last executing test programs: 5m58.13239646s ago: executing program 3 (id=1253): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)={0x114, 0x20, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x102, 0xf2, 0x0, 0x1, [@typed={0xf, 0x18, 0x0, 0x0, @str='}:.\x9c[\xc8\\#\'}\x00'}, @typed={0x14, 0x2, 0x0, 0x0, @ipv6=@private2}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817", @typed={0x4, 0xe9}]}]}, 0x114}], 0x1, 0x0, 0x0, 0x20008001}, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x0, 0x4, 0x2, 0x1, 0x14}], {0x95, 0x0, 0x700}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xc}, 0x90) 5m57.779684694s ago: executing program 3 (id=1257): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000002c0)="b9ff03076003008cb89e08f086dd", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xd, &(0x7f0000000700)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x61}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0x28, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240), 0xffffffffffffffff) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=@bridge_dellink={0x34, 0x13, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r5, 0x440, 0x10102}, [@IFLA_AF_SPEC={0x14, 0x1a, 0x0, 0x1, [@AF_INET={0xffffffffffffff1c, 0x4, 0x0, 0x1, {0xc, 0x1, 0x0, 0x1, [{0x8, 0x3ffd}]}}]}]}, 0x34}}, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000280)={0x14, r3, 0x711, 0x70bd27}, 0x14}, 0x1, 0x0, 0x0, 0x4004094}, 0x8894) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r2) 5m57.305082527s ago: executing program 4 (id=1261): r0 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) bpf$TOKEN_CREATE(0x24, &(0x7f0000000180)={0x0, r0}, 0x8) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x14}, @NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x101, 0x0, 0x0, {0xa}, [@NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x1}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}], {0x14}}, 0xa4}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x6, &(0x7f00000000c0)=ANY=[@ANYRES32=r0], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x41100, 0x0, '\x00', 0x0, @sched_cls}, 0x94) 5m57.300173043s ago: executing program 0 (id=1262): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_QUANTUM={0x8, 0x3, 0x10000}]}}]}, 0x38}}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) ioctl$TUNSETLINK(r3, 0x400454cd, 0x30f) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001840)=@newtaction={0xea8, 0x30, 0x25, 0x0, 0x0, {}, [{0xe94, 0x1, [@m_pedit={0xe90, 0x1, 0x0, 0x0, {{0xa}, {0xe64, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x3}, [{}, {}, {0x0, 0x8000}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x9, 0xfffffffc, 0x0, 0x0, 0x9}, {}, {0x0, 0x1}, {0x0, 0x0, 0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x0, 0x0, 0xffffffff}, {}, {0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3cf}, {0x0, 0x7}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x3}, {}, {}, {}, {0x0, 0x0, 0x4000}, {}, {0xfffffffd}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {0x0, 0x4}, {}, {}, {0x0, 0x0, 0x200}, {}, {0x8, 0x0, 0x0, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x7f, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x0, 0xfffffffd}, {0x0, 0xffffff01}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0x0, 0x0, 0xdf}, {0x0, 0xfffffff2}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x4}, {}, {}, {0x0, 0x0, 0x2, 0xf}, {}, {}, {}, {0x0, 0x0, 0x10}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, {}, {0x0, 0x0, 0x100}, {}, {0xfffffffc, 0x3}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x4}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x4, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x0, 0x2, 0x0, 0x0, 0x4000000}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}]}}, @TCA_PEDIT_KEYS_EX={0x40, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}]}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xea8}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@broadcast, @link_local, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast}, {0x16}}}}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xfff2}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}, @TCA_RATE={0x6, 0x5, {0x1, 0x5}}]}, 0x40}}, 0x1) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r9, {0x4, 0xa}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8848}, 0x80) ioctl$SIOCSIFHWADDR(r3, 0x8924, &(0x7f0000000180)={'rose0\x00', @link_local}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000940)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0x4, 0xffe0}, {}, {0xfff2, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x8849}, 0x20004804) 5m57.127031416s ago: executing program 3 (id=1263): r0 = socket(0x10, 0x2, 0x0) write(r0, &(0x7f0000000280)="2c0000001d005f80004000000000000002000000000000000000080008000100000000ff5b1844ad30c8ac46", 0x2c) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f00000002c0), r3) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="c8010000", @ANYRES16=r4, @ANYBLOB="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"], 0x1c8}}, 0x0) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0x108, r4, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [@WGDEVICE_A_PEERS={0xac, 0x8, 0x0, 0x1, [{0x94, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0x0, @mcast1, 0xfffffff7}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x5}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2c}}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x34}}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @broadcast}}]}, {0x14, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x401}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x7fff}]}]}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x10000}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e24}]}, 0x108}, 0x1, 0x0, 0x0, 0x4080}, 0x4000) sendto$packet(0xffffffffffffffff, &(0x7f0000000000)="b1c3e32d70512a24f0084bc32808efabd6a6427c8c421e2d73", 0x19, 0x4040000, &(0x7f0000000080)={0x11, 0x15, r1, 0x1, 0x2, 0x6, @random="b6cb790e5bf6"}, 0x14) 5m57.052744881s ago: executing program 4 (id=1265): r0 = socket(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00', 0x0}) bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="180000005200010000000000000000001c000000040008"], 0x18}}, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8481f0000005e140604000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) 5m56.913148559s ago: executing program 1 (id=1267): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$TOKEN_CREATE(0x24, &(0x7f0000000680)={0x0, r0}, 0x8) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x4, &(0x7f00000005c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@generic={0x1, 0x0, 0x3, 0x84ba, 0x8}]}, &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{0x1, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)=r1}, 0x20) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000140)={r2, 0x8, 0xb, 0x6}) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000580)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000280)={&(0x7f0000000500)={0x64, r4, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xfffffffe}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x7e}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x3}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x18, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @broadcast}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x40}, 0x44080) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r6) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB='x\a\x00\x00', @ANYRES16=r7, @ANYBLOB="05000000000000000000037400062c00070073797374656d5f753a6f626a6563745f723a756465765f68656c7065725f657865635f743a7330000800040000000000080002000000000014000300ff07000000000000000000000000000a1400060070696d36726567310000000000000000"], 0x78}, 0x1, 0xffffffff00000003}, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000000c0)={r2, &(0x7f0000000100)="c651e70f6cbacf957f3dc3734ed5b7169f99acfb8fbef7bab81661b814d2626f2c4638c6dabd9fc38ccb"}, 0x20) sendmsg$nl_xfrm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="48010000100001d5b4ee810ac2f9e4b398b80d598ff30f293c8015bc2cd1f137abb0000000000000000400fe880000000000000000000000000001fe80000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x148}, 0x1, 0x0, 0x0, 0x20004001}, 0x0) 5m56.809574431s ago: executing program 0 (id=1268): socketpair$unix(0x1, 0x5, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f0000000300)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560aff820fffff5bab003a0000002058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100030c100000000000224e0000", 0x58}], 0x1) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4) accept4$bt_l2cap(r1, 0x0, 0x0, 0x800) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) 5m56.807567863s ago: executing program 3 (id=1269): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[], 0x64}, 0x1, 0x0, 0x0, 0x20008044}, 0x20004880) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa) sendmsg$nl_route_sched(r0, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newtaction={0x68, 0x30, 0xb, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{}, 0x1, r2}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000580)={'veth1_to_bond\x00', 0x0}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}, @NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xe}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x7c}, 0x1, 0x0, 0x0, 0x850}, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000001c0)={r3, r5, 0x25, 0x2, @val=@perf_event={0x11}}, 0x18) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) sendmsg$TEAM_CMD_NOOP(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="60010000", @ANYRES16=0x0, @ANYBLOB="f3c327bd7000fddbdf250000000008000100", @ANYRES32=r2, @ANYBLOB="8400028040000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000900000008000600", @ANYRES32=r2, @ANYBLOB="40000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=r2, @ANYBLOB="080007000000000008000100", @ANYRES32=r2, @ANYBLOB="b800028038000100240001006d636173745f72656a6f696e5f696e74657276616c0000000000000000b4000000050003000300000008000400020000003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000600000000000005000300060000000400040008000600", @ANYRES32=r5, @ANYBLOB="40000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=r9, @ANYBLOB='\b\x00\a\x00\x00\x00\x00\x00'], 0x160}, 0x1, 0x0, 0x0, 0x40001}, 0x0) 5m56.703726089s ago: executing program 1 (id=1270): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0) sendmsg$IPCTNL_MSG_EXP_DELETE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)={0x4c, 0x2, 0x2, 0x401, 0x0, 0x0, {0x5, 0x0, 0x2}, [@CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x4}, @CTA_EXPECT_TUPLE={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x850}, 0x4008805) recvmmsg(r1, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000580)=""/230, 0xe6}], 0x15}, 0x2000000}], 0x2, 0x0, 0x0) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000080)='syz1\x00', 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000040)='blkio.bfq.idle_time\x00', 0x275a, 0x0) writev(r3, &(0x7f0000000100)=[{&(0x7f00000002c0)="a609a89c9edd34187123b5adceb3968557f4e107445a53c0815c9636d00f896d1e8cd8de77a79f1e3e2c53ddf1bb9f8ac5cb5257ff4e8b960026bc4244c4b09179a97dffdf02563e23546d3e78f944e7e2fee2a00b6313048fe354223318badb21d8c086669c5f7772f4a6d90d0997babdf79f7d557e055b3e6f2e4f41ec06a39a57b9ccc00bbca22395e41f9e9652af665f0e1603fb85d4799d54d44c706ff8df9bb805b182a1260b5936ae44f649b5e2fdca240984dcd0033ec28aeaaa686608c5c50538eea153", 0xc8}, {&(0x7f00000004c0)="7ee25c099579d92f8da721f68a8100b6adf04e0cd543f7d26019d57e6a3ecf7ef34486da35c482845d517dc801cca9e4f248b15413a7e252b00a3878a791f64bd79d1d7cc97eed1cb0ad91426115a3b3bf2738347b0acfb01a5aeb09818f35ba6f394fcc023050ec0fab5b7405e7ce33e50e3efb3f9373ce372307160e67a6ab876630aa7d83b5f9cc93a11ddb6849c9cc173c0f9592e1c14ee8c687710260aefc1ce06038fa1b8b2e76f29703bb5fc7549318f6f4287daef439fd58863abc71e3b186e7998b8e60aba2a4bcc76eb07d365afc639fd8b115", 0xd8}, {&(0x7f0000000180)="a0a94f8518f2e7d417de2318f9700d66104c6a93da76b8fcaa99404227f34808d6ae2a7990b2c398", 0x28}, {&(0x7f0000000000)="1aa8906070117b653eda123ec46475d65ca8b7792e6da36191f93da265e6ec803be1248a4164a7335d78a67992bd88f1a0e3b7f48636ac498ba5f4f8b47248af", 0x40}], 0x4) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r3, 0x0) r4 = socket$inet_smc(0x2b, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_START_SCHED_SCAN(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x40081}, 0x40009) ioctl$sock_inet_tcp_SIOCATMARK(r3, 0x8905, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000080"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r6, 0x0, 0x0, 0x63, 0x0, &(0x7f0000000200)=""/99, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$IPT_SO_GET_REVISION_TARGET(r4, 0x0, 0x43, 0x0, &(0x7f0000001680)) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000002e00)={{0x0, 0x1, 0x6, 0xffff, 0x2, 0x6, 0x361, 0x7fffffff, 0x1, 0x6, 0x2, 0x9, 0xe9c, 0x0, 0x4}}) unshare(0x0) unshare(0x8000000) setsockopt(r7, 0xffe00000, 0xfffffffd, &(0x7f0000002d00), 0x0) unshare(0x8000280) connect$bt_rfcomm(0xffffffffffffffff, &(0x7f0000002dc0)={0x1f, @none, 0xab}, 0xa) unshare(0x28000000) nanosleep(&(0x7f0000000200), 0x0) 5m56.638624282s ago: executing program 4 (id=1271): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x14, 0x7, 0x1, 0x101, 0x0, 0x0, {0x2, 0x0, 0x4}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x40800) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000900)={0x1c, 0x13, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x2}]}, 0x1c}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x14, 0x7, 0x1, 0x101, 0x0, 0x0, {0x2, 0x0, 0x4}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x40800) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) (async) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000900)={0x1c, 0x13, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x2}]}, 0x1c}}, 0x0) (async) 5m56.565377557s ago: executing program 0 (id=1272): r0 = socket$kcm(0x25, 0x1, 0x0) sendmsg$kcm(r0, &(0x7f0000000800)={0x0, 0x0, 0x0}, 0x408c050) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x79, 0x10, 0x9d}, [@alu={0x4, 0x1, 0x3, 0x2, 0x1, 0xffffffffffffffc0, 0x1}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) 5m56.475514908s ago: executing program 1 (id=1274): r0 = socket$can_raw(0x1d, 0x3, 0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000380)='blkio.bfq.avg_queue_size\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000140)=[{&(0x7f0000000280)=""/241, 0xf1}], 0x1, 0x0, 0x0) accept(r0, 0x0, 0x0) 5m56.325420508s ago: executing program 4 (id=1275): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000000)={0x8004800}, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="180000001600010a0002000000836b00000000ac"], 0x78}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@ipv4_newroute={0x38, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x2}, @RTA_ENCAP={0x14, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x10, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_GENEVE={0xc, 0x1, 0x0, 0x1, @LWTUNNEL_IP_OPT_GENEVE_CLASS={0x6}}}}]}, 0x38}}, 0x0) 5m56.325000332s ago: executing program 0 (id=1276): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0000120000000000000060"], 0xfce) 5m56.230003683s ago: executing program 1 (id=1278): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xc}]}, @NFT_MSG_NEWSETELEM={0x14c, 0xc, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x124, 0x3, 0x0, 0x1, [{0x120, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0xd0, 0x6, 0x1, 0x0, "2abe083d57a3deae1b24385d9a1033fe3fe58b04e164f004c4b0bee6943edd7669b9cc2bac6e7eab263b07b5cd9e3e21d9714ac11b2fbcd6d57982b59c333cd146865af2ed0b9b322acab77457aa46c5cad1c01555bdba8f408713d6726dad4239ef817b11b71b71560b49e77aba966d0977195dc776a0c2350b1e555260faf659299adfa5685943cb9233a7606e3d9fbbde0b188751fa3dfe5f1344dc7bc895dafda197b899bce7c5f0466af7bfdc75182f2d0395cfeccb4357231623f41988ccba33785e8e727f2eea498a"}, @NFTA_SET_ELEM_KEY={0x4c, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x48, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}]}]}], {0x14, 0x10}}, 0x1d0}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x54, 0x10, 0x1, 0x70bd2f, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x102}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_VFINFO_LIST={0x20, 0x16, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN_LIST={0x18, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x8, 0x143, 0x80, 0x88a8}}]}]}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x20008080}, 0x24040800) 5m56.092832233s ago: executing program 4 (id=1279): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x4) r1 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote}, &(0x7f0000000080)=0x1c, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000040000701fcffffff00000100017c0000040042800c0001800600060065580000100002800c000380080009"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) getsockopt$IP6T_SO_GET_REVISION_TARGET(r1, 0x29, 0x45, &(0x7f00000000c0)={'NETMAP\x00'}, &(0x7f0000000100)=0x1e) close(r0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = accept4$unix(0xffffffffffffffff, 0x0, &(0x7f0000000140), 0x800) ioctl$sock_SIOCDELDLCI(r4, 0x8981, &(0x7f0000000180)={'sit0\x00', 0xe49}) r5 = socket$nl_sock_diag(0x10, 0x3, 0x4) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x20000000ec071, 0xffffffffffffffff, 0x4000) mmap(&(0x7f0000724000/0x1000)=nil, 0x1000, 0x0, 0x4000932, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, r5, 0x0, 0x4, 0x4, 0x1, {0xa, 0x4e20, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x101}}}, 0x3a) 5m56.090370931s ago: executing program 3 (id=1280): r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e15000)={0x2, 0x4e20, @multicast2}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x10, 0x803, 0x0) (async) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffb, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x6, 0x6, 0xd21, 0x101, 0x6, 0x5, 0xbd, 0x100, 0x4}}}}]}, 0x58}}, 0x0) (async, rerun: 64) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000007c0)=@newtfilter={0x64, 0x2c, 0xd27, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r4, {0xc, 0xfff1}, {}, {0x5, 0xf}}, [@filter_kind_options=@f_flow={{0x9}, {0x34, 0x2, [@TCA_FLOW_EMATCHES={0x30, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xfffb}}, @TCA_EMATCH_TREE_LIST={0x24, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x20, 0x1, 0x0, 0x0, {{0x7, 0x7, 0x2}, {{0x0, 0x1, 0x0, 0x1}, {0x0, 0x1, 0x1, 0x1}}}}, @TCF_EM_META={0xc, 0x2, 0x0, 0x0, {{0xfffb, 0x4, 0x2}}}]}]}]}}]}, 0x64}}, 0x20040054) (async, rerun: 64) r5 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r5, &(0x7f0000000040)=[{&(0x7f00000001c0)="580000001400192340834b80044d8c560a067f0202ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd000000100001000b0c10000000224e00000000", 0x58}], 0x1) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) (async) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) (async) r8 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r8, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) (async) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000300)={'virt_wifi0\x00', 0x0}) setsockopt$inet6_mreq(r8, 0x29, 0x1b, &(0x7f0000000000)={@remote, r9}, 0x14) sendmsg$nl_route_sched(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=@newtfilter={0x24, 0x11, 0x1, 0x70bd27, 0x2000, {0x0, 0x0, 0x74, r9, {0xfffd, 0xfff0}, {0xffe0, 0xfff1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x30004804}, 0x200088c0) (async) r10 = syz_init_net_socket$ax25(0x3, 0x2, 0x1) getsockopt$sock_buf(r10, 0x1, 0x1a, 0x0, &(0x7f0000000040)) r11 = socket$inet(0x2, 0x3, 0x5) setsockopt$ARPT_SO_SET_REPLACE(r11, 0x0, 0x60, &(0x7f00000000c0)={'filter\x00', 0x7, 0x4, 0x3c8, 0x0, 0x110, 0x2e0, 0x2e0, 0x110, 0x2e0, 0x4, 0x0, {[{{@arp={@multicast2, @empty, 0x0, 0x0, 0x3, 0xe, {@empty, {[0xff, 0x0, 0x0, 0xff, 0xff, 0xff]}}, {@mac=@remote}, 0x4, 0x5, 0xfff8, 0x91fe, 0x3, 0x0, 'bridge0\x00', 'veth1_to_bond\x00', {}, {0xff}}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010101, 0x0, 0x1}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@arp={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, 0x0, 0xff000000, 0xa, 0x2, {@mac=@random="0acc9bdf614c", {[0x0, 0xff, 0xff, 0x0, 0x0, 0xff]}}, {@mac, {[0x0, 0x0, 0x0, 0xff, 0xff, 0xff]}}, 0x4, 0xfff7, 0x2, 0xf, 0xb, 0x0, 'veth0_to_bond\x00', 'pimreg1\x00', {}, {}, 0x0, 0x282}, 0xc0, 0xe8}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x2, 0xfffa}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) (async) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r12, &(0x7f0000000000)=ANY=[], 0x3261e) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x13, r12, 0x0) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r13, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, 0x1, 0x1, 0x5, 0x0, 0x0, {}, [@CTA_ZONE={0x6}]}, 0x1c}}, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000040)=0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(r12, 0x29, 0x22, &(0x7f0000000480)={{{@in=@local, @in6=@mcast2, 0x4e23, 0x0, 0x4e23, 0x0, 0xa, 0xa0, 0x0, 0x62, 0x0, r14}, {0x407bd9fb, 0x7f, 0xffffffffffffffff, 0x0, 0xf2, 0x2, 0x9, 0x3000000000}, {0x3, 0x9, 0x3, 0x3ff}, 0x9, 0x6e6bb3, 0x1, 0x0, 0x6, 0x3}, {{@in=@multicast1, 0x4d6, 0x32}, 0x0, @in6=@dev={0xfe, 0x80, '\x00', 0x15}, 0x0, 0x2, 0x2, 0xfd, 0x0, 0x1, 0x800}}, 0xe8) 5m55.94416609s ago: executing program 0 (id=1281): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x11, 0x3, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f00000000c0)=0x110, 0x4) sendmmsg(r1, &(0x7f0000000000)=[{{&(0x7f0000000400)=@qipcrtr={0x2a, 0x1, 0x4001}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000040)="d479183d7d98d181a4b5f3e38100", 0xe}], 0x1}}], 0x1, 0x24044015) recvmmsg(r1, &(0x7f0000000380), 0x1, 0x2002, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000003640)={0x0, 'hsr0\x00', {0x1}, 0x7}) r2 = socket$kcm(0x2, 0xd, 0x2) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000500)={'hsr0\x00', &(0x7f00000004c0)=@ethtool_sfeatures={0x3b, 0x2, [{0x200, 0x4a39b33c}, {0x2, 0xb}]}}) 5m55.838560519s ago: executing program 1 (id=1282): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r3) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) (async) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r5) (async) close(r5) socket$unix(0x1, 0x1, 0x0) (async) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r9 = socket$unix(0x1, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {0x0, 0xb}, {0xffff, 0xffff}, {0x10, 0xfff1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x2, 0x81, 0x7, 0x8, 0x8}, {0x6, 0x1, 0xd, 0x6, 0x6, 0xfb8e000}, 0x6, 0x4, 0x111e}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x24000011}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x80000, {0x0, 0x0, 0x0, r8, {0x0, 0x6}, {0x2, 0xb}, {0xffe0, 0xb}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_EVICT_TIMEOUT={0x8, 0x6, 0x1}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2404c0f1}, 0x4008000) ioctl$SIOCSIFHWADDR(r5, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x2, @fixed}, 0xe) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYRESHEX=r0, @ANYRES32=r0, @ANYRES32=r0], 0x58}, 0x1, 0x0, 0x0, 0x8001}, 0x0) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r12, 0x8008f511, &(0x7f0000000040)) r13 = accept4$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @multicast2}, &(0x7f00000000c0)=0x10, 0x800) getsockopt$inet_mreqn(r13, 0x0, 0x20, &(0x7f0000000100)={@remote}, &(0x7f0000000180)=0xc) 5m55.72900612s ago: executing program 4 (id=1283): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000007c0)=ANY=[@ANYBLOB="580000000206010800000000000000000000000005000400000000000900020073797a31000000000c0007800800114000000000050005000a000000050001000600000011000300686173683a69702c706f7274"], 0x58}}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791048000000000071042b000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$FS_IOC_SETFSLABEL(r2, 0x8911, &(0x7f0000000000)="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") bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001280)={r1, 0x0, 0x1000, 0xea, &(0x7f0000000080)="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", &(0x7f0000001080)=""/234, 0x2, 0x0, 0x48, 0x47, &(0x7f0000001180)="9a6fedbb399a087356078bdb9cd930f1f6b31ae8b97f1ed568a39dce8fe5375e48ed89a720d91a468255aaca38c52543d2be99030bb2ba9123567588627524d2ba5add2dea8b7461", &(0x7f0000001200)="1c0a698e1144b67d0776f11f427064864b25f60775781df9c372efbe772b2620841430721e773f0ae40b03fe0838cef527fce8f22c2f7f0368f1fbd1b7560b068bf169c333442f", 0x6, 0x0, 0x401}, 0x50) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000001940)={&(0x7f0000001840)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001900)={&(0x7f0000001880)={0x68, 0x1, 0x4, 0x801, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFULA_CFG_MODE={0xa, 0x2, {0xe1, 0x2}}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x4}, @NFULA_CFG_MODE={0xa, 0x2, {0xff}}, @NFULA_CFG_MODE={0xa, 0x2, {0x33b9, 0x1}}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x438}, @NFULA_CFG_FLAGS={0x6}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x8}, @NFULA_CFG_CMD={0x5, 0x1, 0x2}, @NFULA_CFG_CMD={0x5, 0x1, 0x4}]}, 0x68}, 0x1, 0x0, 0x0, 0x880}, 0x40010) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, 0x0, &(0x7f00000004c0)) ioctl$SIOCPNADDRESOURCE(r3, 0x89e0, &(0x7f0000001600)=0x75d) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r5 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r4, &(0x7f0000000840)={@val={0x8, 0x800}, @val={0x6, 0x0, 0x6, 0x0, 0x14}, @ipv4=@generic={{0x5, 0x4, 0x2, 0x2, 0xfc0, 0x66, 0x0, 0xb, 0x88, 0x0, @private=0xa010100, @broadcast}, "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"}}, 0xfce) socket$pppoe(0x18, 0x1, 0x0) r6 = socket$kcm(0x29, 0x5, 0x0) getsockopt$kcm_KCM_RECV_DISABLE(r6, 0x119, 0x1, 0x0, 0x1ce0ef95c5c0bdc8) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000001400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000013c0)={&(0x7f0000001300)=@deltaction={0xa4, 0x31, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x7, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}]}, @TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x10, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1ff}}, {0xc, 0x3, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}]}, @TCA_ACT_TAB={0x34, 0x1, [{0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7ff}}, {0xc, 0x20, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0xc, 0x7, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x12, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}]}, @TCA_ACT_TAB={0x24, 0x1, [{0x14, 0x12, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x20, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x8024080}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r9) sendmsg$ETHTOOL_MSG_DEBUG_SET(r9, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c000280"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r8, &(0x7f00000015c0)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001580)={&(0x7f00000014c0)={0xb0, r10, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}]}, @ETHTOOL_A_LINKMODES_MASTER_SLAVE_CFG={0x5, 0x7, 0x3}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0x80}, @ETHTOOL_A_LINKMODES_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0x6}, @ETHTOOL_A_LINKMODES_LANES={0x8, 0x9, 0x4}, @ETHTOOL_A_LINKMODES_LANES={0x8, 0x9, 0x3}, @ETHTOOL_A_LINKMODES_LANES={0x8, 0x9, 0x1}]}, 0xb0}, 0x1, 0x0, 0x0, 0x40000}, 0x80) r11 = syz_init_net_socket$ax25(0x3, 0x2, 0x8) ioctl$SIOCAX25DELFWD(r11, 0x89eb, &(0x7f0000001440)={@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}) 5m55.242842344s ago: executing program 32 (id=1283): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000007c0)=ANY=[@ANYBLOB="580000000206010800000000000000000000000005000400000000000900020073797a31000000000c0007800800114000000000050005000a000000050001000600000011000300686173683a69702c706f7274"], 0x58}}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791048000000000071042b000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$FS_IOC_SETFSLABEL(r2, 0x8911, &(0x7f0000000000)="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") bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001280)={r1, 0x0, 0x1000, 