last executing test programs: 8m18.206245912s ago: executing program 0 (id=1602): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) close(0xffffffffffffffff) r1 = socket$kcm(0x29, 0x5, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000000), 0xffffff6a) r3 = socket$kcm(0x29, 0x5, 0x0) sendmsg$kcm(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000b00)="b6bd7e4983a45b31f79d80060400000000000000a33734d88229acf96457ad59d0b87f8659b614043e3d21a7cacecab8bbd26251b93b28b4d83e618673f9c74d0a28a5146c5511549fa617e908352c87d8ddff2ce0", 0x55}, {&(0x7f0000000880)="3aa854", 0x3}, {&(0x7f0000000a40)="746b9120a32aaf78043a9b07000000000000003c44", 0x15}], 0x3}, 0xc854) setsockopt$sock_int(r3, 0x1, 0x12, &(0x7f0000000180)=0x4c, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendfile(r1, r2, 0x0, 0xffffffff000) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a14000000000a01040000000000000000010080032c000000030a05000000000000000000010000000900010073797a30000000000900030073797a320000000078000000060a010400000000000000000100100008000b400000000050000480340001800b000100657874686472000024000280080001400000000e0800034000000000080004400000002205000200890000001800018011000100666c6f775f6f66666c6f6164000000000900010073797a3000000000140000001100010000000000000000000000000a"], 0xe0}}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r2, 0x0, 0x40000) sendmsg$NL80211_CMD_RELOAD_REGDB(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x14, r5, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) r6 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r6, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) connect$inet(r6, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r6, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f00000000c0)='bbr', 0x3) recvfrom$inet(r6, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) ioctl$AUTOFS_IOC_CATATONIC(r0, 0x9362, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001980)={&(0x7f00000019c0)=@delchain={0x22f8, 0x65, 0x100, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x2, 0xfff3}, {0x5, 0x8}, {0x1f, 0x3}}, [@TCA_CHAIN={0x8, 0xb, 0xd76}, @filter_kind_options=@f_bpf={{0x8}, {0x22c4, 0x2, [@TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_OPS={{0x6, 0x4, 0x4}, {0x24, 0x5, [{0x4, 0x4, 0xd9, 0x3ff}, {0x8, 0x98, 0x8, 0x3}, {0x4, 0x3, 0x9, 0xfffffff4}, {0x5, 0x1, 0x2, 0x6}]}}, @TCA_BPF_ACT={0x226c, 0x1, [@m_csum={0x160, 0xb, 0x0, 0x0, {{0x9}, {0x90, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x9, 0x9, 0x7, 0xc, 0x8000}, 0x36}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x0, 0x6, 0x2, 0x2, 0xffffffff}, 0x66}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x3, 0x7, 0x1, 0x7, 0x401}, 0x2c}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x9, 0xff, 0x20000000, 0x4, 0x1}, 0x21}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x8, 0x3ff, 0x20000000, 0x7ff, 0xfffffe5a}, 0x5f}}]}, {0xa6, 0x6, "7248d3ec12973d09fcd027791dae7e2f903439d3a94e9eb7adf72919ec4c43895d5713f19521b6324a537841f1ebc41db34c02bab7cd31fca7f71778c8a4c2b2b35c29cc299424d4bdb1f7005f8e0bcf48d1627fcf40755ab429e041fefbed1968b849aa35d510281cfa8dd35c3b334b628a8f94a14fae1c71694d35b1ee1e35c959b609e0f82b156b61bf6a460ac478758b430e9f29ada12c95a015637c0cc3394b"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_pedit={0x1cf4, 0x5, 0x0, 0x0, {{0xa}, {0x1ca4, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe50, 0x2, {{{0x5, 0xfffffff8, 0x5, 0x8, 0x1}, 0xa, 0x2, [{0x1, 0x1, 0x4, 0x24000, 0x1, 0x7}, {0xfffffffd, 0x8, 0x5, 0x7023, 0x7ff, 0x3}]}, [{0x8, 0x2, 0x4, 0x9, 0x2, 0x5}, {0xffffffff, 0x1571, 0x7, 0x2, 0x1, 0x6}, {0x1, 0x7, 0x0, 0x2, 0x3, 0x8}, {0x80000001, 0x8, 0x8, 0x4, 0x1, 0x73}, {0x3, 0x6, 0xe, 0x7, 0x7918f95c, 0x4}, {0x1b, 0x9, 0x62b1dada, 0xfff, 0x7fff, 0x6b}, {0x6, 0x3, 0x1, 0x10001, 0x44, 0x3}, {0x4, 0x4, 0x1, 0xe31, 0x4, 0x68}, {0xffff7b7a, 0x5, 0xffffffff, 0x9, 0x10, 0x1}, {0x1126, 0x4, 0xffffffff, 0x0, 0x2}, {0x40, 0x7, 0xbcc, 0x7, 0x0, 0x3ff}, {0xa, 0x2, 0x4, 0x8001, 0x2, 0x6}, {0xe46, 0x4, 0x7, 0x2, 0x2, 0x57}, {0x7, 0x3d27, 0x1000004, 0x5, 0x2, 0x4}, {0x3, 0x3, 0x3, 0x3, 0x7, 0x5}, {0x5, 0x4d5, 0x7, 0x2, 0x5, 0x9}, {0x8, 0x2, 0xa5, 0x8, 0xfff, 0x7}, {0x3, 0x5, 0x8001, 0x8}, {0x200, 0x2, 0x1, 0x8, 0xff, 0x5c7b}, {0x28, 0x7, 0x6, 0x10, 0x2}, {0x2, 0x2, 0xffff8000, 0x6, 0x0, 0x3a}, {0x800, 0x2, 0x7, 0x5, 0x7fffffff, 0x8}, {0xc9, 0x3, 0xb, 0x3, 0x7fffffff, 0xff}, {0xfffffffe, 0x5c4, 0x9, 0x0, 0xfffffbff, 0xfffffff7}, {0x1fffc000, 0xffffbf54, 0xea, 0x6, 0x8d7, 0x1}, {0x8, 0x5, 0x6c2, 0x8, 0x7ff, 0x3}, {0x0, 0x3, 0x5, 0x40, 0x4, 0x6}, {0xffffffff, 0x730, 0x4, 0x8001, 0xe0, 0x1ff}, {0xfffffff7, 0x3, 0x8, 0x62f3, 0x4, 0x3}, {0x800, 0x1, 0x1ff, 0x35547e4, 0x6, 0x1000}, {0x1, 0x5, 0x0, 0x4, 0x81, 0x9}, {0x400, 0x101, 0x9, 0x0, 0x2, 0x3}, {0x4, 0x7, 0x401, 0xb, 0x1}, {0x1317, 0x1, 0x0, 0x80000001, 0x7, 0x94d}, {0x2, 0x40, 0x6, 0x19c, 0x9, 0x5}, {0x1, 0xc0fa, 0x2, 0x80, 0x0, 0xff}, {0x81, 0x0, 0x44c, 0x3, 0x1, 0x6}, {0x3, 0xff, 0x5eac1937, 0x100, 0x1}, {0xfffffffe, 0xfff, 0x4, 0x2, 0x28000, 0x7fffffff}, {0x5, 0x1, 0x8, 0x3, 0x1, 0x80}, {0x101, 0x889c, 0xb, 0x8000, 0x0, 0x5}, {0x8, 0x300, 0x1, 0x9, 0x5f80c74e, 0xa59}, {0x6, 0x4, 0x0, 0x4, 0x3, 0x2}, {0x8, 0x0, 0x1, 0x6, 0xade7, 0xfffffffc}, {0x574b, 0x7, 0x4, 0x8}, {0xc, 0x4, 0x8, 0xc1f, 0xf, 0x8000}, {0x5, 0x37f, 0x1000, 0x4, 0x1fc, 0x9}, {0xffff3ecd, 0xffffff45, 0x7f, 0xaee, 0xb, 0x7}, {0x3ff, 0x0, 0xc3, 0x7, 0x80}, {0xc9, 0x9, 0x1, 0x7b0a7f11, 0x200, 0x9}, {0x8, 0xf37, 0x80000001, 0xe, 0x2, 0x500}, {0x0, 0x3, 0x2a81, 0x8001, 0x2, 0x9}, {0x5, 0x6, 0x1000, 0xfffffff9, 0x8, 0x4}, {0x7, 0x1, 0x5, 0x9, 0xc34, 0x8001}, {0x4, 0x7, 0xcd89, 0x565f, 0x6, 0x1000}, {0x5, 0x3f29cd3c, 0x81, 0x6, 0x6, 0x1ef}, {0x6, 0x9, 0x2, 0x9, 0x1, 0x800}, {0x8ab, 0xd3a, 0x4, 0x3, 0xa, 0x3}, {0x80, 0x7ffb, 0xc2c000, 0x1, 0x5f3c, 0x1}, {0x10000, 0x8, 0xffffffff, 0xcf, 0x2, 0x1}, {0x9, 0x86af, 0x7a, 0x3e, 0x1}, {0x2, 0x8000, 0x2, 0x7c, 0x80000001, 0xffffc3d8}, {0xa, 0xb, 0x4, 0x2, 0x4, 0x9}, {0x1, 0x7ff, 0x24, 0x1e, 0x7, 0x1}, {0xffffffff, 0x8, 0x0, 0x8001, 0x89, 0x3}, {0xc, 0x1, 0x9, 0x400, 0x2, 0x7fff}, {0xcc, 0x8000, 0x9, 0xfffffff7, 0x4, 0xd08f}, {0xe, 0x9, 0x8, 0xb, 0x0, 0x8}, {0xdb15, 0x40, 0x46fe, 0x5, 0x4, 0x80}, {0x2, 0x200, 0x3, 0x7, 0xe0, 0xcbc1}, {0x7, 0x3, 0x0, 0xed0, 0x3, 0x8}, {0x3, 0x2, 0x8, 0x1, 0xffffffc0, 0x8}, {0x7, 0x3, 0x5, 0xffffffff, 0x400}, {0x14a, 0x7, 0x0, 0x4df6, 0x2, 0x7}, {0x10, 0x0, 0x4, 0xfffffffc, 0x2, 0x101}, {0x4, 0x6, 0x608d, 0x9427, 0x9, 0x1}, {0x40, 0x3, 0x11, 0x9, 0x80000000, 0x8000}, {0x4, 0x3, 0x32c8, 0xef, 0x9346, 0x800}, {0xf, 0x4, 0xfa6, 0x1, 0x7ff, 0x5}, {0x8, 0x5, 0xc, 0x6, 0x4, 0x7}, {0x0, 0x400, 0x1ff, 0x53, 0x10, 0x7f}, {0x4, 0x8, 0x2, 0x7, 0x40, 0x4}, {0x2, 0x6e, 0x4, 0x7, 0x2, 0xffff039d}, {0x6, 0x7, 0x80000000, 0x5, 0x6d, 0x8}, {0x9, 0x6, 0x7, 0xf1, 0x3, 0x1}, {0x10, 0x2, 0x745, 0xfffffff9, 0x7, 0x7}, {0x8, 0x9, 0x17e6, 0x8, 0x101, 0x9}, {0xd, 0x9, 0x61, 0x0, 0x916, 0xf8}, {0xfffff870, 0x2, 0x4, 0x89, 0x8, 0x8}, {0x1, 0x9, 0x0, 0x0, 0x6, 0x1}, {0x5a, 0xffff0000, 0x80000001, 0x81, 0x1, 0xfffffff4}, {0x1, 0x4, 0x40, 0x0, 0x4, 0xfffffffc}, {0x1, 0x2, 0xe, 0xcd33, 0x9, 0x8}, {0x5, 0x400, 0x1, 0xd, 0x80000001, 0xf}, {0xffff, 0x4, 0x3, 0x6b, 0x5, 0x3}, {0x2, 0x100000, 0x5, 0xcc, 0x88e, 0x2}, {0x7fffffff, 0x80, 0x5de1d231, 0x6, 0x3, 0x3}, {0x0, 0x6, 0x200, 0x2, 0x7, 0x9}, {0x400, 0xd, 0x5, 0x7, 0x0, 0xd9}, {0xf238, 0x4, 0x1, 0xffff, 0xf99, 0x8}, {0x3, 0x401, 0x1, 0xfffffffa, 0x8000}, {0x5, 0xfff, 0x8100000, 0x100, 0x3, 0x2}, {0x39, 0x5, 0x5, 0x9, 0xffffffff, 0x6}, {0x0, 0xb3df, 0x8, 0xffff, 0x2, 0xa1c7}, {0x800, 0x1, 0x2, 0xb8, 0x4, 0x7}, {0xc1, 0x6, 0x8, 0x6, 0x6}, {0x2, 0x8, 0xfffff001, 0x2, 0x10000, 0x53}, {0xd3, 0x10004, 0xf1, 0x9, 0xa9, 0x7b2f}, {0x76, 0x4, 0xb06e, 0x9, 0x70, 0x1}, {0xf, 0x1, 0x8, 0x9668, 0x1fcf, 0xb70}, {0x6, 0xffffffff, 0xfffffff5, 0x7, 0x80000001, 0x3}, {0x8, 0x8, 0x6ad, 0x1fa1, 0x29, 0x1ff}, {0x2e90, 0xffff, 0x58, 0xab, 0x3, 0x5}, {0x7, 0x5, 0x5, 0xffffffff, 0x1, 0x6}, {0xfbbb, 0x0, 0x7, 0x5, 0x8, 0x9}, {0x7, 0x5, 0x2, 0x1000, 0xc}, {0x401, 0xee1, 0xfffffe00, 0x0, 0x2, 0x4}, {0x0, 0x480000, 0x282, 0x6, 0xffff2d43, 0x8}, {0x7, 0x4, 0x9, 0xac6, 0x6, 0x9}, {0xfffffff7, 0x0, 0xd, 0x2, 0x4, 0x6}, {0x7fff, 0x10001, 0x1000, 0xffff, 0x4, 0x4}, {0xffff, 0xecb, 0x5, 0x81, 0xfffffe01, 0x10001}, {0x9, 0x8e01, 0xc5, 0xae06, 0x4000, 0x7f}, {0x2, 0x8, 0x5, 0x2, 0x0, 0x5}, {0x0, 0x3225, 0x41, 0x8, 0x1, 0x4}, {0x3, 0x8, 0xc, 0x1, 0x2c1d, 0x6}, {0xe, 0x1, 0xc, 0x8, 0x8, 0xfffffe01}, {0x1d, 0x2, 0x7, 0x0, 0x159, 0x1}], [{0x4}, {0x4}, {0x0, 0x1}, {0x6, 0x1}, {0x1}, {0x0, 0x1}, {0x1}, {0x3}, {0x1, 0x1}, {0x6f430f49ed6ac6bd}, {}, {0x3, 0x1}, {0x1, 0x1}, {0x4}, {0x1, 0x1}, {}, {0x1, 0xf61cabe603c30892}, {0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x2}, {0x5}, {0x1}, {0x3, 0x1}, {0x6}, {0x5, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {}, {0x0, 0x1}, {0x1}, {0x4, 0x1}, {0x2}, {0x0, 0x1}, {0x1, 0x1}, {0x1}, {0x4}, {0x1}, {}, {0x4, 0xc6ccb7e81ed9de50}, {0x3, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {}, {0x3, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x2}, {0x0, 0x1}, {0x4}, {0x1, 0x1}, {0x2, 0x1}, {0x1}, {0x3}, {0x5, 0x1}, {0x2, 0x1}, {0x4}, {0x5}, {0x5, 0x1}, {0x4}, {0x2}, {0x2}, {0x3}, {0x2}, {0x3, 0x1}, {0x5}, {0x5, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x1}, {0x0, 0x1}, {0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {}, {0x2}, {0x1}, {0x3, 0x1}, {}, {0x4, 0x1}, {0x2}, {0x1}, {0xb28d00a83ffcc2c7}, {0x4, 0x1}, {0x3}, {0x4, 0x1}, {0x4}, {}, {0x4, 0x1}, {0x4, 0x1}, {0x5}, {0x3}, {0x1}, {0x3, 0x2}, {}, {0x2}, {0x3, 0x1}, {0x3}, {0x3}, {0x1, 0x1}, {0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x4}, {}, {0x3}, {}, {0x1}, {0x0, 0x1}, {0x6, 0x1}, {0x5}, {0x3, 0x119e686731f243b4}, {0x2}, {0x3, 0x1}, {0x3, 0x1}, {0x5}, {0x4, 0x1}, {0x4, 0x1}, {0x5}, {0x2}, {0x2, 0x1}, {0x4, 0x1}, {0x4}, {0x3}], 0x1}}, @TCA_PEDIT_PARMS={0xe50, 0x2, {{{0xf9, 0xc, 0x0, 0x0, 0x6}, 0xc5, 0x5, [{0x4, 0x1d9, 0x6f37, 0x3, 0x1}, {0x0, 0x67497ca5, 0x6ba6, 0x80000000, 0x4, 0x3001}]}, [{0x1, 0x8, 0x8, 0x7, 0x5, 0xfffffe74}, {0x1, 0x6, 0x9, 0xfffffffe, 0x7, 0x9}, {0x0, 0x21a, 0x9, 0x1, 0x800, 0x40}, {0x6, 0x24, 0x111, 0xf, 0x1}, {0x7, 0x6a0, 0x400, 0xc7f, 0x5, 0x71}, {0xb40, 0x8, 0xe, 0x9, 0x45a47ecd, 0x5}, {0x3, 0x6b, 0x880, 0x8, 0x1, 0x1000}, {0x9, 0x3, 0xd, 0xfffffff7, 0x4a77, 0x10001}, {0x9, 0x8b5f, 0x2, 0x9, 0xf1a, 0x7}, {0x200, 0xf0000000, 0x3, 0xa6f, 0xb49, 0x7}, {0x8790, 0xffffffb0, 0x7, 0x8, 0xfffff000, 0xffff8000}, {0x3, 0x7, 0x9, 0x7313f36f, 0x1, 0x7ff}, {0xcd9, 0x5c, 0x3ff, 0x7, 0xc0e3, 0xf93e}, {0x4, 0xffffffff, 0x9e, 0xd, 0x3, 0x4}, {0x5, 0xf6, 0x7, 0x1, 0x5, 0x5}, {0x1, 0x1, 0xe, 0x7, 0x2}, {0x82, 0x7c17, 0x770c, 0x4, 0x1, 0x7fff}, {0x5, 0x9, 0x522, 0x7, 0xd23, 0x4}, {0x1, 0x8b29, 0x1, 0x8, 0x2, 0x8}, {0x9, 0x9, 0x9, 0xffff, 0x669, 0xe}, {0x8000, 0x0, 0x6, 0xfb13, 0x291, 0x6}, {0x6, 0x0, 0xc, 0x9}, {0x5658747, 0x3, 0x0, 0x8, 0x6, 0x8}, {0x6, 0x89, 0x5, 0xea, 0x800, 0x7}, {0x4, 0xa, 0x6, 0x3, 0x76, 0x1ff}, {0x7e7, 0x1, 0xd, 0xb9, 0x8, 0x7ff}, {0x3, 0x2, 0x9, 0x7, 0xf72}, {0xe0f, 0x5, 0x800, 0x5, 0x44f5, 0x3}, {0x8, 0x9, 0x1, 0x2a, 0x4, 0x6}, {0x8, 0x9, 0x2, 0x7, 0x3, 0x3}, {0x5, 0x5, 0x1, 0x8, 0x9, 0xfffffffd}, {0x9, 0xe, 0x5, 0x5, 0xfffffe47}, {0x1, 0x8000, 0xf, 0x1, 0x8, 0x7ef}, {0x0, 0x5ae, 0x10, 0x4, 0xd8f, 0x6}, {0x9, 0xc, 0x6, 0xd, 0x8, 0x5}, {0x10000, 0x2, 0x4, 0x80, 0x4, 0x2}, {0x100, 0xc, 0x10000, 0x9, 0x6, 0x7fff}, {0x6, 0x3ff800, 0x0, 0xd, 0x8, 0x1d}, {0x80000000, 0x4, 0x8, 0x7819, 0x400, 0x10}, {0x596, 0x1, 0x1, 0x0, 0x4c81ae93, 0x5d4c}, {0x101, 0x0, 0xe, 0x1948, 0x111, 0x1ff}, {0x7, 0x3, 0x5f31, 0x8, 0x8, 0x8a6b}, {0xf1, 0xffffff80, 0x5, 0x6, 0x5, 0x10000}, {0x5, 0xfffff38e, 0x8, 0x0, 0x2, 0xda}, {0x7, 0x5, 0x95, 0x10f, 0xffffffff, 0x8001}, {0x1, 0x6, 0x0, 0x0, 0x1, 0xa}, {0x5, 0x1, 0x0, 0x0, 0x1000, 0x7}, {0x8, 0x2, 0x5, 0xf4, 0xf8, 0xe}, {0x80, 0x8f7, 0x5714, 0x6, 0x7fffffff, 0x7}, {0x8, 0x3, 0xb708, 0x80000001, 0x5, 0xff}, {0x6, 0x80000000, 0x354, 0x1ff, 0x3, 0x1}, {0x1, 0x10, 0x758, 0x1, 0xa, 0xfffffffa}, {0x9, 0x0, 0x5, 0xc15, 0x80000001, 0x9}, {0x3, 0x8, 0x4, 0x6, 0x9, 0x5}, {0x101, 0x9, 0x87, 0xffe, 0x8, 0x1}, {0x9, 0x0, 0xfffff000, 0x9, 0x10, 0x7}, {0x86a7, 0x1dbe, 0x6e41, 0xfffffff6, 0x7, 0x101}, {0x7, 0x2, 0x2, 0x7, 0x7, 0xdd9a}, {0x3, 0x4, 0x4, 0x5, 0x2, 0x7}, {0x2, 0x9, 0x2d, 0x2, 0x2, 0x8}, {0xded8, 0x6, 0x9a3, 0xffff, 0x67, 0xa}, {0x4, 0x7, 0x1, 0x1, 0xb, 0x8a2}, {0x21641a49, 0x3, 0x1ff, 0x40, 0x5, 0x2}, {0x18e000, 0x6, 0x8001, 0xffffffff, 0x10001, 0x1}, {0x0, 0x7fff, 0x0, 0xffffffb0, 0x0, 0x140000}, {0x9, 0x101, 0x80000000, 0x2, 0xc39, 0x7}, {0x5, 0x1, 0x8000, 0x4, 0x2, 0x3f3}, {0x7, 0x8000, 0xffffffff, 0x0, 0x1, 0x3}, {0xf, 0x9, 0xb, 0x0, 0xfffffffc, 0xc}, {0x1, 0x5, 0x7, 0x8001, 0x0, 0xb}, {0x6b9, 0x4, 0x7, 0x4, 0x9, 0x2}, {0x2, 0x3, 0x4d147f5d, 0x3, 0x7fc00, 0x20000002}, {0x4, 0x1, 0x9, 0x3ff, 0x3, 0x81}, {0x101, 0x7fff, 0x5, 0x7fff, 0x8, 0x6}, {0x6cc, 0xd, 0xe880, 0x1, 0x3, 0x4}, {0x74f2, 0x1c, 0x5, 0x1aa, 0x1000, 0x7f}, {0x9, 0x1, 0x7fffffff, 0x1, 0x3, 0x6}, {0x100, 0x8, 0x4, 0x7, 0x4, 0x8000000}, {0x4, 0x926, 0x1ff, 0xfffffffb, 0x1, 0x3}, {0x5, 0x6, 0xb, 0x3ff, 0xfffeffff, 0x5}, {0x8, 0x5, 0x6ad, 0x0, 0x5, 0x7}, {0x7, 0x6348, 0xc20, 0xffff7fff, 0xfffffffe, 0x800}, {0x6, 0x6, 0x7, 0xf4, 0x7, 0x10}, {0x6, 0x5, 0xffff, 0x40, 0x60a45124, 0xd}, {0xec, 0xffffffff, 0x1128, 0x192c, 0xa, 0x800}, {0x5, 0x9, 0x100, 0x8, 0xfffffffa, 0x8}, {0xfff, 0xfff, 0x4, 0x8001, 0x5, 0xe289}, {0xe, 0x1ff, 0x4, 0x4, 0x0, 0x8}, {0x1, 0x9, 0x9, 0x0, 0x6, 0xbfb5}, {0x40000, 0x96, 0xbe5, 0x1ff, 0x8, 0x9}, {0x0, 0x67, 0xff, 0x5, 0x10, 0x8}, {0x20000000, 0x0, 0x7, 0x7, 0x0, 0x8000}, {0x9, 0x4, 0x1, 0x9, 0x3, 0x8000}, {0xb, 0x3, 0x0, 0x8, 0x8b4, 0x7}, {0x86f, 0x1, 0x1, 0x2, 0x3, 0x3}, {0x47, 0x6012, 0x8001, 0xfffffff8, 0x0, 0x5}, {0x0, 0x100, 0x9, 0x6, 0x5, 0x7}, {0xffffffff, 0x8, 0x5a6, 0x8000, 0x2, 0x2}, {0x2e, 0xc7c, 0x4, 0x8000, 0xd, 0xfff}, {0x9, 0x9, 0x0, 0x7, 0x3, 0x6}, {0x4, 0xb3, 0x1, 0x8, 0x7fffffff, 0x2}, {0x28a, 0x5, 0x8, 0x4, 0x7, 0x5}, {0x38, 0x4, 0x4, 0x6, 0x81, 0x3}, {0x80000000, 0x1000, 0x8, 0x5, 0x5, 0x2}, {0x400, 0xbb, 0x8, 0x5, 0x5, 0x2}, {0x8, 0x9, 0x1, 0xfff, 0x200, 0x471}, {0x2, 0x0, 0x0, 0x1, 0x0, 0xfffffffe}, {0x1, 0xa, 0x3a, 0x3ff, 0x7, 0x1137}, {0x0, 0x0, 0x8000, 0x5, 0x5, 0x9}, {0x8001, 0x8e2, 0x7, 0x8, 0x4, 0x1b43}, {0x400, 0x4, 0xc, 0x6, 0x698, 0x6}, {0x6314, 0x0, 0x10001, 0x3ff, 0x8000, 0x7fff}, {0x6, 0x1, 0x5, 0x8, 0x88}, {0x2, 0xf22a, 0xe475, 0xa, 0x4, 0x744b8102}, {0x7, 0x2a6, 0x8, 0x5, 0x1, 0xd}, {0x5, 0x2, 0x5, 0x9, 0xd9eb12d, 0x5}, {0xd8, 0x1, 0x7, 0x3d, 0x100}, {0xe, 0x0, 0x10000, 0x3, 0x800, 0x6}, {0x68000000, 0x1, 0xfff, 0x3, 0x67, 0x8}, {0x101, 0x4, 0x8, 0x4, 0x1000, 0xfffffffe}, {0xa28d, 0x4, 0xffffff7e, 0xcf, 0x7fffffff, 0x2}, {0x80b, 0x54, 0xe02, 0xd90a, 0xd, 0x3}, {0x7645, 0x2, 0x4c9, 0x9, 0x3, 0x1}, {0x8, 0x37, 0x3, 0x9, 0x2, 0x3}, {0x3, 0x3, 0xfffffff8, 0x3, 0x0, 0xfffffdbc}, {0xfffffffe, 0x1, 0xd89e, 0x1000, 0x3, 0xffff}, {0x9, 0xf574e1e, 0x3, 0x0, 0x8, 0xb}, {0xfffffff2, 0x8, 0x3, 0x6, 0x5, 0x7ff}], [{0x3}, {0x3, 0x1}, {0x3}, {0x3, 0x1}, {0x2, 0x1}, {0x4}, {}, {0x2}, {0x5}, {0x4, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x3}, {0x2}, {0x0, 0x1}, {}, {0x0, 0x1}, {0x3, 0x1}, {0x3}, {0x0, 0x1}, {0x1, 0x1}, {0x3}, {0x3}, {0xaf8bba8d0517b9e0, 0x1}, {0x2}, {0x4}, {0x5, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x2}, {0x1}, {0x1, 0x1}, {0x5}, {0x3, 0x1}, {0x5}, {0x3}, {0x4, 0x1}, {0x4, 0x1}, {0x3}, {0x5}, {0x4, 0x1}, {0x5}, {0x4, 0x1}, {0x2}, {0x2}, {0x4, 0x1}, {0x0, 0x1}, {0x4}, {0x3}, {0x2, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {}, {0x2, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {}, {0x2, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x5}, {}, {0x1, 0x1}, {0x1}, {0x2}, {}, {0x1}, {0x3}, {0x5}, {0x3, 0x1}, {0x2}, {0x0, 0x1}, {0x2, 0x1}, {0x4}, {0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x1}, {0x5, 0x46ad83950480526d}, {0x3}, {0x3, 0x1}, {0x0, 0x1}, {0x5}, {0x1}, {0x1, 0x1}, {0x3}, {0x4}, {0x1}, {0x5}, {0x4, 0x1}, {0x2}, {0x1, 0x1}, {0x4, 0x1}, {0x3}, {0x0, 0x1}, {0x5, 0x1}, {0x2}, {0x3}, {0x3}, {0x5}, {0x5, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x3}, {0x1}, {0x5}, {0x4, 0x1}, {0x2}, {0x1}, {0x3}, {0x2, 0x1}, {0x2, 0x1}, {0x5}, {0x4}, {0x5, 0x1}], 0x3}}]}, {0x25, 0x6, "ad708099198a0ec1c38872c6b6baebd4c106afa40a3f91a999ddfd290aff460197"}, {0xc, 0x7, {0x1}}, {0xc}}}, @m_bpf={0x88, 0xb, 0x0, 0x0, {{0x8}, {0x40, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x6, 0x6, 0x2, 0x4, 0x400}}, @TCA_ACT_BPF_OPS={0xc, 0x4, [{0x0, 0xff, 0xfe, 0x8}]}, @TCA_ACT_BPF_OPS={0xc, 0x4, [{0x0, 0x7, 0x2, 0x80}]}]}, {0x22, 0x6, "6d36347a1242181465b574a64f523ba2c253db69f9aaae8e13306c1ee24b"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}, @m_skbmod={0x130, 0x5, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x3f800000, 0x5, 0x20000000, 0x9, 0x5}, 0x8}}]}, {0xde, 0x6, "69deacbdb4d5354b30928698782d736f79e7c689cee4c3027b569f62a841f2be5fc5fa659f7c79d435fdb9eb4130bd9a6e3eb3200751586ff5ebdbe62df3b5244259af3f5ab21497e550eb025982bb3aa9d76283e85cc2b6f4eba308b31283715dd3781e328e5a49c8fc610eb9a8974697a5f320053b221f97769a90b0caea859a8a0cbe58102aaff47f853d9ee7bf8f72ca959b7262a0819604a2d6ba6413d1e50f9c88ed91e089a5c2afb38e863f46d780a1b627ed66d93754d9a23cc9588ffebf1dd4753859e1a9c0d2ed16fd969b8d5943a06cfc9b822dcf"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_mirred={0x25c, 0x15, 0x0, 0x0, {{0xb}, {0x144, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0xc, 0x72523fe1, 0x7, 0x0, 0x6}, 0x1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x4, 0x9, 0x4, 0x5, 0x2}, 0x4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x9, 0x3, 0x20000004, 0xb, 0x3}, 0x3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x4674, 0xa444, 0x2, 0x7d2b, 0xb}, 0x3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x81, 0x26, 0xffffffffffffffff, 0x2, 0x9}, 0x2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x3, 0x6366, 0x5, 0xc, 0x4}, 0x1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0x7, 0x2, 0x2, 0x4}, 0x4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0x7, 0x20000003, 0x6, 0x8}, 0x4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xa3c, 0x967, 0x5, 0x6, 0x80000001}, 0x2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xd, 0x480, 0x3, 0x8001, 0x2d5}, 0x1}}]}, {0xee, 0x6, "d5ef8b5f42f53bb630ae6a50d648f8db0da6ec9de7b6ed4b891485781d2737a05144751ea216feb8fea7f028badf7d9963b01a1342cb62d463074d2b2a31fda8391398621e9540f33c7156ca45fda84d4f64296dcbd827f37628708490db199c49ad999ec23719dfa8575af2554fde2bc5a24ea7eca62ed49122be5e79147a6b087cda880c7b4cfd2a29f74807ee36fe5c6584c9e5aa2d114b4d0dbc2a672d21e1f20f6acee403ac8599a3095cd44241a7ca22609226f1108b4d2467c57efec0af77b76e2326fcb8b5c378501c0d2a914d28304beac051584d3f064e9f573a85b5b42c8dd95d94696b4d"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}, @TCA_BPF_FLAGS={0x8}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x7}]}}]}, 0x22f8}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x600, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="440000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000008001b000000000004001a80180002"], 0x44}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) 8m17.172859908s ago: executing program 0 (id=1609): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'bond0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @hsr={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000041000701fefffffffeffffff017c0000040042800c00018006000600800a000014000280100014"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0x44014) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xa, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000fa3f000000000000080000008500000075000000850000000500000095"], &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @fallback=0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r5, 0x0, 0xe, 0x0, &(0x7f00000000c0)="00000000000000ce94327fc1a80c", 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r6 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r6, &(0x7f00000009c0)={&(0x7f00000000c0)={0x2, 0x4001, @empty}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x20044818) sendmsg$sock(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000380)='b', 0x1}], 0x1, &(0x7f0000000140)=[@timestamping={{0x14, 0x1, 0x25, 0x303}}], 0x18}, 0x4000081) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=@newlink={0x60, 0x10, 0x4, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r4, 0x80}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IFLA_GRE_LOCAL={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x15}}]}}}]}, 0x60}}, 0x0) 8m15.503068227s ago: executing program 0 (id=1621): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0xa, 0x3, 0xff) sendmsg$unix(r1, &(0x7f00000021c0)={&(0x7f0000000200)=@abs={0x0, 0x0, 0x4e20}, 0x6e, 0x0, 0x0, &(0x7f0000002180)=[@rights={{0x10, 0x1, 0x4f}}], 0x10}, 0x880) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000280)="390000001300090468fe0700000000001000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007208", 0x39}], 0x1) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="340000001400010004000000fedbdf250a00000004000000080008800402478014000280bf"], 0x34}, 0x1, 0x0, 0x0, 0x20000885}, 0x4800) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$sock_int(r3, 0x1, 0x46, &(0x7f00000000c0)=0x4, 0x4) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000380)="3900000013000318680907070000000f0000ff3f04000000170a001700000000040037000f00030001332564aaee7b1d58b9a64411f6bbf44d", 0x39}], 0x1) read(r0, &(0x7f0000000140)=""/193, 0xc1) 8m15.144145476s ago: executing program 0 (id=1625): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc00000019000100000000000000000020010000000000000000000000000000ac14141500000000000000000000000000000005000000030a00200000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000ac00000000000000ff0f000000000000ffffffffffffffff0000000000000000ffffffffffffffffffffff7f0000000000000100000000000200000000000000000a00000000000000000000008040000000000000000008000000000000000001000003000000004400050000000000000000000000000000000000000004d23c00000000000000fffffeff00000000000000000000000000000000000300004900"/180], 0xfc}}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$kcm(0xa, 0x1, 0x106) r2 = socket$inet6(0xa, 0x3, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x560, 0x0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x490, 0xffffffff, 0xffffffff, 0x490, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'vxcan1\x00', {0x8}}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xfd}}, [], [0x0, 0xffffffff], 'pim6reg\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x3a0, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_virt_wifi\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x5}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'bridge_slave_0\x00', {0x53}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x5c0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb92e0a4831371c00000069bd6efb2502eaf60d000100020400bf050005001201", 0x2e}], 0x1}, 0x0) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB="140100002f00010000000000fcdbdf250401f2800c00180008ac0f00000000001400010001000000000000000000ffffac14141650bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec587547"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000000c0)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000064010100000000000000000000000000fc01000000000000000000000000000000000000000000000a0000"], 0xfc}}, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) r5 = socket$kcm(0xa, 0x1, 0x106) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000080), r6) sendmsg$kcm(r5, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4e23, 0x9, @loopback={0x0, 0x7ffffffe}, 0x2}, 0x80, 0x0}, 0xe07e872420dfefca) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r9 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r8, &(0x7f0000000240)=ANY=[@ANYBLOB="034886dd010000000000140000006000000000082f00fe88a43de1a400000000000000027d01ff0200000000000000000000000000010000883e"], 0xfdef) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b80)=ANY=[@ANYRES32, @ANYRES32=0x0, @ANYBLOB="09a00100068100001c0012800b000100773931948dc86fb7061a1709e68462726964676500000c00028005000200000000000a0001000000aaaaaaaa00005da5b7afd69380c16dff87a06c4de4bef5077c71bfdbc6902dcacc323b2745be4d23601f37e3be1ba59f9230784b5800abd9f7f29b435b7de73a4b129236872affde9742ee32df62cc2a0611e4610405ed6ef968682128df08a3b45b26489f7888a348046fa92183e1a0747c"], 0x48}}, 0x20000000) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x8008010) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="b8000000190001000000000000000000e00000020000000000000000000000000000000000000000000000000000000000000000000300000a00000029000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="0000007c20445ba0621e00000000000007000000000000000000000000400000000000000200000b0200000000000000ffffffffffffff5a04ff00000000000000000000000000000000000000000000000000000000000000ffffffffffffff000000100000000000000000000000000029225d09a0407a1e07ec"], 0xb8}}, 0x4008004) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_route(0x10, 0x3, 0x0) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340)={0x0, 0xa}, 0xd58495bc, 0x0, 0xffffffffffffffff, 0x2dc2c9024f5022d2}, 0x29) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r11, 0x2000012, 0xffffffffffffffca, 0x0, &(0x7f0000000c40), 0x0, 0x7ffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 8m13.932961963s ago: executing program 2 (id=1631): socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000005000000080000000f"], 0x50) socket$inet_tcp(0x2, 0x1, 0x0) pipe(&(0x7f0000000080)) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000fa0000000000000000010000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x8}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0xa, 0x2, 0x73) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket$netlink(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x2, 0x300) socket$inet6(0xa, 0x3, 0x8000000003c) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=@newtaction={0x144, 0x30, 0xb, 0x70bd2b, 0x25dfdbfb, {}, [{0x130, 0x1, [@m_ct={0x68, 0x1, 0x0, 0x0, {{0x7}, {0x40, 0x2, 0x0, 0x1, [@TCA_CT_ZONE={0x6, 0x4, 0xf45}, @TCA_CT_ACTION={0x6, 0x3, 0x2d}, @TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}, @TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @local}, @TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e24}, @TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e21}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}, @m_csum={0xc4, 0x1a, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x4, 0x4d5, 0x8, 0x1, 0x200}, 0x64}}]}, {0x7a, 0x6, "0cd2ac01b3fb9ad2e9121078f76e149e490cf0ac7f376c6ecb79ea97d5a7422e8529ad6ae66dda0fd973a713f08bc46e102b44295ca52ae3c82f254e898d541ce8d34411f446302f08a7a971fca3a18041ba225cb85c4e333f488ef5f5acc3de4f6092ebb0bb743e2cd5ba003093d211b300ae1d4e92"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}]}]}, 0x144}, 0x1, 0x0, 0x0, 0x4008890}, 0x40) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) 8m13.558453219s ago: executing program 2 (id=1634): openat$tun(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000006000000080000000b"], 0x50) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x17, 0x4, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0, 0xffffffffffffffff}, &(0x7f0000000340), &(0x7f0000000380)=r1}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000240)={r2, &(0x7f0000000040), 0x0}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x6, 0xc, &(0x7f0000000780)=ANY=[@ANYBLOB="18000000040000000000000000000000850000007b00000018010000756c6c2500000000002020207b1af8ff00000000bfa10000000000000701000002ffffffb702000008000000b703000007030000850000001700000095"], &(0x7f0000000040)='GPL\x00', 0xc, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r4, 0x0, 0x80, &(0x7f0000000d00)=@nat={'nat\x00', 0x19, 0x1, 0x21e, [0x200000002300, 0x0, 0x0, 0x2000000024be, 0x2000000024ee], 0x0, 0x0, &(0x7f0000002300)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff010000001f2000006b0000000016636169663000000000000000e3ff00007665746831000000000000000000000073797a5f74756e0039da0000f8ff0000000076657468310000000000000000001000aaaaaaaaaa3d000000ff00000180c2000003ff00ffffff00ae000000560100008e0100006f776e6572000000000000000000000000000000000000000000000000000000180000000000", @ANYRES32, @ANYRES32, @ANYRES32=0xee00, @ANYRES32, @ANYBLOB="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"]}, 