19761] nr_rt_ioctl+0xc12/0xd50 [ 396.152464][T19761] sock_do_ioctl+0xdc/0x300 [ 396.157491][T19761] sock_ioctl+0x576/0x790 [ 396.162334][T19761] __se_sys_ioctl+0xfc/0x170 [ 396.167522][T19761] do_syscall_64+0xec/0xf80 [ 396.172533][T19761] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 396.178937][T19761] [ 396.178937][T19761] other info that might help us debug this: [ 396.178937][T19761] [ 396.189161][T19761] Chain exists of: [ 396.189161][T19761] nr_neigh_list_lock --> nr_node_list_lock --> &nr_node->node_lock [ 396.189161][T19761] [ 396.202973][T19761] Possible unsafe locking scenario: [ 396.202973][T19761] [ 396.210407][T19761] CPU0 CPU1 [ 396.215755][T19761] ---- ---- [ 396.221101][T19761] lock(&nr_node->node_lock); [ 396.225864][T19761] lock(nr_node_list_lock); [ 396.232963][T19761] lock(&nr_node->node_lock); [ 396.240262][T19761] lock(nr_neigh_list_lock); [ 396.244961][T19761] [ 396.244961][T19761] *** DEADLOCK *** [ 396.244961][T19761] [ 396.253087][T19761] 1 lock held by syz.0.3821/19761: [ 396.258206][T19761] #0: ffff888051f00470 (&nr_node->node_lock){+...}-{3:3}, at: nr_add_node+0xcce/0x2570 [ 396.267995][T19761] [ 396.267995][T19761] stack backtrace: [ 396.273891][T19761] CPU: 0 UID: 0 PID: 19761 Comm: syz.0.3821 Not tainted syzkaller #0 PREEMPT(full) [ 396.273926][T19761] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 396.273948][T19761] Call Trace: [ 396.273957][T19761] [ 396.273966][T19761] dump_stack_lvl+0xe8/0x150 [ 396.273990][T19761] print_circular_bug+0x2e2/0x300 [ 396.274013][T19761] check_noncircular+0x12e/0x150 [ 396.274036][T19761] __lock_acquire+0x15a6/0x2cf0 [ 396.274062][T19761] ? nr_remove_neigh+0x25/0xe0 [ 396.274080][T19761] lock_acquire+0x107/0x340 [ 396.274095][T19761] ? nr_remove_neigh+0x25/0xe0 [ 396.274113][T19761] ? nr_add_node+0xcce/0x2570 [ 396.274130][T19761] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 396.274153][T19761] ? nr_remove_neigh+0x25/0xe0 [ 396.274170][T19761] _raw_spin_lock_bh+0x36/0x50 [ 396.274194][T19761] ? nr_remove_neigh+0x25/0xe0 [ 396.274211][T19761] nr_remove_neigh+0x25/0xe0 [ 396.274230][T19761] nr_add_node+0x1d9f/0x2570 [ 396.274248][T19761] ? __asan_memcpy+0x40/0x70 [ 396.274263][T19761] ? nr_call_to_digi+0x126/0x1b0 [ 396.274280][T19761] nr_rt_ioctl+0xc12/0xd50 [ 396.274302][T19761] ? __pfx_nr_rt_ioctl+0x10/0x10 [ 396.274323][T19761] ? apparmor_capable+0x137/0x1a0 [ 396.274350][T19761] ? capable+0x89/0xe0 [ 396.274366][T19761] ? nr_ioctl+0x1b1/0x3b0 [ 396.274389][T19761] sock_do_ioctl+0xdc/0x300 [ 396.274412][T19761] ? __pfx_sock_do_ioctl+0x10/0x10 [ 396.274433][T19761] ? do_futex+0x333/0x420 [ 396.274448][T19761] ? call_rcu+0x644/0x890 [ 396.274474][T19761] sock_ioctl+0x576/0x790 [ 396.274496][T19761] ? __pfx_sock_ioctl+0x10/0x10 [ 396.274517][T19761] ? __fget_files+0x2a/0x420 [ 396.274537][T19761] ? __fget_files+0x3a0/0x420 [ 396.274556][T19761] ? __fget_files+0x2a/0x420 [ 396.274576][T19761] ? bpf_lsm_file_ioctl+0x9/0x20 [ 396.274595][T19761] ? __pfx_sock_ioctl+0x10/0x10 [ 396.274614][T19761] __se_sys_ioctl+0xfc/0x170 [ 396.274630][T19761] do_syscall_64+0xec/0xf80 [ 396.274647][T19761] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 396.274663][T19761] ? trace_irq_disable+0x37/0x100 [ 396.274684][T19761] ? clear_bhb_loop+0x60/0xb0 [ 396.274702][T19761] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 396.274721][T19761] RIP: 0033:0x7f9d7558f749 [ 396.274741][T19761] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 396.274756][T19761] RSP: 002b:00007f9d737f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 396.274774][T19761] RAX: ffffffffffffffda RBX: 00007f9d757e5fa0 RCX: 00007f9d7558f749 [ 396.274786][T19761] RDX: 0000200000000440 RSI: 000000000000890b RDI: 0000000000000004 [ 396.274797][T19761] RBP: 00007f9d75613f91 R08: 0000000000000000 R09: 0000000000000000 [ 396.274808][T19761] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 396.274818][T19761] R13: 00007f9d757e6038 R14: 00007f9d757e5fa0 R15: 00007fff6792b7a8 [ 396.274837][T19761] [ 396.561193][T17371] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 396.639917][T19767] A link change request failed with some changes committed already. Interface vlan3 may have been left with an inconsistent configuration, please check. [ 405.498448][ T25] block nbd1: Possible stuck request ffff8880254c8000: control (read@0,1024B). Runtime 90 seconds [ 405.509176][ T25] block nbd1: Possible stuck request ffff8880254c8200: control (read@1024,1024B). Runtime 90 seconds [ 405.520387][ T25] block nbd1: Possible stuck request ffff8880254c8400: control (read@2048,1024B). Runtime 90 seconds [ 405.532118][ T25] block nbd1: Possible stuck request ffff8880254c8600: control (read@3072,1024B). Runtime 90 seconds