0xea, &(0x7f0000000080)="87ffb0909812dc149ce8eedd46f1407da49b8797543bc8ff5362bc85ab4addfab62ef1183f3ec040e1e880051b54048f873cb3c7bf4833057881f315d3ab47d53e361e747b531390d23553077e063d843e3d289ddc047c5dffb60b4eb02b898cba77ee5271e0e44d95a04f8525ffb1e14283c7565c0b9d8b09502c28586533933637096cc1878f691cd09c43a234ad9a77497014905bb3d061acfadf034600a37cb0d7c4826de615d4d098362492d77d83a6b9be68fba660c6411f6e7cdfa1afac43dbbf59130f048264615cbe80393816d66f184045fe3357a1f61ef31788acf0fc6888d90322a9876c00ae43614fc0385c9088922227253a8848371a596098dec6ec626f69f5c3f94c9b36d38f2b1d57fffeb8c6f512eefaaf2e82fedcf3ddff0670bc6d24c9e32a971780c94b47d6f57f5475f019fe546c8f705d279ba36a0e99a91dd937d71944fd880dadcc4608a334e374d6fb45b3b12f4a880543e5f6af735ca3982aa7322da5ef74a78706b315038b726be798f8fef2fb70be9220d3e57dcc2cffcb8df53ae7302c64619f51525b5ebf99e1fc5a1b823727720c67f879350126e76c22b3f845ff7758faab7121432cbf2d0786384986ac811de94161de192f21c549028db0091cde4aceaf821289e654bd2bf7a29b9258b99e969949b98da870ad6e91fd41e595300cf5d3541d3f645cfc8b24215f27469d933366bb1523ecd11d14452f344b6dbde05cd16a178b51e6d7555a1557903c6038d504bd312f67bc49a5ed8e151c377ab14c933d3807640fecbd33882d575c76faaa73b4f84416a8d2933334acb8b02aa66a21778bbe14ecdbf3fe2aa050cdc1d668bbce0854c57c86b20fe29c9f0c907a46c08992370ab1df6029fb95ea2b9abf8581bde1071bcbb02b287ae17ff817c5c222a70f98458c7432d105762dfd04d7ab36dd8870cfda12ad71ce8f6f89b62daf90a636a1d3dd2b64c922690494b0a3e28765e90f969da012551bd8980bd280ceca84e5a56f8c2c63d50bdddd3275437d61e5b91bf5a7dc4c94137337d6fbed4c30119229a138cc613ff2aa3bc599760d995004f404e6cae2a0f9f2f75d6b2f6ab0ea62cee155ccc3740c7053baea9c810c7dadf34babf9e759dd7ab8ecfae1720e1a94a148a70248d9452f0b3a2a913af8833aa1903e130e67baf42d06a0d74a6bac1189cca8cafab96dbdf4efcb830603003d78218455d0b6f8763b86a051028612cd060c8c7199a00a91ca220b6d6e24c09002f378d5a8445492ac6af4e6065c773d367c0ce5ae80940952dc1fb2692d3041b9b61fc34c4c1503ff3baad01eb3da126ce4a6d5586023fed9f78ffa12a6401992456b07d296f7c759793b37a9959c6874820185380b540dd409c964a1a2af01b1d26f58b9580ff30e0a96d6e2cfb34118db8f89d8a6b095ab5e48075444aa46945088a4ef143837a9b31e93217ebb9331b432ee501aea7f9e797a5570cc8f0392efa69ece5125168d3105b84c031e07944809d6f08af56fd2718b917abbc7a83c11f61593461a2bc43b4720658e15c39efd8cc93730c6e23bca99d33e0580cffd5aeabd1029edb92bb1cf2755701a8c8f5ef9d9b0e50d88b29bbf7655bfb74135c356325f27b527c944d45700ab5cc7f512e036083171acef22659e5abb54bb53de4fa018e32c4dba7c828ad4e0b9ef55a59112c276ec66d0c011138cecbb2ed8e86a58e53bfdc30b6a72d5ba9c3878244424cb31ce2ce1f2f438c1b96776a48440322daeb2edd306ebcf8c8749b248473d46a229becf3df012e1420dc0572310f2ee3cfaa7361f1f618cf898fb7b4c1a717bed6e117e3ccb5956001b8667cb29cf5444446cf3838b70fa4920f4b235731e1b0973d92e03480275821932bd3afd3c24556b04fe2c45cd5fd7c18b4ef14975dd575586f055f05db254b9b5930ac785c86e6a3122be3fa7f9048428674eb05326ae321c9a4074154e5034d31e0ed73a58e0338d5fc675ad7c31847053598adcc69e0ba456c161f3d60e4f84e6fd583325ef9dc3259fb28ffaaf0906cdde88fca9495986a1213c8500888dd41e3210dafb61c8baec27ec711213999ebac23b645a03f9efcdc7e517d7e0f97b2c3b6c9c19cd108661d84ce7db3f1d30a5ad209125e1ae43bc3fb0259e38bab78a6bfe660192ee3fc1ce789be300f6e8d3c307b6c8469d1da61017ae5b9f9ed9140e9185794e8365d9d7b50791ff95b7efdc4d2b548d4f997ac78c55d59cebd0f66407e276d46283cd3d0ddfd95851cd73d5158cc5fdfc1c99a98b8ed5b41c6cd2e242d21acd6c8dbe9a080ef1d4d37449c4bef974198855b0c137bafc6ad0132cf93d57f1f4ff5732277279ce9b5452dab356e111486a28fd3238013ef7ed4c188f6a80f25ae525cf1bfca9143c9c654784fbe4fd5d1f64a5616a4c6239b589d6cb3872b9b9734740ccd30bad55f8a860ae9009b3ab47d6439fc3ace767d251e0ef859196ba2aaf16960cb96ed88c5642214d4dd222fe823250fab18535fa72ecf88b6f313ec5da9076bc32b0721974a6e0109078c309daa5928f8aae6fecb117acac710fad829ae1b27a8a84163bd7513852b651ab1cb047cccbeec94a670c5c741c7f5903403c6c80b35ce25de59d183da14d84a09331c0be4fef21e719a9f084c703c9c0a5323cb90a18866daf97b8ec54bebf88deeac98af35e0e0c5a3a3f7393133eb8857cd83c3232031c5e82499f18596164ce2d5b7b2ae8fce8cd118dd7ef7a367c4c6955420097d800823c3e620548d747e0d57ac079affdcdf2306f0f0ac452678e4223e5086450e7611dd7871e5e20ecd60d88b5e2215ce12817b738e8e8e9e738a79cb84c40de6cd826aa6acc4c2fa15e8170788ae3c7be5c72539b55723c70e52421e5dff5618e3cc85074f534b98bc566fbccfcbcba3e4638a6b7bb0cf1417df6029203a19d480ea77452100775089c4f62c6c9526b7e916812bed56b8361327d8893b3a62de77b0cb97c0542610746fc7c1ca552949d15700817a3a3e072e055ff395932ef17cfec6df83b8f4a67de4b43536866b72546c4a54a72ce0d43eeb7c17f92855ea4c44a178c9ee8a08e51ff43659208ceefed54e650818f2dc3e79c6b695a03404eb540e6a264b5783399e612e0d1d64bf46c551f80341f1543d49e7083cf6a83d0423bf42d087edddbbc3f035b9f04ce20fa8e1615de0f531f440934fb2fb0bcb03403ca0d19fa31541036dad4b98b37ccb9f1b615ebbea615c72e9c6d219e1f6423a3f74f7f52cf5cd58b858b32422e1618139389e6afee2cd30632ced8a912b3e7a7e637c06eb73918c095c53feb09709aef97fae3a7c19fb7b3e56f7f382af7d4d48a600ba78e82e464ce834438dc285a670545ec378126e2d773394f56c4ae11bc5119a71c66e94d85e78ec308a2dcc9e699196a4a3ccc01bffdbddeed7df3fc98fdf700c37929f335848d6d5bcfc6b120bf340cf8ece0cbbe7ff7c17465b48c0692889e052fc1f4a85aba597beb59f7a6c4ada62e751d66d5a01df85743fa8b2541733ff3a8f42d9e2964e1de77de0b82ae884147366357957b358da3212da3432d2f6e3f74224d9f845fe32b998ac1c1dbba8850777ebd6578da6c928cba08f853bb5ec20587eb41ef161c1f6c119493b20113d2ba5d9ff8708def82299033f09ab1e8079bc4395bbb15f0358b3bcb9ee0cf20aa56f0e0b479e2051d58e196445a634613482021282b705247f7866a286fe0d2481873a6054aad78a5c719f0abdcfb7aa5c2468ddda46ff60a950be6b7730c25995ee4df4f18eb2f6151b0843d39a920df52d91b6485c70f496b0e5c0f56d2638425aba77bc837349b434bd26a9dc4766d0033dd48db254955117a24951d352b7e780f16f3e1b3ed4993bb46649f003df1955469a9280883b07d8abe306fb3414c3697acef1dbbe940823b28230f4d70e2d588629bfa0d3d5c920e818994afbe9c035cbeb809de62237a4fcaa7643f6f00841065d04649b0b786f80f277987db7406d9265bc5be809ff0ae4d88c1bb7ff0ad779ca2531092bea3241e4a0578c13b26dfcd6e57ebc5ade5bf3f95abf9c951ff6626bb89336e3ce911d24c5a4521ec28104ebe954c0e72ab1b2a6177ee33a2a5edff2b917cf0a6bcdf2c8334c3aa68d1954dc0ac7d1808bd7cb3cdee347bddd376a4751457d638d1eb9f1c371c50e27f0a8c01d305ff3a4040e3e66f627af106091075fe0d6f10c39db3d8af89fbf894e20a50812a7c0e04223676afc5529268c695fe82a5bc8f265ca1df7e094a7abd9713676707f500a37a23bb287077bb762acc307d8b16b906335be8571b455cc3a147e293bb82a3101f14141232b4ee5df7041873625a4e7d71f58f550b6de51eebe505ed3ea1f4b2121e509bb87b846834774fbfa69cf77dfb31fb100203b553050c18d8e1b4b4eb46684b7974b8355e747f52cd3a175f37a7811a4f344a40d0bdcb9f96f5c5faf7f2092508b807277313513ed4b16c7b843faedd628bc0edff44e56fb981ff1a36efcfc6351dca462d0bf109d59db2a444891a939c0fded1cdb42b1e571a752f1a6830fa7f7d2f9902a032b772264df7c1aa6953c742ab9265ad0f5b2376b3372ab3488fd32a2ebe3e22c0aebf77341119ebdaaa83d45fb0764815aee9b1060d40aa9adb899fe99d54d9fb992e7750610fff897a8e8bf59c671da59567b1265a04d99ef9acce89468fa0e92208dc11931e35b4324a3eb12dfd74ebe5cc60abed09c4d6958f93fc033987940e0d71ef1f7f70428d04dd04b21b1523950aa8e61f33a61e404981e4d83eb6a10626163d47c36dd0fcfb3811bb911c2c8830305e91ae024ee65abf35cf50358d12e947ad4cf3061a82ade32d0e019a6e17fc54515c2ad1c86f99e17b6e649ce739804c3fa23e553ad53ff659f125fb7948f49b4a9764831ec68d6561dd38f36fb551c6575e40ecb58a3fa16a58a9515fc8048099f912eb0ce142fae4507f64d9a0d7131d6f1656367d527e9200538be26d2bd880f28dcdb8c9defeb132271abd2a05c0ead8f8e0c7d1f7da8168a8e0dbcf9f2eb190a2f3e6f9dc087cfca67793a4a3d7c2e9f7b7b14e82a8c61e289af06a4d85eb15b654ab63f89cd01af393726d8a88f0d24aaba4559eda0dba9a4deefc1503729299a22c6afe7b987adce745a0202162ec528f8e765b8fdea77a859934c1a8b94d66d781e32faf266fb39635a0eb8b7edc03a491a4f2c7a553ba353a7a518a3b5f5e1157b53b2868954279e92ebd994ccf575bcdd9719c97cf7470b5bf1a34002be9a6a1b34af82cb765a54d47830bfa813ee59e6efbd8a6319a049305aa17c04e504a12be4347c9de6bfb8f337a70fc1e39c0c96e6c03e7e49564d49222d62d545ee61d6b9a1cc4c00c4595b80ade7cc47ba86055d8bcd07fe7523915447aef044128da464f27748409da984df5ec25723b0b46ad3b889ae2a9b5d2b61b560eec9c40478578b1670540e949afe28296050191ff2f38584d466209415c1f9196317de4862df48877619495e71d7365648192231cbaf6f318ff98827dad52467b67c6f1883b44e5d56e4763a8a211d33bd7831b0acb21e1dd24e39e7b0200967887a0da392137efcbdfdb4f4448eb40a9bbd0a09f5b9240da83aa660ef3d7a4b88076769c175b5675d6861577dbd6577bc398baa39cec5bb4bed4922d7e77e19da9838dccf82e30a7f76727167c4c5863b3546bcdbfa17055ca78da128c88cbcd26ef01306250e8714c807d9e54de61796ca999bc5c62", &(0x7f0000001080)=""/234, 0x2, 0x0, 0x48, 0x47, &(0x7f0000001180)="9a6fedbb399a087356078bdb9cd930f1f6b31ae8b97f1ed568a39dce8fe5375e48ed89a720d91a468255aaca38c52543d2be99030bb2ba9123567588627524d2ba5add2dea8b7461", &(0x7f0000001200)="1c0a698e1144b67d0776f11f427064864b25f60775781df9c372efbe772b2620841430721e773f0ae40b03fe0838cef527fce8f22c2f7f0368f1fbd1b7560b068bf169c333442f", 0x6, 0x0, 0x401}, 0x50) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000001940)={&(0x7f0000001840)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001900)={&(0x7f0000001880)={0x68, 0x1, 0x4, 0x801, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFULA_CFG_MODE={0xa, 0x2, {0xe1, 0x2}}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x4}, @NFULA_CFG_MODE={0xa, 0x2, {0xff}}, @NFULA_CFG_MODE={0xa, 0x2, {0x33b9, 0x1}}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x438}, @NFULA_CFG_FLAGS={0x6}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x8}, @NFULA_CFG_CMD={0x5, 0x1, 0x2}, @NFULA_CFG_CMD={0x5, 0x1, 0x4}]}, 0x68}, 0x1, 0x0, 0x0, 0x880}, 0x40010) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, 0x0, &(0x7f00000004c0)) ioctl$SIOCPNADDRESOURCE(r3, 0x89e0, &(0x7f0000001600)=0x75d) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r5 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r4, &(0x7f0000000840)={@val={0x8, 0x800}, @val={0x6, 0x0, 0x6, 0x0, 0x14}, @ipv4=@generic={{0x5, 0x4, 0x2, 0x2, 0xfc0, 0x66, 0x0, 0xb, 0x88, 0x0, @private=0xa010100, @broadcast}, "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"}}, 0xfce) socket$pppoe(0x18, 0x1, 0x0) r6 = socket$kcm(0x29, 0x5, 0x0) getsockopt$kcm_KCM_RECV_DISABLE(r6, 0x119, 0x1, 0x0, 0x1ce0ef95c5c0bdc8) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000001400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000013c0)={&(0x7f0000001300)=@deltaction={0xa4, 0x31, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x7, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}]}, @TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x10, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1ff}}, {0xc, 0x3, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}]}, @TCA_ACT_TAB={0x34, 0x1, [{0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7ff}}, {0xc, 0x20, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0xc, 0x7, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x12, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}]}, @TCA_ACT_TAB={0x24, 0x1, [{0x14, 0x12, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x20, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x8024080}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r9) sendmsg$ETHTOOL_MSG_DEBUG_SET(r9, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c000280"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r8, &(0x7f00000015c0)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001580)={&(0x7f00000014c0)={0xb0, r10, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}]}, @ETHTOOL_A_LINKMODES_MASTER_SLAVE_CFG={0x5, 0x7, 0x3}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0x80}, @ETHTOOL_A_LINKMODES_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0x6}, @ETHTOOL_A_LINKMODES_LANES={0x8, 0x9, 0x4}, @ETHTOOL_A_LINKMODES_LANES={0x8, 0x9, 0x3}, @ETHTOOL_A_LINKMODES_LANES={0x8, 0x9, 0x1}]}, 0xb0}, 0x1, 0x0, 0x0, 0x40000}, 0x80) r11 = syz_init_net_socket$ax25(0x3, 0x2, 0x8) ioctl$SIOCAX25DELFWD(r11, 0x89eb, &(0x7f0000001440)={@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}) 5m55.235182514s ago: executing program 0 (id=1285): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0900000008000000dd000000ff"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4050000d62b00006110600000000000c6000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)=ANY=[@ANYRES32, @ANYRES32=r3, @ANYBLOB="260000000000000000000000fbe2c350ff5b8e7d2d537e2d1842d5dc71f57202a62bcddee9bd6a7d735e491555068c85396ee1e3cb705092d6dd52f3791eee773cc17ca02b810b1a0698852c3bd43d2f445992fff8f1279c61282e89779c178d22e4511455c67d83d9fb84f07b710559443cde9cd40345861a10bbbe00280b9cd6f257a5e1f48b48f9ee2398347202d832872d53e57471b0ac2e6c8bb59191b0472c6a2eda69d258c0669a45f5157c8e467ae9df7256", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x10) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="4800000010000304000000000400000000007400", @ANYRES32=0x0, @ANYBLOB="0000000003120100280012800b00010062726964676500001800028005002c00020000000c002e"], 0x48}, 0x1, 0x0, 0x0, 0x20040884}, 0x0) 5m55.097528831s ago: executing program 33 (id=1285): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0900000008000000dd000000ff"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4050000d62b00006110600000000000c6000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)=ANY=[@ANYRES32, @ANYRES32=r3, @ANYBLOB="260000000000000000000000fbe2c350ff5b8e7d2d537e2d1842d5dc71f57202a62bcddee9bd6a7d735e491555068c85396ee1e3cb705092d6dd52f3791eee773cc17ca02b810b1a0698852c3bd43d2f445992fff8f1279c61282e89779c178d22e4511455c67d83d9fb84f07b710559443cde9cd40345861a10bbbe00280b9cd6f257a5e1f48b48f9ee2398347202d832872d53e57471b0ac2e6c8bb59191b0472c6a2eda69d258c0669a45f5157c8e467ae9df7256", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x10) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="4800000010000304000000000400000000007400", @ANYRES32=0x0, @ANYBLOB="0000000003120100280012800b00010062726964676500001800028005002c00020000000c002e"], 0x48}, 0x1, 0x0, 0x0, 0x20040884}, 0x0) 5m55.083356854s ago: executing program 1 (id=1286): r0 = socket$igmp6(0xa, 0x3, 0x2) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x2710, @local}, 0x10) setsockopt$inet6_int(r0, 0x29, 0x12, 0x0, 0x9f) r2 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_SIOCGIFBR(r2, 0x8940, &(0x7f0000001980)=@generic={0x3, 0x1, 0x7}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x144, 0x10, 0x1, 0xbffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@local, 0x1, 0x794, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x9, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0x1ff}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0xfd, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @mark={0xc, 0x15, {0x35075a, 0x4}}]}, 0x144}, 0x1, 0x0, 0x0, 0x8801}, 0x10) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x18, 0x1, 0xfffffffe, 0x100, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x71c, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@dev={0xac, 0x14, 0x14, 0x25}, {0x0, 0x192, 0x9ba3, 0xffff, 0x8251c, 0x5, 0xfffffffffffffffc}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffa, 0xfffffffc}, 0x80, 0x3500, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newlink={0x50, 0x10, 0x40d, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x20, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @local}, {0xa, 0x4, @random="3d4f1250b43a"}]}]}}}]}, 0x50}}, 0x0) r6 = accept4$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000040)=0x1c, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f00000000c0)=[@in6={0xa, 0x4e24, 0x7, @local, 0x6736}, @in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in6={0xa, 0x4e23, 0xf, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4}], 0x48) 5m55.079511925s ago: executing program 34 (id=1286): r0 = socket$igmp6(0xa, 0x3, 0x2) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x2710, @local}, 0x10) setsockopt$inet6_int(r0, 0x29, 0x12, 0x0, 0x9f) r2 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_SIOCGIFBR(r2, 0x8940, &(0x7f0000001980)=@generic={0x3, 0x1, 0x7}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x144, 0x10, 0x1, 0xbffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@local, 0x1, 0x794, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x9, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0x1ff}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0xfd, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @mark={0xc, 0x15, {0x35075a, 0x4}}]}, 0x144}, 0x1, 0x0, 0x0, 0x8801}, 0x10) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x18, 0x1, 0xfffffffe, 0x100, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x71c, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@dev={0xac, 0x14, 0x14, 0x25}, {0x0, 0x192, 0x9ba3, 0xffff, 0x8251c, 0x5, 0xfffffffffffffffc}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffa, 0xfffffffc}, 0x80, 0x3500, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newlink={0x50, 0x10, 0x40d, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x20, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @local}, {0xa, 0x4, @random="3d4f1250b43a"}]}]}}}]}, 0x50}}, 0x0) r6 = accept4$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000040)=0x1c, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f00000000c0)=[@in6={0xa, 0x4e24, 0x7, @local, 0x6736}, @in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in6={0xa, 0x4e23, 0xf, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4}], 0x48) 5m55.026360777s ago: executing program 3 (id=1288): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000001c0)={'vxcan0\x00', 0x0}) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r3, 0x0, 0x2e, &(0x7f0000000340)={0x3, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @loopback}}}, 0x108) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) connect$unix(r5, &(0x7f0000000000)=@abs={0x0, 0x0, 0x5}, 0x6e) connect$unix(r4, &(0x7f0000000800)=@file={0x0, './file0\x00'}, 0x6e) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[], 0x1c}}, 0x0) r6 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000080)='syz1\x00', 0x200002, 0x0) r7 = openat$cgroup_ro(r6, &(0x7f00000001c0)='io.stat\x00', 0x275a, 0x0) write$cgroup_subtree(r7, &(0x7f0000000000)=ANY=[], 0x3261e) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000009, 0x12, r7, 0x0) getsockopt$inet_buf(r3, 0x0, 0x30, &(0x7f0000000340)=""/225, &(0x7f0000000180)=0xe1) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB="380000004800030000000000000000000a000000", @ANYRES32=r2, @ANYBLOB="000000001400010000000000000000000000000000800000080002"], 0x38}}, 0x0) 5m55.014277273s ago: executing program 35 (id=1288): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000001c0)={'vxcan0\x00', 0x0}) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r3, 0x0, 0x2e, &(0x7f0000000340)={0x3, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @loopback}}}, 0x108) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) connect$unix(r5, &(0x7f0000000000)=@abs={0x0, 0x0, 0x5}, 0x6e) connect$unix(r4, &(0x7f0000000800)=@file={0x0, './file0\x00'}, 0x6e) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[], 0x1c}}, 0x0) r6 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000080)='syz1\x00', 0x200002, 0x0) r7 = openat$cgroup_ro(r6, &(0x7f00000001c0)='io.stat\x00', 0x275a, 0x0) write$cgroup_subtree(r7, &(0x7f0000000000)=ANY=[], 0x3261e) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000009, 0x12, r7, 0x0) getsockopt$inet_buf(r3, 0x0, 0x30, &(0x7f0000000340)=""/225, &(0x7f0000000180)=0xe1) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB="380000004800030000000000000000000a000000", @ANYRES32=r2, @ANYBLOB="000000001400010000000000000000000000000000800000080002"], 0x38}}, 0x0) 3.126765684s ago: executing program 8 (id=3730): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000100)=0x204, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000480)={'ip6_vti0\x00', 0x0}) sendto$packet(r2, &(0x7f00000002c0)="05031600d3fc140000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000500), r0) sendmsg$NLBL_CIPSOV4_C_LIST(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000540)={0x14, r4, 0x1}, 0x14}}, 0x0) 3.097544693s ago: executing program 6 (id=3731): openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000005c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="010028bd7000010000000f0000000800"], 0x2c}, 0x1, 0x0, 0x0, 0x24004040}, 0x80) (async) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000005c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="010028bd7000010000000f0000000800"], 0x2c}, 0x1, 0x0, 0x0, 0x24004040}, 0x80) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xffff, 0x93c2b9cfd4bab91d}, {0xd, 0x4}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0xfffffff9}, @TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5, 0xb, 0x7}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4008000) r4 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r4, &(0x7f00000005c0)="bad330fbc9b55400040000ea0756a85d88a8", 0x5ea, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r3, 0x1, 0xd8, 0x6, @multicast}, 0x14) (async) sendto$packet(r4, &(0x7f00000005c0)="bad330fbc9b55400040000ea0756a85d88a8", 0x5ea, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r3, 0x1, 0xd8, 0x6, @multicast}, 0x14) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x1f1, 0x10, &(0x7f0000000000), 0xffffffffffffffa6, 0x0, 0xffffffffffffffff, 0x60}, 0x48) socket$inet_sctp(0x2, 0x5, 0x84) (async) r5 = socket$inet_sctp(0x2, 0x5, 0x84) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r6, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) socket$can_j1939(0x1d, 0x2, 0x7) (async) r7 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000200)={'vxcan0\x00', 0x0}) bind$can_j1939(r7, &(0x7f0000000000)={0x1d, r8}, 0x18) sendmsg$can_j1939(r7, &(0x7f00000002c0)={&(0x7f00000000c0)={0x1d, r8, 0x2, {0x2}}, 0x18, &(0x7f0000000040)={0x0}}, 0x4000000) (async) sendmsg$can_j1939(r7, &(0x7f00000002c0)={&(0x7f00000000c0)={0x1d, r8, 0x2, {0x2}}, 0x18, &(0x7f0000000040)={0x0}}, 0x4000000) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000000c0), 0x4) (async) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r6, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00', '#\x00'}, 0x28) writev(r6, &(0x7f0000000740)=[{&(0x7f0000000280)="581a17919cc77431510e7fc4ed9fb860505f1495ff92f16a44f8a13d58751d926def1f80b315bdc726cdd8b5d1a91f485854af8fc854b0da7a02522fe7b2c21db7a46c48473099d4a4654cfd97a67c9e79afc0d444e6c78b0216d2201b128df9d4ed5b4dbe676fe56a6354f819d997a6acb8595633cff6f77473b2b3abcc65b51cb3d3a30bf9b0b2ce59d568d3a89b49331904da2a37c89ea236f5d5640c32c3ac74e4bde1a62c560cb63836552f881c8a8305d2a13d838a5160a6c06c63decc865a92e9539f3513af3a1e6f78608890f912f087214dac06387a94d5e1b31c35be117ee540dc4560aa500269b81a0bbc", 0xf0}, {&(0x7f00000007c0)="1d4ac370cf8c47025bd7a6546c8bd2123991596dfcd1abdb72276d5f80b1d38cedd7d704de6e472fa6961cd700b4f8e0f594861c0296ca9277c9bbf83e11a3ab33449d0e26aa8bcb6c2ef9", 0x4b}, {&(0x7f0000000380)="88e584aac45d6d83e6c2e7857149eb55d2c259a747dbdfc0787e87150d7e40953e65741729a68f3c3a890da1b14ce94fb9be03e73d06a982fb502b3ae3a800c03902057e1e", 0x45}, {&(0x7f0000000400)="83c0b58e5bcffe6c14ab199d81f63d9e77512d040c3f3a7b41a3a1ed6cf40450443e4e377139b523eb3dd725f87a1ed946e28c6b19e1fc6ea21fe2eef736ec85289f34830b89c7169369862871b9608f2e976924a41f64f236a395563ddb3b994b4d9cf9f465dea2adad06013851713e9d30f195383be99db35611dd11a69721e423fcf5904c2af8ca4b1774bc6438d1c6218a2ada56c8b5b289274c2d116ecd4aafbd01536f931c84ec7f95ce8c6d118d1dec3bfa645c3e72018e9c154a80fd84b6e0", 0xc3}, {&(0x7f0000001040)="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", 0xdae}, {0x0}, {0x0}], 0x7) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c52d00", "e9be1eae", "0610000000000001"}, 0x28) readv(r6, &(0x7f0000000e40)=[{&(0x7f0000000f40)=""/250, 0xff1}], 0x1) ioctl$sock_inet_SIOCDELRT(r5, 0x890c, &(0x7f00000001c0)={0x0, {0x2, 0x4e21, @loopback}, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x4e21, @empty}, 0x2b3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7f, 0x4, 0x400}) (async) ioctl$sock_inet_SIOCDELRT(r5, 0x890c, &(0x7f00000001c0)={0x0, {0x2, 0x4e21, @loopback}, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x4e21, @empty}, 0x2b3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7f, 0x4, 0x400}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x5, &(0x7f0000000840)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xc}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x5, &(0x7f0000000840)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xc}, 0x94) 2.845710171s ago: executing program 7 (id=3733): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x800, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@bridge_delneigh={0x28, 0x1c, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r2, 0x80, 0xbb}, [@NDA_LLADDR={0xa, 0x2, @dev}]}, 0x28}}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x400}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x58, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xf}, {}, {0x7, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0x28, 0x2, [@TCA_FLOW_EMATCHES={0x24, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x6, 0x7, 0x8001}, {{0x2, 0x0, 0x1}, {0x3, 0x0, 0x1, 0x1}}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}]}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x10}, 0x0) 2.8245277s ago: executing program 5 (id=3735): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x74, 0x4, 0x6, 0x301, 0x0, 0x0, {0x3, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x74}, 0x1, 0x0, 0x0, 0x52}, 0x400c0) (async) r1 = accept$phonet_pipe(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000100)=0x10) ioctl$sock_SIOCADDDLCI(r1, 0x8980, &(0x7f0000000140)={'virt_wifi0\x00', 0x400}) (async) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r3, &(0x7f0000000b40)=[{{&(0x7f00000000c0)={0xa, 0x20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c, &(0x7f0000000000)=[{&(0x7f0000000240)="ad", 0x1}], 0x1}}, {{&(0x7f0000000100)={0xa, 0x4e24, 0x1, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x1}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000800)=',', 0x1}], 0x1, &(0x7f0000000a00)=ANY=[@ANYBLOB="180000000000000029000000360000003b000000000000001400000000000000290000000b000000000000020000000028"], 0x58}}], 0x2, 0x0) r4 = socket$netlink(0x10, 0x3, 0x4) writev(r4, &(0x7f0000000080)=[{&(0x7f0000000e40)="480000001400190d09004beafd0d36020a8447000b4e230f00000000a2bc560119d7004f19dfb7f393d7359031033f817f00000000000000000101ff05c00e030002000000ffff01", 0x48}], 0x1) (async) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000001740)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) (async) r6 = accept4(r5, 0x0, 0x0, 0x0) sendmsg$TIPC_NL_MEDIA_SET(r6, &(0x7f0000001800)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f0000000080)=ANY=[], 0x12f4}}, 0x0) (async) read$alg(r6, &(0x7f0000000a00)=""/4096, 0x1000) (async) read$alg(r6, &(0x7f00000004c0)=""/40, 0x28) (async) syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), r4) (async) getsockopt$rose(r2, 0x104, 0x4, 0x0, &(0x7f0000000080)) 2.793204584s ago: executing program 8 (id=3736): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000540)={'gre0\x00', &(0x7f00000003c0)={'syztnl0\x00', 0x0, 0x40, 0x10, 0xf, 0xb54, {{0x6, 0x4, 0x2, 0x0, 0x18, 0x68, 0x0, 0x22, 0x29, 0x0, @remote, @multicast2, {[@timestamp={0x44, 0x4, 0x58}]}}}}}) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f0000000580)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x72, 0x72, 0x8, [@int={0x1, 0x0, 0x0, 0x1, 0x0, 0x1d, 0x0, 0x30, 0x5}, @type_tag={0x7, 0x0, 0x0, 0x12, 0x4}, @datasec={0x6, 0x3, 0x0, 0xf, 0x2, [{0x2, 0x6, 0x9}, {0x1, 0x9, 0xe}, {0x1, 0x80, 0x65d9dc58}], "2cf4"}, @ptr={0x5, 0x0, 0x0, 0x2, 0x2}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x2, 0x800}}]}, {0x0, [0x38af1f3092e28c3e, 0x5f, 0x0, 0x30, 0x61, 0x2e]}}, &(0x7f0000000640)=""/48, 0x94, 0x30, 0x1, 0x1, 0x10000}, 0x28) (async) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000009c0)={0xffffffffffffffff, 0x20, &(0x7f0000000980)={&(0x7f0000000700)=""/227, 0xe3, 0x0, &(0x7f00000008c0)=""/129, 0x81}}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000090000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x1b, 0x27, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x10}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}, @cb_func={0x18, 0x0, 0x4, 0x0, 0x3}, @generic={0xd5, 0xf, 0x6, 0x7, 0x9}, @jmp={0x5, 0x1, 0xd, 0x4, 0x0, 0xffffffffffffffe0, 0x1}, @tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r0}}]}, &(0x7f0000000200)='GPL\x00', 0x9, 0x0, 0x0, 0x41100, 0xd5c6e41f7a100719, '\x00', r2, @fallback=0x11, r3, 0x8, &(0x7f00000006c0)={0x6, 0x2}, 0x8, 0x10, 0x0, 0x0, r4, r1, 0x3, &(0x7f0000000a00)=[r0, r0, r5, r0, r0, r0], &(0x7f0000000a40)=[{0x3, 0x1, 0x6, 0x6}, {0x1, 0x1, 0xe, 0x3}, {0x3, 0x4, 0xa, 0x3}], 0x10, 0x1}, 0x94) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000500)='page_pool_state_release\x00', r6}, 0x10) (async) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000500)='page_pool_state_release\x00', r7}, 0x10) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r8, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) 2.585591574s ago: executing program 6 (id=3737): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x24, &(0x7f0000009b00)={&(0x7f0000000540)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x88, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x5c, 