last executing test programs: 3m1.718843548s ago: executing program 2 (id=3087): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x40180, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r2 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f00000001c0)={0x5, {{0xa, 0x4e24, 0x2, @mcast1, 0xff7ffffd}}, {{0xa, 0x4e08, 0x4a5, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x4f5}}}, 0x108) bpf$ENABLE_STATS(0x20, &(0x7f0000000440), 0x4) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000001a40)={0x800003, {{0xa, 0x4e21, 0x400, @dev={0xfe, 0x80, '\x00', 0xc}, 0x976}}, {{0xa, 0x4e24, 0xaafb, @loopback, 0xca38}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, &(0x7f0000001a00)=ANY=[@ANYBLOB="03000000000000000a004e2300000010ff"], 0x610) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f00000006c0)={0xed8b, {{0x2, 0x4e20, @multicast1}}}, 0x88) close(r1) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000000340)=[@in6={0xa, 0x4e23, 0x7, @dev={0xfe, 0x80, '\x00', 0x3d}, 0xd}, @in6={0xa, 0x4e21, 0x8000, @mcast2, 0x6}, @in={0x2, 0x4e21, @multicast2}, @in6={0xa, 0x4e24, 0x4, @remote, 0x7}], 0x64) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000003b0001031bbd7002fadbdf2504"], 0x14}, 0x1, 0x0, 0x0, 0x80c0}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}}, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendfile(0xffffffffffffffff, r7, 0x0, 0x8000000000000000) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000017c0)={0x1431, 0x0}, 0x8) r9 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000001800), 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000001840)={0x11, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="80021800080000002500400010000000851000000600000018110000", @ANYRES32, @ANYBLOB="000c180000000000"], &(0x7f0000000500)='syzkaller\x00', 0x401, 0x1000, &(0x7f0000000780)=""/4096, 0x41000, 0x42, '\x00', 0x0, @fallback=0x38, r7, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001780)={0x5, 0xf, 0x4, 0x7}, 0x10, r8, r9, 0x0, 0x0, 0x0, 0x10, 0xfffffff6}, 0x94) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_red={{0x8}, {0xc, 0x2, [@TCA_RED_MARK_BLOCK={0x8, 0x6, 0x7}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40088c1}, 0x4040840) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001900)=@newqdisc={0x68, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdfff, {0x0, 0x0, 0x0, r4, {0x0, 0x8}, {0xe, 0xb}, {0x7, 0x1}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x3c, 0x2, [@TCA_HHF_EVICT_TIMEOUT={0x8, 0x6, 0x8}, @TCA_HHF_EVICT_TIMEOUT={0x8, 0x6, 0x9}, @TCA_HHF_NON_HH_WEIGHT={0x8, 0x7, 0x5}, @TCA_HHF_ADMIT_BYTES={0x8, 0x5, 0xffffffff}, @TCA_HHF_EVICT_TIMEOUT={0x8, 0x6, 0x80000000}, @TCA_HHF_EVICT_TIMEOUT={0x8, 0x6, 0xd}, @TCA_HHF_EVICT_TIMEOUT={0x8, 0x6, 0xcf}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x8000}, 0x2000c080) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r10 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f00000005c0)={0x0, @in={{0x2, 0x4e23, @private=0xa010101}}, 0x3, 0x9}, &(0x7f0000000680)=0x90) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'hsr0\x00', 0x1000}) sendto$packet(r10, &(0x7f00000000c0)="05", 0x1, 0x2, &(0x7f0000000540)={0x11, 0x8, r11, 0x1, 0x0, 0x6, @remote}, 0x14) 2m58.329916993s ago: executing program 2 (id=3093): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0xbe7466b08a9a88e, 0x4, 0x8}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xd, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x400}, [@call={0x85, 0x0, 0x0, 0x11}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r2 = socket(0x1e, 0x805, 0x0) connect$tipc(r2, &(0x7f0000000080)=@id={0x1e, 0x3, 0x2, {0x4e24, 0x2}}, 0x10) connect$tipc(r2, &(0x7f0000000600)=@name={0x1e, 0x2, 0x3, {{0x42, 0x10000000}, 0x2}}, 0x10) close(r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000001200)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xffffffffffffffff}}}], 0x20, 0x4040}}], 0x2, 0x4040080) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r1, r0}, 0xc) r4 = socket$netlink(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000000806010100b70000000000000200000205000100070000000900020073797a3100000000"], 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x8900) sendmsg$AUDIT_USER(r4, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0xe0, 0x3ed, 0x4, 0x70bd2b, 0x25dfdbff, "df7082aa6b1584b55872730684108c1b9c1da63459235d378bb32fc1634a44607d0d4ea28b2e80248e0a467cbc447ca7492f27c03dd60c8d7ee2a5683743b007ac0bb1ebb26e1ad2daf427911d6b357022b6d4f80c9f7e8f14be674bf7e0bafdf3b1a2c679e70e23ba20437e6c67988d3812da316504bb1ba067116be45a95673356168586f41e1ba08107f789762ab026c4f99473f2db33ad9c4057250bfa37727089fd2c1c456e429664e39ad06e4b7e9424f7432954e7bd2d6043bf8e416f9489a7a81fdec6eca22a08dc72", [""]}, 0xe0}, 0x1, 0x0, 0x0, 0x40}, 0x44005) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r4, &(0x7f0000000600)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="68000000020701090000000000000000030000000c000240000000220000000f0c00078008000140000000040c00024000000000000000000c000240fffffffffffffffd0c00078008000240000000080c000340000000000000065b0c0006400000000000008000"], 0x68}, 0x1, 0x0, 0x0, 0x40001}, 0x20040000) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r5, 0x0, r6, 0x0, 0x2000010000008eb9, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0xa, 0x4, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d", @ANYRESHEX=r6, @ANYRESDEC=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r9, 0x8946, &(0x7f0000000140)={'netdevsim0\x00', &(0x7f00000000c0)=@ethtool_link_settings={0x4c, 0x5b09, 0x7, 0x2, 0x3, 0x5, 0x7, 0x8, 0x6, 0x9, [0xce, 0x5, 0x2005, 0x40, 0x4, 0x3, 0x400e, 0xfb]}}) sendmsg$NFT_MSG_GETGEN(r2, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x14, 0x10, 0xa, 0x801, 0x0, 0x0, {0x3, 0x0, 0x7}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r7], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r8, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r10, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) ioctl$sock_bt_hci(r5, 0x400448e3, 0x0) r11 = socket(0x5, 0x5, 0x3) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r11, &(0x7f0000000840)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000500)={&(0x7f00000003c0)={0x50, 0x140c, 0x100, 0x70bd2d, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_RES_CQN={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_RES_CQN={0x8, 0x3d, 0x3}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x15) syz_genetlink_get_family_id$devlink(&(0x7f00000002c0), r4) 2m55.119098778s ago: executing program 2 (id=3106): r0 = socket$kcm(0x29, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001dc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) sendmmsg(r0, &(0x7f00000060c0)=[{{0x0, 0x0, &(0x7f00000038c0)=[{&(0x7f0000000640)="d160", 0x2}], 0x1}}], 0x1, 0x0) r2 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r2, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000040)={r2, r1}) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, &(0x7f0000000200)={r2}) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x6, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000c60700000000000000010000a50000001700000018410000fcffffff000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$TIPC_NL_BEARER_ENABLE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000100)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002bbd7000fedbdf25030000005800018044000400200001000a004e200000000cff01000000000000000000000000000000000000200002000a004e2200000004fc0100000000000000000000000000008d0100000d0001007564703a73"], 0x6c}}, 0x810) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=@newsa={0x104, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@local, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0xfffe, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0xa0, 0x11}, {@in=@multicast1, 0x4d4, 0x3c}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, {0x0, 0x192, 0x6, 0xffff, 0x8251f, 0x2, 0x7ff}, {0xffffffffffffffff, 0x0, 0x1e, 0xfffffffffffffffe}, {0x2, 0xfffffffc, 0x20000000}, 0x70bd2a, 0x3504, 0xa, 0x1, 0x0, 0x20}, [@sec_ctx={0xc, 0x8, {0x8, 0x8, 0x1, 0x4}}, @proto={0x5, 0x19, 0x6c}]}, 0x104}, 0x1, 0x0, 0x0, 0x48810}, 0x0) sendmmsg$inet(r3, &(0x7f00000034c0)=[{{&(0x7f0000000180)={0x2, 0x4e24, @empty}, 0x10, &(0x7f00000031c0)=[{&(0x7f0000000240)="6588ca6c99357e2c20831ea24b65191503ae9051a5c02a192192efb20d85802ba8c3ee1cbff30240462974752a733c19863d1e92ac7ab0da049758a3272ee1e57139fee0c2", 0x45}, {&(0x7f00000002c0)="50eca41a4468b36b430bd8d3cc7a1d559698da1e4ca0af08f1e758e9e86548171dc2a07a31d5e40375ab8dfd354bdbe7e4fabf6d180ceb4fa395ec27773b2190fd3b0c945ee27b758592195e0fa14335b40dc4abb33b4706b031901df629ac76890fe905c6819ace877e770b99c5", 0x6e}, {&(0x7f0000000340)="c0a911721795167cf01018bafd73c48a1b5aa5aa2224db3cb69c2ecc416ac29100938c77ab44a26781829eda2d657d6b3a81a8d48b92b7d8020ea6de9f1bb2b791", 0x41}, {&(0x7f00000003c0)="af0eb55c6e1015f9c25162517194b36615985c14643d", 0x16}, {&(0x7f0000000400)="86a0f96f0949d852c5026542a72814f5b0b245699679bda6300b48f7ec02875789129b0c65836f6fc8dd0adac67b27cb30fcb8d92113af51e6b5103068fc54ffc9571aca05706b7abcaa85ce33cf69ad05ea85cbe8ea374cf664cd84212ef928ebf93e671cb0647d3cd029fed8b8f587a38853ba3a5a1daaa898d1252cd97fdb55feb50d494668e75c0e8a6b5275caa24449f29c66b385862d1856296471bc0a637910785f3a09f60126b0ce1b174da21e8211829bc922d6e06a63ee35488c28abb36a79b765256d20273e", 0xcb}, {&(0x7f0000000500)="936d4c806e9b288c333eefdf2ca48ec291b63ba20362938fbe04", 0x1a}, {&(0x7f00000010c0)="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", 0x1000}, {&(0x7f00000020c0)="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", 0x1000}, {&(0x7f00000030c0)="abe03e7181896caf41f1b319c655a7f0c9ea1610813b4fbd8fe6da30f6f2cba840cf03bb9045042f5f1493ea49ea60f59cb96e86252b9b8ec771791b0ace80487702bb1c8d09d39050f88a70ee1cf5d2844eb6f93df6a12e373a86425e36068a458787ef3df99f4106fac6562fd55dc02199c552e2b53ac6e78ac7fac26334bfc1b6895c8091eec7b53ee6ebc3ee229aa12a50698d80f95a43d84a1031556e154c554bc716d0890e33d069c024bee8df27150493a25bb777fd5fbfb69882bc1b3e96fe01206e098b19152c3990a72fc8", 0xd0}], 0x9, &(0x7f0000003280)=[@ip_retopts={{0x14, 0x0, 0x7, {[@end]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x1}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x5}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x4}}, @ip_retopts={{0xf0, 0x0, 0x7, {[@end, @timestamp={0x44, 0x14, 0xad, 0x0, 0xa, [0x403, 0x8, 0x6, 0x5]}, @timestamp={0x44, 0x18, 0x20, 0x0, 0x0, [0x7, 0x4009, 0x6, 0x3, 0x9]}, @timestamp_addr={0x44, 0xc, 0xc0, 0x1, 0x9, [{@dev={0xac, 0x14, 0x14, 0x1f}, 0x5}]}, @timestamp_addr={0x44, 0x4c, 0xd7, 0x1, 0xe, [{@empty, 0x4d0e}, {@multicast1, 0x4}, {@dev={0xac, 0x14, 0x14, 0x44}, 0x5}, {@private=0xa010102, 0x1}, {@empty, 0x3}, {@empty, 0xffffff00}, {@local, 0x9}, {@empty, 0x3}, {@broadcast, 0x10001}]}, @timestamp={0x44, 0x20, 0x7a, 0x0, 0xd, [0x3, 0x7, 0xf0c, 0xffff7fff, 0x7, 0xe3, 0x3]}, @timestamp_prespec={0x44, 0x24, 0x4b, 0x3, 0x1, [{@multicast2, 0xdc8a}, {@dev={0xac, 0x14, 0x14, 0x26}, 0x1}, {@multicast1, 0x1}, {@multicast2, 0xfffffb69}]}, @timestamp_addr={0x44, 0x14, 0xa3, 0x1, 0xb, [{@local, 0x8}, {@empty, 0x1000}]}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0xfffffffe}}, @ip_ttl={{0x14, 0x0, 0x2, 0x4}}, @ip_retopts={{0x78, 0x0, 0x7, {[@cipso={0x86, 0x3f, 0x3, [{0x0, 0x5, "a108e1"}, {0x2, 0xa, "8367b47c14f325f6"}, {0x2, 0xe, "c54f9204d8c652d61a3e6819"}, {0x6, 0xb, "b6f0cad9bc7dbe2bae"}, {0x2, 0x11, "167eabfb7867b9d1767963393f6b66"}]}, @timestamp_addr={0x44, 0x14, 0xb5, 0x1, 0x5, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x5}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x6}]}, @timestamp_prespec={0x44, 0x14, 0x1b, 0x3, 0xb, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0xffff}, {@loopback, 0xfffffffd}]}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xf3}}], 0x210}}], 0x1, 0x4) 2m54.711902143s ago: executing program 2 (id=3109): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="310301000000fcdbdf250900000008000300", @ANYRES32=0x0, @ANYBLOB="91ff018dcc054cb4427390b4f4972b18240859b93a6f539ca48a709bb1418c05b8871f141c346f124474d3fcc2a2b6a1cc96dea1f63b145d64c795"], 0x1c}, 0x1, 0x0, 0x0, 0x20000095}, 0x200480c4) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000740), 0xffffffffffffffff) (async) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000100)='dctcp', 0x5) (async) bind$inet6(r4, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) (async, rerun: 64) setsockopt$inet6_tcp_int(r4, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) (async, rerun: 64) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x22040, 0x0) ioctl$TUNGETVNETLE(r5, 0x800454dd, &(0x7f0000000280)) sendto$inet6(r4, &(0x7f0000000380)="4e813cbfba79cae0486c4303d9d8aba8e590094c6a6abac2699434a0b1dba046dbb65b2bef2c084c9d2fdb6f360ba4b44f3149af2c08b294d85798eefc119c9e6350f6abde287c8c1f22a37eea52ccdb66a949fb2f13b679c294fa4438894a24738c10ba6567cc48484056e977d51e4dad09966502d46af3c54584c358658e52c19051fbd04d25c3", 0x88, 0x24000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x9}, 0x1c) (async) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f00000000c0)='bbr', 0x3) (async, rerun: 64) shutdown(r4, 0x1) (async, rerun: 64) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)={0x28, r3, 0x325, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x28}}, 0x0) (async) sendmsg$TIPC_NL_BEARER_DISABLE(r2, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x60, r3, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x6}]}, @TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x244}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}]}, @TIPC_NLA_MEDIA={0x28, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xe}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xff}]}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x184}, 0x40010) 2m54.530696221s ago: executing program 2 (id=3112): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000680)=ANY=[@ANYBLOB="fe481cfbf452352a137ac7357b6cb7009314be576e8966ec7be1a232ca7208041cb153d4867ecd788e77e225af01a0e862ca27df6a9d59c12d5274f4181326902a053406da673a653ee4466c9fab9c111214228447666fb613f72aca3a4b5c892a43e8185ba5794e5f14268883d99f8663ee5c1f62ce5eb32fee7cd6d43340e81320930eccd2973f060dc5be3c396895b4cc566a65d5445c9eb29fe7a51c6c6562b3b77b84d26ab5ffcd8107182cb1b6b2e3c22eda488bc9abb91ad54d8d560009c9b7f03a5e8eabb173126169afe8ed558dd3752238ac687254e8d9e7947a1c5a638e9c2958479cb9880d48758d5dae1a00eabbe36f36fa1e61cc9d7fcc49fb510614f7f1c2b8c69bed74bb379b2b5c633c52fc4a58911763dec1306a2b500996bb62defd70cc29fc58d16acd4ccb", @ANYRES16=0xffffffffffffffff, @ANYBLOB="170900000000ffdbdf250100000008001800ac1414aa060002000100000008000a0001000000050007000000000008000900fffffffe08001900e0000002"], 0x44}}, 0x4) sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f00000066c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000880)={&(0x7f00000007c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000825bd7000fedbdf2502000000060001000400000008000b000000000008000b0004000000"], 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x12f7271aefbcd688) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000005c0)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000400)={'ip6tnl0\x00', &(0x7f0000000380)={'syztnl0\x00', r2, 0x4, 0x6, 0x2, 0x4, 0x0, @private2, @rand_addr=' \x01\x00', 0x700, 0x8, 0x8000, 0x8}}) ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0xc0385869, &(0x7f0000000540)={r1, &(0x7f0000000440)='flow\x00', 0x8a142, &(0x7f0000000480)={@align=0x80000000, {0x101, 0x281, 0x7ff, 0xfffffffffffffffa}}, 0x6, &(0x7f00000004c0)={@_ha_fsid}, &(0x7f0000000500)=0xfff}) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000006340)={0xffffffffffffffff, 0x20, &(0x7f0000006300)={&(0x7f0000000640)=""/130, 0x82, 0x0, &(0x7f0000005300)=""/4096, 0x1000}}, 0x10) ioctl$XFS_IOC_FD_TO_HANDLE(r0, 0xc038586a, &(0x7f0000006480)={r1, &(0x7f0000006380)='cgroup\x00', 0x101001, &(0x7f00000063c0)={@align=0x80000000, {0x1, 0x0, 0xe, 0x7}}, 0x10000, &(0x7f0000006400), &(0x7f0000006440)=0xfffff000}) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="1e0000000200000000000000090000000200000080000000406601d63677dc791aa3fbfbd9c50d738f", @ANYRES32, @ANYBLOB="0600"/20, @ANYRES32=r4, @ANYRES32, @ANYBLOB="0500000004000000030000000500"/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x4, 0x21, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000004000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000008200000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7eccfe24cd6040000000000008500000082000000bf91000000000000b7020000000000008500000085000000b700000000000000950000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000064c0)={0xffffffffffffffff, 0xb, 0x18}, 0xc) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) pwritev(r8, &(0x7f00000004c0)=[{&(0x7f0000000200)="db", 0x1}], 0x1, 0x8040000, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000ecaa0919e01256c4711b210013ed6322942c4c477083ce94af886cf864cd2581c198011611065fcdc0e4f6b9fb360a4a4eff8f5d98f786f46bbd977c33d0130bdf08b32d886d66be97e5ed72b74325b2d83dcaee9dfc83b6719f9eaa1a7e5dabefe0ebeeec01195bddd24efa717a65374ac1005ac1f9a9b134c8622f7fc4c37d89896ac9dfa8662711b210f6d1427df2caa7c726bf03b6880953d5efe3264e6c078d2937852dd782045fc1eabc56318fe6e5921f670a5c263c546454806ed0c5f27946727fe28f2b3c0c775d474fb0ba2506453a50ae591de1fb6f7973fae116d032d8a934ba283bcc39a17b57041e161db6f780a43f7cb8c7969a67c9fcf4f65b0b2c7135516ca6f753", @ANYRES32=0x1, @ANYBLOB="8bc900"/20, @ANYRES32=r2, @ANYRES32, @ANYBLOB="02000000010000000200"/28], 0x50) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000004000000040000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000e9ff000000000800000000"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB="1b00000000000000000000000080000000040100", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000002000a754544f00eaaf1bf5bcff59d57654e25794a0c54b0ef25d8134a050e96fd969fa5c6fa4f950151e5b183b6ced697800"/76, @ANYRES32=r8, @ANYBLOB], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x10, &(0x7f0000001000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESDEC=r3, @ANYBLOB="0000000000000000b702000003000000850000008600000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095", @ANYBLOB="6839a56086ac0b16b23e5517bd0a41d6c840fcaa7e54a47bd41846337118c69f5576669231e29c7b7c5475df46d4929d7d4f5e920293732ee883ce25591d19b3410eb5fd17c778fc1f9f2b8adc06f48a3d09787faa040eb3f81a7a10e994ffb22be752a737c680139dcfd6d0f3151d5f6a7d0640bfbaf69621c653a5ed037f92bc437cd544a17b985c3c062c8b60abd484eb172600b8937e9db5c2bb3f89966b43ccec47f8e5c3a7508bf589dcaadd378ce4a306af9f6a7a368a14c4b3087e562a0057b4168ea74e1dab79ffe7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x4, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000630000101b00000000000000"], &(0x7f0000000d40)='syzkaller\x00'}, 0x94) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r10, &(0x7f0000000180), 0x2ae, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x0, 0xc, &(0x7f0000000a00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="82b760f11ef235366345143d5e79d9e3f47748192c22d0da529c2720db764e8f017f13981ffe6e2e63aa5b5b091f0e5412f048f9c785cbf5a0e80603bee0dea7efaca4f2c1df7b461d93b22ffd3324cd44434dca46d4a9fafbb76484de4b02bd141f655e49ef3e755fe71f27b9d0cda43dbf17c11c10843bfc55c3634a8c", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000082c0)={{}, &(0x7f0000008240), &(0x7f0000008280)='%ps \x00'}, 0x20) socket$key(0xf, 0x3, 0x2) r11 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r11, 0x0, 0xf, &(0x7f0000d10ffc)=0xfffffffa, 0x4) 2m54.235695752s ago: executing program 2 (id=3115): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000270001002bbd7000ffdbdf2506000000650de39aaa7a959f63fbb5c2e0f48ae74b9b9fed88b4c9eac648163774658c21f2b41a751bee6e1470309359c2b7939e74d37d570543ece10df7207b55e058e2baf6b2ca9ff89e999f2b4b53f26dbf5412582c4753c92871c37807692376c77c4439b797cd061cc5b63abc4f"], 0x14}}, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) (async, rerun: 64) r3 = socket$unix(0x1, 0x5, 0x0) (rerun: 64) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) (async, rerun: 32) r5 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) (async) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket$kcm(0x11, 0x3, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r8) ioctl$EXT4_IOC_GROUP_EXTEND(r7, 0x40086607, &(0x7f0000000280)=0xd) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) (async) socket(0x400000000010, 0x3, 0x0) (async, rerun: 32) r10 = socket$unix(0x1, 0x1, 0x0) (rerun: 32) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)=@newtfilter={0x39c, 0x2c, 0xd3f, 0x30bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r11, {0xb, 0xfff2}, {0x0, 0x10}, {0x8, 0x300}}, [@filter_kind_options=@f_u32={{0x8}, {0x370, 0x2, [@TCA_U32_CLASSID={0x8, 0x1, {0x0, 0x6}}, @TCA_U32_CLASSID={0x8, 0x1, {0xfff1, 0x8}}, @TCA_U32_MARK={0x10, 0xa, {0x9, 0x7}}, @TCA_U32_SEL={0x334, 0x5, {0x2, 0x2, 0x7, 0x4, 0x2, 0x8, 0x0, 0x3, [{0x377f73e9, 0xdc, 0x1, 0x3}, {0x0, 0x3, 0x94, 0x5}, {0x6, 0x2, 0x7ff, 0x7}, {0x7217, 0x20000, 0xc, 0x8fd3}, {0x968c, 0x4, 0x6, 0x2}, {0x7, 0x3, 0x8001}, {0x597, 0x3, 0x6, 0xffffff80}, {0x1, 0x80, 0x80, 0x340c}, {0x3, 0x10, 0x9, 0xbd93}, {0x8, 0x5, 0x88e0, 0x5}, {0x57, 0x6, 0x8001, 0x7}, {0x0, 0x1, 0x3, 0xfffffffd}, {0x1, 0x7f1, 0x8, 0x10001}, {0x7, 0x1244, 0xf0f, 0xc267}, {0x0, 0x3ff, 0x3, 0x9}, {0x6, 0x8, 0x7b3, 0x763c}, {0x0, 0x101, 0x3ff, 0x8056}, {0x3ff, 0x80000000, 0x5, 0xe9d}, {0x10, 0x10, 0x3, 0x8}, {0x401, 0xb7f, 0x80000000, 0x81}, {0x10001, 0x2, 0x10000, 0x5d7}, {0x2bd2c092, 0x5b8d, 0x8, 0xfff}, {0x5, 0x8, 0x6, 0xd63}, {0x8, 0x7fff, 0x80000000, 0x7}, {0x2, 0x0, 0x9, 0x5}, {0xffffff01, 0x8, 0xc0, 0x80000000}, {0x6, 0x0, 0x80000000, 0x1}, {0x4, 0x1ff, 0x90b, 0x2}, {0x10001, 0x2, 0xc, 0x9}, {0x7, 0xc, 0x7f, 0x3}, {0x1, 0xe, 0x10001, 0x509}, {0x8001, 0x5, 0x7fffffff, 0x7}, {0x5, 0x3, 0x5, 0x1}, {0x1, 0x7, 0x5, 0x9}, {0x0, 0x9, 0x2e, 0x7ef}, {0x8, 0x8, 0x1, 0x9}, {0x101, 0x9, 0x7ff, 0xe}, {0xfff, 0x4, 0xfffffff8, 0xfffffffc}, {0xfffffff9, 0x3, 0x6, 0x5}, {0xd2aa, 0x1, 0x100, 0x945}, {0x1, 0x5, 0x4c71, 0x8}, {0xfffffd0d, 0x9, 0x5, 0x2}, {0x5, 0x6, 0x2a3, 0x3}, {0x8, 0x7, 0x40, 0xfffffff7}, {0xef, 0x58063c81, 0x0, 0xffffff80}, {0x3ff, 0x5, 0x6, 0x81}, {0x2, 0xd, 0x8, 0x8}, {0x10000, 0x3, 0x401, 0x10000}, {0x38, 0x80000001, 0x3, 0x1}, {0x5, 0x2, 0x1, 0x4}]}}, @TCA_U32_LINK={0x8, 0x3, 0x95e}, @TCA_U32_MARK={0x10, 0xa, {0x2, 0x7fff}}]}}]}, 0x39c}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) (async, rerun: 64) setsockopt$sock_attach_bpf(r7, 0x107, 0xf, &(0x7f0000000600), 0x56) (async, rerun: 64) sendmsg$kcm(r7, &(0x7f0000000000)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r9, 0x11}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000180)="27032400000514000e00002fb96dffff1144ee163cddcb000000800000827600000000000000", 0x26}, {&(0x7f0000000780)="f058050000007f8f", 0x8}], 0x2}, 0x5) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r4, {0xc, 0xc}, {0x0, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) 2m39.15336177s ago: executing program 32 (id=3115): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000270001002bbd7000ffdbdf2506000000650de39aaa7a959f63fbb5c2e0f48ae74b9b9fed88b4c9eac648163774658c21f2b41a751bee6e1470309359c2b7939e74d37d570543ece10df7207b55e058e2baf6b2ca9ff89e999f2b4b53f26dbf5412582c4753c92871c37807692376c77c4439b797cd061cc5b63abc4f"], 0x14}}, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) (async, rerun: 64) r3 = socket$unix(0x1, 0x5, 0x0) (rerun: 64) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) (async, rerun: 32) r5 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) (async) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket$kcm(0x11, 0x3, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r8) ioctl$EXT4_IOC_GROUP_EXTEND(r7, 0x40086607, &(0x7f0000000280)=0xd) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) (async) socket(0x400000000010, 0x3, 0x0) (async, rerun: 32) r10 = socket$unix(0x1, 0x1, 0x0) (rerun: 32) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)=@newtfilter={0x39c, 0x2c, 0xd3f, 0x30bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r11, {0xb, 0xfff2}, {0x0, 0x10}, {0x8, 0x300}}, [@filter_kind_options=@f_u32={{0x8}, {0x370, 0x2, [@TCA_U32_CLASSID={0x8, 0x1, {0x0, 0x6}}, @TCA_U32_CLASSID={0x8, 0x1, {0xfff1, 0x8}}, @TCA_U32_MARK={0x10, 0xa, {0x9, 0x7}}, @TCA_U32_SEL={0x334, 0x5, {0x2, 0x2, 0x7, 0x4, 0x2, 0x8, 0x0, 0x3, [{0x377f73e9, 0xdc, 0x1, 0x3}, {0x0, 0x3, 0x94, 0x5}, {0x6, 0x2, 0x7ff, 0x7}, {0x7217, 0x20000, 0xc, 0x8fd3}, {0x968c, 0x4, 0x6, 0x2}, {0x7, 0x3, 0x8001}, {0x597, 0x3, 0x6, 0xffffff80}, {0x1, 0x80, 0x80, 0x340c}, {0x3, 0x10, 0x9, 0xbd93}, {0x8, 0x5, 0x88e0, 0x5}, {0x57, 0x6, 0x8001, 0x7}, {0x0, 0x1, 0x3, 0xfffffffd}, {0x1, 0x7f1, 0x8, 0x10001}, {0x7, 0x1244, 0xf0f, 0xc267}, {0x0, 0x3ff, 0x3, 0x9}, {0x6, 0x8, 0x7b3, 0x763c}, {0x0, 0x101, 0x3ff, 0x8056}, {0x3ff, 0x80000000, 0x5, 0xe9d}, {0x10, 0x10, 0x3, 0x8}, {0x401, 0xb7f, 0x80000000, 0x81}, {0x10001, 0x2, 0x10000, 0x5d7}, {0x2bd2c092, 0x5b8d, 0x8, 0xfff}, {0x5, 0x8, 0x6, 0xd63}, {0x8, 0x7fff, 0x80000000, 0x7}, {0x2, 0x0, 0x9, 0x5}, {0xffffff01, 0x8, 0xc0, 0x80000000}, {0x6, 0x0, 0x80000000, 0x1}, {0x4, 0x1ff, 0x90b, 0x2}, {0x10001, 0x2, 0xc, 0x9}, {0x7, 0xc, 0x7f, 0x3}, {0x1, 0xe, 0x10001, 0x509}, {0x8001, 0x5, 0x7fffffff, 0x7}, {0x5, 0x3, 0x5, 0x1}, {0x1, 0x7, 0x5, 0x9}, {0x0, 0x9, 0x2e, 0x7ef}, {0x8, 0x8, 0x1, 0x9}, {0x101, 0x9, 0x7ff, 0xe}, {0xfff, 0x4, 0xfffffff8, 0xfffffffc}, {0xfffffff9, 0x3, 0x6, 0x5}, {0xd2aa, 0x1, 0x100, 0x945}, {0x1, 0x5, 0x4c71, 0x8}, {0xfffffd0d, 0x9, 0x5, 0x2}, {0x5, 0x6, 0x2a3, 0x3}, {0x8, 0x7, 0x40, 0xfffffff7}, {0xef, 0x58063c81, 0x0, 0xffffff80}, {0x3ff, 0x5, 0x6, 0x81}, {0x2, 0xd, 0x8, 0x8}, {0x10000, 0x3, 0x401, 0x10000}, {0x38, 0x80000001, 0x3, 0x1}, {0x5, 0x2, 0x1, 0x4}]}}, @TCA_U32_LINK={0x8, 0x3, 0x95e}, @TCA_U32_MARK={0x10, 0xa, {0x2, 0x7fff}}]}}]}, 0x39c}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) (async, rerun: 64) setsockopt$sock_attach_bpf(r7, 0x107, 0xf, &(0x7f0000000600), 0x56) (async, rerun: 64) sendmsg$kcm(r7, &(0x7f0000000000)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r9, 0x11}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000180)="27032400000514000e00002fb96dffff1144ee163cddcb000000800000827600000000000000", 0x26}, {&(0x7f0000000780)="f058050000007f8f", 0x8}], 0x2}, 0x5) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r4, {0xc, 0xc}, {0x0, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) 2m25.44245007s ago: executing program 3 (id=3268): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x1, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7fff}, [@alu={0x4, 0x0, 0x3, 0x0, 0x0, 0x1, 0x4}]}, &(0x7f00000002c0)='GPL\x00', 0xf}, 0x94) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r0) 2m25.20058606s ago: executing program 3 (id=3270): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="180200000a00a8b9b380b68ef11912000003000000440a808260bcb91cf6f69a87"], &(0x7f0000000180)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41000, 0x41, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) 2m24.907238923s ago: executing program 3 (id=3271): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt(r2, 0x17609, 0x20000, &(0x7f0000000140)=""/93, &(0x7f0000000280)=0x5d) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r4, 0xffffffffffffffff}, 0x4) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1f, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70500000000000085000000a800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r6}, 0xc) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r8 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@getchain={0x24, 0x11, 0x839, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r9, {0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x4044084}, 0x0) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r11}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20) close(r0) recvmsg(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f00000005c0)=""/85, 0x55}], 0x1}, 0x40002142) 2m24.491332492s ago: executing program 3 (id=3275): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = accept4$tipc(0xffffffffffffffff, &(0x7f0000000000)=@name, &(0x7f0000000040)=0x10, 0x80000) setsockopt$TIPC_GROUP_LEAVE(r1, 0x10f, 0x88) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)="d8000000200081044e81f782db44b904f202000000e8fe55a1180015000600142603600e1209000a0000000401a80016000a00114006000000036010fab94dcf5c0468c1d67f6f94007134cf6ee0809956e408e8d8ef52b49816277ce06bbace8017cbec4c00001fb791643a5ee4ce1b14d6d930bca8de67e21bdfe1d9db22fe7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006d8df791f8b3d5ce3bb9ad809d561cace81ed0bffece0002a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970100040000", 0xd8}], 0x1}, 0x0) 2m24.240793289s ago: executing program 3 (id=3277): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x1c, r1, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008040}, 0x4000) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYRESOCT=0x0, @ANYRES32=0x0, @ANYRES16=r2, @ANYRES32=r2], 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x4004000) 2m23.83102189s ago: executing program 3 (id=3278): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000045"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0xd, &(0x7f0000000680)=ANY=[@ANYBLOB="180100001700020000000000ef000000850000006d00000018110000a4da69275b51ea953d6b4d2e7bf7368d63664ce656e500fca27a8af99af5bfc16bcf0d82e093ccfdfd4b5a2813d402c26c732601875c1389284563bfbb65a0ded0de3d0eef18b532d74de8fe22dc2b87d331b7ca1d34", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000300000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x36, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000340)={r1}, 0xc) bind$alg(0xffffffffffffffff, &(0x7f0000000500)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="14000000270001032dbd7000fcdbdf250b"], 0x14}, 0x1, 0x0, 0x0, 0x404c0d4}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) socketpair(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r4, &(0x7f0000001dc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=""/188, 0xbc, 0xdf0e}}], 0x1800, 0x2002, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$tipc(0x1e, 0x5, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_tracing={0x1a, 0xa, &(0x7f0000000180)=@raw=[@alu={0x4, 0x0, 0x0, 0x0, 0x9, 0x40}, @ringbuf_query, @ringbuf_query, @ldst={0x0, 0x0, 0x2, 0x3, 0x0, 0x18, 0x10}], 0x0, 0x2, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xf475, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x40000000}, 0x94) socket$kcm(0x11, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000001780)={&(0x7f00000005c0)=@generic={0x5, "87b726a6b1f4cbd978750ec48665d255ba18b5f7ca7b9e5c04712a09c400000000000075264ff27631be9338807c0200000049a4d5c7a7521d3534655a7f9ad54a48c60d47cd91b98d0a63b391564156070c831cbd9ebbeb1e96ef711b2d0ff294fdd818d418b4e386f8f4246c5f5f1e48b4af92bfa29ac7c3ece606df00"}, 0xfffffeee, 0x0}, 0x20000894) r7 = socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$tipc(r6, 0x0, 0x40810) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000580)={'syz_tun\x00', 0x0}) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180200000004000000000000000000008500000036000000850000000700000095"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000001c0)={r9, r8, 0x25, 0x0, @val=@iter={0x0}}, 0x20) syz_emit_ethernet(0xfdef, &(0x7f00000004c0)=ANY=[], 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2b1f5}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x3}, @IFLA_IPVLAN_MODE={0x6, 0x1, 0x2}]}}}]}, 0x44}}, 0x800) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000180)=@assoc_value, &(0x7f0000000200)=0x8) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000740)={r5, 0x8, 0x9, 0x3}) bind$can_j1939(r10, &(0x7f0000000980)={0x1d, r8, 0x0, {0x2, 0xf, 0x4}}, 0x18) r11 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r12, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000007c0)=@newtclass={0x38, 0x28, 0x100, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, r8, {0x4}, {0x7, 0x2}, {0x10, 0x10}}, [@tclass_kind_options=@c_drr={{0x8}, {0xc, 0x2, @TCA_DRR_QUANTUM={0x8}}}]}, 0x38}}, 0x0) sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYRESDEC=0x0, @ANYRES16=r11, @ANYBLOB="0100000000000000000017000000540006803c00040067636d286165732900000000000000000000000000000000000000000000000014000000e3de3d7b4cd07ec3ee777de774fc7987cca41989140003"], 0x68}, 0x1, 0x0, 0x0, 0x4084}, 0x4008014) 2m8.504187879s ago: executing program 33 (id=3278): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000045"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0xd, &(0x7f0000000680)=ANY=[@ANYBLOB="180100001700020000000000ef000000850000006d00000018110000a4da69275b51ea953d6b4d2e7bf7368d63664ce656e500fca27a8af99af5bfc16bcf0d82e093ccfdfd4b5a2813d402c26c732601875c1389284563bfbb65a0ded0de3d0eef18b532d74de8fe22dc2b87d331b7ca1d34", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000300000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x36, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000340)={r1}, 0xc) bind$alg(0xffffffffffffffff, &(0x7f0000000500)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="14000000270001032dbd7000fcdbdf250b"], 0x14}, 0x1, 0x0, 0x0, 0x404c0d4}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) socketpair(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r4, &(0x7f0000001dc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=""/188, 0xbc, 0xdf0e}}], 0x1800, 0x2002, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$tipc(0x1e, 0x5, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_tracing={0x1a, 0xa, &(0x7f0000000180)=@raw=[@alu={0x4, 0x0, 0x0, 0x0, 0x9, 0x40}, @ringbuf_query, @ringbuf_query, @ldst={0x0, 0x0, 0x2, 0x3, 0x0, 0x18, 0x10}], 0x0, 0x2, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xf475, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x40000000}, 0x94) socket$kcm(0x11, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000001780)={&(0x7f00000005c0)=@generic={0x5, "87b726a6b1f4cbd978750ec48665d255ba18b5f7ca7b9e5c04712a09c400000000000075264ff27631be9338807c0200000049a4d5c7a7521d3534655a7f9ad54a48c60d47cd91b98d0a63b391564156070c831cbd9ebbeb1e96ef711b2d0ff294fdd818d418b4e386f8f4246c5f5f1e48b4af92bfa29ac7c3ece606df00"}, 0xfffffeee, 0x0}, 0x20000894) r7 = socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$tipc(r6, 0x0, 0x40810) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000580)={'syz_tun\x00', 0x0}) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180200000004000000000000000000008500000036000000850000000700000095"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000001c0)={r9, r8, 0x25, 0x0, @val=@iter={0x0}}, 0x20) syz_emit_ethernet(0xfdef, &(0x7f00000004c0)=ANY=[], 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2b1f5}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x3}, @IFLA_IPVLAN_MODE={0x6, 0x1, 0x2}]}}}]}, 0x44}}, 0x800) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000180)=@assoc_value, &(0x7f0000000200)=0x8) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000740)={r5, 0x8, 0x9, 0x3}) bind$can_j1939(r10, &(0x7f0000000980)={0x1d, r8, 0x0, {0x2, 0xf, 0x4}}, 0x18) r11 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r12, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000007c0)=@newtclass={0x38, 0x28, 0x100, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, r8, {0x4}, {0x7, 0x2}, {0x10, 0x10}}, [@tclass_kind_options=@c_drr={{0x8}, {0xc, 0x2, @TCA_DRR_QUANTUM={0x8}}}]}, 0x38}}, 0x0) sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYRESDEC=0x0, @ANYRES16=r11, @ANYBLOB="0100000000000000000017000000540006803c00040067636d286165732900000000000000000000000000000000000000000000000014000000e3de3d7b4cd07ec3ee777de774fc7987cca41989140003"], 0x68}, 0x1, 0x0, 0x0, 0x4084}, 0x4008014) 4.47910334s ago: executing program 4 (id=4287): r0 = socket$kcm(0xa, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x12, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, @exit, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa, 0x0, 0xfffd}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0xc}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYBLOB="340000003e0007010300000000000000027c00000400428011000100686d"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r2 = socket(0x2, 0x80805, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000140)={0x84, @rand_addr=0x64010105, 0x4e22, 0x3, 'lblc\x00', 0x1, 0x80005, 0x6f}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x2, 0xcd}}, 0x44) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)={0x1c, 0x16, 0x1, 0x0, 0x0, {0xa}, [@nested={0x8, 0xca, 0x0, 0x1, [@nested={0x4, 0x1}]}]}, 0x1c}}, 0x0) sendmsg$sock(r0, &(0x7f00000000c0)={&(0x7f0000000580)=@in6={0x2, 0x4e21, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r3, 0x0, 0x485, 0x0, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x109001, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'\x00', 0x5}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) writev(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000100009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000540)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x2c, 0x0, 0x100, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x4}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$inet(r0, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="dd5fa22f9f894441b9b79e52567770346bc3a4f146964db67c06f1995e70ef88b3bf8cdee6d1ea1efc888f5ed7bcd19f77b641f8dc0d1300e39ceef041585747dfc329fe643b2ee209e3aa7034902245e143f67b79f7dd7dc38c5c13d5b31f4ad1b05e35d4088678332361cd2108f4f0d04d51d24db261177ff03c8961acdbf20026eb2befdea0f6aed75fca35ec220262e0e2e7d4fe5d686359ce3689225aa90fca62fa9a6f7a261372fa7d7e76cf45213d2a1631428d777d611a932689eda000"/204, @ANYRES16=r8, @ANYRES32=r8, @ANYRES64=r5, @ANYRESHEX], 0x128}, 0x0) recvmsg$unix(r7, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r10, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r9, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r12, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r11, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) ioctl$TUNGETDEVNETNS(r4, 0x54e3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 3.410988283s ago: executing program 4 (id=4300): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0xf, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0f00000004000000080000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000001000"/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0xc, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r7, 0x11, 0x64, &(0x7f0000000040)=0x4, 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x24, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9, 0x1}, {0x4, 0xfff1}, {0xe, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x90}, 0x4048c00) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) listen(r8, 0x5) sendmmsg(r8, &(0x7f0000000540)=[{{&(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0xfffffff9, @dev={0xfe, 0x80, '\x00', 0x11}, 0xa, 0x1}, 0x80, &(0x7f0000000d80)=[{&(0x7f0000000dc0)="e678901d6c3a231aae991f13cf4b8d682f2700868a5b50dbb6fb5f74d8e01c402eda7e57d0b91516b165ecbe1f377c7316720500000000000000e1e3c9375b83fc6840a2f8061438ba0e3679e8ec820c15c5d5e61da7d958392a7f378c476ad0f3900d220c56079fdeab84bf3d138fef773f3646e44f46be49e0e4", 0x7b}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="100000000000000084"], 0x10}}], 0x2, 0xc8844) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001180)=@newtaction={0xcc, 0x30, 0xffff, 0x0, 0x0, {}, [{0xb8, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x4}, {0x0, 0x1}}}]]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0x48, 0x2, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x1, 0x27, 0x10000000, 0x2, 0xed}}]}, {0x4}, {0xc, 0x3, {0x1}}, {0xc}}}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x4}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000e40)={r5, 0x2000000, 0xc7, 0x0, &(0x7f0000000f40)="c9f7b9860000008fd6da5d772eca78000000000000007930dff246ecdedf05de5c5c9eef366e19c11e4c8ee2ac3c224f82458950c214251564e9175544c38e8264923c5587b2eb1ba4d11b6a8d2cc64fac102a648d496618fbc35e70304dcbc37c3c883db4edbdedfc4489c037a05ace97565e212fee25a7cc64ed29c54bc2a8cceb845ef089adac0924fb13a43257d578c6048d375687b417eba56a68144e1bf587198779aa99c7b140afbad0c9004357daa400009e64f98615af31f7fe2687e32bebb7a30f47", 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffff}, 0x50) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000bc0)=@newqdisc={0x28, 0x24, 0x8, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@TCA_STAB={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x73, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x4, 0xc}, {0x7, 0xb}, {0xffff, 0x6}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x6569}}]}, 0x38}}, 0x20000010) r10 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) getsockopt$bt_BT_CHANNEL_POLICY(r10, 0x112, 0x4, 0x0, &(0x7f0000000000)=0x41) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r11 = socket$kcm(0x11, 0x3, 0x0) r12 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) setsockopt$sock_attach_bpf(r11, 0x107, 0xf, &(0x7f0000000600), 0x56) 3.113863463s ago: executing program 5 (id=4304): socketpair(0x1, 0x1, 0x8, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8b06, &(0x7f0000000140)={'wlan1\x00', @random="018d000000eb"}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) ioctl$SIOCGSTAMPNS(r1, 0x8907, &(0x7f00000000c0)) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a310000000028000480080002400000000008000140000000051400030076657468315f6d6163767461700000000900010073797a310000000094000000050a01020000000000000000010020000c00024000000000000000010900010073797a31000000005c0004801400030076657468315f6d6163767461700000000800014000000005"], 0x130}}, 0x0) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x34, 0x2, 0x6, 0x301, 0x0, 0x0, {0xa, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0x40c0) 2.967322217s ago: executing program 4 (id=4305): r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r0, 0x800448d2, &(0x7f0000000b80)={0x1, &(0x7f0000000800)=[{@fixed}]}) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.stat\x00', 0x275a, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000140)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7, 0x0, 0x3, 0xb, 0x6, 0x6}, 0x20) write$cgroup_subtree(r3, &(0x7f0000000540)=ANY=[@ANYRESOCT=r2], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) socket$rxrpc(0x21, 0x2, 0xa) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x20000c40) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close(r9) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r10 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=@newtfilter={0x88, 0x2c, 0xd3f, 0x10bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0xc, 0xfff3}, {}, {0x8, 0x10}}, [@filter_kind_options=@f_basic={{0xa}, {0x58, 0x2, [@TCA_BASIC_ACT={0x54, 0x3, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x2, 0x0, 0x20000000, 0x6}, 0x5}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}}]}, 0x88}, 0x1, 0x0, 0x0, 0x2000e890}, 0x8080) r11 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r11, &(0x7f00000000c0)={&(0x7f0000000140)=@xdp={0x2c, 0x8, r8, 0x3c, 0x20}, 0x80, &(0x7f0000000680)=[{&(0x7f0000000300)='\'', 0x1}], 0x1}, 0x4011) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r12) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f0000000380)) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000180)) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x40007d, @dev={0xfe, 0x80, '\x00', 0x1f}, 0xc7}, 0x1c) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) 2.753127527s ago: executing program 5 (id=4307): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'veth0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x200000c0}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newtfilter={0x64, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0xb, 0x10}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x34, 0x2, [@TCA_BASIC_EMATCHES={0x30, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x24, 0x2, 0x0, 0x1, [@TCF_EM_META={0x20, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x4}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0xe, 0x1}, {0x5, 0x40}}}, @TCA_EM_META_RVALUE={0x8, 0x3, [@TCF_META_TYPE_INT=0x5]}]}}]}]}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x20041810}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x40002002) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000007c0)={'xfrm0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x50}, {0xffff, 0xffff}, {0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x0, 0x0, 0x1, 0xffffffff, 0xfffffffe, 0x1}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x5, 0xfffffffffffff813, 0xfffffffc, 0x7, 0x4, 0x55}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x11}, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={0xffffffffffffffff, 0x58, &(0x7f00000001c0)}, 0x10) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000d40)=@newtfilter={0x43c, 0x2c, 0xd3f, 0x30bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0xb, 0xfff3}, {}, {0x8, 0xa}}, [@filter_kind_options=@f_basic={{0xa}, {0x40c, 0x2, [@TCA_BASIC_POLICE={0x408, 0x4, [@TCA_POLICE_RATE={0x404, 0x2, [0x2, 0x3, 0x7f, 0x1000, 0x80, 0xfffffff7, 0x3, 0x401, 0x1, 0x931, 0x6, 0xe, 0x5, 0x7fff, 0x4, 0x3, 0x10, 0x3, 0xf, 0x40000008, 0x4, 0x3, 0xc, 0x5, 0x9, 0x8001, 0x8, 0x658, 0xf3, 0x4, 0x3, 0x4, 0x8, 0x2, 0xc000000, 0x3, 0x9, 0x8, 0x200, 0x7, 0x249d, 0x9db, 0xfffffe01, 0x9, 0xfffffd49, 0x5, 0x90000, 0xffff8001, 0x800, 0xffffff5e, 0x7fffffff, 0xb5d, 0x5, 0x7ff, 0x9, 0x6, 0x3, 0x7, 0x9, 0x9, 0xfffffff9, 0xff, 0xceb, 0x7, 0xa6, 0x8, 0x5, 0xffffffff, 0x7, 0x80000, 0xfffffff8, 0x9, 0x0, 0x9, 0x1, 0x200, 0xfe1, 0xd1, 0x3, 0x2, 0x10, 0x0, 0x1, 0xfffffffd, 0x2, 0x7, 0x951, 0x19c, 0x38de, 0x6, 0x10001, 0x8, 0x8, 0x3, 0x8, 0x3, 0x9, 0xa60, 0x0, 0x100, 0x2, 0x0, 0x2c, 0x80000000, 0x3ff, 0x2, 0x5, 0x10000, 0x6, 0x4, 0xffffffff, 0x1, 0x1, 0xf915, 0x6, 0x2, 0x80, 0x3ff, 0x9, 0x3, 0x10000, 0x7f, 0x7, 0x81, 0x2, 0x4, 0x4, 0x8000, 0x2, 0xfff, 0x0, 0xf, 0x4, 0x90c, 0x1, 0x4, 0x6, 0x6, 0xc7, 0x5, 0x9, 0x3650, 0x2, 0x6, 0xa27d, 0x686e8f84, 0x3ff, 0x7fffffff, 0x6, 0x7, 0x3, 0x4, 0x37735ae5, 0x7fff, 0x6, 0x7, 0x9, 0xd6, 0x5, 0x401, 0x9, 0x7, 0x1, 0x4, 0x4, 0x5, 0x8000, 0x2, 0x1, 0x6, 0x0, 0x80000001, 0x80, 0x2, 0xe, 0xfffffffe, 0x7, 0x9, 0x4, 0xf59, 0x8, 0x100, 0x6, 0x0, 0x3, 0x0, 0x1, 0x6, 0x8, 0xfff, 0x1, 0x6, 0xd0ed, 0x6, 0x1, 0xf24c, 0x1000, 0x9, 0x0, 0x1, 0x7, 0x6, 0x7f, 0x2, 0x8001, 0x3, 0x800, 0xde, 0x2, 0x3ff, 0x9, 0x3, 0x5, 0x3, 0x1d68, 0x8, 0x16, 0x5, 0x400, 0xc0f, 0x5, 0x400, 0x9, 0x7, 0x1, 0x9, 0xf, 0x8, 0x1, 0x421, 0xa, 0x7b, 0x73, 0x4, 0x7, 0x1, 0xf6e7, 0x5, 0x6, 0x5, 0x1bf3, 0xb, 0xac9, 0x401, 0x6, 0x6c, 0x1, 0x3, 0xab2, 0x1, 0xffff, 0x4, 0x296, 0x5, 0x3ff, 0x6]}]}]}}]}, 0x43c}, 0x1, 0x0, 0x0, 0x20040010}, 0x1c090) r8 = socket$inet6_udp(0xa, 0x2, 0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r9, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00', 0x0}) setsockopt$inet6_mreq(r9, 0x29, 0x1b, &(0x7f00000000c0)={@remote, r10}, 0x14) setsockopt$inet6_mreq(r9, 0x29, 0x1b, &(0x7f0000000000)={@dev={0xfe, 0x80, '\x00', 0xd}, r10}, 0x14) sendmmsg$inet6(r8, &(0x7f0000000500)=[{{&(0x7f0000000040)={0xa, 0x4e20, 0x1, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="24000000000000002900000032000000fe8000001de9cb53ed00000000000000", @ANYRES32=r10], 0x28}}], 0x1, 0x0) getpeername$packet(r3, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000002c0)=0x14) r11 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f00000003c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=ANY=[@ANYBLOB="1c0000001d00070f000000000000080007000000", @ANYRES32=r12, @ANYBLOB="800072"], 0x1c}, 0x1, 0x0, 0x0, 0x20000890}, 0x20000000) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000640)={0xffffffffffffffff, 0xe0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x5, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x95, &(0x7f0000000400)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f0000000480), &(0x7f00000004c0), 0x8, 0x73, 0x8, 0x8, &(0x7f0000000500)}}, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000d00)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000ac0)={0x14, 0x0, 0x200, 0x70bd26, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4010}, 0x10000001) getpeername$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000180)=0x14) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f00000001c0)={@loopback, @local, 0x0}, &(0x7f0000000200)=0xc) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f0000000240)={0x154, 0x0, 0x800, 0x70bd2d, 0x25dfdbff, {}, [@HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}]}]}, 0x154}, 0x1, 0x0, 0x0, 0x4}, 0x24000002) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x5c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x7, 0x0, 0x1}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11, 0x1, 0x0, 0x8b}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x5}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) 2.631432614s ago: executing program 6 (id=4308): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newlink={0x40, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3000a}, [@IFLA_VFINFO_LIST={0x18, 0x16, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@IFLA_VF_RATE={0x10, 0x6, {0x7ffffffe, 0x2f0, 0x2}}]}]}, @IFLA_GROUP={0x8}]}, 0x40}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1e, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000ff0300000000000000000000850000001100000085000000a000000095"], &(0x7f00000000c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.551029454s ago: executing program 4 (id=4309): r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0xb00000000065808, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001b40)={0x11, 0x13, &(0x7f0000001a80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x12) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000d40), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DAEMON(r2, 0x0, 0x18) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000001240)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_KEY(r4, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000040)={0x24, r3, 0x401, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x400d000}, 0x814) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x3b, 0x0, 0x0) syz_80211_inject_frame(&(0x7f00000001c0), 0x0, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000580)={&(0x7f0000000380)={0x20, r6, 0x10, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x4048041}, 0x40000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="5c0000000206030000000000000000000a0000000d000300686173683a6e657400000000050001000700000005000500020000000900020073797a3000000000050004000000000014000780080008400000007808000640"], 0x5c}, 0x1, 0x0, 0x0, 0x2002c0c4}, 0x0) 2.443472048s ago: executing program 1 (id=4310): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x71, 0x3b, 0x301, 0x2270bd24, 0x25dfdbff, {0x90}}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x24004000) r1 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x3}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x4, 0x7fffffffffffffff, 0x0, 0x1000, 0xc, 0x215}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x4008014}, 0x0) getsockname$packet(r7, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r10, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="20000000140001000000000000000000020000ff", @ANYRES32=r10, @ANYBLOB="08000200ac1414aa"], 0x20}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vxcan1\x00'}) sendmsg$TEAM_CMD_PORT_LIST_GET(r2, &(0x7f0000000400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000280)={0x124, r1, 0x400, 0x70bd2b, 0x25dfdbff, {}, [{{0x8, 0x1, r4}, {0x7c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}]}}, {{0x8, 0x1, r4}, {0xaf, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x40, 0x1, @notify_peers_interval={{}, {}, {0x0, 0x4, 0x3}}}]}}]}, 0x124}}, 0x4) 2.378527859s ago: executing program 6 (id=4312): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80102004}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={{0x14}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x28}, 0x1, 0x0, 0x0, 0x20040080}, 0x20000800) syz_emit_ethernet(0x356, &(0x7f00000003c0)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x320, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0xf5, 0x0, 0x0, [{0x18, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0xe, 0x1d, "06aa85616177c41bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee96f24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x18, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x21, 0x7, "ffffffffffff00000000000200000000000000000000000000008879e66485201a0015ca837400"/55}, {0x0, 0x14, "5e14f0e7e72d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fa632dbf04542188b196e213408c"}, {0x3, 0x5, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02a326a6bce65f81ed"}]}}}}}}, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xb, 0xd, 0x200cc, 0x6, 0x5}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)='D', &(0x7f0000000240), 0x4b2, r2}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000700)={0x0, &(0x7f0000000540)=""/245, &(0x7f0000000640), &(0x7f0000001740), 0x2, r2}, 0x38) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$fou(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$FOU_CMD_GET(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, r4, 0xb01, 0x70bd28, 0x25dfdbf8}, 0x14}, 0x1, 0x0, 0x0, 0x24040015}, 0x40000) sendmmsg$inet(r1, &(0x7f0000001240)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f00000002c0)="91f8a9849519def2f8eb48d9173c3d6f357d0272b7319130feaab952ac4703cad04be68907e50e997fc26e4c91ea4feb931647fc5393de25000000000000000000f38a6a4cb6b275ee91bd0196db0af38f2665cbbb4e66534143d02eac997657cf0a3df3cc8df5281ca813b255039632532f021a46b78fb7892513e4d3307f2dc6eca9986be03dfdd7dea5a59b3af0f59c39d0edaaf273933db78b8653e664f28ca6a3f8803662958348e8bef4a1370e5fc0c803eeb3e1154bab13b3", 0xbc}, {&(0x7f0000000700)="44900000000056ee66c372f3105eb186dd8062fad2d5b5bfb0ba06f274a8d026bd209da8ffa6a26e3b3f8075704a9d0ef9aff7f1e7db24609f02d34e76992c9df9fe6888c6c9a4825c6223be6ac54536025af1dea54e527c68b0ff250261953f2da79a78104c2d9e7b16ed86b124945aa9ab7581ebd385fb61d442035db81e18c2d2462d0bb25fff9d3b1ce9", 0x8c}], 0x2}}, {{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000b80)="f77d2b5dd5f7d74f0748cf3d2cf218d644566a14103b1c7dd35fd2951bd022f10f2dc7f4ce0d8ac5f4abaca4b97b706153756913b7dd48248b5bfb10460019248bf238743fa2aeb5bef21ce832db670920dc5e911ef2ad63e849901d1001129dbacbfd4924d7545517fd18b5d29978f32a5b5c81755cb89cc0490958ba3211eb99df5cdbbc0f9c941aaa1495893dada02d8188acd26b5afd7476413f322c8f79de769debb56343f3eded", 0xaa}, {&(0x7f0000001300)="e0cda6472d1ccfb4d1d46b", 0xb}, {&(0x7f0000001e00)="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", 0x3ca}], 0x3}}], 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r1, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) syz_emit_ethernet(0x3b6, &(0x7f00000003c0)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x380, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, [{0x19, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af0302"}, {0x0, 0x1, "000000050000000026000400"}, {0x22, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c41bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee96f24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x3, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x21, 0x7, "b8a3e100908f6164000000020000000000000000000000ffff008879e66485201a0015ca83747357a02745000400"/55}, {0x0, 0x14, "5e14f0e74d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fb632dbf04542188b196e213408c"}, {0x0, 0x5, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02a326a6bce65f81ed"}]}}}}}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x9, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8, 0x7, 0x0, 0x2}, @initr0={0x18, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x1000000}, @exit]}, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0xc}, 0x94) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) 2.099855306s ago: executing program 6 (id=4313): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB='L'], 0x4c}, 0x1, 0x0, 0x0, 0x24008000}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_timeval(r2, 0x1, 0x14, &(0x7f00000001c0)={0x0, 0xea60}, 0x10) getsockopt$sock_timeval(r2, 0x1, 0x42, 0x0, &(0x7f0000000580)=0x3e) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x2, 0xfffff010}, {0x20, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) sendmmsg(r0, &(0x7f0000000180), 0x4000190, 0x0) 2.038914312s ago: executing program 0 (id=4314): socket$inet6(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x1, 0x4, &(0x7f00000010c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x99, &(0x7f0000000180)=""/148, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x8b63bfea1a14a3c7}, 0x16) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffff, 0x81, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x5, 0x1}, 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000340)={r0, &(0x7f0000000080)="4611801fa66f834bd87b6c23824c40ca803a55af966e9a187da286878d14c2bfb919099eeb767288afdda71cfbd86e70825c3567284db4591c2e66a17fb4461cea8c33b942d8fe1984b5f91eb4da09cb033cfc605537d3cfac25686079ca3dce4862f53842e36d52b3b57f13622553", &(0x7f0000000240)=""/218, 0x4}, 0x20) 1.851432892s ago: executing program 0 (id=4315): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x50, 0x1, 0x8, 0x204, 0x0, 