0x296) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x50) r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7fe}) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000040)={'dummy0\x00', &(0x7f0000000000)=@ethtool_cmd={0x1, 0x3, 0x1, 0x389, 0x8, 0x2, 0x4, 0x6, 0x0, 0x7, 0x4, 0x1, 0xfffb, 0x8, 0x5, 0x0, [0xe, 0xff]}}) r7 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000080)={0xa76a, 0x0, 0xefa, 0x8, 0x0}, &(0x7f00000001c0)=0x10) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r7, 0x84, 0x1f, &(0x7f0000000200)={r8, @in={{0x2, 0x4e23, @multicast1}}, 0xfff4, 0x4}, &(0x7f00000002c0)=0x90) close(r5) 8m13.33971645s ago: executing program 2 (id=1636): sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94", 0x79}], 0x1}], 0x1, 0x40004) bpf$BPF_PROG_QUERY(0x9, &(0x7f0000000400)={@cgroup, 0xe, 0x3a, 0x0, 0x0, 0xfffffffffffffe4a, 0x0, 0x0, 0x0, 0x0}, 0x40) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000000000)=0x2, 0x4) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r2, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000140)={0x30, r3, 0xb97534d5fe9704cf, 0x8, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x810}, 0x4040004) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r5 = socket$netlink(0x10, 0x3, 0x13) r6 = socket$key(0xf, 0x3, 0x2) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x6, &(0x7f0000000400)=0x1, 0x4) ioctl$INCFS_IOC_CREATE_FILE(r6, 0xc058671e, &(0x7f0000000640)={{'\x00', 0x3}, {0xc2af}, 0x100, 0x0, 0x0, &(0x7f0000000100)='./file0\x00', 0x0, &(0x7f00000003c0)="e7a54c37d015b26ae2d22e0a0741ac89491acf585fecd6a519d6bf32b524a881036cc811e29e2dce24318bff07745a612ee683bc52d07f29833eb8aec7a4ff6c43f2bcdc960c074dbd9a6261977ac5a9e8c8e8e15043106432fee5bac733c99a8944684c0a34ec767a9a330420e3cb874f80fd15c6ecd03479de65ff29061cca05f9b3a0095156d5c3c5ef3166c544101cb3979aa3f829e65c06517d30b506440c6de5c1631e712f0d8129907f13128b7db136fd7c312e29e5699966d2d624ae1c4778ce6cbe423c8e2db79671b6c96454e7bd7b", 0xd4, 0x0, &(0x7f00000004c0)={0x2, 0x57, {0x1, 0xc, 0x32, "fd072a2074d4188a939762ad877a53724beabca94ea078376d7336bbe19d5e1601b3d0661e22e8de7a2bdb18c507c231cb1a", 0x18, "122f4f9c57d083fdd3be119f97388e714a3eec38b11b1830"}, 0xe9, "bee459a3c2d6f7d8d07dd3dfab48ac202fc23ac068067609687eb3df02e9e6b1591f876c0270a3dc58390da814349c06d4ef1cbb19ff0ed178c89967e3438bb1ba6f6d337acf9f4380f01cdf212dd4241fd27cf9da510017ab6c97397be631be3445947af5d8cb339b47bb3d036664aa20096cbff5fda8040413606942e0855eeaed7433ca7dc3b366422f5194e189bc7d93550edd2c486612e246fcac863c8a80e30f47652e4f5e0b025791790cd0c088de13b01bb7f5dba962aeb739bb4140ca132c8b46c1feec6583712b107d803310f852657072d3513469b0e2884d7d6ac364f078127baf8272"}, 0x14c}) sendmsg$key(r6, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={0x0}}, 0x810) sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0xfffffffffffffde6, &(0x7f0000000000)={&(0x7f0000000780)=@newqdisc={0x5c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9, 0x1}, {0x4}, {0xe, 0xd}}, [@TCA_STAB={0x0, 0x8, 0x0, 0x1, [{{0x0, 0x1, {0xf, 0x10, 0x8001, 0x2, 0x1, 0x81, 0x89c}}, {0x0, 0x2, [0xffc7, 0x4, 0xfffc]}}, {{0x0, 0x1, {0xfe, 0x0, 0xcbb8, 0x852, 0x1, 0xfffff936, 0xffffffff}}, {0x0, 0x2, [0x9, 0x7]}}, {{0x0, 0x1, {0x4e, 0x2, 0xe, 0x2, 0x0, 0x6a, 0x5}}, {0x0, 0x2, [0x725a, 0x0, 0x6, 0x5, 0x7, 0x8000, 0x0]}}, {{0x0, 0x1, {0xff, 0x6, 0x1, 0xd, 0x1, 0x4, 0xde68}}, {0x0, 0x2, [0x5, 0xfff9]}}, {{0x0, 0x1, {0x6, 0x3, 0x5, 0x0, 0x2, 0x7fffffff, 0x2}}, {0x0, 0x2, [0x7]}}, {{0x0, 0x1, {0x5, 0x3, 0x40, 0xb904, 0x1, 0x5d2, 0x5}}, {0x0, 0x2, [0x7, 0x3, 0x263]}}]}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x1}}, {0x6, 0x1b, [0x0]}}]}, @TCA_INGRESS_BLOCK={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x90}, 0x4000c00) socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r8, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="3c0000001000010000000000000000002c00000020000000ff0f00000000000008001c00c900"], 0x3c}], 0x1, 0x0, 0x0, 0xb305e06d8ab48273}, 0x48800) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000200140000000000000000000000000000000000000000000500000000000000fbffffffffffffff00000000000000000000000000004000000000000000000200000000000000002200"], 0xb8}, 0x1, 0x0, 0x0, 0x4000015}, 0x2c000010) 8m11.470991117s ago: executing program 0 (id=1642): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) socket$inet6_udp(0xa, 0x2, 0x0) (async) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18020000801004800000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="05"], 0x10) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20) (async) sendmsg$inet(r0, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) 8m10.626468227s ago: executing program 0 (id=1643): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1, 0x10, 0x0, 0x0, 0xc}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0b00000000010000fd0000000900000001"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000000), 0xcff5, r0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500), &(0x7f0000000280), 0x4, r0}, 0x38) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="1802000000ff000000000000000000008500000020000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000080)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xa5bc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 8m9.399712029s ago: executing program 2 (id=1646): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="000000000000cfe897fcbc934b90fc5dab5ac47b92300000000400"/36, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x1a) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="3800000041000701feffffff0800000002efffffffff42800c000180060006008035"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000041000701fefffffffeffffff017c0000040042800c00018006000600800a000014000280100017800c0015"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r4}, &(0x7f0000000040), &(0x7f0000000140)=r3}, 0x20) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r5, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000280)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01002cbd700000000000010000000c00020002000000000000001c0007800c00018008000100", @ANYRES32=r2, @ANYBLOB="0c00018008000100", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x55ebfcb85e78e904}, 0x4) recvmsg$unix(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000480)}, 0x10102) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r7, 0xc004743e, &(0x7f0000000000)=0xffffffff) ioctl$PPPIOCSDEBUG(r7, 0x40047440, &(0x7f00000000c0)=0xfff) socket$inet_tcp(0x2, 0x1, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000001400000018"], 0x44}, 0x1, 0x0, 0x0, 0x20020000}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c0000005e00010027bd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="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"], 0x1c}}, 0x884) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140020001000010000000000000000000500000a140000001100010000000000000000000700000a"], 0x28}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000380)={0x0, 0x1, 0x28}, &(0x7f00000003c0)=0xc) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r3, 0x84, 0x17, &(0x7f0000000500)=ANY=[@ANYRES32=r9, @ANYBLOB="340b9c000257130a20aaa9231a78162e71742db36a696b2d509402dc5be503000000ee21be483d0bb2ca9e601481fe79c13a5dec90f4398d3c3fe0e28ccfe4e25d688faa1c90be686cc2ba4b9fe1442cc8542ad52adc3f94d7761e78579c79aa6f04fee7027b98f0d0da0cddd84fe228a275115b2b981a94445d26ca5aa546563a2c403a245f649bfa56bcc8d8297f956398a479ef07e1c90000000000000000"], 0xa4) r10 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r10, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) sendmmsg$inet(r10, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x400000000000284, 0xf00) ioctl$FS_IOC_GETFSLABEL(0xffffffffffffffff, 0x400452c8, &(0x7f0000000100)) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000001f00)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001ec0)={&(0x7f0000004d40)=ANY=[@ANYBLOB="f8210000", @ANYRES16=0x0, @ANYRES64=0x0], 0x21f8}, 0x1, 0x0, 0x0, 0x4ccf121fbb019e87}, 0x20000000) ioctl$FS_IOC_GETFSLABEL(r8, 0x400452c9, &(0x7f0000000100)) 8m5.382763761s ago: executing program 2 (id=1653): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000100)=0x8) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000000)={{r1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000080)='%ps \x00'}, 0x20) socket(0x400000000010, 0x3, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@mcast2, 0x798fc554, 0x0, 0x2, 0xa, 0x2, 0x7}, 0x20) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)={0x1c, 0x15, 0x1, 0x0, 0xfffffffc, {0xe}, [@typed={0x8, 0x2, 0x0, 0x0, @u32=0x9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x20000080) sendmsg$NLBL_UNLABEL_C_STATICADD(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002, 0x0, 0x80}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r4, 0x8b32, &(0x7f0000000040)) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100)={r2}, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x3, 0x18, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000fdffffff8500000071000000b7080000000000007b8af8ff00000000b7080000540000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r5, 0x0, 0x10, 0x10, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(r6, &(0x7f0000000200)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) 8m5.039022382s ago: executing program 2 (id=1656): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x3, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x5, 0x8}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x0, 0x3, {0x5, 0x2, 0x6}}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000880) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=@newqdisc={0x434, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r7, {0x8}, {}, {0x5, 0x1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x0, 0x62b9, 0x5, 0xfffffff7, 0x5, 0x3, 0xe1cb, 0x5, 0x1, 0x3, 0x0, 0x1, 0x2, 0x6, 0xacd, 0x0, 0x364, 0x1, 0x2, 0xffffff44, 0x3, 0x2, 0x8, 0x3, 0x6, 0xffffffc0, 0xb, 0x688, 0xffff, 0x0, 0x2, 0xfffffeff, 0x0, 0xb, 0x5, 0x0, 0x5, 0xffffadc0, 0x8001, 0xf, 0x1, 0x8d2a00, 0x8, 0xf, 0x4ba, 0x1, 0x80, 0xffff, 0x1, 0x7, 0x0, 0x400, 0xe5, 0x93, 0x2, 0x45a5, 0x8, 0x6, 0x4, 0x0, 0x59, 0x3, 0x80, 0x9, 0x5, 0x9, 0x5, 0x3, 0x9, 0x2, 0x3, 0x4, 0x7f, 0x101, 0xde, 0x10, 0x7, 0x6, 0x7f, 0xfff, 0x6, 0x9, 0xf7, 0x5, 0x2, 0x81, 0x0, 0x6, 0x7, 0x1, 0x437, 0x6, 0x3, 0x2, 0x7000000, 0x5, 0x9, 0xecc, 0x6, 0x4, 0x8, 0x400, 0x7a5, 0x9, 0x9, 0x0, 0x9, 0x8, 0x0, 0x3, 0x7ff, 0x5, 0x6, 0x4, 0x7, 0x10, 0x4001d1da, 0x8, 0xbdb, 0x1, 0x8, 0x8001, 0xe3c8, 0xffffffff, 0xd, 0x6, 0x4, 0x9, 0x7fffffff, 0x3, 0xb8b4, 0x723, 0x15, 0x9367, 0x81, 0x400000, 0x9, 0x6, 0x75, 0x1ff, 0xc695, 0x4, 0xf, 0x7, 0x3, 0x0, 0x3ff, 0x8000, 0xff, 0x4, 0x0, 0x6496, 0x7f, 0x3, 0x0, 0xf528, 0x6, 0x80000000, 0x6, 0x157b, 0x7, 0x40, 0x1, 0x10001, 0x3, 0x9, 0x2, 0x98de, 0x2450, 0x86d, 0x2, 0x7, 0x7, 0xfffffffa, 0x800, 0xfffffffb, 0x4, 0xb6, 0x5, 0x7fff, 0x9f4c, 0x1, 0x8, 0xe, 0x11d, 0x7fff, 0xf, 0x8, 0x3, 0xa, 0x9, 0x9, 0x2, 0x4, 0x2, 0x8, 0x5, 0x5, 0x401, 0x9, 0x4b8, 0xa78, 0xec8, 0x1, 0xfffffffa, 0x80020000, 0x0, 0x0, 0x7f, 0x8c1, 0x5, 0xfffffffa, 0x6, 0x175b, 0x7fffffff, 0x4, 0x4, 0xffff8001, 0x8001, 0xffff, 0x5, 0x0, 0x401, 0x5, 0x10, 0x7fff, 0xffffff00, 0x3, 0x8, 0x9268, 0x80000000, 0x2, 0x7, 0x4, 0x3, 0x4, 0xced, 0x5, 0xa524, 0x7, 0x81f, 0x3, 0x10, 0x80, 0x1ff, 0x1109, 0x9, 0x1, 0x0, 0x2, 0x0, 0x8, 0x3, 0x3, 0x6, 0x4]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x2004009c}, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x8e40, 0x0) close(r8) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r11 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r11, 0x0, 0x0, 0x20048040, &(0x7f00000001c0)={0x11, 0x4b71d3d28a13ff44, r10, 0x1, 0x26, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x20, 0x1, 0x12e, [0x0, 0x0, 0x0, 0x0, 0x1, 0x200000000180], 0x11, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="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"]}, 0x1a6) 7m55.103996369s ago: executing program 32 (id=1643): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1, 0x10, 0x0, 0x0, 0xc}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0b00000000010000fd0000000900000001"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000000), 0xcff5, r0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500), &(0x7f0000000280), 0x4, r0}, 0x38) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="1802000000ff000000000000000000008500000020000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000080)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xa5bc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 7m49.266224543s ago: executing program 33 (id=1656): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x3, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x5, 0x8}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x0, 0x3, {0x5, 0x2, 0x6}}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000880) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=@newqdisc={0x434, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r7, {0x8}, {}, {0x5, 0x1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x0, 0x62b9, 0x5, 0xfffffff7, 0x5, 0x3, 0xe1cb, 0x5, 0x1, 0x3, 0x0, 0x1, 0x2, 0x6, 0xacd, 0x0, 0x364, 0x1, 0x2, 0xffffff44, 0x3, 0x2, 0x8, 0x3, 0x6, 0xffffffc0, 0xb, 0x688, 0xffff, 0x0, 0x2, 0xfffffeff, 0x0, 0xb, 0x5, 0x0, 0x5, 0xffffadc0, 0x8001, 0xf, 0x1, 0x8d2a00, 0x8, 0xf, 0x4ba, 0x1, 0x80, 0xffff, 0x1, 0x7, 0x0, 0x400, 0xe5, 0x93, 0x2, 0x45a5, 0x8, 0x6, 0x4, 0x0, 0x59, 0x3, 0x80, 0x9, 0x5, 0x9, 0x5, 0x3, 0x9, 0x2, 0x3, 0x4, 0x7f, 0x101, 0xde, 0x10, 0x7, 0x6, 0x7f, 0xfff, 0x6, 0x9, 0xf7, 0x5, 0x2, 0x81, 0x0, 0x6, 0x7, 0x1, 0x437, 0x6, 0x3, 0x2, 0x7000000, 0x5, 0x9, 0xecc, 0x6, 0x4, 0x8, 0x400, 0x7a5, 0x9, 0x9, 0x0, 0x9, 0x8, 0x0, 0x3, 0x7ff, 0x5, 0x6, 0x4, 0x7, 0x10, 0x4001d1da, 0x8, 0xbdb, 0x1, 0x8, 0x8001, 0xe3c8, 0xffffffff, 0xd, 0x6, 0x4, 0x9, 0x7fffffff, 0x3, 0xb8b4, 0x723, 0x15, 0x9367, 0x81, 0x400000, 0x9, 0x6, 0x75, 0x1ff, 0xc695, 0x4, 0xf, 0x7, 0x3, 0x0, 0x3ff, 0x8000, 0xff, 0x4, 0x0, 0x6496, 0x7f, 0x3, 0x0, 0xf528, 0x6, 0x80000000, 0x6, 0x157b, 0x7, 0x40, 0x1, 0x10001, 0x3, 0x9, 0x2, 0x98de, 0x2450, 0x86d, 0x2, 0x7, 0x7, 0xfffffffa, 0x800, 0xfffffffb, 0x4, 0xb6, 0x5, 0x7fff, 0x9f4c, 0x1, 0x8, 0xe, 0x11d, 0x7fff, 0xf, 0x8, 0x3, 0xa, 0x9, 0x9, 0x2, 0x4, 0x2, 0x8, 0x5, 0x5, 0x401, 0x9, 0x4b8, 0xa78, 0xec8, 0x1, 0xfffffffa, 0x80020000, 0x0, 0x0, 0x7f, 0x8c1, 0x5, 0xfffffffa, 0x6, 0x175b, 0x7fffffff, 0x4, 0x4, 0xffff8001, 0x8001, 0xffff, 0x5, 0x0, 0x401, 0x5, 0x10, 0x7fff, 0xffffff00, 0x3, 0x8, 0x9268, 0x80000000, 0x2, 0x7, 0x4, 0x3, 0x4, 0xced, 0x5, 0xa524, 0x7, 0x81f, 0x3, 0x10, 0x80, 0x1ff, 0x1109, 0x9, 0x1, 0x0, 0x2, 0x0, 0x8, 0x3, 0x3, 0x6, 0x4]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x2004009c}, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x8e40, 0x0) close(r8) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r11 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r11, 0x0, 0x0, 0x20048040, &(0x7f00000001c0)={0x11, 0x4b71d3d28a13ff44, r10, 0x1, 0x26, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x20, 0x1, 0x12e, [0x0, 0x0, 0x0, 0x0, 0x1, 0x200000000180], 0x11, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="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"]}, 0x1a6) 6.539179163s ago: executing program 4 (id=4166): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="2c0000001a0001ff80000000000000000a000000000000000000000008000400", @ANYRES32, @ANYBLOB="06001c"], 0x2c}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x5, 0xb, &(0x7f00000000c0)=@framed={{0x18, 0x4, 0x0, 0x0, 0x3}, [@printk={@li, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000200)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400}, 0x94) socket$netlink(0x10, 0x3, 0x9) 6.368703819s ago: executing program 4 (id=4169): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000240)={0x3, {{0xa, 0x0, 0x0, @mcast1, 0xfffffffc}}, {{0xa, 0x4e25, 0x7fff, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x8}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, &(0x7f0000001300)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, 0x1, 0x1, [{{0xa, 0x4e21, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x80000001}}]}, 0x110) r3 = socket(0x400000000010, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x9, &(0x7f0000000100)=0x1, 0x4) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newtfilter={0x2c, 0x2c, 0x100, 0x70bd2b, 0x25dfdbbd, {0x0, 0x0, 0x0, r4, {0xfff2, 0xf}, {0xe, 0x8}, {0x5, 0xfff1}}, [@TCA_RATE={0x6, 0x5, {0x7, 0x4d}}]}, 0x2c}}, 0x0) connect$bt_l2cap(r3, &(0x7f0000000200)={0x1f, 0x2, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x200}, 0xe) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newtfilter={0x6c, 0x2c, 0xf3f, 0x70fd2c, 0x25dddbbd, {0x0, 0x0, 0x0, r4, {0x2, 0x3da48c8682330ab8}, {}, {0x7, 0xfffa}}, [@filter_kind_options=@f_basic={{0xa}, {0x3c, 0x2, [@TCA_BASIC_EMATCHES={0x38, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x2c, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x2, 0x3, 0x6}, {0x9, 0x0, 0x8, 0x3}}}, @TCF_EM_IPT={0xc, 0x2, 0x0, 0x0, {{0x14, 0x9, 0xfffe}}}]}]}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x2004d080}, 0x4880) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2031}, [@IFLA_XDP={0x14, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x17}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x3}]}, @IFLA_GROUP={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) 2.697584782s ago: executing program 4 (id=4177): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_type(r0, &(0x7f0000000100), 0x2, 0x0) write$cgroup_type(r1, &(0x7f0000000280), 0x9) r2 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000c40), 0x12) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000100000000000a20000000000a01010000000000000000010000000900010073797a300000000068000000090a010400000000000000000100000008000a4000000000200011800e000100636f6e6e6c696d69740000000c00028008000140000000000900010073797a30000000000900020073797a3200000000080005400000001f0c000980080001400037"], 0xb0}}, 0x0) write$cgroup_int(r4, &(0x7f0000000200)=0x1, 0x12) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_procs(r6, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r7, &(0x7f0000000c40), 0x12) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000680)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)={0x40, r9, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}, @NL80211_ATTR_4ADDR={0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) 2.512232112s ago: executing program 6 (id=4179): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000e40), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000f00)={&(0x7f0000000e80)={0x1c, r1, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_SESSION_ID={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x4000004) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan0\x00', 0x0}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), r5) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000340)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100fdffffffffdbdf251d00000008000300", @ANYRES32=r7, @ANYBLOB="24002f8008"], 0x40}, 0x1, 0x0, 0x0, 0xd49920d352510fc2}, 0x4000040) sendmsg$NL802154_CMD_GET_WPAN_PHY(r2, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x50, r3, 0x2, 0x70bd2a, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}]}, 0x50}, 0x1, 0x0, 0x0, 0x20009010}, 0x841) 2.446184337s ago: executing program 1 (id=4180): r0 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="1400000016000b63d25a80648c25940121", 0x11}, {&(0x7f0000000280)="e26248", 0x3}], 0x2}, 0x40050) socket$netlink(0x10, 0x3, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000010900020073797a31000000000900010073797a3000000000080005400000001d2c0000000b0a01010000000000000000070000000900010073797a30000000000c0010"], 0xb0}}, 0x8000) connect$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) ioctl$sock_bt_bnep_BNEPCONNADD(r0, 0x400442c8, &(0x7f00000002c0)=ANY=[@ANYRES32=r2]) 2.199410755s ago: executing program 6 (id=4182): socket$inet_udp(0x2, 0x2, 0x0) (async) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0}, 0x94) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0}, 0x94) socket$packet(0x11, 0x2, 0x300) (async) r1 = socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket(0x1e, 0x1, 0x0) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000140)={0x3, 0x4, 0x4, 0xa, 0x0, r1, 0x8d35, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3, 0x3}, 0x50) bpf$PROG_BIND_MAP(0x23, &(0x7f00000001c0)={r1, r3}, 0xc) bind$l2tp(r2, 0x0, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, 0x0, 0x0) sendmmsg$inet(r0, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x400000000000284, 0xf00) (async) sendmmsg$inet(r0, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x400000000000284, 0xf00) 2.16510994s ago: executing program 1 (id=4183): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x27, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r1, 0x25, 0x0, @void}, 0x10) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0), 0xc) socket(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x3, 0xc, &(0x7f00000008c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x87}, @printk={@s, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x9b}}]}, 0x0}, 0x94) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c00000002060108000034e4000000000000000805000400030000000900020073797a3100000000050005000200000014000300686173683a69702c706f72742c6970000500010007"], 0x4c}, 0x1, 0x0, 0x0, 0x20044095}, 0x8042) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x60, 0x9, 0x6, 0x3, 0x0, 0x0, {0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x38, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_PROTO={0x5, 0x7, 0xff}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010101}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}]}]}, 0x60}}, 0x80) socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r7, &(0x7f0000000400)={0x10, 0x0, 0x25dfdbfd, 0x2ffffffff}, 0xfffffffffffffe9d) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000800000002000000ffff000005"], 0x48) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x60880, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r9 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000380)={'wg0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newtfilter={0x48, 0x2c, 0xd27, 0x70bd25, 0x6, {0x0, 0x0, 0x0, r10, {0x0, 0x1}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8035}, @TCA_FLOWER_KEY_ARP_THA={0xa, 0x41, @random="a082c3015da1"}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20100}, 0x44010) getsockname$packet(r6, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r11, @ANYBLOB="f5ffff760800010001"], 0x3c}}, 0x40000) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x6, 0x4, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x4}, [@call={0x85, 0x0, 0x0, 0xbc}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000380)={r12, r11, 0x25, 0x4, @void}, 0x10) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="3c00000010000305fcffffff0007000000000000", @ANYRES32=0x0, @ANYBLOB="0000000006100000140012800900010076657468000000000400028008000a00", @ANYRES32=r11, @ANYRESOCT=r10], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x40440b0) 1.988640727s ago: executing program 5 (id=4185): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000600), 0x408080, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x540, 0x1b8, 0x1b8, 0x3a0, 0xd0, 0x1b8, 0x470, 0x470, 0x470, 0x470, 0x470, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x7e, 0x80}}}, {{@ipv6={@mcast1, @local, [0xffff00, 0x0, 0xffffff00], [], 'macvtap0\x00', 'ip6tnl0\x00', {}, {}, 0x11, 0x0, 0x1, 0x44}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@empty, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00'}, 0x0, 0xf0, 0x118, 0x0, {}, [@common=@dst={{0x48}, {0x5, 0x9, 0x0, [0xa80, 0x6108, 0x58ef, 0x9, 0x8001, 0x9, 0x6, 0x7, 0xfffe, 0x8000, 0x5, 0xfffb, 0x6d1, 0x1, 0x5, 0x8000], 0x6}}]}, @common=@unspec=@MARK={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@DSCP={0x28, 'DSCP\x00', 0x0, {0xfd}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@DSCP={0x28, 'DSCP\x00', 0x0, {0x2f}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5a0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'bond_slave_0\x00', 0xc201}) (async) socket$kcm(0x2, 0xa, 0x2) (async) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000180)={'ip_vti0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200)=0xf, 0x12) (async) getpid() (async) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e22, @multicast1}, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x21}}, {0x2, 0x2, @broadcast}, 0x2, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x0, 0x3}) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) (async) r4 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f00000001c0)='cgroup.max.descendants\x00', 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000340)=ANY=[@ANYRESDEC=0x0], 0x9) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCSIFBR(r6, 0x890c, &(0x7f0000000000)=@generic={0x0, 0x2}) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB="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"], 0x154}}, 0x404c004) (async) r8 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r8, &(0x7f0000000040)={0x2, 0x4e20, @local}, 0x10) r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r9, 0x400448ca, 0x0) bind$bt_hci(r9, &(0x7f0000000040)={0x1f, 0xffff, 0x2}, 0x6) (async) r10 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r10, &(0x7f0000001a00)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) r11 = socket$kcm(0x1e, 0x5, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000280)=@ieee802154={0x24, @short={0x2, 0x3, 0xaaa0}}, 0x80, &(0x7f00000004c0)}, 0x0) (async) recvmsg$unix(r11, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000080)=""/11, 0xb}], 0x1, &(0x7f00000005c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x120) 1.8218215s ago: executing program 3 (id=4186): socket$nl_route(0x10, 0x3, 0x0) 1.720539649s ago: executing program 5 (id=4187): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)=@newtfilter={0x38, 0x28, 0x575ac7824d421509, 0x70bd29, 0x4, {0x0, 0x0, 0x0, r4, {0x9}, {0xffff}, {0x13, 0x5}}, [@filter_kind_options=@f_u32={{0x8}, {0x4}}, @TCA_RATE={0x6, 0x5, {0x0, 0x1}}]}, 0x38}, 0x1, 0x0, 0x0, 0x11}, 0x40) r5 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r5, &(0x7f0000000140), 0x4924b68, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000980)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffff}}}, 0x24}}, 0x20040084) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r9, {0xffff}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xe, 0x5, 0x0, 0xf, 0x10, 0x2, 0x4, 0x2, 0xf, 0x6, 0x3, 0x7, 0x8, 0x4, 0x1, 0x4], 0x3, [0xb, 0x3, 0x1, 0x2002, 0x1, 0x4, 0x2, 0xd09, 0xff05, 0x2, 0xb, 0x3, 0x4, 0x2, 0xd, 0x100], [0xfff1, 0x5, 0x6, 0xfff5, 0x4, 0x8, 0x1, 0x9, 0x3ff, 0x2, 0xc, 0x42, 0x4, 0x3, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffdfc, {0x0, 0x0, 0x0, r9, {0x4}, {0xffff}, {0x2, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x9, 0x0, 0xf, 0x10, 0x12, 0x6, 0x2, 0x8, 0x2, 0x8, 0x1, 0x8, 0x1, 0x10, 0x4], 0x3, [0xc, 0x101, 0x7fff, 0x2002, 0x1, 0x4, 0x6, 0xd03, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x7, 0xaa, 0x81, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x4]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x810}, 0x0) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1100000004000000040000000200000000000000", @ANYRES32=r1, @ANYBLOB="ffff7391891adc8c9ba400"/20, @ANYRESDEC=r3, @ANYRESOCT=r10, @ANYRES64=r5], 