0x4, 0x0, 0x1, [{0x58, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x48, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x2c, 0x3, "9ac420002e61afb9fdd672bad09dfb78c7699c74e891a0c700"/40}, @NFTA_TARGET_REV={0x8}, @NFTA_TARGET_NAME={0xe, 0x1, 'IDLETIMER\x00'}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x1c, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xb0}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$pppl2tp(r1, &(0x7f0000000a00)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x26) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_DELETE(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r4, 0x1, 0x70bd2b, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20004080}, 0x20040040) sendmsg$L2TP_CMD_TUNNEL_GET(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r4, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1e, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x2}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x24}, 0x94) 2.503447298s ago: executing program 5 (id=3738): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) (async) r1 = socket$packet(0x11, 0x3, 0x300) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x50, 0x10, 0x439, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, 0x9801}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00'}, @IFLA_IPTUN_FLAGS={0x8, 0x8, 0x15}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x24008007}, 0x4040844) (async) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r3, 0x89f5, 0x0) (async) sendto$packet(r1, &(0x7f0000000640)="e8b77052a9", 0x28, 0x40, &(0x7f0000000200)={0x11, 0x86dd, r4, 0x1, 0x0, 0x6, @local}, 0x14) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xdc0, 0x6000002c, &(0x7f0000000100)="b9ff03316844268cb89e14f0080048e0050000310000003377fbac141416e000000183070403b180008903040000845013f2325f003901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014c0000c0adc043084617d7ecf41effff38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d7da058f6efa6d1f5f7ff400"/254, 0x0, 0xfe, 0x60000000, 0x0, 0xfffffffe}, 0x2c) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x90, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private}, {0x8, 0x2, @multicast2}}}]}, @CTA_TIMEOUT={0x8}, @CTA_MARK={0x8}, @CTA_MARK_MASK={0x8}, @CTA_SYNPROXY={0x1c, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ITS={0x8}, @CTA_SYNPROXY_ISN={0x8}, @CTA_SYNPROXY_TSOFF={0x8}]}]}, 0x90}}, 0x0) r6 = socket(0x21, 0x2, 0x10000000000002) connect$rxrpc(r6, &(0x7f0000000140)=@in4={0x21, 0x100, 0x2, 0x10, {0x2, 0x4000, @empty}}, 0x24) (async) sendmmsg(r6, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0xe000}, 0x5}], 0x1, 0x0) recvmmsg(r6, &(0x7f0000002d40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) (async) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f00000002c0)={0x0, 0x27f4}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r6, 0x84, 0x22, &(0x7f0000000f00)={0x4, 0x0, 0xe86b, 0x8, r7}, 0x10) 2.373631588s ago: executing program 8 (id=3740): r0 = epoll_create1(0x80000) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = epoll_create1(0x80000) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000000080)) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000500)) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)={0x40000000}) close(r2) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(r5, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800001e000201010000000000000000a714666f7277617264696e6700"/40], 0x28}, 0x1, 0x0, 0x0, 0x30}, 0x10) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000001000010025bd367de923df2500000000", @ANYRES32=0x0, @ANYBLOB="380904000300000008001b0000000000"], 0x28}, 0x1, 0x0, 0x0, 0x68010}, 0x0) 2.359695891s ago: executing program 6 (id=3741): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r1 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r1) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r0) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4026200}, 0xc, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="0c020000", @ANYRES16=r3, @ANYBLOB="04002dbd7000fcdbdf25170000000e0001006e657464657673696d0000000f0002006e657464657673696d300000080003000000000008000b0008000000060016000700000005001200010000000e0001006e657464657673696d0000000f0002006e657464657673696d300000080003000300000008000b000104000006001600010400000500120001000000080001007063690011000200303030303a30303a31302e3000000000080003000000000008000b000800000006001600b3310000050012000000d58b819201006e657464657673696d0000000f0002006e657464657673696d300000080003000300000008000b0009000000060016000500000005001200010000000e0001006e657464657673696d0000000f0002006e657464657673696d300000080003000300000008000b000000000006001600fbff000005001200000000000e0001006e657464657673696d0000000f0002006e657464657673696d300000080003000200000008000b000100000006001600090000000500120000000000080001007063690011000200303030303a30303a31302e3000000000080003000200000008000b000001000006001600e200000005001200000000000e0001006e657464657673696d0000000f0002006e657464657673696d300000080003000300000008000b000104000006001600080000000500120001000000"], 0x20c}, 0x1, 0x0, 0x0, 0x40000}, 0x4004014) (async) syz_emit_ethernet(0x58, &(0x7f0000000780)={@link_local, @remote, @val, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x1a, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ns={0x87, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [{0x0, 0x0, "6738f888"}]}}}}}}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{}, 0x0, &(0x7f0000000840)=r4}, 0x20) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x18) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x1500, &(0x7f0000000140)=[{&(0x7f0000000180)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe55a10a000600014002020a600e41b0000900ac00060211000000120012000a00ff110048035c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000000008af26c8b7b55f4d2a6823a45f28fcb1d", 0xd8}], 0x1}, 0x0) (async) r7 = socket$inet6_udp(0xa, 0x2, 0x0) (async, rerun: 32) r8 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) sendmsg$nl_route_sched(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newtaction={0xe68, 0x30, 0x871a15abc695fa3d, 0x70bd2d, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x0, 0x300}, 0x93}, [{0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0x0, 0x0, 0x0, 0x0, 0x3000000, 0x40000000}, {0x1, 0x0, 0x0, 0x4000000, 0x7, 0x80000}, {0x8000, 0x5, 0x0, 0xfffffffc, 0x5}, {}, {0x0, 0x0, 0x800000, 0x0, 0x6}, {0x0, 0xc3}, {0x0, 0x5}, {0x5}, {}, {0x0, 0x10}, {0x0, 0x470a, 0x0, 0x8000000}, {}, {0x2, 0x0, 0x0, 0x0, 0x6, 0x6}, {}, {}, {0x0, 0x0, 0x0, 0x1, 0x0, 0xfff}, {0x0, 0x0, 0x0, 0x8000000}, {}, {0x0, 0x0, 0x0, 0x0, 0x20}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x0, 0x0, 0xfffffffc}, {0x20000}, {}, {0x0, 0x7, 0x0, 0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x0, 0x5}, {0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x60569add}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2b25}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {0xffffffff, 0x9}, {0x0, 0x0, 0x0, 0x0, 0xfffff800}, {0x3}, {}, {0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0xfffffffd}, {}, {0x0, 0x9, 0x0, 0xffffffff, 0x0, 0x2}, {}, {0x80}, {0x80}, {0x0, 0x0, 0x0, 0x5, 0x5}, {}, {0x0, 0x0, 0x8}, {0x0, 0x2, 0x0, 0x0, 0x9}, {0x0, 0x0, 0x8, 0x0, 0x3}, {}, {0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0x8510}, {0xffff}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x0, 0xfffefffd}, {0x0, 0x0, 0x0, 0x1}, {}, {0x5}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}, {0x0, 0x7}, {}, {0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x9}, {0x0, 0xfffffffc, 0x200}, {0x0, 0x0, 0x0, 0x200}, {}, {0x4}, {}, {0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x101, 0x0, 0x0, 0x0, 0xffffffff}, {}, {0x3, 0xfffffffe}, {0x0, 0x0, 0x0, 0x4, 0x9}, {}, {0x0, 0x0, 0x0, 0x0, 0x1, 0x7}, {0x0, 0xb}, {0x0, 0x0, 0x0, 0xffffffff}, {}, {0x0, 0x5}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x56}, {0x0, 0x0, 0x0, 0xec33, 0x0, 0x4}, {}, {0xb, 0x0, 0x0, 0x0, 0x0, 0xfe1}, {0x0, 0x0, 0x0, 0x0, 0x4}, {0x0, 0x0, 0xfffffffc}, {}, {0x0, 0xfffffffd}, {0x6}, {0x7f}, {}, {0x0, 0x8, 0x0, 0x0, 0xfffffffe}, {0x4, 0x2, 0x2000000, 0x2, 0x0, 0xfffffffe}, {0x0, 0x0, 0x0, 0x0, 0xe9d, 0x58a}, {0x2}, {0x2, 0x9, 0x20000000}, {0xfffffffc}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x292}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {0x0, 0x0, 0xe600, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, {0x0, 0x5, 0x0, 0x7, 0x1}, {0x0, 0x5}, {0x0, 0x0, 0x0, 0x0, 0x80}, {0x10000000, 0x0, 0x0, 0x0, 0x1}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x3}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {}, {}, {0xfffffffb, 0x0, 0x0, 0x0, 0x8000}, {0x6, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {0x2d, 0x0, 0x10000}, {0x0, 0x0, 0x8000}, {0x0, 0x8000, 0x0, 0xe}, {0x0, 0x0, 0x10000}, {0x0, 0x80000000, 0x0, 0x7fff800, 0x4}, {0x0, 0x3}, {0xffffffff, 0x0, 0x0, 0x0, 0xd}], [{}, {}, {0x0, 0x1}, {0x1}, {}, {0x3}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x3, 0x1}, {0x0, 0x1}, {}, {0x5, 0x1}, {}, {0x4}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {0x4}, {}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x1}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x0, 0x1}, {}, {}, {}, {0x0, 0x1}, {}, {0x5}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {0x1}, {}, {0x5}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x2, 0x1}, {}, {}, {}, {}, {0x5, 0x1}, {}, {}, {}, {0x2}, {}, {}, {0x4}, {0x3}, {}, {}, {}, {}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000e40)=@raw={'raw\x00', 0x3c1, 0x3, 0x4c0, 0x300, 0x18c, 0x203, 0x300, 0x19030000, 0x3f0, 0x2e0, 0x2e0, 0x3f0, 0x2e0, 0x7fffffe, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x300, 0x0, {0x1000000}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xe}, {}, {0x0, 0x0, 0x3}, {0x2}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {0x16}, {}, {}, {0x7}, {}, {0x0, 0x0, 0x0, 0x101}, {}, {}, {}, {}, {}, {}, {0xfffe}, {}, {}, {}, {0x0, 0xfd}, {}, {0x7a04}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {0xb84, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}]}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x4}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz1\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x520) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_MPATH(r10, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000300)={&(0x7f0000000180)={0x28, r2, 0x800, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x2004c090) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan0\x00'}) (async) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000280)=ANY=[@ANYRES32=r0, @ANYBLOB="0800051d000000001400060076657468115f746f5f7465616d0000000400cc0008000500090000001400040073", @ANYBLOB="090d2000000000f0ff000700000008000300", @ANYRES16=r2, @ANYRES64=r3], 0x58}}, 0x40) close(r0) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SWAP(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x28, 0x6, 0x6, 0x201, 0x0, 0x0, {0x1, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000000}, 0x44014) (async, rerun: 32) socket$inet6_mptcp(0xa, 0x1, 0x106) (rerun: 32) 2.228002021s ago: executing program 5 (id=3742): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)={0x64, r1, 0x917, 0x1000, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @local}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x4}, 0x20040040) r2 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=@newqdisc={0x74, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x44, 0x2, [@TCA_CODEL_ECN={0x8}, @TCA_CODEL_TARGET={0x8, 0x1, 0x7f}, @TCA_CODEL_TARGET={0x8, 0x1, 0x5f6}, @TCA_CODEL_TARGET={0x8, 0x1, 0x3}, @TCA_CODEL_TARGET={0x8, 0x1, 0x8}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x8}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x1000}, @TCA_CODEL_INTERVAL={0x8}]}}]}, 0x74}}, 0x40000) sendmsg$nl_route_sched(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=@newtfilter={0x34, 0x2c, 0x200, 0x0, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0xfffa, 0x9}, {0x0, 0xffe0}, {0x4, 0x7}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x26}, 0x1, 0x0, 0x0, 0x4c800}, 0x4) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r5, 0x0) readv(r5, &(0x7f0000000500)=[{&(0x7f0000000740)=""/127, 0x7f}], 0x1) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'veth1_to_bond\x00', 0x10}) 2.109249669s ago: executing program 7 (id=3744): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$sock_int(r0, 0x1, 0x2b, &(0x7f0000000000), 0x4) 1.99133574s ago: executing program 2 (id=3745): socket$inet6(0xa, 0x2, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r0 = socket(0x10, 0x80002, 0x0) r1 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) setsockopt$sock_timeval(r1, 0x1, 0x42, &(0x7f00000000c0)={0x0, 0x2710}, 0x10) recvmsg(r1, &(0x7f0000002540)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x48}}, 0x400400c0) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0x1c, 0x2, [@TCA_FLOW_MODE={0x8}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1e3a9}]}}]}, 0x4c}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000300)={'syztnl1\x00', &(0x7f0000000280)={'syztnl2\x00', 0x0, 0x29, 0x0, 0x7, 0x3, 0x13, @dev={0xfe, 0x80, '\x00', 0x30}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x20, 0x80, 0x6, 0x3}}) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) 1.938122529s ago: executing program 6 (id=3746): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'authenc(streebog256-generic,pcbc(fcrypt-generic))\x00'}, 0x58) bind$alg(r1, &(0x7f0000000040)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha256\x00'}, 0x58) (async) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="20000000400007012bbd7000fedbdf250400c28004000180040008"], 0x20}, 0x1, 0x0, 0x0, 0x4c090}, 0xc000) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d00000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c00000015000103000000000000e7ff0b000000080001"], 0x1c}, 0x1, 0x0, 0x0, 0xc001}, 0x4000000) sendmsg$NLBL_UNLABEL_C_STATICADD(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0) r3 = syz_genetlink_get_family_id$fou(&(0x7f00000001c0), r0) sendmsg$FOU_CMD_GET(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r3, 0xffba829c109d8c9f, 0x70bd26, 0x25dfdbfb, {}, [@FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e21}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e21}]}, 0x24}, 0x1, 0x0, 0x0, 0x4004000}, 0x4000) 1.808477895s ago: executing program 7 (id=3747): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000000)={@loopback, @multicast2, @private=0xa010101}, 0xc) (async) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000400)="390000001300090468fe070000000000000eac3736000000480100100000000004002b000a00010014a4ee1ee438d2fd00000000000000720896bba4b0ac43109cd34e9d7dc51dcf26960026404e7a5ef4b249cab8526efda284634ae585a109c012c40676d7d60ebd142af34706d1166b6e66b47ad55be0ed6b1a6f8ee46ad14ab46c", 0x83}, {0x0}, {0x0}], 0x3) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r2, 0x29, 0x12, &(0x7f00000001c0)=0x10, 0x4) (async) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r6) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x4c, r7, 0x1, 0x0, 0x0, {0x4, 0x74, 0x609}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x2}, @NLBL_UNLABEL_A_IPV4ADDR={0x8}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bond0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast2}]}, 0x4c}, 0x1, 0xffffffff00000003}, 0x0) (async) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r4, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0x14, r7, 0x200, 0x70bd2b, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x40001}, 0x8000) (async) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x83, &(0x7f0000000500)={0x0, 0xa7a}, 0x8) (async) recvfrom$inet(r0, 0x0, 0x0, 0x40000000, &(0x7f0000000040)={0x2, 0x4e21, @rand_addr=0x64010102}, 0x10) (async) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) (async) bpf$MAP_CREATE(0x0, 0x0, 0x0) 1.66674877s ago: executing program 6 (id=3748): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9feb0100180000000000000028000000280000000a00000002000000000000010200416c806c00010800000001000004090000000400000001000000010000000061615f5f0000305f"], 0x0, 0x4a, 0x0, 0x1}, 0x28) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r1) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r1, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x55dac2b90780c4d1}, 0xc, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2c0008ae2500000000ef5e83b0900e33bf4c8b04e871270694907b4d63a201bc7cc6fe4aa5b26c09fa766188a243d8a58551281631f83c1c6e04691638159103d24a9307587a80aa7114edf8b8ee49654db860c3b3e34b75bbb595db188c1fa9167a4556db1768131b52227292ed86e87c60957448b4e59acb742a60070100"/137, @ANYRES16=r2, @ANYBLOB="00022abd7000fbdbdf257f00000008000300", @ANYRES32=0x0, @ANYBLOB="0c00990005000000280000000a00f500156683f20ee700000a00340001010101010100000a00f500b2d280aca9440000"], 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x20004041) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r3, &(0x7f0000000040)=ANY=[], 0x36) (async) recvmmsg$unix(r1, &(0x7f0000005980)=[{{0x0, 0x0, &(0x7f0000001280)=[{&(0x7f0000001040)=""/31, 0x1f}], 0x1}}], 0x1, 0x200, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$sock_timeval(r4, 0x1, 0x15, &(0x7f0000000000)={0x0, 0x2710}, 0x10) (async) sendmmsg$inet6(r4, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0xfec0ffff00000000}}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000180)='i', 0x20086}], 0x1}}], 0x1, 0x0) (async) sendmmsg$inet6(r4, &(0x7f00000071c0)=[{{&(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x7}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000080)='H', 0x1}], 0x1}}], 0x1, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f0000000680)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000540)={&(0x7f00000005c0)={0xa4, r2, 0x400, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x5, 0x1}}}}, [@NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x7401, 0x1, 0x2, 0x0, {0xa151, 0x40, 0x0, 0x9, 0x0, 0x1, 0x1, 0x0, 0x1}, 0x400, 0xffffffff, 0xfe}}, @NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_VHT_CAPABILITY_MASK={0x10, 0xb0, {0x0, {0x7, 0x4, 0x7f, 0x1}}}, @NL80211_ATTR_MAC_HINT={0xa, 0xc8, @random="f56c88a5ca5c"}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x39}, @NL80211_ATTR_DISABLE_VHT={0x4}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x38}, @NL80211_ATTR_HT_CAPABILITY={0x1e, 0x1f, {0x2000, 0x0, 0x0, 0x0, {0x6, 0xb5c, 0x0, 0x8, 0x0, 0x1, 0x0, 0x1}, 0x400, 0xf}}, @NL80211_ATTR_WANT_1X_4WAY_HS={0x4}]}, 0xa4}}, 0x0) 1.489782359s ago: executing program 2 (id=3749): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0x520, 0x30, 0xffff, 0x0, 0x0, {}, [{0x50c, 0x1, [@m_police={0x508, 0x1, 0x0, 0x0, {{0xb}, {0x4dc, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x9}}], [@TCA_POLICE_AVRATE={0x8, 0x4, 0x9}, @TCA_POLICE_TBF={0x3c, 0x1, {0x4, 0x8, 0xf, 0xdfd7, 0x6, {0xb, 0x2, 0x5, 0x3, 0x1, 0x4}, {0x3, 0x1, 0x5, 0x2, 0x799, 0x9}, 0x2, 0x3fff800, 0x1}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x9}, @TCA_POLICE_RESULT={0x8, 0x5, 0x8}, @TCA_POLICE_RATE64={0xc, 0x8, 0x6}], [@TCA_POLICE_RESULT={0x8, 0x5, 0x2}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xfffffff7}, @TCA_POLICE_RESULT={0x8, 0x5, 0x52ec}, @TCA_POLICE_RATE64={0xc, 0x8, 0xac97}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xffff}, @TCA_POLICE_RATE64={0xc, 0x8, 0x4}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x7, 0x0, 0x978, 0x8, 0xee, 0x0, 0x1, 0x7, 0x9, 0x7, 0x6, 0x6, 0xf, 0x3, 0x6, 0x4a3, 0x4, 0x6, 0x5, 0x8, 0x4, 0x8, 0x12000, 0x7ff, 0x2, 0xde, 0x1d2, 0x6, 0x3, 0x1ff, 0x78, 0x0, 0xad7, 0x3, 0x6, 0x1, 0x10, 0xffffffc6, 0x0, 0x308, 0x8, 0xa, 0x6, 0x5, 0x401, 0x40, 0x7, 0x8, 0x1, 0xaa, 0x7, 0x9, 0xffffffff, 0xc, 0xffff, 0x400, 0x8000, 0x4, 0x7, 0x7fffffff, 0x200, 0x200, 0x2, 0xbac, 0x7fff, 0x2482, 0x2, 0x4, 0x2, 0xb, 0x5, 0xce, 0xfffff97b, 0x5, 0x82, 0x0, 0x2, 0x3, 0xf5c, 0xfffffff0, 0x5, 0x7, 0x4, 0x7, 0x7, 0x8, 0x1ff, 0x0, 0x3cb0e0e7, 0x5, 0x5, 0x650, 0xd, 0x7ff, 0x8, 0x7, 0x1, 0xd2, 0xd, 0x5, 0x9357d664, 0x4, 0x9, 0x1, 0x2, 0x3, 0x6, 0x0, 0x0, 0x7, 0xffffffff, 0x3, 0x8, 0x7ff, 0xfff, 0x9, 0x3, 0x10, 0x100, 0x3, 0x3b63, 0x7, 0x800, 0xfffffff8, 0x800, 0xb058, 0x2, 0xfffffff8, 0x2, 0x400, 0x0, 0x8, 0x0, 0x9, 0x4, 0x0, 0x101, 0x6, 0x9, 0x3, 0x6f, 0x5, 0x500, 0x0, 0xea, 0x2, 0x5, 0x6, 0x0, 0x7fff, 0x9, 0xf, 0x71, 0x36b, 0x10, 0x6, 0xb9, 0x1, 0xff000000, 0x9, 0x3, 0x9, 0xfffffffd, 0x81a, 0x1, 0xffc1, 0xffffffff, 0x2, 0x68, 0x1, 0x96f6, 0x6, 0xf1, 0x80000001, 0x7, 0x0, 0x5607, 0xe4e, 0x5, 0x0, 0x7fffffff, 0x1, 0x140, 0x1, 0x8, 0x6, 0x1, 0x1, 0x2, 0x6, 0x4, 0x4, 0x0, 0x0, 0xa, 0x5, 0x4, 0x80000, 0x7, 0x1, 0x7, 0x1, 0x5a, 0x14000, 0x103, 0x91, 0xc0000, 0x5, 0x8, 0x6d141033, 0xffff, 0x2, 0x2, 0x8203, 0x7, 0x7, 0x9, 0x2, 0x9, 0x7, 0x8, 0x7ff, 0x9, 0x3ff, 0x3fc, 0x90000000, 0xebbf, 0x7, 0x400, 0x1, 0x10, 0x10c, 0x2c, 0x8451, 0xfffff9e4, 0x7, 0x9, 0x6, 0x6, 0x9, 0x1, 0x9, 0x81, 0x0, 0x0, 0x9, 0xed3, 0x71a, 0x5, 0x4, 0x9, 0x9, 0x80000001, 0x8ad, 0x5, 0x7999c62c]}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x520}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0x520, 0x30, 0xffff, 0x0, 0x0, {}, [{0x50c, 0x1, [@m_police={0x508, 0x1, 0x0, 0x0, {{0xb}, {0x4dc, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x9}}], [@TCA_POLICE_AVRATE={0x8, 0x4, 0x9}, @TCA_POLICE_TBF={0x3c, 0x1, {0x4, 0x8, 0xf, 0xdfd7, 0x6, {0xb, 0x2, 0x5, 0x3, 0x1, 0x4}, {0x3, 0x1, 0x5, 0x2, 0x799, 0x9}, 0x2, 0x3fff800, 0x1}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x9}, @TCA_POLICE_RESULT={0x8, 0x5, 0x8}, @TCA_POLICE_RATE64={0xc, 0x8, 0x6}], [@TCA_POLICE_RESULT={0x8, 0x5, 0x2}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xfffffff7}, @TCA_POLICE_RESULT={0x8, 0x5, 0x52ec}, @TCA_POLICE_RATE64={0xc, 0x8, 0xac97}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xffff}, @TCA_POLICE_RATE64={0xc, 0x8, 0x4}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x7, 0x0, 0x978, 0x8, 0xee, 0x0, 0x1, 0x7, 0x9, 0x7, 0x6, 0x6, 0xf, 0x3, 0x6, 0x4a3, 0x4, 0x6, 0x5, 0x8, 0x4, 0x8, 0x12000, 0x7ff, 0x2, 0xde, 0x1d2, 0x6, 0x3, 0x1ff, 0x78, 0x0, 0xad7, 0x3, 0x6, 0x1, 0x10, 0xffffffc6, 0x0, 0x308, 0x8, 0xa, 0x6, 0x5, 0x401, 0x40, 0x7, 0x8, 0x1, 0xaa, 0x7, 0x9, 0xffffffff, 0xc, 0xffff, 0x400, 0x8000, 0x4, 0x7, 0x7fffffff, 0x200, 0x200, 0x2, 0xbac, 0x7fff, 0x2482, 0x2, 0x4, 0x2, 0xb, 0x5, 0xce, 0xfffff97b, 0x5, 0x82, 0x0, 0x2, 0x3, 0xf5c, 0xfffffff0, 0x5, 0x7, 0x4, 0x7, 0x7, 0x8, 0x1ff, 0x0, 0x3cb0e0e7, 0x5, 0x5, 0x650, 0xd, 0x7ff, 0x8, 0x7, 0x1, 0xd2, 0xd, 0x5, 0x9357d664, 0x4, 0x9, 0x1, 0x2, 0x3, 0x6, 0x0, 0x0, 0x7, 0xffffffff, 0x3, 0x8, 0x7ff, 0xfff, 0x9, 0x3, 0x10, 0x100, 0x3, 0x3b63, 0x7, 0x800, 0xfffffff8, 0x800, 0xb058, 0x2, 0xfffffff8, 0x2, 0x400, 0x0, 0x8, 0x0, 0x9, 0x4, 0x0, 0x101, 0x6, 0x9, 0x3, 0x6f, 0x5, 0x500, 0x0, 0xea, 0x2, 0x5, 0x6, 0x0, 0x7fff, 0x9, 0xf, 0x71, 0x36b, 0x10, 0x6, 0xb9, 0x1, 0xff000000, 0x9, 0x3, 0x9, 0xfffffffd, 0x81a, 0x1, 0xffc1, 0xffffffff, 0x2, 0x68, 0x1, 0x96f6, 0x6, 0xf1, 0x80000001, 0x7, 0x0, 0x5607, 0xe4e, 0x5, 0x0, 0x7fffffff, 0x1, 0x140, 0x1, 0x8, 0x6, 0x1, 0x1, 0x2, 0x6, 0x4, 0x4, 0x0, 0x0, 0xa, 0x5, 0x4, 0x80000, 0x7, 0x1, 0x7, 0x1, 0x5a, 0x14000, 0x103, 0x91, 0xc0000, 0x5, 0x8, 0x6d141033, 0xffff, 0x2, 0x2, 0x8203, 0x7, 0x7, 0x9, 0x2, 0x9, 0x7, 0x8, 0x7ff, 0x9, 0x3ff, 0x3fc, 0x90000000, 0xebbf, 0x7, 0x400, 0x1, 0x10, 0x10c, 0x2c, 0x8451, 0xfffff9e4, 0x7, 0x9, 0x6, 0x6, 0x9, 0x1, 0x9, 0x81, 0x0, 0x0, 0x9, 0xed3, 0x71a, 0x5, 0x4, 0x9, 0x9, 0x80000001, 0x8ad, 0x5, 0x7999c62c]}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x520}}, 0x0) (async) 905.481368ms ago: executing program 8 (id=3750): r0 = socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x14}, 0x14}}, 0x0) (async) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000740)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x6}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x20044094) (async) sendto$packet(r1, &(0x7f0000000b40)="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", 0x1000, 0x40000, &(0x7f0000000040)={0x11, 0x17, r2, 0x1, 0x40, 0x6, @random="e9b3720e2421"}, 0x14) 905.046585ms ago: executing program 5 (id=3751): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000200000000000000000073012b000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x90) recvmmsg(0xffffffffffffffff, &(0x7f00000038c0)=[{{&(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, &(0x7f0000001800)=[{&(0x7f0000000100)=""/157, 0x9d}, {&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f00000001c0)=""/154, 0x9a}, {&(0x7f0000000340)=""/120, 0x78}, {&(0x7f00000003c0)=""/83, 0x53}, {&(0x7f00000014c0)=""/213, 0xd5}, {&(0x7f00000015c0)=""/173, 0xad}, {&(0x7f0000000000)=""/5, 0x5}, {&(0x7f0000001680)=""/237, 0xed}, {&(0x7f0000001780)=""/95, 0x5f}], 0xa, &(0x7f00000018c0)=""/228, 0xe4}, 0x1ff}, {{&(0x7f00000019c0)=@ax25={{}, [@remote, @rose, @netrom, @null, @null, @null, @remote, @netrom]}, 0x80, &(0x7f0000000440)=[{&(0x7f0000001a40)=""/4096, 0x1000}], 0x1}, 0x4}, {{&(0x7f0000002a40)=@pppoe, 0x80, &(0x7f0000002d40)=[{&(0x7f0000002ac0)=""/213, 0xd5}, {&(0x7f0000002bc0)=""/98, 0x62}, {&(0x7f0000002c40)=""/243, 0xf3}], 0x3, &(0x7f0000002d80)=""/97, 0x61}, 0x4}, {{&(0x7f0000002e00)=@ethernet={0x0, @remote}, 0x80, &(0x7f0000002f80)=[{&(0x7f0000002e80)=""/214, 0xd6}], 0x1, &(0x7f0000002fc0)=""/34, 0x22}, 0x3}, {{&(0x7f0000003000)=@pptp={0x18, 0x2, {0x0, @empty}}, 0x80, &(0x7f0000003480)=[{&(0x7f0000003080)=""/151, 0x97}, {&(0x7f0000003140)=""/255, 0xff}, {&(0x7f0000003240)=""/195, 0xc3}, {&(0x7f0000003340)=""/79, 0x4f}, {&(0x7f00000033c0)=""/182, 0xb6}], 0x5, &(0x7f0000003500)=""/250, 0xfa}, 0x2}, {{&(0x7f0000003600)=@l2, 0x80, &(0x7f0000003780)=[{&(0x7f0000003680)=""/101, 0x65}, {&(0x7f0000003700)=""/23, 0x17}, {&(0x7f0000003740)=""/64, 0x40}], 0x3, &(0x7f00000037c0)=""/230, 0xe6}, 0x6}], 0x6, 0x40, &(0x7f0000003a40)={0x0, 0x989680}) (async) recvmmsg(0xffffffffffffffff, &(0x7f00000038c0)=[{{&(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, &(0x7f0000001800)=[{&(0x7f0000000100)=""/157, 0x9d}, {&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f00000001c0)=""/154, 0x9a}, {&(0x7f0000000340)=""/120, 0x78}, {&(0x7f00000003c0)=""/83, 0x53}, {&(0x7f00000014c0)=""/213, 0xd5}, {&(0x7f00000015c0)=""/173, 0xad}, {&(0x7f0000000000)=""/5, 0x5}, {&(0x7f0000001680)=""/237, 0xed}, {&(0x7f0000001780)=""/95, 0x5f}], 0xa, &(0x7f00000018c0)=""/228, 0xe4}, 0x1ff}, {{&(0x7f00000019c0)=@ax25={{}, [@remote, @rose, @netrom, @null, @null, @null, @remote, @netrom]}, 0x80, &(0x7f0000000440)=[{&(0x7f0000001a40)=""/4096, 0x1000}], 0x1}, 0x4}, {{&(0x7f0000002a40)=@pppoe, 0x80, &(0x7f0000002d40)=[{&(0x7f0000002ac0)=""/213, 0xd5}, {&(0x7f0000002bc0)=""/98, 0x62}, {&(0x7f0000002c40)=""/243, 0xf3}], 0x3, &(0x7f0000002d80)=""/97, 0x61}, 0x4}, {{&(0x7f0000002e00)=@ethernet={0x0, @remote}, 0x80, &(0x7f0000002f80)=[{&(0x7f0000002e80)=""/214, 0xd6}], 0x1, &(0x7f0000002fc0)=""/34, 0x22}, 0x3}, {{&(0x7f0000003000)=@pptp={0x18, 0x2, {0x0, @empty}}, 0x80, &(0x7f0000003480)=[{&(0x7f0000003080)=""/151, 0x97}, {&(0x7f0000003140)=""/255, 0xff}, {&(0x7f0000003240)=""/195, 0xc3}, {&(0x7f0000003340)=""/79, 0x4f}, {&(0x7f00000033c0)=""/182, 0xb6}], 0x5, &(0x7f0000003500)=""/250, 0xfa}, 0x2}, {{&(0x7f0000003600)=@l2, 0x80, &(0x7f0000003780)=[{&(0x7f0000003680)=""/101, 0x65}, {&(0x7f0000003700)=""/23, 0x17}, {&(0x7f0000003740)=""/64, 0x40}], 0x3, &(0x7f00000037c0)=""/230, 0xe6}, 0x6}], 0x6, 0x40, &(0x7f0000003a40)={0x0, 0x989680}) 816.770967ms ago: executing program 7 (id=3752): r0 = socket$isdn(0x22, 0x3, 0x23) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffa}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x31, &(0x7f0000000100)=ANY=[@ANYBLOB="01e3120005e300001866000005000000000000d9354a0d41d19380fff0ffffff85200000010000000177f8ff10000000"], &(0x7f00000000c0)='syzkaller\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x36, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) 767.339809ms ago: executing program 5 (id=3753): getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(0xffffffffffffffff, 0x84, 0x74, &(0x7f0000000000)=""/41, &(0x7f0000000040)=0x29) syz_emit_ethernet(0x86, &(0x7f00000000c0)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaa2e0800450000780000000000119078000000000000000000001b5900649078020000000300000000000000000200000075390a030405a024f0ddfb7e0000000000000000000000000000009384bbeb3018ad591b661fe8fb1be5d2a0057a62022a1564a329d3a14a1d8c6900000000000000002589520e774ac4f3fc9261b7b26aa87a68f38b59303a31cf908293f471"], 0x0) 633.4157ms ago: executing program 7 (id=3754): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2400000076000907000000000000000007020000", @ANYRES32=0x0, @ANYBLOB="0c000d800800030000bd"], 0x24}, 0x1, 0x5502000000000000}, 0x0) r1 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_attach_bpf(r1, 0x6, 0x17, &(0x7f00000000c0), 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x2, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="3877a7763700007fc47b1d4a37004c0000f94655e82a5dd084444b7b9013667f"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f0000000480)={r2, 0x0, 0x0}, 0x10) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000e00), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r4, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000ec0)={0x44, r5, 0x3, 0x70bd27, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SEC_DEVKEY={0x24, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0002}}, @NL802154_DEVKEY_ATTR_ID={0x14, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}]}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x880) r6 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r6, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x20) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x5, 0x32, 0xffffffffffffffff, 0x0) connect$l2tp6(r6, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x3}, 0x20) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) sendto$packet(r3, &(0x7f0000000200)="cb17e8514953b32f94770855dd5daa0308b4f0f4295e6ac3ad5b45fcf805e5685d93cdf6bcd280f89d98c952e865182827b89bca1f8b482e1a4e4095d73b5c1603b60745221a78dec4999d7f9e76550926f9b3e4c9ba43c7bfe81916c2685c9cc475228dd29edcb0c286ba9734147814f1e4d7bb0a0b7d56d1f4890440f7e93f57b55495bcef5eeb7b4e7a6661f5f65db359fe62b234aca6c02aaf52679138a3867e", 0xa2, 0xc000001, &(0x7f0000000100)={0x11, 0xc, 0x0, 0x1, 0x8}, 0x14) 631.988482ms ago: executing program 2 (id=3755): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x0, 0x0, @remote}}, 0x0, 0x0, 0x50, 0x0, "3f114438efdaca16d374b49a365be44d5e860ea3ba676c0b5047b80e2c3535d5bd9db3c8572560f4d1be5cd41f7716082ee3589f099942e6f1c395ddb8160381baadf27900"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000100)={@in6={{0xa, 0x4e24, 0x20000000, @rand_addr=' \x01\x00'}}, 0x0, 0x0, 0x3, 0x0, "ddfd3b7ed7c6a1c172a987ae5ce3cafd64c9a736831a5912d606798fb75c9981c4b3ac0e06891ff18bc5543ed57215a3c45f9154dfa319e52a15a2b9acf80c07fb1a854dad742eef6187f2304844c296"}, 0xd8) r1 = socket$l2tp6(0xa, 0x2, 0x73) getpeername$l2tp6(r1, &(0x7f0000000280), &(0x7f00000002c0)=0x20) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000000)={@in6={{0xa, 0x4e23, 0x5, @loopback, 0x8}}, 0x0, 0x0, 0x4, 0x0, "61236b90dcdfe3ce2bb54fa6c4654e6c39d7ddcc4501330078eb7bf1597d638c7d4315210fb34d4c84c2f976071138016e8934b34d8b9cff05cd33c159c2c5a51f1bbe5b7d758286a3c82392b39a1d3f"}, 0xd8) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000240)=@gcm_256={{0x303}, "039722e1569a0592", "52419c9329d066d54e551f538bfc128f4db5b1ad0bd1a8eeedcd5bb0fd69e669", "4f022db8", "00d906d907d97ba1"}, 0x38) setsockopt$inet6_tcp_int(r0, 0x6, 0x4, &(0x7f0000000200)=0x1, 0x4) close(r0) 539.519438ms ago: executing program 5 (id=3756): sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x24040050) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x1e, 0x1, 0x0) sendto(r1, 0x0, 0x0, 0x40000, &(0x7f0000000000)=@generic={0x1e, "ce33be0d44c60b14d87167d49396208e01367b3d90e5a933e1b2aee80d2c71d4e268223ed7dac20eccf4a0847aae138d9155f11f9f8fa070942cefc3a2910c9acb202d7f68a62b9aa78bb1327d24a0c44f4b9640cdcb14560949aa7a1fc3a33c332a4c409d1ddb96443400bd5f7f533e1de8c9663df1912afbe896cdad4f"}, 0x80) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = accept4$llc(r1, &(0x7f0000000440)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, &(0x7f0000000480)=0x10, 0x80000) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r7 = accept4(r6, 0x0, 0x0, 0x0) sendmsg$alg(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="f9c5a167cb38dda420ea5c8df4a8cd54ee6a15dd703866bdf6941944c13871e24bf76ab70541cf1ba39fabff51d3066b24dd3d3e542ab2bfb5d149cc2e75a50b", 0x40}], 0x1}, 0x8001) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r7) sendmsg$ETHTOOL_MSG_PAUSE_SET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000300)=ANY=[@ANYBLOB="ff121f630059ceb87669333f1f0a93d6b7357593e567a8fae630d7b5716ca5e16a424c73e64ca2b8cf04a882bab5c161c255b039a9de7ed8da71503546ffad5bd7bc958d05d0714870bfeaa7d8", @ANYRES16=r2, @ANYBLOB="010000000000000000001e0000000c00018008000100", @ANYRES32=r5, @ANYBLOB], 0x20}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=@gettfilter={0x2c, 0x2e, 0x200, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xfff1, 0xd}, {0x1, 0xfff3}, {0x0, 0xfff2}}, [{0x8, 0xb, 0x8000}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x8000) sendmsg$AUDIT_USER(r1, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x300020}, 0xc, &(0x7f00000003c0)={&(0x7f00000009c0)={0x124, 0x3ed, 0x100, 0x70bd28, 0x25dfdbfc, "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", [""]}, 0x124}, 0x1, 0x0, 0x0, 0x4008810}, 0x20040014) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r8, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r8], 0x0, 0x0, 0x0, 0x0, 0x0, 0x59, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r9, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYRESOCT=r0, @ANYRESDEC=r0, @ANYRES8=r0, @ANYRESHEX=r0, @ANYRESDEC=r0, @ANYRES16=0x0], 0x1bbc}, 0x1, 0x0, 0x0, 0x4048031}, 0xc000) r10 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r10, 0x400452c8, &(0x7f0000000100)) 454.134017ms ago: executing program 8 (id=3757): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$nci(r2, &(0x7f0000000300)=@NCI_GID_PROPRIETARY_RSP={0xf, 0x0, 0x2, 0x0, 0x7, "fe656b48812a22f7b82dfe7035cab636c6b30f61873ccb4c6daecc0cd4ba7977b3505801724345e54ff0b198a2e743eff80f6aadc378075aa83d383f9fd0461e72334c7fd49d1d4f9fe1bcc29b10325505bbcd823c8b2f277c9903b201a38cc929b8ed75a53e88ada203a9dd3fc0b4a383d88000fc14dec93f5068f10385acf18b9d7af0aae2a7831beb79a8f56357dae5ba2e2685181e9b6b57d02f454e225c040b22231ac8fff4cb5ad703d7294ab807decabb113f78e847c60ebbfbcfa48acf0c9479c5587ac84919a59ba62e328f31789535979d0f8aed0cc925b9"}, 0xe0) (async) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r1) (async) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r0) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f0000000140)=0x0) (async) r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b40)=@RTM_NEWMDB={0x78, 0x54, 0x1, 0x70bd25, 0x25dfdbfd, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x0, 0x0, 0x3, {@ip4=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x8edd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x2, 0x1, {@in6_addr=@private0={0xfc, 0x0, '\x00', 0x1}}}}, @MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x1, 0x1, {@in6_addr=@loopback, 0x86dd}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x24040054}, 0x0) (async) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r8) ioctl$IOCTL_GET_NCIDEV_IDX(r6, 0x0, &(0x7f00000000c0)=0x0) (async) r10 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r10, 0x10e, 0xc, &(0x7f0000000200)={0x20}, 0x10) (async) sendmsg$nl_route(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000980)=@ipv6_getaddrlabel={0x24, 0x1a, 0x1, 0x0, 0x0, {}, [@IFAL_LABEL={0x8, 0x2, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$NFC_CMD_DEV_UP(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYRESDEC=r3, @ANYRES8=r9, @ANYBLOB="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", @ANYRES32=0x0], 0x1c}, 0x1, 0x0, 0x0, 0x64000854}, 0x80) (async) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000200)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000280)=0x0) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f0000000400)=0x0) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f0000000440)=0x0) (async) r15 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) r16 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r17 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r16) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r15, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r16, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x1c, r17, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r18}]}, 0x1c}}, 0x0) sendmsg$NFC_CMD_DEV_UP(r0, &(0x7f0000000540)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x4c, r4, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r9}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r11}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r12}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r13}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r14}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r18}]}, 0x4c}, 0x1, 0x0, 0x0, 0x44014}, 0x40811) sendmsg$IEEE802154_ASSOCIATE_RESP(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_STATUS={0x5}]}, 0x1c}}, 0x0) r19 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x12000, 0x0) ioctl$SIOCSIFHWADDR(r19, 0x8924, &(0x7f0000000080)={'wg1\x00', @random="4f74a366f5e3"}) 387.225239ms ago: executing program 2 (id=3758): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_buf(r0, 0x29, 0xcf, 0x0, 0x4) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000780)={0x0, 0x226, 0xffffffff, 0x1323, 0xe, 0xdf0, 0x4, 0x10000, {0x0, @in6={{0xa, 0x4e21, 0x7, @loopback, 0x9}}, 0x80000001, 0x4b, 0x7fffffff, 0x2, 0x3}}, &(0x7f0000000840)=0xb0) r3 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x80, 0x3, 0x0, 0xfffffffd}, 0x10) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000fc0)=@raw={'raw\x00', 0x3c1, 0x3, 0x310, 0x0, 0x111, 0x4b4, 0x130, 0xd4feffff, 0x240, 0x20a, 0x278, 0x240, 0x278, 0x3, 0x0, {[{{@ipv6={@remote, @empty, [0x0, 0xffffff00], [], 'nicvf0\x00', 'team_slave_0\x00', {}, {}, 0x6, 0xfe}, 0x0, 0x108, 0x130, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[0x0, 0x1], [0x0, 0x1], 0x8, 0x0, 0x80, 0xe}}, @common=@ah={{0x30}, {[0x4d3, 0x4d5], 0xc, 0x6, 0x1}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xf7ff}}}, {{@ipv6={@loopback, @mcast2, [0x0, 0x0, 0x0, 0xffffffff], [], 'veth1_to_hsr\x00', 'pim6reg1\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x370) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000080)={r2, 0xa}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r4, 0x84, 0x71, &(0x7f0000000100)={r5, 0x7}, &(0x7f0000000140)=0x8) sendmsg$nl_route(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@ipv4_newroute={0x1c, 0x1a, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0x1c}}, 0x0) 386.675706ms ago: executing program 6 (id=3759): bpf$TOKEN_CREATE(0x24, &(0x7f0000000080), 0x8) (async) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000100)={0x2, 0x68, 0x6, 0x81, 0x7, 0x4, 0x5, 0x6, 0x0, 0x40, 0xbd, 0x9, 0x0, 0x40}, 0xe) (async) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x1, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2f}}}, 0x1c) (async) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) (async) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000500)=@ccm_128={{0x303}, "ceda52d8c9e000", "2591113b4234b089915d755df1bee81c", "3e03dbc9", "9d6bf39df01a18ad"}, 0x28) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_time\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000000), 0xffffff6a) (async) sendfile(r0, r2, 0x0, 0xe) r3 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000180)={0x0, r0}, 0x8) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x2010, r3, 0x78291000) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="550a000000000000611178000000000cca0000000000000000002ca75e6b2f77b5ad702600000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400}, 0x94) 275.694874ms ago: executing program 2 (id=3760): r0 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100}, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r2, &(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc) r3 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r3, &(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000}, 0xc) r4 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r4, &(0x7f00000002c0)={0x10, 0x0, 0x25dfdbfb, 0x400000}, 0xc) r5 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r5, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc) r6 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r6, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc) r7 = socket$netlink(0x10, 0x3, 0x9) bind$netlink(r7, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x22ffffffff}, 0xc) r8 = socket$netlink(0x10, 0x3, 0x14) bind$netlink(r8, &(0x7f0000000200)={0x10, 0x0, 0xffffffff, 0x400}, 0xc) r9 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r9, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000}, 0xc) r10 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r10, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x22ffffffff}, 0xc) r11 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r11, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x1}, 0xc) r12 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r12, &(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc) r13 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r13, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x200000}, 0xc) bind$netlink(r1, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x80020000}, 0x48) r14 = socket$netlink(0x10, 0x3, 0x4) writev(r14, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80043f679a10ff3d425f9cc3f4ff7f4e32f61bcdf1e422000000000100804824cabecc4b381eaadc28f23457e792945f64009400050028925aaa000000c600000000000000feff2c707f8f00ff", 0x58}], 0x1) 151.183272ms ago: executing program 7 (id=3761): r0 = socket$kcm(0x29, 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0x12) ioctl$FS_IOC_RESVSP(r1, 0x40305829, &(0x7f0000000440)={0x1100, 0x0, 0x0, 0x10000}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000100)=""/3, 0x3, 0x0, &(0x7f0000000a00)=""/4096, 0x1000}, &(0x7f00000001c0)=0x40) getsockopt$sock_buf(r0, 0x1, 0x1c, &(0x7f00000002c0)=""/253, &(0x7f00000000c0)=0xfd) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x6, 0xd24}) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendfile(r3, r2, 0x0, 0xfffbffff) sendmsg$inet(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000000)="ad4e03eb2bc29874", 0x8}], 0x1}, 0x10) sendmmsg(r0, &(0x7f000000e240)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x800) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$sock_ifreq(r4, 0x89f0, &(0x7f0000000180)={'bond0\x00', @ifru_names='rose0\x00'}) 1.520143ms ago: executing program 8 (id=3762): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) r2 = socket$inet6(0xa, 0x2, 0x0) getsockopt$inet6_int(r2, 0x29, 0x48, 0x0, &(0x7f00000002c0)) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSSL2CALL(r5, 0x89e2, &(0x7f0000000080)=@bcast) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="30000000200025a729bd7000fddbdf250a0000cdff0000010200010008000600000000000c0014008f988e090bc0ea3f"], 0x30}, 0x1, 0x0, 0x0, 0x20008081}, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000000080)=ANY=[@ANYBLOB="c40000001900f3fe0000000000000000fe8000000000000000000000000000bbac1e000100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffffffffffff00000000b86b6e0000000000000000000c0008"], 0xc4}}, 0x0) sendto$unix(r3, &(0x7f0000000240)='\x00', 0x1, 0x4040081, 0x0, 0x0) recvfrom$unix(r4, 0x0, 0xfffffffffffffe60, 0x2001, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="200000001000010025bd7000fddbd72500000000", @ANYRES32=r1, @ANYBLOB="8a9f81c8c04200003adf5b685773e4f6fd800ebbf0caf001c5e1ca437e0f000628b94d7d9e75c0e5a74571b9b44f963bb71f7a6e25b51009573806f27bcc79e0c9b6b4d684de958f3dc569954f92f8b41eec365b22c34397242462a6a668f7685d607cad4ccd57c20d4b39b5ca8ecc43223007a7c60b67ed853bbe5141eac42fc69f3044"], 0x20}}, 0x24040800) (async) r8 = socket$nl_audit(0x10, 0x3, 0x9) (async) r9 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) (async) recvfrom$unix(r3, &(0x7f0000000400)=""/222, 0xde, 0x40000002, &(0x7f0000000500)=@abs={0x1, 0x0, 0x4e22}, 0x6e) ioctl$sock_netrom_SIOCDELRT(r9, 0x8915, 0x0) (async) sendmsg$AUDIT_USER_TTY(r8, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="a8000000640401002abd7000fddbdf258b3cb4c2755dcacb74002dfeb766ef9d6897d1144a220fb0cfdc1d9f141992733ce3e963c5800b5b2f21cf43282e940b9f38fc217d45d97e5db321bd5b59afc95b3bfd536c7f0d49d3c349f7d7021b34d33a11cf03e1d63111cba10a15572683604f7187f0de85e7323176634a2c5da89045128d482c9acd0d198683341504ab0d88cf3e1c3686d692e02bbded50a614f888be792d1f0000"], 0xa8}, 0x1, 0x0, 0x0, 0x4000812}, 0x8001) (async) socket$alg(0x26, 0x5, 0x0) 0s ago: executing program 2 (id=3763): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@ipv4_newroute={0x38, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x2}, @RTA_ENCAP={0x14, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x10, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, @LWTUNNEL_IP_OPT_ERSPAN_VER={0x5, 0x1, 0x1}}}}]}, 0x38}}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000001e000000611000000000000062000b000000000095"], &(0x7f0000000100)='GPL\x00', 0x8, 0x0, 0x0, 0x41000, 0x5}, 0x94) kernel console output (not intermixed with test programs): Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 277.024539][T12030] lowmem_reserve[]: 0 0 0 0 0 [ 277.025267][T12036] bond0: (slave bond_slave_1): Releasing backup interface [ 277.029979][T12030] Node 1 Normal free:3894792kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:16820kB local_pcp:11392kB free_cma:0kB [ 277.076504][T12030] lowmem_reserve[]: 0 0 0 0 0 [ 277.085603][T12030] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 277.100874][T12030] Node 0 DMA32: 3768*4kB (UME) 1651*8kB (UME) 1087*16kB (UME) 825*32kB (UME) 665*64kB (UME) 533*128kB (UME) 372*256kB (UM) 266*512kB (UME) 121*1024kB (UME) 5*2048kB (UME) 193*4096kB (M) = 1338952kB [ 277.122639][T12036] team0: Port device team_slave_0 removed [ 277.130664][T12030] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 277.144512][T12030] Node 1 Normal: 192*4kB (UME) 55*8kB (UME) 41*16kB (UME) 130*32kB (UME) 28*64kB (UME) 9*128kB (UME) 3*256kB (UM) 6*512kB (UME) 1*1024kB (M) 1*2048kB (E) 947*4096kB (M) = 3894792kB [ 277.151848][T12036] team0: Port device team_slave_1 removed [ 277.166261][T12030] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 277.179299][T12030] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 277.190576][T12030] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 277.190859][T12036] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 277.201392][T12030] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 277.212260][T12036] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 277.220025][T12030] 44220 total pagecache pages [ 277.230626][T12030] 0 pages in swap cache [ 277.234817][T12030] Free swap = 124996kB [ 277.237513][T12036] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 277.250046][T12036] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 277.250493][T12030] Total swap = 124996kB [ 277.261661][T12030] 2097051 pages RAM [ 277.264869][T12036] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 277.265492][T12030] 0 pages HighMem/MovableOnly [ 277.265505][T12030] 424122 pages reserved [ 277.265516][T12030] 0 pages cma reserved [ 277.644316][T12061] : entered promiscuous mode [ 277.915430][T12078] netlink: 'syz.8.1687': attribute type 1 has an invalid length. [ 277.941801][T12081] __nla_validate_parse: 2 callbacks suppressed [ 277.941820][T12081] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1688'. [ 277.962987][T12078] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1687'. [ 277.973786][T12078] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1687'. [ 278.234486][T12091] syzkaller1: entered promiscuous mode [ 278.244173][T12091] syzkaller1: entered allmulticast mode [ 278.583180][T12105] netlink: 'syz.6.1694': attribute type 13 has an invalid length. [ 278.636333][T12109] netlink: 36 bytes leftover after parsing attributes in process `syz.7.1696'. [ 278.658366][T12105] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1694'. [ 278.730489][T12105] netlink: 'syz.6.1694': attribute type 13 has an invalid length. [ 278.769181][T12105] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1694'. [ 278.825061][T12112] netlink: 207952 bytes leftover after parsing attributes in process `syz.2.1697'. [ 278.885649][T12109] netlink: 332 bytes leftover after parsing attributes in process `syz.7.1696'. [ 278.937154][T12109] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1696'. [ 279.375337][T12135] netlink: 104 bytes leftover after parsing attributes in process `syz.6.1700'. [ 279.565438][T12150] sit0: entered promiscuous mode [ 279.577659][T12150] netlink: 'syz.6.1705': attribute type 1 has an invalid length. [ 279.669349][T12146] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 280.270042][T12176] : renamed from bridge_slave_0 [ 281.087101][T12212] tipc: Enabling of bearer rejected, failed to enable media [ 281.622188][T12238] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.682402][T12238] netdevsim netdevsim5 v: renamed from netdevsim0 [ 281.867752][T12252] gtp0: entered promiscuous mode [ 281.879629][T12252] gtp0: entered allmulticast mode [ 282.214813][T12265] dvmrp0: entered allmulticast mode [ 282.459697][T12276] netlink: 'syz.8.1748': attribute type 14 has an invalid length. [ 282.504420][T12278] x_tables: duplicate underflow at hook 4 [ 282.516785][T12276] netlink: 'syz.8.1748': attribute type 15 has an invalid length. [ 283.513731][T12321] IPVS: dh: SCTP 172.20.20.187:0 - no destination available [ 283.837391][T12325] __nla_validate_parse: 16 callbacks suppressed [ 283.837412][T12325] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1760'. [ 284.241887][T12348] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 284.662341][T12363] netlink: 212368 bytes leftover after parsing attributes in process `syz.6.1772'. [ 284.988480][T12377] netlink: 'syz.2.1775': attribute type 6 has an invalid length. [ 285.372013][T12393] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1780'. [ 285.429865][T12396] bridge2: the hash_elasticity option has been deprecated and is always 16 [ 285.511339][T12397] netem: change failed [ 285.591501][T12402] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1784'. [ 285.881769][T12415] netlink: 'syz.5.1786': attribute type 1 has an invalid length. [ 285.965901][T12417] tipc: Enabling of bearer rejected, failed to enable media [ 286.016189][T12423] SET target dimension over the limit! [ 288.639668][ T5836] Bluetooth: hci3: command 0x0405 tx timeout [ 305.917541][ T1157] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 336.841988][ T9471] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 350.082216][ T5834] Bluetooth: hci4: command 0x0405 tx timeout [ 350.083287][ T5836] Bluetooth: hci1: command 0x0406 tx timeout [ 350.088690][ T5837] Bluetooth: hci2: command 0x0406 tx timeout [ 354.102398][T12466] netlink: 'syz.5.1802': attribute type 1 has an invalid length. [ 354.142450][T12466] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1802'. [ 354.212203][T12476] netlink: 108 bytes leftover after parsing attributes in process `syz.6.1803'. [ 354.240724][T12476] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1803'. [ 354.439308][T12483] netlink: 456 bytes leftover after parsing attributes in process `syz.6.1805'. [ 354.450158][T12483] openvswitch: netlink: Flow key attr not present in new flow. [ 354.751430][T12497] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1809'. [ 354.773754][T12497] bridge0: entered promiscuous mode [ 354.786330][T12497] macsec1: entered promiscuous mode [ 354.803340][T12497] macsec1: entered allmulticast mode [ 354.814488][T12497] bridge0: entered allmulticast mode [ 354.836363][T12497] bridge0: port 3(macsec1) entered blocking state [ 354.859757][T12497] bridge0: port 3(macsec1) entered disabled state [ 354.899389][T12497] bridge0: left allmulticast mode [ 354.904800][T12497] bridge0: left promiscuous mode [ 354.980811][T12504] netdevsim netdevsim7: Direct firmware load for failed with error -2 [ 355.006630][T12504] netdevsim netdevsim7: Falling back to sysfs fallback for: [ 355.046356][T12503] netdevsim netdevsim7: Direct firmware load for failed with error -2 [ 355.063943][T12503] netdevsim netdevsim7: Falling back to sysfs fallback for: [ 355.133583][T12513] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1813'. [ 355.286730][T12519] tunl0: entered promiscuous mode [ 355.316254][T12519] netlink: 'syz.7.1814': attribute type 3 has an invalid length. [ 355.329614][T12519] netlink: 9 bytes leftover after parsing attributes in process `syz.7.1814'. [ 355.384439][T12521] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1815'. [ 355.561348][T12529] netlink: 'syz.7.1818': attribute type 1 has an invalid length. [ 355.595421][T12529] netlink: 'syz.7.1818': attribute type 15 has an invalid length. [ 355.764199][T12544] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1822'. [ 355.797501][T12542] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1821'. [ 356.112080][T12559] netlink: 'syz.7.1827': attribute type 21 has an invalid length. [ 356.331268][T12563] netlink: 'syz.2.1830': attribute type 1 has an invalid length. [ 356.389793][T12564] netlink: 'syz.5.1829': attribute type 1 has an invalid length. [ 356.698896][T12564] bond2: entered promiscuous mode [ 356.720862][T12564] bond2: entered allmulticast mode [ 356.731960][T12564] 8021q: adding VLAN 0 to HW filter on device bond2 [ 356.827774][T12577] openvswitch: netlink: IP tunnel dst address not specified [ 357.109937][T12585] macvlan2: entered promiscuous mode [ 357.127699][T12585] macvlan2: entered allmulticast mode [ 357.138701][T12585] bond0: (slave macvlan2): Error -98 calling set_mac_address [ 357.475623][T12599] sctp: [Deprecated]: syz.6.1839 (pid 12599) Use of int in maxseg socket option. [ 357.475623][T12599] Use struct sctp_assoc_value instead [ 357.552387][T12601] tipc: New replicast peer: 255.255.255.255 [ 357.559379][T12601] tipc: Enabled bearer , priority 10 [ 358.085201][T12626] tipc: Started in network mode [ 358.092967][T12626] tipc: Node identity , cluster identity 4711 [ 358.107465][T12626] tipc: Failed to set node id, please configure manually [ 358.123474][T12626] tipc: Enabling of bearer rejected, failed to enable media [ 358.669185][T12652] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 358.701995][T12653] netlink: 'syz.6.1856': attribute type 3 has an invalid length. [ 358.724692][T12653] bridge0: port 1(bridge_slave_0) entered blocking state [ 358.731936][T12653] bridge0: port 1(bridge_slave_0) entered forwarding state [ 359.002213][T12669] netlink: 'syz.6.1859': attribute type 1 has an invalid length. [ 359.042748][T12668] bond2: (slave bridge3): making interface the new active one [ 359.064466][T12668] bond2: (slave bridge3): Enslaving as an active interface with an up link [ 360.062788][T12713] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 360.096034][T12714] netlink: 'syz.5.1874': attribute type 2 has an invalid length. [ 360.142839][T12716] __nla_validate_parse: 4 callbacks suppressed [ 360.142859][T12716] netlink: 232 bytes leftover after parsing attributes in process `syz.6.1876'. [ 360.210096][T12719] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1877'. [ 360.230942][T12719] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1877'. [ 360.245905][T12689] syz.2.1866 (12689) used greatest stack depth: 17832 bytes left [ 360.247590][T12719] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1877'. [ 360.301471][T12722] netlink: 212360 bytes leftover after parsing attributes in process `syz.5.1878'. [ 360.662265][T12744] netlink: 'syz.6.1884': attribute type 3 has an invalid length. [ 360.674380][T12744] netlink: 'syz.6.1884': attribute type 33 has an invalid length. [ 360.683280][T12744] netlink: 152 bytes leftover after parsing attributes in process `syz.6.1884'. [ 360.684236][T12745] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1885'. [ 360.892728][T12750] IPv6: sit1: Disabled Multicast RS [ 360.922609][T12750] sit1: entered allmulticast mode [ 360.951295][T12754] netlink: 'syz.5.1887': attribute type 83 has an invalid length. [ 360.971909][T12759] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1889'. [ 360.992277][T12759] netlink: 'syz.6.1889': attribute type 5 has an invalid length. [ 361.058119][T12759] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1889'. [ 361.125048][T12759] geneve2: entered promiscuous mode [ 361.144801][T12759] geneve2: entered allmulticast mode [ 361.176288][ T9475] netdevsim netdevsim6 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 361.189236][T12770] netlink: 'syz.7.1893': attribute type 1 has an invalid length. [ 361.208217][ T9475] netdevsim netdevsim6 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 