0x0, {0x3}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8884}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xf8}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x884c}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2f}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x4000002) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x405}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0x12}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x85}, @NFTA_INNER_NUM={0x8}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x8c}, 0x1, 0x0, 0x0, 0x8890}, 0x24000000) 1.850864339s ago: executing program 1 (id=4316): r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)={0x1b, 0x0, 0x0, 0x9, 0x0, r0, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x2, 0x2}, 0x50) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x215, 0x100000}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipoib={{0xa}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r5}]}, 0x3c}, 0x1, 0xba01}, 0x0) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000600)={&(0x7f0000000480)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x94, 0x94, 0x4, [@restrict={0xb}, @struct={0x8, 0x1, 0x0, 0x4, 0x1, 0x8, [{0xf, 0x1, 0x6}]}, @fwd={0x10}, @union={0x7, 0x2, 0x0, 0x5, 0x0, 0x7fff, [{0x6, 0x4, 0x9}, {0xc, 0x2, 0x1}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x5, 0x5}}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x4, 0x6e}}, @decl_tag={0x5, 0x0, 0x0, 0x11, 0x4, 0x6}]}, {0x0, [0x61, 0x0]}}, &(0x7f0000000540)=""/161, 0xb0, 0xa1, 0x0, 0x1000}, 0x28) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a40)={0xffffffffffffffff, 0xe0, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f00000006c0)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, &(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000740)=[0x0], 0x0, 0xc3, &(0x7f0000000780)=[{}, {}, {}], 0x18, 0x10, &(0x7f00000007c0), &(0x7f0000000800), 0x8, 0x9c, 0x8, 0x8, &(0x7f0000000840)}}, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000b00)={{0x1, 0xffffffffffffffff}, &(0x7f0000000a80), &(0x7f0000000ac0)='%ps \x00'}, 0x20) r9 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000b40)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x2}, 0x50) r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8ab8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r10, @ANYBLOB="0000000000000000b703000010000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector=0xd14111cebb5f856d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r11 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001a40)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0xffffffff, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000040)={{r11, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000680)='%pK \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380)={r12}, 0x4) r13 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000bc0)={0x1b, 0x0, 0x0, 0x7, 0x0, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x3}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x18, 0x11, &(0x7f0000000280)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xcb, 0x0, 0x0, 0x0, 0x302}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @generic={0x6, 0x8, 0x1, 0x7ff, 0x5}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000340)='syzkaller\x00', 0x6, 0xfe, &(0x7f0000000380)=""/254, 0x41000, 0x4, '\x00', r5, @fallback=0x18, r6, 0x8, &(0x7f0000000640)={0x3, 0x3}, 0x8, 0x10, &(0x7f0000000680)={0x2, 0xf, 0x0, 0xf}, 0x10, r7, 0xffffffffffffffff, 0x3, &(0x7f0000000c40)=[r1, r8, r9, r10, 0x1, r12, r13, 0xffffffffffffffff], &(0x7f0000000c80)=[{0x4, 0x3, 0x8, 0x2}, {0x0, 0x1, 0xb, 0xa}, {0x3, 0x2, 0xb, 0x1}], 0x10, 0x1}, 0x94) syz_genetlink_get_family_id$team(&(0x7f0000000880), 0xffffffffffffffff) r14 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r14, 0x1, 0x6, 0x0, 0x0) r15 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r15, &(0x7f00000000c0), 0x10) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000008c0)=ANY=[@ANYRESDEC=r0], 0x448}}, 0x0) sendmmsg$inet(r15, &(0x7f0000001b00)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)="050000007402b8f4191db62b", 0xc}, {&(0x7f0000000440)="9f336d70bf41f19e47e98b4015e3b0384d86a1ceb4e530554ebc8154bf392bcf9ce0b09f879bd7aaf9d086e3", 0x2c}], 0x2}}, {{0x0, 0x0, &(0x7f0000000100), 0x2}}], 0x40000000000003a, 0x0) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000080)="6651473cbda8c1f625d15af2edd868b93c69265ccbaae931a8947b9b174d20f9e66a7b4714b2ed1b14f1a42f8c4d7887b69d65b47c13d15d93345ddf54adf740b219997db9e15c1034be5b06d8350e2f5f1a17e115c4f65153177cb63a0461d99d577c9f4cf42ccef29cacce571e5e2f80c55b9f6c3aea70f33ad1e72d7c6c64e540a6499a7ce829e3490b5f7edd9ceeecbc91fd15d13e72241a7c1982b3ffd05cf1b6242f45e9bf643b42", 0xab}, {&(0x7f0000000140)="5506ff68e71abeaff4a89ee1a016d63a23851d483efb2f42fb26750bce839636cd12a5ecb8ffb5b4bbeda3d8b94996ecab8e7fb3423a0008ad1c3f765605ccb57ebbaa5a7f7d99e4dc", 0x49}], 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000900)={'bridge0\x00', @remote}) syz_init_net_socket$x25(0x9, 0x5, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r16, 0x89a1, &(0x7f0000000900)={'bridge0\x00', @broadcast}) 1.712059263s ago: executing program 6 (id=4317): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x4, 0x4, 0xf, 0x0, 0x1, 0x1}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000f00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r1}, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r3, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xc}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e24, @loopback}]}, &(0x7f0000000640)=0x10) setsockopt$inet6_int(r3, 0x29, 0x1a, 0x0, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001180)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000703000000fef7ff7a0af0fff80000ff79a4f0ff00000000b7060000efffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00ba23008500000098000000b70000000000000095000000000000006f88300eaa171100756695acf0af839ec5300a584fe44c80de0b061417e9ade22cecede5d5be6ab3d7828ee094518a5800000082c81ddfe3960a29ea15fa7e26f0f3e51416b698f6da6fe8af496d22585ffab3af24974fae00d824313ffef788c6983945dd3663f79f67e78a48b23b38c5f86e96111199f0f0af9f42099a0f54041889b971cf394bd43473a5ac2acab9768cbc52ff7f000000000000711727c4a32a6b7ecdae05d2b3fed4572eb0d88976d2adda68000010000000c47b18cf93996a43e2e080f57fadf535d8b3078ebe16b10160fad64474a7b558f7a56f41022feec18e013abd8fda2b96779e534d0675fbcc13ba9f9eb96319fd5b49521d5cb2ced401d7b6fce658f203a9c2da91116d986730da1be85b0000829512099df32814820fbf7be91cd13b77f4e4e599f8bbca388247856073472312a9ff4273b9cd08000000000000616e888cda842c661577818c2069cb41a73b4b7fc28882cad315db3fffc5183deca7a32838ec0ad70d4f55382c1879b71ec504d2f3e3883428ee350123a5cad346f6d517f6fcea5b6bc4fcffffffffffff03f419a6e45fd98e77da4a8202ebbdafe6b2e38c9d7e506f5da2958cf7f0d9b31ca3275e64e29d39d158cebe43308cf8760588001172e19685e9a334aec76530861b772a1da96f0a227514bd0bc26df2b50a45e4eceae1ddfe88d58879d1cb253e0471714fa124211203000000000000001f502b6c760655ffb20ae13a1a94f7ae229fbf5da7cae4f994ee82fc98c864c3e352ad16f98208cf1469dd6c1212582a3687f7dbdf708929643f3f0f4e947c40742452685ec044fc71eaca9abc92145677e14054331801b1412b39049ed782742f9a1b6aca9123b243c1a68c047f2db79701b62c8cc0d2f608c7f62d107ebc68df9f8d296721c9d465dad604bc0dc500000000000000000000000000000000000000000568a4997dd54fa83aacd2d209f66de2e26dc2fd862a0b8ee149c148197176745fc8ff1dd5bd6611daa882298a37b041b34668d4662ea8fbe2e787dfc4c8bef2124f0439b2d18ec83361da5cc732f365b0a528db31b90bc1405b6d5301c34319ccae29b1d6034b665c79baeeeac5e71d24e2e3b6ffc5bc2dcb600e645c0048b45e286a49e888d21abfc817085d9c00e08525207e33505226fdda16e6da6dd31f7a1736029b87e8d6a05bcb356298d7dccd7de2af0885bd4939ff96ab74da3871b077e4058c8752ba4994eafed8b239d781638fa339fa0f7dd135af3f80e40f4b885770cf27d205a45d4702f97b8b7c57b180c50b2b370dfb35dc895e8f05d6e71829f36150b2cde314693f3e0dc35f8cdd76bdde2018366c3201307c370433762676f72e68c962430a0000000000000000000000000000e737dc2e1a3fdebbb510c663d24f72b954965201f775b3739c14dd4832647c028be09f2809fd396fa26532a30a37737e95f0f41dd024b7bf8a6bf807c9fd9b8c7a39717729339dc3054117cb95693bdd61edcc2860b66545e194a961bdc5457d76ae1a87050e12ead896f3337d5a000000000000000000400000602bfd2f1ace65f2e74dc99cb73a37f40362b7904e8a0ea8d2d9805c924f9985d22972031a1223afa1288af3f48c93fcdb11963d0b748287448f722dc180e87637b662b11effabf45beda2e3a7e1adf8f94b619fa152b33440f2358a745848caf7000eb305c936d26964a2a85e133d01368b8d228d02f96064de261cf02c9632a0eb4ab259e8f4dd63d8b6d2d6b2a0c29fbab7d04d73a381c21f1c344655b64e12f216fbc646cc6bd60ca773d187f2fd317f6cb2309d1a13526a44b7d9b2bf93947dc3ac3340a7a114051d33d152310574f0d784910dc1a8f5bbf3610c544437626236458f285196161496389b02ba46a72da0149b4ddfdd4ef7862a07395752a37cb0244e94e1310e0c0a148a9a48b149bf2f345f3f89813c9eb05160f63f0b363deee5cb77ea6e951857e1942e5c56d72d724af7aa24a8aadb512f3302972c53b0eb7a693e0b0c775b21aed72995cfe9e9347a07d43ce3db9f22d461e86416ffff6f2e4e36306630052a2b03ee36ec52af0d684fabd5f38adffaa6c5a7a8100d1aefaf8576b363690b76e2eb96b07ab790cf63cfc334b7469b5b5b397c622f7c3ee064f9272443bcb928b6f7a2450cd33550a42843b0b5ac9e37134c81bd56b72e1030b05a5b3ac47b5af22a9dff0700004adacc71db2b15b4ffd98e30224763382ade45d164be76b2e9a674448f3ee2cd29707468df87ea6e8e6333b5fcb1b8b43a7c005ea800000000000000000000010000000000387592adc78ccfe479549e6f4efc14c4a5cfe845e6157d6fe70b278147edf0e25065ec6b17f8022493d105c9c31121e7957aeec5f7f2af0446d128778c8bf15b87a0eec6f4c75966b5f0e06744bda63134223416102aea1254d57c390e1f84ec7d5c3a758ce59c9e2c4ce1f28b6783661e272bf1cb5c8ac177aa9c6ccbead9a96b22394afb840247e5d69473b836f070dc0bf9302e33b03d4e07395c82e33667726b51ff24b0bbea730702835159e3517ffb3da0d01833589fec3bdab629b21e5d9e87c3c58d962ff5e75c81f583c64b7d5a643674801e18b06ca98b49d9e28d004c7ebccf076c64ef71421f672b0948b18ab5af448ca9446e71ba6dd4bd15a12553066de7cb767a121d56d9d26ce27fdbe6721191f2ed1cc3f9c5e3d5cba447c4793165b3cbf51c7d0cf9edf823641e1bc7db7803b60dc8b21e49a33a73ac00337067dfd3ecaf4e6dceee1048f300000000000000000000000000000000000000000000007958a50896df65337581398793d0a9abe75251908c07d2957ca70ad7ac31aae536294d6a944cd35f46cb554d8aecae5a72cb24596d896ff9ad83473567b6cb9d032c395a1459399cea31ebafc1e77649b55af527ca0f1ac972ee72a78391473c1b9e0000000000000000004076eac7e605f8de6f0ce5702af52c5d78bac0097d92f078a3a98229ebf281c3c876d2614109b69967871fea621fb2a29a77a1516b51d9b1c3c5ef1436f50fad4a1cd92a211fec61d37c8b410a20fbdeb642228d6cfeb8cda8eea3a7f343fcaa0459b9d916abb668d4799534307084ee7d854dd0850000000000000000000000002f40c3e24f9c0a56edf543425058c35febda26a43bdab770212186b84421d8b841cf9181d47c08cb392e414c1efba9978a976a9e65ae443644dbdb32a50cdc717a34d1aa9ced37820a6d1cd0920a9a07e36a85e967bfa7f2caf1c9b52c06f4d178fbb91a169e9533e401819e57cab814761819b0fc517239a6777dbb92a7462538dbd8a4b84b160a598c75bafa5a9b388a44303dbebc83ac2ad2da3ae80c851bc2fdb8d444597fdac4538aa33bb9204ffe534b15a1878be30157d0815d38fc2effeb7b87d6bd15e21c7b7c7d1ad7b3fd69b4bd06716a203e82f4c0413719eae0967fc70f03570375c2d0986b0200897e505afb6f3f8eb5384e3300000000000000000000000000006b78992d5c13cc1e4da0c915f6008be5cbc0ba1eea48d5967c5e5106411dda3578c91d93ecf4a5efdf306f6b5378db3b22f5aae576342ff9a2eda7080027be316100af0ec6f0e9f227e239fe2d8c78555aaaa969581860f846df35757281a6d3f2e6de960c30f98987ba99d1edfb39dece89262a2e71cb50b7104f611b8db7639e6a5b485135bead15cfada2b5ffa490d60f6b8211f6ada947d06fac138f829b24f2c9d60f3d6672ef8e86ddcdf4dba4f20f370c58f49c9d0100b519f8bc685f176c3f305ced21df0c8acace252a"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x304, 0x10, &(0x7f0000000000), 0xfffffea2}, 0x48) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a0b040000000000000081a39b370002000000400004802800018011000100666c6f775f6f66666c6f616400000000100002800900010073797a3000000000140001800a00010071756f7461000000040002800900010073797a30000000000900020073797a320012000014000000110001000000000000000000"], 0x94}, 0x1, 0x0, 0x0, 0x2000094}, 0x80) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000500efff0000000001000080850000002700000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0xe, 0x0, &(0x7f0000000100)="e09f547ed3f02dc1fd3d6487775b", 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.70423773s ago: executing program 0 (id=4318): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000005c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aae", 0xb) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000002440)=[{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000280)="57cd4e", 0x3}, {&(0x7f0000000580)="3222f0476ed4765dc271a2c4fc02", 0xe}], 0x2, &(0x7f0000001a40)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x4000801}], 0x1, 0x40) recvmmsg(r1, &(0x7f0000000a00)=[{{0x0, 0x0, 0x0}, 0xffffff0b}, {{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000028c0)=""/4096, 0x1000}], 0x1}, 0xf}], 0x2, 0x2101, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="7000000010000304000020000000000000000000", @ANYRES32=0x0, @ANYBLOB="8020010042000000500012800e0001006970361c727470616e0000070000028008030100", @ANYRES32=0x0, @ANYBLOB="08001500d7a30c000400120014000600000000000000000000000000000000000600180000f8000008000d00ffffffff"], 0x70}, 0x1, 0xba01}, 0x0) 1.643411216s ago: executing program 5 (id=4319): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000000)=0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x240, 0x0) close(r4) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000240)=@newqdisc={0x50, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x24, 0x2, [@TCA_FQ_FLOW_REFILL_DELAY={0x8, 0x9, 0x6}, @TCA_FQ_CE_THRESHOLD={0x8, 0xc, 0x4}, @TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0xfe}, @TCA_FQ_RATE_ENABLE={0x8}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x40080c1}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r7, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r7, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000088a8ffff86ddee1611d4b8bf4a31accb", 0x26}], 0x1}, 0x80) bind$nfc_llcp(r0, &(0x7f0000001040)={0x27, r2, 0xfffffffe, 0x4, 0x0, 0x1, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x3f}, 0x60) sendto(r0, 0x0, 0x0, 0x0, &(0x7f0000000700)=@ax25={{0x3, @bcast, 0x5}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}, 0x80) close(0x4) close(r1) 1.153170243s ago: executing program 0 (id=4320): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002cbd7000000000000200000008000300", @ANYRES32=r1, @ANYBLOB="0c009900020000002500000008002600800900000800a1000d00000008009f0001000000050018013a6efad9"], 0x48}, 0x1, 0x0, 0x0, 0x8001}, 0x4040000) 1.131137064s ago: executing program 1 (id=4321): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x29000, 0x1000, 0xbb}, 0x20) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) unshare(0x24020400) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000340)=0x800, 0x4) (async, rerun: 64) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) (async, rerun: 64) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) (async) bind$xdp(r0, &(0x7f00000003c0)={0x2c, 0x2, r2, 0x20000000}, 0x10) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x12, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000d0ff00000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000206608000000000000180000000000010000000000000000019500000000000000180100002020782500000000002020207b1af8ff00000000bfa1000000000000070100000aa8ffffb702000008000000b50afdff0000000085000000ae00000095"], &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0xc}, 0x94) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000100)={0x40000000, 0x0, &(0x7f00000000c0)={&(0x7f0000000900)={0x2, 0x18, 0x0, 0x3, 0x14, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0xffff, 0x0, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x10000}}, @sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@loopback}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @private0}}]}, 0xa0}}, 0x0) sendto(r3, 0x0, 0x0, 0x20000010, &(0x7f0000000200)=@ax25={{0x3, @null, 0x1}, [@null, @null, @default, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}, 0x80) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000001040)={'gre0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x3f80, 0xa000, 0x7, 0x0, {{0x5, 0x4, 0x0, 0x3f, 0x14, 0x1, 0x0, 0x80, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1}}}}) 979.277339ms ago: executing program 1 (id=4322): r0 = socket$netlink(0x10, 0x3, 0x0) bind$nfc_llcp(0xffffffffffffffff, &(0x7f0000001040)={0x27, 0x0, 0xfffffffe, 0x4, 0x0, 0x1, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x3f}, 0x60) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, 0x0, 0x0) getsockopt$netlink(r0, 0x10e, 0x9, &(0x7f0000001840)=""/42, &(0x7f0000000100)=0x2a) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=@RTM_NEWMDB={0x38, 0x54, 0x1, 0x70bd2a, 0x2, {0x7, r4}, [@MDBA_SET_ENTRY={0x20, 0x1, {r4, 0x0, 0x2, 0x2, {@ip4=@multicast2, 0x86dd}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x40080c0) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000580), r2) sendmsg$NLBL_UNLABEL_C_STATICADD(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000005c0)={0x40, r5, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_SECCTX={0x2a, 0x7, 'system_u:object_r:ssh_agent_exec_t:s0\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x4) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x1ff}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x20}}, 0x78}, 0x1, 0x0, 0x0, 0x40010}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x38, r5, 0x2, 0x70bd25, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_SECCTX={0xf, 0x7, 'unconfined\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4004}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fdff0000850000002d00000018110000", @ANYRES32=r1, @ANYRES64=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x23, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000001580)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007808500000004"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r7}, 0xc) 903.091174ms ago: executing program 0 (id=4323): r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x10, 0x3e8, 0x200, 0x70bd26, 0x25dfdbfc, "", ["", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4000}, 0x20044004) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000001c0)={'syztnl2\x00', &(0x7f0000000140)={'ip6gre0\x00', r1, 0x4, 0x8, 0x7, 0x9, 0x1d, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, 0x8, 0x1, 0x1000, 0x8}}) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000200), 0xffffffffffffffff) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_LIST(r3, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x28, r4, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast2}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000010}, 0x40001) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(r5, 0x8918, &(0x7f0000000380)={@mcast2, 0x27, r1}) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r0, 0x4048587b, &(0x7f0000001840)={{r5, &(0x7f00000003c0)='NLBL_UNLBL\x00', 0x800, &(0x7f0000000400)={@align=0xc, {0x280, 0x4, 0x8c22, 0x4}}, 0x0, &(0x7f0000000440)={@_ha_fsid}, &(0x7f0000000480)=0x7}, 0x4, &(0x7f00000017c0)=[{0x1, 0xf, &(0x7f00000004c0)='syztnl2\x00', &(0x7f0000000500)="f0ec6d7945881e433495a9a742ba4f801e73f00af6321a4b7503e54aa0cb9173b8e14db8292521acc6fd223b3d7dd2767ccdd5213fd623fad90150f220e245c9e4536e1131f609b56c17aef3f2135f5611674d850690a7461d12a1659a069c143a46aa4b5d71c77d7d2db52b8a292c87089bd92cb9d448c18ef4c07b94bf1149fa34a2f68908c583c063a928c8c8d69213aae899d8b4b38c5e5f7477eb51750b2931798c83c209b24d509ba29252f6a71ab9cc8350be7a123e34b5", 0xbb, 0x2}, {0x1, 0x101, &(0x7f00000005c0)='syztnl2\x00', &(0x7f0000000600)="c7f06047848256cfb4669a940576c9161f10eb2d8af2626c4ec5", 0x1a, 0x30}, {0x2, 0xa, &(0x7f0000000640)='team0\x00', &(0x7f0000000680)="0ee38da0a246885674abc6dabb1382c0fbe14362e675a9a373ddbff2090c5d941505f694c7a2ec7e2735d5d0a32c3a0ce4ca57dad8c608ec745dc8a5b289f07bb8d5b7fb975327e72480176be0ac865c041cfdbae32fca84743792b5a46a0a2ac8668d51a854059a0b52d464defdf21b0cec76299d12c2f854becc7864aa3f9546877b91818d7840bd02826cc2eb4d68790716b372ec6d2a9c3ad9fdaf4b7399d344628fd4d622646ff13f97b06ec80faeaa47469395302568132740bc5726ecb7b2da4bd5a2ef859c5453953c5fe946e1422eca54ab102a", 0xd8, 0x8}, {0x3, 0x3c, &(0x7f0000000780)='@\\%\x00', &(0x7f00000007c0)="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", 0x1000, 0x30}]}) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000001900), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_STATS(r6, &(0x7f00000019c0)={&(0x7f00000018c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001980)={&(0x7f0000001940)={0x1c, r7, 0x4, 0x70bd27, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) splice(0xffffffffffffffff, &(0x7f0000001a00)=0x3, r5, &(0x7f0000001a40)=0x1, 0xd710000000000000, 0x4) ioctl$XFS_IOC_START_COMMIT(r5, 0x80585882, &(0x7f0000001a80)={0xffffffffffffffff}) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000001b40), r6) sendmsg$DEVLINK_CMD_PORT_SET(r8, &(0x7f0000001c40)={&(0x7f0000001b00)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001c00)={&(0x7f0000001b80)={0x74, r9, 0x8, 0x70bd29, 0x25dfdbff, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x6, 0x4, 0x3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x1}}]}, 0x74}, 0x1, 0x0, 0x0, 0xb0}, 0x4000000) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000001cc0)={'wpan3\x00', 0x0}) sendmsg$IEEE802154_SET_MACPARAMS(r10, &(0x7f0000001d80)={&(0x7f0000001c80)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001d40)={&(0x7f0000001d00)={0x40, r2, 0x8, 0x70bd28, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r11}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_FRAME_RETRIES={0x5, 0x28, 0x10}, @IEEE802154_ATTR_FRAME_RETRIES={0x5, 0x28, 0x40}]}, 0x40}, 0x1, 0x0, 0x0, 0x814}, 0x10) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r8, 0x89f0, &(0x7f0000001e80)={'ip6tnl0\x00', &(0x7f0000001e00)={'syztnl1\x00', r1, 0x29, 0x4, 0x5, 0x61, 0x1c, @loopback, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7, 0x8, 0x6, 0x10001}}) sendmsg$GTP_CMD_DELPDP(r6, &(0x7f0000001f40)={&(0x7f0000001dc0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001f00)={&(0x7f0000001ec0)={0x40, 0x0, 0x800, 0x70bd2d, 0x25dfdbfc, {}, [@GTPA_NET_NS_FD={0x8, 0x7, r8}, @GTPA_PEER_ADDR6={0x14, 0xb, @empty}, @GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_LINK={0x8, 0x1, r12}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000800}, 0x40) socket$inet6_udp(0xa, 0x2, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000002140)={0xa, 0x1c, &(0x7f0000001f80)=@framed={{0x18, 0x0, 0x0, 0x0, 0xf2, 0x0, 0x0, 0x0, 0x4}, [@map_idx_val={0x18, 0xb, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, @cb_func={0x18, 0x3, 0x4, 0x0, 0xfffffffffffffff9}, @tail_call={{0x18, 0x2, 0x1, 0x0, r6}}, @exit, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r8}}, @cb_func={0x18, 0x2, 0x4, 0x0, 0xfffffffffffffffd}]}, &(0x7f0000002080)='syzkaller\x00', 0xfff, 0x1b, &(0x7f00000020c0)=""/27, 0x41000, 0x12, '\x00', 0x0, @fallback=0x1f, r6, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, r8, 0x3, 0x0, &(0x7f0000002100)=[{0x0, 0x5, 0xf, 0x1}, {0x0, 0x4, 0xf}, {0x4, 0x2, 0x4, 0x3}], 0x10, 0x6}, 0x94) sendmsg$IEEE802154_LLSEC_LIST_DEV(0xffffffffffffffff, &(0x7f00000022c0)={&(0x7f0000002200)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000002280)={&(0x7f0000002240)={0x14, r2, 0x8, 0x70bd2b, 0x25dfdbfc, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x20004800) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000002300)=0x4, 0x4) r13 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r13, &(0x7f0000002340)={0x1f, 0x0, 0x4}, 0x6) bind$inet6(0xffffffffffffffff, &(0x7f0000002380)={0xa, 0x4e24, 0x6, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, 0x4}, 0x1c) 880.292365ms ago: executing program 5 (id=4324): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010400000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a64000000060a0b0400000000000000000200000938000480340001800b00010065787468647200002400028008002340000000020800064000000001050002000000000008000340000000010900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a25c2cefff3a964a7d1"], 0x8c}}, 0xc084) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010027bd7000fbd3df2502000000050004000100000005000400010000001400020076657468315f746f5f7465616d0000000900030073797a32000000000900010073", @ANYRES64=r0], 0x68}, 0x1, 0x0, 0x0, 0x4000145}, 0x0) sendmsg$NFQNL_MSG_VERDICT(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000300)={&(0x7f00000007c0)={0x1fc, 0x1, 0x3, 0x3, 0x0, 0x0, {0x3, 0x0, 0x8}, [@NFQA_MARK={0x8}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xffffffffffffffff, 0x3ff}}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x81}, @NFQA_EXP={0x84, 0xf, 0x0, 0x1, [@CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0xfffffffe}, @CTA_EXPECT_MASK={0x4c, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010101}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @broadcast}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}]}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x6}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x3}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x6}, @CTA_EXPECT_HELP_NAME={0xb, 0x6, 'amanda\x00'}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x1}]}, @NFQA_EXP={0xec, 0xf, 0x0, 0x1, [@CTA_EXPECT_NAT={0xc4, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x40, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010102}, {0x8, 0x2, @rand_addr=0x64010100}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}]}, @CTA_EXPECT_NAT_TUPLE={0x70, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0xa9}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x21}}, {0x14, 0x4, @empty}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8}]}, @CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x2}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x5}, @CTA_EXPECT_HELP_NAME={0xa, 0x6, 'Q.931\x00'}, @CTA_EXPECT_FN={0x8, 0xb, 'sip\x00'}]}, @NFQA_VERDICT_HDR={0xc, 0x2, {0x0, 0x1}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0x0, 0x8}}, @NFQA_VLAN={0x44, 0x13, 0x0, 0x1, [@NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x88a8}, @NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x88a8}, @NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0x9}, @NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x8100}, @NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0x1}, @NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0x6}, @NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x8100}, @NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x88a8}]}]}, 0x1fc}, 0x1, 0x0, 0x0, 0x368b5038299446f0}, 0x44801) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000780)={'c', ' *:* ', 'r\x00'}, 0x8) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000540), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'wpan0\x00', 0x0}) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x18, 0x10, &(0x7f0000000000)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r7}, {}, {0x7, 0x0, 0xb, 0x6, 0x0, 0x0, 0xffffff1f}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0x2}}, [@alu={0x4, 0x1, 0xc, 0x8, 0x2, 0x1}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x5, 0x0, 0x0, 0x41000, 0x42, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000600)={'wpan0\x00', 0x0}) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000000), r9) ioctl$ifreq_SIOCGIFINDEX_wireguard(r9, 0x8933, &(0x7f00000003c0)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000800)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010000000000030000000100000008000100", @ANYRES32=r11, @ANYBLOB="4c0008804800007b200004000a004e21000000000000000000000000000000000000000100000300240001"], 0x68}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000640)={'wpan4\x00', 0x0}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) r13 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1a41, 0x0) ioctl$TUNSETIFF(r13, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xd132}) write$cgroup_subtree(r13, &(0x7f0000000000)=ANY=[@ANYBLOB="9601"], 0x6e8a) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r3, &(0x7f0000000740)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x54, r4, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r12}]}, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x200448d6) 607.435331ms ago: executing program 1 (id=4325): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x65dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xb, 0xb}, {0xa, 0xffe0}}, [@qdisc_kind_options=@q_bfifo={{0xa}, {0x8, 0x2, 0xfffffffa}}]}, 0x38}}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$packet(0x11, 0x3, 0x300) unshare(0x100000) r5 = socket$unix(0x1, 0x1, 0x0) connect$unix(r5, &(0x7f0000000640)=@file={0x1, '.