0x50) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000010000000000000500000018110000", @ANYRES32=r11, @ANYBLOB="00e2000000000000b7080000040000027b8af8ff00000000bca2000000000000a6020000f8ffffffb70300000800002cab3a001801cf142020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000f8ffffff85000000060000009500000600ba907b19ff803aff16e60c64465484357ddf4a89d9b3532b35a978d46253766918d5348138c9485fcb1fb84ab16e2d0c625e06d820311b7ce56c56b62edef6ca27bdac52fcf102aa2baf142d65cea888fc57dd005b441d79ce15857842c47ba76d4072ce88c2bf329190038830d49b"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r12, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) r13 = socket(0x400000000010, 0x3, 0x0) r14 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r14) r15 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r15, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r13, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r16, {0x0, 0xfff1}, {0xffff, 0xfff1}, {0x0, 0xf}}}, 0x24}}, 0x0) 1.680228273s ago: executing program 3 (id=4188): bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1c, 0xe, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x94) r1 = socket(0x28, 0x5, 0x0) unshare(0x22020600) bind$vsock_stream(r1, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x1f2f, 0x3253, 0x3253, &(0x7f00000007c0)="9f44948721919580684010a486dd", 0x0, 0x241, 0x0, 0xb1, 0x0, &(0x7f0000000700)="389ceff69d08b0af1cc71b6262d50660bbaf31a7f8cd6a6f911beb65d5fe6b54bf21a66489121f24fefd198059288c9b735e1898e77a7469489a249292c02a72bc193a3008ebdbf4e9dd4ee8fcceef55402c913c8dd0ebece1330aaa93ece835c5044a246a5967e3acd7c950b3b19f351830e545eb9bc3a9c6dd22ce97f1f857cfe8b68a2370b69ea336006b589368f92deb68f3dfc6f2bfee09f8342da437fce5dcdf658e453e3132bb42067575318c39"}, 0x23) 1.585350743s ago: executing program 1 (id=4189): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5c50fae9d6d8d3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe1a}], 0x1, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x18}], 0x4924924924924fd, 0x0) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x10, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, 0x0, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r3, 0x0, 0xc8, &(0x7f0000000000), 0x4) setsockopt$MRT_ADD_VIF(r3, 0x0, 0xca, &(0x7f00000002c0)={0x1, 0x4, 0x13, 0xb, @vifc_lcl_ifindex, @remote}, 0x10) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r4, 0x0, 0xd4, &(0x7f0000000040)=0x4, 0x4) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000640)={0x0, 0x2, 0x78}, &(0x7f0000000680)=0x8) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, 0x0, 0x0) syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000c40)=@raw={'raw\x00', 0x8, 0x3, 0x3d8, 0x0, 0xffffffff, 0xffffffff, 0x1c0, 0xffffffff, 0x308, 0xffffffff, 0xffffffff, 0x308, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x1a0, 0x1c0, 0x60030000, {0x0, 0xff000000}, [@common=@unspec=@physdev={{0x68}, {'dummy0\x00', {0xff}, 'macvtap0\x00', {0xff}, 0x0, 0x2}}, @common=@srh1={{0x90}, {0x1, 0x1, 0x0, 0x0, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x3a}, @ipv4={'\x00', '\xff\xff', @multicast1}, [0xff000000, 0xff, 0xffffffff, 0xffffffff], [0x0, 0x0, 0x0, 0xffffff00], [0xff, 0xffffffff, 0xff], 0x1, 0x1aeeb7877a132835}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private2, [0xffffff00, 0xff000000, 0x0, 0xffffff00], [0x0, 0xffffffff, 0xffffffff, 0xff000000], 'team_slave_0\x00', 'bridge_slave_1\x00', {0xff}, {0x101}, 0x11, 0x2, 0x5, 0x5}, 0x0, 0x100, 0x148, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x3, 0x2, 0x3, 0x1, 0x2}}, @common=@inet=@set1={{0x28}, {{0x0, 0x2, 0x1}}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x100, 0x700000, 0x8, 'syz0\x00', {0x8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x438) listen(r5, 0x4) accept4$vsock_stream(r5, &(0x7f0000000000)={0x28, 0x0, 0x2710, @hyper}, 0x10, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="b7020000ff0d0000bfa30000000000000703000000feffff7a0af0fff8ffff1971a4f0ff00000000b7060000080000006f6400000000000045040400010000001704000001000a00b7040000ff0100006a0a00fe0000000085000000bd000000b70000000000000095000000000000009e17f199a68b06d83298a8cdc21ce784909b849d5550ad857d0454d8877a6db61d69f2ffcaa10350e11cb97c8adf1bc9a0c4eeceb9971e43405d621ffbc9ce000000d8ca56b50d0c010d631f6dde53a9a53608c10556e5734eb84049761451ce540c772e2d9f8004e26f7fcc059c062234d5595f6fbaa187b81d1106000000000fd60000fd9ac3d09e29a9d542ca9d85a5c9c88474895d679838def0a83a733dc6a39b63a5ed69d32394c53361d7e43c5cbd80450f859ce8122a79c3e40000b59b0fc46d6cec3c0802882add4e3179bd4a44f231b6d753a7be428ba953df4aece69311687f4122073a236c3a32efa04137d4524847d2638da3261c8162bb7c7824be6195a66d2e17e122040e1100000000928612a29fc691e4f1f7bd053abb885f39381f1759410b1059f05684261f332d606834669b49ec99320ca7712d7e79bd5bf5ed818ecc7640917f6a559a47db608fcf9f6c131b84e41c354c66838f72b9e12d36e996f316f0812ca83efb30c7f6c6d57c4a64590401eec22523dd712c680013e87f649a1ede7142ca9d5d8a8c9f9b440fe4331ad5532c74d9a31a5d737537f7a2caa30581253d14dd3e92af7dc836686365ae01bdec561c0402b67801267a8df97d2f85426a5963d4fa3e26cc05972c162f223f000000d999e80de00fcbcc02d0aed7bb8f7ba337d59c14f39dcd4aad4139ef6425a9367f1bd1467fc6b95a4df7669839771ce9d5788029901e5a79d8b9990ace8f74087f25ad50c46088000000008000"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x2, 0x13, &(0x7f0000000780)=ANY=[@ANYBLOB="18080000000400000000000000080003851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50afdff00000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0xa}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r6, 0x2000012, 0xeaa, 0x7ffe, &(0x7f00000003c0)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x7ffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$AUTOFS_IOC_ASKUMOUNT(r5, 0x80049370, &(0x7f0000000080)) r7 = epoll_create(0x6) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f00000000c0)={0x50000000}) 1.454515653s ago: executing program 3 (id=4190): sendmsg$DEVLINK_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x14, 0x0, 0x701, 0x2, 0x0, {0x2e}}, 0x14}, 0x1, 0x0, 0x0, 0x4c018}, 0x4004004) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000d042abd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="01000000000000002400128009000100626f6e640000000014000280050001000600000005001b"], 0x44}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x0, 0x0) 1.318661479s ago: executing program 3 (id=4191): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, &(0x7f00000008c0)=[{{&(0x7f0000000100)={0xa, 0x4e24, 0x66a5, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000180)="bf", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000580)}}], 0x2, 0x931766f6319eed44) unshare(0x6a040000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-blowfish-asm\x00'}, 0x58) r2 = accept$alg(r1, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ad060000", 0x4) sendmsg$alg(r2, 0x0, 0x4040004) recvmmsg(r2, 0x0, 0x0, 0x2021, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r3) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r6 = accept(r4, 0x0, 0x0) syz_init_net_socket$llc(0x1a, 0x0, 0x0) getgid() sendmsg$TEAM_CMD_OPTIONS_SET(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0x800}, 0x10) recvfrom(r5, &(0x7f0000000080)=""/60, 0xfffffffffffffeeb, 0x101, 0x0, 0x0) getsockname(r0, &(0x7f0000000400)=@pptp={0x18, 0x2, {0x0, @private}}, &(0x7f0000000480)=0x80) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) r8 = socket(0x2b, 0x1, 0x1) r9 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r9, 0x29, 0x20, &(0x7f0000000180)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x8000000, 0x0, 0xff, 0x1, 0x0, 0x1000}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r8, 0x29, 0x20, &(0x7f00000000c0)={@remote, 0x8000000, 0x2, 0x0, 0x1, 0x6, 0x200}, 0x20) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r7, 0x84, 0x7a, &(0x7f0000000340)={0x0, @in6={{0xa, 0x3, 0x4, @rand_addr=' \x01\x00'}}}, &(0x7f0000000040)=0x84) socket$packet(0x11, 0x3, 0x300) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x7, [@func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{0x4}, {0x0, 0x4}]}]}, {0x0, [0x0, 0x2e, 0x2e, 0x5f, 0xe]}}, 0x0, 0x3b, 0x0, 0x1}, 0x28) 1.20637043s ago: executing program 5 (id=4192): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) (async) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000c80)={0x6, 0x11, &(0x7f0000000d40)=ANY=[@ANYBLOB="18000000ff7f00000000000006000000185500000c000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7020000000000008500000086000000b5542000f0ffffff18120000", @ANYRES32, @ANYRES32=r0, @ANYRES32, @ANYBLOB="00000000040000000000"], &(0x7f0000000140)='GPL\x00', 0x2, 0x35, &(0x7f0000000180)=""/53, 0x41000, 0x1a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x9, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000240)=[0x1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff, 0x1, 0x1, 0x1], &(0x7f0000000280)=[{0x2, 0x2, 0xfffffffd, 0x7}, {0x1, 0x2, 0x4}], 0x10, 0x3}, 0x94) (async) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10) ioctl$int_in(r2, 0x5421, &(0x7f0000000000)=0x9) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x4e26, @multicast2}, 0xffffffffffffff15) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r4, 0x0, 0x8000f28, 0x5) (async) bpf$PROG_BIND_MAP(0x23, &(0x7f00000003c0)={r1, r4}, 0xc) (async) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x22) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000e00)={0x0, 0xc, &(0x7f00000005c0)=ANY=[@ANYRESHEX=r0, @ANYRES32=r0, @ANYRES64=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r5 = socket$key(0xf, 0x3, 0x2) recvmmsg(r5, &(0x7f0000000440), 0x0, 0x20, &(0x7f0000000480)={0x0, 0x989680}) (async) setsockopt$sock_int(r5, 0x1, 0x4b, &(0x7f0000000040)=0xfd87, 0x4) (async) sendmsg$key(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0216000002"], 0x10}}, 0x20000000) (async) r6 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x6ad01, 0x0) writev(r6, &(0x7f0000000240)=[{&(0x7f0000000b00)="130000000102039839", 0x9}, {0x0}], 0x2) (async) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r4, 0x0, 0x61, &(0x7f0000000440)={'filter\x00', 0x4}, 0x68) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) (async) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x6, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="18f4ff1adc3b005fb5005992b7f8ed984a272dff04000000000000000900000027a08507d7a7e26493a4114d7225f1f7d06b280a86a3661c4accc237c35253affb76587d395b5fc4705b80f3a5136bb0ed3b215df2f4a438a4bf95daa2c3f044497fb69cc8fbab0c268e67dc23a806d867e1f88a010592eed516de951b0077168b198175439a6ee57469142373d384f2e387c81755d50a80a2cb974ddaef5656fe6be45caec4469ad480"], &(0x7f0000000500)='syzkaller\x00', 0x8, 0xc5, &(0x7f0000000600)=""/197, 0x41100, 0x20, '\x00', 0x0, 0x25, r3, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000700)={0x0, 0xa, 0x2, 0x68e}, 0x10, 0x0, 0x0, 0x9, 0x0, &(0x7f0000000740)=[{0x1, 0x4, 0x6, 0x5}, {0x3, 0x2, 0x4, 0x5}, {0x4, 0x4, 0x5, 0x4}, {0x0, 0x2, 0x9, 0xc}, {0x5, 0x4, 0x4, 0x5}, {0x1, 0x2, 0x2, 0x3}, {0x5, 0x3, 0x10, 0x4}, {0x4, 0x4, 0xa, 0x7}, {0x0, 0x2, 0x4, 0x7}], 0x10, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000ac0)={r7, 0x0, 0x2f, 0x73, &(0x7f00000008c0)="47cf9bef3b1cf4db123a5fb63ccdf1df65b80c918b5236810cf0b50370354579beb6f8ad2d951f89c9245260679d4d", &(0x7f0000000900)=""/115, 0x100000c7, 0x0, 0x73, 0xa0, &(0x7f0000000540)="b3c8f896f7895204077fb019d7bee80543f13a77e207ee1b81cdac764a68a24b6fd05f88b11eca3652e65964ef58c60812cae3b0b9c1bbc9f1a7aa21e2f72347be2902a8457adff040fa39bc04dc253cbc0c3560eef17eeb70d10f496783fefd7185c00428c1a8404745bd301d6bdae3a1466b", &(0x7f0000000a00)="5db8a90f0b525192c3d33a964c79514ce8bf37fce9e4c2ca58e20efb921988e4ffc78d236eed342158ffc2e150639efd3a2ca05dc56320ce7d2d16cf6c6cd3ed1e7abd56d1d3ac059e74ba347dd4d5aef0c250323bc51067c34b9fc91f0cf18a00a8feb84d43fe07b77b7dfc87cc68e74f987d2608e3e135e8008ee98446ddcb076b418528ebc211e682e8098221fa7bd00b2b1b7c9115479e723a55aa0e9e11", 0x4, 0x0, 0x6}, 0x50) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "2d9421fe8a4c9563", "cf6ff9ff337ed301000100c747fbbfc1", "dbdc27ff", "16de86d67a8426bd"}, 0x28) r8 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_JOIN_FILTERS(r8, 0x65, 0x6, &(0x7f0000000080)=0x1, 0x4) (async) recvfrom(r0, &(0x7f0000002800)=""/4071, 0xfffffffffffffdab, 0x17, 0x0, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c0002800500010004002000080020"], 0x4c}}, 0x0) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r0) 987.491439ms ago: executing program 6 (id=4193): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="05000000050000000200000004"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b703000000000000850000007200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) syz_emit_ethernet(0x3c, &(0x7f00000000c0)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x2a}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @void, {@llc_tr={0x11, {@llc={0xf4, 0x0, "cf", "ac3527c9b1177fd27cb5ae7f0f8c52caae54a9a238a14155df6ebde7f562f277a8c2cd95844376806d060f"}}}}}, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000480)={r1}, 0xc) (async) unshare(0x20000400) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1, 0x68, 0x5, 0x1, 0xc1, 0xffffffffffffffff, 0x1000000}, 0x50) (async) r3 = socket$inet_sctp(0x2, 0x1, 0x84) (async) socket$can_j1939(0x1d, 0x2, 0x7) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)={{0x14}, [@NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0x10, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}]}, @NFTA_IMMEDIATE_DREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x88}}, 0x0) (async) close(0x4) (async) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x1f, &(0x7f00000001c0)={0x0, @in={{0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x0, 0xf2a9}, 0x90) (async) r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY(r5, 0x0, 0x1, &(0x7f0000000040)=0x2, 0xbd) (async) sendmsg$802154_dgram(r5, &(0x7f0000000200)={&(0x7f0000000080)={0x24, @long={0x3, 0x1}}, 0x14, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x20005014}, 0x20004840) (async) r6 = socket$netlink(0x10, 0x3, 0x0) (async) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r7, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) (async) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$nl_xfrm(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000c80)=@acquire={0x134, 0x17, 0x1, 0x70bd25, 0x25dfdbfb, {{@in=@rand_addr=0x64010100, 0x4d2, 0xff}, @in=@empty, {@in6=@private2, @in=@multicast2, 0x4e23, 0x4a, 0x4e21, 0xf, 0x2, 0x0, 0xe0}, {{@in=@loopback, @in=@empty, 0x4e21, 0x0, 0x4e20, 0x5, 0xa, 0x10, 0x80, 0x29}, {0x8, 0x4, 0x5, 0x16, 0x400, 0x6, 0x9, 0x400}, {0x5, 0x1, 0x7ff0000000, 0x10003}, 0x10, 0x6e6bb1, 0x1, 0x1, 0x2}, 0x1, 0x7fff, 0xfff, 0x70bd2a}, [@sec_ctx={0xc, 0x8, {0x8, 0x8, 0x1, 0x9}}]}, 0x134}}, 0x4050) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=@newlink={0x50, 0x10, 0x503, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21111, 0x8831}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_MACSEC_CIPHER_SUITE={0xc, 0x4, 0x80c20001000001}, @IFLA_MACSEC_WINDOW={0x8, 0x5, 0x3fffffff}]}}}, @IFLA_LINK={0x8, 0x5, r8}]}, 0x50}, 0x1, 0x0, 0x0, 0x48890}, 0x0) (async) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000840)={r2, &(0x7f0000000580), 0x0}, 0x20) r10 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r10, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4) (async) bind$inet(r10, &(0x7f0000000380)={0x2, 0x4e21, @loopback}, 0x10) listen(r10, 0x0) (async) socket$inet(0x2, 0x1, 0x0) 790.013423ms ago: executing program 6 (id=4194): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000440)={'veth1_to_hsr\x00', 0x0}) r2 = socket(0x10, 0x3, 0x0) r3 = socket$kcm(0x11, 0x2, 0x300) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x1, 0x6, 0x0, 0x1}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18bd470002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2660004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000180)=r5, 0x4) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xffff}, {0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [0x0, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xf, 0x0, 0xb], 0x0, [0x1, 0x2, 0xfffe, 0x4a88, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="280000000107010200000000000001000500000514000783080001400000ec5e080002400000007fec1dda874d70a8b6cdc133279c37f6da8a70dd07bb1f1553d1f1e5c40c3a9089bec0537c8de966d1b6017bf24573a30ec702568430c4d87f2bfd6bbf2eaf8940fa8963f813bd762f5318784b1feec2ce67a8557bc6dd7df18437defbc3e25b00a2b513851b6c7d509c114a7cd9cd3656ba33e031812c800ccfd7a35e507c7705008be2ea2a6f35446182b31f3176d814a3c9f99bfaac6425159dc45b2d239928fb53047a78072c5a"], 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x200080c4) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000c00)={0x0, 0x10f0}, 0x1, 0x0, 0x0, 0x40000c4}, 0x48000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000071123d00000000009500030000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) poll(0x0, 0x0, 0x7) r9 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r9, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) sendto$inet6(r9, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e24, 0x0, @mcast2}, 0x1c) sendmmsg$inet6(r9, &(0x7f0000001140)=[{{0x0, 0x0, &(0x7f00000001c0)}}, {{0x0, 0x0, &(0x7f0000000d40)=[{0x0}], 0x1, &(0x7f0000000240)=ANY=[@ANYBLOB="2000000000000000290005020004180000000000000029000000361d000016000000000000ed400000000000000029000000360000003304000000000000c910fe800000000000000000000000000041c9102001000000000000000000000000000200000000517d838906a70300"/127], 0x78}}], 0x2, 0x4040005) socket$inet_udp(0x2, 0x2, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r10, 0x0, 0x0) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r11, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r11, &(0x7f00000003c0)=ANY=[@ANYBLOB="016f08008a854b56f8"], 0xfd6c) listen(0xffffffffffffffff, 0x1ad72f7) r12 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r12, 0x8955, &(0x7f0000000580)={{0x2, 0x4e22, @broadcast}, {0x6, @remote}, 0x18, {0x2, 0x4e24, @remote}, 'macsec0\x00'}) 695.221967ms ago: executing program 4 (id=4195): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000040)=@raw=[@generic={0x8, 0x6, 0x3, 0x4, 0x4}, @map_idx_val={0x18, 0x9, 0x6, 0x0, 0x3, 0x0, 0x0, 0x0, 0x8}], &(0x7f0000000080)='GPL\x00', 0x7, 0x1a, &(0x7f00000000c0)=""/26, 0x41100, 0x41, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x4, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000140)=[0xffffffffffffffff], &(0x7f0000000180)=[{0x5, 0x2, 0x1, 0x3}, {0x4, 0x3, 0xc, 0xb}, {0x3, 0x1, 0xb}, {0x0, 0x3, 0x6, 0x6}, {0x0, 0x2, 0xa, 0x3}, {0x3, 0x1, 0x2}], 0x10, 0x6}, 0x94) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000400)=@generic={&(0x7f0000000000)='.\x00', r1}, 0x18) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = socket$igmp(0x2, 0x3, 0x2) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) bind$rds(r4, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) socket$key(0xf, 0x3, 0x2) write$cgroup_subtree(r4, &(0x7f0000000080)=ANY=[], 0x48) splice(r3, 0x0, r5, 0x0, 0x3000, 0x100000000000000d) unshare(0x26000400) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000c00000002000000ffff000005"], 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x80, r6, 0xffffffff00000000}, 0x38) socket$packet(0x11, 0x3, 0x300) r7 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x11, 0x4, 0x4, 0x5, 0x0, 0x1}, 0x50) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r10, r8}, 0x14) syz_emit_ethernet(0x76, &(0x7f0000000040)=ANY=[], 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)=ANY=[@ANYBLOB="1f000000", @ANYRES16=0x0, @ANYBLOB="010000000000000000000f00000008000300", @ANYRES32=r11, @ANYBLOB], 0x1c}}, 0x0) ioctl$XFS_IOC_GETPARENTS_BY_HANDLE(0xffffffffffffffff, 0xc040583f, &(0x7f00000006c0)={{@_ha_fsid={[0xd, 0xa]}, {0x3, 0x1, 0x10000, 0x3}}, {{[0x7a2, 0x100, 0x0, 0x9]}, 0x0, 0x2, 0x6, 0x0, &(0x7f0000000540)=[{{@_ha_fsid={[0x8, 0x7]}, {0x2, 0x1, 0x40, 0x6}}, 0x6, 0x0, '^-\'{\x00'}, {{@align=0x2, {0xdee, 0x81, 0x7, 0x2}}, 0x0, 0x0, '#%+@&\\\x00'}, {{@_ha_fsid={[0xc5, 0xccf6]}, {0x9, 0x5, 0xff, 0xedc}}, 0xf, 0x0, 'skcipher\x00'}, {{@_ha_fsid={[0x841, 0x6]}, {0x2, 0x1, 0x101, 0x3}}, 0x800, 0x0, 'skcipher\x00'}, {{@_ha_fsid={[0x400, 0x5]}, {0xf, 0x94b1, 0xffffffff, 0xffffffff}}, 0x3dfd00e8, 0x0, '(.\\:\x00'}, {{@align=0x2, {0x1, 0x101, 0x9, 0x3}}, 0x0, 0x0, '\x00'}, {{@_ha_fsid={[0x9be8, 0x1ff]}, {0x7, 0x6, 0x5, 0xa}}, 0x5d, 0x0, '$\x00'}, {{@align, {0x2, 0x848e, 0x6, 0x9}}, 0x7, 0x0, ')\x00'}, {{@align=0x6, {0xe, 0xd94, 0x7, 0x7}}, 0x6, 0x0, '{\x16#!\x04-(!(\x00'}]}}) setsockopt$MRT_DEL_MFC_PROXY(r2, 0x0, 0xd3, 0x0, 0x0) r12 = accept4(r0, 0x0, 0x0, 0x800) syz_genetlink_get_family_id$wireguard(&(0x7f0000000300), r12) 611.014038ms ago: executing program 5 (id=4196): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x1c, 0x9, 0x6, 0x401, 0x0, 0x0, {0x7, 0x0, 0x4}, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x8000}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040000}, 0x80) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000050000000000000080000000850000007500000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a64000000060a010400000000000000000a0000010900010073797a31000000003800048034efd644ee000180090001007866726d000000002400028008000440000000030800024000000006080001400000001305000300000000000900020073797a320000000014000000110001000000000000000000"], 0x8c}, 0x1, 0x0, 0x0, 0x20004000}, 0x24000840) 488.252689ms ago: executing program 1 (id=4197): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="23000000d584000002000000ffff000005"], 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f00000002c0)={&(0x7f0000000000), 0x0, 0x0, 0x0, 0x2, r0}, 0x38) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000000)={0xffffffffffffffff, 0x5, 0x6, 0x8b6}) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)={0x60, 0x2, 0x6, 0x3, 0x0, 0x0, {0x5}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x78}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0x41}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x2c0c0}, 0x0) sendmsg$IPSET_CMD_DEL(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0xa, 0x6, 0x401, 0x0, 0x0, {0xa, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40001}, 0x8000) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0xf, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0x4, 0x9, 0x0, 0x1, 0xe7030000}, {0x16, 0x0, 0x0, 0x6}}, [], {{0x4, 0x1, 0x5, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 487.806826ms ago: executing program 5 (id=4198): syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa1780c206050086dd6018"], 0x0) (async, rerun: 64) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00'}, 0x94) (async, rerun: 64) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02}) readv(r1, &(0x7f0000002c40)=[{&(0x7f00000003c0)=""/196, 0xc4}, {&(0x7f0000002d00)=""/4112, 0x1010}], 0x2) r2 = socket$kcm(0x2, 0xa, 0x2) (async) ioctl$TUNSETVNETHDRSZ(r1, 0x400454d8, &(0x7f0000000100)=0x730) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000040095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_DELRULE={0x2c, 0x8, 0xa, 0x281, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x54}, 0x1, 0x0, 0x0, 0x48000}, 0x4040000) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000600)=ANY=[@ANYRES32=0x1, @ANYRES32=r3, @ANYBLOB='.\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r3, @ANYBLOB="af9bc23c5e"], 0x20) (async) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local}) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0xffffffffffffff62, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) 487.466817ms ago: executing program 4 (id=4199): ioctl$XFS_IOC_PATH_TO_HANDLE(0xffffffffffffffff, 0xc0385869, &(0x7f0000000240)={0xffffffffffffffff, &(0x7f0000000000)='GPL\x00', 0x8000, &(0x7f0000000100)={@_ha_fsid={[0x0, 0xfffffff7]}, {0x6a06, 0x7f, 0x4, 0x2}}, 0x7, &(0x7f0000000140)={@_ha_fsid}, &(0x7f0000000180)=0x1}) (async) ioctl$XFS_IOC_PATH_TO_HANDLE(0xffffffffffffffff, 0xc0385869, &(0x7f0000000240)={0xffffffffffffffff, &(0x7f0000000000)='GPL\x00', 0x8000, &(0x7f0000000100)={@_ha_fsid={[0x0, 0xfffffff7]}, {0x6a06, 0x7f, 0x4, 0x2}}, 0x7, &(0x7f0000000140)={@_ha_fsid}, &(0x7f0000000180)=0x1}) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="ffffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="001b0000010000000000000000000000000000000000000000000000803b4ef26569c536dcf45a0b5152a9aef70e2b6c2b145fb7ce620af3d547120b194b9439b488204349bbbc48ef17b1ec1bd58b806932e90a5f8b291f3c2eea60ae2caeb9b6f33aa7bd267b3fd9d469f3fe2945f2f4fef309b91d77758d48debb141b1d8374465d3626745c954199b1ab0a63e9e9f990d59fe799781d549339221794a754edc38517ebe5b9cf6010395f0b18a35153a544e784b40a889961ea96f33f0b645eb2b94ca8eab91dd86c47c0b203"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000005c0)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x18, &(0x7f0000000400)=@framed={{0x18, 0x2, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x6}, [@printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc848}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@bloom_filter={0x1e, 0x0, 0xca, 0x3, 0x0, 0x1}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0xf, &(0x7f0000000000)=@ringbuf={{0x18, 0x2, 0x0, 0x0, 0x4000}, {{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0x2}, {}, {0x85, 0x0, 0x0, 0x59}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0xf, &(0x7f0000000000)=@ringbuf={{0x18, 0x2, 0x0, 0x0, 0x4000}, {{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0x2}, {}, {0x85, 0x0, 0x0, 0x59}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xe, 0x0, &(0x7f0000000200)="abcf65131347837282041394003d", 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 485.74143ms ago: executing program 6 (id=4200): ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) (async) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64"], 0x3c}}, 0x40000) (async) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64"], 0x3c}}, 0x40000) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x70bd28, 0x25dfdbfc, {0x2, 0x20, 0x1, 0xc8, r2}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x40000c0) r3 = socket$inet(0x2, 0x3, 0x2) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r4, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) (async) setsockopt$inet_mreq(r4, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) setsockopt$inet_mreqsrc(r3, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) (async) setsockopt$inet_mreqsrc(r3, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="00000000063800001800128008000100736974000c00028008000300e000000108000a00", @ANYRES32=r2, @ANYBLOB], 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x440b0) 246.584942ms ago: executing program 1 (id=4201): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r1, 0x0, 0x10000008ebc, 0x0) splice(r0, 0x0, r3, 0x0, 0x25a5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0xd, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000001000000000000000000000085000000310000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000003b00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pipe(&(0x7f0000000040)) (async) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) (async) splice(r2, 0x0, r1, 0x0, 0x10000008ebc, 0x0) (async) splice(r0, 0x0, r3, 0x0, 0x25a5, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0xd, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000001000000000000000000000085000000310000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000003b00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) 244.118273ms ago: executing program 3 (id=4202): r0 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async) socket$kcm(0x29, 0x5, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADD(r2, 0x0, 0x0) (async) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) (async) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) (async) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)={0x18, 0x2f, 0x9, 0x70bd27, 0x1, {0x4}, [@typed={0x4, 0x19, 0x0, 0x0, @binary}]}, 0x18}, 0x1, 0x0, 0x0, 0x42844}, 