361.327283][T12776] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1893'. [ 361.344730][T12779] netlink: 'syz.5.1894': attribute type 1 has an invalid length. [ 361.356612][T12776] bond2 (unregistering): Released all slaves [ 361.392091][ T9475] netdevsim netdevsim6 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 361.405700][ T9475] netdevsim netdevsim6 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 361.457387][T12782] pim6reg1: entered promiscuous mode [ 361.463003][T12782] pim6reg1: entered allmulticast mode [ 361.532236][T12779] bond3: entered promiscuous mode [ 361.538413][T12779] 8021q: adding VLAN 0 to HW filter on device bond3 [ 361.577374][T12775] bond3: (slave bridge2): making interface the new active one [ 361.585492][T12775] bridge2: entered promiscuous mode [ 361.593119][T12775] bond3: (slave bridge2): Enslaving as an active interface with an up link [ 362.356460][T12817] netem: change failed [ 362.436337][T12817] ip6gre1: entered allmulticast mode [ 362.555647][ T5892] IPVS: starting estimator thread 0... [ 362.678423][T12827] IPVS: using max 26 ests per chain, 62400 per kthread [ 363.004510][T12844] netlink: 'syz.7.1911': attribute type 11 has an invalid length. [ 363.082315][T12849] netlink: 'syz.5.1913': attribute type 1 has an invalid length. [ 363.100580][T12849] netlink: 'syz.5.1913': attribute type 2 has an invalid length. [ 364.176829][T12891] tipc: Enabled bearer , priority 0 [ 364.266004][T12891] syzkaller0: entered promiscuous mode [ 364.294242][T12891] syzkaller0: entered allmulticast mode [ 364.396660][T12889] tipc: Resetting bearer [ 364.550717][T12911] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 364.563301][T12889] tipc: Disabling bearer [ 364.701436][T12914] netdevsim netdevsim6 netdevsim0: entered allmulticast mode [ 364.710525][T12914] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 364.780968][T12916] `: renamed from bond0 (while UP) [ 365.340801][T12941] __nla_validate_parse: 13 callbacks suppressed [ 365.340821][T12941] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1937'. [ 365.394594][T12934] xt_CT: No such helper "pptp" [ 365.414228][T12944] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1937'. [ 365.454984][T12947] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.1938'. [ 365.640978][T12953] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1940'. [ 365.807477][T12962] netlink: 68 bytes leftover after parsing attributes in process `syz.5.1943'. [ 365.817249][T12963] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1943'. [ 365.923936][T12967] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1946'. [ 365.933989][T12967] netlink: 192 bytes leftover after parsing attributes in process `syz.8.1946'. [ 366.082918][T12978] netlink: 348 bytes leftover after parsing attributes in process `syz.2.1948'. [ 366.119185][T12977] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.1948'. [ 366.446658][T12996] sctp: [Deprecated]: syz.6.1955 (pid 12996) Use of int in maxseg socket option. [ 366.446658][T12996] Use struct sctp_assoc_value instead [ 366.650393][T13004] validate_nla: 10 callbacks suppressed [ 366.650414][T13004] netlink: 'syz.5.1958': attribute type 1 has an invalid length. [ 366.653703][T13003] syzkaller0: entered promiscuous mode [ 366.710489][T13003] syzkaller0: entered allmulticast mode [ 366.757563][T13003] tipc: Enabled bearer , priority 0 [ 366.787296][T13000] tipc: Resetting bearer [ 366.855122][T13014] netlink: 'syz.2.1960': attribute type 1 has an invalid length. [ 366.891915][T13000] tipc: Disabling bearer [ 367.207021][T13014] 8021q: adding VLAN 0 to HW filter on device bond3 [ 367.240293][T13016] geneve2: entered promiscuous mode [ 367.245568][T13016] geneve2: entered allmulticast mode [ 367.273081][T13024] bond3: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 367.388543][ T50] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 367.418825][ T50] netdevsim netdevsim5 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 367.448850][ T50] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 367.489704][ T50] netdevsim netdevsim5 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 367.512716][ T50] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 367.541109][ T50] netdevsim netdevsim5 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0 [ 367.611200][T13047] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 367.766909][ T50] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 367.802176][T13054] bond3: entered promiscuous mode [ 367.807286][T13054] bond3: entered allmulticast mode [ 367.851151][T13054] 8021q: adding VLAN 0 to HW filter on device bond3 [ 368.251783][T13063] syzkaller0: entered promiscuous mode [ 368.280191][T13063] syzkaller0: entered allmulticast mode [ 368.560595][T13090] netlink: 'syz.7.1983': attribute type 11 has an invalid length. [ 368.572702][T13089] netlink: 'syz.2.1982': attribute type 7 has an invalid length. [ 369.860059][T13085] batman_adv: batadv0: Adding interface: dummy0 [ 369.866380][T13085] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 369.893363][T13085] batman_adv: batadv0: Interface activated: dummy0 [ 369.908814][T13088] batadv0: mtu less than device minimum [ 369.916250][T13088] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 369.928397][T13088] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 369.940410][T13088] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 369.952450][T13088] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 369.964493][T13088] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 369.976529][T13088] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 369.988539][T13088] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 370.000548][T13088] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 370.012585][T13088] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 370.054593][ T36] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 370.065286][T13089] netlink: 'syz.2.1982': attribute type 7 has an invalid length. [ 370.187044][ T36] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 370.224814][ T36] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 370.263880][ T36] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 370.374914][T13103] GUP no longer grows the stack in syz.6.1987 (13103): 200000003000-20000000a000 (200000001000) [ 370.438853][T13107] syzkaller1: entered promiscuous mode [ 370.448448][T13103] CPU: 0 UID: 0 PID: 13103 Comm: syz.6.1987 Not tainted syzkaller #0 PREEMPT(full) [ 370.448478][T13103] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 370.448501][T13103] Call Trace: [ 370.448510][T13103] [ 370.448519][T13103] dump_stack_lvl+0x189/0x250 [ 370.448562][T13103] ? __pfx_dump_stack_lvl+0x10/0x10 [ 370.448594][T13103] ? __pfx__printk+0x10/0x10 [ 370.448614][T13103] ? find_vma+0xe7/0x160 [ 370.448659][T13103] __get_user_pages+0x2470/0x2a00 [ 370.448686][T13103] ? __pfx___bpf_trace_mmap_lock_acquire_returned+0x10/0x10 [ 370.448753][T13103] ? rcu_is_watching+0x15/0xb0 [ 370.448786][T13103] __gup_longterm_locked+0xde4/0x1660 [ 370.448823][T13103] ? try_grab_folio_fast+0x1bf/0x6a0 [ 370.448866][T13103] ? gup_fast_fallback+0x1b86/0x22d0 [ 370.448899][T13103] gup_fast_fallback+0x1d65/0x22d0 [ 370.448970][T13103] ? __pfx_gup_fast_fallback+0x10/0x10 [ 370.448997][T13103] ? __mutex_lock+0x335/0x1350 [ 370.449042][T13103] ? is_valid_gup_args+0x11f/0x200 [ 370.449073][T13103] ? get_user_pages_fast+0x4d/0xb0 [ 370.449110][T13107] syzkaller1: entered allmulticast mode [ 370.449104][T13103] __iov_iter_get_pages_alloc+0x39f/0xb40 [ 370.449144][T13103] ? __pfx_pipe_clear_nowait+0x10/0x10 [ 370.449174][T13103] ? wait_for_space+0x248/0x2d0 [ 370.449199][T13103] iov_iter_get_pages2+0x5e/0xa0 [ 370.449235][T13103] __se_sys_vmsplice+0x548/0x10d0 [ 370.449290][T13103] ? __pfx___se_sys_vmsplice+0x10/0x10 [ 370.449313][T13103] ? __pfx_futex_wait+0x10/0x10 [ 370.449356][T13103] ? __ia32_sys_rt_sigreturn+0x743/0x860 [ 370.449464][T13103] ? do_syscall_64+0xbe/0xfa0 [ 370.449507][T13103] do_syscall_64+0xfa/0xfa0 [ 370.449540][T13103] ? lockdep_hardirqs_on+0x9c/0x150 [ 370.449575][T13103] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 370.449601][T13103] ? clear_bhb_loop+0x60/0xb0 [ 370.449631][T13103] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 370.449664][T13103] RIP: 0033:0x7fabc4b8f749 [ 370.449685][T13103] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 370.449708][T13103] RSP: 002b:00007fabc5a9e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 370.449734][T13103] RAX: ffffffffffffffda RBX: 00007fabc4de5fa0 RCX: 00007fabc4b8f749 [ 370.449752][T13103] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000014 [ 370.449769][T13103] RBP: 00007fabc4c13f91 R08: 0000000000000000 R09: 0000000000000000 [ 370.449784][T13103] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 370.449797][T13103] R13: 00007fabc4de6038 R14: 00007fabc4de5fa0 R15: 00007ffc0caf04a8 [ 370.449841][T13103] [ 370.869686][T13123] __nla_validate_parse: 8 callbacks suppressed [ 370.869707][T13123] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1992'. [ 371.139334][T13138] netlink: 'syz.2.1997': attribute type 4 has an invalid length. [ 371.171315][T13137] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 371.199461][T13138] netlink: 'syz.2.1997': attribute type 4 has an invalid length. [ 371.592260][T13164] syzkaller1: entered promiscuous mode [ 371.603091][T13164] syzkaller1: entered allmulticast mode [ 371.612818][T13163] syzkaller0: entered promiscuous mode [ 371.618876][T13163] syzkaller0: entered allmulticast mode [ 371.970313][T13173] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2009'. [ 371.983684][T13172] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2008'. [ 372.111426][T13176] netlink: 'syz.2.2010': attribute type 33 has an invalid length. [ 372.427318][T13193] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2015'. [ 372.610914][T13204] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2019'. [ 372.731349][T13212] netlink: 'syz.2.2022': attribute type 1 has an invalid length. [ 372.773496][T13218] Bluetooth: MGMT ver 1.23 [ 372.820524][T13212] bond4: entered promiscuous mode [ 372.826088][T13212] 8021q: adding VLAN 0 to HW filter on device bond4 [ 372.863403][T13218] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2023'. [ 373.042607][T13225] bridge0: port 2(bridge_slave_1) entered disabled state [ 373.204250][T13235] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2028'. [ 373.225547][T13235] veth0_macvtap: left promiscuous mode [ 373.336105][T13241] netlink: 212408 bytes leftover after parsing attributes in process `syz.7.2029'. [ 373.453582][T13246] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2032'. [ 373.850171][T13263] netlink: 48 bytes leftover after parsing attributes in process `syz.6.2039'. [ 374.007701][T13275] netlink: 'syz.5.2042': attribute type 4 has an invalid length. [ 374.024500][T13276] netlink: 'syz.5.2042': attribute type 4 has an invalid length. [ 374.273895][T13286] netlink: 'syz.7.2047': attribute type 4 has an invalid length. [ 374.333064][T13294] netlink: 'syz.7.2047': attribute type 4 has an invalid length. [ 374.402976][T13292] batman_adv: batadv0: Interface deactivated: dummy0 [ 374.471270][T13292] batman_adv: batadv0: Removing interface: dummy0 [ 374.790498][T13317] tipc: Enabling of bearer rejected, failed to enable media [ 374.879584][ T5846] Bluetooth: hci2: command 0x0406 tx timeout [ 374.880182][ T5848] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 375.115050][T13328] netlink: 'syz.2.2060': attribute type 11 has an invalid length. [ 375.203602][T13332] net_ratelimit: 10 callbacks suppressed [ 375.203622][T13332] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 375.433786][T13341] netlink: 'syz.5.2063': attribute type 1 has an invalid length. [ 375.471858][T13342] netlink: 'syz.5.2063': attribute type 1 has an invalid length. [ 375.613586][T13343] bond4: (slave xfrm1): The slave device specified does not support setting the MAC address [ 375.630225][T13343] bond4: (slave xfrm1): Setting fail_over_mac to active for active-backup mode [ 375.642692][T13343] bond4: (slave xfrm1): making interface the new active one [ 375.653630][T13343] bond4: (slave xfrm1): Enslaving as an active interface with an up link [ 375.695588][T13356] netlink: 'syz.6.2066': attribute type 1 has an invalid length. [ 375.830275][T13361] syzkaller0: entered promiscuous mode [ 375.845492][T13361] syzkaller0: entered allmulticast mode [ 376.089262][T13367] __nla_validate_parse: 5 callbacks suppressed [ 376.089282][T13367] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2070'. [ 376.407521][T13377] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2073'. [ 376.565350][T13383] tipc: Enabling of bearer rejected, already enabled [ 376.614228][T13393] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2078'. [ 376.710552][T13392] bond5: Unable to set down delay as MII monitoring is disabled [ 376.770057][T13392] bond5 (unregistering): Released all slaves [ 376.791070][T13405] netlink: 32 bytes leftover after parsing attributes in process `syz.7.2080'. [ 377.005389][T13402] pim6reg: entered allmulticast mode [ 377.479266][T13444] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2087'. [ 377.508726][T13444] netlink: 120 bytes leftover after parsing attributes in process `syz.6.2087'. [ 377.526284][T13444] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2087'. [ 377.631671][T13444] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2087'. [ 377.692481][T13449] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2090'. [ 377.750081][T13447] syzkaller0: entered promiscuous mode [ 377.776240][T13447] syzkaller0: entered allmulticast mode [ 377.801119][T13460] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2089'. [ 377.840841][ T5846] Bluetooth: hci4: command 0x0405 tx timeout [ 377.993484][T13470] netlink: 'syz.5.2095': attribute type 21 has an invalid length. [ 378.040021][T13471] syzkaller0: entered promiscuous mode [ 378.045655][T13471] syzkaller0: entered allmulticast mode [ 378.385200][T13486] syzkaller0: entered promiscuous mode [ 378.404961][T13486] syzkaller0: entered allmulticast mode [ 378.760946][T13501] netlink: 'syz.6.2108': attribute type 1 has an invalid length. [ 379.421529][T13527] netlink: 'syz.7.2112': attribute type 10 has an invalid length. [ 379.521375][T13527] `: (slave netdevsim0): Enslaving as an active interface with a down link [ 380.019585][T13551] netlink: 'syz.8.2121': attribute type 1 has an invalid length. [ 380.493661][T13574] netlink: 'syz.7.2129': attribute type 1 has an invalid length. [ 380.512274][T13574] netlink: 'syz.7.2129': attribute type 3 has an invalid length. [ 380.536795][T13574] NCSI netlink: No device for ifindex 813332851 [ 380.680295][T13583] netlink: 'syz.7.2132': attribute type 11 has an invalid length. [ 380.929326][T13589] bond0: entered promiscuous mode [ 380.934612][T13589] !: entered promiscuous mode [ 380.949925][T13589] bond_slave_1: entered promiscuous mode [ 380.963234][T13589] bond0: entered allmulticast mode [ 380.977599][T13589] !: entered allmulticast mode [ 381.001504][T13589] bond_slave_1: entered allmulticast mode [ 381.027359][T13589] 8021q: adding VLAN 0 to HW filter on device bond0 [ 381.223771][T13601] tipc: Enabled bearer , priority 0 [ 381.298614][T13601] tipc: Disabling bearer [ 381.361046][ T5848] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 381.740763][T13629] netlink: 'syz.5.2142': attribute type 5 has an invalid length. [ 381.765937][T13629] __nla_validate_parse: 19 callbacks suppressed [ 381.765958][T13629] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2142'. [ 381.860965][T13633] tipc: Started in network mode [ 381.893656][T13633] tipc: Node identity 6ab18700ac99, cluster identity 4711 [ 381.905473][T13633] tipc: Enabled bearer , priority 0 [ 381.965627][T13629] syzkaller0: entered promiscuous mode [ 381.977076][T13629] syzkaller0: entered allmulticast mode [ 382.031142][T13629] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not filter [ 382.090889][T13629] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 382.160952][T13629] tipc: Resetting bearer [ 382.185369][T13624] tipc: Resetting bearer [ 382.260500][T13624] tipc: Disabling bearer [ 382.287394][T13651] IPVS: length: 24 != 3581880 [ 382.658755][T13671] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 382.723991][T13678] netlink: 'syz.6.2156': attribute type 4 has an invalid length. [ 382.811626][T13682] netlink: 'syz.5.2158': attribute type 83 has an invalid length. [ 383.325033][T13702] netlink: 'syz.8.2164': attribute type 39 has an invalid length. [ 383.555556][T13709] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2166'. [ 384.144587][T13727] netlink: 'syz.8.2170': attribute type 1 has an invalid length. [ 384.307909][T13727] 8021q: adding VLAN 0 to HW filter on device bond2 [ 384.377574][T13735] veth3: entered promiscuous mode [ 384.401868][T13735] bond2: (slave veth3): Enslaving as an active interface with an up link [ 384.454848][T13746] netlink: 'syz.7.2173': attribute type 39 has an invalid length. [ 384.832194][T13753] bond5: entered allmulticast mode [ 384.842232][T13753] 8021q: adding VLAN 0 to HW filter on device bond5 [ 384.850944][T13753] bridge0: port 1(bond5) entered blocking state [ 384.860913][T13753] bridge0: port 1(bond5) entered disabled state [ 384.888870][T13753] bond5: entered promiscuous mode [ 384.918455][T13764] openvswitch: netlink: Missing valid actions attribute. [ 384.925569][T13764] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 385.781605][T13802] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2188'. [ 385.854966][T13804] IPVS: length: 225 != 8 [ 385.920243][T13812] netlink: 'syz.7.2191': attribute type 11 has an invalid length. [ 386.151995][T13819] netlink: 68 bytes leftover after parsing attributes in process `syz.6.2192'. [ 386.297074][T13824] netlink: 'syz.7.2193': attribute type 24 has an invalid length. [ 386.383894][T13822] netlink: 256 bytes leftover after parsing attributes in process `syz.7.2193'. [ 386.417870][T13833] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 386.442857][T13833] gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 386.461802][T13833] gretap2: entered promiscuous mode [ 386.467217][T13833] gretap2: entered allmulticast mode [ 386.809364][T13849] netlink: 'syz.6.2202': attribute type 1 has an invalid length. [ 386.845761][T13831] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 386.855448][T13849] bond5: entered promiscuous mode [ 386.863789][T13849] bond5: entered allmulticast mode [ 386.870096][T13849] 8021q: adding VLAN 0 to HW filter on device bond5 [ 386.943377][T13858] netlink: 96 bytes leftover after parsing attributes in process `syz.6.2205'. [ 387.177541][T13827] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 387.209830][T13865] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2206'. [ 387.248670][T13865] netlink: 'syz.6.2206': attribute type 5 has an invalid length. [ 387.256468][T13865] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2206'. [ 387.331987][T13865] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2206'. [ 387.378340][T13865] netlink: 'syz.6.2206': attribute type 5 has an invalid length. [ 387.417372][T13865] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2206'. [ 387.450235][T13865] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2206'. [ 387.494273][T13865] netlink: 'syz.6.2206': attribute type 5 has an invalid length. [ 387.521237][T13880] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2211'. [ 387.527700][T13881] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2212'. [ 387.538099][T13865] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2206'. [ 387.567559][T13865] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2206'. [ 387.576792][T13865] netlink: 'syz.6.2206': attribute type 5 has an invalid length. [ 387.604011][T13865] netlink: 'syz.6.2206': attribute type 5 has an invalid length. [ 388.579876][T13936] ip6t_srh: unknown srh invflags 4000 [ 388.865766][T13952] C: renamed from lo (while UP) [ 389.013248][T13958] ip_tunnel: non-ECT from 2.0.0.0 with TOS=0x3 [ 389.669734][T13990] nbd: must specify at least one socket [ 390.256367][T14022] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_rx_wq": -EINTR [ 390.485280][T14041] smc: net device gre0 applied user defined pnetid SYZ1 [ 390.569098][T14048] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 390.570361][T14050] sock: sock_timestamping_bind_phc: sock not bind to device [ 390.833306][T14061] netem: change failed [ 391.072748][T14072] validate_nla: 28 callbacks suppressed [ 391.072772][T14072] netlink: 'syz.2.2264': attribute type 7 has an invalid length. [ 391.102789][T14072] netlink: 'syz.2.2264': attribute type 8 has an invalid length. [ 391.578660][T14091] syzkaller1: entered promiscuous mode [ 391.584312][T14091] syzkaller1: entered allmulticast mode [ 391.964947][T14108] !: renamed from dummy0 (while UP) [ 392.010826][T14110] __nla_validate_parse: 76 callbacks suppressed [ 392.010848][T14110] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2278'. [ 392.012769][T14114] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2280'. [ 392.180970][T14118] openvswitch: netlink: IP tunnel dst address not specified [ 392.857355][T14156] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2292'. [ 392.893113][T14156] bridge0: port 2(bridge_slave_1) entered disabled state [ 392.901154][T14156] bridge0: port 1(bridge_slave_0) entered disabled state [ 393.027903][T14166] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2295'. [ 393.051925][T14166] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2295'. [ 393.127757][T14170] syzkaller0: entered promiscuous mode [ 393.144288][T14170] syzkaller0: entered allmulticast mode [ 393.173017][T14173] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2298'. [ 393.222856][T14174] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2297'. [ 393.294820][T14174] netlink: 'syz.7.2297': attribute type 83 has an invalid length. [ 393.487951][T14184] openvswitch: netlink: nsh attribute has 1 unknown bytes. [ 393.497030][T14184] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 393.509191][T14184] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2300'. [ 394.164115][T14224] syzkaller1: entered promiscuous mode [ 394.217021][T14224] syzkaller1: entered allmulticast mode [ 457.624677][T14238] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2309'. [ 457.645161][T14236] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 457.679620][T14236] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 457.723030][T14236] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 457.755923][T14236] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 458.141569][T14272] veth0: entered promiscuous mode [ 458.291458][T14277] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2320'. [ 458.318924][T14262] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 458.351329][T14277] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2320'. [ 458.360924][T14277] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2320'. [ 458.399940][T14269] veth0: left promiscuous mode [ 458.579083][T14288] netlink: 'syz.5.2325': attribute type 2 has an invalid length. [ 458.604784][T14288] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2325'. [ 459.025183][T14309] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2331'. [ 459.071472][T14309] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2331'. [ 459.162816][T14314] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2332'. [ 459.185626][T14313] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2332'. [ 459.282816][T14316] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2333'. [ 459.484861][T14328] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 459.794068][T14344] veth3: entered allmulticast mode [ 460.203638][T14363] 8021q: adding VLAN 0 to HW filter on device macvtap0 [ 460.211693][T14363] team0: Device macvtap0 is already an upper device of the team interface [ 462.414348][T14398] veth7: entered promiscuous mode [ 462.423599][T14398] veth7: entered allmulticast mode [ 462.640672][T14411] __nla_validate_parse: 8 callbacks suppressed [ 462.640694][T14411] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2361'. [ 462.678267][T14411] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2361'. [ 462.716504][T14411] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2361'. [ 462.759820][T14411] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2361'. [ 462.881864][T14427] syzkaller0: entered promiscuous mode [ 462.903712][T14427] syzkaller0: entered allmulticast mode [ 462.941576][T14427] netlink: 'syz.5.2365': attribute type 25 has an invalid length. [ 462.979882][T14429] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2366'. [ 463.031450][T14437] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2366'. [ 463.147312][T14434] xt_TCPMSS: Only works on TCP SYN packets [ 463.262031][T14446] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2371'. [ 463.312261][T14450] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2371'. [ 463.366856][T14451] vlan2: entered promiscuous mode [ 463.400303][T14451] bridge0: entered promiscuous mode [ 463.520332][T14446] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2371'. [ 463.627865][T14464] netlink: 'syz.6.2375': attribute type 10 has an invalid length. [ 463.636254][T14464] batman_adv: batadv0: Interface deactivated: dummy0 [ 463.656782][T14464] batman_adv: batadv0: Removing interface: dummy0 [ 463.675541][T14467] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2377'. [ 463.690138][T14468] netlink: 'syz.6.2375': attribute type 10 has an invalid length. [ 463.694172][T14464] team0: Port device dummy0 added [ 463.800829][T14468] team0: Port device dummy0 removed [ 463.829064][T14468] dummy0: entered allmulticast mode [ 463.863868][T14468] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 463.889558][T14479] netlink: 'syz.2.2379': attribute type 1 has an invalid length. [ 463.913253][T14474] tipc: Enabled bearer , priority 0 [ 463.934089][T14475] syzkaller0: entered promiscuous mode [ 463.949539][T14475] syzkaller0: entered allmulticast mode [ 463.964409][T14484] netlink: 'syz.5.2380': attribute type 21 has an invalid length. [ 463.975993][T14482] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 464.039291][T14479] bond6: entered promiscuous mode [ 464.044822][T14479] 8021q: adding VLAN 0 to HW filter on device bond6 [ 464.065297][T14470] sch_tbf: burst 6 is lower than device syzkaller0 mtu (1514) ! [ 464.136102][T14474] tipc: Resetting bearer [ 464.175773][T14469] tipc: Resetting bearer [ 464.267082][T14469] tipc: Disabling bearer [ 464.282701][T14499] netlink: 'syz.6.2384': attribute type 1 has an invalid length. [ 464.295874][T14499] netlink: 'syz.6.2384': attribute type 3 has an invalid length. [ 464.307629][T14499] netlink: 'syz.6.2384': attribute type 7 has an invalid length. [ 464.316029][T14499] netlink: 'syz.6.2384': attribute type 8 has an invalid length. [ 464.336951][T14499] NCSI netlink: No device for ifindex 131092 [ 464.754072][T14521] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 464.783034][T14537] IPVS: set_ctl: invalid protocol: 59 172.20.20.37:20000 [ 465.097146][T14541] veth5: entered allmulticast mode [ 465.122317][T14540] veth7: entered allmulticast mode [ 465.689669][T14579] netlink: 'syz.2.2406': attribute type 1 has an invalid length. [ 465.748191][T14579] netlink: 'syz.2.2406': attribute type 2 has an invalid length. [ 465.830892][T14587] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 465.976020][T14596] bond0: (slave bridge4): making interface the new active one [ 465.985301][T14596] bond0: (slave bridge4): Enslaving as an active interface with an up link [ 466.449697][T14622] tipc: Enabled bearer , priority 0 [ 466.499787][T14622] syzkaller0: entered promiscuous mode [ 466.505764][T14622] syzkaller0: entered allmulticast mode [ 466.599874][T14622] tipc: Resetting bearer [ 466.626678][T14631] syzkaller0: entered promiscuous mode [ 466.636508][T14631] syzkaller0: entered allmulticast mode [ 466.644919][ T9469] netdevsim netdevsim8 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 466.656669][T14621] tipc: Resetting bearer [ 466.730523][T14621] tipc: Disabling bearer [ 466.762646][ T9469] netdevsim netdevsim8 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 466.793344][ T9480] netdevsim netdevsim8 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 466.816118][ T9480] netdevsim netdevsim8 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 467.119592][T14646] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 467.606055][T14676] openvswitch: netlink: IP tunnel dst address not specified [ 467.758935][T14682] sock: sock_timestamping_bind_phc: sock not bind to device [ 467.938415][T14692] IPVS: ip_vs_edit_dest(): server weight less than zero [ 467.945506][ T6171] IPVS: starting estimator thread 0... [ 468.039566][T14695] IPVS: using max 23 ests per chain, 55200 per kthread [ 468.052530][T14694] bond6: option resend_igmp: invalid value (32767) [ 468.059936][T14694] bond6: option resend_igmp: allowed values 0 - 255 [ 468.071364][T14694] bond6 (unregistering): Released all slaves [ 468.338260][T14714] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 468.507440][T14723] __nla_validate_parse: 15 callbacks suppressed [ 468.507473][T14723] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2452'. [ 468.532164][T14717] 8021q: adding VLAN 0 to HW filter on device bond2 [ 468.625594][T14721] bond2: (slave veth3): Enslaving as an active interface with a down link [ 468.657158][T14721] netlink: 72 bytes leftover after parsing attributes in process `syz.7.2450'. [ 468.681893][T14725] veth5: entered promiscuous mode [ 468.806442][T14738] validate_nla: 9 callbacks suppressed [ 468.806461][T14738] netlink: 'syz.2.2454': attribute type 24 has an invalid length. [ 468.808347][T14717] vlan2: entered allmulticast mode [ 468.844181][T14717] bond2: entered allmulticast mode [ 468.854435][T14717] bond2: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 469.062258][T14733] syzkaller1: entered promiscuous mode [ 469.080298][T14733] syzkaller1: entered allmulticast mode [ 469.223039][T14748] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 469.454376][T14763] xfrm1: entered allmulticast mode [ 469.662814][T14775] xt_TCPMSS: Only works on TCP SYN packets [ 469.677606][T14777] bond3: (slave veth0_to_bond): Releasing active interface [ 469.738900][T14777] bond0: (slave 1!): Releasing backup interface [ 469.760643][T14777] !: left promiscuous mode [ 469.778402][T14777] !: left allmulticast mode [ 469.823496][T14777] bond0: (slave bond_slave_1): Releasing backup interface [ 469.847740][T14777] bond_slave_1: left promiscuous mode [ 469.861880][T14786] netlink: 'syz.5.2465': attribute type 13 has an invalid length. [ 469.879413][T14777] bond_slave_1: left allmulticast mode [ 469.882132][T14786] netlink: 'syz.5.2465': attribute type 58 has an invalid length. [ 469.905164][T14786] netlink: 152 bytes leftover after parsing attributes in process `syz.5.2465'. [ 469.938748][T14777] team0: Port device team_slave_0 removed [ 469.976169][T14777] team0: Port device team_slave_1 removed [ 470.001481][T14777] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 470.046387][T14781] team0: No ports can be present during mode change [ 470.196474][ T5901] !yz!: Port: 1 Link DOWN [ 470.266524][T14802] netlink: 'syz.2.2473': attribute type 22 has an invalid length. [ 470.288253][T14802] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2473'. [ 470.310043][T14802] netlink: 'syz.2.2473': attribute type 22 has an invalid length. [ 470.340257][T14802] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2473'. [ 470.451582][T14804] netlink: 288 bytes leftover after parsing attributes in process `syz.6.2475'. [ 470.496547][T14804] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 470.516381][T14804] lo: entered promiscuous mode [ 470.527303][T14804] netlink: 'syz.6.2475': attribute type 2 has an invalid length. [ 470.544562][T14804] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 470.775067][T14817] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2479'. [ 471.527110][T14858] netlink: 'syz.7.2491': attribute type 4 has an invalid length. [ 471.555635][T14862] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2492'. [ 471.615236][T14867] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2491'. [ 471.699321][T14865] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2493'. [ 472.071493][T14892] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000 [ 472.151771][T14896] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 472.727357][T14912] x_tables: duplicate underflow at hook 2 [ 472.853704][T14921] IPVS: set_ctl: invalid protocol: 2 100.1.1.1:20001 [ 472.869816][T14922] vet0_virt_wifi: renamed from team0 [ 473.374364][T14944] ipt_REJECT: TCP_RESET invalid for non-tcp [ 473.464482][T14955] dvmrp0: left allmulticast mode [ 473.526426][T14958] __nla_validate_parse: 2 callbacks suppressed [ 473.526448][T14958] netlink: 44 bytes leftover after parsing attributes in process `syz.6.2517'. [ 473.531260][T14957] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2518'. [ 473.625557][T14966] ip6gre3: entered promiscuous mode [ 473.637448][T14966] ip6gre3: entered allmulticast mode [ 473.648960][ T9469] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 473.662188][ T9469] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 473.669063][T14961] netlink: 'syz.7.2519': attribute type 3 has an invalid length. [ 473.670711][ T6157] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 473.695138][ T6157] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 474.002705][T14983] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 474.068568][ T5901] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 474.111346][T14987] netlink: 64 bytes leftover after parsing attributes in process `syz.8.2525'. [ 474.385167][T14996] netlink: 'syz.8.2525': attribute type 2 has an invalid length. [ 474.422453][T15001] veth0: entered promiscuous mode [ 474.447392][T14998] veth0: left promiscuous mode [ 474.556880][T15006] openvswitch: netlink: nsh attribute has 65492 unknown bytes. [ 474.583535][T15006] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 474.619938][T15012] netlink: 104 bytes leftover after parsing attributes in process `syz.7.2532'. [ 474.637166][T15012] netlink: 11 bytes leftover after parsing attributes in process `syz.7.2532'. [ 474.649879][T15012] netlink: 11 bytes leftover after parsing attributes in process `syz.7.2532'. [ 475.086093][T15031] netlink: 248 bytes leftover after parsing attributes in process `syz.5.2539'. [ 475.262036][T15036] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2541'. [ 475.301006][T15033] syzkaller0: entered promiscuous mode [ 475.306943][T15033] syzkaller0: entered allmulticast mode [ 475.333755][T15038] bridge3: entered promiscuous mode [ 475.355374][T15046] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2542'. [ 475.371214][T15038] bridge3: entered allmulticast mode [ 475.393824][T15038] team0: Port device bridge3 added [ 475.421309][T15044] bridge0: port 1(team0) entered blocking state [ 475.422235][T15049] netlink: 64 bytes leftover after parsing attributes in process `syz.6.2545'. [ 475.446837][T15044] bridge0: port 1(team0) entered disabled state [ 475.496649][T15044] team0: entered allmulticast mode [ 475.517365][T15044] team_slave_0: entered allmulticast mode [ 475.545852][T15044] team_slave_1: entered allmulticast mode [ 475.571601][T15044] team0: entered promiscuous mode [ 475.576891][T15044] team_slave_0: entered promiscuous mode [ 475.583545][T15044] team_slave_1: entered promiscuous mode [ 475.764808][T15046] hsr_slave_0 (unregistering): left promiscuous mode [ 475.850276][T15056] delete_channel: no stack [ 477.569387][T15063] syzkaller1: entered promiscuous mode [ 477.575050][T15063] syzkaller1: entered allmulticast mode [ 477.963421][T15110] netlink: 'syz.5.2562': attribute type 1 has an invalid length. [ 478.045351][T15110] bond5: entered promiscuous mode [ 478.058630][T15110] bond5: entered allmulticast mode [ 478.070967][T15110] 8021q: adding VLAN 0 to HW filter on device bond5 [ 478.078642][ C0] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 478.127392][T15116] netlink: 'syz.6.2563': attribute type 11 has an invalid length. [ 478.772849][T15140] __nla_validate_parse: 4 callbacks suppressed [ 478.772870][T15140] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2569'. [ 478.825067][T15139] netlink: 48 bytes leftover after parsing attributes in process `syz.8.2570'. [ 479.193995][T15158] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2578'. [ 479.231662][T15160] openvswitch: netlink: IP tunnel dst address not specified [ 479.525543][T15166] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2579'. [ 480.041677][T15186] netlink: 'syz.8.2585': attribute type 63 has an invalid length. [ 480.289067][T15195] netlink: 108 bytes leftover after parsing attributes in process `syz.8.2588'. [ 480.289079][T15196] netlink: 108 bytes leftover after parsing attributes in process `syz.8.2588'. [ 480.603402][T15215] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2592'. [ 480.784663][T15220] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2594'. [ 481.254690][T15240] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2599'. [ 481.620084][T15253] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2604'. [ 481.742560][T15261] IPv6: NLM_F_REPLACE set, but no existing node found! [ 481.919331][T15267] nft_compat: unsupported protocol 0 [ 482.310909][T15281] netlink: 'syz.5.2612': attribute type 6 has an invalid length. [ 482.396015][T15278] delete_channel: no stack [ 482.431000][T15278] delete_channel: no stack [ 482.438569][T15278] delete_channel: no stack [ 482.483002][T15278] delete_channel: no stack [ 482.487691][T15278] delete_channel: no stack [ 482.503005][T15278] delete_channel: no stack [ 482.510628][T15278] delete_channel: no stack [ 482.523117][T15278] delete_channel: no stack [ 482.527862][T15278] delete_channel: no stack [ 482.540668][T15287] netlink: 'syz.5.2613': attribute type 10 has an invalid length. [ 482.552312][T15278] delete_channel: no stack [ 482.557212][T15278] delete_channel: no stack [ 482.582472][T15278] delete_channel: no stack [ 482.587296][T15287] bridge0: port 1(dummy0) entered blocking state [ 482.597434][T15278] delete_channel: no stack [ 482.610001][T15287] bridge0: port 1(dummy0) entered disabled state [ 482.616838][T15278] delete_channel: no stack [ 482.628823][T15278] delete_channel: no stack [ 482.634298][T15278] delete_channel: no stack [ 482.641773][T15287] dummy0: entered allmulticast mode [ 482.647389][T15278] delete_channel: no stack [ 482.653858][T15278] delete_channel: no stack [ 482.659761][T15278] delete_channel: no stack [ 482.665625][T15278] delete_channel: no stack [ 482.674908][T15278] delete_channel: no stack [ 482.696312][T15278] delete_channel: no stack [ 482.706424][T15278] delete_channel: no stack [ 482.720426][T15278] delete_channel: no stack [ 482.730638][T15278] delete_channel: no stack [ 482.747419][T15278] delete_channel: no stack [ 482.757837][T15278] delete_channel: no stack [ 482.792303][T15278] delete_channel: no stack [ 482.799337][T15278] delete_channel: no stack [ 482.804159][T15278] delete_channel: no stack [ 482.812649][T15278] delete_channel: no stack [ 482.817442][T15278] delete_channel: no stack [ 482.866131][T15278] delete_channel: no stack [ 483.283817][T15314] netlink: 'syz.8.2622': attribute type 11 has an invalid length. [ 483.544898][T15324] x_tables: duplicate underflow at hook 1 [ 483.776979][T15334] bond3: option min_links: invalid value (18446744073709551614) [ 483.786860][T15334] bond3: option min_links: allowed values 0 - 2147483647 [ 483.802944][T15334] bond3 (unregistering): Released all slaves [ 484.017751][T15353] __nla_validate_parse: 39 callbacks suppressed [ 484.017773][T15353] netlink: 212368 bytes leftover after parsing attributes in process `syz.8.2633'. [ 484.771352][T15370] tipc: Enabling of bearer rejected, failed to enable media [ 484.834153][T15376] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 484.938424][T15376] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 484.976899][T15376] gretap1: entered promiscuous mode [ 484.982355][T15376] gretap1: entered allmulticast mode [ 485.017758][T15388] tun0: tun_chr_ioctl cmd 1074025675 [ 485.025419][T15388] tun0: persist disabled [ 485.033720][T15388] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2643'. [ 485.171410][T15397] bond0: entered promiscuous mode [ 485.176511][T15397] bridge4: entered promiscuous mode [ 485.253536][T15397] batadv0: entered promiscuous mode [ 485.273109][T15397] batadv0: left promiscuous mode [ 485.284698][T15397] bond0: left promiscuous mode [ 485.289886][T15397] bridge4: left promiscuous mode [ 485.322609][T15403] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2644'. [ 485.351785][T15405] netlink: 'syz.5.2648': attribute type 1 has an invalid length. [ 485.457400][T15405] 8021q: adding VLAN 0 to HW filter on device bond7 [ 485.481928][T15411] veth5: entered promiscuous mode [ 485.491473][T15411] bond7: (slave veth5): Enslaving as an active interface with a down link [ 485.504199][T15412] IPv6: sit1: Disabled Multicast RS [ 485.511291][T15412] sit1: entered allmulticast mode [ 485.554633][T15405] veth7: entered promiscuous mode [ 485.563354][T15405] bond7: (slave veth7): Enslaving as an active interface with a down link [ 485.577535][T15411] bond7: entered allmulticast mode [ 486.055257][T15437] pimreg: entered allmulticast mode [ 486.213327][T15448] IPVS: ip_vs_edit_dest(): server weight less than zero [ 486.524148][T15462] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2661'. [ 486.566663][T15462] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2661'. [ 486.752390][T15471] netlink: 20 bytes leftover after parsing attributes in process `syz.8.2665'. [ 486.793881][T15471] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 486.811885][T15476] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2663'. [ 486.835719][T15476] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2663'. [ 486.878298][ C0] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 486.973691][T15484] tipc: Enabled bearer , priority 0 [ 486.993592][T15484] syzkaller0: entered promiscuous mode [ 487.006099][T15484] syzkaller0: entered allmulticast mode [ 487.023991][T15489] ip6gretap1: entered allmulticast mode [ 487.125251][T15488] tipc: Resetting bearer [ 487.152946][T15488] tipc: Disabling bearer [ 487.284612][T15503] IPVS: set_ctl: invalid protocol: 115 127.0.0.1:20002 [ 487.417314][T15508] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2675'. [ 487.484194][T15508] veth0_macvtap: left promiscuous mode [ 487.561133][T15511] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2677'. [ 488.077547][T15538] netlink: 'syz.7.2687': attribute type 21 has an invalid length. [ 488.641218][T15562] ipt_REJECT: TCP_RESET invalid for non-tcp [ 489.144546][T15598] netlink: 'syz.5.2706': attribute type 1 has an invalid length. [ 489.169492][T15598] __nla_validate_parse: 4 callbacks suppressed [ 489.169514][T15598] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2706'. [ 489.351387][T15614] netlink: 14560 bytes leftover after parsing attributes in process `syz.8.2708'. [ 489.460840][T15620] netlink: 128 bytes leftover after parsing attributes in process `syz.8.2708'. [ 489.470237][T15620] netlink: 20 bytes leftover after parsing attributes in process `syz.8.2708'. [ 489.494840][T15621] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2712'. [ 490.105535][T15648] C: renamed from lo [ 490.223112][T15648] nbd1: detected capacity change from 0 to 127 [ 490.432040][ T5848] block nbd1: Receive control failed (result -104) [ 490.628681][T15684] tap0: tun_chr_ioctl cmd 37896 [ 490.753184][T15692] netlink: 'syz.8.2731': attribute type 1 has an invalid length. [ 490.781700][T15691] netlink: 'syz.2.2732': attribute type 29 has an invalid length. [ 490.806804][T15691] netlink: 500 bytes leftover after parsing attributes in process `syz.2.2732'. [ 490.844767][T15696] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 490.880321][T15692] 8021q: adding VLAN 0 to HW filter on device bond3 [ 490.907705][T15692] bond3: (slave ip6gretap1): making interface the new active one [ 490.919645][T15692] bond3: (slave ip6gretap1): Enslaving as an active interface with an up link [ 490.931972][T15697] netlink: 'syz.2.2732': attribute type 29 has an invalid length. [ 491.022016][T15700] macvlan3: entered promiscuous mode [ 491.055610][T15700] macvlan3: entered allmulticast mode [ 491.076247][T15700] bond3: entered promiscuous mode [ 491.096673][T15700] ip6gretap1: entered promiscuous mode [ 491.110700][T15700] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 491.125709][T15700] team0: Port device macvlan3 added [ 491.144620][T15706] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2735'. [ 491.722897][T15737] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2745'. [ 491.913924][T15748] tipc: Enabled bearer , priority 0 [ 491.955862][T15750] syzkaller0: entered promiscuous mode [ 491.973008][T15750] syzkaller0: entered allmulticast mode [ 492.091453][T15750] tipc: Resetting bearer [ 492.140635][T15750] tipc: Disabling bearer [ 492.791986][T15797] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2758'. [ 493.077722][T15813] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2763'. [ 493.693089][T15847] : entered promiscuous mode [ 494.047100][T15867] block nbd2: Unsupported socket: should be TCP or UNIX. [ 494.271981][T15878] __nla_validate_parse: 5 callbacks suppressed [ 494.272001][T15878] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2779'. [ 494.436302][T15878] bridge_slave_1 (unregistering): left allmulticast mode [ 494.449633][T15878] bridge_slave_1 (unregistering): left promiscuous mode [ 494.457685][T15893] IPVS: set_ctl: invalid protocol: 60 127.0.0.1:20002 [ 494.467353][T15878] bridge0: port 2(bridge_slave_1) entered disabled state [ 495.307577][T15931] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2796'. [ 495.357099][T15931] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2796'. [ 495.481023][T15940] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2799'. [ 495.585025][T15947] netlink: 'syz.7.2801': attribute type 21 has an invalid length. [ 495.593194][T15946] netlink: 'syz.7.2801': attribute type 21 has an invalid length. [ 495.593220][T15946] netlink: 128 bytes leftover after parsing attributes in process `syz.7.2801'. [ 495.593295][T15946] netlink: 'syz.7.2801': attribute type 4 has an invalid length. [ 495.593312][T15946] netlink: 'syz.7.2801': attribute type 5 has an invalid length. [ 495.593327][T15946] netlink: 3 bytes leftover after parsing attributes in process `syz.7.2801'. [ 495.698889][T15947] netlink: 128 bytes leftover after parsing attributes in process `syz.7.2801'. [ 495.768163][T15947] netlink: 'syz.7.2801': attribute type 4 has an invalid length. [ 495.775948][T15947] netlink: 'syz.7.2801': attribute type 5 has an invalid length. [ 495.817732][T15960] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2806'. [ 495.829061][T15947] netlink: 3 bytes leftover after parsing attributes in process `syz.7.2801'. [ 495.840388][T15951] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2804'. [ 495.883571][T15966] IPVS: set_ctl: invalid protocol: 58 224.0.0.2:20000 [ 495.923861][T15967] IPVS: set_ctl: invalid protocol: 135 172.30.1.9:20001 [ 495.945862][T15966] IPVS: set_ctl: invalid protocol: 58 224.0.0.2:20000 [ 495.972791][T15970] dummy0: left allmulticast mode [ 495.981622][T15970] bridge0: port 1(dummy0) entered disabled state [ 496.052584][T15970] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 496.262900][T15974] netlink: 'syz.7.2810': attribute type 1 has an invalid length. [ 496.470050][T15991] netlink: 'syz.5.2813': attribute type 21 has an invalid length. [ 496.521946][T15991] netlink: 'syz.5.2813': attribute type 5 has an invalid length. [ 496.632701][T15998] netlink: 'syz.6.2816': attribute type 6 has an invalid length. [ 496.657737][T15998] netlink: 'syz.6.2816': attribute type 6 has an invalid length. [ 496.997029][T16018] netlink: 'syz.6.2823': attribute type 1 has an invalid length. [ 497.035272][T16023] netlink: 'syz.8.2826': attribute type 1 has an invalid length. [ 497.110833][T16018] bond6: (slave gretap1): making interface the new active one [ 497.172999][T16018] bond6: (slave gretap1): Enslaving as an active interface with an up link [ 497.217318][T16032] syzkaller1: entered promiscuous mode [ 497.224712][T16032] syzkaller1: entered allmulticast mode [ 497.253094][T16030] 8021q: adding VLAN 0 to HW filter on device bond6 [ 497.567550][T16051] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 499.187616][T16121] netlink: 'syz.2.2853': attribute type 2 has an invalid length. [ 500.040166][ T6169] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 500.130506][ T6169] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 500.358880][T16163] __nla_validate_parse: 8 callbacks suppressed [ 500.358901][T16163] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2868'. [ 500.761091][ T6169] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 501.012386][T16200] vxcan1 speed is unknown, defaulting to 1000 [ 501.022571][T16200] vxcan1 speed is unknown, defaulting to 1000 [ 501.032778][T16200] vxcan1 speed is unknown, defaulting to 1000 [ 501.319110][T16216] netlink: 56 bytes leftover after parsing attributes in process `syz.6.2880'. [ 501.421041][T16220] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2881'. [ 501.494146][T16220] macsec2: entered promiscuous mode [ 501.501587][T16220] bridge0: entered promiscuous mode [ 501.509928][T16220] macsec2: entered allmulticast mode [ 501.515515][T16220] bridge0: entered allmulticast mode [ 501.524608][T16220] bridge0: port 2(macsec2) entered blocking state [ 501.542109][T16220] bridge0: port 2(macsec2) entered disabled state [ 501.587012][T16220] bridge0: left allmulticast mode [ 501.596877][T16220] bridge0: left promiscuous mode [ 501.707097][T16226] syzkaller0: entered promiscuous mode [ 501.714733][T16226] syzkaller0: entered allmulticast mode [ 501.776516][T16232] xt_recent: Unsupported userspace flags (000000b1) [ 501.825930][T16200] infiniband syz2: set active [ 501.846875][T16200] infiniband syz2: added vxcan1 [ 501.870754][T16235] geneve3: entered promiscuous mode [ 501.876247][T16235] geneve3: entered allmulticast mode [ 501.885146][T16226] tipc: Enabled bearer , priority 0 [ 501.910161][ T6171] vxcan1 speed is unknown, defaulting to 1000 [ 501.938319][T16223] tipc: Resetting bearer [ 502.030113][T16200] RDS/IB: syz2: added [ 502.034328][T16200] smc: adding ib device syz2 with port count 1 [ 502.051169][T16223] tipc: Disabling bearer [ 502.051208][T16200] smc: ib device syz2 port 1 has no pnetid [ 502.090386][ T36] netdevsim netdevsim8 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0 [ 502.101072][ T36] netdevsim netdevsim8 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 502.131243][T16248] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2891'. [ 502.142459][ T6171] vxcan1 speed is unknown, defaulting to 1000 [ 502.147660][ T36] netdevsim netdevsim8 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 502.178358][T16200] vxcan1 speed is unknown, defaulting to 1000 [ 502.178970][ T36] netdevsim netdevsim8 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0 [ 502.377062][T16256] netlink: 'syz.6.2893': attribute type 1 has an invalid length. [ 502.704164][T16276] netlink: 'syz.8.2897': attribute type 1 has an invalid length. [ 502.749933][T16276] netlink: 'syz.8.2897': attribute type 11 has an invalid length. [ 502.812087][T16276] netlink: 224 bytes leftover after parsing attributes in process `syz.8.2897'. [ 503.165267][T16200] vxcan1 speed is unknown, defaulting to 1000 [ 503.666147][T16321] netlink: 40 bytes leftover after parsing attributes in process `syz.8.2912'. [ 503.932969][T16200] vxcan1 speed is unknown, defaulting to 1000 [ 503.942223][T16336] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 504.083626][T16340] RDS: rds_bind could not find a transport for fc01::1, load rds_tcp or rds_rdma? [ 504.141485][T16342] netlink: 92 bytes leftover after parsing attributes in process `syz.8.2919'. [ 504.308722][T16351] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2922'. [ 504.680314][T16200] vxcan1 speed is unknown, defaulting to 1000 [ 504.752099][T16368] netlink: 'syz.5.2928': attribute type 63 has an invalid length. [ 504.775530][T16368] netlink: 'syz.5.2928': attribute type 63 has an invalid length. [ 504.798217][ C0] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 504.914572][T16368] netlink: 'syz.5.2928': attribute type 4 has an invalid length. [ 504.964117][T16381] netlink: 'syz.5.2928': attribute type 4 has an invalid length. [ 505.485378][T16200] vxcan1 speed is unknown, defaulting to 1000 [ 505.673545][T16420] IPVS: set_ctl: invalid protocol: 137 224.0.0.2:20001 [ 505.856039][T16425] netdevsim netdevsim8 netdevsim0: entered promiscuous mode [ 506.185694][T16442] netlink: 'syz.2.2943': attribute type 1 has an invalid length. [ 506.350014][T16447] bond7: (slave ip6gretap1): making interface the new active one [ 506.388986][T16447] bond7: (slave ip6gretap1): Enslaving as an active interface with an up link [ 506.422752][T16442] netlink: 'syz.2.2943': attribute type 2 has an invalid length. [ 506.469889][T16200] vxcan1 speed is unknown, defaulting to 1000 [ 506.496758][T16442] : entered promiscuous mode [ 506.517707][T16456] tipc: Bearer : already 2 bearers with priority 10 [ 506.547562][T16456] tipc: Bearer : trying with adjusted priority [ 506.563209][T16456] tipc: Enabling of bearer rejected, failed to enable media [ 506.789757][T16468] netlink: 'syz.2.2950': attribute type 1 has an invalid length. [ 506.805037][T16471] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2951'. [ 506.934802][T16200] vxcan1 speed is unknown, defaulting to 1000 [ 507.049607][T16478] sch_tbf: burst 512 is lower than device syzkaller0 mtu (1500) ! [ 507.088854][T16476] vlan0: entered promiscuous mode [ 507.094298][T16476] vlan0: entered allmulticast mode [ 507.119638][T16476] veth0_vlan: entered allmulticast mode [ 507.322093][T16490] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2957'. [ 507.381289][T16495] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2958'. [ 507.416684][T16495] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2958'. [ 507.749867][T16510] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2961'. [ 507.762055][T16510] 8021q: VLANs not supported on ipvlan1 [ 508.097763][T16527] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2966'. [ 508.271866][T16536] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2970'. [ 508.404923][T16541] RDS: rds_bind could not find a transport for 400:0:1200:0:1030:0:ffff:ffff, load rds_tcp or rds_rdma? [ 508.820567][T16560] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2977'. [ 509.370207][T16585] netlink: 'syz.2.2987': attribute type 4 has an invalid length. [ 509.378926][T16585] netlink: 17 bytes leftover after parsing attributes in process `syz.2.2987'. [ 509.495451][T16591] netlink: 'syz.6.2989': attribute type 4 has an invalid length. [ 509.539773][T16591] netlink: 88 bytes leftover after parsing attributes in process `syz.6.2989'. [ 509.572853][T16591] netlink: 'syz.6.2989': attribute type 4 has an invalid length. [ 509.645320][T16601] netlink: 'syz.5.2991': attribute type 1 has an invalid length. [ 509.748962][T16610] veth0: entered promiscuous mode [ 509.773373][T16610] veth0: left promiscuous mode [ 509.890943][T16621] netlink: 'syz.8.2996': attribute type 3 has an invalid length. [ 509.899442][T16621] netlink: 'syz.8.2996': attribute type 2 has an invalid length. [ 510.386465][T16641] netlink: 'syz.5.3000': attribute type 21 has an invalid length. [ 510.525801][T16646] syzkaller1: entered promiscuous mode [ 510.535074][T16646] syzkaller1: entered allmulticast mode [ 510.777265][T16656] SET target dimension over the limit! [ 511.591344][T16694] syzkaller0: entered promiscuous mode [ 511.596885][T16694] syzkaller0: entered allmulticast mode [ 511.747704][T16703] 8021q: VLANs not supported on vxcan1 [ 511.854942][T16706] A link change request failed with some changes committed already. Interface gre2 may have been left with an inconsistent configuration, please check. [ 511.932945][T16708] syzkaller0: entered promiscuous mode [ 511.952901][T16708] syzkaller0: entered allmulticast mode [ 512.786846][ T5846] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 512.800726][ T5846] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 512.826290][ T5846] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 512.843417][ T5846] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 512.874595][ T5846] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 514.111706][T16719] team0: Device ipvlan1 failed to register rx_handler [ 514.168135][T16730] __nla_validate_parse: 9 callbacks suppressed [ 514.168156][T16730] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3024'. [ 514.544143][T16749] tipc: Enabled bearer , priority 10 [ 514.550611][T16752] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3031'. [ 