\x00'}, 0x6e) sendto$packet(r4, &(0x7f0000000980)="0503022ed3c6c32b6d8c8dbc128b", 0xe, 0x41, &(0x7f0000000340)={0x11, 0x86dd, r3, 0x1, 0x82, 0x6, @broadcast}, 0x14) 483.518981ms ago: executing program 4 (id=4326): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) unshare(0x26020480) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f00000005c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26, 0x0, 0x1, 0xfffffffd}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r0, 0x20, &(0x7f0000000100)={0x0, 0xfffffeae, 0x0, 0x0}}, 0x10) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x19, 0x4, 0x4, 0x2}, 0x50) (async, rerun: 64) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xf, 0x10, &(0x7f0000000400)=ANY=[@ANYRES16=r0], &(0x7f0000000440)='GPL\x00', 0x0, 0xfffffd4c, 0x0, 0x0, 0x2, '\x00', 0x0, @cgroup_device=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) (async, rerun: 64) sendto$inet6(0xffffffffffffffff, &(0x7f0000000140)="7800000018002507b9409b14ffff00000204be04020506050e020409430009003f000ce0100000000d0085a168d0bf46d32345653600648d0a00120002", 0x3d, 0x0, 0x0, 0x0) (async) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x24004894}, 0x0) (async, rerun: 64) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r2, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) (rerun: 64) unshare(0x300) r4 = epoll_create1(0x0) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) setsockopt$SO_J1939_SEND_PRIO(r7, 0x6b, 0x3, 0x0, 0x0) (async) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r6, &(0x7f0000000100)={0xa0000014}) (async) r8 = socket(0x10, 0x3, 0x0) r9 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000480)={'tunl0\x00'}) (async, rerun: 32) syz_genetlink_get_family_id$fou(&(0x7f0000000540), r3) (async, rerun: 32) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) (rerun: 32) setsockopt$IP6T_SO_SET_REPLACE(r11, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x528, 0x0, 0x1a0, 0x2b8, 0x388, 0xd0, 0x458, 0x458, 0x458, 0x458, 0x458, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x7e, 0x80}}}, {{@ipv6={@mcast1, @local, [0xffff00, 0x0, 0xffffff00], [], 'macvtap0\x00', 'ip6tnl0\x00', {}, {}, 0x11, 0x0, 0x1, 0x40}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@ipv6={@empty, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00'}, 0x0, 0xf0, 0x118, 0x0, {}, [@common=@dst={{0x48}, {0x5, 0x9, 0x0, [0xa80, 0x6108, 0x2, 0x9, 0x8001, 0x9, 0x6, 0x7, 0xfffe, 0x8000, 0x5, 0xfffb, 0x6d1, 0x1, 0x5, 0x8000], 0x6}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@uncond, 0x0, 0xa8, 0x2b8}, @inet=@DSCP={0x28, 'DSCP\x00', 0x0, {0xfd}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@DSCP={0x28, 'DSCP\x00', 0x0, {0x2f}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x588) (async) sendmsg$nl_route_sched(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000840)=@newqdisc={0x14c, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x11c, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x9, 0x4, 0x3, 0x14, 0x15, 0xf, 0x6}}, @TCA_CHOKE_STAB={0x104, 0x2, "18047d80edc79ded5baf17b8d4ef60c9b3b201ad412d10413208ddeec3ca63150ca2e8e880626d219622937291bf1a88f2a7e933b9de68b10c358ceb836b1269874d68178d5ca2a60691b8ac2b18bec75794ef929a921ba80fe335e76deda6606f266cad000e1e9f949c533252624fbdb25e28a005a01da7a07e844a72943d4959681afcb9a2b3b3c4b2b511416252a03ab78abf8be2fc63130f4387fb8c00ce678ba03763da61a574a9bc59b728aa3c02eedb176afb984194f31696e2b3357c5757fbf99bae1c8dde4cfedc5714471bdd688ce6ac6e3d2a149abd76a0fe9a44165ad7ea8d792273206fc444294e3bae3fc553bc9bd6d0b67ea837b7a0b7f9ef"}]}}]}, 0x14c}}, 0x80) (async, rerun: 64) r12 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1e00000009000000f60300003303000010000000", @ANYRES32=r1, @ANYBLOB="ab08190d869f970100"/20, @ANYRES32=r10, @ANYRES32, @ANYBLOB="0400000003000000050000000600"/28], 0x50) (rerun: 64) r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xd, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000fcfeffdf0000000000000000850100004100000018110000", @ANYRES32=r12, @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000300000085000000820000009500000000000000"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r13, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) (async, rerun: 64) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000800)={0xa0000006}) (async, rerun: 64) r14 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind(r14, &(0x7f0000000680)=@l2tp6={0xa, 0x0, 0x7c04, @private0, 0x1}, 0x80) 464.782768ms ago: executing program 5 (id=4327): r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) (async, rerun: 32) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f00000000c0)=ANY=[@ANYBLOB="e0000002ac1414aa0000000003"], 0x1c) (async, rerun: 32) syz_emit_ethernet(0x36, &(0x7f0000000000)={@link_local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x64, 0x0, 0x2, 0x2, 0x0, @empty=0x20, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x2, 0x7000000}}}}}, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0xf8}], 0x1, 0x0, 0x0, 0xf5ffffff}, 0x82) syz_emit_ethernet(0x2b, &(0x7f0000000480)={@local, @random="152f18a66094", @void, {@ipv4={0x800, @generic={{0x6, 0x4, 0x1, 0xa, 0x1d, 0x68, 0x0, 0xc, 0x1, 0x0, @remote, @rand_addr=0x64010101, {[@generic={0x44, 0x2}]}}, "18f4d23477"}}}}, 0x0) (async, rerun: 64) sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000140)="57fa", 0x2}], 0x1}, 0x80804) (rerun: 64) 410.183221ms ago: executing program 0 (id=4328): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x5001, 0xfffffdfc, {0x0, 0x0, 0x0, r1, {0x1}, {0x0, 0xfff1}, {0x2}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40048d8}, 0x4004004) unshare(0x6a040000) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000240), r2) r4 = socket$igmp(0x2, 0x3, 0x2) sendmsg$inet(r4, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2, 0x4e23, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000001040)=ANY=[@ANYBLOB="20000000000000000000000007000000440466d39404010094040100940401001c000000000000000000000008000000", @ANYBLOB="ac"], 0x40}, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000100000008000100040000002c000480050003ff800000000500030080ffffff05000300050000000500036c1dff00000500030080ffffff0800020003"], 0x50}, 0x1, 0x0, 0x0, 0x20000002}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r5 = socket(0x10, 0x803, 0x0) getsockopt$sock_timeval(r5, 0x1, 0x49, &(0x7f0000000140), &(0x7f00000001c0)=0x10) ioctl$SIOCX25GSUBSCRIP(0xffffffffffffffff, 0x89e0, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000300), r6) r7 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000000), r6) sendmsg$NLBL_UNLABEL_C_ACCEPT(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)={0x24, r7, 0x1, 0x0, 0x0, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast1}]}, 0x24}, 0x1, 0x0, 0x0, 0x200008c5}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0xfffffffffffffe57, 0x10, 0x1, 0x70bd25, 0x25dfdbf9, {0x0, 0x0, 0x600, 0x0, 0x48815, 0x40103}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) socket$inet6_sctp(0xa, 0x1, 0x84) 355.584402ms ago: executing program 6 (id=4329): bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000002c0)={@ifindex, 0xffffffffffffffff, 0x1d, 0x200a}, 0x20) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {}, {0x8, 0x10}}}, 0x24}}, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)=ANY=[@ANYBLOB="60b80000", @ANYRES16, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newqdisc={0x44, 0x24, 0x1, 0x80000000, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x8, 0x3}, {0xa, 0xffe0}, {0xfff1, 0xc}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_LIMIT={0x8, 0x1, 0xf4b6}, @TCA_FQ_PIE_TARGET={0x8, 0x3, 0x10}]}}]}, 0x44}}, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x11}, 0x400c840) r1 = socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x5, 0x4, 0x0, &(0x7f0000000140)='GPL\x00', 0x4}, 0x94) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000002c0)={@ifindex, 0xffffffffffffffff, 0x1d, 0x200a}, 0x20) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {}, {0x8, 0x10}}}, 0x24}}, 0x10) (async) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)=ANY=[@ANYBLOB="60b80000", @ANYRES16, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newqdisc={0x44, 0x24, 0x1, 0x80000000, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x8, 0x3}, {0xa, 0xffe0}, {0xfff1, 0xc}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_LIMIT={0x8, 0x1, 0xf4b6}, @TCA_FQ_PIE_TARGET={0x8, 0x3, 0x10}]}}]}, 0x44}}, 0x20004055) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x11}, 0x400c840) (async) socket$netlink(0x10, 0x3, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x5, 0x4, 0x0, &(0x7f0000000140)='GPL\x00', 0x4}, 0x94) (async) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) 142.927061ms ago: executing program 5 (id=4330): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000002c0)={0x26, 'hash\x00', 0x0, 0x0, 'xcbc(twofish-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="0a2da62c19ee14b616db1a5f9b8a61bb9f16759f00e582b73d656a5e85be72cb8074748a814761b877d5a6b9f4e0db120be2aebf9978cf5462ed6c670a45ef15940c139da38ebff47862aadb70b76899685081d28377df2704ccf130299d4138f69f243d321514264d1dae62dd445a4901d95c048d9b3282c588e10f27b8c69f47975320f914d80004d96494d5b8c82a5ec57215e327230ef6372d48b0071c232cccdc198312b7510716aed0b7c26eb3c5116bb8a67cc016c67d438632b8641a9a9500b0cd8b46b8c5d09f92a1a2bbbe5da9ece32b36eabfc85c74fab31054e3d1f5e50079b54f93877add91c19d25551491e6aea1bffa", 0xf7) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = socket(0xa, 0x3, 0xff) bpf$OBJ_GET_PROG(0x7, &(0x7f00000003c0)=@generic={&(0x7f0000000380)='./file0\x00', 0x0, 0x8}, 0x18) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e24, 0xffffffff, @mcast2, 0x12400}, 0x1c) setsockopt$inet6_int(r1, 0x29, 0x21, &(0x7f0000000500)=0x81, 0xfffffff3) r2 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000440)="f78d9ca38fff48f3be52163448412ba89885231f4c5e5b717480d4729c515111b33a73b98ad87c2e2c8472b42b432361afeed249ee37a82e20def510869075863625f1c885f7a974f645f9f0ee1163a8be7b249ade98c82663c06676b84528a7a4a4d4b135e78b8a04962e289c80a06b0679b19a34c2420974b98aeccdafacd7690dc723cb0e82729c62a1e9", 0x8c}], 0x1, &(0x7f00000005c0)=ANY=[], 0x18}], 0x4924bee, 0x20000000) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000002a917cfdd48f9a03000000000000000a2c000000050a01010000000000000000020000000c00024000000000000000010900010073797a30000000002c000000030a01020000000000000000020000030900010073797a30000000000900030073797a32000000000200000a000000000000000000000000000000002ac7f19eccc653fa29ee77894f5de9fc77a91f1d327d0d0bf0a715cfa6d467c133480f08fadd09421da85dc751c315fb813594516f1cefd066e0212fd5db8dbd8dff08a5072fa66f96282f72ff5217b20db7800c1cf2a2ee141446521598255920d0e2d607a3817b"], 0x80}}, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="1c000000", @ANYBLOB="44a27bcd4cb01ab18ed8a25a6b82f1bdc133c8a1cc2ebf572957e754be44dfc8af60cb3f36baea8af8907638b3008eb578131b", @ANYBLOB="3c5077c8fd09000000f404"], 0x1c}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f00000000c0)={'syztnl1\x00', &(0x7f0000000040)={'gretap0\x00', 0x0, 0x8, 0x7800, 0x1, 0xee82, {{0x6, 0x4, 0x3, 0x1c, 0x18, 0x67, 0x0, 0x7, 0x4, 0x0, @remote, @broadcast, {[@end]}}}}}) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000000100)={0xffffffffffffffff, 0x4, 0x2, 0x44, @vifc_lcl_ifindex=r5, @multicast1}, 0x10) r6 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r6, &(0x7f00000001c0)={0x27, 0x0, 0x4, 0x5, 0x0, 0x47, "c46e9fd1a84b7fa0bf2cca6beb9363a680b652a86bcf56a1b9ca5386103a5ccbe47b7b9aa6d8d701a3ba00000000b97800001022f987617c318500", 0x3d}, 0x60) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000004700)) socket$packet(0x11, 0x3, 0x300) socket$netlink(0x10, 0x3, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10) sendto$inet(r7, 0x0, 0x0, 0x20000800, &(0x7f0000000040)={0x2, 0x3, @remote}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @random="5a01f3c2f136", @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x2, @local, @remote, @local, @remote}}}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x5c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9, 0x1}, {0x4}, {0xe, 0xd}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x401}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}, @TCA_INGRESS_BLOCK={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x90}, 0x4000c00) 56.087761ms ago: executing program 4 (id=4331): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx2\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x800) recvmsg(r2, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x1d, 0x2, 0x6) r4 = epoll_create(0x2) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="4000000010003b1500"/20, @ANYRES32=0x0, @ANYBLOB="0002000000806574680000000004000200"/29], 0x40}}, 0x8000) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket$nl_route(0x10, 0x3, 0x0) epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r3, &(0x7f0000000040)={0x20002011}) r8 = socket(0x1e, 0x4, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r9, 0x0, r9, 0x0, 0x8000f28, 0x6) setsockopt$packet_tx_ring(r8, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) close(r8) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0xfffffffffffffdc9, &(0x7f0000000940)={&(0x7f0000000080)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYRESHEX=r8, @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYRES16=r0], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) 2.631846ms ago: executing program 1 (id=4332): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f0000000600)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x35}}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000400)={r1, @in6={{0xa, 0x4e23, 0x5, @empty, 0x9}}, 0x5, 0x4, 0x624e, 0xa, 0x55, 0x3e}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000000c0)={r1, @in={{0x2, 0x4e23, @remote}}, 0xfffffffe, 0x2, 0x40000002, 0x0, 0x4d, 0x5, 0x81}, 0x9c) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000300)={'sit0\x00', &(0x7f0000000180)={'gretap0\x00', 0x0, 0x8000, 0x7, 0xfffffffc, 0x0, {{0x6, 0x4, 0x0, 0x1b, 0x18, 0x67, 0xfffc, 0x0, 0x5e55b37311de6d89, 0x0, @multicast2, @loopback, {[@timestamp_prespec={0x44, 0x4, 0x8a, 0x3, 0x4}]}}}}}) sendmmsg$inet6(r2, &(0x7f0000000740)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffc00}, 0x1c, &(0x7f0000000080)=[{&(0x7f00000022c0)='`', 0x1}], 0x1}}], 0x1, 0x20000012) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000480)={0x2, 0x3, 0x0, 0x3, 0x13, 0x0, 0x4070bd2c, 0x25dfdbfc, [@sadb_key={0x3, 0x9, 0x80, 0x0, "1cdc0dca1d9f68846960e56de42944af"}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x4e23, 0x7, @mcast1, 0x80000001}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x7, 0xc, 0xffffff7f}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x4e23, 0xff, @local, 0x1ff}}, @sadb_x_sa2={0x2, 0x13, 0x2, 0x0, 0x0, 0x70bd29, 0x3506}]}, 0x98}, 0x1, 0x7}, 0x0) shutdown(r2, 0x1) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r2, 0x84, 0x79, &(0x7f00000002c0)={0x0, 0x6, 0x1}, 0x8) 0s ago: executing program 6 (id=4333): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r4, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x40080) sendmsg$MPTCP_PM_CMD_REMOVE(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0xc0460001}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x48, r4, 0x8, 0x70bd2b, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xffffffff}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xe22}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000010}, 0x24008001) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x609, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x100a0}, [@IFLA_NUM_RX_QUEUES={0x8, 0x20, 0xd8}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipoib={{0xa}, {0x4}}}]}, 0x3c}}, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@newlink={0x40, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0xc6da5938055fa27f, 0x21}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GTP_PDP_HASHSIZE={0x8, 0x3, 0x1}, @IFLA_GTP_FD1={0x8, 0x2, @udp6=r5}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x44}, 0x2000c000) kernel console output (not intermixed with test programs): ng attributes in process `syz.4.2978'. [ 491.495709][T20224] lo speed is unknown, defaulting to 1000 [ 491.516275][T20297] netlink: 'syz.2.2979': attribute type 9 has an invalid length. [ 491.549053][T20297] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2979'. [ 491.670401][ T5633] Bluetooth: hci0: command tx timeout [ 492.177755][T20319] netlink: 'syz.0.2983': attribute type 1 has an invalid length. [ 493.166627][T20345] bond1: Removing last ns target with arp_interval on [ 493.663059][T20224] bridge0: port 1(bridge_slave_0) entered blocking state [ 493.694746][T20224] bridge0: port 1(bridge_slave_0) entered disabled state [ 493.719061][T20224] bridge_slave_0: entered allmulticast mode [ 493.735963][T20224] bridge_slave_0: entered promiscuous mode [ 493.749125][ T5633] Bluetooth: hci0: command tx timeout [ 493.757971][T20374] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2994'. [ 493.791816][T20224] bridge0: port 2(bridge_slave_1) entered blocking state [ 493.811931][T20224] bridge0: port 2(bridge_slave_1) entered disabled state [ 493.836638][T20224] bridge_slave_1: entered allmulticast mode [ 493.853658][T20224] bridge_slave_1: entered promiscuous mode [ 494.074971][T20224] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 494.211112][T20384] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2992'. [ 494.374301][T20224] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 494.704847][T20224] team0: Port device team_slave_0 added [ 494.843236][ T5614] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 494.857794][T20224] team0: Port device team_slave_1 added [ 494.887816][ T5614] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 494.905825][T20078] udevd[20078]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 494.908942][ T5614] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 494.940421][ T5614] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 494.962240][T20325] udevd[20325]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 494.975330][ T5614] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 494.995994][ T5614] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 495.020473][ T5614] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 495.029810][T20224] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 495.045510][T20224] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 495.050116][ T5614] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 495.108176][T20224] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 495.123963][ T5614] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 495.140698][ T5614] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 495.361764][T20411] syzkaller0: entered promiscuous mode [ 495.377597][T20411] syzkaller0: entered allmulticast mode [ 495.390653][T20224] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 495.402341][T20417] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3001'. [ 495.418930][T20224] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 495.488579][T20224] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 495.745654][T20438] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3004'. [ 495.827455][T20444] netlink: 'syz.3.3006': attribute type 1 has an invalid length. [ 495.839585][ T5633] Bluetooth: hci0: command tx timeout [ 496.114215][T20454] netlink: 'syz.3.3006': attribute type 10 has an invalid length. [ 496.129470][T20454] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3006'. [ 497.913531][ T5633] Bluetooth: hci0: command tx timeout [ 498.083623][T20434] workqueue: Failed to create a rescuer kthread for wq "bond10": -EINTR [ 498.084771][T20443] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3004'. [ 498.143588][T20444] 8021q: adding VLAN 0 to HW filter on device bond11 [ 498.339131][T20461] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR [ 498.458683][T20446] bond11: (slave veth11): Enslaving as an active interface with a down link [ 498.668281][T20475] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3011'. [ 498.681158][T20454] dummy0: left allmulticast mode [ 498.699245][T20454] bridge7: port 1(dummy0) entered disabled state [ 498.720968][T20478] netlink: 'syz.2.3011': attribute type 1 has an invalid length. [ 498.863134][T20481] netlink: 'syz.0.3012': attribute type 10 has an invalid length. [ 498.877539][T20479] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3011'. [ 498.970210][T20224] hsr_slave_0: entered promiscuous mode [ 499.002296][T20224] hsr_slave_1: entered promiscuous mode [ 499.028443][T20224] debugfs: 'hsr0' already exists in 'hsr' [ 499.047679][T20224] Cannot create hsr debugfs directory [ 499.450565][T20478] workqueue: Failed to create a rescuer kthread for wq "bond10": -EINTR [ 499.859925][ T5614] net_ratelimit: 6792 callbacks suppressed [ 499.860028][ T5614] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 499.882969][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 499.948604][ T5614] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 499.983574][ T5614] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 499.992262][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 500.044004][ T5614] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 500.081724][ T5614] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 500.090440][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 500.123798][ T5614] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 500.159907][ T5614] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 500.323829][T20509] syzkaller0: entered promiscuous mode [ 500.346904][T20509] syzkaller0: entered allmulticast mode [ 501.321439][T20224] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 501.497009][T20539] netlink: 'syz.4.3021': attribute type 4 has an invalid length. [ 501.517327][T20538] netlink: 'syz.4.3021': attribute type 4 has an invalid length. [ 501.583331][T20543] netlink: 'syz.4.3021': attribute type 4 has an invalid length. [ 501.913933][T20224] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 502.231163][T20224] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 502.477393][T20224] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 503.614162][T20574] lo speed is unknown, defaulting to 1000 [ 503.656764][T20597] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3031'. [ 506.075574][T20597] workqueue: Failed to create a rescuer kthread for wq "bond12": -EINTR [ 506.078097][T20611] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 506.254506][T20632] netlink: 'syz.4.3035': attribute type 1 has an invalid length. [ 506.277533][T20224] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 506.303214][T20224] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 506.363795][T20643] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3035'. [ 506.602883][T20224] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 506.625793][T20224] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 506.641967][T20224] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 506.648494][ T1157] net_ratelimit: 646 callbacks suppressed [ 506.648547][ T1157] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 506.674412][T20224] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 506.699211][T20663] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3039'. [ 508.208327][T20644] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 508.235323][T20224] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 508.250207][T20224] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 508.621598][T20728] netlink: 14 bytes leftover after parsing attributes in process `syz.4.3044'. [ 508.635907][T20224] 8021q: adding VLAN 0 to HW filter on device bond0 [ 508.703995][T20728] team0 (unregistering): Port device bridge3 removed [ 508.747200][T20728] team0 (unregistering): Port device bridge4 removed [ 508.780394][T20728] team0 (unregistering): Port device bridge7 removed [ 508.858536][T20224] 8021q: adding VLAN 0 to HW filter on device team0 [ 508.887215][ T6065] bridge0: port 1(bridge_slave_0) entered blocking state [ 508.894525][ T6065] bridge0: port 1(bridge_slave_0) entered forwarding state [ 508.915283][ T6065] bridge0: port 2(bridge_slave_1) entered blocking state [ 508.922524][ T6065] bridge0: port 2(bridge_slave_1) entered forwarding state [ 509.207798][T20741] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3047'. [ 509.314822][T20741] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3047'. [ 509.772748][T20776] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3054'. [ 509.797189][T20765] netlink: 156 bytes leftover after parsing attributes in process `syz.4.3051'. [ 510.618346][T20224] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 510.740618][T20805] lo speed is unknown, defaulting to 1000 [ 511.083645][ T30] audit: type=1800 audit(1784471369.004:12): pid=20789 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.3055" name="memory.events" dev="tmpfs" ino=3088 res=0 errno=0 [ 511.204310][T20224] veth0_vlan: entered promiscuous mode [ 511.297136][T20821] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3063'. [ 511.373280][T20224] veth1_vlan: entered promiscuous mode [ 511.604510][T20224] veth0_macvtap: entered promiscuous mode [ 511.663060][T20224] veth1_macvtap: entered promiscuous mode [ 511.947087][T20224] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 512.024928][T20224] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 512.157236][ T6899] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 512.174440][ T6899] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 512.194821][ T6899] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 512.218187][ T6899] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 512.265871][T20859] netlink: 14 bytes leftover after parsing attributes in process `syz.4.3069'. [ 512.543756][T20872] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 512.587519][T20871] netlink: 104 bytes leftover after parsing attributes in process `syz.3.3070'. [ 512.623462][T20872] netlink: 'syz.3.3070': attribute type 8 has an invalid length. [ 512.652895][T20871] netlink: 'syz.3.3070': attribute type 8 has an invalid length. [ 512.745800][T20876] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3071'. [ 512.756665][ T1157] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 512.794933][ T1157] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 513.001442][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 513.017767][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 513.747758][T20910] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3078'. [ 513.967846][ T5625] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 513.984027][ T5625] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 513.994347][ T5625] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 514.013477][ T5625] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 514.023656][ T5625] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 514.327116][T20930] lo: entered promiscuous mode [ 514.352623][T20930] tunl0: entered promiscuous mode [ 514.390503][T20930] gre0: entered promiscuous mode [ 514.455670][T20930] gretap0: entered promiscuous mode [ 514.522626][T20930] erspan0: entered promiscuous mode [ 514.574846][T20930] ip_vti0: entered promiscuous mode [ 514.591983][T20930] ip6_vti0: entered promiscuous mode [ 514.616746][T20930] sit0: entered promiscuous mode [ 514.645009][T20930] ip6tnl0: entered promiscuous mode [ 514.675158][T20930] ip6gre0: entered promiscuous mode [ 514.702102][T20930] syz_tun: entered promiscuous mode [ 514.719646][T20930] ip6gretap0: entered promiscuous mode [ 514.730911][T20930] bridge0: port 2(bridge_slave_1) entered disabled state [ 514.738749][T20930] bridge0: port 1(bridge_slave_0) entered disabled state [ 514.749532][T20930] bridge0: entered promiscuous mode [ 514.760558][T20930] vcan0: entered promiscuous mode [ 514.767619][T20930] bond0: entered promiscuous mode [ 514.773325][T20930] bond_slave_0: entered promiscuous mode [ 514.780330][T20930] bond_slave_1: entered promiscuous mode [ 514.791008][T20930] team0: entered promiscuous mode [ 514.810708][T20930] team_slave_0: entered promiscuous mode [ 514.835815][T20930] team_slave_1: entered promiscuous mode [ 514.854623][T20930] dummy0: entered promiscuous mode [ 514.876986][T20930] nlmon0: entered promiscuous mode [ 514.902785][T20930] batadv0: entered promiscuous mode [ 514.921372][T20930] vxcan0: entered promiscuous mode [ 514.929562][T20930] vxcan1: entered promiscuous mode [ 514.936253][T20930] veth0: entered promiscuous mode [ 514.952591][T20930] veth1: entered promiscuous mode [ 514.981440][T20930] wg0: entered promiscuous mode [ 514.993637][T20930] wg1: entered promiscuous mode [ 515.001577][T20930] wg2: entered promiscuous mode [ 