0x10) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="b7020000b0ffffffbfa30000000000000703000000feffff7a0af0ff2300000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010001010404000011000000b7030000000000006a0a00fe000000008500000032000000b700000001000000950000000000000075cdc4b57b0c65752a3ad50000007ddd0000cb450063dedba767ade51f7f1f66acd19100002000000000000000ff7f0000b52f17cee19d0001000000000000000000cb04fcbb4e4d0b9bafe3ba431351a58a885ba9918d37b056b9bbd11b6b9f6cf7db6d574620260000000000008062d77e85cef4a2ab938f65aac33c4d620de2c9b7dc10d7d313f9f57606b83b994fc4051ade12f41deff6df6a936b4ec3827c739bb39aad16cc75fe369258673b5df11cc2afb53611cc32a790bc0b80e80eae8f5e64be2c9d2d29db3d36dd0cf8f79a015c7bd3f15aa6aadbeab2a01685108e61aa00000000000000000000000000c67c6c6a06e828e5216f601b19db1af1b5d356d0f062137d866d11be4ba3f0151fdbbd4e97d62ecc645e143a60f10800000000000000826151e3b42bcae95239ef5ca2a730a00c87c493db0300e63fda97a296820000000001000000eecc952a3fd2c46f3c1cde71a19d1a2982492a210e00d2bfea3b8d188df2eff8d56aaae7d32a2e180022537395019f02ec4b85f6aad7faca088de9b26797a8446b16c28d85f225992dbdd5bb01ba51508951c7a7d6ca0916c3a12912715649c2b1c7192a4251b59d378d3f00000000000000665c8b7e89eddfc3783f6c9129a7c5f8ee5f50579e2f638f7eb12f63be72a3d81ab324d6e417b1c2cbfdcada0a16e31790e26cf19588a7e0496ee2782224cf30f810da86cf1a3204f4c9404f5d7321a4fefc4d1c9139ca4b65b99909950000006b42077ca60fdecb2717e21f8f187b1866108b6e8c71e2603217606637ece1fa89917e131f4034a8383e99c3568fd04201b37cd92ca6ebf94a2d8310f7032775cfd75652f87b039d5430b3c6643e9146d2478ce31344b554aca7670000000000000010c65608fda6ed5d08e7a796042aa127d874105787d0347aa37801faff5b9050803a19ff6205aa5c263e407a2f7de56f7a0000e094fa4e3f05528caab5a430c08dd810bc97204b767dd969721a26aa740000000000bc433fe2d0a6ef2a8a91cd3cb305aa80dadef8b0caca780000000000000000863e21db415a222bb1a7ab94bfe4a74157d794f9d0430c2c0eb563350559829865a3dd08fb31bd0801e09aa3ee45e61a56fc83076451cff7632e49a41eadb5044a0d5f73d6932161ae5e9ce218a35cd8e7b747887b1a74798982d0b492c3f0ff53189d80733eb04f8124877b648ff438f7d66c7efcc09a8f3330b6c22d14e80db8e5608bdeab9388b758a15f4ce70390c214bc6838798f5b9b0b500d4e8b5174f329b8501c6feb7a6982bcea74a0f2ced7fa2059234a8d10b7f0597151d5c9067d57d85f4ae933eaf5174ba122f3f702ef8695578d3c08562c9fc185f0f65d11b4c58ae52500cbe99cde3758a5cbe6093dd328ac820e2de309d25a324647aadffcecf0f3bbaeda7af4436d9ffbce1b240a2f5e346eba8812e6329e01b087bde7da4a6448f478102e90c8134f531de08d4cf4f6f35b15a202544c0ced0c1715fd3a90099f785a13a2412bedba2981dd22bd9d736c00000000000000000000000000000000eb6fec8d7d2f77f4d470a9caa5b1bfc00cd1d40830ac35f229f8ffe1c02a63d3c2d9"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x23) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r3, 0x702, 0xe, 0x0, &(0x7f0000000040)="e460334470248c000000000000dd", 0x0, 0xfffffff7, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x1}, 0x0, &(0x7f0000000240)={0x1f, 0xfffffffffffffffe, 0x0, 0x0, 0x7, 0x5, 0x0, 0xfffffffffffffffc}, &(0x7f0000000040)={0x0, 0x3938700}, 0x0) (async) close(0x3) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000009, 0x200000006c832, 0xffffffffffffffff, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="56060900000000001c00128009000100626f6e64000000000c00028008000200", @ANYRES32=0x0, @ANYBLOB="39d7acb13b12749431e11ccd5e3792e1f7218a81c9bc99b60be4c779389a49dac832ef00c0b657c4014dc304188b8edb790cd7594236656c943df21c1806c964096b49fbee3b4cd544b7730296edf95499995213e546ac1b50a274f6312fd97db02589c8759392a77b09e0b9a7a5cb910c6b9e3a915f163f1603c8a0aa243b7a181df9c7248b0ac5db843ea610eac58378931d5fc38c91f219942c5a6789ed93d88caeb58463f31743de9f76d53b6e466cffc798d03f3e2e5988e6ae5800514ffd20c10ef9fa83e197b694aa4481c53716137623a09b336139401a1c028e"], 0x3c}, 0x1, 0x0, 0x0, 0x690}, 0x40) 243.777966ms ago: executing program 4 (id=4203): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x63, 0x30, 0x0, 0x2, 0x0, {0x9}, [{0x4c, 0x1, [@m_sample={0x48, 0x1e, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x2}, @TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x4cb4}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x5}}}}]}]}, 0x60}}, 0x20040000) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r1, @ANYBLOB="08000100", @ANYRES32=r2], 0x90}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=@newtaction={0x88, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x74, 0x1, [@m_mirred={0x70, 0x1, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x4, {{0xffdff7e8, 0x3}}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x6, 0x1, 0x0, 0x1}, 0x3}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x20008880}, 0x0) syz_emit_ethernet(0x5a, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=@ipv6_getaddr={0x34, 0x16, 0x1, 0x70bd26, 0x25dfdbfd, {0xa, 0x18, 0x89, 0xc8}, [@IFA_TARGET_NETNSID={0x8}, @IFA_ADDRESS={0x14, 0x1, @private0={0xfc, 0x0, '\x00', 0x1}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4040884}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), r5) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x14, r6, 0x1}, 0x14}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x64, r6, 0x8, 0x70bd26, 0x25dfdbfd, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @loopback}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @initdev={0xac, 0x1e, 0x0, 0x0}}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e20}, @L2TP_ATTR_SEND_SEQ={0x3, 0x13, 0xf}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e22}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0xa}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0xc}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @rand_addr=0x64010100}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x9890) pipe(&(0x7f0000000040)) 121.138965ms ago: executing program 3 (id=4204): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) getsockname(r2, &(0x7f00000014c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000009380)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x7, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x200480c4}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="68020000210001000000000000000000ff0200000000000000000000000000017f00000100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000a001000060000000000000008000b00000000002c001300e0000001000000000000000000000000fc0000000000000000000000000000000000000000000000cc0111"], 0x268}}, 0x0) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) r7 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r7, 0x84, 0x1f, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e23, @private=0x8a010100}}, 0x0, 0x7fff}, &(0x7f00000002c0)=0x90) r9 = socket$packet(0x11, 0x2, 0x300) ioctl$BTRFS_IOC_BALANCE_V2(r5, 0xc4009420, &(0x7f0000000a40)={0x10, 0x0, {0x8, @usage=0x1, 0x0, 0xd, 0x89, 0x6, 0x9, 0x200, 0x400, @usage=0x7, 0x8000, 0xc68, [0xe9, 0x80, 0xe71, 0xad, 0x10001, 0x2]}, {0x9, @usage=0x9, 0x0, 0x0, 0x5, 0x6130, 0xf415, 0x1, 0x20, @usage=0x7fffffffffffffff, 0x42, 0xe3, [0xfffffffffffffffc, 0x7, 0x81, 0xa, 0x767a, 0x2]}, {0x0, @usage=0x3, 0x0, 0x8, 0x7, 0x10000, 0x0, 0x3, 0x80, @usage=0x52d, 0xdc6, 0x8, [0x5, 0xc, 0x7, 0x4, 0x8000000000000000, 0x400]}, {0x5, 0x2, 0xffff}}) ioctl$BTRFS_IOC_GET_DEV_STATS(r9, 0xc4089434, &(0x7f0000000e40)={r10, 0x5, 0x0, [0x3, 0x2, 0x2, 0xa95a, 0x1], [0x2, 0x1, 0x83, 0x3, 0x9, 0x8000, 0x1, 0x8, 0x0, 0x17, 0xff, 0xffffffffffffffff, 0x7, 0x8, 0x6, 0x1000, 0x16, 0x7, 0xffffffffffffffc0, 0x7fff, 0x477, 0x1, 0xffff, 0x9, 0x1, 0x400, 0xd, 0x0, 0x9, 0x4, 0x1ff, 0x6, 0x7, 0x10001, 0x7, 0x3, 0x6, 0x16dc4e8c, 0x8, 0x5, 0x4, 0x81, 0x7, 0x3, 0x3, 0x0, 0x3, 0x9, 0xbb8, 0x96c7, 0xf, 0x1160000000, 0x7, 0x8000, 0x1, 0xc, 0x4, 0x6, 0x1000, 0xb, 0xa, 0x7fffffffffffffff, 0x0, 0x56f, 0xf, 0x4, 0xf5, 0x3, 0x3, 0x2, 0x40, 0x4, 0x1, 0x9, 0x8, 0x1, 0x4, 0xfffffffffffffff0, 0x0, 0x6, 0x800, 0xff, 0xffff, 0x4, 0x8, 0x5, 0x2, 0x4, 0x4, 0x7, 0xffffffff, 0x3, 0x1, 0x9, 0xfffffffffffffff7, 0xd, 0x54c7d835, 0x773, 0x9, 0x5, 0xf, 0x8, 0x1, 0x0, 0x3fffc00000, 0xff, 0x2, 0x1ff, 0x1, 0x6, 0x100, 0x59, 0x6, 0x1, 0x249080db, 0x80000000, 0x3, 0xe, 0xcc2c, 0x5, 0x843]}) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f00000000c0)={r8, @in={{0x2, 0x4e20, @private=0xa010100}}, 0x2, 0x4, 0x624e, 0xa, 0x55, 0x7f}, 0x9c) sendmsg$netlink(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000a00)=ANY=[@ANYBLOB="14030000300001000001000004000000040300800c0001"], 0x314}], 0x1}, 0x800) socket$nl_xfrm(0x10, 0x3, 0x6) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$vsock_stream(0x28, 0x1, 0x0) (async) getsockname(r2, &(0x7f00000014c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000009380)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x7, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x200480c4}, 0x0) (async) sendmsg$nl_xfrm(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="68020000210001000000000000000000ff0200000000000000000000000000017f00000100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000a001000060000000000000008000b00000000002c001300e0000001000000000000000000000000fc0000000000000000000000000000000000000000000000cc0111"], 0x268}}, 0x0) (async) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) socket$inet6_sctp(0xa, 0x5, 0x84) (async) socket$inet6_sctp(0xa, 0x1, 0x84) (async) socket$inet_sctp(0x2, 0x1, 0x84) (async) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r7, 0x84, 0x1f, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e23, @private=0x8a010100}}, 0x0, 0x7fff}, &(0x7f00000002c0)=0x90) (async) socket$packet(0x11, 0x2, 0x300) (async) ioctl$BTRFS_IOC_BALANCE_V2(r5, 0xc4009420, &(0x7f0000000a40)={0x10, 0x0, {0x8, @usage=0x1, 0x0, 0xd, 0x89, 0x6, 0x9, 0x200, 0x400, @usage=0x7, 0x8000, 0xc68, [0xe9, 0x80, 0xe71, 0xad, 0x10001, 0x2]}, {0x9, @usage=0x9, 0x0, 0x0, 0x5, 0x6130, 0xf415, 0x1, 0x20, @usage=0x7fffffffffffffff, 0x42, 0xe3, [0xfffffffffffffffc, 0x7, 0x81, 0xa, 0x767a, 0x2]}, {0x0, @usage=0x3, 0x0, 0x8, 0x7, 0x10000, 0x0, 0x3, 0x80, @usage=0x52d, 0xdc6, 0x8, [0x5, 0xc, 0x7, 0x4, 0x8000000000000000, 0x400]}, {0x5, 0x2, 0xffff}}) (async) ioctl$BTRFS_IOC_GET_DEV_STATS(r9, 0xc4089434, &(0x7f0000000e40)={r10, 0x5, 0x0, [0x3, 0x2, 0x2, 0xa95a, 0x1], [0x2, 0x1, 0x83, 0x3, 0x9, 0x8000, 0x1, 0x8, 0x0, 0x17, 0xff, 0xffffffffffffffff, 0x7, 0x8, 0x6, 0x1000, 0x16, 0x7, 0xffffffffffffffc0, 0x7fff, 0x477, 0x1, 0xffff, 0x9, 0x1, 0x400, 0xd, 0x0, 0x9, 0x4, 0x1ff, 0x6, 0x7, 0x10001, 0x7, 0x3, 0x6, 0x16dc4e8c, 0x8, 0x5, 0x4, 0x81, 0x7, 0x3, 0x3, 0x0, 0x3, 0x9, 0xbb8, 0x96c7, 0xf, 0x1160000000, 0x7, 0x8000, 0x1, 0xc, 0x4, 0x6, 0x1000, 0xb, 0xa, 0x7fffffffffffffff, 0x0, 0x56f, 0xf, 0x4, 0xf5, 0x3, 0x3, 0x2, 0x40, 0x4, 0x1, 0x9, 0x8, 0x1, 0x4, 0xfffffffffffffff0, 0x0, 0x6, 0x800, 0xff, 0xffff, 0x4, 0x8, 0x5, 0x2, 0x4, 0x4, 0x7, 0xffffffff, 0x3, 0x1, 0x9, 0xfffffffffffffff7, 0xd, 0x54c7d835, 0x773, 0x9, 0x5, 0xf, 0x8, 0x1, 0x0, 0x3fffc00000, 0xff, 0x2, 0x1ff, 0x1, 0x6, 0x100, 0x59, 0x6, 0x1, 0x249080db, 0x80000000, 0x3, 0xe, 0xcc2c, 0x5, 0x843]}) (async) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f00000000c0)={r8, @in={{0x2, 0x4e20, @private=0xa010100}}, 0x2, 0x4, 0x624e, 0xa, 0x55, 0x7f}, 0x9c) (async) sendmsg$netlink(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000a00)=ANY=[@ANYBLOB="14030000300001000001000004000000040300800c0001"], 0x314}], 0x1}, 0x800) (async) 108.208863ms ago: executing program 6 (id=4205): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r2, 0x1, 0x70bd25, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0xfffffffe}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) (async, rerun: 64) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) (rerun: 64) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@newlink={0x64, 0x10, 0xffffffffffffffff, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x1, 0x823}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x3}, @IFLA_VLAN_INGRESS_QOS={0x10, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0xffffffff}}]}, @IFLA_VLAN_EGRESS_QOS={0x10, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x39, {0x7, 0x7}}]}]}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x64}, 0x1, 0x0, 0x0, 0x45}, 0x40040) 2.59416ms ago: executing program 5 (id=4206): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newtaction={0x7c, 0x30, 0x1, 0x8000000, 0x3, {}, [{0x68, 0x1, [@m_mpls={0x64, 0x1, 0x0, 0x0, {{0x9}, {0x38, 0x2, 0x0, 0x1, [@TCA_MPLS_LABEL={0x8}, @TCA_MPLS_PROTO={0x6, 0x4, 0x8848}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x10001, 0x69, 0x6, 0x1, 0xd817}, 0x2}}, @TCA_MPLS_TTL={0x5, 0x7, 0x7}]}, {0x4, 0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x7c}}, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000ff00000001"], 0x48) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r1, @ANYBLOB="0000000002000000b70500000800000085000000c200000095"], &(0x7f00000000c0)='GPL\x00', 0x9, 0x0, 0x0, 0x41100}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="611230000000000061134c0000000000bf2000000000000016001000071b48013d0301000000000007020000ffb00000bc26100000000000bf67200000000000160200000fff07006702000007000000360600000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a83683d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf5fe7030586"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb0}, 0x48) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newtaction={0x7c, 0x30, 0x1, 0x8000000, 0x3, {}, [{0x68, 0x1, [@m_mpls={0x64, 0x1, 0x0, 0x0, {{0x9}, {0x38, 0x2, 0x0, 0x1, [@TCA_MPLS_LABEL={0x8}, @TCA_MPLS_PROTO={0x6, 0x4, 0x8848}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x10001, 0x69, 0x6, 0x1, 0xd817}, 0x2}}, @TCA_MPLS_TTL={0x5, 0x7, 0x7}]}, {0x4, 0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x7c}}, 0x0) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000ff00000001"], 0x48) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r1, @ANYBLOB="0000000002000000b70500000800000085000000c200000095"], &(0x7f00000000c0)='GPL\x00', 0x9, 0x0, 0x0, 0x41100}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="611230000000000061134c0000000000bf2000000000000016001000071b48013d0301000000000007020000ffb00000bc26100000000000bf67200000000000160200000fff07006702000007000000360600000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a83683d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf5fe7030586"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb0}, 0x48) (async) 0s ago: executing program 1 (id=4207): pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) mmap$xdp(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000000, 0x10010, r0, 0x0) write$cgroup_int(r0, &(0x7f0000000380)=0x8, 0x12) r1 = socket$inet(0x2, 0x80001, 0x84) close(0x3) r2 = socket(0x2, 0x80805, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x7a, &(0x7f0000000340)={r4, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) getpeername(r2, 0x0, &(0x7f0000000000)) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r6, 0x84, 0x74, &(0x7f0000000200)={r5, 0xfffe, 0x20}, &(0x7f00000001c0)=0x18) write$tun(r0, &(0x7f0000001400)={@val={0x0, 0x9300}, @val={0x0, 0x1, 0xe, 0x6, 0x4, 0x129}, @eth={@random="91d993d5768f", @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x1, 0x1a, 0xfe5, 0x67, 0x0, 0x3, 0x11, 0x0, @private=0xa010101, @rand_addr=0x64010100}, {0x4e23, 0x4e21, 0xfd1, 0x0, @wg=@data={0x4, 0x7, 0x3, "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"}}}}}}}, 0x1001) kernel console output (not intermixed with test programs): d on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 532.547325][T17090] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 532.728707][ T1109] hsr_slave_0: left promiscuous mode [ 532.771569][ T1109] hsr_slave_1: left promiscuous mode [ 532.990198][T17402] sctp: [Deprecated]: syz.3.2762 (pid 17402) Use of int in max_burst socket option. [ 532.990198][T17402] Use struct sctp_assoc_value instead [ 533.314825][T17411] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2763'. [ 533.820972][T17422] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2765'. [ 534.081625][ T5283] 8021q: adding VLAN 0 to HW filter on device eth11 [ 534.275560][T17090] hsr_slave_0: entered promiscuous mode [ 534.284181][T17090] hsr_slave_1: entered promiscuous mode [ 534.305510][T17090] debugfs: 'hsr0' already exists in 'hsr' [ 534.333363][T17090] Cannot create hsr debugfs directory [ 534.492140][T17430] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 534.515715][T17430] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 534.535737][T17430] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 534.627074][T17439] netlink: 165 bytes leftover after parsing attributes in process `syz.4.2770'. [ 534.635388][T17440] netlink: 124 bytes leftover after parsing attributes in process `syz.3.2771'. [ 534.849967][T17432] bond0: (slave bond_slave_1): Releasing backup interface [ 534.920528][ T1109] IPVS: stop unused estimator thread 0... [ 535.498554][T17090] netdevsim netdevsim1 eth12 (unregistering): unset [1, 0] type 2 family 0 port 20002 - 0 [ 535.979669][T12828] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 535.988360][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 536.025747][T17090] netdevsim netdevsim1 eth11 (unregistering): unset [1, 0] type 2 family 0 port 20002 - 0 [ 536.329881][T17090] netdevsim netdevsim1 eth10 (unregistering): unset [1, 0] type 2 family 0 port 20002 - 0 [ 536.506526][T17512] syzkaller0: entered promiscuous mode [ 536.540061][T17512] syzkaller0: entered allmulticast mode [ 536.732668][T17090] netdevsim netdevsim1 eth9 (unregistering): unset [1, 0] type 2 family 0 port 20002 - 0 [ 537.561531][T17553] netlink: 'syz.3.2792': attribute type 10 has an invalid length. [ 537.646442][T17569] netlink: 292 bytes leftover after parsing attributes in process `syz.6.2795'. [ 537.756708][T17570] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2795'. [ 537.776623][T17090] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 537.835362][T17090] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 537.873237][T17090] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 537.918786][T17090] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 537.933210][T17090] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 537.961063][T17090] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 537.986694][T17090] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 538.050037][T17090] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 538.098717][T17581] tipc: Resetting bearer [ 538.161610][T17581] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 538.252956][T17587] bond10: option active_slave: mode dependency failed, not supported in mode balance-xor(2) [ 538.300761][T17587] bond10 (unregistering): Released all slaves [ 538.317932][ T30] audit: type=1804 audit(1783233784.931:9): pid=17598 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.2801" name="/newroot/211/cgroup.controllers" dev="tmpfs" ino=1101 res=1 errno=0 [ 538.366270][ T30] audit: type=1800 audit(1783233784.931:10): pid=17598 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2801" name="cgroup.controllers" dev="tmpfs" ino=1101 res=0 errno=0 [ 538.689134][T17615] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2803'. [ 538.804594][T17617] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2804'. [ 538.957667][T17090] 8021q: adding VLAN 0 to HW filter on device bond0 [ 538.973106][T17624] netlink: 'syz.6.2805': attribute type 1 has an invalid length. [ 539.007651][T17626] netlink: 'syz.3.2806': attribute type 1 has an invalid length. [ 539.063568][T17620] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2805'. [ 539.154641][T17624] 8021q: adding VLAN 0 to HW filter on device bond1 [ 539.258793][T17636] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2809'. [ 539.268937][T17636] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2809'. [ 539.279797][T17636] netlink: 'syz.4.2809': attribute type 18 has an invalid length. [ 539.285747][T17637] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2809'. [ 539.300956][T17626] bond7: entered promiscuous mode [ 539.324353][T17626] 8021q: adding VLAN 0 to HW filter on device bond7 [ 539.338272][T17637] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2809'. [ 539.396397][T17637] netlink: 'syz.4.2809': attribute type 18 has an invalid length. [ 539.410018][T17631] macvlan2: entered promiscuous mode [ 539.415521][T17631] macvlan2: entered allmulticast mode [ 539.429830][T17631] bond1: entered promiscuous mode [ 539.435644][T17631] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 539.446348][T17631] bond1: left promiscuous mode [ 539.528147][T17090] 8021q: adding VLAN 0 to HW filter on device team0 [ 539.583522][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 539.588042][T17644] netlink: 'syz.3.2810': attribute type 9 has an invalid length. [ 539.590725][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 539.637182][ T1117] bridge0: port 2(bridge_slave_1) entered blocking state [ 539.644461][ T1117] bridge0: port 2(bridge_slave_1) entered forwarding state [ 539.686971][T17644] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2810'. [ 539.924649][T17651] bond0: entered promiscuous mode [ 539.949622][T17651] bond_slave_0: entered promiscuous mode [ 540.012172][T17651] bond0: left promiscuous mode [ 540.053793][T17651] bond_slave_0: left promiscuous mode [ 540.293740][T17659] bond0: entered promiscuous mode [ 540.314253][T17659] bond_slave_0: entered promiscuous mode [ 540.340683][T17659] bond0: left promiscuous mode [ 540.350277][T17659] bond_slave_0: left promiscuous mode [ 540.753308][T17688] netlink: 'syz.6.2820': attribute type 15 has an invalid length. [ 541.011243][T17705] mac80211_hwsim hwsim9 wlan1: Caught tx_queue_len zero misconfig [ 541.391618][T17722] bridge2: entered promiscuous mode [ 541.414315][T17722] bridge2: entered allmulticast mode [ 541.576612][ T5753] IPVS: starting estimator thread 0... [ 541.717619][T17732] IPVS: using max 32 ests per chain, 76800 per kthread [ 541.725155][ T1109] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 541.733825][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 541.792813][T17735] bridge2: entered promiscuous mode [ 541.846725][T17735] bridge2: entered allmulticast mode [ 541.976338][T17738] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 541.984829][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 542.044109][T17090] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 542.226148][T17090] veth0_vlan: entered promiscuous mode [ 542.284108][T17090] veth1_vlan: entered promiscuous mode [ 542.298489][T17755] netlink: 'syz.4.2832': attribute type 1 has an invalid length. [ 542.358849][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 542.539226][T17761] gretap1: entered allmulticast mode [ 542.548862][T17761] bond10: (slave gretap1): making interface the new active one [ 542.563475][T17761] bond10: (slave gretap1): Enslaving as an active interface with an up link [ 542.620355][T17754] ipip0: entered promiscuous mode [ 542.792033][T17090] veth0_macvtap: entered promiscuous mode [ 542.884789][T17090] veth1_macvtap: entered promiscuous mode [ 542.956600][T17090] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 542.989626][T17791] __nla_validate_parse: 1 callbacks suppressed [ 542.989643][T17791] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2839'. [ 543.035827][T17090] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 543.084507][T17791] Bluetooth: MGMT ver 1.23 [ 543.156965][ T43] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 543.186981][ T43] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 543.190428][T17801] rdma_rxe: rxe_newlink: failed to add lo [ 543.238379][T17796] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2839'. [ 543.244866][ T43] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 543.270413][T17796] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2839'. [ 543.302866][T17806] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2840'. [ 543.311731][ T43] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 543.315176][T17796] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2839'. [ 543.347589][T17806] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2840'. [ 543.685808][T12828] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 543.743441][T12828] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 543.840788][T17822] macvtap0: entered promiscuous mode [ 543.921507][ T43] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 543.954252][ T43] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 544.286924][T17847] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2703'. [ 544.340944][T17847] bond1 (unregistering): Released all slaves [ 544.374330][T17851] ip6_vti0: Caught tx_queue_len zero misconfig [ 544.771396][T17862] ±ÿª¨úrBº“ speed is unknown, defaulting to 1000 [ 545.264228][T17862] ±ÿª¨úrBº“ speed is unknown, defaulting to 1000 [ 546.527570][T17810] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 546.742463][T17903] netlink: 'syz.3.2850': attribute type 4 has an invalid length. [ 546.820012][T17907] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 547.553597][T17947] netlink: 'syz.1.2860': attribute type 1 has an invalid length. [ 547.623374][ T50] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 547.638915][ T50] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 547.651900][ T50] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 547.664048][ T50] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 547.680318][ T50] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 548.042464][T17947] bridge0: port 2(bridge_slave_1) entered disabled state [ 548.050224][T17947] bridge0: port 1(bridge_slave_0) entered disabled state [ 548.266976][T17967] openvswitch: netlink: VXLAN extension message has 16 unknown bytes. [ 548.424715][T17947] bridge_slave_0: left allmulticast mode [ 548.433071][T17947] bridge_slave_0: left promiscuous mode [ 548.442571][T17947] bridge0: port 1(bridge_slave_0) entered disabled state [ 548.481119][T17947] bridge_slave_1: left allmulticast mode [ 548.488029][T17947] bridge_slave_1: left promiscuous mode [ 548.495023][T17947] bridge0: port 2(bridge_slave_1) entered disabled state [ 548.525415][T17947] bond0: (slave bond_slave_0): Releasing backup interface [ 548.551237][T17947] bond0: (slave bond_slave_1): Releasing backup interface [ 548.581649][T17947] team0: Port device team_slave_0 removed [ 548.604865][T17947] team0: Port device team_slave_1 removed [ 548.618821][T17947] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 548.630446][T17947] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 548.642313][T17947] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 548.653109][T17947] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 548.669301][T17947] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 548.942140][T17986] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2863'. [ 548.979933][T17986] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2863'. [ 548.996212][T17993] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2864'. [ 549.134609][T17989] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2864'. [ 549.438746][T17949] ±ÿª¨úrBº“ speed is unknown, defaulting to 1000 [ 549.724369][ T4938] Bluetooth: hci1: command tx timeout [ 550.027921][T18038] netlink: 52 bytes leftover after parsing attributes in process `syz.5.2873'. [ 550.087566][T17949] ±ÿª¨úrBº“ speed is unknown, defaulting to 1000 [ 550.193861][T18043] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2875'. [ 551.809503][ T4938] Bluetooth: hci1: command tx timeout [ 551.890635][T18075] ipip1: entered promiscuous mode [ 552.104874][T18100] netlink: 84 bytes leftover after parsing attributes in process `syz.3.2882'. [ 552.160515][T18100] smc: removing ib device syz1 [ 552.264585][T18100] smbdirect: ib_dev[syz1] removed [ 552.906053][T17949] bridge0: port 1(bridge_slave_0) entered blocking state [ 552.939396][T17949] bridge0: port 1(bridge_slave_0) entered disabled state [ 552.966151][T17949] bridge_slave_0: entered allmulticast mode [ 552.990908][T17949] bridge_slave_0: entered promiscuous mode [ 553.031031][T17949] bridge0: port 2(bridge_slave_1) entered blocking state [ 553.039610][T17949] bridge0: port 2(bridge_slave_1) entered disabled state [ 553.046836][T17949] bridge_slave_1: entered allmulticast mode [ 553.065559][T17949] bridge_slave_1: entered promiscuous mode [ 553.341521][T17949] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 553.389847][T17949] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 553.615797][T17949] team0: Port device team_slave_0 added [ 553.645241][T17949] team0: Port device team_slave_1 added [ 553.842475][T17949] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 553.862708][T17949] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 553.897802][ T4938] Bluetooth: hci1: command tx timeout [ 553.913567][T17949] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 553.938626][T17949] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 553.948821][T17949] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 553.981460][T17949] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 554.248568][T17949] hsr_slave_0: entered promiscuous mode [ 554.282019][T17949] hsr_slave_1: entered promiscuous mode [ 554.299704][T17949] debugfs: 'hsr0' already exists in 'hsr' [ 554.329081][T17949] Cannot create hsr debugfs directory [ 554.506947][T18081] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 555.393480][T18183] xt_TCPMSS: Only works on TCP SYN packets [ 555.432389][T18185] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2889'. [ 555.471616][T18183] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2889'. [ 555.615970][T18195] netlink: 'syz.1.2890': attribute type 1 has an invalid length. [ 555.679782][T18196] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2890'. [ 555.873405][T17949] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 555.959034][ T4938] Bluetooth: hci1: command tx timeout [ 555.971647][T17949] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 556.288176][T18196] vlan1: entered promiscuous mode [ 556.303683][T18196] vlan1: entered allmulticast mode [ 556.320315][T18196] veth0_vlan: entered allmulticast mode [ 556.444448][T17949] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 556.488924][T17949] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 556.868922][T17949] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 556.881295][T18234] IPv6: addrconf: prefix option has invalid lifetime [ 556.904530][T17949] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 556.953585][T18239] netdevsim netdevsim1 €Â: renamed from netdevsim0 (while UP) [ 557.114347][T18235] bond9: up delay (2) is not a multiple of miimon (80), value rounded to 0 ms [ 557.191939][T18235] bond9: entered promiscuous mode [ 557.218927][T18235] 8021q: adding VLAN 0 to HW filter on device bond9 [ 557.319674][T17949] netdevsim netdevsim4 €Â (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 557.358973][T17949] netdevsim netdevsim4 €Â (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 557.479722][T18259] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2897'. [ 557.852468][T18274] netlink: 'syz.3.2900': attribute type 32 has an invalid length. [ 557.872155][T18274] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2900'. [ 557.998713][T18274] bond8: option coupled_control: invalid value (255) [ 558.009704][T18274] bond8 (unregistering): Released all slaves [ 558.334366][T17949] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 558.364409][T17949] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 558.391799][T17949] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 558.414737][T17949] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 558.439481][T17949] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 558.451347][T17949] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 558.463433][T17949] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 558.496406][T17949] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 558.735952][T18313] netlink: 27 bytes leftover after parsing attributes in process `syz.1.2906'. [ 558.784476][T18311] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2906'. [ 558.819327][T18311] netlink: get zone limit has 8 unknown bytes [ 558.919775][T18318] netlink: 84 bytes leftover after parsing attributes in process `syz.6.2908'. [ 558.967398][T17949] 8021q: adding VLAN 0 to HW filter on device bond0 [ 559.039018][T17949] 8021q: adding VLAN 0 to HW filter on device team0 [ 559.085302][T12828] bridge0: port 1(bridge_slave_0) entered blocking state [ 559.092552][T12828] bridge0: port 1(bridge_slave_0) entered forwarding state [ 559.159836][T18332] x_tables: ip_tables: TEE.1 target: invalid size 40 (kernel) != (user) 0 [ 559.189858][T12828] bridge0: port 2(bridge_slave_1) entered blocking state [ 559.198121][T12828] bridge0: port 2(bridge_slave_1) entered forwarding state [ 559.752758][T18358] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 559.767351][T18356] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2917'. [ 559.830761][T18358] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 559.849774][T18358] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 559.888849][T18356] netlink: 87 bytes leftover after parsing attributes in process `syz.3.2917'. [ 559.900558][T18358] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 560.199168][T17949] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 560.493382][T17949] veth0_vlan: entered promiscuous mode [ 560.513153][T17949] veth1_vlan: entered promiscuous mode [ 560.554002][T17949] veth0_macvtap: entered promiscuous mode [ 560.565822][T17949] veth1_macvtap: entered promiscuous mode [ 560.591539][T17949] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 560.603239][T17949] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 560.629403][ T57] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 560.638948][ T57] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 560.651233][ T78] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 560.661982][ T78] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 562.031944][T18327] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 562.250785][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 562.283090][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 562.328210][T18384] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2921'. [ 562.342336][ T78] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 562.353064][ T78] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 562.364286][T18384] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2921'. [ 562.430668][ T12] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 562.446649][T18384] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2921'. [ 562.479246][ T12] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 562.492468][T18384] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2921'. [ 562.586031][ T12] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 562.622574][ T12] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 562.662526][T18399] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2921'. [ 562.927996][T18403] ±ÿª¨úrBº“ speed is unknown, defaulting to 1000 [ 563.201813][T18417] ±ÿª¨úrBº“ speed is unknown, defaulting to 1000 [ 563.443146][T18434] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2934'. [ 563.474708][T18437] netlink: 'syz.1.2933': attribute type 1 has an invalid length. [ 563.724049][T18443] syz.4.2935: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 563.807961][T18443] CPU: 1 UID: 0 PID: 18443 Comm: syz.4.2935 Not tainted syzkaller #0 PREEMPT(full) [ 563.807986][T18443] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 563.808006][T18443] Call Trace: [ 563.808013][T18443] [ 563.808021][T18443] dump_stack_lvl+0xe8/0x150 [ 563.808055][T18443] warn_alloc+0x24c/0x270 [ 563.808080][T18443] ? ktime_expiry_to_cycles+0x4e/0x1e0 [ 563.808103][T18443] ? lock_acquire+0x106/0x350 [ 563.808130][T18443] ? __pfx_warn_alloc+0x10/0x10 [ 563.808162][T18443] ? ktime_expiry_to_cycles+0x4e/0x1e0 [ 563.808186][T18443] ? seqcount_lockdep_reader_access+0xd4/0x100 [ 563.808216][T18443] __vmalloc_node_range_noprof+0x12c/0x1730 [ 563.808241][T18443] ? clockevents_program_event+0x1a6/0x630 [ 563.808268][T18443] ? __hrtimer_rearm_deferred+0x99/0x420 [ 563.808290][T18443] ? __pfx_clockevents_program_event+0x10/0x10 [ 563.808334][T18443] ? irqentry_exit+0x218/0x8f0 [ 563.808359][T18443] ? lockdep_hardirqs_on+0x7a/0x110 [ 563.808385][T18443] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 563.808424][T18443] vmalloc_user_noprof+0xad/0xe0 [ 563.808446][T18443] ? xskq_create+0xbf/0x170 [ 563.808545][T18443] xskq_create+0xbf/0x170 [ 563.808571][T18443] xsk_init_queue+0x8a/0xe0 [ 563.808596][T18443] xsk_setsockopt+0x52a/0x960 [ 563.808617][T18443] ? __fget_files+0x2a/0x420 [ 563.808642][T18443] ? __pfx_xsk_setsockopt+0x10/0x10 [ 563.808664][T18443] ? __pfx_aa_sk_perm+0x10/0x10 [ 563.808728][T18443] ? aa_sock_opt_perm+0xff/0x1a0 [ 563.808757][T18443] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 563.808776][T18443] ? __pfx_xsk_setsockopt+0x10/0x10 [ 563.808797][T18443] do_sock_setsockopt+0x17c/0x1b0 [ 563.808858][T18443] __x64_sys_setsockopt+0x13d/0x1b0 [ 563.808886][T18443] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 563.808907][T18443] do_syscall_64+0x174/0x580 [ 563.808930][T18443] ? trace_irq_disable+0x3b/0x140 [ 563.808951][T18443] ? clear_bhb_loop+0x40/0x90 [ 563.808974][T18443] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 563.808992][T18443] RIP: 0033:0x7ff8dc59de59 [ 563.809009][T18443] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 563.809024][T18443] RSP: 002b:00007ff8dd41e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 563.809043][T18443] RAX: ffffffffffffffda RBX: 00007ff8dc825fa0 RCX: 00007ff8dc59de59 [ 563.809056][T18443] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000004 [ 563.809068][T18443] RBP: 00007ff8dc633e6f R08: 0000000000000004 R09: 0000000000000000 [ 563.809079][T18443] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 563.809089][T18443] R13: 00007ff8dc826038 R14: 00007ff8dc825fa0 R15: 00007fff198ca678 [ 563.809119][T18443] [ 563.811603][T18443] Mem-Info: [ 564.123334][T18443] active_anon:9495 inactive_anon:0 isolated_anon:0 [ 564.123334][T18443] active_file:0 inactive_file:43754 isolated_file:0 [ 564.123334][T18443] unevictable:768 dirty:164 writeback:0 [ 564.123334][T18443] slab_reclaimable:11473 slab_unreclaimable:110446 [ 564.123334][T18443] mapped:29599 shmem:1294 pagetables:1610 [ 564.123334][T18443] sec_pagetables:0 bounce:0 [ 564.123334][T18443] kernel_misc_reclaimable:0 [ 564.123334][T18443] free:1307780 free_pcp:8569 free_cma:0 [ 564.211195][T18443] Node 0 active_anon:37980kB inactive_anon:0kB active_file:0kB inactive_file:174808kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:118396kB dirty:652kB writeback:0kB shmem:3640kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13632kB pagetables:6312kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 564.258321][T18443] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:128kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 564.302330][T18443] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 564.344223][T18443] lowmem_reserve[]: 0 2489 2489 2489 2489 [ 564.351726][T18443] Node 0 DMA32 free:1268088kB boost:0kB min:34160kB low:42700kB high:51240kB reserved_highatomic:0KB free_highatomic:0KB active_anon:37980kB inactive_anon:0kB active_file:0kB inactive_file:174808kB unevictable:1536kB writepending:652kB zspages:0kB present:3129332kB managed:2548828kB mlocked:0kB bounce:0kB free_pcp:35324kB local_pcp:21316kB free_cma:0kB [ 564.437191][T18443] lowmem_reserve[]: 0 0 0 0 0 [ 564.447282][T18443] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:268kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 564.547439][T18443] lowmem_reserve[]: 0 0 0 0 0 [ 564.573512][T18443] Node 1 Normal free:3946992kB boost:0kB min:55736kB low:69668kB high:83600kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 564.673288][T18443] lowmem_reserve[]: 0 0 0 0 0 [ 564.681546][T18443] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 564.709632][T18443] Node 0 DMA32: 1548*4kB (UME) 2117*8kB (UME) 2421*16kB (UME) 633*32kB (UME) 138*64kB (UME) 98*128kB (UME) 32*256kB (UME) 9*512kB (UM) 7*1024kB (UME) 3*2048kB (M) 278*4096kB (UM) = 1268296kB [ 564.733382][T18443] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 564.736435][T18458] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2939'. [ 564.750517][T18443] Node 1 Normal: 0*4kB 4*8kB (UM) 5*16kB (UM) 2*32kB (UM) 7*64kB (UM) 3*128kB (UM) 6*256kB (UM) 4*512kB (UM) 2*1024kB (UM) 0*2048kB 962*4096kB (UM) = 3946992kB [ 564.802739][T18443] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 564.826833][T18443] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 564.847721][T18443] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 564.858688][T18443] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 564.869301][T18443] 45083 total pagecache pages [ 564.874154][T18443] 0 pages in swap cache [ 564.879441][T18443] Free swap = 124996kB [ 564.884039][T18443] Total swap = 124996kB [ 564.888854][T18443] 2097051 pages RAM [ 564.893240][T18443] 0 pages HighMem/MovableOnly [ 564.899140][T18443] 428162 pages reserved [ 564.903950][T18443] 0 pages cma reserved [ 564.907505][T18458] 8021q: adding VLAN 0 to HW filter on device bond10 [ 565.012839][T18466] xt_hashlimit: size too large, truncated to 1048576 [ 565.294237][T18458] ±ÿª¨úrBº“ speed is unknown, defaulting to 1000 [ 565.799389][ T1117] wlan0: Trigger new scan to find an IBSS to join [ 565.815414][T18477] netlink: 48 bytes leftover after parsing attributes in process `syz.6.2945'. [ 565.950074][T18481] veth9: entered promiscuous mode [ 565.967889][T18481] veth9: entered allmulticast mode [ 565.987006][T18481] team0: Device veth9 is up. Set it down before adding it as a team port [ 566.100741][T18486] syzkaller0: entered promiscuous mode [ 566.107568][T18486] syzkaller0: entered allmulticast mode [ 566.161645][T18490] syzkaller1: entered promiscuous mode [ 566.175657][T18490] syzkaller1: entered allmulticast mode [ 566.423084][T18503] IPVS: set_ctl: invalid protocol: 43 10.1.1.2:20000 [ 566.444254][T18504] IPVS: set_ctl: invalid protocol: 43 10.1.1.2:20000 [ 566.948622][T18490] bridge0: port 2(bridge_slave_1) entered disabled state [ 566.956336][T18490] bridge0: port 1(bridge_slave_0) entered disabled state [ 567.532221][T18490] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 567.598096][T18490] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 568.004026][T18490] netdevsim netdevsim6 netdevsim0: left promiscuous mode [ 568.017286][T18490] netdevsim netdevsim6 netdevsim0: left allmulticast mode [ 568.106730][T18490] vlan2: left promiscuous mode [ 568.118399][T18490] hsr0: left promiscuous mode [ 568.128002][T18490] vlan2: left allmulticast mode [ 568.133088][T18490] hsr0: left allmulticast mode [ 568.138327][T18490] hsr_slave_0: left allmulticast mode [ 568.143807][T18490] hsr_slave_1: left allmulticast mode [ 568.219482][T18490] ip6gre1: left promiscuous mode [ 568.224478][T18490] ip6gre1: left allmulticast mode [ 568.419732][T18490] gretap1: left allmulticast mode [ 568.445008][T18490] gre2: left allmulticast mode [ 568.549746][T18490] syzkaller1: left promiscuous mode [ 568.557056][T18490] syzkaller1: left allmulticast mode [ 568.606008][T12828] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 568.617388][T12828] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 568.809964][T12828] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 568.841214][T12821] wlan0: Trigger new scan to find an IBSS to join [ 569.064677][T18553] netlink: 'syz.1.2961': attribute type 1 has an invalid length. [ 569.093040][T18551] syzkaller0: entered promiscuous mode [ 569.104230][T18551] syzkaller0: entered allmulticast mode [ 569.215925][T18559] mac80211_hwsim hwsim3 wlan1: Caught tx_queue_len zero misconfig [ 569.226149][T18560] syzkaller0: entered promiscuous mode [ 569.235230][T18560] syzkaller0: entered allmulticast mode [ 569.835434][T18584] netlink: 'syz.5.2967': attribute type 12 has an invalid length. [ 569.979807][T18589] bridge_slave_1: Caught tx_queue_len zero misconfig [ 570.212752][T18601] tipc: Failed to remove unknown binding: 66,0,0/3227640092:941249214/941249215 [ 570.233088][T18601] tipc: Failed to remove unknown binding: 66,0,0/3227640092:941249214/941249215 [ 570.645145][T18618] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2978'. [ 571.030521][T18630] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2981'. [ 571.111224][T18633] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2982'. [ 571.431916][T18639] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 571.800165][ T1109] wlan0: Trigger new scan to find an IBSS to join [ 572.284752][T18677] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2993'. [ 572.314799][T18681] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2994'. [ 572.352444][T18677] netlink: 'syz.1.2993': attribute type 1 has an invalid length. [ 572.487766][T18677] bond1: entered promiscuous mode [ 572.505931][T18677] 8021q: adding VLAN 0 to HW filter on device bond1 [ 572.705779][ T50] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 572.722180][ T50] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 572.732145][ T50] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 572.745215][ T50] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 572.755381][ T78] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 572.764927][ T50] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 573.556410][T18724] xt_CT: No such helper "netbios-ns" [ 573.606984][ T5618] bridge0: port 3(syz_tun) entered disabled state [ 573.656467][T18732] sctp: [Deprecated]: syz.1.3004 (pid 18732) Use of int in maxseg socket option. [ 573.656467][T18732] Use struct sctp_assoc_value instead [ 573.675020][ T5618] syz_tun (unregistering): left allmulticast mode [ 573.702682][ T5618] syz_tun (unregistering): left promiscuous mode [ 573.729442][ T5618] bridge0: port 3(syz_tun) entered disabled state [ 574.114509][T18694] ±ÿª¨úrBº“ speed is unknown, defaulting to 1000 [ 574.460570][T18760] netlink: 'syz.4.3011': attribute type 1 has an invalid length. [ 574.672554][T18760] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3011'. [ 574.784942][T18760] bond1: (slave geneve2): making interface the new active one [ 574.821269][T18760] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 574.837647][ T4938] Bluetooth: hci2: command tx timeout [ 574.863198][T12828] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 574.903020][T12828] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 574.937657][T12828] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 574.948800][T12828] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 575.067725][T18775] sctp: [Deprecated]: syz.5.3016 (pid 18775) Use of int in max_burst socket option. [ 575.067725][T18775] Use struct sctp_assoc_value instead [ 575.084790][T18776] sctp: [Deprecated]: syz.5.3016 (pid 18776) Use of int in max_burst socket option. [ 575.084790][T18776] Use struct sctp_assoc_value instead [ 575.375475][T18780] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 575.494787][T18793] xt_hashlimit: size too large, truncated to 1048576 [ 575.779176][T18694] bridge0: port 1(bridge_slave_0) entered blocking state [ 575.786717][T18694] bridge0: port 1(bridge_slave_0) entered disabled state [ 575.794494][T18694] bridge_slave_0: entered allmulticast mode [ 575.810493][T18694] bridge_slave_0: entered promiscuous mode [ 575.828404][T18694] bridge0: port 2(bridge_slave_1) entered blocking state [ 575.844689][T18694] bridge0: port 2(bridge_slave_1) entered disabled state [ 575.861452][T18694] bridge_slave_1: entered allmulticast mode [ 575.870458][T18694] bridge_slave_1: entered promiscuous mode [ 575.950610][T18694] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 575.965640][T18694] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 576.005199][T18694] team0: Port device team_slave_0 added [ 576.015044][T18694] team0: Port device team_slave_1 added [ 576.076773][T18694] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 576.088632][T18694] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 576.116721][T18694] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 576.131943][T18694] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 576.140506][T18694] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 576.166939][T18694] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 576.223736][T18694] hsr_slave_0: entered promiscuous mode [ 576.230795][T18694] hsr_slave_1: entered promiscuous mode [ 576.237967][T18694] debugfs: 'hsr0' already exists in 'hsr' [ 576.245567][T18694] Cannot create hsr debugfs directory [ 576.424413][T18694] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 576.435213][T18694] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 576.533493][T18694] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 576.544494][T18694] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 576.625388][T18694] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 576.636093][T18694] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 576.731531][T18694] netdevsim netdevsim3 €Â (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 576.741588][T18694] netdevsim netdevsim3 €Â (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 576.927782][ T4938] Bluetooth: hci2: command tx timeout [ 577.418588][T18762] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 577.450560][T18694] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 577.548159][T18694] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 577.590895][T18694] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 577.604954][T18815] netlink: 44 bytes leftover after parsing attributes in process `syz.6.3023'. [ 577.633389][T18694] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 577.646772][T18694] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 577.669528][T18694] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 577.681203][T18694] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 577.711789][T18694] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 577.779176][T18816] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 577.983729][T18837] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3029'. [ 578.032265][T18694] 8021q: adding VLAN 0 to HW filter on device bond0 [ 578.042356][T18837] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3029'. [ 578.080796][T18841] vlan2: entered promiscuous mode [ 578.086968][T18841] erspan0: entered promiscuous mode [ 578.099187][T18837] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3029'. [ 578.113310][T18837] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3029'. [ 578.125931][T18837] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3029'. [ 578.145058][T18837] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3029'. [ 578.164292][T18837] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3029'. [ 578.176504][T18694] 8021q: adding VLAN 0 to HW filter on device team0 [ 578.192401][T18837] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3029'. [ 578.224391][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 578.231589][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 578.255975][T18837] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3029'. [ 578.309456][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 578.316651][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 578.762389][T18864] Cannot find map_set index 65532 as target [ 579.001337][ T4938] Bluetooth: hci2: command tx timeout [ 579.740683][T18906] bridge2: entered promiscuous mode [ 579.773971][T18906] bridge2: entered allmulticast mode [ 580.329150][T18694] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 580.351679][T18931] netlink: 'syz.6.3052': attribute type 12 has an invalid length. [ 580.365541][T18931] netlink: 'syz.6.3052': attribute type 29 has an invalid length. [ 580.383270][T18931] netlink: 'syz.6.3052': attribute type 3 has an invalid length. [ 580.388059][T18940] set match dimension is over the limit! [ 580.636029][T18694] veth0_vlan: entered promiscuous mode [ 580.687018][T18694] veth1_vlan: entered promiscuous mode [ 580.822359][T18694] veth0_macvtap: entered promiscuous mode [ 580.875146][T18694] veth1_macvtap: entered promiscuous mode [ 580.997756][T18694] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 581.064712][T18694] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 581.079058][ T4938] Bluetooth: hci2: command tx timeout [ 581.139109][ T43] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 581.175799][ T43] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 581.231541][ T43] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 581.257816][ T43] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 581.699327][ T1109] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 581.742871][ T1109] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 581.881945][T18983] bond2: entered promiscuous mode [ 581.900341][T18983] 8021q: adding VLAN 0 to HW filter on device bond2 [ 582.031401][ T1117] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 582.058495][ T1117] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 582.912292][T19008] vlan4: entered promiscuous mode [ 582.953326][T19008] bond0: entered promiscuous mode [ 582.994346][T19008] bond_slave_0: entered promiscuous mode [ 583.013551][T19015] IPVS: set_ctl: invalid protocol: 115 172.20.20.170:20000 [ 583.395027][T19023] __nla_validate_parse: 33 callbacks suppressed [ 583.395046][T19023] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3071'. [ 583.444926][T19023] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3071'. [ 583.509219][T19027] openvswitch: netlink: Multiple metadata blocks provided [ 583.744454][T19040] Cannot find add_set index 0 as target [ 583.861479][T19040] block nbd1: NBD_DISCONNECT [ 583.886159][T19040] block nbd1: Send disconnect failed -32 [ 583.912899][T19040] block nbd1: shutting down sockets [ 583.980819][T19050] bond0: entered promiscuous mode [ 583.998726][T19050] bond0: left promiscuous mode [ 584.289718][T19059] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 584.343684][T19064] bridge0: port 1(syz_tun) entered blocking state [ 584.361979][T19064] bridge0: port 1(syz_tun) entered disabled state [ 584.377942][T19064] syz_tun: entered allmulticast mode [ 584.410625][T19064] syz_tun: entered promiscuous mode [ 584.577572][T19071] ipip0: entered promiscuous mode [ 584.716026][T19087] netlink: 104 bytes leftover after parsing attributes in process `syz.3.3087'. [ 584.960732][T19102] netlink: 228 bytes leftover after parsing attributes in process `syz.3.3091'. [ 588.489227][T19121] openvswitch: netlink: Message has 1 unknown bytes. [ 588.500532][T19121] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 588.549362][T19123] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3096'. [ 588.568442][T19123] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 588.648066][T19132] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3097'. [ 588.686645][T19134] netlink: 'syz.5.3098': attribute type 1 has an invalid length. [ 588.792603][T19143] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:00bb with DS=0x1b [ 589.274938][T19170] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 589.301924][T19170] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 589.400172][T19170] ip_vti0: entered promiscuous mode [ 589.409992][T19170] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3108'. [ 589.573069][T19196] netlink: 44 bytes leftover after parsing attributes in process `syz.5.3112'. [ 589.707739][T19203] netlink: 136 bytes leftover after parsing attributes in process `syz.6.3114'. [ 589.734137][T19203] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 589.968285][T19220] netlink: 'syz.1.3120': attribute type 4 has an invalid length. [ 589.993277][T19220] netlink: 'syz.1.3120': attribute type 5 has an invalid length. [ 590.014051][T19220] netlink: 'syz.1.3120': attribute type 27 has an invalid length. [ 590.046585][T19220] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3120'. [ 590.709456][T19228] syzkaller0: entered promiscuous mode [ 590.730773][T19228] syzkaller0: entered allmulticast mode [ 591.004103][T19236] macsec1: entered promiscuous mode [ 591.024653][T19236] bridge0: entered promiscuous mode [ 591.232506][T19248] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3129'. [ 591.284338][T19251] netlink: 'syz.5.3130': attribute type 3 has an invalid length. [ 591.304146][T19248] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 591.307155][T19251] netlink: 'syz.5.3130': attribute type 3 has an invalid length. [ 591.312985][T19248] IPv6: NLM_F_CREATE should be set when creating new route [ 591.616565][T19234] netlink: 