514.596514][T16749] xt_CT: You must specify a L4 protocol and not use inversions on it [ 514.782006][T16763] netlink: 64 bytes leftover after parsing attributes in process `syz.5.3034'. [ 514.894676][T16768] mac80211_hwsim hwsim25 syzkaller0: entered promiscuous mode [ 514.913853][T16770] netlink: 'syz.8.3037': attribute type 1 has an invalid length. [ 514.933420][T16768] mac80211_hwsim hwsim25 syzkaller0: entered allmulticast mode [ 514.949246][T16767] tipc: Enabled bearer , priority 0 [ 514.960993][ T5848] Bluetooth: hci3: command tx timeout [ 514.974318][T16770] netlink: 'syz.8.3037': attribute type 23 has an invalid length. [ 515.012978][T16726] vxcan1 speed is unknown, defaulting to 1000 [ 515.013081][T16768] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 515.264813][T16786] netlink: 64 bytes leftover after parsing attributes in process `syz.7.3040'. [ 515.289159][T16786] block nbd0: reconnected socket [ 515.433599][ T5848] block nbd0: Receive control failed (result -32) [ 515.474881][ T50] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 515.615058][ T50] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 515.767119][T16802] netem: change failed [ 515.861948][ T50] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 515.884999][T16812] openvswitch: netlink: Unknown key attributes 2 [ 515.986283][T16811] netlink: 32 bytes leftover after parsing attributes in process `syz.8.3047'. [ 516.113649][ T50] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 516.120537][T16821] netlink: 'syz.6.3051': attribute type 28 has an invalid length. [ 516.135365][T16821] netlink: 'syz.6.3051': attribute type 3 has an invalid length. [ 516.143396][ T6169] tipc: Node number set to 2053386808 [ 516.154782][T16821] netlink: 132 bytes leftover after parsing attributes in process `syz.6.3051'. [ 516.176194][T16818] syzkaller1: entered promiscuous mode [ 516.185715][T16818] syzkaller1: entered allmulticast mode [ 516.281532][T16830] nftables ruleset with unbound set [ 516.290105][T16830] netlink: 48 bytes leftover after parsing attributes in process `syz.7.3053'. [ 516.304614][T16830] netlink: 48 bytes leftover after parsing attributes in process `syz.7.3053'. [ 516.316214][T16830] netlink: 48 bytes leftover after parsing attributes in process `syz.7.3053'. [ 516.327142][T16830] netlink: 48 bytes leftover after parsing attributes in process `syz.7.3053'. [ 516.516565][T16839] ipt_rpfilter: unknown options [ 516.861975][T16726] chnl_net:caif_netlink_parms(): no params data found [ 516.892403][T16853] openvswitch: netlink: Flow key attr not present in new flow. [ 516.986925][ T50] bridge_slave_0: left allmulticast mode [ 517.003669][ T50] bridge_slave_0: left promiscuous mode [ 517.019516][ T50] bridge0: port 1(bridge_slave_0) entered disabled state [ 517.041127][ T5848] Bluetooth: hci3: command tx timeout [ 517.863305][ T50] gretap0 (unregistering): left promiscuous mode [ 517.946694][ T50] bond4 (unregistering): (slave geneve2): Releasing active interface [ 517.982656][ T50] team0: Port device geneve0 removed [ 518.189008][ T50] bond0 (unregistering): left promiscuous mode [ 518.195387][ T50] bond_slave_0: left promiscuous mode [ 518.201022][ T50] bond_slave_1: left promiscuous mode [ 518.206562][ T50] bridge_slave_1: left promiscuous mode [ 518.221104][ T50] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 518.232917][ T50] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 518.245864][ T50] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 518.257251][ T50] bond0 (unregistering): Released all slaves [ 518.364661][ T50] bond1 (unregistering): Released all slaves [ 518.471475][ T50] bond2 (unregistering): Released all slaves [ 518.485960][ T50] bond3 (unregistering): Released all slaves [ 518.596126][ T50] bond4 (unregistering): Released all slaves [ 518.767696][T16889] sock: sock_timestamping_bind_phc: sock not bind to device [ 518.897265][T16895] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 519.013462][T16726] bridge0: port 1(bridge_slave_0) entered blocking state [ 519.030791][T16726] bridge0: port 1(bridge_slave_0) entered disabled state [ 519.045589][T16726] bridge_slave_0: entered allmulticast mode [ 519.054937][T16726] bridge_slave_0: entered promiscuous mode [ 519.081452][T16908] netlink: 'syz.5.3074': attribute type 21 has an invalid length. [ 519.102324][T16726] bridge0: port 2(bridge_slave_1) entered blocking state [ 519.118283][ T5848] Bluetooth: hci3: command tx timeout [ 519.129364][T16726] bridge0: port 2(bridge_slave_1) entered disabled state [ 519.147862][T16726] bridge_slave_1: entered allmulticast mode [ 519.158561][T16726] bridge_slave_1: entered promiscuous mode [ 519.212143][T16913] __nla_validate_parse: 31 callbacks suppressed [ 519.212163][T16913] netlink: 92 bytes leftover after parsing attributes in process `syz.8.3075'. [ 519.379897][T16726] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 519.424607][T16726] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 519.550101][T16925] netlink: 24 bytes leftover after parsing attributes in process `syz.8.3079'. [ 519.572115][T16927] xt_TCPMSS: Only works on TCP SYN packets [ 519.608171][T16931] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3081'. [ 519.630377][T16726] team0: Port device team_slave_0 added [ 519.641534][T16925] netlink: 28 bytes leftover after parsing attributes in process `syz.8.3079'. [ 519.665198][T16726] team0: Port device team_slave_1 added [ 519.691612][T16925] netlink: 28 bytes leftover after parsing attributes in process `syz.8.3079'. [ 519.954732][T16942] netlink: 'syz.5.3083': attribute type 4 has an invalid length. [ 519.967007][T16726] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 519.989461][T16726] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 520.058754][T16726] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 520.090780][T16726] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 520.101826][T16726] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 520.133987][T16726] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 520.134033][T16961] netlink: 'syz.5.3087': attribute type 1 has an invalid length. [ 520.183591][T16961] netlink: 'syz.5.3087': attribute type 1 has an invalid length. [ 520.254921][T16726] hsr_slave_0: entered promiscuous mode [ 520.277224][T16965] netlink: 14 bytes leftover after parsing attributes in process `syz.7.3089'. [ 520.300069][T16726] hsr_slave_1: entered promiscuous mode [ 520.306569][T16726] debugfs: 'hsr0' already exists in 'hsr' [ 520.330288][T16726] Cannot create hsr debugfs directory [ 520.335968][T16965] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 520.351706][T16965] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 520.364982][T16965] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 520.373808][T16965] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 520.481975][ T50] tipc: Left network mode [ 520.692687][T16976] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3093'. [ 520.732248][T16976] veth0_macvtap: left promiscuous mode [ 520.800524][ T25] block nbd1: Possible stuck request ffff888024dbe000: control (read@0,1024B). Runtime 30 seconds [ 520.813251][ T25] block nbd1: Possible stuck request ffff888024dbe1c0: control (read@1024,1024B). Runtime 30 seconds [ 520.826054][ T25] block nbd1: Possible stuck request ffff888024dbe380: control (read@2048,1024B). Runtime 30 seconds [ 520.839571][ T25] block nbd1: Possible stuck request ffff888024dbe540: control (read@3072,1024B). Runtime 30 seconds [ 520.961375][T16983] netlink: 'syz.6.3094': attribute type 1 has an invalid length. [ 520.983740][T16983] netlink: 'syz.6.3094': attribute type 2 has an invalid length. [ 521.046803][T16984] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_tx_wq": -EINTR [ 521.201852][ T5848] Bluetooth: hci3: command tx timeout [ 521.307658][T17003] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3098'. [ 521.317658][T17003] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3098'. [ 521.604951][T17017] netlink: 'syz.7.3103': attribute type 12 has an invalid length. [ 521.687815][T16726] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 521.706042][T16726] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 521.838918][T17017] bond4: option primary_reselect: invalid value (255) [ 521.852457][T17017] bond4 (unregistering): Released all slaves [ 522.107223][T16726] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 522.160850][T16726] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 522.224646][T17035] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 522.420054][T16726] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 522.449000][T16726] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 522.522698][T17043] nftables ruleset with unbound chain [ 522.556995][ T50] hsr_slave_0: left promiscuous mode [ 522.571571][ T50] hsr_slave_1: left promiscuous mode [ 522.600120][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 522.613917][ T50] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 522.651941][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 522.677825][ T50] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 522.706646][ T50] veth0_macvtap: left allmulticast mode [ 522.713728][ T50] veth0_macvtap: left promiscuous mode [ 522.720649][ T50] veth1_vlan: left promiscuous mode [ 522.725978][ T50] veth0_vlan: left promiscuous mode [ 523.200203][ T50] team0 (unregistering): Port device team_slave_1 removed [ 523.243733][ T50] team0 (unregistering): Port device team_slave_0 removed [ 523.673131][T17043] : entered promiscuous mode [ 523.716261][T16726] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 523.732874][T16726] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 524.050106][T17064] syzkaller0: entered promiscuous mode [ 524.056005][T17066] netlink: 24 bytes leftover after parsing attributes in process `syz.8.3120'. [ 524.068816][T17064] syzkaller0: entered allmulticast mode [ 524.417053][ T50] IPVS: stop unused estimator thread 0... [ 524.570628][T16726] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 524.615317][T16726] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 524.653427][T16726] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 524.661947][T17097] __nla_validate_parse: 1 callbacks suppressed [ 524.661968][T17097] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3126'. [ 524.683856][T17097] netlink: 'syz.6.3126': attribute type 7 has an invalid length. [ 524.696811][T16726] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 524.706147][T17097] netlink: 'syz.6.3126': attribute type 8 has an invalid length. [ 524.714712][T17097] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3126'. [ 524.934693][T17110] netlink: 44 bytes leftover after parsing attributes in process `syz.5.3128'. [ 524.980592][T16726] 8021q: adding VLAN 0 to HW filter on device bond0 [ 525.007757][T17115] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 525.062510][T17110] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3128'. [ 525.097542][T16726] 8021q: adding VLAN 0 to HW filter on device team0 [ 525.200774][ T9473] bridge0: port 1(bridge_slave_0) entered blocking state [ 525.208030][ T9473] bridge0: port 1(bridge_slave_0) entered forwarding state [ 525.267090][ T9473] bridge0: port 2(bridge_slave_1) entered blocking state [ 525.274339][ T9473] bridge0: port 2(bridge_slave_1) entered forwarding state [ 525.603888][T17134] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3134'. [ 525.746455][T17140] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3136'. [ 525.925733][T17154] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3139'. [ 525.941249][T17140] hsr_slave_0 (unregistering): left promiscuous mode [ 525.953533][T17145] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3137'. [ 525.965579][T17145] bridge_slave_0: entered promiscuous mode [ 526.053919][T17154] netlink: 64979 bytes leftover after parsing attributes in process `syz.6.3139'. [ 526.074974][T16726] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 526.329392][T17168] geneve4: entered promiscuous mode [ 526.345043][T17168] geneve4: entered allmulticast mode [ 526.380242][ T50] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 526.422557][ T50] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 526.529713][ T50] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 526.592666][T17183] macsec1: entered promiscuous mode [ 527.420588][T17188] netlink: 'syz.8.3146': attribute type 4 has an invalid length. [ 527.445716][T17191] netlink: 'syz.8.3146': attribute type 21 has an invalid length. [ 527.466586][T17191] netlink: 132 bytes leftover after parsing attributes in process `syz.8.3146'. [ 527.581512][T16726] veth0_vlan: entered promiscuous mode [ 527.611024][T16726] veth1_vlan: entered promiscuous mode [ 527.629992][T17190] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 527.861297][T16726] veth0_macvtap: entered promiscuous mode [ 527.891525][T17207] bridge0: port 1(bridge_slave_0) entered blocking state [ 527.898747][T17207] bridge0: port 1(bridge_slave_0) entered forwarding state [ 527.934309][T16726] veth1_macvtap: entered promiscuous mode [ 528.003283][T16726] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 528.054278][T16726] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 528.081357][ T36] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 528.105836][ T36] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 528.163620][ T36] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 528.182499][ T36] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 528.239686][T17218] netlink: 'syz.7.3154': attribute type 5 has an invalid length. [ 528.388957][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 528.396842][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 528.529726][T17229] netlink: 'syz.6.3158': attribute type 9 has an invalid length. [ 528.547325][ T9469] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 528.568865][ T9469] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 528.785393][T17235] workqueue: name exceeds WQ_NAME_LEN. Truncating to: &%Q0@æjʫ} [ 529.125944][T17250] bond9: entered allmulticast mode [ 529.134391][T17250] 8021q: adding VLAN 0 to HW filter on device bond9 [ 529.143263][T17250] bridge0: port 1(bond9) entered blocking state [ 529.154556][T17250] bridge0: port 1(bond9) entered disabled state [ 529.166330][T17250] bond9: entered promiscuous mode [ 529.731030][T17281] __nla_validate_parse: 7 callbacks suppressed [ 529.731051][T17281] netlink: 36 bytes leftover after parsing attributes in process `syz.8.3174'. [ 529.940285][T17288] sch_tbf: burst 8 is lower than device ip6tnl0 mtu (1452) ! [ 530.321692][T17307] Cannot find set identified by id 65534 to match [ 530.413646][T17316] netlink: 64 bytes leftover after parsing attributes in process `syz.6.3184'. [ 530.424561][T17316] nbd: socks must be embedded in a SOCK_ITEM attr [ 530.433383][T17311] bond4: entered promiscuous mode [ 530.438806][T17311] bond4: entered allmulticast mode [ 530.474446][T17311] 8021q: adding VLAN 0 to HW filter on device bond4 [ 530.537209][T17315] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3183'. [ 530.694721][T17334] netlink: 'syz.7.3188': attribute type 2 has an invalid length. [ 530.792865][T17337] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 530.897669][T17343] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3190'. [ 530.976817][T17350] syzkaller1: entered promiscuous mode [ 530.989147][T17350] syzkaller1: entered allmulticast mode [ 531.306164][T17368] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3199'. [ 531.354148][T17368] tipc: Enabled bearer , priority 0 [ 531.386716][T17367] tipc: Disabling bearer [ 531.480013][T17385] netlink: 'syz.8.3204': attribute type 2 has an invalid length. [ 531.482209][T17384] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 531.602023][T17388] sit0: entered promiscuous mode [ 531.614511][T17388] netlink: 'syz.7.3206': attribute type 1 has an invalid length. [ 531.624122][T17388] netlink: 1 bytes leftover after parsing attributes in process `syz.7.3206'. [ 531.678264][T17388] netlink: 830 bytes leftover after parsing attributes in process `syz.7.3206'. [ 531.714689][T17390] netlink: 830 bytes leftover after parsing attributes in process `syz.7.3206'. [ 531.779189][T17392] syzkaller1: entered promiscuous mode [ 531.784746][T17392] syzkaller1: entered allmulticast mode [ 531.869484][T17402] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3209'. [ 531.959245][T17403] netlink: 'syz.2.3209': attribute type 1 has an invalid length. [ 532.085371][T17407] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3212'. [ 532.795624][T17432] netlink: 'syz.6.3220': attribute type 1 has an invalid length. [ 532.892959][T17427] netlink: 'syz.8.3219': attribute type 1 has an invalid length. [ 532.933527][T17432] 8021q: adding VLAN 0 to HW filter on device bond7 [ 532.957157][T17436] ` (unregistering): (slave bond_slave_0): Releasing backup interface [ 532.982215][T17436] ` (unregistering): (slave bond_slave_1): Releasing backup interface [ 532.996305][T17436] ` (unregistering): (slave netdevsim0): Releasing backup interface [ 533.019473][T17436] ` (unregistering): Released all slaves [ 533.154903][T17440] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 533.189630][T17440] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 533.251503][T17437] bond5: (slave ip6gretap2): making interface the new active one [ 533.262953][T17437] bond5: (slave ip6gretap2): Enslaving as an active interface with an up link [ 533.677422][T17477] netlink: 'syz.6.3235': attribute type 1 has an invalid length. [ 533.695938][T17477] netlink: 'syz.6.3235': attribute type 4 has an invalid length. [ 533.735146][T17484] openvswitch: netlink: Key type 132 is out of range max 32 [ 533.895377][T17490] openvswitch: netlink: Unknown key attributes 2 [ 534.191639][T17501] openvswitch: netlink: EtherType 50a is less than min 600 [ 534.216597][T17501] syzkaller0: entered promiscuous mode [ 534.224088][T17501] syzkaller0: entered allmulticast mode [ 534.245709][T17501] tipc: Bearer : already 2 bearers with priority 10 [ 534.261591][T17501] tipc: Bearer : trying with adjusted priority [ 534.284757][T17501] tipc: Enabled bearer , priority 9 [ 534.319855][T17501] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 534.461265][T17513] netlink: 'syz.8.3248': attribute type 10 has an invalid length. [ 534.766909][T17530] __nla_validate_parse: 15 callbacks suppressed [ 534.766947][T17530] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3253'. [ 534.881302][T17538] netlink: 312 bytes leftover after parsing attributes in process `syz.6.3255'. [ 534.925859][T17539] netlink: 312 bytes leftover after parsing attributes in process `syz.6.3255'. [ 534.953177][T17540] netlink: 312 bytes leftover after parsing attributes in process `syz.6.3255'. [ 535.439550][T17568] netlink: 68 bytes leftover after parsing attributes in process `syz.6.3263'. [ 535.730759][T17582] netlink: 'syz.6.3268': attribute type 1 has an invalid length. [ 535.992693][T17602] netlink: 72 bytes leftover after parsing attributes in process `syz.7.3272'. [ 536.269702][T17618] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3276'. [ 536.500141][T17626] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3279'. [ 536.527156][T17626] netlink: 20 bytes leftover after parsing attributes in process `syz.8.3279'. [ 536.562144][T17629] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3278'. [ 536.595689][T17629] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 536.612831][T17629] gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 536.621047][T17629] gretap2: entered promiscuous mode [ 536.627380][T17629] gretap2: entered allmulticast mode [ 536.814381][T17639] netlink: 'syz.6.3282': attribute type 21 has an invalid length. [ 536.840613][T17639] netlink: 'syz.6.3282': attribute type 4 has an invalid length. [ 536.868107][T17639] netlink: 'syz.6.3282': attribute type 5 has an invalid length. [ 537.493842][T17658] tipc: Enabled bearer , priority 0 [ 537.501632][T17658] syzkaller0: entered promiscuous mode [ 537.507147][T17658] syzkaller0: entered allmulticast mode [ 537.523547][T17658] tipc: Resetting bearer [ 537.546996][T17657] tipc: Resetting bearer [ 537.585715][T17657] tipc: Disabling bearer [ 540.065519][T17796] __nla_validate_parse: 12 callbacks suppressed [ 540.065545][T17796] netlink: 28 bytes leftover after parsing attributes in process `syz.8.3325'. [ 540.463756][T17814] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3330'. [ 540.600923][T17814] bridge_slave_1: left allmulticast mode [ 540.606717][T17814] bridge_slave_1: left promiscuous mode [ 540.612725][T17814] bridge0: port 2(bridge_slave_1) entered disabled state [ 540.657566][T17814] bridge_slave_0: left allmulticast mode [ 540.665075][T17814] bridge_slave_0: left promiscuous mode [ 540.671108][T17814] bridge0: port 1(bridge_slave_0) entered disabled state [ 540.702240][T17826] netlink: 'syz.6.3333': attribute type 11 has an invalid length. [ 540.710194][T17826] netlink: 224 bytes leftover after parsing attributes in process `syz.6.3333'. [ 541.076175][T17840] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3337'. [ 541.121167][T17845] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3338'. [ 541.278925][ C0] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 541.335165][T17851] netlink: 'syz.7.3340': attribute type 1 has an invalid length. [ 541.345612][T17851] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3340'. [ 541.389421][T17849] netlink: 'syz.6.3339': attribute type 1 has an invalid length. [ 541.416845][T17853] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3341'. [ 541.441564][T17854] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3341'. [ 541.560782][T17862] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 542.070522][T17882] tc_dump_action: action bad kind [ 542.112330][T17886] netlink: 'syz.5.3352': attribute type 9 has an invalid length. [ 542.139391][T17887] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3351'. [ 542.186744][T17890] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3353'. [ 542.701013][T17907] bond1: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-xor(2) [ 542.732830][T17907] bond1 (unregistering): Released all slaves [ 542.753575][T17918] openvswitch: netlink: Port -1 exceeds max allowable 65535 [ 542.987614][T17929] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 543.724739][T17968] x_tables: duplicate entry at hook 2 [ 543.813623][T17973] netlink: 'syz.8.3382': attribute type 1 has an invalid length. [ 544.012924][T17978] bond6: (slave gretap2): making interface the new active one [ 544.033080][T17978] bond6: (slave gretap2): Enslaving as an active interface with an up link [ 544.086591][ T3532] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 544.129917][ T3532] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 544.150494][ T3532] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 544.208714][ T3532] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 544.265193][T17992] IPv6: NLM_F_CREATE should be specified when creating new route [ 545.177415][T18026] __nla_validate_parse: 10 callbacks suppressed [ 545.177437][T18026] netlink: 232 bytes leftover after parsing attributes in process `syz.7.3393'. [ 545.230308][T18028] sctp: [Deprecated]: syz.5.3396 (pid 18028) Use of int in maxseg socket option. [ 545.230308][T18028] Use struct sctp_assoc_value instead [ 545.240894][T18033] netlink: 'syz.7.3393': attribute type 29 has an invalid length. [ 545.250711][T18032] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 545.277855][T18033] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3393'. [ 545.293669][T18028] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3396'. [ 545.333041][T18035] xt_hashlimit: Unknown mode mask C4, kernel too old? [ 545.334820][T18036] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3395'. [ 545.401747][T18036] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3395'. [ 545.548949][T18046] netlink: 28 bytes leftover after parsing attributes in process `syz.8.3397'. [ 545.558304][T18046] netlink: 'syz.8.3397': attribute type 7 has an invalid length. [ 545.566187][T18046] netlink: 'syz.8.3397': attribute type 8 has an invalid length. [ 545.588943][T18046] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3397'. [ 545.606806][T18026] netlink: 'syz.7.3393': attribute type 29 has an invalid length. [ 545.622118][T18026] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3393'. [ 546.115531][T18068] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3406'. [ 546.181080][T18071] x_tables: duplicate entry at hook 2 [ 546.231952][T18071] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3408'. [ 546.590552][T18095] netlink: 'syz.8.3413': attribute type 1 has an invalid length. [ 546.740318][T18095] veth7: entered promiscuous mode [ 546.970925][T18097] veth7: entered promiscuous mode [ 547.044640][T18095] batadv_slave_0: entered promiscuous mode [ 547.053538][T18095] batadv_slave_0: entered allmulticast mode [ 547.286831][T18117] netlink: 'syz.2.3420': attribute type 1 has an invalid length. [ 547.356989][T18117] 8021q: adding VLAN 0 to HW filter on device bond1 [ 547.493780][T18128] bond1: (slave veth3): Enslaving as an active interface with a down link [ 547.536134][T18117] bond1: (slave veth0_to_bond): making interface the new active one [ 547.559407][T18117] veth0_to_bond: entered promiscuous mode [ 547.580880][T18117] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 547.602285][T18135] A link change request failed with some changes committed already. Interface bond1 may have been left with an inconsistent configuration, please check. [ 547.829545][T18148] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000 [ 547.881513][T18148] : entered promiscuous mode [ 548.021580][T18161] netlink: 'syz.5.3435': attribute type 1 has an invalid length. [ 548.412598][T18172] veth1_macvtap: left promiscuous mode [ 548.439141][T18172] macsec0: entered promiscuous mode [ 548.444415][T18172] macsec0: entered allmulticast mode [ 548.490390][T18173] veth1_macvtap: entered promiscuous mode [ 548.515465][T18173] veth1_macvtap: entered allmulticast mode [ 548.541331][T18173] macsec0: left promiscuous mode [ 548.546544][T18173] macsec0: left allmulticast mode [ 548.565768][T18173] veth1_macvtap: left allmulticast mode [ 548.582279][T18180] veth0: entered promiscuous mode [ 549.061714][T18199] bond4: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 549.163854][T18199] bond4 (unregistering): Released all slaves [ 549.316337][T18175] veth0: left promiscuous mode [ 549.726471][T18227] netlink: 'syz.5.3454': attribute type 1 has an invalid length. [ 549.857257][T18227] bond10: entered promiscuous mode [ 549.864052][T18227] bond10: entered allmulticast mode [ 549.881477][T18227] 8021q: adding VLAN 0 to HW filter on device bond10 [ 550.335264][T18265] __nla_validate_parse: 77 callbacks suppressed [ 550.335286][T18265] netlink: 212368 bytes leftover after parsing attributes in process `syz.8.3463'. [ 550.449832][T18271] openvswitch: netlink: Message has 4 unknown bytes. [ 550.465408][T18266] openvswitch: netlink: Message has 4 unknown bytes. [ 550.568982][T18274] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3464'. [ 550.884581][ T25] block nbd1: Possible stuck request ffff888024dbe000: control (read@0,1024B). Runtime 60 seconds [ 550.896714][ T25] block nbd1: Possible stuck request ffff888024dbe1c0: control (read@1024,1024B). Runtime 60 seconds [ 550.904485][T18232] vxcan1 speed is unknown, defaulting to 1000 [ 550.907832][ T25] block nbd1: Possible stuck request ffff888024dbe380: control (read@2048,1024B). Runtime 60 seconds [ 550.928394][ T25] block nbd1: Possible stuck request ffff888024dbe540: control (read@3072,1024B). Runtime 60 seconds [ 550.979989][T18292] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 551.065192][T18292] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3469'. [ 551.134294][T18296] netlink: 44 bytes leftover after parsing attributes in process `syz.8.3471'. [ 551.138716][T18292] smc: net device vcan0 applied user defined pnetid SYZ1 [ 551.145245][T18296] netlink: 43 bytes leftover after parsing attributes in process `syz.8.3471'. [ 551.179926][T18296] netlink: 'syz.8.3471': attribute type 5 has an invalid length. [ 551.202266][T18296] netlink: 43 bytes leftover after parsing attributes in process `syz.8.3471'. [ 551.257850][T18302] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3473'. [ 551.281547][T18302] bond9: left promiscuous mode [ 551.289668][T18296] netlink: 16 bytes leftover after