515.010868][T20930] veth0_to_bridge: entered promiscuous mode [ 515.026594][T20930] veth1_to_bridge: entered promiscuous mode [ 515.039928][T20930] veth0_to_bond: entered promiscuous mode [ 515.049593][T20930] veth1_to_bond: entered promiscuous mode [ 515.060947][T20930] veth0_to_team: entered promiscuous mode [ 515.072856][T20930] veth1_to_team: entered promiscuous mode [ 515.084402][T20930] veth0_to_batadv: entered promiscuous mode [ 515.093073][T20930] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 515.101447][T20930] batadv_slave_0: entered promiscuous mode [ 515.110415][T20930] veth1_to_batadv: entered promiscuous mode [ 515.123668][T20930] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 515.132689][T20952] sctp: [Deprecated]: syz.0.3084 (pid 20952) Use of int in maxseg socket option. [ 515.132689][T20952] Use struct sctp_assoc_value instead [ 515.147339][T20930] batadv_slave_1: entered promiscuous mode [ 515.162383][T20930] xfrm0: entered promiscuous mode [ 515.172131][T20952] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3084'. [ 515.181753][T20930] veth0_to_hsr: entered promiscuous mode [ 515.193031][T20930] veth1_to_hsr: entered promiscuous mode [ 515.203840][T20930] hsr0: entered promiscuous mode [ 515.211655][T20930] veth1_virt_wifi: entered promiscuous mode [ 515.221117][T20930] veth0_virt_wifi: entered promiscuous mode [ 515.232044][T20930] virt_wifi0: entered promiscuous mode [ 515.247149][T20930] vlan0: entered promiscuous mode [ 515.255796][T20930] vlan1: entered promiscuous mode [ 515.263869][T20930] macvlan0: entered promiscuous mode [ 515.272895][T20930] macvlan1: entered promiscuous mode [ 515.283088][T20930] ipvlan0: entered promiscuous mode [ 515.288542][T20930] ipvlan1: entered promiscuous mode [ 515.306430][T20930] macvtap0: entered promiscuous mode [ 515.315832][T20930] macsec0: entered promiscuous mode [ 515.323983][T20930] geneve0: entered promiscuous mode [ 515.334512][T20930] geneve1: entered promiscuous mode [ 515.344753][T20930] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 515.356766][T20930] netdevsim netdevsim1 netdevsim1: entered promiscuous mode [ 515.370508][T20930] netdevsim netdevsim1 netdevsim2: entered promiscuous mode [ 515.383478][T20930] netdevsim netdevsim1 netdevsim3: entered promiscuous mode [ 515.399739][T20930] mac80211_hwsim hwsim38 wlan0: entered promiscuous mode [ 515.414043][T20930] mac80211_hwsim hwsim39 wlan1: entered promiscuous mode [ 515.615397][ T5841] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 515.651342][ T5841] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 515.682341][ T5841] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 515.697829][T20963] x_tables: duplicate underflow at hook 3 [ 515.727022][ T5841] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 515.956082][T20969] syzkaller0: entered promiscuous mode [ 515.961800][T20969] syzkaller0: entered allmulticast mode [ 516.069725][ T5633] Bluetooth: hci2: command tx timeout [ 516.204139][T20986] netlink: 76 bytes leftover after parsing attributes in process `syz.4.3090'. [ 518.149298][ T5633] Bluetooth: hci2: command tx timeout [ 518.943529][T20916] lo speed is unknown, defaulting to 1000 [ 518.982170][T20992] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3091'. [ 520.034593][T21062] netlink: 'syz.4.3096': attribute type 1 has an invalid length. [ 520.229247][ T5633] Bluetooth: hci2: command tx timeout [ 520.790942][T21098] openvswitch: netlink: IP tunnel TTL not specified. [ 520.830660][T21098] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 520.898019][T20916] bridge0: port 1(bridge_slave_0) entered blocking state [ 520.933440][T20916] bridge0: port 1(bridge_slave_0) entered disabled state [ 520.964422][T20916] bridge_slave_0: entered allmulticast mode [ 520.994055][T20916] bridge_slave_0: entered promiscuous mode [ 521.004691][T21106] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3102'. [ 521.043476][T20916] bridge0: port 2(bridge_slave_1) entered blocking state [ 521.052456][T21108] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3103'. [ 521.072933][T20916] bridge0: port 2(bridge_slave_1) entered disabled state [ 521.095168][T20916] bridge_slave_1: entered allmulticast mode [ 521.139303][T20916] bridge_slave_1: entered promiscuous mode [ 521.197243][T21106] bridge0: port 2(bridge_slave_1) entered disabled state [ 521.295455][T21106] bridge_slave_1 (unregistering): left allmulticast mode [ 521.304726][T21115] netlink: 216 bytes leftover after parsing attributes in process `syz.4.3104'. [ 521.331414][T21106] bridge_slave_1 (unregistering): left promiscuous mode [ 521.361395][T21106] bridge0: port 2(bridge_slave_1) entered disabled state [ 521.486551][T21111] vlan2: entered promiscuous mode [ 522.061069][T21105] lo: left promiscuous mode [ 522.069331][T21105] tunl0: left promiscuous mode [ 522.074365][T21105] gre0: left promiscuous mode [ 522.083202][T21105] gretap0: left promiscuous mode [ 522.088429][T21105] erspan0: left promiscuous mode [ 522.095243][T21105] ip_vti0: left promiscuous mode [ 522.101141][T21105] ip6_vti0: left promiscuous mode [ 522.106577][T21105] sit0: left promiscuous mode [ 522.112694][T21105] ip6tnl0: left promiscuous mode [ 522.118055][T21105] ip6gre0: left promiscuous mode [ 522.123799][T21105] syz_tun: left promiscuous mode [ 522.130038][T21105] ip6gretap0: left promiscuous mode [ 522.135650][T21105] vcan0: left promiscuous mode [ 522.141236][T21105] bond0: left promiscuous mode [ 522.146617][T21105] team0: left promiscuous mode [ 522.159973][T21105] dummy0: left promiscuous mode [ 522.165152][T21105] nlmon0: left promiscuous mode [ 522.170908][T21105] batadv0: left promiscuous mode [ 522.176382][T21105] vxcan0: left promiscuous mode [ 522.182171][T21105] vxcan1: left promiscuous mode [ 522.187894][T21105] veth0: left promiscuous mode [ 522.193838][T21105] veth1: left promiscuous mode [ 522.200124][T21105] wg0: left promiscuous mode [ 522.205162][T21105] wg1: left promiscuous mode [ 522.210710][T21105] wg2: left promiscuous mode [ 522.215704][T21105] veth0_to_bridge: left promiscuous mode [ 522.227518][T21105] veth1_to_bridge: left promiscuous mode [ 522.239817][T21105] veth0_to_bond: left promiscuous mode [ 522.249665][T21105] bond_slave_0: left promiscuous mode [ 522.261916][T21105] veth1_to_bond: left promiscuous mode [ 522.278337][T21105] bond_slave_1: left promiscuous mode [ 522.284656][T21105] veth0_to_team: left promiscuous mode [ 522.292022][T21105] team_slave_0: left promiscuous mode [ 522.297663][T21105] veth1_to_team: left promiscuous mode [ 522.305560][T21105] team_slave_1: left promiscuous mode [ 522.309984][ T5633] Bluetooth: hci2: command tx timeout [ 522.313319][T21105] veth0_to_batadv: left promiscuous mode [ 522.323020][T21105] batadv_slave_0: left promiscuous mode [ 522.329411][T21105] veth1_to_batadv: left promiscuous mode [ 522.336178][T21105] batadv_slave_1: left promiscuous mode [ 522.342366][T21105] xfrm0: left promiscuous mode [ 522.347396][T21105] veth0_to_hsr: left promiscuous mode [ 522.353706][T21105] veth1_to_hsr: left promiscuous mode [ 522.359563][T21105] hsr0: left promiscuous mode [ 522.364407][T21105] veth1_virt_wifi: left promiscuous mode [ 522.371916][T21105] veth0_virt_wifi: left promiscuous mode [ 522.378456][T21105] virt_wifi0: left promiscuous mode [ 522.384289][T21105] vlan0: left promiscuous mode [ 522.390461][T21105] vlan1: left promiscuous mode [ 522.395673][T21105] macvlan0: left promiscuous mode [ 522.402640][T21105] macvlan1: left promiscuous mode [ 522.407865][T21105] ipvlan0: left promiscuous mode [ 522.413237][T21105] ipvlan1: left promiscuous mode [ 522.418542][T21105] macvtap0: left promiscuous mode [ 522.423988][T21105] macsec0: left promiscuous mode [ 522.429230][T21105] geneve0: left promiscuous mode [ 522.434332][T21105] geneve1: left promiscuous mode [ 522.439739][T21105] mac80211_hwsim hwsim38 wlan0: left promiscuous mode [ 522.446748][T21105] mac80211_hwsim hwsim39 wlan1: left promiscuous mode [ 522.533769][T21120] tipc: Enabling of bearer rejected, failed to enable media [ 522.569888][T20916] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 522.617153][T20916] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 522.772259][T20916] team0: Port device team_slave_0 added [ 522.822302][T20916] team0: Port device team_slave_1 added [ 522.908694][T21143] x_tables: duplicate underflow at hook 1 [ 522.972413][T20916] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 522.993726][T20916] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 523.057862][ T5614] IPVS: starting estimator thread 0... [ 523.078156][T20916] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 523.122193][T20916] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 523.157575][T20916] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 523.189205][T21156] IPVS: using max 26 ests per chain, 62400 per kthread [ 523.217648][T20916] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 523.637406][T20916] hsr_slave_0: entered promiscuous mode [ 523.657151][T20916] hsr_slave_1: entered promiscuous mode [ 523.686942][T20916] debugfs: 'hsr0' already exists in 'hsr' [ 523.706745][T20916] Cannot create hsr debugfs directory [ 524.309111][T21207] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3123'. [ 524.343693][T20916] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 524.622592][T21219] netlink: 'syz.0.3127': attribute type 1 has an invalid length. [ 524.631166][T21219] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3127'. [ 524.643391][T21219] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3127'. [ 524.673751][T20916] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 524.751005][T21225] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 524.840737][T21226] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3128'. [ 524.853982][T21226] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3128'. [ 524.969427][T20916] bond0: (slave netdevsim1): Releasing backup interface [ 525.015052][T20916] netdevsim netdevsim3 netdevsim1 (unregistering): left allmulticast mode [ 525.053883][T20916] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 525.230217][T20916] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 525.276653][T21233] lo speed is unknown, defaulting to 1000 [ 525.367007][T21246] netlink: 'syz.1.3133': attribute type 4 has an invalid length. [ 525.407092][T21246] netlink: 'syz.1.3133': attribute type 4 has an invalid length. [ 526.731020][T21265] tipc: Enabled bearer , priority 0 [ 526.800213][T21269] syzkaller0: entered promiscuous mode [ 526.805895][T21269] syzkaller0: entered allmulticast mode [ 526.813955][T21269] tipc: Resetting bearer [ 526.862183][T21260] tipc: Resetting bearer [ 527.110396][T21289] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3140'. [ 527.974616][T21297] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3142'. [ 529.363535][T21260] tipc: Disabling bearer [ 529.380626][ T5614] tipc: Node number set to 3358439558 [ 529.462290][T21300] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 529.489076][T21300] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 529.554723][T20916] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 529.586048][T20916] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 529.635862][T20916] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 529.649875][T20916] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 529.667763][T21309] netlink: 7 bytes leftover after parsing attributes in process `syz.1.3144'. [ 529.739506][T20916] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 529.746369][T21300] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 529.761210][T21300] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 529.778030][T20916] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 529.796972][T20916] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 529.833846][T20916] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 529.850827][T21300] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 529.877896][T21300] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 530.201939][T20916] 8021q: adding VLAN 0 to HW filter on device bond0 [ 530.261473][T21341] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3149'. [ 530.287302][T20916] 8021q: adding VLAN 0 to HW filter on device team0 [ 530.321078][T21346] openvswitch: netlink: Geneve opt len 1 is not a multiple of 4. [ 530.357067][T21166] bridge0: port 1(bridge_slave_0) entered blocking state [ 530.364434][T21166] bridge0: port 1(bridge_slave_0) entered forwarding state [ 530.429260][T21166] bridge0: port 2(bridge_slave_1) entered blocking state [ 530.436598][T21166] bridge0: port 2(bridge_slave_1) entered forwarding state [ 531.050725][T21367] netlink: 76 bytes leftover after parsing attributes in process `syz.1.3154'. [ 531.893727][T20916] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 532.053778][T20916] veth0_vlan: entered promiscuous mode [ 532.096319][T20916] veth1_vlan: entered promiscuous mode [ 532.222096][T20916] veth0_macvtap: entered promiscuous mode [ 532.267775][T20916] veth1_macvtap: entered promiscuous mode [ 532.360141][T20916] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 532.408342][T20916] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 532.492560][T21167] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 532.523022][T21167] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 532.552272][T21167] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 532.579252][T21167] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 533.011814][T21437] xt_hashlimit: size too large, truncated to 1048576 [ 533.238106][T17798] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 533.274737][T17798] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 533.384413][T21433] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3167'. [ 533.399018][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 533.413936][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 533.567822][T21311] block nbd64: NBD_DISCONNECT [ 533.813406][T21465] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3170'. [ 533.884387][T21311] udevd[21311]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 534.525538][T21490] netlink: 'syz.3.3174': attribute type 4 has an invalid length. [ 534.798445][T21506] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 534.817297][T21506] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 534.834071][T21506] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 534.844936][T21506] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 534.854294][T21506] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 534.961204][T21512] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 534.973401][T21502] netlink: 'syz.1.3176': attribute type 10 has an invalid length. [ 535.441248][T21533] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 536.007933][T21504] lo speed is unknown, defaulting to 1000 [ 536.138169][T21561] netlink: 76 bytes leftover after parsing attributes in process `syz.1.3186'. [ 536.422540][T21574] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3188'. [ 536.817554][T21504] bridge0: port 1(bridge_slave_0) entered blocking state [ 536.825093][T21504] bridge0: port 1(bridge_slave_0) entered disabled state [ 536.835588][T21504] bridge_slave_0: entered allmulticast mode [ 536.844560][T21504] bridge_slave_0: entered promiscuous mode [ 536.856656][T21504] bridge0: port 2(bridge_slave_1) entered blocking state [ 536.874309][T21504] bridge0: port 2(bridge_slave_1) entered disabled state [ 536.889110][T21504] bridge_slave_1: entered allmulticast mode [ 536.907483][T21504] bridge_slave_1: entered promiscuous mode [ 536.960188][ T5633] Bluetooth: hci1: command tx timeout [ 537.051675][T21504] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 537.082442][T21591] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 537.095628][T21504] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 537.244137][T21504] team0: Port device team_slave_0 added [ 537.278327][T21504] team0: Port device team_slave_1 added [ 537.363440][T21504] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 537.385113][T21504] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 537.471096][T21504] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 537.517017][T21504] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 537.550043][T21504] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 537.606024][T21600] sctp: [Deprecated]: syz.3.3188 (pid 21600) Use of int in max_burst socket option deprecated. [ 537.606024][T21600] Use struct sctp_assoc_value instead [ 537.667943][T21504] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 537.908654][T21504] hsr_slave_0: entered promiscuous mode [ 537.928602][T21504] hsr_slave_1: entered promiscuous mode [ 537.946462][T21504] debugfs: 'hsr0' already exists in 'hsr' [ 537.967190][T21504] Cannot create hsr debugfs directory [ 538.341333][T21626] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3196'. [ 538.371838][T21626] netlink: 164 bytes leftover after parsing attributes in process `syz.1.3196'. [ 538.414967][T21626] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3196'. [ 538.551590][T21636] netlink: 'syz.0.3199': attribute type 12 has an invalid length. [ 538.567867][T21506] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 538.584098][T21506] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 538.595336][T21506] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 538.607039][T21506] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 538.615182][T21506] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 539.029057][ T5633] Bluetooth: hci1: command tx timeout [ 539.068170][T21656] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3201'. [ 539.267305][T21504] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 539.332354][T21504] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 539.650641][T21504] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 539.661189][T21504] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 539.716770][T21675] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3205'. [ 539.767312][T21675] netlink: 260 bytes leftover after parsing attributes in process `syz.3.3205'. [ 539.935520][T21504] bond0: (slave netdevsim1): Releasing backup interface [ 539.997348][T21504] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 540.041817][T21504] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 540.090591][T21688] netlink: 'syz.3.3207': attribute type 83 has an invalid length. [ 540.125446][T21689] netlink: 'syz.0.3208': attribute type 1 has an invalid length. [ 540.320462][T21695] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3208'. [ 540.434622][T21694] bond2: (slave geneve2): making interface the new active one [ 540.465863][T21694] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 540.529978][T21695] 8021q: adding VLAN 0 to HW filter on device bond2 [ 540.708965][ T5633] Bluetooth: hci4: command tx timeout [ 540.834930][T21708] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3210'. [ 540.865829][T21167] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 540.896348][T21167] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 540.921331][T21167] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 540.948739][T21167] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 541.016008][T21715] xt_hashlimit: size too large, truncated to 1048576 [ 541.092296][T21504] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 541.109036][ T5633] Bluetooth: hci1: command tx timeout [ 541.125223][T21504] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 541.336533][T21634] lo speed is unknown, defaulting to 1000 [ 541.524750][T21732] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3213'. [ 541.658330][T21736] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3213'. [ 541.688558][T21736] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3213'. [ 542.199259][T21166] bond0 (unregistering): Released all slaves [ 542.212759][T21166] bond1 (unregistering): Released all slaves [ 542.230019][T21166] bond2 (unregistering): Released all slaves [ 542.247637][T21166] bond3 (unregistering): Released all slaves [ 542.264408][T21166] bond4 (unregistering): Released all slaves [ 542.293985][T21166] bond5 (unregistering): Released all slaves [ 542.310467][T21166] bond6 (unregistering): Released all slaves [ 542.326345][T21166] bond7 (unregistering): Released all slaves [ 542.342990][T21166] bond8 (unregistering): Released all slaves [ 542.367112][T21166] bond9 (unregistering): Released all slaves [ 542.384795][T21166] bond10 (unregistering): Released all slaves [ 542.454955][T21736] veth3: entered allmulticast mode [ 542.789135][ T5633] Bluetooth: hci4: command tx timeout [ 542.835980][T21753] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3218'. [ 542.926539][T21166] ¿: left promiscuous mode [ 542.938492][T21756] openvswitch: netlink: IP tunnel TTL not specified. [ 543.165769][T21166] tipc: Left network mode [ 543.189190][ T5633] Bluetooth: hci1: command tx timeout [ 543.309326][T21773] netlink: 'syz.1.3220': attribute type 7 has an invalid length. [ 543.375209][T21504] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 543.541659][T21504] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 543.557599][T21764] bridge_slave_1: left allmulticast mode [ 543.566029][T21764] bridge_slave_1: left promiscuous mode [ 543.579173][T21764] bridge0: port 2(bridge_slave_1) entered disabled state [ 543.613825][T21764] bridge_slave_0: left allmulticast mode [ 543.650960][T21764] bridge_slave_0: left promiscuous mode [ 543.681438][T21764] bridge0: port 1(bridge_slave_0) entered disabled state [ 543.810068][T21504] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 543.875508][T21504] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 543.920597][T21504] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 543.965808][T21504] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 544.135869][T21504] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 544.151246][T21504] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 544.869487][ T5633] Bluetooth: hci4: command tx timeout [ 545.075644][T21634] bridge0: port 1(bridge_slave_0) entered blocking state [ 545.107574][T21634] bridge0: port 1(bridge_slave_0) entered disabled state [ 545.131599][T21634] bridge_slave_0: entered allmulticast mode [ 545.153438][T21634] bridge_slave_0: entered promiscuous mode [ 545.178261][T21634] bridge0: port 2(bridge_slave_1) entered blocking state [ 545.221258][T21634] bridge0: port 2(bridge_slave_1) entered disabled state [ 545.242415][T21634] bridge_slave_1: entered allmulticast mode [ 545.273023][T21634] bridge_slave_1: entered promiscuous mode [ 545.534225][T21634] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 545.564120][T21634] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 545.700902][T21868] netlink: 'syz.3.3236': attribute type 29 has an invalid length. [ 545.745059][T21634] team0: Port device team_slave_0 added [ 545.814831][T21634] team0: Port device team_slave_1 added [ 545.855341][T21868] syzkaller1: entered promiscuous mode [ 545.862350][T21868] syzkaller1: entered allmulticast mode [ 546.037254][T21634] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 546.085547][T21634] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 546.180524][T21634] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 546.214165][T21884] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input7 [ 546.590433][T21634] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 546.639669][T21634] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 546.696248][T21634] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 546.942203][T21906] openvswitch: netlink: nsh attr 251 is out of range max 3 [ 546.963425][ T5633] Bluetooth: hci4: command tx timeout [ 547.008679][T21906] openvswitch: netlink: nsh attr 251 is out of range max 3 [ 547.127323][T21911] __nla_validate_parse: 1 callbacks suppressed [ 547.127343][T21911] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3244'. [ 547.234884][T21634] hsr_slave_0: entered promiscuous mode [ 547.251255][T21634] hsr_slave_1: entered promiscuous mode [ 547.257708][T21634] debugfs: 'hsr0' already exists in 'hsr' [ 547.264157][T21634] Cannot create hsr debugfs directory [ 547.331011][T21917] bond3: (slave syz_tun): Enslaving as an active interface with an up link [ 547.354918][T21504] 8021q: adding VLAN 0 to HW filter on device bond0 [ 547.619822][T21166] hsr_slave_0: left promiscuous mode [ 547.632196][T21166] hsr_slave_1: left promiscuous mode [ 547.638155][T21936] netlink: 'syz.0.3248': attribute type 3 has an invalid length. [ 547.654912][T21166] veth1_vlan: left promiscuous mode [ 547.664070][T21166] veth0_vlan: left promiscuous mode [ 548.664725][T21504] 8021q: adding VLAN 0 to HW filter on device team0 [ 548.834487][T21165] bridge0: port 1(bridge_slave_0) entered blocking state [ 548.841796][T21165] bridge0: port 1(bridge_slave_0) entered forwarding state [ 548.893526][T21983] netlink: 80 bytes leftover after parsing attributes in process `syz.1.3253'. [ 549.076843][T21983] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.3253'. [ 549.135940][T21165] bridge0: port 2(bridge_slave_1) entered blocking state [ 549.143191][T21165] bridge0: port 2(bridge_slave_1) entered forwarding state [ 549.416509][T22002] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3258'. [ 549.473864][T22005] netlink: 120 bytes leftover after parsing attributes in process `syz.1.3257'. [ 549.490919][T22006] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3257'. [ 549.511877][T21166] IPVS: stop unused estimator thread 0... [ 549.526224][T22005] netlink: 120 bytes leftover after parsing attributes in process `syz.1.3257'. [ 549.559262][T22006] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3257'. [ 549.841699][T22022] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3259'. [ 549.912074][T22022] gretap0: entered promiscuous mode [ 550.292397][T21634] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 550.353485][T21634] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 550.401509][T22037] tipc: Failed to obtain node identity [ 550.424012][T22037] tipc: Enabling of bearer rejected, failed to enable media [ 550.473059][T21634] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 550.523582][T21634] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 550.550056][T21634] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 550.588462][T21634] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 550.634739][T22048] veth0: entered promiscuous mode [ 550.671980][T21634] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 550.697120][T22048] netlink: 'syz.3.3264': attribute type 1 has an invalid length. [ 550.727557][T21634] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 550.934971][T22064] openvswitch: netlink: Message has 4 unknown bytes. [ 550.942232][T22064] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 550.966105][T22064] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3266'. [ 551.007423][T22064] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 551.056352][T22064] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 551.121559][T22064] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 551.140001][T22064] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 551.282722][T21504] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 551.300841][T22038] netlink: 'syz.1.3263': attribute type 8 has an invalid length. [ 551.328205][T22042] veth0: left promiscuous mode [ 551.574536][T21634] 8021q: adding VLAN 0 to HW filter on device bond0 [ 551.816064][T21634] 8021q: adding VLAN 0 to HW filter on device team0 [ 551.868581][ T153] bridge0: port 1(bridge_slave_0) entered blocking state [ 551.875857][ T153] bridge0: port 1(bridge_slave_0) entered forwarding state [ 551.921899][ T153] bridge0: port 2(bridge_slave_1) entered blocking state [ 551.929253][ T153] bridge0: port 2(bridge_slave_1) entered forwarding state [ 552.646214][T21504] veth0_vlan: entered promiscuous mode [ 552.653188][T22117] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3271'. [ 552.677283][T22118] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 552.742974][T21504] veth1_vlan: entered promiscuous mode [ 552.881082][T21504] veth0_macvtap: entered promiscuous mode [ 552.952092][T21504] veth1_macvtap: entered promiscuous mode [ 553.015463][T21504] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 553.068198][T21504] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 553.092117][ T6077] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 553.126085][ T6077] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 553.159677][ T6077] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 553.182828][ T6077] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 553.496622][ T6070] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 553.537482][ T6070] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 553.740126][T17800] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 553.776760][T17800] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 553.847895][T21634] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 554.178936][T22173] lo speed is unknown, defaulting to 1000 [ 554.887486][T21634] veth0_vlan: entered promiscuous mode [ 554.937310][T21634] veth1_vlan: entered promiscuous mode [ 555.030090][T22173] dvmrp0: entered allmulticast mode [ 555.061145][T21634] veth0_macvtap: entered promiscuous mode [ 555.087545][ T6077] dvmrp0: left allmulticast mode [ 555.305757][T21634] veth1_macvtap: entered promiscuous mode [ 555.457655][T21634] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 555.586419][T21634] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 555.647321][ T6070] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 555.678012][ T6070] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 555.754606][T22217] netlink: 'syz.0.3287': attribute type 1 has an invalid length. [ 555.776577][ T6070] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 555.801889][ T6070] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 555.826217][T22209] lo speed is unknown, defaulting to 1000 [ 556.178502][ T153] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 556.211644][ T153] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 556.714079][T17798] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 556.754059][T17798] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 556.776862][T22257] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3293'. [ 556.890251][T22253] lo speed is unknown, defaulting to 1000 [ 556.905221][T22257] netlink: 'syz.0.3293': attribute type 1 has an invalid length. [ 557.296840][T22257] netlink: 'syz.0.3293': attribute type 3 has an invalid length. [ 557.332275][T22257] netlink: 3 bytes leftover after parsing attributes in process `syz.0.3293'. [ 557.574945][T22259] 8021q: adding VLAN 0 to HW filter on device bond5 [ 557.627797][T22259] bond4: (slave bond5): making interface the new active one [ 557.654194][T22259] bond4: (slave bond5): Enslaving as an active interface with an up link [ 557.933423][T22307] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3301'. [ 558.267275][T22296] syzkaller0: entered promiscuous mode [ 558.295376][T22296] syzkaller0: entered allmulticast mode [ 558.391178][T22307] syzkaller1: entered promiscuous mode [ 558.402760][T22307] syzkaller1: entered allmulticast mode [ 558.422183][T22325] netlink: 'syz.5.3302': attribute type 12 has an invalid length. [ 558.527417][T22325] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 561.234772][T22352] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3306'. [ 561.285921][T22352] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3306'. [ 561.334057][T22355] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3307'. [ 563.818599][T22362] syzkaller1: entered promiscuous mode [ 563.827495][T22362] syzkaller1: entered allmulticast mode [ 563.871937][T22370] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3311'. [ 563.881384][T22362] tipc: Started in network mode [ 563.881462][T22362] tipc: Node identity 5a24274ec9e6, cluster identity 4711 [ 563.881643][T22362] tipc: Enabled bearer , priority 0 [ 563.905450][T22370] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3311'. [ 563.920969][T22361] tipc: Disabling bearer [ 564.396934][T22390] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3314'. [ 564.547508][T22389] lo speed is unknown, defaulting to 1000 [ 565.008051][T22409] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3320'. [ 565.642449][T22427] bridge0: port 3(syz_tun) entered blocking state [ 565.675353][T22427] bridge0: port 3(syz_tun) entered disabled state [ 565.722924][T22427] syz_tun: entered allmulticast mode [ 565.732678][T22427] syz_tun: entered promiscuous mode [ 565.757669][T22435] netlink: zone id is out of range [ 565.773110][T22427] bridge0: port 3(syz_tun) entered blocking state [ 565.779767][T22427] bridge0: port 3(syz_tun) entered forwarding state [ 565.789350][T22435] netlink: zone id is out of range [ 565.801488][T22435] netlink: zone id is out of range [ 565.816986][T22435] netlink: zone id is out of range [ 565.836417][T22435] netlink: zone id is out of range [ 565.859847][T22435] netlink: zone id is out of range [ 565.865205][T22435] netlink: zone id is out of range [ 565.871528][T22435] netlink: zone id is out of range [ 565.876815][T22435] netlink: zone id is out of range [ 565.892408][T22435] netlink: zone id is out of range [ 566.073008][T22447] macvlan0: entered promiscuous mode [ 566.093421][T22447] macvlan0: entered allmulticast mode [ 566.134275][T22447] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3328'. [ 566.167843][T22447] macvlan0 (unregistering): left promiscuous mode [ 566.203849][T22447] macvlan0 (unregistering): left allmulticast mode [ 566.452255][T22454] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3330'. [ 566.488137][T22454] x_tables: ip_tables: ah match: only valid for protocol 51 [ 566.975622][T22485] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3336'. [ 567.293456][T22493] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3339'. [ 567.341636][T22496] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3340'. [ 567.441908][T22502] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3339'. [ 567.575082][T22510] netlink: 'syz.4.3342': attribute type 1 has an invalid length. [ 568.401410][T22537] netlink: 'syz.0.3346': attribute type 10 has an invalid length. [ 568.592467][T22533] lo speed is unknown, defaulting to 1000 [ 569.159211][ T5730] IPVS: starting estimator thread 0... [ 569.165648][T21506] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 569.186234][T21506] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 569.195112][T21506] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 569.227480][T21506] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 569.252795][T21506] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 569.292128][T22554] IPVS: using max 29 ests per chain, 69600 per kthread [ 569.527889][T22552] __nla_validate_parse: 3 callbacks suppressed [ 569.527911][T22552] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3350'. [ 569.891593][T22572] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3353'. [ 570.042784][T22566] syzkaller0: entered promiscuous mode [ 570.107898][T22566] syzkaller0: entered allmulticast mode [ 570.147472][T22573] lo speed is unknown, defaulting to 1000 [ 570.174704][T22586] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3356'. [ 570.773314][T22551] lo speed is unknown, defaulting to 1000 [ 570.841688][T22608] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3359'. [ 571.354575][T21506] Bluetooth: hci6: command tx timeout [ 571.680045][T22640] bond0: entered promiscuous mode [ 571.722281][T22640] bond_slave_0: entered promiscuous mode [ 571.734969][T22647] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3366'. [ 571.767657][T22640] bond_slave_1: entered promiscuous mode [ 571.789034][T22647] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3366'. [ 571.822287][T22640] bond0: left promiscuous mode [ 571.845048][T22640] bond_slave_0: left promiscuous mode [ 571.877405][T22640] bond_slave_1: left promiscuous mode [ 572.042982][T22644] bond0: entered promiscuous mode [ 572.065127][T22644] bond_slave_0: entered promiscuous mode [ 572.078287][T22644] bond_slave_1: entered promiscuous mode [ 572.104653][T22644] bond0: left promiscuous mode [ 572.117112][T22644] bond_slave_0: left promiscuous mode [ 572.126841][T22644] bond_slave_1: left promiscuous mode [ 572.784551][T22696] sctp: [Deprecated]: syz.5.3373 (pid 22696) Use of int in max_burst socket option deprecated. [ 572.784551][T22696] Use struct sctp_assoc_value instead [ 572.896154][T22696] IPVS: set_ctl: invalid protocol: 103 127.0.0.1:20001 [ 573.259698][T22712] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3378'. [ 573.295898][T22551] bridge0: port 1(bridge_slave_0) entered blocking state [ 573.315650][T22551] bridge0: port 1(bridge_slave_0) entered disabled state [ 573.324920][T22551] bridge_slave_0: entered allmulticast mode [ 573.354311][T22551] bridge_slave_0: entered promiscuous mode [ 573.374458][T22551] bridge0: port 2(bridge_slave_1) entered blocking state [ 573.425380][T22551] bridge0: port 2(bridge_slave_1) entered disabled state [ 573.432709][T21506] Bluetooth: hci6: command tx timeout [ 573.459889][T22551] bridge_slave_1: entered allmulticast mode [ 573.471080][T22551] bridge_slave_1: entered promiscuous mode [ 573.525377][T22712] syzkaller0: entered promiscuous mode [ 573.536670][T22712] syzkaller0: entered allmulticast mode [ 573.605809][T22551] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 573.621579][T22551] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 573.747402][T22731] netlink: 'syz.0.3383': attribute type 4 has an invalid length. [ 573.813814][T22551] team0: Port device team_slave_0 added [ 573.833149][T22551] team0: Port device team_slave_1 added [ 573.951749][T22742] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3386'. [ 573.992414][T22738] syzkaller0: entered promiscuous mode [ 574.001121][T22738] syzkaller0: entered allmulticast mode [ 574.091713][T22742] 8021q: adding VLAN 0 to HW filter on device bond1 [ 574.107317][T22743] tipc: Enabling of bearer rejected, failed to enable media [ 574.140114][T22551] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 574.164957][T22551] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 574.243587][T22551] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 574.373862][T22753] macvlan2: entered promiscuous mode [ 574.388972][T22753] macvlan2: entered allmulticast mode [ 574.396197][T22753] bond1: entered promiscuous mode [ 574.411463][T22753] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 574.443415][T22753] bond1: left promiscuous mode [ 574.531332][T22551] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 574.566284][T22551] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 574.641185][T22551] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 574.741781][T22745] lo speed is unknown, defaulting to 1000 [ 574.857055][T22775] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3390'. [ 575.186270][T22551] hsr_slave_0: entered promiscuous mode [ 575.214811][T22551] hsr_slave_1: entered promiscuous mode [ 575.227421][T22551] debugfs: 'hsr0' already exists in 'hsr' [ 575.235372][T22551] Cannot create hsr debugfs directory [ 575.509215][T21506] Bluetooth: hci6: command tx timeout [ 575.516062][T22798] bond1: entered promiscuous mode [ 575.521490][T22798] bond1: entered allmulticast mode [ 575.527383][T22798] 8021q: adding VLAN 0 to HW filter on device bond1 [ 575.805270][T22805] bridge0: port 3(syz_tun) entered disabled state [ 575.857862][T22805] bridge0: port 2(bridge_slave_1) entered disabled state [ 575.865710][T22805] bridge0: port 1(bridge_slave_0) entered disabled state [ 576.090137][T22805] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 576.107793][T22805] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 576.419276][ T6077] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 576.444350][ T6077] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 576.525234][ T6077] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 576.548661][ T6077] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 576.721297][T22847] lo: entered allmulticast mode [ 576.746310][T22847] tunl0: entered allmulticast mode [ 576.755381][T22847] gre0: entered allmulticast mode [ 576.780065][T22847] gretap0: entered allmulticast mode [ 576.801340][T22847] erspan0: entered allmulticast mode [ 576.826401][T22847] ip_vti0: entered allmulticast mode [ 576.872582][T22847] ip6_vti0: entered allmulticast mode [ 576.932445][T22847] sit0: entered allmulticast mode [ 576.942823][T22847] ip6tnl0: entered allmulticast mode [ 576.950055][T22847] ip6gre0: entered allmulticast mode [ 576.956333][T22847] syz_tun: entered allmulticast mode [ 576.963163][T22847] ip6gretap0: entered allmulticast mode [ 576.984716][T22847] bridge0: entered allmulticast mode [ 576.991125][T22847] bond0: entered allmulticast mode [ 576.996464][T22847] bond_slave_0: entered allmulticast mode [ 577.003999][T22847] bond_slave_1: entered allmulticast mode [ 577.011998][T22847] team0: entered allmulticast mode [ 577.023398][T22847] team_slave_0: entered allmulticast mode [ 577.035295][T22861] netlink: 'syz.4.3405': attribute type 1 has an invalid length. [ 577.045091][T22847] team_slave_1: entered allmulticast mode [ 577.060438][T22847] dummy0: entered allmulticast mode [ 577.077680][T22847] nlmon0: entered allmulticast mode [ 577.096113][T22847] vxcan0: entered allmulticast mode [ 577.103254][T22847] vxcan1: entered allmulticast mode [ 577.115252][T22847] veth0: entered allmulticast mode [ 577.125164][T22847] veth1: entered allmulticast mode [ 577.132780][T22847] wg0: entered allmulticast mode [ 577.148704][T22847] wg1: entered allmulticast mode [ 577.155994][T22847] wg2: entered allmulticast mode [ 577.164265][T22847] veth0_to_bridge: entered allmulticast mode [ 577.172907][T22847] veth0_to_bond: entered allmulticast mode [ 577.181025][T22847] veth1_to_bond: entered allmulticast mode [ 577.193771][T22847] veth0_to_team: entered allmulticast mode [ 577.203228][T22847] veth1_to_team: entered allmulticast mode [ 577.212463][T22847] veth1_to_batadv: entered allmulticast mode [ 577.221427][T22847] batadv_slave_1: entered allmulticast mode [ 577.228209][T22847] xfrm0: entered allmulticast mode [ 577.236285][T22847] veth0_to_hsr: entered allmulticast mode [ 577.245003][T22847] hsr_slave_0: entered allmulticast mode [ 577.253125][T22847] veth1_to_hsr: entered allmulticast mode [ 577.264490][T22847] hsr_slave_1: entered allmulticast mode [ 577.272277][T22847] hsr0: entered allmulticast mode [ 577.278311][T22847] veth1_virt_wifi: entered allmulticast mode [ 577.286136][T22847] veth0_virt_wifi: entered allmulticast mode [ 577.295963][T22847] virt_wifi0: entered allmulticast mode [ 577.304415][T22847] veth1_vlan: entered allmulticast mode [ 577.314381][T22847] veth0_vlan: entered allmulticast mode [ 577.334773][T22847] vlan0: entered allmulticast mode [ 577.360933][T22847] vlan1: entered allmulticast mode [ 577.371779][T22847] macvlan1: entered allmulticast mode [ 577.384450][T22847] ipvlan0: entered allmulticast mode [ 577.397786][T22847] ipvlan1: entered allmulticast mode [ 577.404996][T22847] veth1_macvtap: entered allmulticast mode [ 577.413571][T22847] veth0_macvtap: entered allmulticast mode [ 577.421420][T22847] macvtap0: entered allmulticast mode [ 577.427649][T22847] macsec0: entered allmulticast mode [ 577.435633][T22847] geneve0: entered allmulticast mode [ 577.443652][T22847] geneve1: entered allmulticast mode [ 577.455570][T22847] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 577.466253][T22847] netdevsim netdevsim0 netdevsim1: entered allmulticast mode [ 577.476674][T22847] netdevsim netdevsim0 netdevsim2: entered allmulticast mode [ 577.487548][T22847] netdevsim netdevsim0 netdevsim3: entered allmulticast mode [ 577.500463][T22847] mac80211_hwsim hwsim36 wlan0: entered allmulticast mode [ 577.507940][T22847] mac80211_hwsim hwsim37 wlan1: entered allmulticast mode [ 577.517309][T22847] bond1: entered allmulticast mode [ 577.539897][T22847] veth2: entered allmulticast mode [ 577.545439][T22847] veth3: entered allmulticast mode [ 577.551527][T22847] gre1: entered allmulticast mode [ 577.558550][T22847] bond2: entered allmulticast mode [ 577.564765][T22847] geneve2: entered allmulticast mode [ 577.576850][T22847] bond3: entered allmulticast mode [ 577.584406][T22847] bond4: entered allmulticast mode [ 577.591337][T22847] bond5: entered allmulticast mode [ 577.599816][T21506] Bluetooth: hci6: command tx timeout [ 577.608082][T22847] gtp0: entered allmulticast mode [ 577.614735][T22847] gre2: entered allmulticast mode [ 577.621833][T22847] sit1: entered allmulticast mode [ 577.628142][T22847] vxlan0: entered allmulticast mode [ 577.782114][T22861] 8021q: adding VLAN 0 to HW filter on device bond1 [ 577.817380][T22863] bond1: (slave ip6gretap0): making interface the new active one [ 577.850255][T22863] bond1: (slave ip6gretap0): Enslaving as an active interface with an up link [ 578.117632][T22890] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3408'. [ 578.481130][T22903] bond1: (slave ip6gretap0): Releasing active interface [ 578.513874][T22903] bridge_slave_0: left allmulticast mode [ 578.521227][T22903] bridge_slave_0: left promiscuous mode [ 578.527349][T22903] bridge0: port 1(bridge_slave_0) entered disabled state [ 578.560730][T22903] bridge_slave_1: left allmulticast mode [ 578.574657][T22903] bridge_slave_1: left promiscuous mode [ 578.587981][T22903] bridge0: port 2(bridge_slave_1) entered disabled state [ 578.624394][T22903] bond0: (slave bond_slave_0): Releasing backup interface [ 578.653333][T22903] bond0: (slave bond_slave_1): Releasing backup interface [ 578.696178][T22903] team0: Port device team_slave_0 removed [ 578.727394][T22903] team0: Port device team_slave_1 removed [ 578.744206][T22903] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 578.768630][T22903] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 578.789867][T22916] block nbd0: reconnected socket [ 578.802371][T22903] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 578.820606][T22903] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 578.846933][T22903] net_ratelimit: 375 callbacks suppressed [ 578.846952][T22903] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 578.938397][T22906] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 579.026548][T22551] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 579.089856][T22551] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 579.146427][T22551] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 579.166889][T22921] netlink: 'syz.1.3413': attribute type 30 has an invalid length. [ 579.195597][T22551] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 579.227353][T22551] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 579.282174][T22551] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 579.300219][T22551] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 579.343798][T21506] block nbd0: Receive control failed (result -32) [ 579.354718][T22551] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 579.633863][T22941] netlink: 140 bytes leftover after parsing attributes in process `syz.1.3415'. [ 579.682347][T22935] syzkaller0: entered promiscuous mode [ 579.699005][T22935] syzkaller0: entered allmulticast mode [ 580.871119][ T5840] wlan1: Trigger new scan to find an IBSS to join [ 580.932536][T22981] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3420'. [ 580.973196][T22981] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3420'. [ 581.048277][T22987] Cannot find set identified by id 0 to match [ 583.164810][T22964] lo speed is unknown, defaulting to 1000 [ 583.177293][T22929] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 583.223892][T22551] 8021q: adding VLAN 0 to HW filter on device bond0 [ 583.763854][T22551] 8021q: adding VLAN 0 to HW filter on device team0 [ 583.812897][T23022] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3426'. [ 583.843437][ T6070] bridge0: port 1(bridge_slave_0) entered blocking state [ 583.850692][ T6070] bridge0: port 1(bridge_slave_0) entered forwarding state [ 583.910739][ T6070] wlan1: Trigger new scan to find an IBSS to join [ 583.945287][T17798] bridge0: port 2(bridge_slave_1) entered blocking state [ 583.952570][T17798] bridge0: port 2(bridge_slave_1) entered forwarding state [ 583.965723][T23022] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3426'. [ 583.989520][T23029] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3427'. [ 584.004503][T23022] netlink: 60 bytes leftover after parsing attributes in process `syz.5.3426'. [ 584.611142][T23048] netlink: 'syz.1.3429': attribute type 1 has an invalid length. [ 584.658465][T20325] udevd[20325]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 585.339853][T23078] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3434'. [ 585.879974][T22551] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 586.210319][T23112] bridge1: entered promiscuous mode [ 586.251997][T23112] bridge1: entered allmulticast mode [ 586.310426][T23116] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3440'. [ 586.435118][T23120] bond6: (slave vti0): The slave device specified does not support setting the MAC address [ 586.480143][T23120] bond6: (slave vti0): Error -95 calling set_mac_address [ 586.521507][T23121] tipc: Enabled bearer , priority 0 [ 586.545690][T23121] syzkaller0: entered promiscuous mode [ 586.554483][T23124] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.3442'. [ 586.565801][T23121] syzkaller0: entered allmulticast mode [ 586.610061][T23121] tipc: Resetting bearer [ 586.640272][T23119] tipc: Resetting bearer [ 586.737551][T23119] tipc: Disabling bearer [ 586.870446][T17798] wlan1: Trigger new scan to find an IBSS to join [ 586.927885][T22551] veth0_vlan: entered promiscuous mode [ 587.035126][T22551] veth1_vlan: entered promiscuous mode [ 587.105754][T23144] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3445'. [ 587.175070][T22551] veth0_macvtap: entered promiscuous mode [ 587.213306][T22551] veth1_macvtap: entered promiscuous mode [ 587.262288][T23150] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3446'. [ 587.295515][T22551] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 587.360225][T22551] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 587.393928][ T153] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 587.402236][T23155] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3446'. [ 587.417685][ T153] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 587.455921][T23155] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3446'. [ 587.460871][ T153] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 587.543183][ T153] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 587.684411][T23166] syzkaller0: entered promiscuous mode [ 587.721782][T23166] syzkaller0: entered allmulticast mode [ 587.822872][ T6077] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 587.870732][ T6077] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 587.898600][ T6077] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 588.021548][T17800] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 588.048636][T17800] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 588.202879][T23178] tipc: Enabling of bearer rejected, failed to enable media [ 588.482688][T23193] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3455'. [ 588.492828][T23193] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3455'. [ 589.255532][T23228] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3460'. [ 589.281747][T23227] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3459'. [ 589.732208][T23252] netlink: 'syz.1.3465': attribute type 8 has an invalid length. [ 590.191850][T23252] bond0: entered promiscuous mode [ 590.204555][T23252] bond_slave_0: entered promiscuous mode [ 590.227159][T23252] bond_slave_1: entered promiscuous mode [ 590.252147][T23252] gretap0: entered promiscuous mode [ 590.281096][T23252] team0: entered promiscuous mode [ 590.292202][T23252] team_slave_0: entered promiscuous mode [ 590.305115][T23252] team_slave_1: entered promiscuous mode [ 590.341941][T23252] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 590.371608][T23252] hsr1: Slave B (gretap0) is not up; please bring it up to get a fully working HSR network [ 590.383984][T23252] hsr1: Interlink (team0) is not up; please bring it up to get a fully working HSR network [ 590.402183][T23252] hsr1: entered promiscuous mode [ 590.412554][T23255] vxcan1: entered allmulticast mode [ 590.663575][T23287] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 590.827452][T23279] syzkaller0: entered promiscuous mode [ 590.845236][ T5840] nci: nci_ntf_packet: unsupported ntf opcode 0xf00 [ 590.857510][T23279] syzkaller0: entered allmulticast mode [ 591.177826][T23306] bridge1: entered promiscuous mode [ 591.184089][T23306] bridge1: entered allmulticast mode [ 591.194128][T23306] team0: Port device bridge1 added [ 591.332194][T23288] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 591.693808][T23339] bond2: entered promiscuous mode [ 591.748417][T23335] syzkaller0: entered promiscuous mode [ 591.779611][T23335] syzkaller0: entered allmulticast mode [ 592.272434][T23366] 8021q: adding VLAN 0 to HW filter on device bond1 [ 592.501578][T23381] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 592.868209][T23393] __nla_validate_parse: 5 callbacks suppressed [ 592.868230][T23393] netlink: 52 bytes leftover after parsing attributes in process `syz.5.3492'. [ 592.911675][T23400] syzkaller0: entered promiscuous mode [ 592.929087][T23400] syzkaller0: entered allmulticast mode [ 593.027941][T23409] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3494'. [ 593.233966][T23418] netlink: 36 bytes leftover after parsing attributes in process `syz.6.3496'. [ 593.277644][T23409] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3494'. [ 593.296674][T23418] netlink: 36 bytes leftover after parsing attributes in process `syz.6.3496'. [ 593.324199][T23418] netlink: 36 bytes leftover after parsing attributes in process `syz.6.3496'. [ 593.372015][T23418] netlink: 36 bytes leftover after parsing attributes in process `syz.6.3496'. [ 593.418291][T23418] netlink: 36 bytes leftover after parsing attributes in process `syz.6.3496'. [ 593.442688][T23410] netlink: 176 bytes leftover after parsing attributes in process `syz.4.3494'. [ 593.461408][T23418] netlink: 36 bytes leftover after parsing attributes in process `syz.6.3496'. [ 593.906000][T23454] netlink: 'syz.6.3500': attribute type 1 has an invalid length. [ 593.914974][T23452] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048) [ 594.233810][T23466] netlink: 'syz.4.3505': attribute type 1 has an invalid length. [ 594.267862][T23466] netlink: 'syz.4.3505': attribute type 1 has an invalid length. [ 594.381083][T23473] netlink: 'syz.4.3505': attribute type 1 has an invalid length. [ 594.960683][T23494] netlink: 'syz.5.3512': attribute type 30 has an invalid length. [ 595.076440][T23494] bond2: option arp_missed_max: mode dependency failed, not supported in mode 802.3ad(4) [ 595.137036][T23494] bond2 (unregistering): Released all slaves [ 596.042244][T23526] xt_CT: You must specify a L4 protocol and not use inversions on it [ 596.480025][T23545] netlink: 'syz.1.3522': attribute type 25 has an invalid length. [ 596.842439][T23551] lo speed is unknown, defaulting to 1000 [ 598.818660][T23612] __nla_validate_parse: 32 callbacks suppressed [ 598.818680][T23612] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3533'. [ 598.851544][T23612] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3533'. [ 598.861886][T23612] netlink: 'syz.5.3533': attribute type 6 has an invalid length. [ 598.872644][T23612] netlink: 'syz.5.3533': attribute type 5 has an invalid length. [ 598.906360][T23612] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3533'. [ 598.938138][T23612] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3533'. [ 598.989772][T23612] netlink: 'syz.5.3533': attribute type 6 has an invalid length. [ 599.026753][T23612] netlink: 'syz.5.3533': attribute type 5 has an invalid length. [ 599.165016][T23627] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3536'. [ 599.210097][T23626] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3536'. [ 599.315536][T23626] veth3: entered allmulticast mode [ 599.401144][T23627] veth5: entered allmulticast mode [ 599.415238][T23624] tc_dump_action: action bad kind [ 599.723688][T23636] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3538'. [ 600.049328][T23643] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3540'. [ 600.093473][T23643] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3540'. [ 600.125224][T23645] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3540'. [ 601.260756][T23674] netlink: 'syz.4.3546': attribute type 1 has an invalid length. [ 602.631953][T23698] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 602.673272][T23698] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 602.700475][T23716] ipt_ECN: cannot use operation on non-tcp rule [ 602.745589][T23717] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 603.226867][T23749] netlink: 'syz.4.3560': attribute