'syz.6.3124': attribute type 1 has an invalid length. [ 591.684611][T19268] netlink: 48 bytes leftover after parsing attributes in process `syz.6.3124'. [ 591.793607][T19234] 8021q: adding VLAN 0 to HW filter on device bond2 [ 591.828985][T19273] syzkaller1: entered allmulticast mode [ 591.843801][T19234] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3124'. [ 591.888516][T19279] bond2: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 592.107706][T19283] block nbd0: Unsupported socket: should be TCP or UNIX. [ 605.087502][ T1117] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 616.127270][ T50] Bluetooth: hci6: command 0x0405 tx timeout [ 657.087329][ T50] Bluetooth: hci3: command 0x0406 tx timeout [ 665.888253][ T1117] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 666.252220][T19303] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3141'. [ 666.265912][T19293] bridge_slave_0: left allmulticast mode [ 666.276615][T19293] bridge_slave_0: left promiscuous mode [ 666.285581][T19303] netlink: 'syz.4.3141': attribute type 1 has an invalid length. [ 666.287462][T19293] bridge0: port 1(bridge_slave_0) entered disabled state [ 666.324115][T19293] bridge_slave_1: left allmulticast mode [ 666.356664][T19293] bridge_slave_1: left promiscuous mode [ 666.366700][T19293] bridge0: port 2(bridge_slave_1) entered disabled state [ 666.403779][T19293] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 666.413762][T19293] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 666.436106][T19293] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 666.456662][T19312] sctp: [Deprecated]: syz.6.3142 (pid 19312) Use of int in max_burst socket option. [ 666.456662][T19312] Use struct sctp_assoc_value instead [ 666.614672][T19324] netlink: 'syz.1.3145': attribute type 11 has an invalid length. [ 666.933100][T19339] bridge0: left allmulticast mode [ 667.001950][T19343] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 667.124507][T19339] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 667.211774][T19339] macvlan2: left allmulticast mode [ 667.239126][T19339] dummy0: left allmulticast mode [ 667.266963][T19339] 8021q: adding VLAN 0 to HW filter on device bond4 [ 667.291045][T19339] bond6: left allmulticast mode [ 667.300800][T19339] erspan1: left allmulticast mode [ 667.310067][T19339] 8021q: adding VLAN 0 to HW filter on device bond0 [ 667.318490][T19356] sctp: [Deprecated]: syz.3.3151 (pid 19356) Use of struct sctp_assoc_value in delayed_ack socket option. [ 667.318490][T19356] Use struct sctp_sack_info instead [ 667.342047][T19339] 8021q: adding VLAN 0 to HW filter on device bond8 [ 667.531510][ T1117] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 667.571461][ T30] audit: type=1107 audit(1783233914.181:11): pid=19363 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 667.880318][T19386] netlink: 'syz.4.3158': attribute type 12 has an invalid length. [ 667.906160][T19383] ±ÿª¨úrBº“ speed is unknown, defaulting to 1000 [ 668.280687][T19401] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3162'. [ 668.451054][T19401] bond3: option ad_actor_system: mode dependency failed, not supported in mode balance-rr(0) [ 668.514141][T19401] bond3 (unregistering): Released all slaves [ 668.851838][T19414] netlink: 204 bytes leftover after parsing attributes in process `syz.3.3166'. [ 669.104919][T19420] netlink: 'syz.6.3169': attribute type 1 has an invalid length. [ 669.161248][T19420] netlink: 76 bytes leftover after parsing attributes in process `syz.6.3169'. [ 669.371390][T19429] netlink: 14 bytes leftover after parsing attributes in process `syz.6.3169'. [ 669.565578][T19415] syzkaller0: entered promiscuous mode [ 669.605959][T19415] syzkaller0: entered allmulticast mode [ 669.850345][T19427] vlan4: entered allmulticast mode [ 669.871370][T19427] bond0: entered allmulticast mode [ 669.891664][T19427] bond_slave_0: entered allmulticast mode [ 669.952978][T19429] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 669.996091][T19429] bond_slave_0: left promiscuous mode [ 670.015461][T19429] bond_slave_0: left allmulticast mode [ 670.040271][T19429] bond0 (unregistering): Released all slaves [ 670.291875][T19434] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3170'. [ 670.523745][T19442] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3170'. [ 671.237790][ C0] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 673.571465][T19461] ±ÿª¨úrBº“ speed is unknown, defaulting to 1000 [ 673.817815][T19471] block nbd1: server does not support multiple connections per device. [ 673.845332][T19471] block nbd1: shutting down sockets [ 673.868206][T19475] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 674.401152][T19477] siw: device registration error -23 [ 674.651966][T19496] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3189'. [ 674.839814][T19499] ip_vti0: left promiscuous mode [ 675.114787][T19499] macsec1: left promiscuous mode [ 675.882270][T19528] netlink: 'syz.4.3197': attribute type 32 has an invalid length. [ 675.894708][T19540] xt_cgroup: xt_cgroup: no path or classid specified [ 675.985014][T19543] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3201'. [ 676.036722][T19546] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3202'. [ 676.104657][T19555] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3203'. [ 676.119608][T19543] team0: Port device team_slave_0 removed [ 676.283573][T19563] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3205'. [ 676.303758][T19564] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3206'. [ 676.309057][T19560] netlink: 14 bytes leftover after parsing attributes in process `syz.1.3204'. [ 676.349201][T19563] 8021q: adding VLAN 0 to HW filter on device bond0 [ 676.394595][T19563] macvlan2: entered promiscuous mode [ 676.400109][T19563] macvlan2: entered allmulticast mode [ 676.406662][T19563] bond0: entered promiscuous mode [ 676.413889][T19563] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 676.425159][T19563] bond0: left promiscuous mode [ 676.520050][T19570] syzkaller1: entered promiscuous mode [ 676.538334][T19570] syzkaller1: entered allmulticast mode [ 676.558714][T19572] syzkaller1: entered promiscuous mode [ 676.564428][T19572] syzkaller1: entered allmulticast mode [ 676.634674][T19581] xt_hashlimit: size too large, truncated to 1048576 [ 676.690431][T19580] gretap0: entered promiscuous mode [ 677.065650][T19601] bond0: Unable to set peer notification delay as MII monitoring is disabled [ 677.100731][T19603] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3216'. [ 677.115632][T19601] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3215'. [ 677.189660][T19601] sctp: [Deprecated]: syz.4.3215 (pid 19601) Use of int in max_burst socket option. [ 677.189660][T19601] Use struct sctp_assoc_value instead [ 677.277717][T19606] block nbd1: server does not support multiple connections per device. [ 677.300375][T19606] block nbd1: shutting down sockets [ 677.564227][T19628] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3223'. [ 678.261811][T19690] netlink: 'syz.3.3234': attribute type 27 has an invalid length. [ 678.342995][T19690] netlink: 'syz.3.3234': attribute type 6 has an invalid length. [ 678.492237][T19706] netlink: 'syz.1.3238': attribute type 1 has an invalid length. [ 678.579346][T19706] bond3: entered promiscuous mode [ 678.585874][T19706] bond3: entered allmulticast mode [ 678.605785][T19706] 8021q: adding VLAN 0 to HW filter on device bond3 [ 678.633500][T19712] erspan2: entered allmulticast mode [ 678.643674][T19712] bond3: (slave erspan2): making interface the new active one [ 678.651374][T19712] erspan2: entered promiscuous mode [ 678.660599][T19712] bond3: (slave erspan2): Enslaving as an active interface with an up link [ 678.680589][ C0] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 679.002927][T19738] netlink: 'syz.3.3247': attribute type 2 has an invalid length. [ 679.093784][T19739] ±ÿª¨úrBº“ speed is unknown, defaulting to 1000 [ 679.208007][T19750] openvswitch: netlink: Tunnel attr 91 out of range max 16 [ 679.594706][T19756] ±ÿª¨úrBº“ speed is unknown, defaulting to 1000 [ 679.934512][T19773] __nla_validate_parse: 12 callbacks suppressed [ 679.934532][T19773] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3254'. [ 680.705447][T19809] netlink: 'syz.1.3260': attribute type 58 has an invalid length. [ 681.052953][T19815] netlink: 'syz.4.3261': attribute type 1 has an invalid length. [ 681.173840][T19815] 8021q: adding VLAN 0 to HW filter on device bond4 [ 681.270413][T19819] bond4: (slave geneve3): making interface the new active one [ 681.308252][T19819] bond4: (slave geneve3): Enslaving as an active interface with an up link [ 681.329520][T19811] netlink: 'syz.4.3261': attribute type 4 has an invalid length. [ 681.473559][T19821] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 681.529413][T19821] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 681.714313][T19824] ±ÿª¨úrBº“ speed is unknown, defaulting to 1000 [ 681.944925][T19833] bridge0: port 1(syz_tun) entered blocking state [ 681.951598][T19833] bridge0: port 1(syz_tun) entered forwarding state [ 681.984407][T19833] 8021q: adding VLAN 0 to HW filter on device bond0 [ 682.001109][T19833] 8021q: adding VLAN 0 to HW filter on device team0 [ 682.022786][T19833] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 682.155919][T19842] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3268'. [ 682.161461][T19833] vlan1: left allmulticast mode [ 682.173077][T19833] veth0_vlan: left allmulticast mode [ 682.202225][T19833] syzkaller0: left allmulticast mode [ 682.217869][T19833] bond3: left allmulticast mode [ 682.226927][T19844] Unknown options in mask 6 [ 682.237419][T19833] erspan2: left allmulticast mode [ 682.607155][T19855] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 682.827029][T19854] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3270'. [ 682.870062][T19858] syzkaller0: entered allmulticast mode [ 682.901484][T19862] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3271'. [ 683.120410][T19868] netlink: 'syz.4.3272': attribute type 21 has an invalid length. [ 683.376025][T19874] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3273'. [ 683.471927][T19877] ±ÿª¨úrBº“ speed is unknown, defaulting to 1000 [ 683.517695][T19888] IPVS: Scheduler module ip_vs_ not found [ 683.855688][T19882] netlink: 'syz.5.3275': attribute type 21 has an invalid length. [ 683.871746][T19882] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3275'. [ 684.121914][T19912] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3282'. [ 684.170568][T19916] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_hsr, syncid = 4, id = 0 [ 684.217904][T19919] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3281'. [ 684.243106][T19919] netlink: 'syz.4.3281': attribute type 1 has an invalid length. [ 684.786097][T19934] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3287'. [ 685.044018][T19940] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3288'. [ 685.235911][T19935] vlan1: left promiscuous mode [ 685.306065][T19935] bond1: left promiscuous mode [ 685.331696][T19935] bond2: left promiscuous mode [ 685.366591][T19935] syzkaller0: left promiscuous mode [ 685.420869][T19935] bond3: left promiscuous mode [ 685.460548][T19935] erspan2: left promiscuous mode [ 686.055703][T19949] syzkaller0: entered promiscuous mode [ 686.062928][T19949] syzkaller0: entered allmulticast mode [ 686.459675][T19994] netlink: 52 bytes leftover after parsing attributes in process `syz.4.3296'. [ 686.538663][T19997] netlink: 'syz.1.3297': attribute type 2 has an invalid length. [ 689.098546][T19977] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 689.119777][T19994] macvtap1: entered promiscuous mode [ 689.147323][T19994] vlan0: entered promiscuous mode [ 689.164824][T19994] vlan0: left promiscuous mode [ 689.279699][T19997] ´: entered promiscuous mode [ 689.308399][T20007] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3299'. [ 689.328149][T20008] netlink: 'syz.5.3300': attribute type 7 has an invalid length. [ 689.340736][T20008] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3300'. [ 689.420127][T20014] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3303'. [ 689.440790][T20014] ip6tnl1: entered allmulticast mode [ 689.451244][ T1109] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 689.518558][T20016] syzkaller0: entered promiscuous mode [ 689.542255][T20016] syzkaller0: entered allmulticast mode [ 689.684152][T20026] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 689.712199][T20026] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 690.350738][T20036] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 690.367407][T20036] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 690.381260][T20036] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 690.391430][T20040] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3309'. [ 690.689039][T20057] netlink: 14 bytes leftover after parsing attributes in process `syz.1.3313'. [ 690.902517][T20063] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3315'. [ 692.924585][ T4938] Bluetooth: hci1: command 0x0406 tx timeout [ 693.247801][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 693.407519][ C0] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 693.476767][ T1109] batadv2: left allmulticast mode [ 693.483606][ T1109] batadv2: left promiscuous mode [ 693.489541][ T1109] bridge0: port 1(batadv2) entered disabled state [ 693.523769][ T1109] pim6reg: left allmulticast mode [ 693.529928][ T1109] dvmrp0: left allmulticast mode [ 693.979160][ T1109] bond10 (unregistering): (slave gretap1): Releasing active interface [ 694.087399][ T1109] bond7 (unregistering): (slave geneve3): Releasing active interface [ 694.249297][ T1109] team0: Port device bridge0 removed [ 694.355736][ T1109] bond0 (unregistering): Released all slaves [ 694.383421][ T1109] bond1 (unregistering): Released all slaves [ 694.434608][ T1109] bond2 (unregistering): Released all slaves [ 694.471267][ T1109] bond3 (unregistering): Released all slaves [ 694.500775][ T1109] bond4 (unregistering): Released all slaves [ 694.528877][ T1109] bond5 (unregistering): Released all slaves [ 694.549312][ T1109] bond6 (unregistering): Released all slaves [ 694.595505][ T1109] bond7 (unregistering): Released all slaves [ 694.620456][ T1109] bond8 (unregistering): Released all slaves [ 694.639591][ T1109] bond9 (unregistering): Released all slaves [ 694.655464][ T1109] bond10 (unregistering): Released all slaves [ 694.883604][ T1109] : left promiscuous mode [ 695.130695][ T1109] tipc: Disabling bearer [ 695.140755][T20109] IPVS: length: 35 != 24 [ 695.166692][ T1109] tipc: Left network mode [ 695.351418][T20123] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3330'. [ 695.750176][T20144] netlink: 76 bytes leftover after parsing attributes in process `syz.5.3335'. [ 695.799002][T20144] syzkaller0: entered promiscuous mode [ 695.804846][T20144] syzkaller0: entered allmulticast mode [ 696.394959][T20163] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3341'. [ 696.579084][T20166] x_tables: duplicate underflow at hook 2 [ 696.684625][ T1109] batman_adv: batadv0: Interface deactivated: dummy0 [ 696.701689][ T1109] batman_adv: batadv0: Removing interface: dummy0 [ 696.764092][T20176] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3344'. [ 697.122088][ T1117] smc: removing ib device syz0 [ 697.296472][ T43] smbdirect: ib_dev[syú2] removed [ 697.514343][ T1117] smbdirect: ib_dev[syz0] removed [ 697.680923][T20205] Bluetooth: MGMT ver 1.23 [ 697.731631][T20205] netlink: 104 bytes leftover after parsing attributes in process `syz.6.3351'. [ 697.905211][T13519] IPVS: starting estimator thread 0... [ 697.911557][T20208] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 698.012673][T20213] IPVS: using max 26 ests per chain, 62400 per kthread [ 698.125536][T20222] netlink: 'syz.6.3358': attribute type 6 has an invalid length. [ 698.139075][T20222] IPv6: NLM_F_CREATE should be specified when creating new route [ 698.179111][T20225] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3359'. [ 698.289203][T20225] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3359'. [ 698.403415][T20234] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3362'. [ 698.650845][T20239] veth0_macvtap: left promiscuous mode [ 698.794855][T20253] netlink: 'syz.1.3367': attribute type 9 has an invalid length. [ 699.226913][T20270] netlink: 108 bytes leftover after parsing attributes in process `syz.4.3370'. [ 699.285956][T20270] netlink: 80 bytes leftover after parsing attributes in process `syz.4.3370'. [ 699.549817][T20284] xt_connbytes: Forcing CT accounting to be enabled [ 699.661435][T20288] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3374'. [ 701.043717][ T1109] IPVS: stop unused estimator thread 0... [ 701.084406][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 701.403043][T20342] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 701.586292][T20350] __nla_validate_parse: 5 callbacks suppressed [ 701.586309][T20350] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3385'. [ 701.816174][T20356] netlink: 'syz.5.3387': attribute type 10 has an invalid length. [ 701.837653][T20356] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3387'. [ 701.849145][T20357] netlink: 'syz.6.3386': attribute type 2 has an invalid length. [ 701.970615][ T5283] veth0_macvtap: entered promiscuous mode [ 702.189384][T20368] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3391'. [ 702.201741][T20369] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3390'. [ 702.239717][T20369] netlink: 348 bytes leftover after parsing attributes in process `syz.4.3390'. [ 702.257676][T20370] netlink: 'syz.1.3391': attribute type 1 has an invalid length. [ 702.280959][T20369] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3390'. [ 702.298855][T20370] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3391'. [ 702.334260][T20369] netlink: 348 bytes leftover after parsing attributes in process `syz.4.3390'. [ 702.429864][T20369] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3390'. [ 702.467993][T20376] netlink: 'syz.6.3392': attribute type 2 has an invalid length. [ 702.515158][T20371] netlink: 'syz.4.3390': attribute type 4 has an invalid length. [ 702.869626][T20392] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3394'. [ 702.938676][T20395] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 703.060854][T20387] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 703.152369][T20387] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 703.745728][T20429] netlink: 'syz.1.3401': attribute type 1 has an invalid length. [ 703.860669][T20429] nbd: error processing sock list [ 704.021907][T20428] A link change request failed with some changes committed already. Interface gre1 may have been left with an inconsistent configuration, please check. [ 704.633869][T20452] netlink: 'syz.6.3407': attribute type 12 has an invalid length. [ 704.679753][T20454] team0: Port device vxcan1 added [ 704.680065][T20452] netlink: 'syz.6.3407': attribute type 14 has an invalid length. [ 704.805497][T20455] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 704.850277][T20454] bond4: option updelay: invalid value (18446744073709518847) [ 704.900604][T20454] bond4: option updelay: allowed values 0 - 2147483647 [ 704.932547][T20454] bond4 (unregistering): Released all slaves [ 705.360629][T20472] netlink: 'syz.5.3412': attribute type 13 has an invalid length. [ 705.441511][T20477] IPVS: rr: FWM 3 0x00000003 - no destination available [ 705.570452][T20485] netlink: 'syz.3.3416': attribute type 11 has an invalid length. [ 705.712771][T20478] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 705.729137][T20478] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 705.744923][T20478] veth1_vlan: left promiscuous mode [ 705.752039][T20478] veth0_vlan: left promiscuous mode [ 705.758561][T20478] veth0_vlan: entered promiscuous mode [ 705.766154][T20478] veth1_vlan: entered promiscuous mode [ 705.776259][T20478] veth1_macvtap: left promiscuous mode [ 705.782768][T20478] veth0_macvtap: left promiscuous mode [ 705.789480][T20478] veth0_macvtap: entered promiscuous mode [ 705.795932][T20478] veth1_macvtap: entered promiscuous mode [ 705.805771][T20478] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 705.814277][T20478] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 705.822318][T20478] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 705.884597][T20478] 8021q: adding VLAN 0 to HW filter on device bond1 [ 705.974797][ T12] bond2: (slave veth0_to_bond): link status definitely up, 10000 Mbps full duplex [ 706.013406][ T12] bond2: (slave veth0_to_bond): making interface the new active one [ 706.042341][ T12] bond2: active interface up! [ 706.063606][ T78] bridge0: port 1(bridge_slave_0) entered blocking state [ 706.070829][ T78] bridge0: port 1(bridge_slave_0) entered forwarding state [ 706.095702][ T78] bridge0: port 2(bridge_slave_1) entered blocking state [ 706.102914][ T78] bridge0: port 2(bridge_slave_1) entered forwarding state [ 706.161387][ T1109] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 706.177523][ T1109] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 706.192773][ T1109] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 706.211315][ T1109] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 706.270799][ T1109] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 706.299369][ T1109] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 706.458868][T20497] syzkaller0: entered promiscuous mode [ 706.464558][T20497] syzkaller0: entered allmulticast mode [ 709.755500][T20513] __nla_validate_parse: 11 callbacks suppressed [ 709.755522][T20513] netlink: 1004 bytes leftover after parsing attributes in process `syz.3.3422'. [ 709.820668][T20528] ip6tnl1: entered allmulticast mode [ 709.952019][T20533] vlan5: entered allmulticast mode [ 709.979139][T20533] gretap0: entered allmulticast mode [ 709.984190][T20538] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3429'. [ 710.021007][T20540] syzkaller0: entered promiscuous mode [ 710.038540][T20540] syzkaller0: entered allmulticast mode [ 710.067286][T20540] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3427'. [ 710.175972][T20549] netlink: 280 bytes leftover after parsing attributes in process `syz.6.3430'. [ 710.338638][T20554] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3431'. [ 710.393668][T20554] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3431'. [ 710.446905][T20557] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3431'. [ 710.771983][T20567] pim6reg1: entered promiscuous mode [ 710.791659][T20567] pim6reg1: entered allmulticast mode [ 711.135619][T20589] netlink: 'syz.4.3441': attribute type 4 has an invalid length. [ 711.228559][ T78] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 711.232809][T20588] syzkaller0: entered promiscuous mode [ 711.242198][ T78] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 711.315583][T20559] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 711.331097][T20559] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 711.395944][T20593] syzkaller0: entered promiscuous mode [ 711.440804][T20593] syzkaller0: entered allmulticast mode [ 711.546803][T20607] syzkaller1: entered promiscuous mode [ 711.562403][T20607] syzkaller1: entered allmulticast mode [ 711.572764][T20559] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 711.591707][T20559] Bluetooth: hci6: Error when powering off device on rfkill (-4) [ 712.139640][T20559] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 712.163585][T20559] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 712.276463][T20559] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 712.298199][T20559] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 712.351324][T20634] bond1: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 712.364897][T20634] bond1 (unregistering): Released all slaves [ 712.563660][T20627] bridge0: port 1(bridge_slave_0) entered disabled state [ 712.595449][T20559] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 712.611272][T20559] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 712.762248][T20654] netlink: 'syz.3.3454': attribute type 4 has an invalid length. [ 712.932059][T20660] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3456'. [ 713.037824][T20666] netlink: 404 bytes leftover after parsing attributes in process `syz.3.3456'. [ 713.135522][T20671] x_tables: duplicate underflow at hook 2 [ 713.266102][T20677] netlink: 'syz.3.3460': attribute type 1 has an invalid length. [ 713.290345][T20677] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3460'. [ 714.120364][T20703] netlink: 'syz.4.3467': attribute type 5 has an invalid length. [ 714.681388][T20721] netlink: 'syz.3.3474': attribute type 2 has an invalid length. [ 715.017204][T20737] netlink: 'syz.6.3479': attribute type 29 has an invalid length. [ 715.029972][T20735] __nla_validate_parse: 6 callbacks suppressed [ 715.029991][T20735] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3478'. [ 715.031658][T20737] netlink: 68 bytes leftover after parsing attributes in process `syz.6.3479'. [ 715.084503][T20739] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3480'. [ 715.100401][T20735] netlink: 'syz.1.3478': attribute type 1 has an invalid length. [ 715.118473][T20735] netlink: 756 bytes leftover after parsing attributes in process `syz.1.3478'. [ 715.130088][ T1117] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 715.130569][T20739] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3480'. [ 715.147793][ T1117] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 715.169942][ T1117] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 715.232509][ T1117] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 715.801310][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 715.813432][T20779] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3490'. [ 716.047945][T20783] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3491'. [ 716.067281][T20783] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3491'. [ 716.091555][T20783] netlink: 'syz.6.3491': attribute type 1 has an invalid length. [ 716.407048][T20804] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3494'. [ 716.431401][T20803] vlan2: entered allmulticast mode [ 716.466418][T20803] bond0: entered allmulticast mode [ 716.478129][T20803] bond_slave_0: entered allmulticast mode [ 716.487695][T20803] bond_slave_1: entered allmulticast mode [ 716.747846][T20832] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 716.759807][T20825] netlink: 36 bytes leftover after parsing attributes in process `syz.6.3497'. [ 716.808352][T20835] nbd: must specify an index to disconnect [ 717.178526][T20825] bridge0: port 2(bridge_slave_1) entered disabled state [ 717.188831][T20825] bridge0: port 1(bridge_slave_0) entered disabled state [ 718.163358][ T1109] netdevsim netdevsim6 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 718.215947][ T1109] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 718.268896][ T1109] netdevsim netdevsim6 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 718.293384][ T1109] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 718.327898][ T1109] netdevsim netdevsim6 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 718.370407][ T1109] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 718.535838][T20871] Cannot find add_set index 0 as target [ 718.850960][T20876] 8021q: adding VLAN 0 to HW filter on device bond4 [ 719.349159][T20916] block nbd1: Unsupported socket: should be TCP or UNIX. [ 719.759643][T20931] pim6reg1: entered promiscuous mode [ 719.773889][T20931] pim6reg1: entered allmulticast mode [ 719.882302][T20933] bond1: option arp_interval: invalid value (18446744073709551615) [ 719.905005][T20933] bond1: option arp_interval: allowed values 0 - 2147483647 [ 719.925049][T20933] bond1 (unregistering): Released all slaves [ 720.251631][T20943] netlink: 'syz.4.3523': attribute type 1 has an invalid length. [ 720.274625][T20943] netlink: 'syz.4.3523': attribute type 1 has an invalid