parsing attributes in process `syz.8.3471'. [ 551.296972][T18302] bridge0: port 1(bond9) entered disabled state [ 551.299036][T18303] netlink: 16 bytes leftover after parsing attributes in process `syz.8.3471'. [ 551.413242][T18309] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3475'. [ 552.912419][T18380] xt_l2tp: missing protocol rule (udp|l2tpip) [ 552.945872][T18385] xt_l2tp: missing protocol rule (udp|l2tpip) [ 552.957039][T18371] syzkaller0: entered promiscuous mode [ 552.966597][T18371] syzkaller0: entered allmulticast mode [ 553.166742][T18389] netlink: 'syz.5.3497': attribute type 6 has an invalid length. [ 553.182495][T18389] netlink: 'syz.5.3497': attribute type 5 has an invalid length. [ 555.040188][T18410] x_tables: ip6_tables: REDIRECT target: used from hooks INPUT, but only usable from PREROUTING/OUTPUT [ 555.080603][T18407] bond8: option mode: invalid value (133) [ 555.099677][T18407] bond8 (unregistering): Released all slaves [ 555.703270][T18448] __nla_validate_parse: 5 callbacks suppressed [ 555.703292][T18448] netlink: 10 bytes leftover after parsing attributes in process `syz.8.3510'. [ 555.741374][T18448] nbd: must specify at least one socket [ 555.815417][T18454] xt_cgroup: invalid path, errno=-2 [ 555.852029][T18450] bond4: option min_links: invalid value (18446744073709551614) [ 555.859281][T18454] netlink: 'syz.2.3513': attribute type 6 has an invalid length. [ 555.869291][T18450] bond4: option min_links: allowed values 0 - 2147483647 [ 555.892680][T18450] bond4 (unregistering): Released all slaves [ 555.928624][T18455] netlink: 'syz.2.3513': attribute type 6 has an invalid length. [ 556.362641][T18479] IPv6: sit1: Disabled Multicast RS [ 556.385238][T18479] sit1: entered allmulticast mode [ 556.943777][T18502] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3528'. [ 557.025272][T18476] team_slave_0: entered promiscuous mode [ 557.031455][T18476] team_slave_1: entered promiscuous mode [ 557.047448][T18476] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 557.060605][T18510] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3529'. [ 557.079845][T18510] netlink: 35 bytes leftover after parsing attributes in process `syz.2.3529'. [ 557.089860][T18510] netlink: 'syz.2.3529': attribute type 5 has an invalid length. [ 557.099692][T18510] netlink: 'syz.2.3529': attribute type 6 has an invalid length. [ 557.109921][T18510] netlink: 35 bytes leftover after parsing attributes in process `syz.2.3529'. [ 557.456563][T18529] Bluetooth: MGMT ver 1.23 [ 557.566600][T18523] bond7: entered promiscuous mode [ 557.597538][T18523] bond7: entered allmulticast mode [ 557.623774][T18523] 8021q: adding VLAN 0 to HW filter on device bond7 [ 557.740538][T18513] vxcan1 speed is unknown, defaulting to 1000 [ 557.874802][T18540] netlink: 'syz.5.3536': attribute type 18 has an invalid length. [ 558.361377][T18560] netlink: 14 bytes leftover after parsing attributes in process `syz.5.3541'. [ 558.759173][T18560] bond0 (unregistering): Released all slaves [ 559.287505][T18603] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 559.382596][ T9480] veth0_to_bond: left promiscuous mode [ 559.534032][T18618] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3551'. [ 559.900321][T18628] netlink: 'syz.5.3555': attribute type 5 has an invalid length. [ 560.165776][T18636] netlink: 'syz.7.3558': attribute type 2 has an invalid length. [ 560.195416][T18636] : renamed from bridge_slave_0 (while UP) [ 560.877517][T18672] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 560.885553][T18672] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 560.893580][T18672] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 560.901559][T18672] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 560.909526][T18672] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 560.917450][T18672] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 560.925497][T18672] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 560.933482][T18672] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 560.941459][T18672] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 560.949462][T18672] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 561.399670][T18706] netlink: 40 bytes leftover after parsing attributes in process `syz.6.3582'. [ 561.399734][T18704] netlink: 200 bytes leftover after parsing attributes in process `syz.8.3581'. [ 561.451794][T18712] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3581'. [ 561.910843][T18736] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3588'. [ 562.280722][T18758] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3592'. [ 562.315819][T18758] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3592'. [ 562.351861][T18767] netlink: 'syz.5.3595': attribute type 2 has an invalid length. [ 562.361622][T18767] netlink: 'syz.5.3595': attribute type 11 has an invalid length. [ 562.370572][T18767] netlink: 132 bytes leftover after parsing attributes in process `syz.5.3595'. [ 562.383707][T18767] set match dimension is over the limit! [ 562.425546][T18778] netlink: 'syz.5.3595': attribute type 2 has an invalid length. [ 562.455284][T18778] netlink: 'syz.5.3595': attribute type 11 has an invalid length. [ 562.464728][T18773] netlink: 256 bytes leftover after parsing attributes in process `syz.6.3596'. [ 562.514956][T18778] netlink: 132 bytes leftover after parsing attributes in process `syz.5.3595'. [ 562.634803][T18788] netlink: 'syz.7.3598': attribute type 1 has an invalid length. [ 562.661443][T18788] netlink: 224 bytes leftover after parsing attributes in process `syz.7.3598'. [ 562.699967][T18788] netlink: 'syz.7.3598': attribute type 21 has an invalid length. [ 562.710454][T18788] netlink: 'syz.7.3598': attribute type 1 has an invalid length. [ 562.770935][T18791] tipc: Enabling of bearer rejected, failed to enable media [ 563.770804][T18832] netlink: 'syz.5.3612': attribute type 11 has an invalid length. [ 564.041270][T18839] tipc: Resetting bearer [ 564.279214][T18855] bond9: option miimon: invalid value (18446744073709551585) [ 564.286848][T18855] bond9: option miimon: allowed values 0 - 2147483647 [ 564.297204][T18855] bond9 (unregistering): Released all slaves [ 564.542311][T18874] syz.8.3624: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 564.592290][T18874] CPU: 1 UID: 0 PID: 18874 Comm: syz.8.3624 Not tainted syzkaller #0 PREEMPT(full) [ 564.592326][T18874] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 564.592340][T18874] Call Trace: [ 564.592349][T18874] [ 564.592359][T18874] dump_stack_lvl+0x189/0x250 [ 564.592400][T18874] ? __pfx_dump_stack_lvl+0x10/0x10 [ 564.592431][T18874] ? __pfx__printk+0x10/0x10 [ 564.592456][T18874] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 564.592488][T18874] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 564.592522][T18874] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 564.592555][T18874] warn_alloc+0x214/0x310 [ 564.592590][T18874] ? stack_depot_save_flags+0x40/0x860 [ 564.592631][T18874] ? __pfx_warn_alloc+0x10/0x10 [ 564.592667][T18874] ? kasan_save_track+0x3e/0x80 [ 564.592697][T18874] ? __kasan_kmalloc+0x93/0xb0 [ 564.592730][T18874] ? xsk_setsockopt+0x4dc/0x8d0 [ 564.592757][T18874] ? do_sock_setsockopt+0x17c/0x1b0 [ 564.592779][T18874] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 564.592800][T18874] ? do_syscall_64+0xfa/0xfa0 [ 564.592830][T18874] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 564.592865][T18874] __vmalloc_node_range_noprof+0x125/0x12d0 [ 564.592934][T18874] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 564.592982][T18874] ? __kasan_kmalloc+0x93/0xb0 [ 564.593023][T18874] vmalloc_user_noprof+0xad/0xf0 [ 564.593056][T18874] ? xskq_create+0xbf/0x170 [ 564.593086][T18874] xskq_create+0xbf/0x170 [ 564.593119][T18874] xsk_init_queue+0xb0/0x110 [ 564.593152][T18874] xsk_setsockopt+0x4dc/0x8d0 [ 564.593184][T18874] ? __pfx_xsk_setsockopt+0x10/0x10 [ 564.593216][T18874] ? __pfx_aa_sk_perm+0x10/0x10 [ 564.593252][T18874] ? aa_sock_opt_perm+0xff/0x1b0 [ 564.593292][T18874] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 564.593314][T18874] ? __pfx_xsk_setsockopt+0x10/0x10 [ 564.593346][T18874] do_sock_setsockopt+0x17c/0x1b0 [ 564.593377][T18874] __x64_sys_setsockopt+0x13f/0x1b0 [ 564.593408][T18874] do_syscall_64+0xfa/0xfa0 [ 564.593440][T18874] ? lockdep_hardirqs_on+0x9c/0x150 [ 564.593474][T18874] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 564.593496][T18874] ? clear_bhb_loop+0x60/0xb0 [ 564.593526][T18874] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 564.593548][T18874] RIP: 0033:0x7f479c18f749 [ 564.593569][T18874] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 564.593589][T18874] RSP: 002b:00007f479d0d9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 564.593614][T18874] RAX: ffffffffffffffda RBX: 00007f479c3e5fa0 RCX: 00007f479c18f749 [ 564.593631][T18874] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000008 [ 564.593646][T18874] RBP: 00007f479c213f91 R08: 0000000000000004 R09: 0000000000000000 [ 564.593660][T18874] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 564.593675][T18874] R13: 00007f479c3e6038 R14: 00007f479c3e5fa0 R15: 00007ffd67a94968 [ 564.593715][T18874] [ 564.594145][T18874] Mem-Info: [ 564.911954][T18874] active_anon:4663 inactive_anon:0 isolated_anon:0 [ 564.911954][T18874] active_file:3276 inactive_file:40028 isolated_file:0 [ 564.911954][T18874] unevictable:768 dirty:73 writeback:0 [ 564.911954][T18874] slab_reclaimable:12497 slab_unreclaimable:121315 [ 564.911954][T18874] mapped:29112 shmem:1378 pagetables:1324 [ 564.911954][T18874] sec_pagetables:0 bounce:0 [ 564.911954][T18874] kernel_misc_reclaimable:0 [ 564.911954][T18874] free:1306012 free_pcp:11586 free_cma:0 [ 564.991429][T18874] Node 0 active_anon:18552kB inactive_anon:0kB active_file:13104kB inactive_file:159912kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:116248kB dirty:288kB writeback:0kB shmem:3976kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13488kB pagetables:5172kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 565.104062][T18874] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:124kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 565.185198][T18874] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 565.309752][T18874] lowmem_reserve[]: 0 2505 2505 2505 2505 [ 565.325785][T18874] Node 0 DMA32 free:1310344kB boost:0kB min:34308kB low:42884kB high:51460kB reserved_highatomic:0KB free_highatomic:0KB active_anon:18448kB inactive_anon:0kB active_file:13104kB inactive_file:159912kB unevictable:1536kB writepending:288kB zspages:0kB present:3129332kB managed:2565148kB mlocked:0kB bounce:0kB free_pcp:34940kB local_pcp:19884kB free_cma:0kB [ 565.479425][T18874] lowmem_reserve[]: 0 0 0 0 0 [ 565.484232][T18874] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 565.619120][T18874] lowmem_reserve[]: 0 0 0 0 0 [ 565.623935][T18874] Node 1 Normal free:3898536kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:13344kB local_pcp:10400kB free_cma:0kB [ 565.748835][T18874] lowmem_reserve[]: 0 0 0 0 0 [ 565.753651][T18874] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 565.848625][T18874] Node 0 DMA32: 994*4kB (ME) 648*8kB (M) 170*16kB (UME) 844*32kB (UM) 784*64kB (UM) 490*128kB (UM) 349*256kB (UM) 277*512kB (UM) 146*1024kB (UME) 5*2048kB (UM) 187*4096kB (M) = 1308648kB [ 565.948818][T18874] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 566.001036][T18874] Node 1 Normal: 198*4kB (UME) 56*8kB (UME) 41*16kB (UME) 192*32kB (UME) 45*64kB (UME) 14*128kB (UME) 3*256kB (UM) 6*512kB (UME) 1*1024kB (M) 1*2048kB (E) 947*4096kB (M) = 3898536kB [ 566.106045][T18874] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 566.138919][T18874] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 566.184833][T18874] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 566.217315][T18874] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 566.285863][T18874] 44681 total pagecache pages [ 566.298764][T18874] 0 pages in swap cache [ 566.302976][T18874] Free swap = 124996kB [ 566.307151][T18874] Total swap = 124996kB [ 566.338766][T18874] 2097051 pages RAM [ 566.342720][T18874] 0 pages HighMem/MovableOnly [ 566.347409][T18874] 424122 pages reserved [ 566.408995][T18874] 0 pages cma reserved [ 567.563832][T18896] dvmrp0: entered allmulticast mode [ 568.293090][ T3082] bond5: left promiscuous mode [ 568.310270][ T3082] bridge0: port 1(bond5) entered disabled state [ 568.331982][T18939] __nla_validate_parse: 9 callbacks suppressed [ 568.332004][T18939] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3643'. [ 568.556980][ T3082] bond7 (unregistering): (slave ip6gretap1): Releasing active interface [ 569.152535][ T3082] vet0_virt_wifi: Port device geneve0 removed [ 569.533714][ T3082] bond0 (unregistering): Released all slaves [ 569.549882][ T3082] bond1 (unregistering): Released all slaves [ 569.565691][ T3082] bond2 (unregistering): Released all slaves [ 569.673517][ T3082] bond3 (unregistering): Released all slaves [ 569.782404][ T3082] bond4 (unregistering): Released all slaves [ 569.887848][ T3082] bond5 (unregistering): Released all slaves [ 569.992628][ T3082] bond6 (unregistering): Released all slaves [ 570.009694][ T3082] bond7 (unregistering): Released all slaves [ 570.079217][T18953] vlan3: entered promiscuous mode [ 570.084553][T18953] vlan3: entered allmulticast mode [ 570.093127][T18953] hsr_slave_1: entered allmulticast mode [ 570.938172][T19017] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3659'. [ 571.069688][T19022] netlink: 'syz.7.3661': attribute type 23 has an invalid length. [ 571.119057][T19029] x_tables: duplicate underflow at hook 2 [ 571.185701][T19031] netlink: 'syz.6.3663': attribute type 1 has an invalid length. [ 571.254052][T19031] 8021q: adding VLAN 0 to HW filter on device bond8 [ 571.264515][T19035] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3666'. [ 571.283731][T19031] bond8: (slave geneve3): making interface the new active one [ 571.293471][T19031] bond8: (slave geneve3): Enslaving as an active interface with an up link [ 571.322249][T19035] syzkaller1: entered promiscuous mode [ 571.328855][T19035] syzkaller1: entered allmulticast mode [ 571.374831][T19039] netlink: 24 bytes leftover after parsing attributes in process `syz.8.3667'. [ 571.553451][T19048] netlink: 'syz.6.3670': attribute type 15 has an invalid length. [ 571.648574][T19044] netlink: 'syz.8.3667': attribute type 13 has an invalid length. [ 571.705765][ T3082] : left promiscuous mode [ 571.752356][T19060] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3672'. [ 571.783270][T19060] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3672'. [ 571.840052][T19065] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3672'. [ 572.077626][ T3082] : left promiscuous mode [ 572.220285][ T3082] tipc: Left network mode [ 572.305787][ T3082] IPVS: stopping master sync thread 8762 ... [ 572.805918][T19106] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3687'. [ 573.042012][T19122] netlink: 5 bytes leftover after parsing attributes in process `syz.5.3692'. [ 573.150246][T19132] netlink: 'syz.2.3694': attribute type 1 has an invalid length. [ 573.304268][T19132] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 573.322129][T19145] block nbd2: Unsupported socket: should be TCP or UNIX. [ 573.671960][T19159] netlink: 'syz.8.3702': attribute type 1 has an invalid length. [ 573.702298][T19161] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3704'. [ 573.763234][T19159] bond9: entered promiscuous mode [ 573.777548][T19159] 8021q: adding VLAN 0 to HW filter on device bond9 [ 573.819460][T19161] 8021q: adding VLAN 0 to HW filter on device bond4 [ 573.893037][T19159] bond9: (slave bridge5): making interface the new active one [ 573.907582][T19159] bridge5: entered promiscuous mode [ 573.921835][T19159] bond9: (slave bridge5): Enslaving as an active interface with an up link [ 574.269659][T19186] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3708'. [ 574.406858][T19180] bond0: invalid ARP target 0.0.0.0 specified for addition [ 574.421734][T19180] bond0: option arp_ip_target: invalid value (0) [ 574.456223][T19180] bond0 (unregistering): Released all slaves [ 574.762144][T19211] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3714'. [ 574.762149][T19210] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3714'. [ 574.846085][T19186] macvtap0: entered promiscuous mode [ 574.852159][T19186] vlan0: entered promiscuous mode [ 574.859530][T19186] macvtap0: entered allmulticast mode [ 574.864937][T19186] vlan0: entered allmulticast mode [ 574.884798][T19186] veth0_vlan: entered allmulticast mode [ 575.189473][ T3082] hsr_slave_0: left promiscuous mode [ 575.195723][ T3082] hsr_slave_1: left promiscuous mode [ 575.215204][ T3082] veth1_macvtap: left promiscuous mode [ 575.221077][ T3082] veth0_macvtap: left promiscuous mode [ 575.226830][ T3082] veth1_vlan: left promiscuous mode [ 575.232227][ T3082] veth0_vlan: left promiscuous mode [ 575.310920][ T3082] pimreg (unregistering): left allmulticast mode [ 575.790380][ T50] smc: removing ib device !yz! [ 576.138216][T19200] netlink: 'syz.6.3711': attribute type 2 has an invalid length. [ 576.803798][T19257] netlink: 22 bytes leftover after parsing attributes in process `syz.5.3725'. [ 577.331824][T19278] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 578.414686][T19332] netlink: 9 bytes leftover after parsing attributes in process `syz.7.3747'. [ 578.453233][T19307] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 578.533612][T19307] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 578.909324][T19307] bond3: left promiscuous mode [ 578.914178][T19307] ip6gretap1: left promiscuous mode [ 579.248112][T19344] netlink: 'syz.8.3750': attribute type 1 has an invalid length. [ 579.296010][ T3532] netdevsim netdevsim8 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 579.322429][ T3532] netdevsim netdevsim8 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 579.359506][ T3532] netdevsim netdevsim8 netdevsim0: unset [1, 1] type 2 family 0 port 19999 - 0 [ 579.528747][T19345] bond10: (slave bridge6): making interface the new active one [ 579.537573][T19345] bond10: (slave bridge6): Enslaving as an active interface with an up link [ 579.616186][ T3532] netdevsim netdevsim8 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 579.637823][ T3532] netdevsim netdevsim8 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 579.690751][ T3532] netdevsim netdevsim8 netdevsim1: unset [1, 1] type 2 family 0 port 19999 - 0 [ 579.733044][ T3532] netdevsim netdevsim8 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 579.757471][ T3532] netdevsim netdevsim8 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 579.765735][T19365] xt_TCPMSS: Only works on TCP SYN packets [ 579.829011][ T3532] netdevsim netdevsim8 netdevsim2: unset [1, 1] type 2 family 0 port 19999 - 0 [ 579.840769][ T3532] netdevsim netdevsim8 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 579.853748][ T3532] netdevsim netdevsim8 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 579.862880][ T3532] netdevsim netdevsim8 netdevsim3: unset [1, 1] type 2 family 0 port 19999 - 0 [ 579.875205][T19368] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 580.139757][T19377] [ 580.151176][T19377] ====================================================== [ 580.158212][T19377] WARNING: possible circular locking dependency detected [ 580.165252][T19377] syzkaller #0 Not tainted [ 580.169675][T19377] ------------------------------------------------------ [ 580.176696][T19377] syz.7.3761/19377 is trying to acquire lock: [ 580.182763][T19377] ffffffff8f426a78 (nr_node_list_lock){+...}-{3:3}, at: nr_rt_device_down+0xa9/0x720 [ 580.192272][T19377] [ 580.192272][T19377] but task is already holding lock: [ 580.199644][T19377] ffffffff8f426a18 (nr_neigh_list_lock){+...}-{3:3}, at: nr_rt_device_down+0x28/0x720 [ 580.209350][T19377] [ 580.209350][T19377] which lock already depends on the new lock. [ 580.209350][T19377] [ 580.219758][T19377] [ 580.219758][T19377] the existing dependency chain (in reverse order) is: [ 580.228774][T19377] [ 580.228774][T19377] -> #2 (nr_neigh_list_lock){+...}-{3:3}: [ 580.236693][T19377] lock_acquire+0x120/0x360 [ 580.241729][T19377] _raw_spin_lock_bh+0x36/0x50 [ 580.247023][T19377] nr_rt_ioctl+0x390/0xd50 [ 580.251972][T19377] sock_do_ioctl+0xdc/0x300 [ 580.257013][T19377] sock_ioctl+0x576/0x790 [ 580.261872][T19377] __se_sys_ioctl+0xfc/0x170 [ 580.266992][T19377] do_syscall_64+0xfa/0xfa0 [ 580.272029][T19377] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 580.278449][T19377] [ 580.278449][T19377] -> #1 (&nr_node->node_lock){+...}-{3:3}: [ 580.286450][T19377] lock_acquire+0x120/0x360 [ 580.291476][T19377] _raw_spin_lock_bh+0x36/0x50 [ 580.296773][T19377] nr_rt_ioctl+0x193/0xd50 [ 580.301726][T19377] sock_do_ioctl+0xdc/0x300 [ 580.306769][T19377] sock_ioctl+0x576/0x790 [ 580.311627][T19377] __se_sys_ioctl+0xfc/0x170 [ 580.316750][T19377] do_syscall_64+0xfa/0xfa0 [ 580.321789][T19377] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 580.328209][T19377] [ 580.328209][T19377] -> #0 (nr_node_list_lock){+...}-{3:3}: [ 580.336037][T19377] validate_chain+0xb9b/0x2140 [ 580.341333][T19377] __lock_acquire+0xab9/0xd20 [ 580.346539][T19377] lock_acquire+0x120/0x360 [ 580.351573][T19377] _raw_spin_lock_bh+0x36/0x50 [ 580.356873][T19377] nr_rt_device_down+0xa9/0x720 [ 580.362255][T19377] nr_device_event+0x137/0x150 [ 580.367545][T19377] notifier_call_chain+0x1b6/0x3e0 [ 580.373185][T19377] netif_close_many+0x29c/0x410 [ 580.378581][T19377] netif_close+0x158/0x210 [ 580.383533][T19377] dev_close+0x10a/0x220 [ 580.388301][T19377] bpq_device_event+0x377/0x6a0 [ 580.393676][T19377] notifier_call_chain+0x1b6/0x3e0 [ 580.399317][T19377] netif_close_many+0x29c/0x410 [ 580.404723][T19377] netif_close+0x158/0x210 [ 580.409680][T19377] dev_close+0x10a/0x220 [ 580.414450][T19377] bond_setup_by_slave+0x5f/0x3f0 [ 580.420011][T19377] bond_enslave+0x6ca/0x38a0 [ 580.425134][T19377] bond_do_ioctl+0x635/0x9b0 [ 580.430251][T19377] bond_siocdevprivate+0x17e/0x350 [ 580.435892][T19377] dev_ifsioc+0xb57/0xf00 [ 580.440758][T19377] dev_ioctl+0x84c/0x1150 [ 580.445622][T19377] sock_ioctl+0x719/0x790 [ 580.450513][T19377] __se_sys_ioctl+0xfc/0x170 [ 580.455637][T19377] do_syscall_64+0xfa/0xfa0 [ 580.460677][T19377] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 580.467097][T19377] [ 580.467097][T19377] other info that might help us debug this: [ 580.467097][T19377] [ 580.477396][T19377] Chain exists of: [ 580.477396][T19377] nr_node_list_lock --> &nr_node->node_lock --> nr_neigh_list_lock [ 580.477396][T19377] [ 580.491250][T19377] Possible unsafe locking scenario: [ 580.491250][T19377] [ 580.498716][T19377] CPU0 CPU1 [ 580.504104][T19377] ---- ---- [ 580.509476][T19377] lock(nr_neigh_list_lock); [ 580.514162][T19377] lock(&nr_node->node_lock); [ 580.521450][T19377] lock(nr_neigh_list_lock); [ 580.528657][T19377] lock(nr_node_list_lock); [ 580.533262][T19377] [ 580.533262][T19377] *** DEADLOCK *** [ 580.533262][T19377] [ 580.541413][T19377] 2 locks held by syz.7.3761/19377: [ 580.546609][T19377] #0: ffffffff8f2cbd48 (rtnl_mutex){+.+.}-{4:4}, at: dev_ioctl+0x83c/0x1150 [ 580.555449][T19377] #1: ffffffff8f426a18 (nr_neigh_list_lock){+...}-{3:3}, at: nr_rt_device_down+0x28/0x720 [ 580.565505][T19377] [ 580.565505][T19377] stack backtrace: [ 580.571401][T19377] CPU: 0 UID: 0 PID: 19377 Comm: syz.7.3761 Not tainted syzkaller #0 PREEMPT(full) [ 580.571429][T19377] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 580.571440][T19377] Call Trace: [ 580.571450][T19377] [ 580.571459][T19377] dump_stack_lvl+0x189/0x250 [ 580.571490][T19377] ? __pfx_dump_stack_lvl+0x10/0x10 [ 580.571515][T19377] ? __pfx__printk+0x10/0x10 [ 580.571534][T19377] ? print_lock_name+0xde/0x100 [ 580.571553][T19377] print_circular_bug+0x2ee/0x310 [ 580.571578][T19377] check_noncircular+0x134/0x160 [ 580.571604][T19377] validate_chain+0xb9b/0x2140 [ 580.571633][T19377] ? __lock_acquire+0xab9/0xd20 [ 580.571651][T19377] __lock_acquire+0xab9/0xd20 [ 580.571670][T19377] ? nr_rt_device_down+0xa9/0x720 [ 580.571691][T19377] lock_acquire+0x120/0x360 [ 580.571706][T19377] ? nr_rt_device_down+0xa9/0x720 [ 580.571733][T19377] ? nr_rt_device_down+0xa9/0x720 [ 580.571754][T19377] _raw_spin_lock_bh+0x36/0x50 [ 580.571779][T19377] ? nr_rt_device_down+0xa9/0x720 [ 580.571801][T19377] nr_rt_device_down+0xa9/0x720 [ 580.571823][T19377] ? do_raw_spin_unlock+0x122/0x240 [ 580.571850][T19377] nr_device_event+0x137/0x150 [ 580.571871][T19377] notifier_call_chain+0x1b6/0x3e0 [ 580.571895][T19377] netif_close_many+0x29c/0x410 [ 580.571925][T19377] ? __pfx_netif_close_many+0x10/0x10 [ 580.571953][T19377] ? bond_netdev_event+0x227/0xe80 [ 580.571979][T19377] netif_close+0x158/0x210 [ 580.572005][T19377] ? __pfx_netif_close+0x10/0x10 [ 580.572030][T19377] ? __pfx___neigh_ifdown+0x10/0x10 [ 580.572055][T19377] ? macsec_notify+0x104/0x660 [ 580.572081][T19377] dev_close+0x10a/0x220 [ 580.572099][T19377] bpq_device_event+0x377/0x6a0 [ 580.572119][T19377] notifier_call_chain+0x1b6/0x3e0 [ 580.572144][T19377] netif_close_many+0x29c/0x410 [ 580.572174][T19377] ? __pfx_netif_close_many+0x10/0x10 [ 580.572205][T19377] netif_close+0x158/0x210 [ 580.572231][T19377] ? __pfx_netif_close+0x10/0x10 [ 580.572255][T19377] ? do_raw_spin_lock+0x121/0x290 [ 580.572281][T19377] ? __local_bh_enable_ip+0x12d/0x1c0 [ 580.572301][T19377] ? lockdep_hardirqs_on+0x9c/0x150 [ 580.572328][T19377] dev_close+0x10a/0x220 [ 580.572346][T19377] bond_setup_by_slave+0x5f/0x3f0 [ 580.572376][T19377] bond_enslave+0x6ca/0x38a0 [ 580.572409][T19377] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 580.572434][T19377] ? arch_stack_walk+0xfc/0x150 [ 580.572461][T19377] ? stack_trace_save+0x9c/0xe0 [ 580.572484][T19377] ? __pfx_stack_trace_save+0x10/0x10 [ 580.572509][T19377] ? __pfx_bond_enslave+0x10/0x10 [ 580.572541][T19377] ? apparmor_capable+0x137/0x1b0 [ 580.572561][T19377] ? full_name_hash+0x92/0xe0 [ 580.572582][T19377] ? netdev_name_node_lookup+0xdf/0x120 [ 580.572606][T19377] bond_do_ioctl+0x635/0x9b0 [ 580.572628][T19377] ? __pfx_bond_do_ioctl+0x10/0x10 [ 580.572658][T19377] ? rcu_is_watching+0x15/0xb0 [ 580.572694][T19377] bond_siocdevprivate+0x17e/0x350 [ 580.572714][T19377] ? __pfx_bond_siocdevprivate+0x10/0x10 [ 580.572733][T19377] ? __lock_acquire+0xab9/0xd20 [ 580.572770][T19377] ? full_name_hash+0x92/0xe0 [ 580.572790][T19377] ? netdev_name_node_lookup+0xdf/0x120 [ 580.572814][T19377] dev_ifsioc+0xb57/0xf00 [ 580.572845][T19377] dev_ioctl+0x84c/0x1150 [ 580.572874][T19377] sock_ioctl+0x719/0x790 [ 580.572898][T19377] ? __pfx_sock_ioctl+0x10/0x10 [ 580.572922][T19377] ? __fget_files+0x3a0/0x420 [ 580.572937][T19377] ? __fget_files+0x2a/0x420 [ 580.572954][T19377] ? bpf_lsm_file_ioctl+0x9/0x20 [ 580.572975][T19377] ? __pfx_sock_ioctl+0x10/0x10 [ 580.572997][T19377] __se_sys_ioctl+0xfc/0x170 [ 580.573021][T19377] do_syscall_64+0xfa/0xfa0 [ 580.573047][T19377] ? lockdep_hardirqs_on+0x9c/0x150 [ 580.573073][T19377] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 580.573090][T19377] ? clear_bhb_loop+0x60/0xb0 [ 580.573110][T19377] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 580.573127][T19377] RIP: 0033:0x7f6ccef8f749 [ 580.573144][T19377] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 580.573161][T19377] RSP: 002b:00007f6ccfd6f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 580.573180][T19377] RAX: ffffffffffffffda RBX: 00007f6ccf1e5fa0 RCX: 00007f6ccef8f749 [ 580.573194][T19377] RDX: 0000200000000180 RSI: 00000000000089f0 RDI: 0000000000000008 [ 580.573205][T19377] RBP: 00007f6ccf013f91 R08: 0000000000000000 R09: 0000000000000000 [ 580.573217][T19377] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 580.573227][T19377] R13: 00007f6ccf1e6038 R14: 00007f6ccf1e5fa0 R15: 00007ffc0db96e48 [ 580.573249][T19377] [ 581.055866][T19377] 8021q: adding VLAN 0 to HW filter on device bond0 [ 581.068575][T19377] bond0: (slave rose0): Enslaving as an active interface with an up link [ 581.116317][ T25] block nbd1: Possible stuck request ffff888024dbe000: control (read@0,1024B). Runtime 90 seconds [ 581.128706][ T25] block nbd1: Possible stuck request ffff888024dbe1c0: control (read@1024,1024B). Runtime 90 seconds [ 581.129832][ T3082] IPVS: stop unused estimator thread 0... [ 581.140639][ T25] block nbd1: Possible stuck request ffff888024dbe380: control (read@2048,1024B). Runtime 90 seconds [ 581.160927][ T25] block nbd1: Possible stuck request ffff888024dbe540: control (read@3072,1024B). Runtime 90 seconds [ 584.198203][ T5199] udevd[5199]: worker [14247] /devices/virtual/block/nbd1 is taking a long time