type 1 has an invalid length. [ 603.267878][T23749] netlink: 'syz.4.3560': attribute type 3 has an invalid length. [ 603.355389][T23740] bridge0: port 3(syz_tun) entered blocking state [ 603.362097][T23740] bridge0: port 3(syz_tun) entered forwarding state [ 603.441271][T23745] netlink: 'syz.5.3556': attribute type 1 has an invalid length. [ 603.479807][T23745] netlink: 'syz.5.3556': attribute type 2 has an invalid length. [ 603.575578][T23761] syzkaller0: entered promiscuous mode [ 603.586871][T23761] syzkaller0: entered allmulticast mode [ 603.717214][T23761] netlink: 'syz.6.3562': attribute type 15 has an invalid length. [ 604.557037][T23801] netlink: 'syz.4.3570': attribute type 1 has an invalid length. [ 604.572975][T23802] __nla_validate_parse: 9 callbacks suppressed [ 604.572995][T23802] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3571'. [ 604.623326][T23802] netlink: 'syz.5.3571': attribute type 1 has an invalid length. [ 604.637949][T23802] netlink: 'syz.5.3571': attribute type 8 has an invalid length. [ 604.762238][T23817] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3570'. [ 604.790721][T23818] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3574'. [ 604.794268][T23801] 8021q: adding VLAN 0 to HW filter on device bond3 [ 604.872745][T23812] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3570'. [ 604.970006][T23822] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 604.988367][T23801] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3570'. [ 605.026552][T23822] bond3: (slave batadv1): making interface the new active one [ 605.046078][T23827] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3575'. [ 605.065697][T23822] bond3: (slave batadv1): Enslaving as an active interface with an up link [ 605.204760][T23818] netlink: 200 bytes leftover after parsing attributes in process `syz.6.3574'. [ 605.434455][T23835] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3576'. [ 605.712306][T20325] udevd[20325]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 606.031401][T23853] netlink: 'syz.0.3580': attribute type 1 has an invalid length. [ 606.077158][T23853] netlink: 220 bytes leftover after parsing attributes in process `syz.0.3580'. [ 606.346287][T23862] tipc: Enabling of bearer rejected, failed to enable media [ 606.747299][T23879] syzkaller1: entered promiscuous mode [ 606.759733][T23879] syzkaller1: entered allmulticast mode [ 606.862370][T23881] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 606.943255][T23885] tipc: Started in network mode [ 606.958557][T23885] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 606.972870][T23885] tipc: Enabled bearer , priority 0 [ 607.093346][T23892] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3590'. [ 607.296545][T23904] ip6gre0: left allmulticast mode [ 607.418718][T23909] block nbd0: reconnected socket [ 607.860332][T23935] openvswitch: netlink: Flow actions attr not present in new flow. [ 607.892268][T23932] veth3: entered promiscuous mode [ 607.911420][T23932] bond2: (slave veth3): Enslaving as an active interface with an up link [ 607.945161][T23937] 8021q: adding VLAN 0 to HW filter on device bond2 [ 608.091203][ T5758] tipc: Node number set to 11578026 [ 608.503095][T23964] netlink: 'syz.6.3607': attribute type 1 has an invalid length. [ 608.559206][T23964] netlink: 'syz.6.3607': attribute type 2 has an invalid length. [ 609.448245][T24012] syzkaller0: tun_chr_ioctl cmd 35108 [ 609.648659][T24023] __nla_validate_parse: 11 callbacks suppressed [ 609.648681][T24023] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3621'. [ 609.791795][T24030] netlink: 'syz.1.3624': attribute type 5 has an invalid length. [ 610.045827][T24040] netlink: 212408 bytes leftover after parsing attributes in process `syz.5.3626'. [ 610.090474][T24040] openvswitch: netlink: Message has 512 unknown bytes. [ 610.307684][T24053] netlink: 56 bytes leftover after parsing attributes in process `syz.5.3626'. [ 610.432685][T24056] netdevsim netdevsim6 netdevsim0: entered promiscuous mode [ 610.471525][T24056] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 610.508201][T24054] xt_hashlimit: size too large, truncated to 1048576 [ 610.852273][T24076] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3635'. [ 611.612740][T24104] tipc: Enabled bearer , priority 0 [ 611.646269][T24109] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3643'. [ 611.746372][T24109] vlan2: entered allmulticast mode [ 611.787339][T24109] bridge0: port 2(vlan2) entered blocking state [ 611.830529][T24109] bridge0: port 2(vlan2) entered disabled state [ 611.852853][T24117] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3644'. [ 611.873380][T24109] vlan2: entered promiscuous mode [ 611.897382][T24117] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3644'. [ 611.915990][T24124] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3645'. [ 611.927519][T24118] tipc: Resetting bearer [ 611.983301][T24100] tipc: Disabling bearer [ 612.094787][T24130] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3646'. [ 612.144999][T24130] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3646'. [ 613.275979][T24186] lo speed is unknown, defaulting to 1000 [ 613.390667][T24201] netlink: 'syz.6.3663': attribute type 9 has an invalid length. [ 613.878326][T24236] netlink: 'syz.6.3668': attribute type 1 has an invalid length. [ 614.269569][T24236] 8021q: adding VLAN 0 to HW filter on device bond3 [ 614.313559][ T5633] block nbd2: Receive control failed (result -107) [ 614.400845][T24240] bond3: (slave veth5): Enslaving as an active interface with a down link [ 614.724450][T24257] tipc: Enabled bearer , priority 10 [ 614.786867][T24275] __nla_validate_parse: 12 callbacks suppressed [ 614.786890][T24275] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3674'. [ 614.874460][T24275] netlink: 'syz.1.3674': attribute type 10 has an invalid length. [ 615.357013][T24297] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3680'. [ 615.716502][T24319] netlink: 'syz.4.3685': attribute type 27 has an invalid length. [ 615.813921][T24319] syzkaller0: entered promiscuous mode [ 615.832012][T24319] syzkaller0: entered allmulticast mode [ 615.853983][T24324] netlink: 'syz.0.3689': attribute type 1 has an invalid length. [ 615.940018][T24328] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3689'. [ 616.076920][T24324] 8021q: adding VLAN 0 to HW filter on device bond7 [ 616.257080][T24332] bond7: (slave ip6gretap1): making interface the new active one [ 616.282648][T24332] bond7: (slave ip6gretap1): Enslaving as an active interface with an up link [ 616.351079][T24352] netlink: 392 bytes leftover after parsing attributes in process `syz.4.3692'. [ 616.441804][T24354] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 616.472843][T24354] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3692'. [ 616.518732][T24352] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3692'. [ 616.578481][T24352] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3692'. [ 616.685580][T24365] netlink: 'syz.1.3696': attribute type 3 has an invalid length. [ 616.695585][T24352] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3692'. [ 616.751090][T24352] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3692'. [ 616.993923][ T5614] IPVS: starting estimator thread 0... [ 617.077376][T24369] bridge0: port 1(bridge_slave_0) entered disabled state [ 617.109885][T24378] IPVS: using max 25 ests per chain, 60000 per kthread [ 617.743886][T24373] macvtap0: entered promiscuous mode [ 617.753777][T24373] vlan0: entered promiscuous mode [ 617.775832][T24373] vlan0: left promiscuous mode [ 617.895002][ T36] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 617.905762][ T36] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 617.918422][ T36] netdevsim netdevsim0 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 617.977404][T24401] netlink: 92 bytes leftover after parsing attributes in process `syz.1.3702'. [ 618.026432][ T36] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 618.073705][ T36] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 618.102263][ T36] netdevsim netdevsim0 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 618.170856][ T36] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 618.186571][ T36] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 618.200559][ T36] netdevsim netdevsim0 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 618.219818][ T36] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 618.255356][ T36] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 618.291527][ T36] netdevsim netdevsim0 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 618.496625][T24433] netlink: 'syz.1.3709': attribute type 1 has an invalid length. [ 618.578671][T24433] 8021q: adding VLAN 0 to HW filter on device bond2 [ 619.644089][T24485] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 619.891137][T24496] __nla_validate_parse: 5 callbacks suppressed [ 619.891158][T24496] netlink: 256 bytes leftover after parsing attributes in process `syz.0.3722'. [ 619.911161][ T6070] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 619.945068][T24496] netlink: 256 bytes leftover after parsing attributes in process `syz.0.3722'. [ 620.236521][T24508] netlink: 128 bytes leftover after parsing attributes in process `syz.0.3726'. [ 620.282261][T24508] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 620.386510][T24516] netlink: 'syz.6.3728': attribute type 4 has an invalid length. [ 620.422462][T24519] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3729'. [ 621.297695][T24561] netlink: 'syz.5.3738': attribute type 1 has an invalid length. [ 621.563887][T24581] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3742'. [ 621.636153][T24566] bond2: (slave veth3): Enslaving as an active interface with a down link [ 621.682882][T24570] bond2: (slave veth5): Enslaving as an active interface with a down link [ 621.736946][T24580] bond8: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 621.750668][T24580] bond8 (unregistering): Released all slaves [ 622.292256][T24605] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 622.385005][T24612] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3750'. [ 622.385795][T24613] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3750'. [ 622.464133][T24613] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 622.770106][T24635] bridge0: port 1(macvlan0) entered blocking state [ 622.818001][T24642] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3754'. [ 622.848070][T24635] bridge0: port 1(macvlan0) entered disabled state [ 622.911086][T24635] macvlan0: entered allmulticast mode [ 622.961691][T24635] veth1_vlan: entered allmulticast mode [ 623.014487][T24635] macvlan0: entered promiscuous mode [ 623.064342][T24635] bridge0: port 1(macvlan0) entered blocking state [ 623.071077][T24635] bridge0: port 1(macvlan0) entered forwarding state [ 623.988501][T24722] bond8: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 624.071593][T24722] bond8 (unregistering): Released all slaves [ 624.356894][T24747] syzkaller0: entered promiscuous mode [ 624.373820][T24747] syzkaller0: entered allmulticast mode [ 625.863116][T24808] bridge_slave_1: left allmulticast mode [ 625.887858][T24808] bridge_slave_1: left promiscuous mode [ 625.917917][T24808] bridge0: port 2(bridge_slave_1) entered disabled state [ 625.967349][T24808] bridge_slave_0: left allmulticast mode [ 625.976311][T24808] bridge_slave_0: left promiscuous mode [ 625.992174][T24808] bridge0: port 1(bridge_slave_0) entered disabled state [ 626.187356][T24807] tipc: Started in network mode [ 626.195837][T24807] tipc: Node identity ac14140f, cluster identity 4711 [ 626.211567][T24807] tipc: New replicast peer: 255.255.0.0 [ 626.222371][T24807] tipc: Enabled bearer , priority 10 [ 626.237660][T24804] syzkaller1: entered promiscuous mode [ 626.249780][T24804] syzkaller1: entered allmulticast mode [ 626.469372][T24824] A link change request failed with some changes committed already. Interface veth0_to_team may have been left with an inconsistent configuration, please check. [ 626.713555][T24835] netlink: 'syz.0.3782': attribute type 1 has an invalid length. [ 627.025388][T24838] dummy0: left allmulticast mode [ 627.053659][T24852] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3785'. [ 627.065466][T24838] bond8: (slave dummy0): making interface the new active one [ 627.085598][T24838] bond8: (slave dummy0): Enslaving as an active interface with an up link [ 627.124690][T24837] syzkaller0: entered promiscuous mode [ 627.157811][T24837] syzkaller0: entered allmulticast mode [ 627.211887][T24837] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3783'. [ 627.267684][T24858] netlink: 'syz.1.3784': attribute type 2 has an invalid length. [ 627.370918][T24694] tipc: Node number set to 2886997007 [ 627.381218][T24865] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 627.381832][T24864] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 627.762496][T24883] IPVS: length: 84 != 8 [ 627.817083][T24882] lo speed is unknown, defaulting to 1000 [ 627.890607][T24888] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3791'. [ 628.288076][T24901] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 628.312388][T24901] syzkaller1: linktype set to 769 [ 630.262783][T24993] workqueue: name exceeds WQ_NAME_LEN. Truncating to: .ˆeHßAÁwÓÒ¢h9µ_‰Aòf;&3I-€3Èþò¨ [ 630.901083][T25021] x_tables: duplicate underflow at hook 1 [ 630.928573][T25022] netlink: 5 bytes leftover after parsing attributes in process `syz.0.3822'. [ 630.986272][T25020] lo speed is unknown, defaulting to 1000 [ 631.005329][T25022] netlink: 'syz.0.3822': attribute type 4 has an invalid length. [ 631.516526][T25038] ipt_REJECT: TCP_RESET invalid for non-tcp [ 631.619300][T25036] vlan2: entered promiscuous mode [ 631.658535][T25036] batadv0: entered promiscuous mode [ 631.821348][ T6072] tipc: Subscription rejected, illegal request [ 632.151019][T25069] x_tables: ip6_tables: udp match: only valid for protocol 17 [ 632.183460][ T30] audit: type=1800 audit(1784471490.104:13): pid=25068 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.3829" name="blkio.bfq.time_recursive" dev="tmpfs" ino=954 res=0 errno=0 [ 632.335828][T25073] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3831'. [ 634.561462][T25043] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 634.936966][T25116] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3841'. [ 635.224206][T25145] netlink: 'syz.6.3848': attribute type 3 has an invalid length. [ 635.276086][T25144] netlink: 'syz.1.3846': attribute type 4 has an invalid length. [ 635.311108][T25144] netlink: 240 bytes leftover after parsing attributes in process `syz.1.3846'. [ 635.343372][T25141] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 636.608391][T25200] netlink: 524 bytes leftover after parsing attributes in process `syz.4.3859'. [ 636.889548][T25209] netlink: 64 bytes leftover after parsing attributes in process `syz.5.3861'. [ 636.996034][T25209] netlink: 'syz.5.3861': attribute type 1 has an invalid length. [ 637.078343][T25209] netlink: 'syz.5.3861': attribute type 3 has an invalid length. [ 637.105228][T25209] netlink: 3 bytes leftover after parsing attributes in process `syz.5.3861'. [ 637.135189][T25218] netlink: 'syz.4.3863': attribute type 1 has an invalid length. [ 637.392988][T25225] bridge0: port 1(bridge_slave_0) entered disabled state [ 637.482104][T25225] vlan2 (unregistering): left promiscuous mode [ 637.536501][T25225] bridge_slave_0 (unregistering): left promiscuous mode [ 637.559049][T25225] bridge0: port 2(vlan2) entered disabled state [ 637.659926][T25237] syzkaller1: entered promiscuous mode [ 637.673100][T25237] syzkaller1: entered allmulticast mode [ 637.876415][T25253] netlink: 'syz.0.3869': attribute type 58 has an invalid length. [ 637.884574][T25253] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3869'. [ 637.916292][T25250] C: renamed from veth1_to_team (while UP) [ 637.926786][T25250] netlink: 164 bytes leftover after parsing attributes in process `syz.4.3868'. [ 638.047691][T25250] Unsupported ieee802154 address type: 0 [ 638.071884][T25253] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3869'. [ 638.143335][T25267] netlink: 184 bytes leftover after parsing attributes in process `syz.5.3871'. [ 638.156256][T25254] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3868'. [ 638.232671][T25254] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3868'. [ 638.723649][T25289] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3875'. [ 638.760648][T25288] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 639.495032][T25311] tipc: Resetting bearer [ 639.627448][T25324] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci6/hci6:200/input8 [ 639.663400][T25311] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 640.295104][T25336] lo speed is unknown, defaulting to 1000 [ 640.429068][T25346] nftables ruleset with unbound set [ 640.836462][T25363] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3891'. [ 640.846835][T25363] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3891'. [ 641.153166][T25373] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3893'. [ 641.477311][T25385] netlink: 'syz.1.3895': attribute type 1 has an invalid length. [ 641.540322][T25381] lo speed is unknown, defaulting to 1000 [ 643.872089][T25446] netlink: 'syz.5.3909': attribute type 1 has an invalid length. [ 644.000968][ T5638] block nbd3: Receive control failed (result -32) [ 644.001627][ T5633] block nbd3: Receive control failed (result -32) [ 644.234800][T25462] __nla_validate_parse: 1 callbacks suppressed [ 644.234820][T25462] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3912'. [ 644.276949][T25462] tipc: Enabling of bearer rejected, failed to enable media [ 644.304167][T25465] netlink: 'syz.0.3913': attribute type 9 has an invalid length. [ 644.715878][T25483] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3917'. [ 644.936008][T25490] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3919'. [ 644.947037][T25492] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3920'. [ 645.103337][T25501] syzkaller0: entered promiscuous mode [ 645.119835][T25501] syzkaller0: entered allmulticast mode [ 645.153517][T25495] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 645.881823][T25529] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3925'. [ 646.642212][T25532] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 646.994074][T25571] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3934'. [ 647.327678][T25587] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3936'. [ 647.941739][T25606] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3941'. [ 647.972658][T25609] nft_compat: unsupported protocol 1 [ 648.194497][T25616] netlink: 392 bytes leftover after parsing attributes in process `syz.6.3943'. [ 648.290473][T25622] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3943'. [ 648.302117][T25623] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 648.880789][T25650] xt_hashlimit: size too large, truncated to 1048576 [ 649.006451][T25616] Bluetooth: hci1: Opcode 0x0401 failed: -4 [ 649.584930][T25679] __nla_validate_parse: 4 callbacks suppressed [ 649.584952][T25679] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3957'. [ 649.909108][T25684] netlink: 392 bytes leftover after parsing attributes in process `syz.4.3958'. [ 649.944105][T25684] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 649.953458][T25684] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3958'. [ 649.973827][T25684] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3958'. [ 649.996828][T25689] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3960'. [ 650.008181][T25684] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3958'. [ 650.032156][T25688] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3960'. [ 650.048374][T25692] netlink: 60 bytes leftover after parsing attributes in process `syz.5.3959'. [ 650.066044][T25684] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3958'. [ 650.104641][T25684] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3958'. [ 650.230092][ T5638] Bluetooth: hci1: command 0x0401 tx timeout [ 650.642759][T25708] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 650.645777][T25714] sctp: [Deprecated]: syz.6.3967 (pid 25714) Use of int in max_burst socket option deprecated. [ 650.645777][T25714] Use struct sctp_assoc_value instead [ 651.020894][T25736] openvswitch: netlink: IP tunnel dst address not specified [ 651.074088][T25736] openvswitch: netlink: IP tunnel dst address not specified [ 651.102500][T25722] 8021q: adding VLAN 0 to HW filter on device bond0 [ 651.124404][T25722] 8021q: adding VLAN 0 to HW filter on device team0 [ 651.147666][T25736] openvswitch: netlink: IP tunnel dst address not specified [ 651.172729][T25736] openvswitch: netlink: IP tunnel dst address not specified [ 651.199365][T25736] openvswitch: netlink: IP tunnel dst address not specified [ 651.226029][T25736] openvswitch: netlink: IP tunnel dst address not specified [ 651.246673][T25736] openvswitch: netlink: IP tunnel dst address not specified [ 651.266039][T25722] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 651.279657][ T36] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 651.290866][T25736] openvswitch: netlink: IP tunnel dst address not specified [ 651.302340][T25722] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 651.334582][T25736] openvswitch: netlink: IP tunnel dst address not specified [ 651.343682][T25722] veth1_vlan: left promiscuous mode [ 651.361502][T25722] veth0_vlan: left promiscuous mode [ 651.376378][T25736] openvswitch: netlink: IP tunnel dst address not specified [ 651.379205][T25722] veth0_vlan: entered promiscuous mode [ 651.408223][T25722] veth1_vlan: entered promiscuous mode [ 651.454591][T25722] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 651.472403][T25722] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 651.482008][T25722] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 651.495420][T25722] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 651.551059][T25722] 8021q: adding VLAN 0 to HW filter on device bond1 [ 651.773641][T25755] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 651.774449][T25722] 8021q: adding VLAN 0 to HW filter on device bond2 [ 651.826271][T25722] 8021q: adding VLAN 0 to HW filter on device bond3 [ 651.837441][T25722] 8021q: adding VLAN 0 to HW filter on device bond4 [ 651.864204][T25722] 8021q: adding VLAN 0 to HW filter on device bond5 [ 652.011012][T25722] 8021q: adding VLAN 0 to HW filter on device bond6 [ 652.043486][T25722] 8021q: adding VLAN 0 to HW filter on device bond7 [ 652.063979][T25722] 8021q: adding VLAN 0 to HW filter on device bond8 [ 652.219851][ T81] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 652.238342][ T81] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 652.281953][ T81] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 652.316602][ T81] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 652.349617][ T81] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 652.361806][ T81] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 652.383974][ T81] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 652.403864][ T81] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 652.618012][T25783] netlink: 'syz.6.3980': attribute type 2 has an invalid length. [ 652.648427][T25784] syzkaller0: entered promiscuous mode [ 652.675637][T25784] syzkaller0: entered allmulticast mode [ 653.076665][T25815] netlink: 'syz.0.3986': attribute type 21 has an invalid length. [ 653.296646][T25821] netlink: 'syz.6.3988': attribute type 1 has an invalid length. [ 653.394087][T25821] 8021q: adding VLAN 0 to HW filter on device bond4 [ 653.551888][T25837] netlink: 'syz.6.3988': attribute type 10 has an invalid length. [ 653.584257][T25832] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci6/hci6:200/input9 [ 653.666983][T25833] bond4: (slave veth7): Enslaving as a backup interface with a down link [ 653.793611][T25821] bond4: (slave dummy0): Enslaving as a backup interface with an up link [ 653.879217][T25850] netlink: 'syz.0.3993': attribute type 4 has an invalid length. [ 653.895573][T25837] dummy0: entered promiscuous mode [ 653.901006][T25851] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 1, id = 0 [ 653.923334][T25837] bond4: (slave dummy0): Removing an active aggregator [ 653.955898][T25837] bond4: (slave dummy0): Releasing backup interface [ 654.391828][T25859] netlink: 'syz.4.3995': attribute type 6 has an invalid length. [ 654.413407][T25859] netlink: 'syz.4.3995': attribute type 7 has an invalid length. [ 654.421404][T25859] netlink: 'syz.4.3995': attribute type 8 has an invalid length. [ 654.573877][T25882] xt_CT: No such helper "syz0" [ 654.703947][T25892] __nla_validate_parse: 7 callbacks suppressed [ 654.703967][T25892] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4002'. [ 654.920105][T25901] sctp: [Deprecated]: syz.1.4005 (pid 25901) Use of struct sctp_assoc_value in delayed_ack socket option. [ 654.920105][T25901] Use struct sctp_sack_info instead [ 655.062656][T25909] netlink: 'syz.6.4008': attribute type 1 has an invalid length. [ 655.098822][T25909] netlink: 244 bytes leftover after parsing attributes in process `syz.6.4008'. [ 655.481227][T25931] tipc: Enabling of bearer rejected, failed to enable media [ 655.537081][T25930] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4009'. [ 655.604104][T25937] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4009'. [ 655.831321][T25945] syzkaller1: entered promiscuous mode [ 655.877110][T25945] syzkaller1: entered allmulticast mode [ 656.251999][T25952] xt_hashlimit: size too large, truncated to 1048576 [ 656.415716][T25964] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4015'. [ 656.696471][T25971] bridge0: port 3(vlan2) entered blocking state [ 656.728371][T25971] bridge0: port 3(vlan2) entered disabled state [ 656.761199][T25971] vlan2: entered allmulticast mode [ 656.788364][T25971] dummy0: entered allmulticast mode [ 656.797263][T25971] vlan2: entered promiscuous mode [ 656.803420][T25971] dummy0: entered promiscuous mode [ 657.188994][ T5633] Bluetooth: hci1: command 0x0401 tx timeout [ 657.268388][T25992] Cannot find del_set index 4 as target [ 657.285931][T25994] netlink: 68 bytes leftover after parsing attributes in process `syz.5.4021'. [ 657.297146][T25994] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4021'. [ 657.680937][T26010] syzkaller0: entered promiscuous mode [ 657.702506][T26010] syzkaller0: entered allmulticast mode [ 657.768311][T26010] tipc: Started in network mode [ 657.789675][T26010] tipc: Node identity d2b1a99da7a5, cluster identity 4711 [ 657.816633][T26010] tipc: Enabled bearer , priority 0 [ 657.907384][T26014] netlink: 108 bytes leftover after parsing attributes in process `syz.4.4026'. [ 657.920079][T26018] netlink: 'syz.5.4025': attribute type 62 has an invalid length. [ 657.957270][T26014] netlink: 108 bytes leftover after parsing attributes in process `syz.4.4026'. [ 658.013513][T26010] tipc: Resetting bearer [ 658.082829][T26008] tipc: Resetting bearer [ 658.142060][T26008] tipc: Disabling bearer [ 658.202989][T26033] ipip1: entered promiscuous mode [ 658.318354][T26038] syzkaller1: entered promiscuous mode [ 658.344001][T26038] syzkaller1: entered allmulticast mode [ 658.740527][T26060] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4035'. [ 658.863384][T26060] bond0: entered promiscuous mode [ 658.901141][T26060] bond_slave_0: entered promiscuous mode [ 658.935738][T26060] bond_slave_1: entered promiscuous mode [ 658.968340][T26060] bond0: left promiscuous mode [ 658.984974][T26060] bond_slave_0: left promiscuous mode [ 659.001699][T26060] bond_slave_1: left promiscuous mode [ 659.133038][T26074] netlink: 'syz.6.4039': attribute type 1 has an invalid length. [ 659.213555][T26074] veth9: entered allmulticast mode [ 659.228465][T26074] bond5: (slave veth9): Enslaving as an active interface with a down link [ 659.361407][T26078] bond5: (slave veth0_to_bond): making interface the new active one [ 659.402794][T26078] bond5: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 659.516208][T26074] macvlan2: entered promiscuous mode [ 659.542663][T26074] macvlan2: entered allmulticast mode [ 659.568445][T26074] bond5: entered promiscuous mode [ 659.584441][T26074] veth0_to_bond: entered promiscuous mode [ 659.603596][T26074] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 659.635959][T26074] bond5: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 659.690089][T26074] bond5: left promiscuous mode [ 659.707606][T26074] veth0_to_bond: left promiscuous mode [ 659.764444][T26106] netlink: 