length. [ 720.386662][T20952] netlink: 'syz.1.3520': attribute type 1 has an invalid length. [ 720.459358][T20952] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 720.476828][T20951] ip6_vti0: entered allmulticast mode [ 720.942909][T20972] syzkaller0: entered promiscuous mode [ 720.958787][T20972] syzkaller0: entered allmulticast mode [ 721.255874][T20991] bond0: (slave bond_slave_1): Releasing backup interface [ 721.296387][T20991] bond_slave_1: left allmulticast mode [ 721.532346][T20999] __nla_validate_parse: 185 callbacks suppressed [ 721.532366][T20999] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3535'. [ 721.596201][T21009] IPVS: set_ctl: invalid protocol: 0 255.255.255.255:20001 [ 721.625901][T20999] netlink: 'syz.6.3535': attribute type 7 has an invalid length. [ 721.660832][T20999] netlink: 'syz.6.3535': attribute type 8 has an invalid length. [ 721.687857][T20999] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3535'. [ 722.167706][T21032] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3544'. [ 722.197489][ C0] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 722.240461][T21032] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 722.247629][T21033] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 722.354201][T21032] ipt_ECN: cannot use operation on non-tcp rule [ 722.354284][T21033] ipt_ECN: cannot use operation on non-tcp rule [ 722.385370][T21038] syzkaller1: entered promiscuous mode [ 722.413611][T21038] syzkaller1: entered allmulticast mode [ 722.456786][T21032] bridge0: port 2(bridge_slave_1) entered disabled state [ 722.610534][T21045] can: request_module (can-proto-0) failed. [ 722.723437][T21049] bond3: entered allmulticast mode [ 722.736065][T21052] macvlan2: entered promiscuous mode [ 722.741738][T21052] macvlan2: entered allmulticast mode [ 722.748258][T21052] bond3: (slave macvlan2): Opening slave failed [ 722.925810][T21061] mac80211_hwsim hwsim19 wlan0: entered allmulticast mode [ 722.944401][T21061] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 723.322137][T21084] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3557'. [ 723.347556][T21084] dummy0: Caught tx_queue_len zero misconfig [ 723.574845][T21095] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 723.612094][T21094] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3560'. [ 723.680386][T21095] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3562'. [ 723.684455][T21097] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3561'. [ 723.825931][T21103] syzkaller1: entered promiscuous mode [ 723.851938][T21108] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3563'. [ 723.853151][T21103] syzkaller1: entered allmulticast mode [ 724.820483][T21134] netlink: 'syz.1.3572': attribute type 1 has an invalid length. [ 724.885596][T21137] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3572'. [ 724.959211][T21140] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3572'. [ 726.193269][T21178] netlink: 'syz.1.3583': attribute type 1 has an invalid length. [ 726.553077][T21186] syzkaller1: entered promiscuous mode [ 726.568229][T21186] syzkaller1: entered allmulticast mode [ 726.582155][T21190] __nla_validate_parse: 2 callbacks suppressed [ 726.582171][T21190] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3586'. [ 726.718954][T21198] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3588'. [ 726.779728][T21197] tipc: Enabled bearer , priority 0 [ 726.790280][T21191] syzkaller0: entered promiscuous mode [ 726.800254][T21191] syzkaller0: entered allmulticast mode [ 726.833175][T21191] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 726.919940][T21191] tipc: Resetting bearer [ 726.950465][T21189] tipc: Resetting bearer [ 727.077985][T21189] tipc: Disabling bearer [ 727.353399][T21216] block nbd6: not configured, cannot reconfigure [ 727.496048][T21222] sctp: [Deprecated]: syz.3.3595 (pid 21222) Use of struct sctp_assoc_value in delayed_ack socket option. [ 727.496048][T21222] Use struct sctp_sack_info instead [ 727.608976][T21227] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3596'. [ 727.670103][T21232] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3596'. [ 727.799431][T21239] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3598'. [ 728.211684][T21257] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3602'. [ 728.222368][T21255] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3602'. [ 728.284816][T21257] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3602'. [ 728.294620][T21252] syzkaller1: entered promiscuous mode [ 728.304745][T21252] syzkaller1: entered allmulticast mode [ 728.317651][T21256] netlink: 'syz.1.3599': attribute type 1 has an invalid length. [ 728.340122][T21252] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3600'. [ 728.455231][T21271] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3605'. [ 730.481194][T21256] bridge0: port 1(syz_tun) entered disabled state [ 730.501326][T21256] syz_tun: left allmulticast mode [ 730.506484][T21256] syz_tun: left promiscuous mode [ 730.515943][T21256] bridge0: port 1(syz_tun) entered disabled state [ 730.576194][T21271] bridge7: the hash_elasticity option has been deprecated and is always 16 [ 730.610303][ T36] syzkaller1: tun_net_xmit 70 [ 731.690358][T21325] netlink: 'syz.1.3620': attribute type 1 has an invalid length. [ 731.755569][T21329] __nla_validate_parse: 1 callbacks suppressed [ 731.755588][T21329] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3620'. [ 732.063367][T21338] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3625'. [ 732.431241][T21347] netlink: 276 bytes leftover after parsing attributes in process `syz.5.3626'. [ 733.228516][T21365] netlink: 144 bytes leftover after parsing attributes in process `syz.3.3631'. [ 733.450325][T21371] netlink: 'syz.1.3632': attribute type 11 has an invalid length. [ 733.592208][T21376] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3634'. [ 733.986047][T21394] netlink: 252 bytes leftover after parsing attributes in process `syz.6.3640'. [ 734.086687][T21397] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3642'. [ 734.203960][T21403] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3642'. [ 734.414421][T21410] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 734.459953][T21411] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 734.548863][T21417] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3643'. [ 734.563695][T21417] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3643'. [ 734.934914][T21432] netlink: 'syz.6.3648': attribute type 10 has an invalid length. [ 735.190839][T21439] netlink: 'syz.6.3650': attribute type 32 has an invalid length. [ 735.301984][T21442] syzkaller1: entered promiscuous mode [ 735.308651][T21442] syzkaller1: entered allmulticast mode [ 735.785489][T21464] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 736.506262][T21469] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 736.976161][T21507] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 737.521393][T21535] netlink: 'syz.5.3678': attribute type 1 has an invalid length. [ 737.539496][T21529] syzkaller0: entered allmulticast mode [ 737.636765][T21535] bond12: (slave bridge3): making interface the new active one [ 737.646625][T21535] bond12: (slave bridge3): Enslaving as an active interface with an up link [ 737.786698][T21544] netlink: 'syz.5.3680': attribute type 11 has an invalid length. [ 737.807859][T21544] __nla_validate_parse: 12 callbacks suppressed [ 737.807879][T21544] netlink: 224 bytes leftover after parsing attributes in process `syz.5.3680'. [ 737.832035][T21541] netlink: 'syz.5.3680': attribute type 10 has an invalid length. [ 738.173035][T21557] syzkaller0: entered promiscuous mode [ 738.194332][T21557] syzkaller0: entered allmulticast mode [ 738.219238][T21561] netlink: 'syz.6.3685': attribute type 47 has an invalid length. [ 738.247542][T21561] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3685'. [ 738.276237][T21557] netlink: 220 bytes leftover after parsing attributes in process `syz.4.3684'. [ 738.770526][T21585] netlink: 'syz.3.3692': attribute type 1 has an invalid length. [ 738.815429][T21585] 8021q: adding VLAN 0 to HW filter on device bond1 [ 738.896050][T21585] bond1: (slave veth3): Enslaving as an active interface with a down link [ 738.950734][T21588] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3693'. [ 739.021971][T21589] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 739.503648][T21589] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 739.528382][T21589] bond1: (slave batadv1): making interface the new active one [ 739.550123][T21589] batadv1: entered promiscuous mode [ 739.569517][T21589] bond1: (slave batadv1): Enslaving as an active interface with an up link [ 739.812856][ T30] audit: type=1800 audit(1783233986.431:12): pid=21616 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.3699" name="blkio.bfq.time_recursive" dev="tmpfs" ino=1027 res=0 errno=0 [ 740.084357][T21636] sctp: [Deprecated]: syz.3.3705 (pid 21636) Use of struct sctp_assoc_value in delayed_ack socket option. [ 740.084357][T21636] Use struct sctp_sack_info instead [ 740.291193][T21645] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3708'. [ 740.335578][T21647] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3709'. [ 740.392091][T21649] netlink: zone id is out of range [ 740.411820][T21649] netlink: zone id is out of range [ 740.426962][T21649] netlink: zone id is out of range [ 740.442541][T21650] netlink: 'syz.6.3710': attribute type 5 has an invalid length. [ 740.456760][T21649] netlink: zone id is out of range [ 740.463539][T21649] netlink: zone id is out of range [ 740.470731][T21649] netlink: zone id is out of range [ 740.476121][T21649] netlink: zone id is out of range [ 740.481962][T21649] netlink: zone id is out of range [ 740.488302][T21649] netlink: zone id is out of range [ 740.495872][T21660] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 740.496640][T21649] netlink: zone id is out of range [ 740.821791][T21670] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3715'. [ 740.953689][T21675] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3717'. [ 740.984068][T21676] netlink: 'syz.4.3716': attribute type 1 has an invalid length. [ 741.016961][T21676] netlink: 244 bytes leftover after parsing attributes in process `syz.4.3716'. [ 741.041310][T21676] NCSI netlink: No device for ifindex 0 [ 741.086252][T21682] netlink: 120 bytes leftover after parsing attributes in process `syz.6.3719'. [ 741.431715][T21698] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 741.718923][T21700] nbd: socks must be embedded in a SOCK_ITEM attr [ 741.780009][T21703] No such timeout policy "syz0" [ 741.840599][T21700] block nbd1: shutting down sockets [ 742.265841][T21729] netlink: 'syz.5.3731': attribute type 13 has an invalid length. [ 742.284220][T21729] netlink: 'syz.5.3731': attribute type 17 has an invalid length. [ 742.324241][T21730] netlink: 'syz.6.3730': attribute type 12 has an invalid length. [ 742.434250][T21730] netlink: 'syz.6.3730': attribute type 12 has an invalid length. [ 742.867409][T21743] __nla_validate_parse: 5 callbacks suppressed [ 742.867426][T21743] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3735'. [ 742.965714][T21749] bridge_slave_0: left allmulticast mode [ 742.980462][T21749] bridge_slave_0: left promiscuous mode [ 743.002820][T21749] bridge0: port 1(bridge_slave_0) entered disabled state [ 743.044740][T21749] bridge_slave_1: left allmulticast mode [ 743.081304][T21749] bridge_slave_1: left promiscuous mode [ 743.099407][T21749] bridge0: port 2(bridge_slave_1) entered disabled state [ 743.109085][T21755] netlink: 64 bytes leftover after parsing attributes in process `syz.6.3738'. [ 743.160363][T21749] bond0: (slave bond_slave_0): Releasing backup interface [ 743.194165][T21749] bond0: (slave bond_slave_1): Releasing backup interface [ 743.270805][T21749] team0: Port device team_slave_0 removed [ 743.307011][T21749] team0: Port device team_slave_1 removed [ 743.317468][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 743.341802][T21749] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 743.372152][T21749] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 743.397021][T21749] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 743.418547][T21749] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 743.543152][T21751] team0: Port device xfrm0 added [ 743.551262][T21763] syzkaller1: entered promiscuous mode [ 743.569477][T21763] syzkaller1: entered allmulticast mode [ 743.586344][T21776] netlink: 'syz.3.3743': attribute type 1 has an invalid length. [ 743.605639][T21776] netlink: 232 bytes leftover after parsing attributes in process `syz.3.3743'. [ 743.619600][T21776] netlink: 'syz.3.3743': attribute type 1 has an invalid length. [ 743.831334][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807a478800: rx timeout, send abort [ 743.872677][T21790] IPVS: length: 75 != 24 [ 744.063120][T21798] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3747'. [ 744.262327][T21802] netlink: 80 bytes leftover after parsing attributes in process `syz.3.3749'. [ 744.331477][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807a47ac00: rx timeout, send abort [ 744.339894][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807a478800: abort rx timeout. Force session deactivation [ 744.377720][T21804] netlink: 140 bytes leftover after parsing attributes in process `syz.4.3750'. [ 744.403250][T21804] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3750'. [ 744.781718][T21814] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3753'. [ 744.839783][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807a47ac00: abort rx timeout. Force session deactivation [ 745.050366][T21823] xt_CT: You must specify a L4 protocol and not use inversions on it [ 745.415692][T21833] syzkaller0: entered promiscuous mode [ 745.442363][T21833] syzkaller0: entered allmulticast mode [ 745.655075][ T1117] net_ratelimit: 21 callbacks suppressed [ 745.655108][ T1117] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 745.672333][ T1117] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 745.724737][T21840] team0: Device ipvlan0 failed to register rx_handler [ 746.443718][T21864] syzkaller0: left promiscuous mode [ 746.685889][ C0] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 746.695647][ C0] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 747.150389][T21884] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3773'. [ 747.202639][T21884] openvswitch: netlink: IPv6 tunnel dst address is zero [ 747.368765][T21893] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3775'. [ 747.503613][T21896] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 747.706605][T21908] netdevsim netdevsim6 netdevsim0: entered allmulticast mode [ 747.720330][ C0] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 747.730148][ C0] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 747.741393][T21908] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 747.836510][T21908] netlink: 'syz.6.3779': attribute type 2 has an invalid length. [ 747.859274][T21908] netlink: 'syz.6.3779': attribute type 2 has an invalid length. [ 749.125532][ T78] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 749.132972][ T78] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 749.492397][T21964] __nla_validate_parse: 2 callbacks suppressed [ 749.492445][T21964] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3793'. [ 749.521153][T21970] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3795'. [ 749.623376][T21976] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3793'. [ 749.643357][T21976] netlink: 252 bytes leftover after parsing attributes in process `syz.5.3793'. [ 749.670132][T21960] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 750.019011][T21960] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 750.188706][T22001] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3798'. [ 750.295294][T22001] netlink: 'syz.3.3798': attribute type 1 has an invalid length. [ 750.324527][T22001] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3798'. [ 750.455857][T22010] netlink: 44 bytes leftover after parsing attributes in process `syz.6.3802'. [ 750.617977][T22013] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 751.247428][ C0] net_ratelimit: 2 callbacks suppressed [ 751.247463][ C0] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 751.260413][ C0] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 752.497541][ T57] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 752.504169][ T57] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 752.610164][T22025] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3806'. [ 753.098881][T21960] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 753.300675][T21960] netdevsim netdevsim1 €Â (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 753.310853][T22050] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3812'. [ 753.343267][T22050] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3812'. [ 753.368913][T22050] netlink: 'syz.6.3812': attribute type 18 has an invalid length. [ 753.394368][T22051] tipc: Enabling of bearer rejected, failed to enable media [ 753.462012][T22058] netlink: 'syz.5.3815': attribute type 1 has an invalid length. [ 753.557498][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 753.564022][ C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 753.597552][T22059] syzkaller0: entered promiscuous mode [ 753.605490][T22059] syzkaller0: entered allmulticast mode [ 753.876916][ T78] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 753.914794][ T78] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 754.012338][T22070] batadv_slave_1: entered promiscuous mode [ 754.202701][ T78] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 754.597405][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 754.603957][ C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 754.655960][T12822] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 754.870953][T22084] tipc: Enabled bearer , priority 0 [ 754.898821][ T57] batadv1: left promiscuous mode [ 754.982951][T22084] tipc: Resetting bearer [ 755.058291][T22113] netlink: 'syz.5.3828': attribute type 1 has an invalid length. [ 755.080517][T22115] netlink: 'syz.1.3827': attribute type 5 has an invalid length. [ 755.112816][T22097] syzkaller0: entered promiscuous mode [ 755.124954][T22097] syzkaller0: entered allmulticast mode [ 755.176383][T22082] tipc: Resetting bearer [ 755.250514][T22082] tipc: Disabling bearer [ 755.571855][T22137] openvswitch: netlink: Actions may not be safe on all matching packets [ 755.630951][T22142] openvswitch: netlink: Actions may not be safe on all matching packets [ 756.917345][ C1] net_ratelimit: 2 callbacks suppressed [ 756.917363][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 756.929495][ C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 757.365852][T22183] netlink: 'syz.1.3846': attribute type 1 has an invalid length. [ 757.397773][T22183] __nla_validate_parse: 2 callbacks suppressed [ 757.397806][T22183] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3846'. [ 757.463879][T22188] netlink: 72 bytes leftover after parsing attributes in process `syz.3.3848'. [ 757.508269][T22195] netlink: 'syz.6.3847': attribute type 1 has an invalid length. [ 757.523388][T22195] netlink: 'syz.6.3847': attribute type 2 has an invalid length. [ 757.957396][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 757.963908][ C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 758.076552][T22219] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3855'. [ 758.174570][T22219] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3855'. [ 758.315605][T22232] netlink: 2 bytes leftover after parsing attributes in process `syz.3.3858'. [ 758.480928][T22235] Bluetooth: hci1: too big key_count value 29096 [ 758.704903][T22242] openvswitch: netlink: Tunnel attr 0 has unexpected len 232 expected 8 [ 758.789953][T22248] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3864'. [ 758.845061][T22244] syzkaller0: entered promiscuous mode [ 758.890855][T22244] syzkaller0: entered allmulticast mode [ 758.938927][T22248] xfrm0: entered allmulticast mode [ 759.029976][T22248] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 759.104816][T22260] netlink: 52 bytes leftover after parsing attributes in process `syz.6.3863'. [ 759.253550][ T1184] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 759.260931][ T1184] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 760.069968][T22276] vlan2: entered allmulticast mode [ 760.087329][T22276] bond0: entered allmulticast mode [ 760.131862][T22286] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3870'. [ 760.143547][T22276] bond7: entered allmulticast mode [ 760.194930][T22276] gretap2: entered allmulticast mode [ 760.225910][T22292] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3870'. [ 760.277424][ C0] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 760.284804][ C0] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 760.311689][T22286] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3870'. [ 762.314107][T22357] 8021q: adding VLAN 0 to HW filter on device bond6 [ 762.339121][T22357] bond5: (slave bond6): Enslaving as an active interface with an up link [ 762.576852][T22369] __nla_validate_parse: 6 callbacks suppressed [ 762.576871][T22369] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3887'. [ 762.637799][T22374] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3887'. [ 762.702462][ T43] net_ratelimit: 2 callbacks suppressed [ 762.702494][ T43] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 762.704649][T22376] sctp: [Deprecated]: syz.1.3888 (pid 22376) Use of int in maxseg socket option. [ 762.704649][T22376] Use struct sctp_assoc_value instead [ 762.710814][ T43] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 762.902015][T22384] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3893'. [ 763.180227][T22396] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3890'. [ 763.259600][T22396] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3890'. [ 763.356623][T22402] syzkaller0: entered promiscuous mode [ 763.405969][T22402] syzkaller0: entered allmulticast mode [ 763.582474][T22412] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3895'. [ 763.727379][ C0] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 763.734673][ C0] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 763.855010][T22422] netlink: 244 bytes leftover after parsing attributes in process `syz.4.3897'. [ 764.767467][ C0] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 764.774869][ C0] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 766.124691][ T57] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 766.132121][ T57] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 766.359046][T22491] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3916'. [ 766.997468][T22509] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3922'. [ 767.100405][T22513] netlink: 'syz.1.3923': attribute type 2 has an invalid length. [ 767.167459][ C0] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 767.174772][ C0] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 767.186339][T22513] netlink: 'syz.1.3923': attribute type 1 has an invalid length. [ 767.229177][T22513] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3923'. [ 767.246559][T22518] syzkaller0: entered promiscuous mode [ 767.263761][T22518] syzkaller0: entered allmulticast mode [ 767.682116][T22529] netlink: 'syz.5.3926': attribute type 3 has an invalid length. [ 768.032461][T22544] tipc: Started in network mode [ 768.054049][T22544] tipc: Node identity 0aa978fbe247, cluster identity 8 [ 768.075698][T22544] tipc: Enabled bearer , priority 0 [ 768.102939][T22544] tipc: Resetting bearer [ 768.197525][ C0] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 768.204957][ C0] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 768.609924][T22570] netlink: 'syz.5.3937': attribute type 2 has an invalid length. [ 768.629967][T22570] netlink: 'syz.5.3937': attribute type 2 has an invalid length. [ 769.042805][T22591] netlink: 'syz.6.3943': attribute type 2 has an invalid length. [ 769.139913][T22591] ´: entered promiscuous mode [ 769.171994][T13519] tipc: Node number set to 3907942651 [ 769.225231][T22596] pimreg: tun_chr_ioctl cmd 1074025677 [ 769.242054][T22596] pimreg: linktype set to 6 [ 769.383127][T22601] netlink: 'syz.5.3948': attribute type 13 has an invalid length. [ 769.392352][T22601] netlink: 'syz.5.3948': attribute type 17 has an invalid length. [ 769.426191][T22601] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 769.500022][T22421] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 769.506724][T22421] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 769.723182][T22613] __nla_validate_parse: 1 callbacks suppressed [ 769.723218][T22613] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3949'. [ 769.777676][T22613] bond0: ARP target 0.0.0.2 is already present [ 769.794523][T22613] bond0: option arp_ip_target: invalid value (33554432) [ 770.171155][T22640] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3959'. [ 770.419457][T22651] x_tables: ip_tables: udplite match: only valid for protocol 136 [ 770.530530][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 770.537044][ C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 771.564521][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 771.571047][ C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 772.998272][ T1109] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 774.050596][ C0] net_ratelimit: 1 callbacks suppressed [ 774.050649][ C0] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 774.063564][ C0] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 774.324045][T22681] netlink: 'syz.3.3972': attribute type 3 has an invalid length. [ 774.470942][T22687] netlink: 'syz.1.3974': attribute type 3 has an invalid length. [ 774.513500][T22687] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3974'. [ 774.533028][T22697] netlink: 'syz.3.3977': attribute type 7 has an invalid length. [ 774.576178][T22693] syzkaller0: entered promiscuous mode [ 774.582880][T18518] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 774.609239][T22693] syzkaller0: entered allmulticast mode [ 774.771795][T22706] netlink: 'syz.3.3980': attribute type 4 has an invalid length. [ 774.781868][ T57] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 774.799053][T18518] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 774.835461][T22712] netlink: 'syz.3.3980': attribute type 4 has an invalid length. [ 775.062847][T22720] netlink: 'syz.4.3982': attribute type 13 has an invalid length. [ 775.077636][ C0] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 775.085076][ C0] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 775.097495][T22720] netlink: 'syz.4.3982': attribute type 17 has an invalid length. [ 775.103926][T22722] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3984'. [ 775.206840][T22720] ip6_vti0: left allmulticast mode [ 775.221077][T22731] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3986'. [ 775.248053][T22730] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3986'. [ 775.360853][T22720] xfrm0: left allmulticast mode [ 775.392867][T22720] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 775.589694][T22721] syzkaller0: Number of in use tx queues changed invalidating tc mappings. Priority traffic classification disabled! [ 775.705221][T22746] netlink: 'syz.6.3988': attribute type 32 has an invalid length. [ 776.046232][T22762] netlink: 87 bytes leftover after parsing attributes in process `syz.4.3992'. [ 776.190973][ T1109] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 776.244951][ T1109] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 776.287632][T13519] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 776.379118][T22775] netlink: 'syz.5.3995': attribute type 15 has an invalid length. [ 776.421039][T12826] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 776.428329][T12826] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 776.488410][T22777] tipc: Enabled bearer , priority 0 [ 776.526008][T22777] syzkaller0: entered promiscuous mode [ 776.544657][T22777] syzkaller0: entered allmulticast mode [ 776.581400][T22780] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 776.814630][T22777] tipc: Resetting bearer [ 776.847957][T22776] tipc: Resetting bearer [ 776.932016][T22776] tipc: Disabling bearer [ 777.113537][T22805] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4004'. [ 777.285179][T22814] netlink: 'syz.6.4007': attribute type 28 has an invalid length. [ 777.349344][T22819] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4009'. [ 777.388368][T22819] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4009'. [ 777.414588][T22819] tipc: Enabling of bearer rejected, failed to enable media [ 777.477448][ C0] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 777.484740][ C0] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 777.677052][T22834] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4013'. [ 778.039757][T22848] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 778.069712][T22853] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4017'. [ 778.146566][T22855] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4020'. [ 778.195254][T22857] bridge0: port 1(ipvlan0) entered blocking state [ 778.229693][T22857] bridge0: port 1(ipvlan0) entered disabled state [ 778.260505][T22857] ipvlan0: entered allmulticast mode [ 778.278156][T22857] bridge0: entered allmulticast mode [ 778.313120][T22857] ipvlan0: left allmulticast mode [ 778.328807][T22857] bridge0: left allmulticast mode [ 778.477854][T22859] bridge0: port 1(ipvlan0) entered blocking state [ 778.498480][T22859] bridge0: port 1(ipvlan0) entered disabled state [ 778.517506][T22859] ipvlan0: entered allmulticast mode [ 778.523800][T22859] bridge0: entered allmulticast mode [ 778.530406][ C0] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 778.553713][T22859] ipvlan0: left allmulticast mode [ 778.560366][T22859] bridge0: left allmulticast mode [ 778.600424][T22862] sch_tbf: burst 4 is lower than device lo mtu (81) ! [ 778.614132][T22858] syzkaller1: entered promiscuous mode [ 778.627461][T22858] syzkaller1: entered allmulticast mode [ 779.072247][T22875] bond14: option updelay: invalid value (18446744073709518847) [ 779.091155][T22875] bond14: option updelay: allowed values 0 - 2147483647 [ 779.137065][T22875] bond14 (unregistering): Released all slaves [ 779.526125][T22891] syzkaller1: entered promiscuous mode [ 779.543178][T22891] syzkaller1: entered allmulticast mode [ 779.789917][T22901] lo speed is unknown, defaulting to 1000 [ 779.805652][T12821] net_ratelimit: 1 callbacks suppressed [ 779.805672][T12821] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 779.817851][T12821] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 779.831633][T22901] lo speed is unknown, defaulting to 1000 [ 779.839792][T22901] lo speed is unknown, defaulting to 1000 [ 779.846637][T22901] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 779.928928][T22901] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 780.017022][T22901] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 780.257956][T22901] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 780.311157][T22924] __nla_validate_parse: 4 callbacks suppressed [ 780.311176][T22924] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4036'. [ 780.396538][T22927] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4036'. [ 780.497459][T22901] lo speed is unknown, defaulting to 1000 [ 780.524801][T22931] pimreg: entered allmulticast mode [ 780.536586][T22931] pimreg: left allmulticast mode [ 780.576309][T22901] lo speed is unknown, defaulting to 1000 [ 780.592129][T22923] lo speed is unknown, defaulting to 1000 [ 780.598225][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 780.649719][T22901] lo speed is unknown, defaulting to 1000 [ 780.715167][T22901] lo speed is unknown, defaulting to 1000 [ 780.748080][T22934] syzkaller0: entered promiscuous mode [ 780.755091][T22934] syzkaller0: entered allmulticast mode [ 780.763776][T22901] lo speed is unknown, defaulting to 1000 [ 780.837331][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 780.843883][ C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 780.917997][T22943] netlink: 128 bytes leftover after parsing attributes in process `syz.5.4040'. [ 780.933216][T22901] lo speed is unknown, defaulting to 1000 [ 781.188596][T22951] syzkaller0: entered promiscuous mode [ 781.202649][T22951] syzkaller0: entered allmulticast mode [ 781.360826][T22955] syzkaller0: entered promiscuous mode [ 781.375694][T22955] syzkaller0: entered allmulticast mode [ 781.526268][T22969] openvswitch: netlink: Key 22 has unexpected len 2 expected 4 [ 781.877344][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 781.883864][ C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 782.734617][T23007] netlink: 324 bytes leftover after parsing attributes in process `syz.5.4054'. [ 782.747745][T23007] netlink: 2 bytes leftover after parsing attributes in process `syz.5.4054'. [ 782.764751][T22998] tipc: Started in network mode [ 782.773563][T22998] tipc: Node identity ae645b212668, cluster identity 4711 [ 782.782108][T22998] tipc: Enabled bearer , priority 0 [ 782.791760][T23008] syzkaller0: entered promiscuous mode [ 782.799315][T22997] tipc: Enabling of bearer rejected, already enabled [ 782.818177][T22996] tipc: Disabling bearer [ 782.997515][ C0] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 783.027863][ T57] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 783.091981][T23021] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4059'. [ 783.217621][ T1109] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 783.224143][ T1109] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 783.286639][T23029] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4061'. [ 783.447027][T23035] netlink: 'syz.6.4063': attribute type 1 has an invalid length. [ 783.501552][T23035] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4063'. [ 783.559995][T23035] netlink: 52 bytes leftover after parsing attributes in process `syz.6.4063'. [ 783.813967][T23044] xt_hashlimit: size too large, truncated to 1048576 [ 784.062729][T23062] netlink: 'syz.1.4069': attribute type 9 has an invalid length. [ 784.376242][T23074] syzkaller0: entered promiscuous mode [ 784.382702][T23074] syzkaller0: entered allmulticast mode [ 784.429508][T23074] simple: basic_1 [ 784.435406][T23074] simple: basic_2 [ 784.439568][T23074] simple: basic_3 [ 784.445306][T23074] simple: basic_4 [ 784.449440][T23074] simple: basic_5 [ 784.453501][T23074] simple: basic_6 [ 784.457570][T23074] simple: basic_7 [ 784.461659][T23074] simple: basic_8 [ 784.465730][T23074] simple: basic_9 [ 784.469885][T23074] simple: basic_10 [ 784.474051][T23074] simple: basic_11 [ 784.478247][T23074] simple: basic_12 [ 784.482444][T23074] simple: basic_13 [ 784.486629][T23074] simple: basic_14 [ 784.490364][T23074] simple: basic_15 [ 784.494957][T23074] simple: basic_16 [ 784.499184][T23074] simple: basic_17 [ 784.940674][T23081] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4075'. [ 784.959519][T22421] net_ratelimit: 9 callbacks suppressed [ 784.959537][T22421] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 785.154034][T23105] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0000 with DS=0x6 [ 785.223441][T23092] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 785.252542][T23110] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 785.308241][T12826] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 785.317383][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 785.323862][ C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 785.486924][T23115] hsr0: entered allmulticast mode [ 785.496416][T23121] netlink: 'syz.4.4085': attribute type 1 has an invalid length. [ 785.508667][T23119] __nla_validate_parse: 3 callbacks suppressed [ 785.508687][T23119] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4084'. [ 785.514535][T23115] hsr_slave_0: entered allmulticast mode [ 785.531617][T23115] hsr_slave_1: entered allmulticast mode [ 785.557442][ T5746] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 785.588172][T23121] bond5: entered promiscuous mode [ 785.593847][T23121] 8021q: adding VLAN 0 to HW filter on device bond5 [ 785.603180][T23119] hsr_slave_0: left promiscuous mode [ 785.613119][T23119] hsr_slave_1: left promiscuous mode [ 785.631990][T23119] hsr0 (unregistering): left allmulticast mode [ 785.700695][ T5739] IPVS: starting estimator thread 0... [ 785.732134][T23120] bridge3: entered promiscuous mode [ 785.743879][T23120] bridge3: entered allmulticast mode [ 785.755162][T23139] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4085'. [ 785.766752][T23120] team0: Device bridge3 is of different type [ 785.815776][T23124] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4085'. [ 785.819487][T23137] IPVS: using max 33 ests per chain, 79200 per kthread [ 785.839111][T23129] 8021q: adding VLAN 0 to HW filter on device bond5 [ 785.851731][T23129] bond5: (slave gre2): The slave device specified does not support setting the MAC address [ 785.852402][T23143] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 785.862961][T23129] bond5: (slave gre2): Setting fail_over_mac to active for active-backup mode [ 785.886422][T23129] bond5: (slave gre2): making interface the new active one [ 785.895871][T23129] gre2: entered promiscuous mode [ 785.903270][T23129] bond5: (slave gre2): Enslaving as an active interface with an up link [ 785.924810][T23131] bridge3: entered promiscuous mode [ 785.931309][T23131] bridge3: entered allmulticast mode [ 785.939337][T23131] team0: Device bridge3 is of different type [ 785.974564][T23143] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4087'. [ 785.994559][T23143] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4087'. [ 786.121060][T22421] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 786.168462][T23148] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4088'. [ 786.185836][T23146] netlink: 'syz.6.4089': attribute type 1 has an invalid length. [ 786.210172][T23146] netlink: 244 bytes leftover after parsing attributes in process `syz.6.4089'. [ 786.252045][T23155] netlink: 'syz.1.4092': attribute type 1 has an invalid length. [ 786.270377][T23148] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 786.343707][T23155] bond6: entered promiscuous mode [ 786.353586][T23155] 8021q: adding VLAN 0 to HW filter on device bond6 [ 786.370026][T23161] netlink: 'syz.5.4093': attribute type 3 has an invalid length. [ 786.379094][T23161] netlink: 224 bytes leftover after parsing attributes in process `syz.5.4093'. [ 786.454715][T23161] bond14: option miimon: invalid value (18446744073709551607) [ 786.486788][T23161] bond14: option miimon: allowed values 0 - 2147483647 [ 786.526656][T23161] bond14 (unregistering): Released all slaves [ 786.632588][T23156] syzkaller1: entered promiscuous mode [ 786.647279][T23156] syzkaller1: entered allmulticast mode [ 787.409962][T23205] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4107'. [ 787.659733][T23217] netlink: 256 bytes leftover after parsing attributes in process `syz.1.4110'. [ 787.966272][T23231] netlink: 'syz.1.4114': attribute type 1 has an invalid length. [ 788.011167][T23231] bond7: entered promiscuous mode [ 788.016697][T23231] 8021q: adding VLAN 0 to HW filter on device bond7 [ 788.059665][T23231] macvtap1: entered allmulticast mode [ 788.092459][T23234] netlink: 'syz.3.4113': attribute type 13 has an invalid length. [ 788.100688][T23234] netlink: 'syz.3.4113': attribute type 17 has an invalid length. [ 788.355827][T23239] Bluetooth: MGMT ver 1.23 [ 789.575298][T23254] netlink: 'syz.6.4122': attribute type 4 has an invalid length. [ 789.625831][T23254] netlink: 'syz.6.4122': attribute type 4 has an invalid length. [ 789.666487][ T5739] lo speed is unknown, defaulting to 1000 [ 789.696775][ T5739] syz2: Port: 1 Link ACTIVE [ 790.037563][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 790.404657][T23326] syzkaller1: entered promiscuous mode [ 790.430820][T23326] syzkaller1: entered allmulticast mode [ 790.517819][T23329] net_ratelimit: 24 callbacks suppressed [ 790.517838][T23329] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 790.534920][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 790.598525][ T57] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 790.762121][T18518] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 790.942261][ T1109] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 790.997341][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 791.003880][ C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 791.149360][T23353] bridge2: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 791.483169][T23374] __nla_validate_parse: 10 callbacks suppressed [ 791.483187][T23374] netlink: 140 bytes leftover after parsing attributes in process `syz.3.4153'. [ 791.539397][T23374] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4153'. [ 791.559960][T23382] xt_HMARK: spi-set and port-set can't be combined [ 791.614022][T23381] IPVS: set_ctl: invalid protocol: 2 0.0.0.0:20004 [ 791.646684][T23381] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4155'. [ 791.769083][ T57] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 791.785140][T23390] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4158'. [ 791.804045][ T1235] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 791.891857][T13519] lo speed is unknown, defaulting to 1000 [ 791.915928][T13519] syz2: Port: 1 Link DOWN [ 791.939850][T23386] syzkaller0: entered promiscuous mode [ 791.972299][ T1109] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 791.979724][T23386] syzkaller0: entered allmulticast mode [ 792.085230][T23400] syzkaller1: entered promiscuous mode [ 792.111174][T23400] syzkaller1: entered allmulticast mode [ 792.204058][T23411] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4162'. [ 792.309736][T23415] IPVS: set_ctl: invalid protocol: 255 172.30.0.7:20002 [ 792.426063][T23420] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 792.841611][T23435] syzkaller0: entered promiscuous mode [ 792.849644][T23435] syzkaller0: entered allmulticast mode [ 793.145713][ T5739] IPVS: starting estimator thread 0... [ 793.261203][T23464] IPVS: using max 35 ests per chain, 84000 per kthread [ 795.962008][T18518] net_ratelimit: 22 callbacks suppressed [ 795.962028][T18518] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 796.019062][T23443] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4169'. [ 796.029856][T23443] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4169'. [ 796.040922][T23443] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4169'. [ 796.052480][T23443] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4169'. [ 796.065608][T23443] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4169'. [ 796.113074][T23443] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 796.136413][T23454] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 796.258949][T22421] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 796.620436][T12826] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 796.720255][T23492] __nla_validate_parse: 43 callbacks suppressed [ 796.720287][T23492] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4179'. [ 796.738983][ T57] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 796.745482][ T57] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 797.000358][T13519] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 797.031573][T23504] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4183'. [ 797.079956][ T1117] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 797.089109][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 797.171569][T23512] xt_TPROXY: Can be used only with -p tcp or -p udp [ 797.440322][ T57] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 797.460699][T23519] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4187'. [ 797.712693][T23527] pimreg: entered allmulticast mode [ 797.775488][T23528] pimreg: left allmulticast mode [ 797.948900][T23530] lo speed is unknown, defaulting to 1000 [ 797.972067][T23534] netlink: 'syz.5.4192': attribute type 32 has an invalid length. [ 797.982643][T23534] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4192'. [ 798.128921][T23534] bond14: option coupled_control: invalid value (2) [ 798.164545][T23534] bond14 (unregistering): Released all slaves [ 798.473835][T23550] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4196'. [ 798.594071][T23553] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4200'. [ 798.603545][T23554] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4200'. [ 798.635440][T23553] bond7: entered promiscuous mode [ 798.650684][T23553] 8021q: adding VLAN 0 to HW filter on device bond7 [ 798.866514][T23594] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4203'. [ 798.887309][T23594] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4203'. [ 798.927840][T23601] netlink: 'syz.4.4203': attribute type 4 has an invalid length. [ 798.977646][T23603] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4204'. [ 798.990060][T23603] netlink: 'syz.3.4204': attribute type 1 has an invalid length. [ 799.016916][T23594] erspan0: entered promiscuous mode [ 799.063169][T23594] gretap0: entered promiscuous mode [ 799.149764][T18518] [ 799.152132][T18518] ====================================================== [ 799.159148][T18518] WARNING: possible circular locking dependency detected [ 799.166173][T18518] syzkaller #0 Not tainted [ 799.170582][T18518] ------------------------------------------------------ [ 799.177591][T18518] kworker/1:10/18518 is trying to acquire lock: [ 799.183822][T18518] ffff888031a7ad58 (&qdisc_xmit_lock_key#4){+.-.}-{3:3}, at: sch_direct_xmit+0x15f/0x4c0 [ 799.193744][T18518] [ 799.193744][T18518] but task is already holding lock: [ 799.201111][T18518] ffff888074ac5070 (&hsr->seqnr_lock){+.-.}-{3:3}, at: hsr_dev_xmit+0x237/0x360 [ 799.210326][T18518] [ 799.210326][T18518] which lock already depends on the new lock. [ 799.210326][T18518] [ 799.220715][T18518] [ 799.220715][T18518] the existing dependency chain (in reverse order) is: [ 799.229721][T18518] [ 799.229721][T18518] -> #1 (&hsr->seqnr_lock){+.-.}-{3:3}: [ 799.237455][T18518] _raw_spin_lock_bh+0x36/0x50 [ 799.242824][T18518] hsr_dev_xmit+0x237/0x360 [ 799.247845][T18518] dev_hard_start_xmit+0x2cd/0x830 [ 799.253545][T18518] sch_direct_xmit+0x257/0x4c0 [ 799.258833][T18518] __qdisc_run+0xb11/0x1620 [ 799.263865][T18518] __dev_queue_xmit+0x1c00/0x37f0 [ 799.269403][T18518] NF_HOOK+0x33a/0x3c0 [ 799.274081][T18518] arp_xmit+0x16c/0x270 [ 799.278748][T18518] arp_solicit+0xbdc/0xe40 [ 799.283674][T18518] __neigh_event_send+0xf0c/0x1510 [ 799.289373][T18518] neigh_resolve_output+0x1a1/0x720 [ 799.295114][T18518] ip_finish_output2+0xc4b/0x10b0 [ 799.300766][T18518] ip_output+0x29f/0x450 [ 799.305533][T18518] iptunnel_xmit+0x626/0xd10 [ 799.310726][T18518] ip_tunnel_xmit+0x195b/0x2040 [ 799.316126][T18518] __gre_xmit+0x19e/0x240 [ 799.321006][T18518] erspan_xmit+0xad5/0x1590 [ 799.326029][T18518] dev_hard_start_xmit+0x2cd/0x830 [ 799.331664][T18518] sch_direct_xmit+0x257/0x4c0 [ 799.337349][T18518] __dev_queue_xmit+0x1754/0x37f0 [ 799.342900][T18518] alb_send_lp_vid+0x348/0x550 [ 799.348314][T18518] alb_send_learning_packets+0x12c/0x300 [ 799.354470][T18518] bond_alb_monitor+0x3d0/0x17c0 [ 799.359932][T18518] process_scheduled_works+0xa8e/0x14e0 [ 799.366001][T18518] worker_thread+0xa47/0xfb0 [ 799.371106][T18518] kthread+0x388/0x470 [ 799.375694][T18518] ret_from_fork+0x514/0xb70 [ 799.380803][T18518] ret_from_fork_asm+0x1a/0x30 [ 799.386095][T18518] [ 799.386095][T18518] -> #0 (&qdisc_xmit_lock_key#4){+.-.}-{3:3}: [ 799.394356][T18518] __lock_acquire+0x1520/0x2cf0 [ 799.399729][T18518] lock_acquire+0x106/0x350 [ 799.404748][T18518] _raw_spin_lock+0x2e/0x40 [ 799.409772][T18518] sch_direct_xmit+0x15f/0x4c0 [ 799.415056][T18518] __dev_queue_xmit+0x1754/0x37f0 [ 799.420591][T18518] hsr_forward_skb+0x152a/0x28c0 [ 799.426093][T18518] hsr_dev_xmit+0x242/0x360 [ 799.431127][T18518] dev_hard_start_xmit+0x2cd/0x830 [ 799.436763][T18518] __dev_queue_xmit+0x1435/0x37f0 [ 799.442306][T18518] ip6_output+0x337/0x540 [ 799.447229][T18518] NF_HOOK+0x177/0x4f0 [ 799.451857][T18518] mld_sendpack+0x890/0xe10 [ 799.456964][T18518] mld_ifc_work+0x839/0xe70 [ 799.461986][T18518] process_scheduled_works+0xa8e/0x14e0 [ 799.468047][T18518] worker_thread+0xa47/0xfb0 [ 799.473153][T18518] kthread+0x388/0x470 [ 799.477777][T18518] ret_from_fork+0x514/0xb70 [ 799.482884][T18518] ret_from_fork_asm+0x1a/0x30 [ 799.488173][T18518] [ 799.488173][T18518] other info that might help us debug this: [ 799.488173][T18518] [ 799.498399][T18518] Possible unsafe locking scenario: [ 799.498399][T18518] [ 799.505838][T18518] CPU0 CPU1 [ 799.511187][T18518] ---- ---- [ 799.516541][T18518] lock(&hsr->seqnr_lock); [ 799.521041][T18518] lock(&qdisc_xmit_lock_key#4); [ 799.528580][T18518] lock(&hsr->seqnr_lock); [ 799.535595][T18518] lock(&qdisc_xmit_lock_key#4); [ 799.540617][T18518] [ 799.540617][T18518] *** DEADLOCK *** [ 799.540617][T18518] [ 799.548746][T18518] 11 locks held by kworker/1:10/18518: [ 799.554190][T18518] #0: ffff88803281c140 ((wq_completion)mld){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 799.564894][T18518] #1: ffffc9000633fc40 ((work_completion)(&(&idev->mc_ifc_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 799.578025][T18518] #2: ffff88807b75c530 (&idev->mc_lock){+.+.}-{4:4}, at: mld_ifc_work+0x2d/0xe70 [ 799.587244][T18518] #3: ffffffff8eb59c20 (rcu_read_lock){....}-{1:3}, at: mld_sendpack+0x206/0xe10 [ 799.596479][T18518] #4: ffffffff8eb59c20 (rcu_read_lock){....}-{1:3}, at: ip6_output+0x11e/0x540 [ 799.605521][T18518] #5: ffffffff8eb59c80 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x29b/0x37f0 [ 799.615432][T18518] #6: ffffffff8eb59c20 (rcu_read_lock){....}-{1:3}, at: hsr_dev_xmit+0x2d/0x360 [ 799.624570][T18518] #7: ffff888074ac5070 (&hsr->seqnr_lock){+.-.}-{3:3}, at: hsr_dev_xmit+0x237/0x360 [ 799.634045][T18518] #8: ffffffff8eb59c20 (rcu_read_lock){....}-{1:3}, at: hsr_forward_skb+0xb3/0x28c0 [ 799.643529][T18518] #9: ffffffff8eb59c80 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x29b/0x37f0 [ 799.653442][T18518] #10: ffff8880a1066228 (dev->qdisc_tx_busylock ?: &qdisc_tx_busylock#5){+...}-{3:3}, at: __dev_queue_xmit+0x112b/0x37f0 [ 799.666141][T18518] [ 799.666141][T18518] stack backtrace: [ 799.672023][T18518] CPU: 1 UID: 0 PID: 18518 Comm: kworker/1:10 Not tainted syzkaller #0 PREEMPT(full) [ 799.672043][T18518] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 799.672054][T18518] Workqueue: mld mld_ifc_work [ 799.672075][T18518] Call Trace: [ 799.672082][T18518] [ 799.672088][T18518] dump_stack_lvl+0xe8/0x150 [ 799.672113][T18518] print_circular_bug+0x2e1/0x300 [ 799.672131][T18518] check_noncircular+0x12e/0x150 [ 799.672156][T18518] __lock_acquire+0x1520/0x2cf0 [ 799.672185][T18518] ? sch_direct_xmit+0x15f/0x4c0 [ 799.672206][T18518] lock_acquire+0x106/0x350 [ 799.672223][T18518] ? sch_direct_xmit+0x15f/0x4c0 [ 799.672243][T18518] ? NF_HOOK+0x177/0x4f0 [ 799.672257][T18518] ? mld_sendpack+0x890/0xe10 [ 799.672274][T18518] ? mld_ifc_work+0x839/0xe70 [ 799.672290][T18518] _raw_spin_lock+0x2e/0x40 [ 799.672308][T18518] ? sch_direct_xmit+0x15f/0x4c0 [ 799.672325][T18518] sch_direct_xmit+0x15f/0x4c0 [ 799.672346][T18518] ? __pfx_sch_direct_xmit+0x10/0x10 [ 799.672370][T18518] __dev_queue_xmit+0x1754/0x37f0 [ 799.672389][T18518] ? __dev_queue_xmit+0x29b/0x37f0 [ 799.672403][T18518] ? local_lock_release+0x9c/0x160 [ 799.672521][T18518] ? kmem_cache_alloc_node_noprof+0x1f5/0x610 [ 799.672541][T18518] ? __alloc_skb+0x276/0x7a0 [ 799.672559][T18518] ? __alloc_skb+0x276/0x7a0 [ 799.672577][T18518] ? __copy_skb_header+0xa3/0x4a0 [ 799.672600][T18518] ? __pfx___dev_queue_xmit+0x10/0x10 [ 799.672615][T18518] ? __asan_memcpy+0x40/0x70 [ 799.672633][T18518] ? __pskb_copy_fclone+0xb7e/0x1200 [ 799.672662][T18518] ? hsr_addr_subst_dest+0x30a/0xaa0 [ 799.672680][T18518] hsr_forward_skb+0x152a/0x28c0 [ 799.672700][T18518] ? ret_from_fork_asm+0x1a/0x30 [ 799.672716][T18518] ? hsr_forward_skb+0xb3/0x28c0 [ 799.672736][T18518] ? __pfx_hsr_forward_skb+0x10/0x10 [ 799.672753][T18518] ? do_raw_spin_lock+0x12b/0x2f0 [ 799.672770][T18518] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 799.672789][T18518] ? hsr_dev_xmit+0x237/0x360 [ 799.672805][T18518] hsr_dev_xmit+0x242/0x360 [ 799.672819][T18518] ? hsr_dev_xmit+0x2d/0x360 [ 799.672834][T18518] dev_hard_start_xmit+0x2cd/0x830 [ 799.672863][T18518] __dev_queue_xmit+0x1435/0x37f0 [ 799.672882][T18518] ? __dev_queue_xmit+0x29b/0x37f0 [ 799.672896][T18518] ? ___neigh_create+0x1cd2/0x22b0 [ 799.672917][T18518] ? __pfx___dev_queue_xmit+0x10/0x10 [ 799.672933][T18518] ? neigh_connected_output+0x1e7/0x470 [ 799.672954][T18518] ? eth_header+0x11b/0x200 [ 799.672968][T18518] ? __asan_memcpy+0x40/0x70 [ 799.672993][T18518] ? ip6_output+0x11e/0x540 [ 799.673008][T18518] ip6_output+0x337/0x540 [ 799.673025][T18518] ? __pfx_ip6_output+0x10/0x10 [ 799.673039][T18518] NF_HOOK+0x177/0x4f0 [ 799.673057][T18518] ? __pfx_NF_HOOK+0x10/0x10 [ 799.673071][T18518] ? icmp6_dst_alloc+0x39b/0x430 [ 799.673120][T18518] ? __pfx_dst_output+0x10/0x10 [ 799.673134][T18518] ? __local_bh_enable_ip+0xd0/0x130 [ 799.673153][T18518] ? icmp6_dst_alloc+0x39b/0x430 [ 799.673168][T18518] ? icmp6_dst_alloc+0x39b/0x430 [ 799.673187][T18518] mld_sendpack+0x890/0xe10 [ 799.673206][T18518] ? mld_sendpack+0x206/0xe10 [ 799.673223][T18518] ? __pfx_mld_sendpack+0x10/0x10 [ 799.673247][T18518] mld_ifc_work+0x839/0xe70 [ 799.673263][T18518] ? rcu_is_watching+0x15/0xb0 [ 799.673287][T18518] ? process_scheduled_works+0xa20/0x14e0 [ 799.673303][T18518] process_scheduled_works+0xa8e/0x14e0 [ 799.673330][T18518] ? __pfx_process_scheduled_works+0x10/0x10 [ 799.673350][T18518] ? assign_work+0x3cf/0x5d0 [ 799.673366][T18518] worker_thread+0xa47/0xfb0 [ 799.673393][T18518] kthread+0x388/0x470 [ 799.673415][T18518] ? __pfx_worker_thread+0x10/0x10 [ 799.673435][T18518] ? __pfx_kthread+0x10/0x10 [ 799.673457][T18518] ret_from_fork+0x514/0xb70 [ 799.673481][T18518] ? __pfx_ret_from_fork+0x10/0x10 [ 799.673501][T18518] ? __switch_to+0xc89/0x1420 [ 799.673521][T18518] ? __pfx_kthread+0x10/0x10 [ 799.673542][T18518] ret_from_fork_asm+0x1a/0x30 [ 799.673561][T18518] [ 801.158251][T18518] net_ratelimit: 17 callbacks suppressed [ 801.158271][T18518] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 801.618038][T12821] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 801.967320][ C0] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 801.973959][ C0] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 801.981385][ T1109] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 802.197300][T13519] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 802.747571][T12826] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 802.838405][ T1109] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 802.846672][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 802.997384][ C0] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 803.477688][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 806.357335][T18518] net_ratelimit: 16 callbacks suppressed [ 806.357355][T18518] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 806.357359][ C0] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 806.378114][ C0] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 806.497275][ T1109] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 807.227335][T12821] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 807.397309][T18518] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 807.627343][ T1109] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 807.627435][ T1117] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 807.641898][ T1117] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 807.958717][ T1109] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 808.599121][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!