'syz.5.4046': attribute type 1 has an invalid length. [ 659.951012][T26116] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4046'. [ 660.656964][T26107] bond5: (slave bridge2): making interface the new active one [ 660.701469][T26107] bond5: (slave bridge2): Enslaving as an active interface with an up link [ 660.728647][T26110] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4047'. [ 660.748457][T26110] bridge: RTM_NEWNEIGH with invalid state 0x0 [ 660.767448][T26116] bond5: entered promiscuous mode [ 660.774197][T26116] bridge2: entered promiscuous mode [ 660.781729][T26116] bond5: entered allmulticast mode [ 660.789543][T26116] bridge2: entered allmulticast mode [ 660.812844][T26116] 8021q: adding VLAN 0 to HW filter on device bond5 [ 660.833911][T26118] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 660.896924][ T81] bond5: (slave bridge2): link status definitely down, disabling slave [ 660.978051][ T81] bridge2: left promiscuous mode [ 660.986101][T26139] netlink: 84 bytes leftover after parsing attributes in process `syz.1.4051'. [ 661.012577][ T81] bridge2: left allmulticast mode [ 661.033489][ T81] bond5: now running without any active interface! [ 661.486605][T26161] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4055'. [ 661.723414][T26175] Bluetooth: MGMT ver 1.23 [ 661.789867][T26175] netlink: 'syz.1.4058': attribute type 13 has an invalid length. [ 661.823768][T26175] netlink: 120 bytes leftover after parsing attributes in process `syz.1.4058'. [ 661.854530][T26175] syz_tun: refused to change device tx_queue_len [ 661.883214][T26175] net_ratelimit: 57 callbacks suppressed [ 661.883234][T26175] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 662.215039][T26195] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 662.448399][T26209] netlink: 'syz.5.4066': attribute type 1 has an invalid length. [ 662.548144][T26223] netlink: 'syz.0.4067': attribute type 1 has an invalid length. [ 662.563281][T26205] tipc: Enabled bearer , priority 0 [ 662.584828][T26209] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 662.592049][T26222] syzkaller0: entered promiscuous mode [ 662.710939][T26222] syzkaller0: entered allmulticast mode [ 662.739827][T26205] openvswitch: netlink: Actions may not be safe on all matching packets [ 662.920794][T26223] 8021q: adding VLAN 0 to HW filter on device bond9 [ 662.929102][T26239] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4069'. [ 663.001583][T26225] bond9: (slave geneve3): making interface the new active one [ 663.016028][T26225] bond9: (slave geneve3): Enslaving as an active interface with an up link [ 663.284944][T26203] tipc: Resetting bearer [ 663.327568][T26203] tipc: Disabling bearer [ 663.591651][T26269] xt_NFQUEUE: number of total queues is 0 [ 663.668500][T26278] netlink: 'syz.1.4074': attribute type 2 has an invalid length. [ 663.709245][T26278] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4074'. [ 663.852721][T26282] syzkaller0: entered promiscuous mode [ 663.860176][T26282] syzkaller0: entered allmulticast mode [ 664.153241][T26296] netlink: 'syz.4.4078': attribute type 4 has an invalid length. [ 664.279660][T26298] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4078'. [ 664.293274][T26298] tipc: Resetting bearer [ 664.323523][T26298] tipc: Resetting bearer [ 664.484717][T26300] netlink: 'syz.4.4078': attribute type 4 has an invalid length. [ 665.795069][T26233] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 666.021020][T26303] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4080'. [ 666.044721][T26303] netlink: 128 bytes leftover after parsing attributes in process `syz.6.4080'. [ 666.975594][T26349] netlink: 80 bytes leftover after parsing attributes in process `syz.0.4090'. [ 667.027477][T26349] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4090'. [ 667.225725][T26359] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4092'. [ 667.287275][T26359] netlink: 'syz.5.4092': attribute type 1 has an invalid length. [ 667.357247][T26353] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 667.384588][T26353] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4091'. [ 667.577195][T26370] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4095'. [ 667.621418][T26353] 8021q: adding VLAN 0 to HW filter on device bond6 [ 667.676918][T26376] x_tables: ip_tables: REDIRECT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 667.708361][T26383] netlink: 'syz.0.4096': attribute type 9 has an invalid length. [ 667.724558][T26375] 8021q: adding VLAN 0 to HW filter on device bond0 [ 667.764494][T26375] tipc: Resetting bearer [ 668.016686][T26375] 8021q: adding VLAN 0 to HW filter on device bond2 [ 668.059655][T26375] 8021q: adding VLAN 0 to HW filter on device bond4 [ 668.111841][T26375] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 668.143869][T21165] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 668.153734][ T6070] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 668.176690][T21165] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 668.287278][T26401] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 668.361624][T26401] batman_adv: batadv0: Adding interface: gretap1 [ 668.398200][T26401] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 668.441253][T26401] batman_adv: batadv0: Interface activated: gretap1 [ 668.465958][T26413] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4102'. [ 668.478015][T26413] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4102'. [ 668.520568][T26403] netlink: 'syz.0.4101': attribute type 2 has an invalid length. [ 668.564539][T26403] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4101'. [ 668.814152][ T5638] block nbd4: Receive control failed (result -32) [ 669.438241][T26454] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 669.549512][T26454] block nbd5: server does not support multiple connections per device. [ 669.565261][T26454] block nbd5: shutting down sockets [ 670.040359][T26472] tipc: Enabling of bearer rejected, failed to enable media [ 670.293936][T26462] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 670.335566][T26462] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 670.464833][T26462] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 670.502658][T26462] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 671.194393][T26523] netlink: 'syz.1.4122': attribute type 15 has an invalid length. [ 671.440306][T26494] Bluetooth: hci6: command 0x0405 tx timeout [ 671.506453][T26535] __nla_validate_parse: 7 callbacks suppressed [ 671.506474][T26535] netlink: 36 bytes leftover after parsing attributes in process `syz.5.4124'. [ 671.554817][T26535] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4124'. [ 672.149259][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 672.320188][T26564] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4128'. [ 672.412586][T26571] netlink: 'syz.4.4130': attribute type 4 has an invalid length. [ 672.437101][T26571] netlink: 'syz.4.4130': attribute type 8 has an invalid length. [ 672.452029][T26571] netlink: 212 bytes leftover after parsing attributes in process `syz.4.4130'. [ 672.478795][T26494] Bluetooth: hci4: command 0x0c1a tx timeout [ 672.493269][T26575] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4131'. [ 672.534973][T26575] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4131'. [ 672.618700][T26575] netlink: 'syz.1.4131': attribute type 1 has an invalid length. [ 672.658074][T26575] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4131'. [ 672.707363][T26580] netlink: 'syz.4.4132': attribute type 1 has an invalid length. [ 672.746188][T26462] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 672.774942][T26462] Bluetooth: hci6: Error when powering off device on rfkill (-4) [ 672.856653][T26580] 8021q: adding VLAN 0 to HW filter on device bond5 [ 672.920886][T26588] bond5: (slave geneve2): making interface the new active one [ 672.981795][T26588] bond5: (slave geneve2): Enslaving as an active interface with an up link [ 673.239715][T26596] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4136'. [ 673.289923][T26600] netlink: 'syz.4.4135': attribute type 1 has an invalid length. [ 673.369656][T26602] block nbd5: server does not support multiple connections per device. [ 673.394523][T26600] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 673.405304][T26602] block nbd5: shutting down sockets [ 673.656410][T26614] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4140'. [ 673.805430][T26631] netlink: 92 bytes leftover after parsing attributes in process `syz.6.4141'. [ 673.980303][T26636] syzkaller0: entered promiscuous mode [ 674.012770][T26636] syzkaller0: entered allmulticast mode [ 674.784801][T26658] bond7: option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 675.007911][T26658] bond7 (unregistering): Released all slaves [ 676.741222][T21506] block nbd0: Receive control failed (result -110) [ 677.453911][T26690] netlink: 'syz.0.4155': attribute type 1 has an invalid length. [ 677.995107][T26722] __nla_validate_parse: 2 callbacks suppressed [ 677.995127][T26722] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4162'. [ 678.056367][T26722] syzkaller0: entered promiscuous mode [ 678.078107][T26722] syzkaller0: entered allmulticast mode [ 678.117050][T26722] tipc: Started in network mode [ 678.162962][T26722] tipc: Node identity 521146219c8b, cluster identity 4711 [ 678.202764][T26722] tipc: Enabled bearer , priority 0 [ 678.285525][T26722] tipc: Resetting bearer [ 678.307454][T26740] netlink: 228 bytes leftover after parsing attributes in process `syz.0.4166'. [ 678.365032][T26720] tipc: Resetting bearer [ 678.392001][T26744] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4167'. [ 678.450502][T26720] tipc: Disabling bearer [ 678.497052][T26750] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4166'. [ 678.537928][T26753] netlink: 240 bytes leftover after parsing attributes in process `syz.5.4168'. [ 678.548177][T26750] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4166'. [ 678.569108][T26753] netlink: 'syz.5.4168': attribute type 9 has an invalid length. [ 678.595626][T26750] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4166'. [ 678.647482][T26740] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4166'. [ 678.671273][T26753] netlink: 1752 bytes leftover after parsing attributes in process `syz.5.4168'. [ 679.203679][T26779] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 679.506814][T26794] netlink: 'syz.6.4175': attribute type 8 has an invalid length. [ 679.543013][T26794] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4175'. [ 679.945465][T26810] veth0: entered promiscuous mode [ 679.982729][T26809] veth0: left promiscuous mode [ 680.241215][T26821] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 680.446527][T26827] lo speed is unknown, defaulting to 1000 [ 680.711402][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 682.191816][T26888] sch_tbf: peakrate 7 is lower than or equals to rate 38 ! [ 682.496863][T26880] lo speed is unknown, defaulting to 1000 [ 682.895213][ T24] IPVS: starting estimator thread 0... [ 682.981866][T26896] veth7: entered allmulticast mode [ 683.022569][T26917] IPVS: using max 25 ests per chain, 60000 per kthread [ 683.262220][T26921] bond7: option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 683.295867][T26921] bond7 (unregistering): Released all slaves [ 683.358500][T26928] __nla_validate_parse: 7 callbacks suppressed [ 683.358518][T26928] netlink: 60 bytes leftover after parsing attributes in process `syz.5.4201'. [ 683.472366][T26936] netlink: 'syz.0.4200': attribute type 2 has an invalid length. [ 683.888665][T26936] : entered promiscuous mode [ 684.575872][T26967] syzkaller0: entered promiscuous mode [ 684.613423][T26967] syzkaller0: entered allmulticast mode [ 684.695795][T26978] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4211'. [ 686.314095][T27041] debugfs: '1ù!^' already exists in 'ieee80211' [ 686.699344][T27051] 8021q: adding VLAN 0 to HW filter on device ipvlan3 [ 687.543039][T27094] geneve2: entered promiscuous mode [ 687.639379][T27098] team0: Port device vxcan1 added [ 687.975915][T27119] netlink: 68 bytes leftover after parsing attributes in process `syz.6.4240'. [ 688.017461][T27119] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4240'. [ 688.068793][T27119] veth1_macvtap: left promiscuous mode [ 688.690665][T27160] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4251'. [ 688.707836][T27160] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4251'. [ 688.751283][T27160] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4251'. [ 688.785893][T27160] netlink: 32 bytes leftover after parsing attributes in process `syz.6.4251'. [ 688.901757][T27172] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4253'. [ 689.114216][T27182] netlink: 566 bytes leftover after parsing attributes in process `syz.4.4256'. [ 689.147248][T27185] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4257'. [ 689.157849][T27183] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4255'. [ 689.167934][T27185] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4257'. [ 689.252798][T27183] team_slave_0 (unregistering): left promiscuous mode [ 689.292634][T27183] team0: Port device team_slave_0 removed [ 689.378081][T27192] netlink: 'syz.4.4258': attribute type 1 has an invalid length. [ 689.446629][T27192] bond6: entered promiscuous mode [ 689.454178][T27192] 8021q: adding VLAN 0 to HW filter on device bond6 [ 689.469779][T27192] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4258'. [ 689.479956][T27192] bond6: entered allmulticast mode [ 689.507349][T27192] bond6: (slave bridge4): making interface the new active one [ 689.516756][T27192] bridge4: entered promiscuous mode [ 689.531267][T27192] bridge4: entered allmulticast mode [ 689.585597][T27192] bond6: (slave bridge4): Enslaving as an active interface with an up link [ 690.566828][T27229] netlink: 'syz.1.4266': attribute type 1 has an invalid length. [ 690.611618][T27229] netlink: 'syz.1.4266': attribute type 1 has an invalid length. [ 692.305848][T27303] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 692.404458][T27311] gretap1: entered promiscuous mode [ 693.312712][T27342] nbd: must specify a device to reconfigure [ 693.415851][T24704] IPVS: starting estimator thread 0... [ 693.529500][T27347] IPVS: using max 27 ests per chain, 64800 per kthread [ 694.307235][T27393] netlink: 'syz.6.4302': attribute type 49 has an invalid length. [ 694.351314][T27394] netlink: 'syz.1.4303': attribute type 1 has an invalid length. [ 694.363905][T27397] __nla_validate_parse: 9 callbacks suppressed [ 694.363924][T27397] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4304'. [ 694.429926][T27397] netlink: 60 bytes leftover after parsing attributes in process `syz.5.4304'. [ 694.600640][T27394] 8021q: adding VLAN 0 to HW filter on device bond4 [ 694.666748][T27404] bond4: (slave syz_tun): Enslaving as a backup interface with an up link [ 694.835606][T27418] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 695.198375][T27438] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4310'. [ 695.728474][T27454] bridge0: entered allmulticast mode [ 695.771357][T27454] vlan2: left allmulticast mode [ 695.816414][T27454] dummy0: left allmulticast mode [ 695.827118][T27463] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4318'. [ 695.848633][T27454] vlan2: left promiscuous mode [ 695.874003][T27454] dummy0: left promiscuous mode [ 695.902493][T27454] bridge0: port 3(vlan2) entered disabled state [ 695.926089][T27454] bridge_slave_1: left promiscuous mode [ 695.933917][T27454] bridge0: port 2(bridge_slave_1) entered disabled state [ 695.960154][T27454] bridge_slave_0: left allmulticast mode [ 695.977235][T27471] netlink: 88 bytes leftover after parsing attributes in process `syz.6.4317'. [ 696.004901][T27454] bridge_slave_0: left promiscuous mode [ 696.032231][T27454] bridge0: port 1(bridge_slave_0) entered disabled state [ 696.327222][T27478] syzkaller0: entered promiscuous mode [ 696.333338][T27478] syzkaller0: entered allmulticast mode [ 696.618593][T27499] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4324'. [ 696.926362][T27507] syzkaller0: entered promiscuous mode [ 696.960383][T27507] syzkaller0: entered allmulticast mode [ 697.057792][T27517] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4326'. [ 697.143019][T27533] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4329'. [ 697.165692][T27533] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4329'. [ 697.208462][T27533] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4329'. [ 697.284346][T27538] lo speed is unknown, defaulting to 1000 [ 697.349340][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 697.363199][ T31] INFO: task syz.3.3278:22158 blocked for more than 143 seconds. [ 697.383329][ T31] Not tainted syzkaller #0 [ 697.388447][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 697.398606][ T31] task:syz.3.3278 state:D stack:26936 pid:22158 tgid:22157 ppid:20916 task_flags:0x400140 flags:0x00080002 [ 697.412162][ T31] Call Trace: [ 697.420144][ T31] [ 697.424645][ T31] __schedule+0x17d9/0x56c0 [ 697.449178][ T31] ? __lock_acquire+0x683/0x2cf0 [ 697.455045][ T31] ? __lock_acquire+0x683/0x2cf0 [ 697.470549][ T31] ? __pfx___schedule+0x10/0x10 [ 697.489537][ T31] ? schedule+0x90/0x2b0 [ 697.507363][ T31] schedule+0x164/0x2b0 [ 697.521201][ T31] schedule_preempt_disabled+0x13/0x30 [ 697.537335][ T31] __mutex_lock+0x7bf/0x1550 [ 697.555021][ T31] ? kasan_save_track+0x3e/0x80 [ 697.584116][ T31] ? __mutex_lock+0x5d4/0x1550 [ 697.598972][ T31] ? nfsd_nl_svc_export_get_reqs_dumpit+0xf7/0xc40 [ 697.616177][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 697.638146][ T31] ? net_generic+0x1e/0x240 [ 697.655752][ T31] ? net_generic+0x1e/0x240 [ 697.669654][ T31] nfsd_nl_svc_export_get_reqs_dumpit+0xf7/0xc40 [ 697.684658][ T31] ? rcu_is_watching+0x15/0xb0 [ 697.696129][ T31] ? trace_kmalloc+0x2a/0xf0 [ 697.713380][ T31] ? __pfx_nfsd_nl_svc_export_get_reqs_dumpit+0x10/0x10 [ 697.730654][ T31] ? __kmalloc_node_track_caller_noprof+0x2fd/0x730 [ 697.745563][ T31] ? netlink_dump+0x1e7/0xee0 [ 697.756287][ T31] ? netlink_dump+0x1e7/0xee0 [ 697.768216][ T31] genl_dumpit+0x10b/0x1b0 [ 697.779245][ T31] netlink_dump+0x711/0xee0 [ 697.789213][ T31] ? __pfx_netlink_dump+0x10/0x10 [ 697.799623][ T31] ? genl_start+0x497/0x6d0 [ 697.807413][ T31] __netlink_dump_start+0x589/0x7b0 [ 697.814711][ T31] genl_family_rcv_msg_dumpit+0x213/0x310 [ 697.821788][ T31] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 697.828321][ T31] ? __pfx_genl_start+0x10/0x10 [ 697.834918][ T31] ? __pfx_genl_dumpit+0x10/0x10 [ 697.843322][ T31] ? __pfx_genl_done+0x10/0x10 [ 697.848367][ T31] ? bpf_lsm_capable+0x9/0x20 [ 697.854622][ T31] ? security_capable+0x7e/0x2c0 [ 697.860763][ T31] genl_rcv_msg+0x5e1/0x7a0 [ 697.865747][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 697.871728][ T31] ? __pfx_nfsd_nl_svc_export_get_reqs_dumpit+0x10/0x10 [ 697.882656][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 697.888361][ T31] netlink_rcv_skb+0x226/0x4a0 [ 697.904824][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 697.928233][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 697.944723][ T31] ? down_read+0x2be/0x330 [ 697.956415][ T31] genl_rcv+0x28/0x40 [ 697.966541][ T31] netlink_unicast+0x7bb/0x940 [ 697.979609][ T31] netlink_sendmsg+0x813/0xb40 [ 697.986700][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 697.998672][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 698.007618][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 698.014544][ T31] sock_sendmsg_nosec+0x13a/0x180 [ 698.020111][ T31] ____sys_sendmsg+0x54e/0x850 [ 698.025172][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 698.031082][ T31] ? import_iovec+0x73/0xa0 [ 698.035920][ T31] ___sys_sendmsg+0x2a5/0x360 [ 698.041886][ T31] ? __lock_acquire+0x683/0x2cf0 [ 698.047047][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 698.053646][ T31] ? futex_wait+0x2a2/0x390 [ 698.058442][ T31] ? __fget_files+0x2a/0x420 [ 698.064471][ T31] ? __fget_files+0x3a2/0x420 [ 698.071405][ T31] __x64_sys_sendmsg+0x1b1/0x290 [ 698.076752][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 698.084926][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 698.092399][ T31] do_syscall_64+0x174/0x580 [ 698.097347][ T31] ? trace_irq_disable+0x3b/0x140 [ 698.105798][ T31] ? clear_bhb_loop+0x40/0x90 [ 698.111773][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 698.118018][ T31] RIP: 0033:0x7f5464f9de99 [ 698.124794][ T31] RSP: 002b:00007f5465dca028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 698.134695][ T31] RAX: ffffffffffffffda RBX: 00007f5465225fa0 RCX: 00007f5464f9de99 [ 698.143854][ T31] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000005 [ 698.153619][ T31] RBP: 00007f5465033eaf R08: 0000000000000000 R09: 0000000000000000 [ 698.175444][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 698.184785][ T31] R13: 00007f5465226038 R14: 00007f5465225fa0 R15: 00007ffd2212f698 [ 698.194019][ T31] [ 698.197366][ T31] [ 698.197366][ T31] Showing all locks held in the system: [ 698.208259][ T31] 1 lock held by khungtaskd/31: [ 698.215046][ T31] #0: ffffffff8eb59c60 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 698.265579][ T31] 2 locks held by getty/5375: [ 698.271525][ T31] #0: ffff8880361cf0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 698.282650][ T31] #1: ffffc9000322b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 698.294764][ T31] 2 locks held by syz.2.3115/21164: [ 698.300570][ T31] #0: ffffffff9009cba8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 698.309601][ T31] #1: ffffffff8ee8e620 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x135/0x1750 [ 698.320999][ T31] 3 locks held by syz.3.3278/22158: [ 698.326297][ T31] #0: ffffffff9009cba8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 698.335996][ T31] #1: ffff88807a2cf6e8 (nlk_cb_mutex-GENERIC){+.+.}-{4:4}, at: __netlink_dump_start+0xf4/0x7b0 [ 698.351710][ T31] #2: ffffffff8ee8e620 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_svc_export_get_reqs_dumpit+0xf7/0xc40 [ 698.376332][ T31] 3 locks held by syz.0.4328/27538: [ 698.389773][ T31] 4 locks held by syz.5.4330/27552: [ 698.395113][ T31] #0: ffff888078f9f540 (&sb->s_type->i_mutex_key#13){+.+.}-{4:4}, at: sock_close+0x82/0x220 [ 698.412235][ T31] #1: ffffffff9009abc8 ((netlink_chain).rwsem){++++}-{4:4}, at: blocking_notifier_call_chain+0x54/0x90 [ 698.439499][ T31] #2: ffff88802947a8d0 (&nft_net->commit_mutex){+.+.}-{4:4}, at: nft_rcv_nl_event+0x148/0xe60 [ 698.454580][ T31] #3: ffffffff8eb5ff68 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2d0/0x770 [ 698.489135][ T31] 2 locks held by syz.1.4332/27561: [ 698.499436][ T31] #0: ffff888054094180 (&sb->s_type->i_mutex_key#13){+.+.}-{4:4}, at: sock_close+0x82/0x220 [ 698.529181][ T31] #1: ffffffff8eb5ff68 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x38d/0x770 [ 698.549339][ T31] [ 698.551841][ T31] ============================================= [ 698.551841][ T31] [ 698.639432][ T31] NMI backtrace for cpu 1 [ 698.639461][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 698.639503][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 698.639520][ T31] Call Trace: [ 698.639529][ T31] [ 698.639538][ T31] dump_stack_lvl+0xe8/0x150 [ 698.639606][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 698.639748][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 698.639791][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x380 [ 698.639824][ T31] sys_info+0x135/0x170 [ 698.639847][ T31] watchdog+0xfd7/0x1030 [ 698.639890][ T31] ? watchdog+0x1c7/0x1030 [ 698.639925][ T31] kthread+0x388/0x470 [ 698.639956][ T31] ? __pfx_watchdog+0x10/0x10 [ 698.639980][ T31] ? __pfx_kthread+0x10/0x10 [ 698.640012][ T31] ret_from_fork+0x514/0xb70 [ 698.640063][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 698.640094][ T31] ? __switch_to+0xc89/0x1420 [ 698.640125][ T31] ? __pfx_kthread+0x10/0x10 [ 698.640157][ T31] ret_from_fork_asm+0x1a/0x30 [ 698.640197][ T31] [ 698.640205][ T31] Sending NMI from CPU 1 to CPUs 0: [ 698.752430][ C0] NMI backtrace for cpu 0 [ 698.752449][ C0] CPU: 0 UID: 0 PID: 6077 Comm: kworker/u8:17 Not tainted syzkaller #0 PREEMPT(full) [ 698.752471][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 698.752487][ C0] Workqueue: netns cleanup_net [ 698.752622][ C0] RIP: 0010:__this_cpu_preempt_check+0x0/0x20 [ 698.752644][ C0] Code: d4 4b 8c e8 32 ac 58 f5 e8 1d ab 63 f5 eb aa 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1e fa 48 89 fe 48 c7 c7 80 d3 4b 8c e9 fd fe ff ff cc cc cc [ 698.752661][ C0] RSP: 0018:ffffc900062ff490 EFLAGS: 00000046 [ 698.752677][ C0] RAX: 0000000000000006 RBX: ffff88807c2ebe00 RCX: ffffffff94154dc0 [ 698.752691][ C0] RDX: 0000000000000006 RSI: ffff88807c2eca68 RDI: ffffffff8e4b0658 [ 698.752704][ C0] RBP: ffff888050e7a128 R08: ffffffff905776f7 R09: 1ffffffff20aeede [ 698.752718][ C0] R10: dffffc0000000000 R11: fffffbfff20aeedf R12: ffff88807c2eca90 [ 698.752732][ C0] R13: ffff888050e7a118 R14: ffff88807c2eca90 R15: 0000000000000006 [ 698.752746][ C0] FS: 0000000000000000(0000) GS:ffff888124f5e000(0000) knlGS:0000000000000000 [ 698.752761][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 698.752774][ C0] CR2: 00007f6baf5ed2f8 CR3: 00000000282aa000 CR4: 00000000003526f0 [ 698.752791][ C0] Call Trace: [ 698.752798][ C0] [ 698.752805][ C0] lockdep_hardirqs_on_prepare+0x19c/0x270 [ 698.752833][ C0] trace_hardirqs_on+0x28/0x40 [ 698.752856][ C0] _raw_spin_unlock_irqrestore+0x30/0x80 [ 698.752910][ C0] debug_object_activate+0x2ec/0x420 [ 698.752982][ C0] ? __pfx_kernfs_free_rcu+0x10/0x10 [ 698.753029][ C0] call_rcu+0x43/0x8b0 [ 698.753048][ C0] ? do_raw_spin_unlock+0xf5/0x210 [ 698.753070][ C0] kernfs_put+0x622/0x820 [ 698.753098][ C0] kernfs_remove_by_name_ns+0xc8/0x140 [ 698.753128][ C0] sysfs_remove_group+0x101/0x2e0 [ 698.753154][ C0] sysfs_remove_groups+0x54/0xb0 [ 698.753187][ C0] netdev_queue_update_kobjects+0x5c1/0x6b0 [ 698.753273][ C0] netdev_unregister_kobject+0x10b/0x450 [ 698.753297][ C0] unregister_netdevice_many_notify+0x1be4/0x2150 [ 698.753349][ C0] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 698.753372][ C0] ? __pfx_ipmr_free_table+0x10/0x10 [ 698.753430][ C0] ? rtnl_is_locked+0x15/0x20 [ 698.753468][ C0] ? nexthop_net_exit_rtnl+0x258/0x2a0 [ 698.753509][ C0] ? ipmr_net_exit_rtnl+0x17d/0x1a0 [ 698.753535][ C0] ops_undo_list+0x391/0x8d0 [ 698.753563][ C0] ? __pfx_ops_undo_list+0x10/0x10 [ 698.753590][ C0] ? idr_destroy+0x218/0x290 [ 698.753614][ C0] ? do_raw_spin_unlock+0xf5/0x210 [ 698.753637][ C0] cleanup_net+0x572/0x810 [ 698.753664][ C0] ? __pfx_cleanup_net+0x10/0x10 [ 698.753693][ C0] ? rcu_is_watching+0x15/0xb0 [ 698.753722][ C0] ? process_scheduled_works+0xa20/0x14e0 [ 698.753742][ C0] process_scheduled_works+0xa8e/0x14e0 [ 698.753777][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 698.753801][ C0] ? assign_work+0x3cf/0x5d0 [ 698.753823][ C0] worker_thread+0xa47/0xfb0 [ 698.753858][ C0] kthread+0x388/0x470 [ 698.753884][ C0] ? __pfx_worker_thread+0x10/0x10 [ 698.753904][ C0] ? __pfx_kthread+0x10/0x10 [ 698.753929][ C0] ret_from_fork+0x514/0xb70 [ 698.753957][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 698.753982][ C0] ? __switch_to+0xc89/0x1420 [ 698.754006][ C0] ? __pfx_kthread+0x10/0x10 [ 698.754031][ C0] ret_from_fork_asm+0x1a/0x30 [ 698.754057][ C0] [ 699.153909][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 699.160924][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 699.170075][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 699.180173][ T31] Call Trace: [ 699.183488][ T31] [ 699.186453][ T31] vpanic+0x56c/0xa60 [ 699.190487][ T31] ? __pfx___schedule+0x10/0x10 [ 699.195398][ T31] ? __pfx_vpanic+0x10/0x10 [ 699.199970][ T31] ? nmi_trigger_cpumask_backtrace+0x207/0x380 [ 699.206177][ T31] panic+0xc5/0xd0 [ 699.209941][ T31] ? __pfx_panic+0x10/0x10 [ 699.214393][ T31] ? preempt_schedule_common+0x82/0xd0 [ 699.219890][ T31] ? preempt_schedule_thunk+0x16/0x40 [ 699.225293][ T31] ? nmi_trigger_cpumask_backtrace+0x314/0x380 [ 699.231478][ T31] ? nmi_trigger_cpumask_backtrace+0x319/0x380 [ 699.237662][ T31] watchdog+0x1030/0x1030 [ 699.242033][ T31] ? watchdog+0x1c7/0x1030 [ 699.246481][ T31] kthread+0x388/0x470 [ 699.250582][ T31] ? __pfx_watchdog+0x10/0x10 [ 699.255281][ T31] ? __pfx_kthread+0x10/0x10 [ 699.259903][ T31] ret_from_fork+0x514/0xb70 [ 699.264533][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 699.269680][ T31] ? __switch_to+0xc89/0x1420 [ 699.274399][ T31] ? __pfx_kthread+0x10/0x10 [ 699.279019][ T31] ret_from_fork_asm+0x1a/0x30 [ 699.283820][ T31] [ 699.287466][ T31] Kernel Offset: disabled [ 699.291796][ T31] Rebooting in 86400 seconds..